Archive
26 February 2022
Vulnerabilities first published on this day (UTC), newest first.
14 results · Feed
-
Medium 4.1
Improper Access Control in zulip/zulip
Improper Access Control in GitHub repository zulip/zulip prior to 4.10.
-
Unscored —
SangforCSClient.exe in Sangfor VDI Client 5.4.2.1006 allows attackers, when they are able to read process memory, to di…
-
Unscored —
Tricentis qTest before 10.4 allows stored XSS by an authenticated attacker.
-
Unscored —
The Job Composer app in Ohio Supercomputer Center Open OnDemand before 1.7.19 and 1.8.x before 1.8.18 allows remote aut…
-
Medium 6.1
Arbitrary Command Injection in strapi/strapi
Arbitrary Command Injection in GitHub repository strapi/strapi prior to 4.1.0.
-
High 8.0
Cross-site Scripting (XSS) - Reflected in microweber/microweber
Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.11.
-
Medium 4.3
Cross-site Scripting (XSS) - Stored in microweber/microweber
Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.
-
Medium 5.5
Incorrect Authorization in microweber/microweber
Incorrect Authorization in GitHub repository microweber/microweber prior to 1.3.
-
Unscored —
On ICL ScadaFlex II SCADA Controller SC-1 and SC-2 1.03.07 devices, unauthenticated remote attackers can overwrite, del…
-
Unscored —
KDE KCron through 21.12.2 uses a temporary file in /tmp when saving, but reuses the filename during an editing session.…
-
Unscored —
An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID …
-
Unscored —CVE-2021-46702 Public exploit
Tor Browser 9.0.7 on Windows 10 build 10586 is vulnerable to information disclosure. This could allow local attackers t…
-
High 7.5
valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.
-
High 7.2CVE-2022-26149 Public exploit
Unrestricted Upload of File with Dangerous Type in MODX Revolution
MODX Revolution through 2.8.3-pl allows remote authenticated administrators to execute arbitrary code by uploading an executable file, because the Uploadable File Types setting can be changed by an administrator.