Skip to content
OpenAdvisories

Archive

February 2022

Vulnerabilities first published in this month (UTC), newest first.

← January 2022 2022 / February March 2022 →
  1. 174
  2. 229
  3. 345
  4. 4219
  5. 53
  6. 611
  7. 750
  8. 843
  9. 9276
  10. 1048
  11. 11166
  12. 1224
  13. 139
  14. 1469
  15. 1592
  16. 1695
  17. 1734
  18. 18223
  19. 1916
  20. 2013
  21. 2149
  22. 2252
  23. 2346
  24. 2492
  25. 2588
  26. 2614
  27. 272
  28. 2881
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-25148 Public exploit Scanner template EPSS 81%

    WP Statistics <= 13.1.5 Unauthenticated Blind SQL Injection via current_page_id

    The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_id parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to inj…

    WP Statistics WP Statistics Web / CMS
  • Critical 9.8
    CVE-2021-44567 Public exploit EPSS 23%

    SQL injection in francoisjacquet/rosariosis

    An unauthenticated SQL Injection vulnerability exists in RosarioSIS before 7.6.1 via the votes parameter in ProgramFunctions/PortalPollsNotes.fnc.php.

    francoisjacquet/rosariosis Packagist
  • Critical 10.0
    CVE-2022-0543 Exploited Public exploit Scanner template EPSS 99%

    It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specifi…

    Debian redis redis redis Debian Ubuntu
    KEV Mar 28, 2022
  • Critical 9.8
    CVE-2022-25315 Public exploit

    In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.

    thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine
  • Critical 9.8
    CVE-2022-24086 Exploited Public exploit Scanner template EPSS 99%

    Adobe Commerce checkout improper input validation leads to remote code execution

    Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result in arbitrary code e…

    Adobe Magento Commerce magento/community-edition Web / CMS Packagist
    KEV Feb 15, 2022
  • Critical 9.8
    CVE-2022-25235 Public exploit

    xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a U…

    thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine
  • Critical 9.8
    CVE-2022-25236 Public exploit EPSS 35%

    xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespac…

    thunderbird firefox insighttoolkit4 expat Debian Ubuntu Azure Linux Alpine
  • Critical 9.8
    CVE-2021-46361 Public exploit

    Arbitrary code execution in Magnolia CMS

    An issue in the Freemark Filter of Magnolia CMS v6.2.11 and below allows attackers to bypass security restrictions and execute arbitrary code via a crafted FreeMarker payload.

    info.magnolia:magnolia-core Maven
  • Critical 9.8
    CVE-2022-24112 Exploited Public exploit Scanner template EPSS 96%

    apisix/batch-requests plugin allows overwriting the X-REAL-IP header

    An attacker can abuse the batch-requests plugin to send requests to bypass the IP restriction of Admin API. A default configuration of Apache APISIX (with default API key) is vulnerable to remote code execution. When the admin key was changed or the port of A…

    Apache Software Foundation Apache APISIX
    KEV Aug 25, 2022
  • Critical 9.1
    CVE-2021-44521 Public exploit Scanner template EPSS 59%

    Remote code execution for scripted UDFs

    When running Apache Cassandra with the following configuration: enable_user_defined_functions: true enable_scripted_user_defined_functions: true enable_user_defined_functions_threads: false it is possible for an attacker to execute arbitrary code on the host.…

    Apache Software Foundation Apache Cassandra druid org.apache.cassandra:cassandra-all Wolfi Maven
  • Critical 10.0
    CVE-2022-20699 Exploited Public exploit EPSS 72%

    Cisco Small Business RV Series Routers Vulnerabilities

    Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization pro…

    Cisco Cisco Small Business RV Series Router Firmware Network devices
    KEV Mar 3, 2022
  • Critical 10.0
    CVE-2022-20705 Public exploit EPSS 80%

    Cisco Small Business RV Series Routers Vulnerabilities

    Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization pro…

    Cisco Cisco Small Business RV Series Router Firmware Network devices
  • Critical 10.0
    CVE-2022-20707 Public exploit EPSS 75%

    Cisco Small Business RV Series Routers Vulnerabilities

    Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization pro…

    Cisco Cisco Small Business RV Series Router Firmware Network devices
  • Critical 9.8
    CVE-2022-22536 Exploited Public exploit Scanner template EPSS 98%

    SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 an…

    SAP SAP NetWeaver and ABAP Platform SAP Web Dispatcher SAP Content Server
    KEV Aug 18, 2022