February 2022

10 results · Clear filters · Feed

• Critical 10.0
  CVE-2022-0543 Exploited Public exploit EPSS 99%

  It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specifi…

  Debian redis redis redis Debian Ubuntu
  Feb 18, 2022

  KEV Mar 28, 2022
• Critical 9.8
  CVE-2022-24086 Exploited Public exploit EPSS 99%

  Adobe Commerce checkout improper input validation leads to remote code execution

  Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result in arbitrary code e…

  Adobe Magento Commerce magento/community-edition Web / CMS Packagist
  Feb 16, 2022

  KEV Feb 15, 2022
• High 7.8
  CVE-2021-3560 Exploited Public exploit EPSS 22%

  It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privil…

  policykit-1 policykit-1 polkit Debian Ubuntu Alpine
  Feb 16, 2022

  KEV May 12, 2023
• High 8.4
  CVE-2022-0185 Exploited Public exploit EPSS 25%

  A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functi…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Feb 11, 2022

  KEV Aug 21, 2024
• Critical 9.8
  CVE-2022-24112 Exploited Public exploit EPSS 96%

  apisix/batch-requests plugin allows overwriting the X-REAL-IP header

  An attacker can abuse the batch-requests plugin to send requests to bypass the IP restriction of Admin API. A default configuration of Apache APISIX (with default API key) is vulnerable to remote code execution. When the admin key was changed or the port of A…

  Apache Software Foundation Apache APISIX
  Feb 11, 2022

  KEV Aug 25, 2022
• Critical 10.0
  CVE-2022-20699 Exploited Public exploit EPSS 72%

  Cisco Small Business RV Series Routers Vulnerabilities

  Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization pro…

  Cisco Cisco Small Business RV Series Router Firmware Network devices
  Feb 10, 2022

  KEV Mar 3, 2022
• Critical 9.8
  CVE-2022-22536 Exploited Public exploit EPSS 98%

  SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 an…

  SAP_SE SAP Web Dispatcher SAP NetWeaver and ABAP Platform SAP Content Server
  Feb 9, 2022

  KEV Aug 18, 2022
• High 7.8
  CVE-2022-22718 Exploited Public exploit EPSS 18%

  Windows Print Spooler Elevation of Privilege Vulnerability

  Windows Print Spooler Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Feb 9, 2022

  KEV Apr 19, 2022
• High 7.8
  CVE-2022-21999 Exploited · Ransomware Public exploit EPSS 41%

  Windows Print Spooler Elevation of Privilege Vulnerability

  Windows Print Spooler Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Feb 9, 2022

  KEV Mar 25, 2022
• High 7.8
  CVE-2022-21971 Exploited Public exploit EPSS 54%

  Windows Runtime Remote Code Execution Vulnerability

  Windows Runtime Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Feb 9, 2022

  KEV Aug 18, 2022