Archive
February 2022
Vulnerabilities first published in this month (UTC), newest first.
1,963 results · Feed
-
High 7.8
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation …
-
High 7.8
Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation …
-
Medium 6.5
A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privile…
-
Unscored —
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients …
-
Unscored —
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients …
-
Medium 6.6
MobiSoft - MobiPlus User Take Over and Improper Handling of url Parameters
MobiSoft - MobiPlus User Take Over and Improper Handling of url Parameters Attacker can navigate to specific url which will expose all the users and password in clear text. http://IP/MobiPlusWeb/Handlers/MainHandler.ashx?MethodName=GridData&GridName=Users
-
Critical 9.9
Remote Code Execution by by Contributor+ users via WordPress gutenberg block
PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via a WordPress gutenberg block by any user able to edit posts.
-
Critical 9.9
Remote Code Execution by Subscriber+ users via WordPress shortcode
PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress shortcodes, which can be used by any authenticated user.
-
High 7.2
Fancy Product Designer <= 4.7.4 Admin+ SQL Injection
The Fancy Product Designer WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the ID parameter found in the ~/inc/api/class-view.php file which allows attackers with administrative level permissions to inject …
-
Critical 9.9
Remote Code Execution by by Contributor+ users via WordPress metabox
PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress metaboxes, which could be used by any user able to edit posts.
-
Critical 9.8CVE-2022-0513 EPSS 53%
WP Statistics <= 13.1.4 Unauthenticated Blind SQL Injection via exclusion_reason
The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the exclusion_reason parameter found in the ~/includes/class-wp-statistics-exclusion.php file which allows attackers without authentication …
-
Unscored —
A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers ud…
-
High 7.8
Vulnerability in Snow Inventory Java Scanner
A vulnerability in Snow Inventory Java Scanner allows an attacker to run malicious code at a higher level of privileges. This issue affects: SNOW Snow Inventory Java Scanner 1.0
-
Unscored —
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients …
-
Unscored —
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients …
-
Unscored —
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients …
-
Unscored —
Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients …
-
Unscored —
A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in th…
-
Unscored —
A flaw was found in argocd. Any unprivileged user is able to deploy argocd in their namespace and with the created Serv…
-
Unscored —
ESXi contains a slow HTTP POST denial-of-service vulnerability in rhttpproxy. A malicious actor with network access to …
-
Unscored —
VMware ESXi contains a TOCTOU (Time-of-check Time-of-use) vulnerability that exists in the way temporary files are hand…
-
Unscored —
VMware ESXi contains an unauthorized access vulnerability due to VMX having access to settingsd authorization tickets. …
-
Unscored —
VMware ESXi, Workstation, and Fusion contain a double-fetch vulnerability in the UHCI USB controller. A malicious actor…
-
Unscored —
VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller. A malicious act…
-
High 8.8
Remote code execution in Valmet DNA before Collection 2021
A remote code execution vulnerability affecting a Valmet DNA service listening on TCP port 1517, allows an attacker to execute commands with SYSTEM privileges This issue affects: Valmet DNA versions from Collection 2012 until Collection 2021.
-
Unscored —
A Buffer Overflow vulnerability exists in Tenda Router AX12 V22.03.01.21_CN in the sub_422CE4 function in the goform/se…
-
Unscored —
EasyCMS v1.6 allows for SQL injection via ArticlemAction.class.php. In the background, search terms provided by the use…
-
High 8.4
Use After Free in radareorg/radare2
Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2.
-
High 8.4
Use of Out-of-range Pointer Offset in mruby/mruby
Use of Out-of-range Pointer Offset in Homebrew mruby prior to 3.2.
-
Medium 5.3
Authorization Bypass Through User-Controlled Key in medialize/uri.js
Authorization Bypass Through User-Controlled Key in NPM urijs prior to 1.19.8.
-
Medium 6.7
Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat
Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.
-
Unscored —CVE-2022-25241 Public exploit
In FileCloud before 21.3, the CSV user import functionality is vulnerable to Cross-Site Request Forgery (CSRF).
-
Unscored —
In FileCloud before 21.3, file upload is not protected against Cross-Site Request Forgery (CSRF).
-
Critical 9.8CVE-2022-25235 Public exploit
xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a U…
-
Critical 9.8
xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespac…
-
Unscored —CVE-2022-25258 Public exploit
An issue was discovered in drivers/usb/gadget/composite.c in the Linux kernel before 5.16.10. The USB Gadget subsystem …
-
High 7.5
Improper input validation in Drupal core
Drupal core's form API has a vulnerability where certain contributed or custom modules' forms may be vulnerable to improper input validation. This could allow an attacker to inject disallowed values or overwrite data. Affected forms are uncommon, but in certa…
-
Unscored —CVE-2021-3781 EPSS 84%
A trivial sandbox (enabled with the `-dSAFER` option) escape flaw was found in the ghostscript interpreter by injecting…
-
Unscored —
A race problem was seen in the vt_k_ioctl in drivers/tty/vt/vt_ioctl.c in the Linux kernel, which may cause an out of b…
-
High 7.8
It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privil…
KEV May 12, 2023