Archive

February 2022

Vulnerabilities first published in this month (UTC), newest first.

← January 2022 2022 / February March 2022 →

All Critical High Medium Low Exploited only Public exploit

1,963 results · Feed

High 7.8

CVE-2022-21927

HEVC Video Extensions Remote Code Execution Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

Microsoft HEVC Video Extensions HEVC Video Extension

Feb 9, 2022
High 7.8

CVE-2022-21926

HEVC Video Extensions Remote Code Execution Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

Microsoft HEVC Video Extensions HEVC Video Extension

Feb 9, 2022
High 7.8

CVE-2022-21844

HEVC Video Extensions Remote Code Execution Vulnerability

HEVC Video Extensions Remote Code Execution Vulnerability

Microsoft HEVC Video Extensions HEVC Video Extension

Feb 9, 2022
Unscored —

CVE-2021-44912

In XE 1.116, when uploading the Normal button, there is no restriction on the file suffix, which leads to any file uplo…

Feb 9, 2022
Unscored —

CVE-2021-44911

XE before 1.11.6 is vulnerable to Unrestricted file upload via modules/menu/menu.admin.controller.php. When uploading t…

Feb 9, 2022
Unscored —

DRUPAL-CONTRIB-2022-024

The Custom Breadcrumbs module provides a variety of options for customizing the breadcrumb trail. The module doesn't su…

drupal/custom_breadcrumbs Packagist

Feb 9, 2022
Unscored —

DRUPAL-CONTRIB-2022-023

This module enables you to manage and delete files. The module doesn't sufficiently protect unmanaged files from view u…

drupal/fancy_file_delete Packagist

Feb 9, 2022
Unscored —

CVE-2022-23312

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP9 Security Patch 1). The integrated web…

Siemens Spectrum Power™ 4 ICS / OT

Feb 9, 2022
Unscored —

CVE-2022-23102 Scanner template

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Affected products contain an…

Siemens SINEMA Remote Connect Server ICS / OT

Feb 9, 2022
Unscored —

CVE-2021-46161

A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). …

Siemens Simcenter Femap V2020.2 Simcenter Femap V2021.1 ICS / OT

Feb 9, 2022
Unscored —

CVE-2021-46160

A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). …

Siemens Simcenter Femap V2020.2 Simcenter Femap V2021.1 ICS / OT

Feb 9, 2022
Unscored —

CVE-2021-46159

A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). …

Siemens Simcenter Femap V2021.1 Simcenter Femap V2020.2 ICS / OT

Feb 9, 2022
Unscored —

CVE-2021-46158

A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). …

Siemens Simcenter Femap V2021.1 Simcenter Femap V2020.2 ICS / OT

Feb 9, 2022
Unscored —

CVE-2021-46157

A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). …

Siemens Simcenter Femap V2020.2 Simcenter Femap V2021.1 ICS / OT

Feb 9, 2022
Unscored —

CVE-2021-46156

A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). …

Siemens Simcenter Femap V2021.1 Simcenter Femap V2020.2 ICS / OT

Feb 9, 2022
Unscored —

CVE-2021-46155

A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). …

Siemens Simcenter Femap V2020.2 Simcenter Femap V2021.1 ICS / OT

Feb 9, 2022
Unscored —

CVE-2021-46154

A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). …

Siemens Simcenter Femap V2020.2 Simcenter Femap V2021.1 ICS / OT

Feb 9, 2022
Unscored —

CVE-2021-46153

A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). …

Siemens Simcenter Femap V2020.2 Simcenter Femap V2021.1 ICS / OT

Feb 9, 2022
Unscored —

CVE-2021-46152

A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). …

Siemens Simcenter Femap V2021.1 Simcenter Femap V2020.2 ICS / OT

Feb 9, 2022
Unscored —

CVE-2021-46151

A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). …

Siemens Simcenter Femap V2021.1 Simcenter Femap V2020.2 ICS / OT

Feb 9, 2022
Unscored —

CVE-2021-45106

A vulnerability has been identified in SICAM TOOLBOX II (All versions). Affected applications use a circumventable acce…

Siemens SICAM TOOLBOX II ICS / OT

Feb 9, 2022
Unscored —

CVE-2021-44018

A vulnerability has been identified in JT2Go (All versions < V13.2.0.7), Solid Edge SE2021 (All versions < SE2021MP9), …

Siemens JT2Go Teamcenter Visualization V13.3 Solid Edge SE2021 Browsers ICS / OT

Feb 9, 2022
Unscored —

CVE-2021-44016

A vulnerability has been identified in JT2Go (All versions < V13.2.0.7), Solid Edge SE2021 (All versions < SE2021MP9), …

Siemens JT2Go Teamcenter Visualization V13.3 Solid Edge SE2021 Browsers ICS / OT

Feb 9, 2022
Unscored —

CVE-2021-44000

A vulnerability has been identified in JT2Go (All versions < V13.2.0.7), Solid Edge SE2021 (All versions < SE2021MP9), …

Siemens JT2Go Teamcenter Visualization V13.3 Solid Edge SE2021 Browsers ICS / OT

Feb 9, 2022
Unscored —

CVE-2021-40363

A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PC…

Siemens SIMATIC WinCC V7.5 SIMATIC WinCC V7.4 SIMATIC PCS 7 V9.0 ICS / OT

Feb 9, 2022
Unscored —

CVE-2021-40360

A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PC…

Siemens SIMATIC WinCC V7.5 SIMATIC WinCC V7.4 SIMATIC PCS 7 V9.0 ICS / OT

Feb 9, 2022
High 7.5

CVE-2021-37205

A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 20…

Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) SIMATIC S7-1200 CPU family (incl. SIPLUS variants) SIMATIC S7-1500 Software Controller ICS / OT

Feb 9, 2022
High 7.5

CVE-2021-37204

A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controlle…

Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants) SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) SIMATIC S7-1200 CPU family (incl. SIPLUS variants) ICS / OT

Feb 9, 2022
Unscored —

CVE-2021-37194

A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All ver…

Siemens COMOS V10.3 COMOS V10.2 COMOS V10.4 ICS / OT

Feb 9, 2022
High 7.5

CVE-2021-37185

A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 20…

Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) SIMATIC S7-1200 CPU family (incl. SIPLUS variants) SIMATIC S7-1500 Software Controller ICS / OT

Feb 9, 2022
Medium 6.5

CVE-2021-3813

Improper Privilege Management in chatwoot/chatwoot

Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2.

chatwoot chatwoot/chatwoot

Feb 9, 2022
Medium 6.3

CVE-2022-0539

Cross-site Scripting (XSS) - Stored in ptrofimov/beanstalk_console

Cross-site Scripting (XSS) - Stored in Packagist ptrofimov/beanstalk_console prior to 1.7.14.

ptrofimov ptrofimov/beanstalk_console ptrofimov/beanstalk_console Packagist

Feb 9, 2022
Medium 6.5

CVE-2022-0538

DoS vulnerability in bundled XStream library in Jenkins Core

Jenkins 2.333 and earlier, LTS 2.319.2 and earlier defines custom XStream converters that have not been updated to apply the protections for the vulnerability CVE-2021-43859 and allow unconstrained resource usage.

Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core jenkins Web / CMS Alpine Maven

Feb 9, 2022
Unscored —

CVE-2021-46354 Public exploit EPSS 13%

Thinfinity VirtualUI 2.1.28.0, 2.1.32.1 and 2.5.26.2, fixed in version 3.0 is affected by an information disclosure vul…

Feb 9, 2022
Unscored —

CVE-2022-23378 Public exploit

A Cross-Site Scripting (XSS) vulnerability exists within the 3.2.2 version of TastyIgniter. The "items%5B0%5D%5Bpath%5D…

Feb 9, 2022
Low 2.7

CVE-2021-25939

ArangoDB - Blind SSRF when Downloading Foxx Service from URL

In ArangoDB, versions v3.7.0 through v3.9.0-alpha.1 have a feature which allows downloading a Foxx service from a publicly available URL. This feature does not enforce proper filtering of requests performed internally, which can be abused by a highly-privileg…

Arangodb arangodb

Feb 9, 2022
Medium 4.6

CVE-2021-40837

Denial-of-Service (DoS) Vulnerability

A vulnerability affecting F-Secure antivirus engine before Capricorn update 2022-02-01_01 was discovered whereby decompression of ACE file causes the scanner service to stop. The vulnerability can be exploited remotely by an attacker. A successful attack will…

F-Secure F-Secure endpoint protection products on Windows and Mac. F-Secure Linux Security (32-bit) F-Secure Linux Security 64 F-Secure Internet Gatekeeper & F-Secure Atlant Linux Windows

Feb 9, 2022
Low 2.6

CVE-2022-0536

Improper Removal of Sensitive Information Before Storage or Transfer in follow-redirects/follow-redirects

Improper Removal of Sensitive Information Before Storage or Transfer in NPM follow-redirects prior to 1.14.8.

follow-redirects follow-redirects/follow-redirects js-jquery node-follow-redirects Debian Ubuntu Azure Linux npm

Feb 9, 2022
High 7.8

CVE-2021-37852

LPE in ESET products for Windows

ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT AUTHORITY\SYSTEM.

ESET ESET Endpoint Security for Windows ESET Mail Security for IBM Domino ESET Internet Security Windows

Feb 9, 2022
Unscored —

CVE-2022-24694

In Mahara 20.10 before 20.10.4, 21.04 before 21.04.3, and 21.10 before 21.10.1, the names of folders in the Files area …

Feb 9, 2022