Skip to content
OpenAdvisories

Archive

February 2022

Vulnerabilities first published in this month (UTC), newest first.

← January 2022 2022 / February March 2022 →
  1. 174
  2. 229
  3. 345
  4. 4219
  5. 53
  6. 611
  7. 750
  8. 843
  9. 9276
  10. 1048
  11. 11166
  12. 1224
  13. 139
  14. 1469
  15. 1592
  16. 1695
  17. 1734
  18. 18223
  19. 1916
  20. 2013
  21. 2149
  22. 2252
  23. 2346
  24. 2492
  25. 2588
  26. 2614
  27. 272
  28. 2881
All Critical High Medium Low Exploited only Public exploit

1,963 results · Feed

  • Medium 6.5
    CVE-2022-24198

    Out-of-bounds Read in iText

    iText v7.1.17 was discovered to contain an out-of-bounds exception via the component ARCFOUREncryption.encryptARCFOUR, which allows attackers to cause a Denial of Service (DoS) via a crafted PDF file. NOTE: Vendor does not view this as a vulnerability and has…

    com.itextpdf:itext7-core Maven
  • Medium 6.5
    CVE-2022-24197

    Out-of-bounds Write in iText

    iText v7.1.17 was discovered to contain a stack-based buffer overflow via the component ByteBuffer.append, which allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.

    com.itextpdf:itext7-core Maven
  • Unscored —
    CVE-2021-25097

    LabTools <= 1.0 - Subscriber+ Arbitrary Publication Deletion

    The LabTools WordPress plugin through 1.0 does not have proper authorisation and CSRF check in place when deleting publications, allowing any authenticated users, such as subscriber to delete arbitrary publication

    Web / CMS