CVEs published January 1, 2022
10 CVEs were published on January 1, 2022: 0 critical, 2 high. Browse them by severity, product and exploitation status.
- Published
- 10
- Critical
- 0
- High
- 2
- Medium
- 0
- Low
- 0
- Unrated
- 8
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- cgi
- 1
- date
- 1
- dolibarr/dolibarr
- 1
- golang.org/x/net/http2 · stdlib +1
- 1
- stdlib
- 1
High 2
Medium, low and unrated 8
- CVE-2022-22293admin/limits.php in Dolibarr 7.0.2 allows HTML injection, as demonstrated by the MAIN_MAX_DECIMALS_TOT parameter.dolibarr/dolibarr
- CVE-2021-44896DMP Roadmap before 3.0.4 allows XSS.
- CVE-2021-45972The giftrans function in giftrans 1.12.2 contains a stack-based buffer overflow because a value inside the input file determines the…
- CVE-2021-44852An issue was discovered in BS_RCIO64.sys in Biostar RACING GT Evo 2.1.1905.1700.
- CVE-2021-43333The Datalogic DXU service on (for example) DL-Axist devices does not require authentication for configuration changes or disclosure of…
- CVE-2021-41817Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string.date
- CVE-2021-44716net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicalization cache via…golang.org/x/net/http2 · stdlib +1
- CVE-2021-44717Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file or unintended network connection as a…stdlib