CVEs published January 10 to January 16, 2022
568 CVEs were published Jan 10 to Jan 16, 2022, 26 of them critical. CISA added 15 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 568
- Critical
- 26
- Added to CISA KEV
- 15
- Busiest day
- Thu, Jan 13 (157)
- Quietest day
- Sun, Jan 16 (3)
- January 10, 202247 CVEs · 2 critical
- January 11, 2022135 CVEs · 9 critical
- January 12, 202264 CVEs · 1 critical
- January 13, 2022157 CVEs · 5 critical
- January 14, 2022147 CVEs · 9 critical
- January 15, 202215 CVEs
- January 16, 20223 CVEs
Added to CISA KEV 15
- CVE-2013-3900WinVerifyTrust Signature Validation VulnerabilityMicrosoft Windows
- CVE-2015-7450Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allo
- CVE-2017-1000486Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code executionorg.primefaces:primefaces
- CVE-2018-13382An Improper Authorization vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.8 and 5.4.1 to 5.4.10 and FortiProxy 2.0.0, 1.2.0 tFortinet FortiOS, FortiProxy
- CVE-2018-13383A heap buffer overflow in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.10, 5.4.0 through 5.4.12, 5.2.14 and earlier and FortiProxFortinet FortiOS and FortiProxy
- CVE-2019-10149A flaw was found in Exim versions 4.87 to 4.91 (inclusive).exim
- CVE-2019-1458An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Microsoft Windows
- CVE-2019-1579Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or Palo Alto Networks GlobalProtect Portal/Gateway Interface
- CVE-2019-2725Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services).Oracle Tape Library ACSLS
- CVE-2019-7609Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer.Elastic Kibana
- CVE-2019-9670mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity injection (XXE) vulnerability, as
- CVE-2020-6572Use after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to execute arbitrary code via a crafted HTML page.Google Chrome
- CVE-2021-22017Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization.VMware vCenter Server, VMware Cloud Foundation
- CVE-2021-27860Arbitrary file upload vulnerability in FatPipe softwareFatPipe WARP · FatPipe IPVPN +1
- CVE-2021-36260A command injection vulnerability in the web server of some Hikvision product.