CVEs published January 8, 2022
14 CVEs were published on January 8, 2022: 3 critical, 3 high.
- Published
- 14
- Critical
- 3
- High
- 3
- Medium
- 0
- Low
- 1
- Unrated
- 7
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- Trend Micro Apex One · Trend Micro Worry-Free Business Secu…
- 3
- nemo-toolkit
- 1
- platform/external/expat
- 1
- Trend Micro Apex One
- 1
- Trend Micro Worry-Free Business Security
- 1
Critical 3
- CVE-2022-22822addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.platform/external/expat
- CVE-2022-22823build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
- CVE-2022-22824defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
High 3
- CVE-2022-22825lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
- CVE-2022-22826nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
- CVE-2022-22827storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.
Medium, low and unrated 8
- CVE-2022-22836CoreFTP Server before 727 allows directory traversal (for file creation) by an authenticated attacker via ../ in an HTTP PUT request.
- CVE-2021-45442A link following denial-of-service vulnerability in Trend Micro Worry-Free Business Security (on prem only) could allow a local attacker to Trend Micro Worry-Free Business Security
- CVE-2021-45441A origin validation error vulnerability in Trend Micro Apex One (on-prem and SaaS) could allow a local attacker drop and manipulate a speciaTrend Micro Apex One
- CVE-2021-45440A unnecessary privilege vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security 10.0 SP1 (on-prem versions only) Trend Micro Apex One · Trend Micro Worry-Free Business Secu…
- CVE-2021-45231A link following privilege escalation vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security Trend Micro Apex One · Trend Micro Worry-Free Business Secu…
- CVE-2021-44024A link following denial-of-service vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10Trend Micro Apex One · Trend Micro Worry-Free Business Secu…
- CVE-2022-22821NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when adminemo-toolkit
- CVE-2022-22844LibTIFF 4.3.0 has an out-of-bounds read in _TIFFmemcpy in tif_unix.c in certain situations involving a custom tag and 0x0200 as the second w