CVEs published January 9, 2022
9 CVEs were published on January 9, 2022: 0 critical, 1 high.
- Published
- 9
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 8
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- dnslib
- 1
- Silicon Labs UZB-7
- 1
High 1
Medium, low and unrated 8
- CVE-2021-45334Sourcecodester Online Thesis Archiving System 1.0 is vulnerable to SQL Injection.
- CVE-2021-45856Accu-Time Systems MAXIMUS 1.0 telnet service suffers from a remote buffer overflow which causes the telnet service to crash
- CVE-2021-46163Kentico Xperience 13.0.44 allows XSS via an XML document to the Media Libraries subsystem.
- CVE-2022-22845QXIP SIPCAPTURE homer-app before 1.4.28 for HOMER 7.x has the same 167f0db2-f83e-4baa-9736-d56064a5b415 JWT secret key across different cust
- CVE-2020-10137Z-Wave devices based on Silicon Labs 700 series chipsets using S2 do not adequately authenticate or encrypt FIND_NODE_IN_RANGE frames, allowSilicon Labs UZB-7
- CVE-2021-46164Zoho ManageEngine Desktop Central before 10.0.662 allows remote code execution by an authenticated user who has complete access to the Repor
- CVE-2021-46165Zoho ManageEngine Desktop Central before 10.0.662, during startup, launches an executable file from the batch files, but this file's path mi
- CVE-2021-46166Zoho ManageEngine Desktop Central before 10.0.662 allows authenticated users to obtain sensitive information from the database by visiting t