# CVEs published 2022-01-09 9 CVEs were published on January 9, 2022: 0 critical, 1 high. Days are UTC. - [CVE-2021-45334](https://cve.now/CVE-2021-45334.md): Sourcecodester Online Thesis Archiving System 1.0 is vulnerable to SQL Injection. (no CVSS) - [CVE-2021-45856](https://cve.now/CVE-2021-45856.md): Accu-Time Systems MAXIMUS 1.0 telnet service suffers from a remote buffer overflow which causes the telnet service to crash (no CVSS) - [CVE-2021-46163](https://cve.now/CVE-2021-46163.md): Kentico Xperience 13.0.44 allows XSS via an XML document to the Media Libraries subsystem. (no CVSS) - [CVE-2022-22845](https://cve.now/CVE-2022-22845.md): QXIP SIPCAPTURE homer-app before 1.4.28 for HOMER 7.x has the same 167f0db2-f83e-4baa-9736-d56064a5b415 JWT secret key across different cust (no CVSS) - [CVE-2020-10137](https://cve.now/CVE-2020-10137.md): Z-Wave devices based on Silicon Labs 700 series chipsets using S2 do not adequately authenticate or encrypt FIND\_NODE\_IN\_RANGE frames, allow (no CVSS, Silicon Labs UZB-7) - [CVE-2022-22846](https://cve.now/CVE-2022-22846.md): The dnslib package through 0.9.16 for Python does not verify that the ID value in a DNS reply matches an ID value in a query. (CVSS 7.5, dnslib) - [CVE-2021-46164](https://cve.now/CVE-2021-46164.md): Zoho ManageEngine Desktop Central before 10.0.662 allows remote code execution by an authenticated user who has complete access to the Repor (no CVSS) - [CVE-2021-46165](https://cve.now/CVE-2021-46165.md): Zoho ManageEngine Desktop Central before 10.0.662, during startup, launches an executable file from the batch files, but this file's path mi (no CVSS) - [CVE-2021-46166](https://cve.now/CVE-2021-46166.md): Zoho ManageEngine Desktop Central before 10.0.662 allows authenticated users to obtain sensitive information from the database by visiting t (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2022-01-09 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.