# CVEs published 2022-01-11

135 CVEs were published on January 11, 2022: 9 critical, 74 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2022-0087](https://cve.now/CVE-2022-0087.md): Cross-site Scripting (XSS) - Reflected in keystonejs/keystone (CVSS 7.1, keystonejs/keystone · @keystone-6/auth +1)
- [CVE-2021-43999](https://cve.now/CVE-2021-43999.md): Improper validation of SAML responses (no CVSS, Apache Software Foundation Apache Guacamole)
- [CVE-2021-41767](https://cve.now/CVE-2021-41767.md): Private tunnel identifier may be included in the non-private details of active connections (no CVSS, Apache Software Foundation Apache Guacamole)
- [CVE-2022-21646](https://cve.now/CVE-2022-21646.md): Lookup operations do not take into account wildcards in SpiceDB (CVSS 8.1, authzed spicedb · github.com/authzed/spicedb)
- [CVE-2021-46283](https://cve.now/CVE-2021-46283.md): nf\_tables\_newset in net/netfilter/nf\_tables\_api.c in the Linux kernel before 5.12.13 allows local users to cause a denial of service (NULL p (no CVSS)
- [CVE-2022-21969](https://cve.now/CVE-2022-21969.md): Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 9.0, Microsoft Exchange Server 2013 Cumulative Update · Micro… +1)
- [CVE-2022-21970](https://cve.now/CVE-2022-21970.md): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CVSS 6.1, Microsoft Edge)
- [CVE-2022-21964](https://cve.now/CVE-2022-21964.md): Remote Desktop Licensing Diagnoser Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2022-21963](https://cve.now/CVE-2022-21963.md): Windows Resilient File System (ReFS) Remote Code Execution Vulnerability (CVSS 6.4, Microsoft Windows)
- [CVE-2022-21961](https://cve.now/CVE-2022-21961.md): Windows Resilient File System (ReFS) Remote Code Execution Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2022-21962](https://cve.now/CVE-2022-21962.md): Windows Resilient File System (ReFS) Remote Code Execution Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2022-21960](https://cve.now/CVE-2022-21960.md): Windows Resilient File System (ReFS) Remote Code Execution Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2022-21959](https://cve.now/CVE-2022-21959.md): Windows Resilient File System (ReFS) Remote Code Execution Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2022-21958](https://cve.now/CVE-2022-21958.md): Windows Resilient File System (ReFS) Remote Code Execution Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2022-21954](https://cve.now/CVE-2022-21954.md): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CVSS 6.1, Microsoft Edge)
- [CVE-2022-21931](https://cve.now/CVE-2022-21931.md): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVSS 4.2, Microsoft Edge)
- [CVE-2022-21932](https://cve.now/CVE-2022-21932.md): Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability (CVSS 7.6, Microsoft Dynamics 365 Customer Engagement)
- [CVE-2022-21930](https://cve.now/CVE-2022-21930.md): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVSS 4.2, Microsoft Edge)
- [CVE-2022-21929](https://cve.now/CVE-2022-21929.md): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVSS 2.5, Microsoft Edge)
- [CVE-2022-21928](https://cve.now/CVE-2022-21928.md): Windows Resilient File System (ReFS) Remote Code Execution Vulnerability (CVSS 6.3, Microsoft Windows)
- [CVE-2022-21924](https://cve.now/CVE-2022-21924.md): Workstation Service Remote Protocol Security Feature Bypass Vulnerability (CVSS 5.3, Microsoft Windows)
- [CVE-2022-21925](https://cve.now/CVE-2022-21925.md): Windows BackupKey Remote Protocol Security Feature Bypass Vulnerability (CVSS 5.3, Microsoft Windows)
- [CVE-2022-21922](https://cve.now/CVE-2022-21922.md): Remote Procedure Call Runtime Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2022-21921](https://cve.now/CVE-2022-21921.md): Windows Defender Credential Guard Security Feature Bypass Vulnerability (CVSS 4.4, Microsoft Windows)
- [CVE-2022-21920](https://cve.now/CVE-2022-21920.md): Windows Kerberos Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2022-21918](https://cve.now/CVE-2022-21918.md): DirectX Graphics Kernel File Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2022-21919](https://cve.now/CVE-2022-21919.md): Windows User Profile Service Elevation of Privilege Vulnerability (CVSS 7.0, KEV, Microsoft Windows)
- [CVE-2022-21917](https://cve.now/CVE-2022-21917.md): HEVC Video Extensions Remote Code Execution Vulnerability (CVSS 7.8, Microsoft HEVC Video Extensions)
- [CVE-2022-21916](https://cve.now/CVE-2022-21916.md): Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-21915](https://cve.now/CVE-2022-21915.md): Windows GDI+ Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2022-21913](https://cve.now/CVE-2022-21913.md): Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass (CVSS 5.3, Microsoft Windows)
- [CVE-2022-21914](https://cve.now/CVE-2022-21914.md): Windows Remote Access Connection Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-21912](https://cve.now/CVE-2022-21912.md): DirectX Graphics Kernel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-21911](https://cve.now/CVE-2022-21911.md): .NET Framework Denial of Service Vulnerability (CVSS 7.5, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2… +1)
- [CVE-2022-21910](https://cve.now/CVE-2022-21910.md): Microsoft Cluster Port Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows Server)
- [CVE-2022-21908](https://cve.now/CVE-2022-21908.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-21907](https://cve.now/CVE-2022-21907.md): HTTP Protocol Stack Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2022-21906](https://cve.now/CVE-2022-21906.md): Windows Defender Application Control Security Feature Bypass Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2022-21904](https://cve.now/CVE-2022-21904.md): Windows GDI Information Disclosure Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2022-21905](https://cve.now/CVE-2022-21905.md): Windows Hyper-V Security Feature Bypass Vulnerability (CVSS 4.6, Microsoft Windows)
- [CVE-2022-21903](https://cve.now/CVE-2022-21903.md): Windows GDI Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2022-21902](https://cve.now/CVE-2022-21902.md): Windows DWM Core Library Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-21901](https://cve.now/CVE-2022-21901.md): Windows Hyper-V Elevation of Privilege Vulnerability (CVSS 9.0, Microsoft Windows)
- [CVE-2022-21900](https://cve.now/CVE-2022-21900.md): Windows Hyper-V Security Feature Bypass Vulnerability (CVSS 4.6, Microsoft Windows)
- [CVE-2022-21899](https://cve.now/CVE-2022-21899.md): Windows Extensible Firmware Interface Security Feature Bypass Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2022-21898](https://cve.now/CVE-2022-21898.md): DirectX Graphics Kernel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-21897](https://cve.now/CVE-2022-21897.md): Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-21896](https://cve.now/CVE-2022-21896.md): Windows DWM Core Library Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2022-21894](https://cve.now/CVE-2022-21894.md): Secure Boot Security Feature Bypass Vulnerability (CVSS 4.4, Microsoft Windows)
- [CVE-2022-21895](https://cve.now/CVE-2022-21895.md): Windows User Profile Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-21893](https://cve.now/CVE-2022-21893.md): Remote Desktop Protocol Remote Code Execution Vulnerability (CVSS 8.0, Microsoft Windows)
- [CVE-2022-21892](https://cve.now/CVE-2022-21892.md): Windows Resilient File System (ReFS) Remote Code Execution Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2022-21891](https://cve.now/CVE-2022-21891.md): Microsoft Dynamics 365 (on-premises) Spoofing Vulnerability (CVSS 7.6, Microsoft Dynamics 365 Sales)
- [CVE-2022-21889](https://cve.now/CVE-2022-21889.md): Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2022-21890](https://cve.now/CVE-2022-21890.md): Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2022-21888](https://cve.now/CVE-2022-21888.md): Windows Modern Execution Server Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-21887](https://cve.now/CVE-2022-21887.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2022-21884](https://cve.now/CVE-2022-21884.md): Local Security Authority Subsystem Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows Server)
- [CVE-2022-21885](https://cve.now/CVE-2022-21885.md): Windows Remote Access Connection Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-21883](https://cve.now/CVE-2022-21883.md): Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2022-21882](https://cve.now/CVE-2022-21882.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.0, KEV, Microsoft Windows)
- [CVE-2022-21881](https://cve.now/CVE-2022-21881.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2022-21880](https://cve.now/CVE-2022-21880.md): Windows GDI+ Information Disclosure Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2022-21878](https://cve.now/CVE-2022-21878.md): Windows Geolocation Service Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-21879](https://cve.now/CVE-2022-21879.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2022-21877](https://cve.now/CVE-2022-21877.md): Storage Spaces Controller Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2022-21876](https://cve.now/CVE-2022-21876.md): Win32k Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2022-21875](https://cve.now/CVE-2022-21875.md): Windows Storage Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2022-21873](https://cve.now/CVE-2022-21873.md): Tile Data Repository Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2022-21874](https://cve.now/CVE-2022-21874.md): Windows Security Center API Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-21872](https://cve.now/CVE-2022-21872.md): Windows Event Tracing Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2022-21871](https://cve.now/CVE-2022-21871.md): Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows · Microsoft Visual Studio)
- [CVE-2022-21869](https://cve.now/CVE-2022-21869.md): Clipboard User Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2022-21870](https://cve.now/CVE-2022-21870.md): Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2022-21868](https://cve.now/CVE-2022-21868.md): Windows Devices Human Interface Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2022-21867](https://cve.now/CVE-2022-21867.md): Windows Push Notifications Apps Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2022-21866](https://cve.now/CVE-2022-21866.md): Windows System Launcher Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2022-21865](https://cve.now/CVE-2022-21865.md): Connected Devices Platform Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2022-21863](https://cve.now/CVE-2022-21863.md): Windows StateRepository API Server file Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2022-21864](https://cve.now/CVE-2022-21864.md): Windows UI Immersive Server API Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2022-21862](https://cve.now/CVE-2022-21862.md): Windows Application Model Core API Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2022-21861](https://cve.now/CVE-2022-21861.md): Task Flow Data Engine Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2022-21860](https://cve.now/CVE-2022-21860.md): Windows AppContracts API Server Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2022-21859](https://cve.now/CVE-2022-21859.md): Windows Accounts Control Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2022-21857](https://cve.now/CVE-2022-21857.md): Active Directory Domain Services Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2022-21858](https://cve.now/CVE-2022-21858.md): Windows Bind Filter Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-21855](https://cve.now/CVE-2022-21855.md): Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 9.0, Microsoft Exchange Server 2013 Cumulative Update · Micro… +1)
- [CVE-2022-21852](https://cve.now/CVE-2022-21852.md): Windows DWM Core Library Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-21851](https://cve.now/CVE-2022-21851.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows · Microsoft Remote Desktop client for Win…)
- [CVE-2022-21849](https://cve.now/CVE-2022-21849.md): Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2022-21850](https://cve.now/CVE-2022-21850.md): Remote Desktop Client Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows · Microsoft Remote Desktop client for Win…)
- [CVE-2022-21848](https://cve.now/CVE-2022-21848.md): Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2022-21847](https://cve.now/CVE-2022-21847.md): Windows Hyper-V Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2022-21846](https://cve.now/CVE-2022-21846.md): Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 9.0, Microsoft Exchange Server 2016 Cumulative Update · Micro… +1)
- [CVE-2022-21842](https://cve.now/CVE-2022-21842.md): Microsoft Word Remote Code Execution Vulnerability (CVSS 7.8, Microsoft SharePoint Enterprise Server · Microsoft Word)
- [CVE-2022-21843](https://cve.now/CVE-2022-21843.md): Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2022-21841](https://cve.now/CVE-2022-21841.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Office · Microsoft 365 Apps for Enterprise)
- [CVE-2022-21840](https://cve.now/CVE-2022-21840.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Enterprise Server · Microsoft Share… +4)
- [CVE-2022-21838](https://cve.now/CVE-2022-21838.md): Windows Cleanup Manager Elevation of Privilege Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2022-21839](https://cve.now/CVE-2022-21839.md): Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability (CVSS 6.1, Microsoft Windows)
- [CVE-2022-21837](https://cve.now/CVE-2022-21837.md): Microsoft SharePoint Server Remote Code Execution Vulnerability (CVSS 8.3, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2022-21836](https://cve.now/CVE-2022-21836.md): Windows Certificate Spoofing Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-21835](https://cve.now/CVE-2022-21835.md): Microsoft Cryptographic Services Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-21834](https://cve.now/CVE-2022-21834.md): Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2022-21833](https://cve.now/CVE-2022-21833.md): Virtual Machine IDE Drive Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2021-43974](https://cve.now/CVE-2021-43974.md): An issue was discovered in SysAid ITIL 20.4.74 b10. (no CVSS)
- [CVE-2021-43973](https://cve.now/CVE-2021-43973.md): An unrestricted file upload vulnerability in /UploadPsIcon.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to upload a (no CVSS)
- [CVE-2021-43972](https://cve.now/CVE-2021-43972.md): An unrestricted file copy vulnerability in /UserSelfServiceSettings.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to (no CVSS)
- [CVE-2021-43971](https://cve.now/CVE-2021-43971.md): A SQL injection vulnerability in /mobile/SelectUsers.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to execute arbitr (no CVSS)
- [CVE-2021-1573](https://cve.now/CVE-2021-1573.md): Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service Vulnerability (CVSS 8.6, Cisco Adaptive Security Appliance Software · Cisco Firepowe…)
- [CVE-2021-34704](https://cve.now/CVE-2021-34704.md): Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service Vulnerability (CVSS 8.6, Cisco Adaptive Security Appliance Software · Cisco Firepowe…)
- [CVE-2021-43055](https://cve.now/CVE-2021-43055.md): TIBCO eFTL Token Caching Vulnerability (CVSS 5.9, TIBCO Software TIBCO eFTL - Community Edition · TIBCO So… +1)
- [CVE-2021-43054](https://cve.now/CVE-2021-43054.md): TIBCO eFTL Token Generation Vulnerability (CVSS 7.1, TIBCO Software TIBCO eFTL - Community Edition · TIBCO So… +1)
- [CVE-2021-43053](https://cve.now/CVE-2021-43053.md): TIBCO FTL Secret Exposure Vulnerability (CVSS 8.5, TIBCO Software TIBCO FTL - Community Edition · TIBCO Sof… +1)
- [CVE-2021-43052](https://cve.now/CVE-2021-43052.md): TIBCO FTL Secret Generation Vulnerability (CVSS 9.3, TIBCO Software TIBCO FTL - Community Edition · TIBCO Sof… +1)
- [CVE-2022-0129](https://cve.now/CVE-2022-0129.md): DLL Highjack vulnerability in McAfee TechCheck utility (CVSS 7.4, McAfee TechCheck)
- [CVE-2022-0173](https://cve.now/CVE-2022-0173.md): Out-of-bounds Read in radareorg/radare2 (CVSS 9.6, radareorg/radare2)
- [CVE-2021-38991](https://cve.now/CVE-2021-38991.md): IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore command which could lea (CVSS 8.4, IBM AIX · IBM VIOS)
- [CVE-2021-29701](https://cve.now/CVE-2021-29701.md): IBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 as well as IBM Rational Team Concert 6.0.6 and 6.0.6.1 could allow an authneticate (CVSS 4.3, IBM Engineering Workflow Management · IBM Rational Team Con…)
- [CVE-2020-28103](https://cve.now/CVE-2020-28103.md): cscms v4.1 allows for SQL injection via the "page\_del" function. (no CVSS)
- [CVE-2020-28102](https://cve.now/CVE-2020-28102.md): cscms v4.1 allows for SQL injection via the "js\_del" function. (no CVSS)
- [CVE-2022-0170](https://cve.now/CVE-2022-0170.md): Improper Access Control in chocobozzz/peertube (CVSS 5.3, chocobozzz/peertube)
- [CVE-2021-43566](https://cve.now/CVE-2021-43566.md): All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS race to allow a directory to be created in (no CVSS)
- [CVE-2022-21671](https://cve.now/CVE-2022-21671.md): Potential exposure of Replit tokens to an Unauthorized Actor in @replit/crosis (CVSS 8.1, replit crosis · @replit/crosis)
- [CVE-2021-45460](https://cve.now/CVE-2021-45460.md): A vulnerability has been identified in SICAM PQ Analyzer (All versions \< V3.18). (no CVSS, Siemens SICAM PQ Analyzer)
- [CVE-2021-45033](https://cve.now/CVE-2021-45033.md): A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions \< V16.20), CP-8000 MASTER MODULE WITH I/O -40/ (no CVSS, Siemens CP-8000 MASTER MODULE WITH I/O -25/+70°C · Sieme… +2)
- [CVE-2021-45034](https://cve.now/CVE-2021-45034.md): A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions \< V16.20), CP-8000 MASTER MODULE WITH I/O -40/ (no CVSS, Siemens CP-8000 MASTER MODULE WITH I/O -25/+70°C · Sieme… +2)
- [CVE-2021-41769](https://cve.now/CVE-2021-41769.md): A vulnerability has been identified in SIPROTEC 5 6MD85 devices (CPU variant CP300) (All versions \< V8.83), SIPROTEC 5 6MD86 devices (CPU va (no CVSS, Siemens SIPROTEC 5 6MD85 devices · Siemens SIPROTEC 5 6… +29)
- [CVE-2021-37198](https://cve.now/CVE-2021-37198.md): A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions \< V10.3.3.3 onl (CVSS 8.8, Siemens COMOS)
- [CVE-2021-37197](https://cve.now/CVE-2021-37197.md): A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions \< V10.3.3.3 onl (no CVSS, Siemens COMOS)
- [CVE-2021-37195](https://cve.now/CVE-2021-37195.md): A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions \< V10.3.3.3 onl (no CVSS, Siemens COMOS)
- [CVE-2021-37196](https://cve.now/CVE-2021-37196.md): A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions \< V10.3.3.3 onl (no CVSS, Siemens COMOS)
- [CVE-2022-0144](https://cve.now/CVE-2022-0144.md): Improper Privilege Management in shelljs/shelljs (CVSS 7.1, shelljs/shelljs · shelljs)
- [CVE-2021-44647](https://cve.now/CVE-2021-44647.md): Lua v5.4.3 and above are affected by SEGV by type confusion in funcnamefromcode function in ldebug.c which can cause a local denial of servi (no CVSS)
- [CVE-2022-21669](https://cve.now/CVE-2022-21669.md): Bot token exposed in main.py (CVSS 9.1, PuddingBot pudding-bot)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-01-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.