CVEs published January 13, 2022
157 CVEs were published on January 13, 2022: 5 critical, 95 high. 2 are now in CISA KEV.
- Published
- 157
- Critical
- 5
- High
- 95
- Medium
- 19
- Low
- 21
- Unrated
- 17
- Now in CISA KEV
- 2
- Fix available
- 13
Most affected products
- Bentley View
- 76
- Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- 11
- Adobe Experience Manager
- 8
- Commvault CommCell
- 5
- Adobe InCopy
- 4
- Adobe InDesign
- 3
- halo-dev halo
- 3
- NETGEAR R6260
- 3
- Western Digital My Cloud
- 3
- Zabbix Frontend
- 3
Critical 5
- CVE-2021-34993This vulnerability allows remote attackers to bypass authentication on affected installations of Commvault CommCell 11.22.22.Commvault CommCell
- CVE-2022-22989Pre-authenticated stack overflow vulnerability on FTP ServiceWestern Digital My Cloud
- CVE-2021-40722AEM Forms Improper Restriction of XML External Entity ReferenceAdobe Experience Manager
- CVE-2022-23131Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAMLZabbix Frontend
- CVE-2021-30285Improper validation of memory region in Hypervisor can lead to incorrect region mapping in Snapdragon Auto, Snapdragon Compute, Snapdragon CQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
High 95
- CVE-2021-34998This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Free Antivirus 20.2.0.0.Panda Security Free Antivirus
- CVE-2021-34997This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22.Commvault CommCell
- CVE-2021-34996This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22.Commvault CommCell
- CVE-2021-34995This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22.Commvault CommCell
- CVE-2021-34994This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22.Commvault CommCell
- CVE-2021-34980This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 rouNETGEAR R6260
- CVE-2021-34979This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 rouNETGEAR R6260
- CVE-2021-34978This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78_1.0.1 rouNETGEAR R6260
- CVE-2021-34977This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7000 1.0.11.116_10.2.100NETGEAR R7000
- CVE-2021-34946This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34945This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34942This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34941This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34940This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34939This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34938This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34937This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34936This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34935This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34934This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34933This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34932This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34931This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34930This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34929This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34928This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34927This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34926This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34925This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34924This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34923This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34922This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34921This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34920This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34919This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34918This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34917This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34915This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34914This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34913This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34912This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34911This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34909This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34908This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34907This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34906This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34905This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34904This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34903This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34900This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34899This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34898This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34897This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34896This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34895This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34894This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34893This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34892This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34891This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34885This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34880This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34879This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34878This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34877This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34876This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34875This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34874This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34873This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34872This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34871This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34858This vulnerability allows remote attackers to execute arbitrary code on affected installations of TeamViewer.TeamViewer
- CVE-2021-45057Adobe InDesign JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe InDesign
- CVE-2021-45058Adobe InDesign JPEG File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe InDesign
- CVE-2021-45055Adobe InCopy TIF File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityAdobe InCopy
- CVE-2021-45056Adobe InCopy JPEG File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe InCopy
- CVE-2021-45053Adobe InCopy JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe InCopy
- CVE-2022-22988Insecure file and directory permissions on EdgeRoverWestern Digital EdgeRover
- CVE-2022-22990Limited authentication bypass vulnerability on Western Digital My Cloud devicesWestern Digital My Cloud
- CVE-2022-22991Command injection through unsecured HTTP calls on Western Digital My Cloud devicesWestern Digital My Cloud
- CVE-2021-43764Adobe Experience Manager Stored XSS in the Spin SetAdobe Experience Manager
- CVE-2021-44176Adobe Experience Manager Stored XSS in workflow Stages parameterAdobe Experience Manager
- CVE-2021-43761Adobe Experience Manager Stored XSS on Edit Tag page via Localization inputAdobe Experience Manager
- CVE-2021-44177Adobe Experience Manager Stored XSS in user name parameter in the package managerAdobe Experience Manager
- CVE-2021-43765Adobe Experience Manager Stored XSS in the Carousel SetAdobe Experience Manager
- CVE-2021-30353Improper validation of function pointer type with actual function signature can lead to assertion in Snapdragon Auto, Snapdragon Compute, SnQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30330Possible null pointer dereference due to improper validation of APE clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, SnQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30319Possible integer overflow due to improper validation of command length parameters while processing WMI command in Snapdragon Auto, SnapdragoQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30311Possible heap overflow due to lack of index validation before allocating and writing to heap buffer in Snapdragon Auto, Snapdragon Compute, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30308Possible buffer overflow while printing the HARQ memory partition detail due to improper validation of buffer size in Snapdragon Auto, SnapdQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30307Possible denial of service due to improper validation of DNS response when DNS client requests with PTR, NAPTR or SRV query type in SnapdragQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30301Possible denial of service due to out of memory while processing RRC and NAS OTA message in Snapdragon Auto, Snapdragon Industrial IOT, SnapQualcomm Snapdragon Auto, Snapdragon Industrial IOT, Snapdr…
- CVE-2021-30300Possible denial of service due to incorrectly decoding hex data for the SIB2 OTA message and assigning a garbage value to choice when procesQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30287Possible assertion due to improper validation of symbols configured for PDCCH monitoring in Snapdragon Auto, Snapdragon Compute, Snapdragon Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2022-22113DayByDay CRM - Insufficient Session Expiration after Password ChangeBottelet DaybydayCRM
- CVE-2022-21682flatpak-builder can access files outside the build directory.flatpak
Medium, low and unrated 57
- CVE-2022-0178Missing Authorization in snipe/snipe-itsnipe/snipe-it
- CVE-2021-34985This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley ContextCapture 10.18.0.232Bentley ContextCapture
- CVE-2021-34984This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley ContextCapture 10.18.0.232Bentley ContextCapture
- CVE-2021-34944This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34943This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34916This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34910This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34902This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34901This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34890This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34889This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34888This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34887This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34886This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34884This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34883This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34882This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-34881This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2022-21684User can bypass approval when invited to Discoursediscourse
- CVE-2021-45059Adobe InDesign JPEG2000 Parsing Use-After-Free Information Disclosure VulnerabilityAdobe InDesign
- CVE-2021-45054Adobe InCopy JPEG2000 Parsing Use-After-Free Information Disclosure VulnerabilityAdobe InCopy
- CVE-2021-23227WordPress PHP Everywhere Plugin <= 2.0.2 is vulnerable to Cross Site Request Forgery (CSRF)Alexander Fuchs PHP Everywhere
- CVE-2021-44178Adobe Experience Manager Reflected XSS in /bin/wcm/contentfinder/page/view.htmlAdobe Experience Manager
- CVE-2021-43762Adobe Experience Manager Unicode normalization leads to dispatcher bypassAdobe Experience Manager
- CVE-2021-33046Some Dahua products have access control vulnerability in the password reset process.Access control vulnerability found in some Dahua products
- CVE-2021-45807jpress v4.2.0 is vulnerable to command execution via io.jpress.web.admin._AddonController::doUploadAndInstall.
- CVE-2021-45422Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability in the /goform/activate_process "count" parameter
- CVE-2021-40573The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the gf_list_del function in list.c, which allows attackers to cause a den
- CVE-2021-39056The IBM i 7.1, 7.2, 7.3, and 7.4 Extended Dynamic Remote SQL server (EDRSQL) could allow a remote authenticated user to send a specially craIBM i
- CVE-2021-40813A cross-site scripting (XSS) vulnerability in the "Zip content" feature in Element-IT HTTP Commander 3.1.9 allows remote authenticated users
- CVE-2022-21678User's bio visible even if profile is restricted in Discoursediscourse
- CVE-2022-22125Halo CMS - Stored Cross-Site Scripting (XSS) in Article's Taghalo-dev halo
- CVE-2022-22124Halo CMS - Stored Cross-Site Scripting (XSS) in Profile Imagehalo-dev halo
- CVE-2022-22123Halo CMS - Stored Cross-Site Scripting (XSS) in Article's Titlehalo-dev halo
- CVE-2022-23134Possible view of the setup pages by unauthenticated users if config file already existsZabbix Frontend
- CVE-2022-23133Stored XSS in host groups configuration window in Zabbix FrontendZabbix Frontend
- CVE-2022-23132Incorrect permissions of [/var/run/zabbix] forces dac_overrideZabbix Proxy, Server
- CVE-2021-40327Trusted Firmware-M (TF-M) 1.4.0, when Profile Small is used, has incorrect access control.
- CVE-2021-23824Content InjectionCrow
- CVE-2021-23514Path TraversalCrow
- CVE-2021-45806jpress v4.2.0 admin panel provides a function through which attackers can modify the template and inject some malicious code.
- CVE-2021-30314Lack of validation for third party application accessing the service can lead to information disclosure in Snapdragon Auto, Snapdragon CompuQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2021-30313Use after free condition can occur in wired connectivity due to a race condition while creating and deleting folders in Snapdragon Auto, SnaQualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…
- CVE-2022-22112DayByDay CRM - Application-Wide Client-Side Template Injection (CSTI)Bottelet DaybydayCRM
- CVE-2022-0198Improper Restriction of XML External Entity Reference in stanfordnlp/corenlpstanfordnlp/corenlp · edu.stanford.nlp:stanford-corenlp
- CVE-2022-0196Cross-Site Request Forgery (CSRF) in phoronix-test-suite/phoronix-test-suitephoronix-test-suite/phoronix-test-suite
- CVE-2022-0197Cross-Site Request Forgery (CSRF) in phoronix-test-suite/phoronix-test-suitephoronix-test-suite/phoronix-test-suite
- CVE-2021-40567Segmentation fault vulnerability exists in Gpac through 1.0.1 via the gf_odf_size_descriptor function in desc_private.c when using mp4box, w
- CVE-2021-40568A buffer overflow vulnerability exists in Gpac through 1.0.1 via a malformed MP4 file in the svc_parse_slice function in av_parsers.c, which
- CVE-2021-40569The binary MP4Box in Gpac through 1.0.1 has a double-free vulnerability in the iloc_entry_del funciton in box_code_meta.c, which allows atta
- CVE-2021-40570The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the avc_compute_poc function in av_parsers.c, which allows attackers to c
- CVE-2021-40571The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the ilst_box_read function in box_code_apple.c, which allows attackers to
- CVE-2021-40572The binary MP4Box in Gpac 1.0.1 has a double-free bug in the av1dmx_finalize function in reframe_av1.c, which allows attackers to cause a de
- CVE-2021-40574The binary MP4Box in Gpac from 0.9.0-preview to 1.0.1 has a double-free vulnerability in the gf_text_get_utf8_line function in load_text.c,
- CVE-2021-40575The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the mpgviddmx_process function in reframe_mpgvid.c, which al
- CVE-2021-40576The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the gf_isom_get_payt_count function in hint_track.c, which a
- CVE-2021-45760GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function gf_list_last().