# CVEs published 2022-01-13

157 CVEs were published on January 13, 2022: 5 critical, 95 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2022-0178](https://cve.now/CVE-2022-0178.md): Missing Authorization in snipe/snipe-it (CVSS 6.3, snipe/snipe-it)
- [CVE-2021-34998](https://cve.now/CVE-2021-34998.md): This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Free Antivirus 20.2.0.0. (CVSS 7.0, Panda Security Free Antivirus)
- [CVE-2021-34997](https://cve.now/CVE-2021-34997.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22. (CVSS 8.8, Commvault CommCell)
- [CVE-2021-34996](https://cve.now/CVE-2021-34996.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22. (CVSS 8.8, Commvault CommCell)
- [CVE-2021-34995](https://cve.now/CVE-2021-34995.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22. (CVSS 8.8, Commvault CommCell)
- [CVE-2021-34994](https://cve.now/CVE-2021-34994.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22. (CVSS 8.8, Commvault CommCell)
- [CVE-2021-34993](https://cve.now/CVE-2021-34993.md): This vulnerability allows remote attackers to bypass authentication on affected installations of Commvault CommCell 11.22.22. (CVSS 9.8, Commvault CommCell)
- [CVE-2021-34985](https://cve.now/CVE-2021-34985.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley ContextCapture 10.18.0.232 (CVSS 3.3, Bentley ContextCapture)
- [CVE-2021-34984](https://cve.now/CVE-2021-34984.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley ContextCapture 10.18.0.232 (CVSS 3.3, Bentley ContextCapture)
- [CVE-2021-34980](https://cve.now/CVE-2021-34980.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78\_1.0.1 rou (CVSS 8.8, NETGEAR R6260)
- [CVE-2021-34979](https://cve.now/CVE-2021-34979.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78\_1.0.1 rou (CVSS 8.8, NETGEAR R6260)
- [CVE-2021-34978](https://cve.now/CVE-2021-34978.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6260 1.1.0.78\_1.0.1 rou (CVSS 8.8, NETGEAR R6260)
- [CVE-2021-34977](https://cve.now/CVE-2021-34977.md): This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7000 1.0.11.116\_10.2.100 (CVSS 8.8, NETGEAR R7000)
- [CVE-2021-34946](https://cve.now/CVE-2021-34946.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34945](https://cve.now/CVE-2021-34945.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34944](https://cve.now/CVE-2021-34944.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. (CVSS 3.3, Bentley View)
- [CVE-2021-34943](https://cve.now/CVE-2021-34943.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. (CVSS 3.3, Bentley View)
- [CVE-2021-34942](https://cve.now/CVE-2021-34942.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34941](https://cve.now/CVE-2021-34941.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34940](https://cve.now/CVE-2021-34940.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34939](https://cve.now/CVE-2021-34939.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34938](https://cve.now/CVE-2021-34938.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34937](https://cve.now/CVE-2021-34937.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34936](https://cve.now/CVE-2021-34936.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34935](https://cve.now/CVE-2021-34935.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34934](https://cve.now/CVE-2021-34934.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34933](https://cve.now/CVE-2021-34933.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34932](https://cve.now/CVE-2021-34932.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34931](https://cve.now/CVE-2021-34931.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34930](https://cve.now/CVE-2021-34930.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34929](https://cve.now/CVE-2021-34929.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34928](https://cve.now/CVE-2021-34928.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34927](https://cve.now/CVE-2021-34927.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34926](https://cve.now/CVE-2021-34926.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34925](https://cve.now/CVE-2021-34925.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34924](https://cve.now/CVE-2021-34924.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34923](https://cve.now/CVE-2021-34923.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34922](https://cve.now/CVE-2021-34922.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34921](https://cve.now/CVE-2021-34921.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34920](https://cve.now/CVE-2021-34920.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34919](https://cve.now/CVE-2021-34919.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34918](https://cve.now/CVE-2021-34918.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34917](https://cve.now/CVE-2021-34917.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34916](https://cve.now/CVE-2021-34916.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. (CVSS 3.3, Bentley View)
- [CVE-2021-34915](https://cve.now/CVE-2021-34915.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34914](https://cve.now/CVE-2021-34914.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34913](https://cve.now/CVE-2021-34913.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34912](https://cve.now/CVE-2021-34912.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34911](https://cve.now/CVE-2021-34911.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34910](https://cve.now/CVE-2021-34910.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. (CVSS 3.3, Bentley View)
- [CVE-2021-34909](https://cve.now/CVE-2021-34909.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34908](https://cve.now/CVE-2021-34908.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34907](https://cve.now/CVE-2021-34907.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34906](https://cve.now/CVE-2021-34906.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34905](https://cve.now/CVE-2021-34905.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34904](https://cve.now/CVE-2021-34904.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34903](https://cve.now/CVE-2021-34903.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34902](https://cve.now/CVE-2021-34902.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. (CVSS 3.3, Bentley View)
- [CVE-2021-34901](https://cve.now/CVE-2021-34901.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. (CVSS 3.3, Bentley View)
- [CVE-2021-34900](https://cve.now/CVE-2021-34900.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34899](https://cve.now/CVE-2021-34899.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34898](https://cve.now/CVE-2021-34898.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34897](https://cve.now/CVE-2021-34897.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34896](https://cve.now/CVE-2021-34896.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34895](https://cve.now/CVE-2021-34895.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34894](https://cve.now/CVE-2021-34894.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34893](https://cve.now/CVE-2021-34893.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34892](https://cve.now/CVE-2021-34892.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34891](https://cve.now/CVE-2021-34891.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34890](https://cve.now/CVE-2021-34890.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. (CVSS 3.3, Bentley View)
- [CVE-2021-34889](https://cve.now/CVE-2021-34889.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. (CVSS 3.3, Bentley View)
- [CVE-2021-34888](https://cve.now/CVE-2021-34888.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. (CVSS 3.3, Bentley View)
- [CVE-2021-34887](https://cve.now/CVE-2021-34887.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. (CVSS 3.3, Bentley View)
- [CVE-2021-34886](https://cve.now/CVE-2021-34886.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. (CVSS 3.3, Bentley View)
- [CVE-2021-34885](https://cve.now/CVE-2021-34885.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34884](https://cve.now/CVE-2021-34884.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. (CVSS 3.3, Bentley View)
- [CVE-2021-34883](https://cve.now/CVE-2021-34883.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. (CVSS 3.3, Bentley View)
- [CVE-2021-34882](https://cve.now/CVE-2021-34882.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. (CVSS 3.3, Bentley View)
- [CVE-2021-34881](https://cve.now/CVE-2021-34881.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. (CVSS 3.3, Bentley View)
- [CVE-2021-34880](https://cve.now/CVE-2021-34880.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34879](https://cve.now/CVE-2021-34879.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34878](https://cve.now/CVE-2021-34878.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34877](https://cve.now/CVE-2021-34877.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34876](https://cve.now/CVE-2021-34876.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34875](https://cve.now/CVE-2021-34875.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34874](https://cve.now/CVE-2021-34874.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34873](https://cve.now/CVE-2021-34873.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34872](https://cve.now/CVE-2021-34872.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34871](https://cve.now/CVE-2021-34871.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. (CVSS 7.8, Bentley View)
- [CVE-2021-34858](https://cve.now/CVE-2021-34858.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of TeamViewer. (CVSS 7.8, TeamViewer)
- [CVE-2022-21684](https://cve.now/CVE-2022-21684.md): User can bypass approval when invited to Discourse (CVSS 4.3, discourse)
- [CVE-2021-45059](https://cve.now/CVE-2021-45059.md): Adobe InDesign JPEG2000 Parsing Use-After-Free Information Disclosure Vulnerability (CVSS 3.3, Adobe InDesign)
- [CVE-2021-45057](https://cve.now/CVE-2021-45057.md): Adobe InDesign JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe InDesign)
- [CVE-2021-45058](https://cve.now/CVE-2021-45058.md): Adobe InDesign JPEG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe InDesign)
- [CVE-2021-45055](https://cve.now/CVE-2021-45055.md): Adobe InCopy TIF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe InCopy)
- [CVE-2021-45056](https://cve.now/CVE-2021-45056.md): Adobe InCopy JPEG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe InCopy)
- [CVE-2021-45053](https://cve.now/CVE-2021-45053.md): Adobe InCopy JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe InCopy)
- [CVE-2021-45054](https://cve.now/CVE-2021-45054.md): Adobe InCopy JPEG2000 Parsing Use-After-Free Information Disclosure Vulnerability (CVSS 3.3, Adobe InCopy)
- [CVE-2021-23227](https://cve.now/CVE-2021-23227.md): WordPress PHP Everywhere Plugin \<= 2.0.2 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Alexander Fuchs PHP Everywhere)
- [CVE-2022-22988](https://cve.now/CVE-2022-22988.md): Insecure file and directory permissions on EdgeRover (CVSS 7.7, Western Digital EdgeRover)
- [CVE-2022-22990](https://cve.now/CVE-2022-22990.md): Limited authentication bypass vulnerability on Western Digital My Cloud devices (CVSS 7.8, Western Digital My Cloud)
- [CVE-2022-22991](https://cve.now/CVE-2022-22991.md): Command injection through unsecured HTTP calls on Western Digital My Cloud devices (CVSS 7.8, Western Digital My Cloud)
- [CVE-2022-22989](https://cve.now/CVE-2022-22989.md): Pre-authenticated stack overflow vulnerability on FTP Service (CVSS 9.8, Western Digital My Cloud)
- [CVE-2021-43764](https://cve.now/CVE-2021-43764.md): Adobe Experience Manager Stored XSS in the Spin Set (CVSS 8.0, Adobe Experience Manager)
- [CVE-2021-44176](https://cve.now/CVE-2021-44176.md): Adobe Experience Manager Stored XSS in workflow Stages parameter (CVSS 8.1, Adobe Experience Manager)
- [CVE-2021-43761](https://cve.now/CVE-2021-43761.md): Adobe Experience Manager Stored XSS on Edit Tag page via Localization input (CVSS 8.0, Adobe Experience Manager)
- [CVE-2021-44177](https://cve.now/CVE-2021-44177.md): Adobe Experience Manager Stored XSS in user name parameter in the package manager (CVSS 8.1, Adobe Experience Manager)
- [CVE-2021-40722](https://cve.now/CVE-2021-40722.md): AEM Forms Improper Restriction of XML External Entity Reference (CVSS 9.8, Adobe Experience Manager)
- [CVE-2021-43765](https://cve.now/CVE-2021-43765.md): Adobe Experience Manager Stored XSS in the Carousel Set (CVSS 8.1, Adobe Experience Manager)
- [CVE-2021-44178](https://cve.now/CVE-2021-44178.md): Adobe Experience Manager Reflected XSS in /bin/wcm/contentfinder/page/view.html (CVSS 5.4, Adobe Experience Manager)
- [CVE-2021-43762](https://cve.now/CVE-2021-43762.md): Adobe Experience Manager Unicode normalization leads to dispatcher bypass (CVSS 6.5, Adobe Experience Manager)
- [CVE-2021-33046](https://cve.now/CVE-2021-33046.md): Some Dahua products have access control vulnerability in the password reset process. (no CVSS, Access control vulnerability found in some Dahua products)
- [CVE-2021-45807](https://cve.now/CVE-2021-45807.md): jpress v4.2.0 is vulnerable to command execution via io.jpress.web.admin.\_AddonController::doUploadAndInstall. (no CVSS)
- [CVE-2021-45422](https://cve.now/CVE-2021-45422.md): Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability in the /goform/activate\_process "count" parameter (no CVSS)
- [CVE-2021-40573](https://cve.now/CVE-2021-40573.md): The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the gf\_list\_del function in list.c, which allows attackers to cause a den (no CVSS)
- [CVE-2021-39056](https://cve.now/CVE-2021-39056.md): The IBM i 7.1, 7.2, 7.3, and 7.4 Extended Dynamic Remote SQL server (EDRSQL) could allow a remote authenticated user to send a specially cra (CVSS 6.5, IBM i)
- [CVE-2021-40813](https://cve.now/CVE-2021-40813.md): A cross-site scripting (XSS) vulnerability in the "Zip content" feature in Element-IT HTTP Commander 3.1.9 allows remote authenticated users (no CVSS)
- [CVE-2022-21678](https://cve.now/CVE-2022-21678.md): User's bio visible even if profile is restricted in Discourse (CVSS 4.3, discourse)
- [CVE-2022-22125](https://cve.now/CVE-2022-22125.md): Halo CMS - Stored Cross-Site Scripting (XSS) in Article's Tag (CVSS 4.8, halo-dev halo)
- [CVE-2022-22124](https://cve.now/CVE-2022-22124.md): Halo CMS - Stored Cross-Site Scripting (XSS) in Profile Image (CVSS 5.4, halo-dev halo)
- [CVE-2022-22123](https://cve.now/CVE-2022-22123.md): Halo CMS - Stored Cross-Site Scripting (XSS) in Article's Title (CVSS 5.4, halo-dev halo)
- [CVE-2022-23134](https://cve.now/CVE-2022-23134.md): Possible view of the setup pages by unauthenticated users if config file already exists (CVSS 3.7, KEV, Zabbix Frontend)
- [CVE-2022-23133](https://cve.now/CVE-2022-23133.md): Stored XSS in host groups configuration window in Zabbix Frontend (CVSS 6.3, Zabbix Frontend)
- [CVE-2022-23132](https://cve.now/CVE-2022-23132.md): Incorrect permissions of \[/var/run/zabbix\] forces dac\_override (CVSS 3.3, Zabbix Proxy, Server)
- [CVE-2022-23131](https://cve.now/CVE-2022-23131.md): Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML (CVSS 9.1, KEV, Zabbix Frontend)
- [CVE-2021-40327](https://cve.now/CVE-2021-40327.md): Trusted Firmware-M (TF-M) 1.4.0, when Profile Small is used, has incorrect access control. (no CVSS)
- [CVE-2021-23824](https://cve.now/CVE-2021-23824.md): Content Injection (CVSS 6.5, Crow)
- [CVE-2021-23514](https://cve.now/CVE-2021-23514.md): Path Traversal (CVSS 6.5, Crow)
- [CVE-2021-45806](https://cve.now/CVE-2021-45806.md): jpress v4.2.0 admin panel provides a function through which attackers can modify the template and inject some malicious code. (no CVSS)
- [CVE-2021-30353](https://cve.now/CVE-2021-30353.md): Improper validation of function pointer type with actual function signature can lead to assertion in Snapdragon Auto, Snapdragon Compute, Sn (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30330](https://cve.now/CVE-2021-30330.md): Possible null pointer dereference due to improper validation of APE clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sn (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30319](https://cve.now/CVE-2021-30319.md): Possible integer overflow due to improper validation of command length parameters while processing WMI command in Snapdragon Auto, Snapdrago (CVSS 7.8, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30314](https://cve.now/CVE-2021-30314.md): Lack of validation for third party application accessing the service can lead to information disclosure in Snapdragon Auto, Snapdragon Compu (CVSS 6.2, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30313](https://cve.now/CVE-2021-30313.md): Use after free condition can occur in wired connectivity due to a race condition while creating and deleting folders in Snapdragon Auto, Sna (CVSS 6.7, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30311](https://cve.now/CVE-2021-30311.md): Possible heap overflow due to lack of index validation before allocating and writing to heap buffer in Snapdragon Auto, Snapdragon Compute, (CVSS 7.8, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30308](https://cve.now/CVE-2021-30308.md): Possible buffer overflow while printing the HARQ memory partition detail due to improper validation of buffer size in Snapdragon Auto, Snapd (CVSS 7.8, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30307](https://cve.now/CVE-2021-30307.md): Possible denial of service due to improper validation of DNS response when DNS client requests with PTR, NAPTR or SRV query type in Snapdrag (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30301](https://cve.now/CVE-2021-30301.md): Possible denial of service due to out of memory while processing RRC and NAS OTA message in Snapdragon Auto, Snapdragon Industrial IOT, Snap (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Industrial IOT, Snapdr…)
- [CVE-2021-30300](https://cve.now/CVE-2021-30300.md): Possible denial of service due to incorrectly decoding hex data for the SIB2 OTA message and assigning a garbage value to choice when proces (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30287](https://cve.now/CVE-2021-30287.md): Possible assertion due to improper validation of symbols configured for PDCCH monitoring in Snapdragon Auto, Snapdragon Compute, Snapdragon (CVSS 7.5, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2021-30285](https://cve.now/CVE-2021-30285.md): Improper validation of memory region in Hypervisor can lead to incorrect region mapping in Snapdragon Auto, Snapdragon Compute, Snapdragon C (CVSS 9.3, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2022-22113](https://cve.now/CVE-2022-22113.md): DayByDay CRM - Insufficient Session Expiration after Password Change (CVSS 8.8, Bottelet DaybydayCRM)
- [CVE-2022-22112](https://cve.now/CVE-2022-22112.md): DayByDay CRM - Application-Wide Client-Side Template Injection (CSTI) (CVSS 5.4, Bottelet DaybydayCRM)
- [CVE-2022-0198](https://cve.now/CVE-2022-0198.md): Improper Restriction of XML External Entity Reference in stanfordnlp/corenlp (CVSS 6.1, stanfordnlp/corenlp · edu.stanford.nlp:stanford-corenlp)
- [CVE-2022-0196](https://cve.now/CVE-2022-0196.md): Cross-Site Request Forgery (CSRF) in phoronix-test-suite/phoronix-test-suite (CVSS 5.4, phoronix-test-suite/phoronix-test-suite)
- [CVE-2022-0197](https://cve.now/CVE-2022-0197.md): Cross-Site Request Forgery (CSRF) in phoronix-test-suite/phoronix-test-suite (CVSS 6.5, phoronix-test-suite/phoronix-test-suite)
- [CVE-2021-40567](https://cve.now/CVE-2021-40567.md): Segmentation fault vulnerability exists in Gpac through 1.0.1 via the gf\_odf\_size\_descriptor function in desc\_private.c when using mp4box, w (no CVSS)
- [CVE-2021-40568](https://cve.now/CVE-2021-40568.md): A buffer overflow vulnerability exists in Gpac through 1.0.1 via a malformed MP4 file in the svc\_parse\_slice function in av\_parsers.c, which (no CVSS)
- [CVE-2021-40569](https://cve.now/CVE-2021-40569.md): The binary MP4Box in Gpac through 1.0.1 has a double-free vulnerability in the iloc\_entry\_del funciton in box\_code\_meta.c, which allows atta (no CVSS)
- [CVE-2021-40570](https://cve.now/CVE-2021-40570.md): The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the avc\_compute\_poc function in av\_parsers.c, which allows attackers to c (no CVSS)
- [CVE-2021-40571](https://cve.now/CVE-2021-40571.md): The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the ilst\_box\_read function in box\_code\_apple.c, which allows attackers to (no CVSS)
- [CVE-2021-40572](https://cve.now/CVE-2021-40572.md): The binary MP4Box in Gpac 1.0.1 has a double-free bug in the av1dmx\_finalize function in reframe\_av1.c, which allows attackers to cause a de (no CVSS)
- [CVE-2021-40574](https://cve.now/CVE-2021-40574.md): The binary MP4Box in Gpac from 0.9.0-preview to 1.0.1 has a double-free vulnerability in the gf\_text\_get\_utf8\_line function in load\_text.c, (no CVSS)
- [CVE-2021-40575](https://cve.now/CVE-2021-40575.md): The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the mpgviddmx\_process function in reframe\_mpgvid.c, which al (no CVSS)
- [CVE-2021-40576](https://cve.now/CVE-2021-40576.md): The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the gf\_isom\_get\_payt\_count function in hint\_track.c, which a (no CVSS)
- [CVE-2021-45760](https://cve.now/CVE-2021-45760.md): GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function gf\_list\_last(). (no CVSS)
- [CVE-2022-21682](https://cve.now/CVE-2022-21682.md): flatpak-builder can access files outside the build directory. (CVSS 7.7, flatpak)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-01-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.