CVEs published January 15, 2022
15 CVEs were published on January 15, 2022: 0 critical, 1 high.
- Published
- 15
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 14
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Facebook Hermes · hermes-engine
- 1
High 1
Medium, low and unrated 14
- CVE-2021-33827The files_antivirus component before 1.0.0 for ownCloud allows OS Command Injection via the administration settings.
- CVE-2021-33828The files_antivirus component before 1.0.0 for ownCloud mishandles the protection mechanism by which malicious files (that have been uploade
- CVE-2021-44537ownCloud owncloud/client before 2.9.2 allows Resource Injection by a server into the desktop client via a URL, leading to remote code execut
- CVE-2020-28919A stored cross site scripting (XSS) vulnerability in Checkmk 1.6.0x prior to 1.6.0p19 allows an authenticated remote attacker to inject arbi
- CVE-2021-42555Pexip Infinity before 26.2 allows temporary remote Denial of Service (abort) because of missing call-setup input validation.
- CVE-2021-35969Pexip Infinity before 26 allows temporary remote Denial of Service (abort) because of missing call-setup input validation.
- CVE-2021-33499Pexip Infinity before 26 allows remote denial of service because of missing H.264 input validation (issue 2 of 2).
- CVE-2021-33498Pexip Infinity before 26 allows remote denial of service because of missing H.264 input validation (issue 1 of 2).
- CVE-2021-32545Pexip Infinity before 26 allows remote denial of service because of missing RTMP input validation.
- CVE-2022-23178An issue was discovered on Crestron HD-MD4X2-4K-E 1.0.0.2159 devices.
- CVE-2021-44049CyberArk Endpoint Privilege Manager (EPM) through 11.5.3.328 before 2021-12-20 allows a local user to gain elevated privileges via a Trojan
- CVE-2021-33963China Mobile An Lianbao WF-1 v1.0.1 router web interface through /api/ZRMacClone/mac_addr_clone receives parameters by POST request, and the
- CVE-2022-23094Libreswan 4.2 through 4.5 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted IKE
- CVE-2021-24044By passing invalid javascript code where await and yield were called upon non-async and non-generator getter/setter functions, Hermes would Facebook Hermes · hermes-engine