# CVEs published 2022-01-27

87 CVEs were published on January 27, 2022: 2 critical, 3 high. Days are UTC.

- [CVE-2021-46556](https://cve.now/CVE-2021-46556.md): Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs\_bcode\_insert\_offset at src/mjs\_bcode.c. (no CVSS)
- [CVE-2021-46554](https://cve.now/CVE-2021-46554.md): Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs\_json\_stringify at src/mjs\_json.c. (no CVSS)
- [CVE-2021-46553](https://cve.now/CVE-2021-46553.md): Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs\_set\_internal at src/mjs\_object.c. (no CVSS)
- [CVE-2021-46550](https://cve.now/CVE-2021-46550.md): Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via free\_json\_frame at src/mjs\_json.c. (no CVSS)
- [CVE-2021-46548](https://cve.now/CVE-2021-46548.md): Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via add\_lineno\_map\_item at src/mjs\_bcode.c. (no CVSS)
- [CVE-2021-46549](https://cve.now/CVE-2021-46549.md): Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via parse\_cval\_type at src/mjs\_ffi.c. (no CVSS)
- [CVE-2021-46547](https://cve.now/CVE-2021-46547.md): Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x2c17e. (no CVSS)
- [CVE-2021-46546](https://cve.now/CVE-2021-46546.md): Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs\_next at src/mjs\_object.c. (no CVSS)
- [CVE-2021-46544](https://cve.now/CVE-2021-46544.md): Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/lib/x86\_64-linux-gnu/libasan.so.4+0x59e19. (no CVSS)
- [CVE-2021-46545](https://cve.now/CVE-2021-46545.md): Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /lib/x86\_64-linux-gnu/libc.so.6+0x4b44b. (no CVSS)
- [CVE-2021-46543](https://cve.now/CVE-2021-46543.md): Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /lib/x86\_64-linux-gnu/libc.so.6+0x18e810. (no CVSS)
- [CVE-2021-46541](https://cve.now/CVE-2021-46541.md): Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x2c6ae. (no CVSS)
- [CVE-2021-46542](https://cve.now/CVE-2021-46542.md): Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs\_print at src/mjs\_builtin.c. (no CVSS)
- [CVE-2021-46539](https://cve.now/CVE-2021-46539.md): Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /lib/x86\_64-linux-gnu/libc.so.6+0x45a1f. (no CVSS)
- [CVE-2021-46540](https://cve.now/CVE-2021-46540.md): Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs\_get\_mjs at src/mjs\_builtin.c. (no CVSS)
- [CVE-2021-46538](https://cve.now/CVE-2021-46538.md): Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gc\_compact\_strings at src/mjs\_gc.c. (no CVSS)
- [CVE-2021-46537](https://cve.now/CVE-2021-46537.md): Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x9a30e. (no CVSS)
- [CVE-2021-46535](https://cve.now/CVE-2021-46535.md): Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0xe533e. (no CVSS)
- [CVE-2021-46534](https://cve.now/CVE-2021-46534.md): Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via getprop\_builtin\_foreign at src/mjs\_exec.c. (no CVSS)
- [CVE-2021-46531](https://cve.now/CVE-2021-46531.md): Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x8d28e. (no CVSS)
- [CVE-2021-46532](https://cve.now/CVE-2021-46532.md): Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via exec\_expr at src/mjs\_exec.c. (no CVSS)
- [CVE-2021-46530](https://cve.now/CVE-2021-46530.md): Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs\_execute at src/mjs\_exec.c. (no CVSS)
- [CVE-2021-46528](https://cve.now/CVE-2021-46528.md): Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x5361e. (no CVSS)
- [CVE-2021-46529](https://cve.now/CVE-2021-46529.md): Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x8814e. (no CVSS)
- [CVE-2021-46527](https://cve.now/CVE-2021-46527.md): Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs\_get\_cstring at src/mjs\_string.c. (no CVSS)
- [CVE-2021-46526](https://cve.now/CVE-2021-46526.md): Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via snquote at src/mjs\_json.c. (no CVSS)
- [CVE-2021-46525](https://cve.now/CVE-2021-46525.md): Cesanta MJS v2.20.0 was discovered to contain a heap-use-after-free via mjs\_apply at src/mjs\_exec.c. (no CVSS)
- [CVE-2021-46524](https://cve.now/CVE-2021-46524.md): Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via snquote at mjs/src/mjs\_json.c. (no CVSS)
- [CVE-2021-46523](https://cve.now/CVE-2021-46523.md): Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via to\_json\_or\_debug at mjs/src/mjs\_json.c. (no CVSS)
- [CVE-2021-46522](https://cve.now/CVE-2021-46522.md): Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via /usr/lib/x86\_64-linux-gnu/libasan.so.4+0xaff53. (no CVSS)
- [CVE-2021-46520](https://cve.now/CVE-2021-46520.md): Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs\_jprintf at src/mjs\_util.c. (no CVSS)
- [CVE-2021-46521](https://cve.now/CVE-2021-46521.md): Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via c\_vsnprintf at mjs/src/common/str\_util.c. (no CVSS)
- [CVE-2021-46519](https://cve.now/CVE-2021-46519.md): Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs\_array\_length at src/mjs\_array.c. (no CVSS)
- [CVE-2021-46518](https://cve.now/CVE-2021-46518.md): Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs\_disown at src/mjs\_core.c. (no CVSS)
- [CVE-2021-46516](https://cve.now/CVE-2021-46516.md): Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs\_stack\_size at mjs/src/mjs\_core.c. (no CVSS)
- [CVE-2021-46517](https://cve.now/CVE-2021-46517.md): There is an Assertion \`mjs\_stack\_size(&mjs-\>scopes) \> 0' failed at src/mjs\_exec.c in Cesanta MJS v2.20.0. (no CVSS)
- [CVE-2021-46515](https://cve.now/CVE-2021-46515.md): There is an Assertion \`mjs\_stack\_size(&mjs-\>scopes) \>= scopes\_len' failed at src/mjs\_exec.c in Cesanta MJS v2.20.0. (no CVSS)
- [CVE-2021-46513](https://cve.now/CVE-2021-46513.md): Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via mjs\_mk\_string at mjs/src/mjs\_string.c. (no CVSS)
- [CVE-2021-46514](https://cve.now/CVE-2021-46514.md): There is an Assertion 'ppos != NULL && mjs\_is\_number(\*ppos)' failed at src/mjs\_core.c in Cesanta MJS v2.20.0. (no CVSS)
- [CVE-2021-46512](https://cve.now/CVE-2021-46512.md): Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs\_apply at src/mjs\_exec.c. (no CVSS)
- [CVE-2021-46510](https://cve.now/CVE-2021-46510.md): There is an Assertion \`s \< mjs-\>owned\_strings.buf + mjs-\>owned\_strings.len' failed at src/mjs\_gc.c in Cesanta MJS v2.20.0. (no CVSS)
- [CVE-2021-46511](https://cve.now/CVE-2021-46511.md): There is an Assertion \`m-\>len \>= sizeof(v)' failed at src/mjs\_core.c in Cesanta MJS v2.20.0. (no CVSS)
- [CVE-2021-46509](https://cve.now/CVE-2021-46509.md): Cesanta MJS v2.20.0 was discovered to contain a stack overflow via snquote at mjs/src/mjs\_json.c. (no CVSS)
- [CVE-2021-46507](https://cve.now/CVE-2021-46507.md): Jsish v3.5.0 was discovered to contain a stack overflow via Jsi\_LogMsg at src/jsiUtils.c. (no CVSS)
- [CVE-2021-46508](https://cve.now/CVE-2021-46508.md): There is an Assertion \`i \< parts\_cnt' failed at src/mjs\_bcode.c in Cesanta MJS v2.20.0. (no CVSS)
- [CVE-2021-46506](https://cve.now/CVE-2021-46506.md): There is an Assertion 'v-\>d.lval != v' failed at src/jsiValue.c in Jsish v3.5.0. (no CVSS)
- [CVE-2021-46505](https://cve.now/CVE-2021-46505.md): Jsish v3.5.0 was discovered to contain a stack overflow via /usr/lib/x86\_64-linux-gnu/libasan.so.4+0x5b1e5. (no CVSS)
- [CVE-2021-46503](https://cve.now/CVE-2021-46503.md): Jsish v3.5.0 was discovered to contain a heap-use-after-free via /usr/lib/x86\_64-linux-gnu/libasan.so.4+0x79732. (no CVSS)
- [CVE-2021-46504](https://cve.now/CVE-2021-46504.md): There is an Assertion 'vp != resPtr' failed at jsiEval.c in Jsish v3.5.0. (no CVSS)
- [CVE-2021-46502](https://cve.now/CVE-2021-46502.md): Jsish v3.5.0 was discovered to contain a heap-use-after-free via /usr/lib/x86\_64-linux-gnu/libasan.so.4+0x5166d. (no CVSS)
- [CVE-2021-46501](https://cve.now/CVE-2021-46501.md): Jsish v3.5.0 was discovered to contain a heap-use-after-free via SortSubCmd in src/jsiArray.c. (no CVSS)
- [CVE-2021-46499](https://cve.now/CVE-2021-46499.md): Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsi\_ValueCopyMove in src/jsiValue.c. (no CVSS)
- [CVE-2021-46500](https://cve.now/CVE-2021-46500.md): Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsi\_ArgTypeCheck in src/jsiFunc.c. (no CVSS)
- [CVE-2021-46498](https://cve.now/CVE-2021-46498.md): Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsi\_wswebsocketObjFree in src/jsiWebSocket.c. (no CVSS)
- [CVE-2021-46497](https://cve.now/CVE-2021-46497.md): Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsi\_UserObjDelete in src/jsiUserObj.c. (no CVSS)
- [CVE-2021-46496](https://cve.now/CVE-2021-46496.md): Jsish v3.5.0 was discovered to contain a heap-use-after-free via Jsi\_ObjFree in src/jsiObj.c. (no CVSS)
- [CVE-2021-46494](https://cve.now/CVE-2021-46494.md): Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsi\_ValueLookupBase in src/jsiValue.c. (no CVSS)
- [CVE-2021-46495](https://cve.now/CVE-2021-46495.md): Jsish v3.5.0 was discovered to contain a heap-use-after-free via DeleteTreeValue in src/jsiObj.c. (no CVSS)
- [CVE-2021-46492](https://cve.now/CVE-2021-46492.md): Jsish v3.5.0 was discovered to contain a SEGV vulnerability via Jsi\_FunctionInvoke at src/jsiFunc.c. (no CVSS)
- [CVE-2021-46490](https://cve.now/CVE-2021-46490.md): Jsish v3.5.0 was discovered to contain a SEGV vulnerability via NumberConstructor at src/jsiNumber.c. (no CVSS)
- [CVE-2021-46491](https://cve.now/CVE-2021-46491.md): Jsish v3.5.0 was discovered to contain a SEGV vulnerability via Jsi\_CommandPkgOpts at src/jsiCmds.c. (no CVSS)
- [CVE-2021-46489](https://cve.now/CVE-2021-46489.md): Jsish v3.5.0 was discovered to contain a heap-use-after-free via Jsi\_DecrRefCount in src/jsiValue.c. (no CVSS)
- [CVE-2021-46487](https://cve.now/CVE-2021-46487.md): Jsish v3.5.0 was discovered to contain a SEGV vulnerability via /lib/x86\_64-linux-gnu/libc.so.6+0x18e506. (no CVSS)
- [CVE-2021-46488](https://cve.now/CVE-2021-46488.md): Jsish v3.5.0 was discovered to contain a SEGV vulnerability via jsi\_ArrayConcatCmd at src/jsiArray.c. (no CVSS)
- [CVE-2021-46486](https://cve.now/CVE-2021-46486.md): Jsish v3.5.0 was discovered to contain a SEGV vulnerability via jsi\_ArraySpliceCmd at src/jsiArray.c. (no CVSS)
- [CVE-2021-46484](https://cve.now/CVE-2021-46484.md): Jsish v3.5.0 was discovered to contain a heap-use-after-free via Jsi\_IncrRefCount in src/jsiValue.c. (no CVSS)
- [CVE-2021-46485](https://cve.now/CVE-2021-46485.md): Jsish v3.5.0 was discovered to contain a SEGV vulnerability via Jsi\_ValueIsNumber at src/jsiValue.c. (no CVSS)
- [CVE-2021-46428](https://cve.now/CVE-2021-46428.md): A Remote Code Execution (RCE) vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 ( and previous versions via the bot\_avat (no CVSS)
- [CVE-2021-46427](https://cve.now/CVE-2021-46427.md): An SQL Injection vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 via the message parameter in Master.php. (no CVSS)
- [CVE-2021-46102](https://cve.now/CVE-2021-46102.md): From version 0.2.14 to 0.2.16 for Solana rBPF, function "relocate" in the file src/elf.rs has an integer overflow bug because the sym.st\_val (no CVSS, solana\_rbpf)
- [CVE-2021-46377](https://cve.now/CVE-2021-46377.md): There is a front-end sql injection vulnerability in cszcms 1.2.9 via cszcms/controllers/Member.php#viewUser (no CVSS)
- [CVE-2021-46097](https://cve.now/CVE-2021-46097.md): Dolphinphp v1.5.0 contains a remote code execution vulnerability in /application/common.php#action\_log (no CVSS)
- [CVE-2021-46088](https://cve.now/CVE-2021-46088.md): Zabbix 4.0 LTS, 4.2, 4.4, and 5.0 LTS is vulnerable to Remote Code Execution (RCE). (no CVSS)
- [CVE-2021-46065](https://cve.now/CVE-2021-46065.md): A Cross-site scripting (XSS) vulnerability in Secondary Email Field in Zoho ManageEngine ServiceDesk Plus 11.3 Build 11306 allows an attacke (no CVSS)
- [CVE-2022-0348](https://cve.now/CVE-2022-0348.md): Cross-site Scripting (XSS) - Stored in pimcore/pimcore (CVSS 4.3, pimcore/pimcore)
- [CVE-2021-28096](https://cve.now/CVE-2021-28096.md): An issue was discovered in Stormshield SNS before 4.2.3 (when the proxy is used). (no CVSS)
- [CVE-2021-44795](https://cve.now/CVE-2021-44795.md): Modifying User Permissions via Unauthorized Access in Single Connect (CVSS 5.3, Kron Single Connect)
- [CVE-2021-44794](https://cve.now/CVE-2021-44794.md): Information Leakege via Unauthorized Access in Single Connect (CVSS 5.3, Kron Single Connect)
- [CVE-2021-44793](https://cve.now/CVE-2021-44793.md): Information Leakege via Unauthorized Access in Single Connect (CVSS 8.6, Kron Single Connect)
- [CVE-2021-44792](https://cve.now/CVE-2021-44792.md): Information Leakege via Unauthorized Access in Single Connect (CVSS 5.3, Kron Single Connect)
- [CVE-2022-0372](https://cve.now/CVE-2022-0372.md): Cross-site Scripting (XSS) - Stored in crater-invoice/crater (CVSS 7.6, crater-invoice/crater · bytefury/crater)
- [CVE-2022-0370](https://cve.now/CVE-2022-0370.md): Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat (CVSS 7.1, livehelperchat/livehelperchat · remdex/livehelperchat)
- [CVE-2022-22828](https://cve.now/CVE-2022-22828.md): An insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0 allows a remote attacker to access unshared (no CVSS)
- [CVE-2022-0387](https://cve.now/CVE-2022-0387.md): Cross-site Scripting (XSS) - Stored in livehelperchat/livehelperchat (CVSS 6.3, livehelperchat/livehelperchat · remdex/livehelperchat)
- [CVE-2022-21722](https://cve.now/CVE-2022-21722.md): Potential out-of-bound read during RTP/RTCP parsing in PJSIP (CVSS 9.1, pjsip pjproject)
- [CVE-2022-21723](https://cve.now/CVE-2022-21723.md): Out-of-bounds read in multipart parsing in PJSIP (CVSS 9.1, pjsip pjproject)
- [CVE-2022-23181](https://cve.now/CVE-2022-23181.md): Local privilege escalation with FileStore (no CVSS, Apache Software Foundation Apache Tomcat · org.apache.tomca…)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-01-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.