CVEs published January 29, 2022
7 CVEs were published on January 29, 2022: 0 critical, 0 high.
- Published
- 7
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 7
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- casdoor · github.com/casdoor/casdoor
- 1
Medium, low and unrated 7
- CVE-2021-46660Signiant Manager+Agents before 15.1 allows XML External Entity (XXE) attacks.
- CVE-2022-24123MarkText through 0.16.3 does not sanitize the input of a mermaid block before rendering.
- CVE-2022-24124The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/gcasdoor · github.com/casdoor/casdoor
- CVE-2021-46657get_sort_by_table in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY.
- CVE-2021-46658save_window_function_values in MariaDB before 10.6.3 allows an application crash because of incorrect handling of with_window_func=true for
- CVE-2021-46659MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECT_LEX::nest_level is local to each VIEW.
- CVE-2022-24122kernel/ucount.c in the Linux kernel 5.14 through 5.16.4, when unprivileged user namespaces are enabled, allows a use-after-free and privileg