CVEs published February 2, 2022
29 CVEs were published on February 2, 2022: 2 critical, 10 high.
- Published
- 29
- Critical
- 2
- High
- 10
- Medium
- 6
- Low
- 0
- Unrated
- 11
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- Fortinet FortiFone · Fortinet FortiADC +8
- 1
- Fortinet FortiMail
- 1
- mastodon/mastodon
- 1
- org.postgresql:postgresql
- 1
- vim/vim
- 1
Critical 2
- CVE-2022-21817NVIDIA Omniverse Launcher contains a Cross-Origin Resource Sharing (CORS) vulnerability which can allow an unprivileged remote attacker, if
- CVE-2021-39070IBM Security Verify Access 10.0.0.0, 10.0.1.0 and 10.0.2.0 with the advanced access control authentication service enabled could allow an at
High 10
- CVE-2022-0432Prototype Pollution in mastodon/mastodonmastodon/mastodon
- CVE-2022-22510CODESYS: Null Pointer Dereference in CODESYS PROFINET stack
- CVE-2022-22509PHOENIX CONTACT: FL SWITCH 2xxx series incorrect privilege assignment
- CVE-2022-21724Unchecked Class Instantiation when providing Plugin Classesorg.postgresql:postgresql
- CVE-2022-0366An authenticated and authorized agent user could potentially gain administrative access via an SQLi vulnerability to Capsule8 Console betwee
- CVE-2021-41018A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb version 6.4.1 and below, 6
- CVE-2021-43073A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb version 6.4.1 and 6.4.0, v
- CVE-2021-41016A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiExtender version 7.0.1 and below, 4.2
- CVE-2021-42753An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in FortiWeb management interface 6.
- CVE-2022-0443Use After Free in vim/vimvim/vim
Medium, low and unrated 17
- CVE-2022-24069An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.0 before 05.08.41, 5.1 before 05.16.29, 5.2 before 05.26.29, 5.3 bef
- CVE-2021-43522An issue was discovered in Insyde InsydeH2O with kernel 5.1 through 2021-11-08, 5.2 through 2021-11-08, and 5.3 through 2021-11-08.
- CVE-2021-42642PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allo
- CVE-2021-42641PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allo
- CVE-2021-42640PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability that allo
- CVE-2021-42639PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to multiple reflected cross site scripting vulnerabilities.
- CVE-2021-42637PrinterLogic Web Stack versions 19.1.1.13 SP9 and below use user-controlled input to craft a URL, resulting in a Server Side Request Forgery
- CVE-2021-42633PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to SQL Injection, which may allow an attacker to access additional au
- CVE-2021-39066IBM Financial Transaction Manager 3.2.4 does not invalidate session any existing session identifier gives an attacker the opportunity to ste
- CVE-2021-39044IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and u
- CVE-2021-24043A missing bound check in RTCP flag parsing code prior to WhatsApp for Android v2.21.23.2, WhatsApp Business for Android v2.21.23.2, WhatsApp
- CVE-2020-26208Heap-buffer-overflow in jhead
- CVE-2021-36193Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an authenticated attacker to achievFortinet FortiFone · Fortinet FortiADC +8
- CVE-2021-43062A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiMail version 7.0.1 and 7.0.0, versioFortinet FortiMail
- CVE-2021-36177An improper access control vulnerability [CWE-284] in FortiAuthenticator HA service 6.3.2 and below, 6.2.x, 6.1.x, 6.0.x may allow an attack
- CVE-2022-24300Minetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same item stack as saved user input, aka ItemStack meta
- CVE-2022-24301In Minetest before 5.4.0, players can add or subtract items from a different player's inventory.