CVEs published February 9, 2022
269 CVEs were published on February 9, 2022: 3 critical, 69 high. 5 are now in CISA KEV.
- Published
- 269
- Critical
- 3
- High
- 69
- Medium
- 81
- Low
- 3
- Unrated
- 113
- Now in CISA KEV
- 5
- Fix available
- 75
Most affected products
- Microsoft Windows
- 22
- Intel(R) Processors
- 17
- Intel(R) PROSet/Wireless Wi-Fi in multiple operating system…
- 15
- Siemens Simcenter Femap
- 11
- MediaTek MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385
- 10
- Huawei EMUI
- 8
- Interactive Graphical SCADA System Data Server
- 8
- Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Wind…
- 7
- Intel(R) Quartus(R) Prime Pro Edition
- 5
- Microsoft Dynamics GP
- 5
Critical 3
- CVE-2022-22536SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher SAP SE SAP NetWeaver and ABAP Platform · SAP SE SAP Web… +1
- CVE-2022-23631Prototype Pollution leading to Remote Code Execution in superjsonblitz-js superjson · superjson +1
- CVE-2021-36302All Dell EMC Integrated System for Microsoft Azure Stack Hub versions contain a privilege escalation vulnerability.Dell EMC Integrated System for Microsoft Azure Stack Hub
High 69
- CVE-2021-26616SecuwaySSL OS command injection vulnerabilitysecuwiz co. SecuwaySSL U V2.0 client for MacOS
- CVE-2022-0162Vulnerability in TP-LinK TL-WR841N wireless routerTP-Link TL-WR841N
- CVE-2021-26613tobesoft nexacro arbitrary file creation vulnerabilitytobesoft co. Nexacro
- CVE-2022-21220Improper restriction of XML external entity for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user toIntel(R) Quartus(R) Prime Pro Edition
- CVE-2022-21205Improper restriction of XML external entity reference in DSP Builder Pro for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may aIntel(R) Quartus(R) Prime Pro Edition
- CVE-2022-21203Improper permissions in the SafeNet Sentinel driver for Intel(R) Quartus(R) Prime Standard Edition before version 21.1 may allow an authentiIntel(R) Quartus(R) Prime Standard Edition
- CVE-2022-21204Improper permissions for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escIntel(R) Quartus(R) Prime Pro Edition
- CVE-2021-44454Improper input validation in a third-party component for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticateIntel(R) Quartus(R) Prime Pro Edition
- CVE-2022-21174Improper access control in a third-party component of Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated uIntel(R) Quartus(R) Prime Pro Edition
- CVE-2021-33129Incorrect default permissions in the software installer for the Intel(R) Advisor before version 2021.4.0 may allow an authenticated user to Intel(R) Advisor
- CVE-2021-33137Out-of-bounds write in the Intel(R) Kernelflinger project may allow an authenticated user to potentially enable escalation of privilege via Intel(R) Kernelflinger project
- CVE-2021-33113Improper input validation for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and Killer(TM) WiFi in Windows 10 and 11 may Intel(R) PROSet/Wireless WiFi in multiple operating systems…
- CVE-2021-33115Improper input validation for some Intel(R) PROSet/Wireless WiFi in UEFI may allow an unauthenticated user to potentially enable escalation Intel(R) PROSet/Wireless WiFi in UEFI
- CVE-2021-33101Uncontrolled search path in the Intel(R) GPA software before version 21.2 may allow an authenticated user to potentially enable escalation oIntel(R) GPA software
- CVE-2021-23152Improper access control in the Intel(R) Advisor software before version 2021.2 may allow an authenticated user to potentially enable escalatIntel(R) Advisor software
- CVE-2021-0164Improper access control in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 and Intel(R) PROSet/Wireless Wi-Fi in multiple operating system…
- CVE-2021-0162Improper input validation in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticaIntel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Wind…
- CVE-2021-0163Improper Validation of Consistency within input in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 mayIntel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Wind…
- CVE-2021-0156Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation oIntel(R) Processors
- CVE-2021-0116Out-of-bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilegIntel(R) Processors
- CVE-2021-0117Pointer issues in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege viaIntel(R) Processors
- CVE-2021-0091Improper access control in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable an escalation oIntel(R) Processors
- CVE-2021-0099Insufficient control flow management in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an eIntel(R) Processors
- CVE-2021-0066Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 anIntel(R) PROSet/Wireless Wi-Fi in multiple operating system…
- CVE-2022-23622Cross site scripting in registration template in xwiki-platformxwiki-platform · org.xwiki.platform:xwiki-platform-web-temp…
- CVE-2022-23616Remote code execution in xwiki-platformxwiki-platform · org.xwiki.platform:xwiki-platform-administ…
- CVE-2022-21660Missing authorization in gin-vue-adminflipped-aurora gin-vue-admin
- CVE-2022-23276SQL Server for Linux Containers Elevation of Privilege VulnerabilityMicrosoft SQL Server 2019 for Linux Containers
- CVE-2022-23274Microsoft Dynamics GP Remote Code Execution VulnerabilityMicrosoft Dynamics GP
- CVE-2022-23273Microsoft Dynamics GP Elevation Of Privilege VulnerabilityMicrosoft Dynamics GP
- CVE-2022-23272Microsoft Dynamics GP Elevation Of Privilege VulnerabilityMicrosoft Dynamics GP
- CVE-2022-23256Azure Data Explorer Spoofing VulnerabilityMicrosoft Azure Data Explorer
- CVE-2022-22718Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-22717Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-22715Named Pipe File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-22709VP9 Video Extensions Remote Code Execution VulnerabilityMicrosoft VP9 Video Extensions
- CVE-2022-22005Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2022-22004Microsoft Office ClickToRun Remote Code Execution VulnerabilityMicrosoft Office 2013 Click-to-Run · Microsoft 365 Apps for…
- CVE-2022-22003Microsoft Office Graphics Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise
- CVE-2022-22001Windows Remote Access Connection Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-22000Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-21999Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-21997Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-21996Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-21995Windows Hyper-V Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-21994Windows DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-21993Windows Services for NFS ONCRPC XDR Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-21992Windows Mobile Device Management Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-21991Visual Studio Code Remote Development Extension Remote Code Execution VulnerabilityMicrosoft Visual Studio Code
- CVE-2022-21989Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-21988Microsoft Office Visio Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise
- CVE-2022-21987Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2022-21986.NET Denial of Service VulnerabilityMicrosoft Visual Studio · Microsoft .NET +14
- CVE-2022-21984Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-21981Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-21974Roaming Security Rights Management Services Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-21971Windows Runtime Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-21965Microsoft Teams Denial of Service VulnerabilityMicrosoft Teams for iOS · Microsoft Teams for Android +1
- CVE-2022-21957Microsoft Dynamics 365 On-Premises Remote Code Execution VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2022-21927HEVC Video Extensions Remote Code Execution VulnerabilityMicrosoft HEVC Video Extension · Microsoft HEVC Video Exten…
- CVE-2022-21926HEVC Video Extensions Remote Code Execution VulnerabilityMicrosoft HEVC Video Extension · Microsoft HEVC Video Exten…
- CVE-2022-21844HEVC Video Extensions Remote Code Execution VulnerabilityMicrosoft HEVC Video Extension · Microsoft HEVC Video Exten…
- CVE-2021-37205A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CSiemens SIMATIC Drive Controller family · Siemens SIMATI… +6
- CVE-2021-37204A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC Drive Controller family (All versionSiemens SIMATIC Drive Controller family · Siemens SIMATI… +7
- CVE-2021-37185A vulnerability has been identified in SIMATIC Drive Controller family (All versions >= V2.9.2 < V2.9.4), SIMATIC ET 200SP Open Controller CSiemens SIMATIC Drive Controller family · Siemens SIMATI… +6
- CVE-2021-37852LPE in ESET products for WindowsESET NOD32 Antivirus · ESET Internet Security +9
- CVE-2022-0526Cross-site Scripting (XSS) - Stored in chatwoot/chatwootchatwoot/chatwoot
- CVE-2022-0525Out-of-bounds Read in mruby/mrubymruby/mruby
- CVE-2022-0391A flaw was found in Python, specifically within the urllib.parse module.python · libpython +1
Medium, low and unrated 197
- CVE-2021-22954A cross-site request forgery vulnerability exists in Concrete CMS <v9 that could allow an attacker to make requests on behalf of other usershttps://github.com/concrete5/concrete5 · concrete5/concrete5
- CVE-2022-21825An Improper Access Control vulnerability exists in Citrix Workspace App for Linux 2012 - 2111 with App Protection installed that can allow aCitrix Workspace App for Linux
- CVE-2022-0529A flaw was found in Unzip.unzip
- CVE-2022-0530A flaw was found in Unzip.unzip
- CVE-2022-20046In Bluetooth, there is a possible memory corruption due to a logic error.MediaTek MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385
- CVE-2022-20045In Bluetooth, there is a possible service crash due to a use after free.MediaTek MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385
- CVE-2022-20044In Bluetooth, there is a possible service crash due to a use after free.MediaTek MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385
- CVE-2022-20043In Bluetooth, there is a possible escalation of privilege due to a missing permission check.MediaTek MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385
- CVE-2022-20041In Bluetooth, there is a possible escalation of privilege due to a missing permission check.MediaTek MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385
- CVE-2022-20042In Bluetooth, there is a possible information disclosure due to incorrect error handling.MediaTek MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385
- CVE-2022-20040In power_hal_manager_service, there is a possible permission bypass due to a stack-based buffer overflow.MediaTek MT6735, MT6737, MT6739, MT6755, MT6757, MT6761, MT…
- CVE-2022-20039In ccu driver, there is a possible memory corruption due to an integer overflow.MediaTek MT6833, MT6853, MT6873, MT6877, MT6883, MT6893, MT…
- CVE-2022-20038In ccu driver, there is a possible memory corruption due to an incorrect bounds check.MediaTek MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT…
- CVE-2022-20036In ion driver, there is a possible information disclosure due to an incorrect bounds check.MediaTek MT6735, MT6737, MT6739, MT6750, MT6750S, MT6753, M…
- CVE-2022-20037In ion driver, there is a possible information disclosure due to an incorrect bounds check.MediaTek MT6735, MT6737, MT6739, MT6750, MT6750S, MT6753, M…
- CVE-2022-20035In vcu driver, there is a possible information disclosure due to a use after free.MediaTek MT6768, MT6769, MT6779, MT6781, MT6785, MT6833, MT…
- CVE-2022-20034In Preloader XFLASH, there is a possible escalation of privilege due to an improper certificate validation.MediaTek MT6580, MT6735, MT6739, MT6761, MT6763, MT6765, MT…
- CVE-2022-20017In ion driver, there is a possible information disclosure due to an incorrect bounds check.MediaTek MT6765, MT6785, MT6833, MT6853, MT6873, MT6877, MT…
- CVE-2022-20033In camera driver, there is a possible out of bounds read due to an incorrect bounds check.MediaTek MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT…
- CVE-2022-20032In vow driver, there is a possible memory corruption due to a race condition.MediaTek MT6781, MT6785, MT6833, MT6853, MT6853T, MT6873, M…
- CVE-2022-20031In fb driver, there is a possible memory corruption due to a use after free.MediaTek MT6580, MT6582E, MT6582H, MT6582T, MT6582W, MT6582…
- CVE-2022-20029In cmdq driver, there is a possible out of bounds read due to an incorrect bounds check.MediaTek MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT…
- CVE-2022-20030In vow driver, there is a possible out of bounds write due to a stack-based buffer overflow.MediaTek MT6781, MT6785, MT6833, MT6853, MT6853T, MT6873, M…
- CVE-2022-20028In Bluetooth, there is a possible out of bounds write due to a missing bounds check.MediaTek MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385
- CVE-2022-20026In Bluetooth, there is a possible out of bounds write due to a missing bounds check.MediaTek MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385
- CVE-2022-20027In Bluetooth, there is a possible out of bounds write due to a missing bounds check.MediaTek MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385
- CVE-2022-20025In Bluetooth, there is a possible out of bounds write due to a missing bounds check.MediaTek MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385
- CVE-2022-20024In system service, there is a possible permission bypass due to a missing permission check.MediaTek MT6580, MT6739, MT6750, MT6761, MT6762, MT6763, MT…
- CVE-2022-22544Solution Manager (Diagnostics Root Cause Analysis Tools) - version 720, allows an administrator to execute code on all connected DiagnosticsSAP SE SAP Solution Manager
- CVE-2022-22546Due to improper HTML encoding in input control summary, an authorized attacker can execute XSS vulnerability in SAP Business Objects Web IntSAP SE SAP Business Objects Web Intelligence
- CVE-2022-22543SAP NetWeaver Application Server for ABAP (Kernel) and ABAP Platform (Kernel) - versions KERNEL 7.22, 8.04, 7.49, 7.53, 7.77, 7.81, 7.85, 7.SAP SE SAP NetWeaver Application Server for ABAP (Kernel) a…
- CVE-2022-22545A high privileged user who has access to transaction SM59 can read connection details stored with the destination for http calls in SAP NetWSAP SE SAP NetWeaver Application Server ABAP and ABAP Platf…
- CVE-2022-22542S/4HANA Supplier Factsheet exposes the private address and bank details of an Employee Business Partner with Supplier Role, AND Enterprise SSAP SE SAP S/4HANA
- CVE-2022-22539When a user opens a manipulated JPEG file format (.jpg, 2d.x3d) received from untrusted sources in SAP 3D Visual Enterprise Viewer - versionSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2022-22540SAP NetWeaver AS ABAP (Workplace Server) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 787, allows an attacker to eSAP SE SAP NetWeaver AS ABAP
- CVE-2022-22538When a user opens a manipulated Adobe Illustrator file format (.ai, ai.x3d) received from untrusted sources in SAP 3D Visual Enterprise ViewSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2022-22537When a user opens a manipulated Tagged Image File Format (.tiff, 2d.x3d)) received from untrusted sources in SAP 3D Visual Enterprise ViewerSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2022-22534Due to insufficient encoding of user input, SAP NetWeaver allows an unauthenticated attacker to inject code that may expose sensitive data lSAP SE SAP NetWeaver
- CVE-2022-22535SAP ERP HCM Portugal - versions 600, 604, 608, does not perform necessary authorization checks for a report that reads the payroll data of eSAP SE SAP ERP HCM
- CVE-2022-22533Due to improper error handling in SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.22EXT, 7SAP SE SAP NetWeaver Application Server Java
- CVE-2022-22528SAP Adaptive Server Enterprise (ASE) - version 16.0, installation makes an entry in the system PATH environment variable in Windows platformSAP SE SAP Adaptive Server Enterprise
- CVE-2022-22532In SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7.22, 7.49, 7SAP SE SAP NetWeaver Application Server Java
- CVE-2022-24668A program using swift-nio-http2 is vulnerable to a denial of service attack caused by a network peer sending ALTSVC or ORIGIN frames.Swift Project SwiftNIO HTTP2
- CVE-2022-24667A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HPACK-encoSwift Project SwiftNIO HTTP2
- CVE-2022-24666A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 fraSwift Project SwiftNIO HTTP2
- CVE-2022-22780Zoom Chat Susceptible to Zip BombingZoom Video Communications Zoom Client for Meetings for A… +3
- CVE-2022-22779Retained exploded messages in Keybase clients for macOS and WindowsZoom Video Communications Keybase Client for macOS · Zoom V…
- CVE-2021-39943An authorization logic error in the External Status Check API in GitLab EE affecting all versions starting from 14.1 before 14.3.6, all versGitLab
- CVE-2022-0532An incorrect sysctls validation vulnerability was found in CRI-O 1.18 and earlier.cri-o · github.com/cri-o/cri-o
- CVE-2021-22817A CWE-276: Incorrect Default Permissions vulnerability exists that could cause unauthorized access to the base installation directory leadinHarmony/Magelis iPC Series (All Versions), Vijeo Designer (…
- CVE-2022-24321A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause Denial of Service against the Geo SCADClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 201…
- CVE-2022-24320A CWE-295: Improper Certificate Validation vulnerability exists that could allow a Man-in-theMiddle attack when communications between the cClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 201…
- CVE-2022-24319A CWE-295: Improper Certificate Validation vulnerability exists that could allow a Man-in-theMiddle attack when communications between the cClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 201…
- CVE-2022-22812A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause a web sspaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeL…
- CVE-2022-24318A CWE-326: Inadequate Encryption Strength vulnerability exists that could cause non-encrypted communication with the server when outdated veClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 201…
- CVE-2022-22811A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists that could induce users to perform unintended actions, leading to the overspaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeL…
- CVE-2022-22810A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to manipulate the admspaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeL…
- CVE-2022-22813A CWE-798: Use of Hard-coded Credentials vulnerability exists.Easergy P40 Series model numbers with Ethernet option bit a…
- CVE-2022-24317A CWE-862: Missing Authorization vulnerability exists that could cause information exposure when an attacker sends a specific message.Interactive Graphical SCADA System Data Server
- CVE-2022-24316A CWE-665: Improper Initialization vulnerability exists that could cause information exposure when an attacker sends a specially crafted mesInteractive Graphical SCADA System Data Server
- CVE-2022-24315A CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service when an attacker repeatedly sends a specially crafted Interactive Graphical SCADA System Data Server
- CVE-2022-24314A CWE-125: Out-of-bounds Read vulnerability exists that could cause memory leaks potentially resulting in denial of service when an attackerInteractive Graphical SCADA System Data Server
- CVE-2022-24313A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially leadinInteractive Graphical SCADA System Data Server
- CVE-2022-24311A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing fileInteractive Graphical SCADA System Data Server
- CVE-2022-24312A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing fileInteractive Graphical SCADA System Data Server
- CVE-2022-24310A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service andInteractive Graphical SCADA System Data Server
- CVE-2022-21218Uncaught exception in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable Intel(R) Trace Analyzer and Collector
- CVE-2022-21226Out-of-bounds read in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable Intel(R) Trace Analyzer and Collector
- CVE-2022-21157Improper access control in the Intel(R) Smart Campus Android application before version 6.1 may allow authenticated user to potentially enabIntel(R) Smart Campus Android application
- CVE-2022-21156Access of uninitialized pointer in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentIntel(R) Trace Analyzer and Collector
- CVE-2022-21153Improper access control in the Intel(R) Capital Global Summit Android application may allow an authenticated user to potentially enable infoIntel(R) Capital Global Summit Android application
- CVE-2022-21133Out-of-bounds read in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable Intel(R) Trace Analyzer and Collector
- CVE-2021-33155Improper input validation in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.100 mayIntel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R)…
- CVE-2021-33166Incorrect default permissions for the Intel(R) RXT for Chromebook application, all versions, may allow an authenticated user to potentially version
- CVE-2021-33139Improper conditions check in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.100 mayIntel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R)…
- CVE-2021-33120Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel Atom(R) Processors may allow authenticated Intel Atom(R) Processors
- CVE-2021-33147Improper conditions check in the Intel(R) IPP Crypto library before version 2021.2 may allow an authenticated user to potentially enable infIntel(R) IPP Crypto library
- CVE-2021-33119Improper access control in the Intel(R) RealSense(TM) DCM before version 20210625 may allow an authenticated user to potentially enable infoIntel(R) RealSense(TM) DCM
- CVE-2021-33114Improper input validation for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and Killer(TM) WiFi in Windows 10 and 11 may Intel(R) PROSet/Wireless WiFi in multiple operating systems…
- CVE-2021-33105Out-of-bounds read in some Intel(R) Core(TM) processors with Radeon(TM) RX Vega M GL integrated graphics before version 21.10 may allow an aIntel® Core™ Processors with Radeon™ RX Vega M GL Graphics…
- CVE-2021-33110Improper input validation for some Intel(R) Wireless Bluetooth(R) products and Killer(TM) Bluetooth(R) products in Windows 10 and 11 before Intel(R) Wireless Bluetooth(R) products and Killer(TM) Blue…
- CVE-2021-33096Improper isolation of shared resources in network on chip for the Intel(R) 82599 Ethernet Controllers and Adapters may allow an authenticateIntel(R) 82599 Ethernet Controllers and Adapters
- CVE-2021-33107Insufficiently protected credentials in USB provisioning for Intel(R) AMT SDK before version 16.0.3, Intel(R) SCS before version 12.2 and InIntel(R) AMT SDK before
- CVE-2021-33061Insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters may allow an authenticated user to potentiallyIntel(R) 82599 Ethernet Controllers and Adapters
- CVE-2021-0178Improper input validation in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthenticaIntel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Wind…
- CVE-2021-0183Improper Validation of Specified Index, Position, or Offset in Input in software for some Intel(R) PROSet/Wireless Wi-Fi in multiple operatiIntel(R) PROSet/Wireless Wi-Fi in multiple operating system…
- CVE-2021-33068Null pointer dereference in subsystem for Intel(R) AMT before versions 15.0.35 may allow an authenticated user to potentially enable denial Intel(R) AMT
- CVE-2021-0177Improper Validation of Consistency within input in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 mayIntel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Wind…
- CVE-2021-0179Improper Use of Validation Framework in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an uIntel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Wind…
- CVE-2021-0176Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in WinIntel(R) PROSet/Wireless Wi-Fi in multiple operating system…
- CVE-2021-0169Uncontrolled Search Path Element in software for Intel(R) PROSet/Wireless Wi-Fi in Windows 10 and 11 may allow a privileged user to potentiaIntel(R) PROSet/Wireless Wi-Fi in Windows 10 and
- CVE-2021-0174Improper Use of Validation Framework in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) WIntel(R) PROSet/Wireless Wi-Fi in multiple operating system…
- CVE-2021-0170Exposure of Sensitive Information to an Unauthorized Actor in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systemsIntel(R) PROSet/Wireless Wi-Fi in multiple operating system…
- CVE-2021-0175Improper Validation of Specified Index, Position, or Offset in Input in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operatiIntel(R) PROSet/Wireless Wi-Fi in multiple operating system…
- CVE-2021-0172Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in WinIntel(R) PROSet/Wireless Wi-Fi in multiple operating system…
- CVE-2021-0173Improper Validation of Consistency within input in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some KIntel(R) PROSet/Wireless Wi-Fi in multiple operating system…
- CVE-2021-0168Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in WinIntel(R) PROSet/Wireless Wi-Fi in multiple operating system…
- CVE-2021-0171Improper access control in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an authenticated Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Wind…
- CVE-2021-0166Exposure of Sensitive Information to an Unauthorized Actor in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systemsIntel(R) PROSet/Wireless Wi-Fi in multiple operating system…
- CVE-2021-0167Improper access control in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged userIntel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Wind…
- CVE-2021-0165Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 anIntel(R) PROSet/Wireless Wi-Fi in multiple operating system…
- CVE-2021-0161Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 anIntel(R) PROSet/Wireless Wi-Fi in multiple operating system…
- CVE-2021-0127Insufficient control flow management in some Intel(R) Processors may allow an authenticated user to potentially enable a denial of service vIntel(R) Processors
- CVE-2021-0147Improper locking in the Power Management Controller (PMC) for some Intel Chipset firmware before versions pmc_fw_lbg_c1-21ww02a and pmc_fw_lIntel Chipset firmware
- CVE-2021-0124Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privileIntel(R) Processors
- CVE-2021-0118Out-of-bounds read in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilegeIntel(R) Processors
- CVE-2021-0125Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privileIntel(R) Processors
- CVE-2021-0145Improper initialization of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information diIntel(R) Processors
- CVE-2021-0119Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privileIntel(R) Processors
- CVE-2021-0107Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilegIntel(R) Processors
- CVE-2021-0076Improper Validation of Specified Index, Position, or Offset in Input in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operatiIntel(R) PROSet/Wireless Wi-Fi in multiple operating system…
- CVE-2021-0115Buffer overflow in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via lIntel(R) Processors
- CVE-2021-0111NULL pointer dereference in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of priIntel(R) Processors
- CVE-2021-0092Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service vIntel(R) Processors
- CVE-2021-0103Insufficient control flow management in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalIntel(R) Processors
- CVE-2021-0093Incorrect default permissions in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of serIntel(R) Processors
- CVE-2021-0060Insufficient compartmentalization in HECI subsystem for the Intel(R) SPS before versions SPS_E5_04.01.04.516.0, SPS_E5_04.04.04.033.0, SPS_EIntel(R) SPS
- CVE-2021-0072Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in WinIntel(R) PROSet/Wireless Wi-Fi in multiple operating system…
- CVE-2022-23049Exponent CMS 2.6.0patch2 allows an authenticated user to inject persistent JavaScript code on the "User-Agent" header when logging in.Exponent CMS
- CVE-2022-23048Exponent CMS 2.6.0patch2 allows an authenticated admin user to upload a malicious extension in the format of a ZIP file with a PHP file insiExponent CMS
- CVE-2021-40015There is a race condition vulnerability in the binder driver subsystem in the kernel.Successful exploitation of this vulnerability may affecHuawei EMUI · Huawei Magic UI +1
- CVE-2022-23047Exponent CMS 2.6.0patch2 allows an authenticated admin user to inject persistent JavaScript code inside the "Site/Organization Name","Site TExponent CMS
- CVE-2021-40044There is a permission verification vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may cause unauthorizeHuawei EMUI · Huawei Magic UI
- CVE-2021-40045There is a vulnerability of signature verification mechanism failure in system upgrade through recovery mode.Successful exploitation of thisHuawei EMUI · Huawei Magic UI +1
- CVE-2021-39994There is an arbitrary address access vulnerability with the product line test code.Successful exploitation of this vulnerability may affect Huawei EMUI
- CVE-2021-39997There is a vulnerability of unstrict input parameter verification in the audio assembly.Successful exploitation of this vulnerability may caHuawei EMUI
- CVE-2021-39992There is an improper security permission configuration vulnerability on ACPU.Successful exploitation of this vulnerability may affect servicHuawei EMUI
- CVE-2021-37107There is an improper memory access permission configuration on ACPU.Successful exploitation of this vulnerability may cause out-of-bounds acHuawei EMUI
- CVE-2021-37109There is a security protection bypass vulnerability with the modem.Successful exploitation of this vulnerability may cause memory protectionHuawei EMUI
- CVE-2021-37115There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerabilHuawei EMUI
- CVE-2021-39986There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerabilHuawei EMUI
- CVE-2021-39991There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerabilHuawei EMUI
- CVE-2022-0534A vulnerability was found in htmldoc version 1.9.15 where the stack out-of-bounds read takes place in gif_get_code() and occurs when openinghtmldoc
- CVE-2022-23628Array literal misordering in github.com/open-policy-agent/opaopen-policy-agent opa · github.com/open-policy-agent/opa
- CVE-2022-23621Missing authorization in xwiki-platformxwiki-platform · org.xwiki.platform:xwiki-platform-oldcore
- CVE-2022-23620Path traversal in xwiki-platform-skin-skinxxwiki-platform · org.xwiki.platform:xwiki-platform-skin-ski…
- CVE-2022-23619Information exposure in xwiki-platformxwiki-platform · org.xwiki.platform:xwiki-platform-web
- CVE-2022-23618Open Redirect in xwiki-platformxwiki-platform · org.xwiki.platform:xwiki-platform-oldcore
- CVE-2022-23617Missing authorization in xwiki-platformxwiki-platform · org.xwiki.platform:xwiki-platform-oldcore
- CVE-2022-23615Partial authorization bypass on document save in xwiki-platformxwiki-platform · org.xwiki.platform:xwiki-platform-oldcore
- CVE-2022-22567Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient verification of data authenticity vulnerability.Dell CPG BIOS
- CVE-2022-22566Select Dell Client Commercial and Consumer platforms contain a pre-boot direct memory access (DMA) vulnerability.Dell CPG BIOS
- CVE-2021-45286Directory Traversal vulnerability exists in ZZCMS 2021 via the skin parameter in 1) index.php, 2) bottom.php, and 3) top_index.php.
- CVE-2021-41442An HTTP smuggling attack in the web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to DoS t
- CVE-2021-45331An Authentication Bypass vulnerability exists in Gitea before 1.5.0, which could let a malicious user gain privileges.code.gitea.io/gitea
- CVE-2021-45330An issue exsits in Gitea through 1.15.7, which could let a malicious user gain privileges due to client side cookies not being deleted and tcode.gitea.io/gitea
- CVE-2021-41441A DoS attack in the web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to reboot the router
- CVE-2022-23280Microsoft Outlook for Mac Security Feature Bypass VulnerabilityMicrosoft Outlook 2016 for Mac
- CVE-2022-23271Microsoft Dynamics GP Elevation Of Privilege VulnerabilityMicrosoft Dynamics GP
- CVE-2022-23269Microsoft Dynamics GP Spoofing VulnerabilityMicrosoft Dynamics GP
- CVE-2022-23255Microsoft OneDrive for Android Security Feature Bypass VulnerabilityMicrosoft OneDrive for Android
- CVE-2022-23254Microsoft Power BI Information Disclosure VulnerabilityMicrosoft PowerBI-client JS SDK
- CVE-2022-23252Microsoft Office Information Disclosure VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise
- CVE-2022-22716Microsoft Excel Information Disclosure VulnerabilityMicrosoft SharePoint Enterprise Server 2013 Service Pack… +2
- CVE-2022-22712Windows Hyper-V Denial of Service VulnerabilityMicrosoft Windows
- CVE-2022-22710Windows Common Log File System Driver Denial of Service VulnerabilityMicrosoft Windows
- CVE-2022-22002Windows User Account Profile Picture Denial of Service VulnerabilityMicrosoft Windows
- CVE-2022-21998Windows Common Log File System Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-21985Windows Remote Access Connection Manager Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-21968Microsoft SharePoint Server Security Feature Bypass VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2021-44912In XE 1.116, when uploading the Normal button, there is no restriction on the file suffix, which leads to any file uploading to the files di
- CVE-2021-44911XE before 1.11.6 is vulnerable to Unrestricted file upload via modules/menu/menu.admin.controller.php.
- CVE-2022-23312A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP9 Security Patch 1).Siemens Spectrum Power
- CVE-2022-23102A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0).Siemens SINEMA Remote Connect Server
- CVE-2021-46161A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions).Siemens Simcenter Femap
- CVE-2021-46160A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions).Siemens Simcenter Femap
- CVE-2021-46159A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions).Siemens Simcenter Femap
- CVE-2021-46158A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions).Siemens Simcenter Femap
- CVE-2021-46157A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions).Siemens Simcenter Femap
- CVE-2021-46156A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions).Siemens Simcenter Femap
- CVE-2021-46155A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions).Siemens Simcenter Femap
- CVE-2021-46154A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions).Siemens Simcenter Femap
- CVE-2021-46153A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions).Siemens Simcenter Femap
- CVE-2021-46152A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions).Siemens Simcenter Femap
- CVE-2021-46151A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions).Siemens Simcenter Femap
- CVE-2021-45106A vulnerability has been identified in SICAM TOOLBOX II (All versions).Siemens SICAM TOOLBOX II
- CVE-2021-44018A vulnerability has been identified in JT2Go (All versions < V13.2.0.7), Solid Edge SE2021 (All versions < SE2021MP9), Solid Edge SE2022 (AlSiemens JT2Go · Siemens Solid Edge SE2021 +2
- CVE-2021-44016A vulnerability has been identified in JT2Go (All versions < V13.2.0.7), Solid Edge SE2021 (All versions < SE2021MP9), Solid Edge SE2022 (AlSiemens JT2Go · Siemens Solid Edge SE2021 +2
- CVE-2021-44000A vulnerability has been identified in JT2Go (All versions < V13.2.0.7), Solid Edge SE2021 (All versions < SE2021MP9), Solid Edge SE2022 (AlSiemens JT2Go · Siemens Solid Edge SE2021 +2
- CVE-2021-40363A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All versionSiemens SIMATIC PCS 7 · Siemens SIMATIC WinCC V15 and ea… +1
- CVE-2021-40360A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All versionSiemens SIMATIC PCS 7 · Siemens SIMATIC WinCC V15 and ea… +1
- CVE-2021-37194A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions < V10.3.3.3 onlSiemens COMOS
- CVE-2021-3813Improper Privilege Management in chatwoot/chatwootchatwoot/chatwoot
- CVE-2022-0539Cross-site Scripting (XSS) - Stored in ptrofimov/beanstalk_consoleptrofimov/beanstalk_console
- CVE-2022-0538Jenkins 2.333 and earlier, LTS 2.319.2 and earlier defines custom XStream converters that have not been updated to apply the protections forJenkins project Jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2021-46354Thinfinity VirtualUI 2.1.28.0, 2.1.32.1 and 2.5.26.2, fixed in version 3.0 is affected by an information disclosure vulnerability in the par
- CVE-2022-23378A Cross-Site Scripting (XSS) vulnerability exists within the 3.2.2 version of TastyIgniter.
- CVE-2021-25939ArangoDB - Blind SSRF when Downloading Foxx Service from URLarangodb
- CVE-2021-40837Denial-of-Service (DoS) VulnerabilityF-Secure endpoint protection products on Windows and Mac. F…
- CVE-2022-0536Improper Removal of Sensitive Information Before Storage or Transfer in follow-redirects/follow-redirectsfollow-redirects/follow-redirects · follow-redirects
- CVE-2022-24694In Mahara 20.10 before 20.10.4, 21.04 before 21.04.3, and 21.10 before 21.10.1, the names of folders in the Files area can be seen by a pers
- CVE-2022-0527Cross-site Scripting (XSS) - Stored in chatwoot/chatwootchatwoot/chatwoot
- CVE-2022-24682An issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15 patch 30 (update 1), as exploited in the w
- CVE-2021-46360Authenticated remote code execution (RCE) in Composr-CMS 10.0.39 and earlier allows remote attackers to execute arbitrary code via uploading
- CVE-2022-22807A CWE-1021 Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause unintended modifications of the producEcoStruxure EV Charging Expert (formerly known as EVlink Lo…
- CVE-2022-22808A CWE-352: Cross-Site Request Forgery (CSRF) exists that could cause a remote attacker to gain unauthorized access to the product when conduEcoStruxure EV Charging Expert (formerly known as EVlink Lo…
- CVE-2022-22809A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow modifications of the touch configurations in aspaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeL…