# CVEs published 2022-02-09

269 CVEs were published on February 9, 2022: 3 critical, 69 high. 5 are now in CISA KEV. Days are UTC.

- [CVE-2021-22954](https://cve.now/CVE-2021-22954.md): A cross-site request forgery vulnerability exists in Concrete CMS \<v9 that could allow an attacker to make requests on behalf of other users (no CVSS, https://github.com/concrete5/concrete5 · concrete5/concrete5)
- [CVE-2022-21825](https://cve.now/CVE-2022-21825.md): An Improper Access Control vulnerability exists in Citrix Workspace App for Linux 2012 - 2111 with App Protection installed that can allow a (no CVSS, Citrix Workspace App for Linux)
- [CVE-2022-0529](https://cve.now/CVE-2022-0529.md): A flaw was found in Unzip. (no CVSS, unzip)
- [CVE-2022-0530](https://cve.now/CVE-2022-0530.md): A flaw was found in Unzip. (no CVSS, unzip)
- [CVE-2021-26616](https://cve.now/CVE-2021-26616.md): SecuwaySSL OS command injection vulnerability (CVSS 7.8, secuwiz co. SecuwaySSL U V2.0 client for MacOS)
- [CVE-2022-20046](https://cve.now/CVE-2022-20046.md): In Bluetooth, there is a possible memory corruption due to a logic error. (no CVSS, MediaTek MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385)
- [CVE-2022-20045](https://cve.now/CVE-2022-20045.md): In Bluetooth, there is a possible service crash due to a use after free. (no CVSS, MediaTek MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385)
- [CVE-2022-20044](https://cve.now/CVE-2022-20044.md): In Bluetooth, there is a possible service crash due to a use after free. (no CVSS, MediaTek MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385)
- [CVE-2022-20043](https://cve.now/CVE-2022-20043.md): In Bluetooth, there is a possible escalation of privilege due to a missing permission check. (no CVSS, MediaTek MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385)
- [CVE-2022-20041](https://cve.now/CVE-2022-20041.md): In Bluetooth, there is a possible escalation of privilege due to a missing permission check. (no CVSS, MediaTek MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385)
- [CVE-2022-20042](https://cve.now/CVE-2022-20042.md): In Bluetooth, there is a possible information disclosure due to incorrect error handling. (no CVSS, MediaTek MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385)
- [CVE-2022-20040](https://cve.now/CVE-2022-20040.md): In power\_hal\_manager\_service, there is a possible permission bypass due to a stack-based buffer overflow. (no CVSS, MediaTek MT6735, MT6737, MT6739, MT6755, MT6757, MT6761, MT…)
- [CVE-2022-20039](https://cve.now/CVE-2022-20039.md): In ccu driver, there is a possible memory corruption due to an integer overflow. (no CVSS, MediaTek MT6833, MT6853, MT6873, MT6877, MT6883, MT6893, MT…)
- [CVE-2022-20038](https://cve.now/CVE-2022-20038.md): In ccu driver, there is a possible memory corruption due to an incorrect bounds check. (no CVSS, MediaTek MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT…)
- [CVE-2022-20036](https://cve.now/CVE-2022-20036.md): In ion driver, there is a possible information disclosure due to an incorrect bounds check. (no CVSS, MediaTek MT6735, MT6737, MT6739, MT6750, MT6750S, MT6753, M…)
- [CVE-2022-20037](https://cve.now/CVE-2022-20037.md): In ion driver, there is a possible information disclosure due to an incorrect bounds check. (no CVSS, MediaTek MT6735, MT6737, MT6739, MT6750, MT6750S, MT6753, M…)
- [CVE-2022-20035](https://cve.now/CVE-2022-20035.md): In vcu driver, there is a possible information disclosure due to a use after free. (no CVSS, MediaTek MT6768, MT6769, MT6779, MT6781, MT6785, MT6833, MT…)
- [CVE-2022-20034](https://cve.now/CVE-2022-20034.md): In Preloader XFLASH, there is a possible escalation of privilege due to an improper certificate validation. (no CVSS, MediaTek MT6580, MT6735, MT6739, MT6761, MT6763, MT6765, MT…)
- [CVE-2022-20017](https://cve.now/CVE-2022-20017.md): In ion driver, there is a possible information disclosure due to an incorrect bounds check. (no CVSS, MediaTek MT6765, MT6785, MT6833, MT6853, MT6873, MT6877, MT…)
- [CVE-2022-20033](https://cve.now/CVE-2022-20033.md): In camera driver, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, MediaTek MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT…)
- [CVE-2022-20032](https://cve.now/CVE-2022-20032.md): In vow driver, there is a possible memory corruption due to a race condition. (no CVSS, MediaTek MT6781, MT6785, MT6833, MT6853, MT6853T, MT6873, M…)
- [CVE-2022-20031](https://cve.now/CVE-2022-20031.md): In fb driver, there is a possible memory corruption due to a use after free. (no CVSS, MediaTek MT6580, MT6582E, MT6582H, MT6582T, MT6582W, MT6582…)
- [CVE-2022-20029](https://cve.now/CVE-2022-20029.md): In cmdq driver, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, MediaTek MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT…)
- [CVE-2022-20030](https://cve.now/CVE-2022-20030.md): In vow driver, there is a possible out of bounds write due to a stack-based buffer overflow. (no CVSS, MediaTek MT6781, MT6785, MT6833, MT6853, MT6853T, MT6873, M…)
- [CVE-2022-20028](https://cve.now/CVE-2022-20028.md): In Bluetooth, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385)
- [CVE-2022-20026](https://cve.now/CVE-2022-20026.md): In Bluetooth, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385)
- [CVE-2022-20027](https://cve.now/CVE-2022-20027.md): In Bluetooth, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385)
- [CVE-2022-20025](https://cve.now/CVE-2022-20025.md): In Bluetooth, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT8167, MT8175, MT8183, MT8362A, MT8365, MT8385)
- [CVE-2022-20024](https://cve.now/CVE-2022-20024.md): In system service, there is a possible permission bypass due to a missing permission check. (no CVSS, MediaTek MT6580, MT6739, MT6750, MT6761, MT6762, MT6763, MT…)
- [CVE-2022-0162](https://cve.now/CVE-2022-0162.md): Vulnerability in TP-LinK TL-WR841N wireless router (CVSS 8.4, TP-Link TL-WR841N)
- [CVE-2021-26613](https://cve.now/CVE-2021-26613.md): tobesoft nexacro arbitrary file creation vulnerability (CVSS 8.1, tobesoft co. Nexacro)
- [CVE-2022-22544](https://cve.now/CVE-2022-22544.md): Solution Manager (Diagnostics Root Cause Analysis Tools) - version 720, allows an administrator to execute code on all connected Diagnostics (no CVSS, SAP SE SAP Solution Manager)
- [CVE-2022-22546](https://cve.now/CVE-2022-22546.md): Due to improper HTML encoding in input control summary, an authorized attacker can execute XSS vulnerability in SAP Business Objects Web Int (no CVSS, SAP SE SAP Business Objects Web Intelligence)
- [CVE-2022-22543](https://cve.now/CVE-2022-22543.md): SAP NetWeaver Application Server for ABAP (Kernel) and ABAP Platform (Kernel) - versions KERNEL 7.22, 8.04, 7.49, 7.53, 7.77, 7.81, 7.85, 7. (no CVSS, SAP SE SAP NetWeaver Application Server for ABAP (Kernel) a…)
- [CVE-2022-22545](https://cve.now/CVE-2022-22545.md): A high privileged user who has access to transaction SM59 can read connection details stored with the destination for http calls in SAP NetW (no CVSS, SAP SE SAP NetWeaver Application Server ABAP and ABAP Platf…)
- [CVE-2022-22542](https://cve.now/CVE-2022-22542.md): S/4HANA Supplier Factsheet exposes the private address and bank details of an Employee Business Partner with Supplier Role, AND Enterprise S (no CVSS, SAP SE SAP S/4HANA)
- [CVE-2022-22539](https://cve.now/CVE-2022-22539.md): When a user opens a manipulated JPEG file format (.jpg, 2d.x3d) received from untrusted sources in SAP 3D Visual Enterprise Viewer - version (no CVSS, SAP SE SAP 3D Visual Enterprise Viewer)
- [CVE-2022-22536](https://cve.now/CVE-2022-22536.md): SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher (CVSS 9.8, KEV, SAP SE SAP NetWeaver and ABAP Platform · SAP SE SAP Web… +1)
- [CVE-2022-22540](https://cve.now/CVE-2022-22540.md): SAP NetWeaver AS ABAP (Workplace Server) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 787, allows an attacker to e (no CVSS, SAP SE SAP NetWeaver AS ABAP)
- [CVE-2022-22538](https://cve.now/CVE-2022-22538.md): When a user opens a manipulated Adobe Illustrator file format (.ai, ai.x3d) received from untrusted sources in SAP 3D Visual Enterprise View (no CVSS, SAP SE SAP 3D Visual Enterprise Viewer)
- [CVE-2022-22537](https://cve.now/CVE-2022-22537.md): When a user opens a manipulated Tagged Image File Format (.tiff, 2d.x3d)) received from untrusted sources in SAP 3D Visual Enterprise Viewer (no CVSS, SAP SE SAP 3D Visual Enterprise Viewer)
- [CVE-2022-22534](https://cve.now/CVE-2022-22534.md): Due to insufficient encoding of user input, SAP NetWeaver allows an unauthenticated attacker to inject code that may expose sensitive data l (no CVSS, SAP SE SAP NetWeaver)
- [CVE-2022-22535](https://cve.now/CVE-2022-22535.md): SAP ERP HCM Portugal - versions 600, 604, 608, does not perform necessary authorization checks for a report that reads the payroll data of e (no CVSS, SAP SE SAP ERP HCM)
- [CVE-2022-22533](https://cve.now/CVE-2022-22533.md): Due to improper error handling in SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.22EXT, 7 (no CVSS, SAP SE SAP NetWeaver Application Server Java)
- [CVE-2022-22528](https://cve.now/CVE-2022-22528.md): SAP Adaptive Server Enterprise (ASE) - version 16.0, installation makes an entry in the system PATH environment variable in Windows platform (no CVSS, SAP SE SAP Adaptive Server Enterprise)
- [CVE-2022-22532](https://cve.now/CVE-2022-22532.md): In SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7.22, 7.49, 7 (no CVSS, SAP SE SAP NetWeaver Application Server Java)
- [CVE-2022-24668](https://cve.now/CVE-2022-24668.md): A program using swift-nio-http2 is vulnerable to a denial of service attack caused by a network peer sending ALTSVC or ORIGIN frames. (no CVSS, Swift Project SwiftNIO HTTP2)
- [CVE-2022-24667](https://cve.now/CVE-2022-24667.md): A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HPACK-enco (no CVSS, Swift Project SwiftNIO HTTP2)
- [CVE-2022-24666](https://cve.now/CVE-2022-24666.md): A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 fra (no CVSS, Swift Project SwiftNIO HTTP2)
- [CVE-2022-22780](https://cve.now/CVE-2022-22780.md): Zoom Chat Susceptible to Zip Bombing (CVSS 4.7, Zoom Video Communications Zoom Client for Meetings for A… +3)
- [CVE-2022-22779](https://cve.now/CVE-2022-22779.md): Retained exploded messages in Keybase clients for macOS and Windows (CVSS 3.7, Zoom Video Communications Keybase Client for macOS · Zoom V…)
- [CVE-2021-39943](https://cve.now/CVE-2021-39943.md): An authorization logic error in the External Status Check API in GitLab EE affecting all versions starting from 14.1 before 14.3.6, all vers (CVSS 4.3, GitLab)
- [CVE-2022-0532](https://cve.now/CVE-2022-0532.md): An incorrect sysctls validation vulnerability was found in CRI-O 1.18 and earlier. (no CVSS, cri-o · github.com/cri-o/cri-o)
- [CVE-2021-22817](https://cve.now/CVE-2021-22817.md): A CWE-276: Incorrect Default Permissions vulnerability exists that could cause unauthorized access to the base installation directory leadin (no CVSS, Harmony/Magelis iPC Series (All Versions), Vijeo Designer (…)
- [CVE-2022-24321](https://cve.now/CVE-2022-24321.md): A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause Denial of Service against the Geo SCAD (no CVSS, ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 201…)
- [CVE-2022-24320](https://cve.now/CVE-2022-24320.md): A CWE-295: Improper Certificate Validation vulnerability exists that could allow a Man-in-theMiddle attack when communications between the c (no CVSS, ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 201…)
- [CVE-2022-24319](https://cve.now/CVE-2022-24319.md): A CWE-295: Improper Certificate Validation vulnerability exists that could allow a Man-in-theMiddle attack when communications between the c (no CVSS, ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 201…)
- [CVE-2022-22812](https://cve.now/CVE-2022-22812.md): A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists that could cause a web s (no CVSS, spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeL…)
- [CVE-2022-24318](https://cve.now/CVE-2022-24318.md): A CWE-326: Inadequate Encryption Strength vulnerability exists that could cause non-encrypted communication with the server when outdated ve (no CVSS, ClearSCADA (All Versions), EcoStruxure Geo SCADA Expert 201…)
- [CVE-2022-22811](https://cve.now/CVE-2022-22811.md): A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists that could induce users to perform unintended actions, leading to the over (no CVSS, spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeL…)
- [CVE-2022-22810](https://cve.now/CVE-2022-22810.md): A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to manipulate the adm (no CVSS, spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeL…)
- [CVE-2022-22813](https://cve.now/CVE-2022-22813.md): A CWE-798: Use of Hard-coded Credentials vulnerability exists. (no CVSS, Easergy P40 Series model numbers with Ethernet option bit a…)
- [CVE-2022-24317](https://cve.now/CVE-2022-24317.md): A CWE-862: Missing Authorization vulnerability exists that could cause information exposure when an attacker sends a specific message. (no CVSS, Interactive Graphical SCADA System Data Server)
- [CVE-2022-24316](https://cve.now/CVE-2022-24316.md): A CWE-665: Improper Initialization vulnerability exists that could cause information exposure when an attacker sends a specially crafted mes (no CVSS, Interactive Graphical SCADA System Data Server)
- [CVE-2022-24315](https://cve.now/CVE-2022-24315.md): A CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service when an attacker repeatedly sends a specially crafted (no CVSS, Interactive Graphical SCADA System Data Server)
- [CVE-2022-24314](https://cve.now/CVE-2022-24314.md): A CWE-125: Out-of-bounds Read vulnerability exists that could cause memory leaks potentially resulting in denial of service when an attacker (no CVSS, Interactive Graphical SCADA System Data Server)
- [CVE-2022-24313](https://cve.now/CVE-2022-24313.md): A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially leadin (no CVSS, Interactive Graphical SCADA System Data Server)
- [CVE-2022-24311](https://cve.now/CVE-2022-24311.md): A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing file (no CVSS, Interactive Graphical SCADA System Data Server)
- [CVE-2022-24312](https://cve.now/CVE-2022-24312.md): A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing file (no CVSS, Interactive Graphical SCADA System Data Server)
- [CVE-2022-24310](https://cve.now/CVE-2022-24310.md): A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service and (no CVSS, Interactive Graphical SCADA System Data Server)
- [CVE-2022-21220](https://cve.now/CVE-2022-21220.md): Improper restriction of XML external entity for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to (CVSS 7.8, Intel(R) Quartus(R) Prime Pro Edition)
- [CVE-2022-21205](https://cve.now/CVE-2022-21205.md): Improper restriction of XML external entity reference in DSP Builder Pro for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may a (CVSS 7.5, Intel(R) Quartus(R) Prime Pro Edition)
- [CVE-2022-21218](https://cve.now/CVE-2022-21218.md): Uncaught exception in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable (CVSS 5.5, Intel(R) Trace Analyzer and Collector)
- [CVE-2022-21226](https://cve.now/CVE-2022-21226.md): Out-of-bounds read in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable (CVSS 5.5, Intel(R) Trace Analyzer and Collector)
- [CVE-2022-21157](https://cve.now/CVE-2022-21157.md): Improper access control in the Intel(R) Smart Campus Android application before version 6.1 may allow authenticated user to potentially enab (CVSS 5.5, Intel(R) Smart Campus Android application)
- [CVE-2022-21203](https://cve.now/CVE-2022-21203.md): Improper permissions in the SafeNet Sentinel driver for Intel(R) Quartus(R) Prime Standard Edition before version 21.1 may allow an authenti (CVSS 7.8, Intel(R) Quartus(R) Prime Standard Edition)
- [CVE-2022-21204](https://cve.now/CVE-2022-21204.md): Improper permissions for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable esc (CVSS 7.8, Intel(R) Quartus(R) Prime Pro Edition)
- [CVE-2022-21156](https://cve.now/CVE-2022-21156.md): Access of uninitialized pointer in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potent (CVSS 5.5, Intel(R) Trace Analyzer and Collector)
- [CVE-2021-44454](https://cve.now/CVE-2021-44454.md): Improper input validation in a third-party component for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticate (CVSS 7.8, Intel(R) Quartus(R) Prime Pro Edition)
- [CVE-2022-21153](https://cve.now/CVE-2022-21153.md): Improper access control in the Intel(R) Capital Global Summit Android application may allow an authenticated user to potentially enable info (CVSS 5.5, Intel(R) Capital Global Summit Android application)
- [CVE-2022-21174](https://cve.now/CVE-2022-21174.md): Improper access control in a third-party component of Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated u (CVSS 7.8, Intel(R) Quartus(R) Prime Pro Edition)
- [CVE-2022-21133](https://cve.now/CVE-2022-21133.md): Out-of-bounds read in the Intel(R) Trace Analyzer and Collector before version 2021.5 may allow an authenticated user to potentially enable (CVSS 5.5, Intel(R) Trace Analyzer and Collector)
- [CVE-2021-33155](https://cve.now/CVE-2021-33155.md): Improper input validation in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.100 may (CVSS 5.7, Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R)…)
- [CVE-2021-33166](https://cve.now/CVE-2021-33166.md): Incorrect default permissions for the Intel(R) RXT for Chromebook application, all versions, may allow an authenticated user to potentially (CVSS 5.5, version)
- [CVE-2021-33129](https://cve.now/CVE-2021-33129.md): Incorrect default permissions in the software installer for the Intel(R) Advisor before version 2021.4.0 may allow an authenticated user to (CVSS 7.8, Intel(R) Advisor)
- [CVE-2021-33139](https://cve.now/CVE-2021-33139.md): Improper conditions check in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.100 may (CVSS 5.7, Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R)…)
- [CVE-2021-33137](https://cve.now/CVE-2021-33137.md): Out-of-bounds write in the Intel(R) Kernelflinger project may allow an authenticated user to potentially enable escalation of privilege via (CVSS 7.8, Intel(R) Kernelflinger project)
- [CVE-2021-33120](https://cve.now/CVE-2021-33120.md): Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel Atom(R) Processors may allow authenticated (CVSS 5.4, Intel Atom(R) Processors)
- [CVE-2021-33147](https://cve.now/CVE-2021-33147.md): Improper conditions check in the Intel(R) IPP Crypto library before version 2021.2 may allow an authenticated user to potentially enable inf (CVSS 5.5, Intel(R) IPP Crypto library)
- [CVE-2021-33119](https://cve.now/CVE-2021-33119.md): Improper access control in the Intel(R) RealSense(TM) DCM before version 20210625 may allow an authenticated user to potentially enable info (CVSS 5.5, Intel(R) RealSense(TM) DCM)
- [CVE-2021-33114](https://cve.now/CVE-2021-33114.md): Improper input validation for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and Killer(TM) WiFi in Windows 10 and 11 may (CVSS 5.7, Intel(R) PROSet/Wireless WiFi in multiple operating systems…)
- [CVE-2021-33105](https://cve.now/CVE-2021-33105.md): Out-of-bounds read in some Intel(R) Core(TM) processors with Radeon(TM) RX Vega M GL integrated graphics before version 21.10 may allow an a (CVSS 5.5, Intel® Core™ Processors with Radeon™ RX Vega M GL Graphics…)
- [CVE-2021-33110](https://cve.now/CVE-2021-33110.md): Improper input validation for some Intel(R) Wireless Bluetooth(R) products and Killer(TM) Bluetooth(R) products in Windows 10 and 11 before (CVSS 6.5, Intel(R) Wireless Bluetooth(R) products and Killer(TM) Blue…)
- [CVE-2021-33113](https://cve.now/CVE-2021-33113.md): Improper input validation for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and Killer(TM) WiFi in Windows 10 and 11 may (CVSS 8.1, Intel(R) PROSet/Wireless WiFi in multiple operating systems…)
- [CVE-2021-33115](https://cve.now/CVE-2021-33115.md): Improper input validation for some Intel(R) PROSet/Wireless WiFi in UEFI may allow an unauthenticated user to potentially enable escalation (CVSS 8.8, Intel(R) PROSet/Wireless WiFi in UEFI)
- [CVE-2021-33096](https://cve.now/CVE-2021-33096.md): Improper isolation of shared resources in network on chip for the Intel(R) 82599 Ethernet Controllers and Adapters may allow an authenticate (CVSS 5.5, Intel(R) 82599 Ethernet Controllers and Adapters)
- [CVE-2021-33107](https://cve.now/CVE-2021-33107.md): Insufficiently protected credentials in USB provisioning for Intel(R) AMT SDK before version 16.0.3, Intel(R) SCS before version 12.2 and In (CVSS 4.6, Intel(R) AMT SDK before)
- [CVE-2021-33101](https://cve.now/CVE-2021-33101.md): Uncontrolled search path in the Intel(R) GPA software before version 21.2 may allow an authenticated user to potentially enable escalation o (CVSS 7.8, Intel(R) GPA software)
- [CVE-2021-33061](https://cve.now/CVE-2021-33061.md): Insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters may allow an authenticated user to potentially (CVSS 5.5, Intel(R) 82599 Ethernet Controllers and Adapters)
- [CVE-2021-0178](https://cve.now/CVE-2021-0178.md): Improper input validation in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthentica (CVSS 6.5, Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Wind…)
- [CVE-2021-23152](https://cve.now/CVE-2021-23152.md): Improper access control in the Intel(R) Advisor software before version 2021.2 may allow an authenticated user to potentially enable escalat (CVSS 7.8, Intel(R) Advisor software)
- [CVE-2021-0183](https://cve.now/CVE-2021-0183.md): Improper Validation of Specified Index, Position, or Offset in Input in software for some Intel(R) PROSet/Wireless Wi-Fi in multiple operati (CVSS 6.5, Intel(R) PROSet/Wireless Wi-Fi in multiple operating system…)
- [CVE-2021-33068](https://cve.now/CVE-2021-33068.md): Null pointer dereference in subsystem for Intel(R) AMT before versions 15.0.35 may allow an authenticated user to potentially enable denial (CVSS 6.5, Intel(R) AMT)
- [CVE-2021-0177](https://cve.now/CVE-2021-0177.md): Improper Validation of Consistency within input in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may (CVSS 6.5, Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Wind…)
- [CVE-2021-0179](https://cve.now/CVE-2021-0179.md): Improper Use of Validation Framework in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an u (CVSS 6.5, Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Wind…)
- [CVE-2021-0176](https://cve.now/CVE-2021-0176.md): Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Win (CVSS 4.4, Intel(R) PROSet/Wireless Wi-Fi in multiple operating system…)
- [CVE-2021-0169](https://cve.now/CVE-2021-0169.md): Uncontrolled Search Path Element in software for Intel(R) PROSet/Wireless Wi-Fi in Windows 10 and 11 may allow a privileged user to potentia (CVSS 6.7, Intel(R) PROSet/Wireless Wi-Fi in Windows 10 and)
- [CVE-2021-0174](https://cve.now/CVE-2021-0174.md): Improper Use of Validation Framework in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) W (CVSS 6.5, Intel(R) PROSet/Wireless Wi-Fi in multiple operating system…)
- [CVE-2021-0170](https://cve.now/CVE-2021-0170.md): Exposure of Sensitive Information to an Unauthorized Actor in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems (CVSS 5.5, Intel(R) PROSet/Wireless Wi-Fi in multiple operating system…)
- [CVE-2021-0175](https://cve.now/CVE-2021-0175.md): Improper Validation of Specified Index, Position, or Offset in Input in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operati (CVSS 6.5, Intel(R) PROSet/Wireless Wi-Fi in multiple operating system…)
- [CVE-2021-0172](https://cve.now/CVE-2021-0172.md): Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Win (CVSS 6.5, Intel(R) PROSet/Wireless Wi-Fi in multiple operating system…)
- [CVE-2021-0173](https://cve.now/CVE-2021-0173.md): Improper Validation of Consistency within input in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some K (CVSS 6.5, Intel(R) PROSet/Wireless Wi-Fi in multiple operating system…)
- [CVE-2021-0168](https://cve.now/CVE-2021-0168.md): Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Win (CVSS 6.7, Intel(R) PROSet/Wireless Wi-Fi in multiple operating system…)
- [CVE-2021-0171](https://cve.now/CVE-2021-0171.md): Improper access control in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an authenticated (CVSS 5.5, Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Wind…)
- [CVE-2021-0166](https://cve.now/CVE-2021-0166.md): Exposure of Sensitive Information to an Unauthorized Actor in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems (CVSS 6.7, Intel(R) PROSet/Wireless Wi-Fi in multiple operating system…)
- [CVE-2021-0167](https://cve.now/CVE-2021-0167.md): Improper access control in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user (CVSS 6.7, Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Wind…)
- [CVE-2021-0165](https://cve.now/CVE-2021-0165.md): Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 an (CVSS 6.5, Intel(R) PROSet/Wireless Wi-Fi in multiple operating system…)
- [CVE-2021-0164](https://cve.now/CVE-2021-0164.md): Improper access control in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 and (CVSS 7.8, Intel(R) PROSet/Wireless Wi-Fi in multiple operating system…)
- [CVE-2021-0161](https://cve.now/CVE-2021-0161.md): Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 an (CVSS 6.7, Intel(R) PROSet/Wireless Wi-Fi in multiple operating system…)
- [CVE-2021-0162](https://cve.now/CVE-2021-0162.md): Improper input validation in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an unauthentica (CVSS 8.8, Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Wind…)
- [CVE-2021-0163](https://cve.now/CVE-2021-0163.md): Improper Validation of Consistency within input in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may (CVSS 8.8, Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Wind…)
- [CVE-2021-0156](https://cve.now/CVE-2021-0156.md): Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation o (CVSS 7.8, Intel(R) Processors)
- [CVE-2021-0127](https://cve.now/CVE-2021-0127.md): Insufficient control flow management in some Intel(R) Processors may allow an authenticated user to potentially enable a denial of service v (CVSS 5.5, Intel(R) Processors)
- [CVE-2021-0147](https://cve.now/CVE-2021-0147.md): Improper locking in the Power Management Controller (PMC) for some Intel Chipset firmware before versions pmc\_fw\_lbg\_c1-21ww02a and pmc\_fw\_l (CVSS 4.4, Intel Chipset firmware)
- [CVE-2021-0124](https://cve.now/CVE-2021-0124.md): Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privile (CVSS 6.6, Intel(R) Processors)
- [CVE-2021-0118](https://cve.now/CVE-2021-0118.md): Out-of-bounds read in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege (CVSS 6.7, Intel(R) Processors)
- [CVE-2021-0125](https://cve.now/CVE-2021-0125.md): Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privile (CVSS 6.6, Intel(R) Processors)
- [CVE-2021-0145](https://cve.now/CVE-2021-0145.md): Improper initialization of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information di (CVSS 5.5, Intel(R) Processors)
- [CVE-2021-0119](https://cve.now/CVE-2021-0119.md): Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privile (CVSS 6.2, Intel(R) Processors)
- [CVE-2021-0116](https://cve.now/CVE-2021-0116.md): Out-of-bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privileg (CVSS 7.8, Intel(R) Processors)
- [CVE-2021-0107](https://cve.now/CVE-2021-0107.md): Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privileg (CVSS 6.7, Intel(R) Processors)
- [CVE-2021-0076](https://cve.now/CVE-2021-0076.md): Improper Validation of Specified Index, Position, or Offset in Input in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operati (CVSS 5.5, Intel(R) PROSet/Wireless Wi-Fi in multiple operating system…)
- [CVE-2021-0115](https://cve.now/CVE-2021-0115.md): Buffer overflow in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via l (CVSS 6.7, Intel(R) Processors)
- [CVE-2021-0111](https://cve.now/CVE-2021-0111.md): NULL pointer dereference in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of pri (CVSS 6.7, Intel(R) Processors)
- [CVE-2021-0117](https://cve.now/CVE-2021-0117.md): Pointer issues in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via (CVSS 7.8, Intel(R) Processors)
- [CVE-2021-0092](https://cve.now/CVE-2021-0092.md): Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service v (CVSS 4.4, Intel(R) Processors)
- [CVE-2021-0103](https://cve.now/CVE-2021-0103.md): Insufficient control flow management in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escal (CVSS 6.7, Intel(R) Processors)
- [CVE-2021-0091](https://cve.now/CVE-2021-0091.md): Improper access control in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable an escalation o (CVSS 7.8, Intel(R) Processors)
- [CVE-2021-0093](https://cve.now/CVE-2021-0093.md): Incorrect default permissions in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of ser (CVSS 4.4, Intel(R) Processors)
- [CVE-2021-0060](https://cve.now/CVE-2021-0060.md): Insufficient compartmentalization in HECI subsystem for the Intel(R) SPS before versions SPS\_E5\_04.01.04.516.0, SPS\_E5\_04.04.04.033.0, SPS\_E (CVSS 6.6, Intel(R) SPS)
- [CVE-2021-0072](https://cve.now/CVE-2021-0072.md): Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Win (CVSS 5.5, Intel(R) PROSet/Wireless Wi-Fi in multiple operating system…)
- [CVE-2021-0099](https://cve.now/CVE-2021-0099.md): Insufficient control flow management in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an e (CVSS 7.8, Intel(R) Processors)
- [CVE-2021-0066](https://cve.now/CVE-2021-0066.md): Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) Wi-Fi in Windows 10 an (CVSS 8.4, Intel(R) PROSet/Wireless Wi-Fi in multiple operating system…)
- [CVE-2022-23049](https://cve.now/CVE-2022-23049.md): Exponent CMS 2.6.0patch2 allows an authenticated user to inject persistent JavaScript code on the "User-Agent" header when logging in. (no CVSS, Exponent CMS)
- [CVE-2022-23048](https://cve.now/CVE-2022-23048.md): Exponent CMS 2.6.0patch2 allows an authenticated admin user to upload a malicious extension in the format of a ZIP file with a PHP file insi (no CVSS, Exponent CMS)
- [CVE-2021-40015](https://cve.now/CVE-2021-40015.md): There is a race condition vulnerability in the binder driver subsystem in the kernel.Successful exploitation of this vulnerability may affec (no CVSS, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2022-23047](https://cve.now/CVE-2022-23047.md): Exponent CMS 2.6.0patch2 allows an authenticated admin user to inject persistent JavaScript code inside the "Site/Organization Name","Site T (no CVSS, Exponent CMS)
- [CVE-2021-40044](https://cve.now/CVE-2021-40044.md): There is a permission verification vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may cause unauthorize (no CVSS, Huawei EMUI · Huawei Magic UI)
- [CVE-2021-40045](https://cve.now/CVE-2021-40045.md): There is a vulnerability of signature verification mechanism failure in system upgrade through recovery mode.Successful exploitation of this (no CVSS, Huawei EMUI · Huawei Magic UI +1)
- [CVE-2021-39994](https://cve.now/CVE-2021-39994.md): There is an arbitrary address access vulnerability with the product line test code.Successful exploitation of this vulnerability may affect (no CVSS, Huawei EMUI)
- [CVE-2021-39997](https://cve.now/CVE-2021-39997.md): There is a vulnerability of unstrict input parameter verification in the audio assembly.Successful exploitation of this vulnerability may ca (no CVSS, Huawei EMUI)
- [CVE-2021-39992](https://cve.now/CVE-2021-39992.md): There is an improper security permission configuration vulnerability on ACPU.Successful exploitation of this vulnerability may affect servic (no CVSS, Huawei EMUI)
- [CVE-2021-37107](https://cve.now/CVE-2021-37107.md): There is an improper memory access permission configuration on ACPU.Successful exploitation of this vulnerability may cause out-of-bounds ac (no CVSS, Huawei EMUI)
- [CVE-2021-37109](https://cve.now/CVE-2021-37109.md): There is a security protection bypass vulnerability with the modem.Successful exploitation of this vulnerability may cause memory protection (no CVSS, Huawei EMUI)
- [CVE-2021-37115](https://cve.now/CVE-2021-37115.md): There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerabil (no CVSS, Huawei EMUI)
- [CVE-2021-39986](https://cve.now/CVE-2021-39986.md): There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerabil (no CVSS, Huawei EMUI)
- [CVE-2021-39991](https://cve.now/CVE-2021-39991.md): There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerabil (no CVSS, Huawei EMUI)
- [CVE-2022-0534](https://cve.now/CVE-2022-0534.md): A vulnerability was found in htmldoc version 1.9.15 where the stack out-of-bounds read takes place in gif\_get\_code() and occurs when opening (no CVSS, htmldoc)
- [CVE-2022-23631](https://cve.now/CVE-2022-23631.md): Prototype Pollution leading to Remote Code Execution in superjson (CVSS 9.1, blitz-js superjson · superjson +1)
- [CVE-2022-23628](https://cve.now/CVE-2022-23628.md): Array literal misordering in github.com/open-policy-agent/opa (CVSS 6.3, open-policy-agent opa · github.com/open-policy-agent/opa)
- [CVE-2022-23622](https://cve.now/CVE-2022-23622.md): Cross site scripting in registration template in xwiki-platform (CVSS 7.4, xwiki-platform · org.xwiki.platform:xwiki-platform-web-temp…)
- [CVE-2022-23621](https://cve.now/CVE-2022-23621.md): Missing authorization in xwiki-platform (CVSS 5.5, xwiki-platform · org.xwiki.platform:xwiki-platform-oldcore)
- [CVE-2022-23620](https://cve.now/CVE-2022-23620.md): Path traversal in xwiki-platform-skin-skinx (CVSS 6.8, xwiki-platform · org.xwiki.platform:xwiki-platform-skin-ski…)
- [CVE-2022-23619](https://cve.now/CVE-2022-23619.md): Information exposure in xwiki-platform (CVSS 5.3, xwiki-platform · org.xwiki.platform:xwiki-platform-web)
- [CVE-2022-23618](https://cve.now/CVE-2022-23618.md): Open Redirect in xwiki-platform (CVSS 4.7, xwiki-platform · org.xwiki.platform:xwiki-platform-oldcore)
- [CVE-2022-23617](https://cve.now/CVE-2022-23617.md): Missing authorization in xwiki-platform (CVSS 6.5, xwiki-platform · org.xwiki.platform:xwiki-platform-oldcore)
- [CVE-2022-23616](https://cve.now/CVE-2022-23616.md): Remote code execution in xwiki-platform (CVSS 8.8, xwiki-platform · org.xwiki.platform:xwiki-platform-administ…)
- [CVE-2022-23615](https://cve.now/CVE-2022-23615.md): Partial authorization bypass on document save in xwiki-platform (CVSS 5.4, xwiki-platform · org.xwiki.platform:xwiki-platform-oldcore)
- [CVE-2022-22567](https://cve.now/CVE-2022-22567.md): Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient verification of data authenticity vulnerability. (CVSS 4.7, Dell CPG BIOS)
- [CVE-2022-22566](https://cve.now/CVE-2022-22566.md): Select Dell Client Commercial and Consumer platforms contain a pre-boot direct memory access (DMA) vulnerability. (CVSS 6.9, Dell CPG BIOS)
- [CVE-2021-36302](https://cve.now/CVE-2021-36302.md): All Dell EMC Integrated System for Microsoft Azure Stack Hub versions contain a privilege escalation vulnerability. (CVSS 9.9, Dell EMC Integrated System for Microsoft Azure Stack Hub)
- [CVE-2022-21660](https://cve.now/CVE-2022-21660.md): Missing authorization in gin-vue-admin (CVSS 8.1, flipped-aurora gin-vue-admin)
- [CVE-2021-45286](https://cve.now/CVE-2021-45286.md): Directory Traversal vulnerability exists in ZZCMS 2021 via the skin parameter in 1) index.php, 2) bottom.php, and 3) top\_index.php. (no CVSS)
- [CVE-2021-41442](https://cve.now/CVE-2021-41442.md): An HTTP smuggling attack in the web application of D-Link DIR-X1860 before v1.10WWB09\_Beta allows a remote unauthenticated attacker to DoS t (no CVSS)
- [CVE-2021-45331](https://cve.now/CVE-2021-45331.md): An Authentication Bypass vulnerability exists in Gitea before 1.5.0, which could let a malicious user gain privileges. (no CVSS, code.gitea.io/gitea)
- [CVE-2021-45330](https://cve.now/CVE-2021-45330.md): An issue exsits in Gitea through 1.15.7, which could let a malicious user gain privileges due to client side cookies not being deleted and t (no CVSS, code.gitea.io/gitea)
- [CVE-2021-41441](https://cve.now/CVE-2021-41441.md): A DoS attack in the web application of D-Link DIR-X1860 before v1.10WWB09\_Beta allows a remote unauthenticated attacker to reboot the router (no CVSS)
- [CVE-2022-23280](https://cve.now/CVE-2022-23280.md): Microsoft Outlook for Mac Security Feature Bypass Vulnerability (CVSS 5.3, Microsoft Outlook 2016 for Mac)
- [CVE-2022-23276](https://cve.now/CVE-2022-23276.md): SQL Server for Linux Containers Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft SQL Server 2019 for Linux Containers)
- [CVE-2022-23274](https://cve.now/CVE-2022-23274.md): Microsoft Dynamics GP Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Dynamics GP)
- [CVE-2022-23273](https://cve.now/CVE-2022-23273.md): Microsoft Dynamics GP Elevation Of Privilege Vulnerability (CVSS 7.1, Microsoft Dynamics GP)
- [CVE-2022-23272](https://cve.now/CVE-2022-23272.md): Microsoft Dynamics GP Elevation Of Privilege Vulnerability (CVSS 8.1, Microsoft Dynamics GP)
- [CVE-2022-23271](https://cve.now/CVE-2022-23271.md): Microsoft Dynamics GP Elevation Of Privilege Vulnerability (CVSS 6.5, Microsoft Dynamics GP)
- [CVE-2022-23269](https://cve.now/CVE-2022-23269.md): Microsoft Dynamics GP Spoofing Vulnerability (CVSS 5.4, Microsoft Dynamics GP)
- [CVE-2022-23256](https://cve.now/CVE-2022-23256.md): Azure Data Explorer Spoofing Vulnerability (CVSS 8.1, Microsoft Azure Data Explorer)
- [CVE-2022-23255](https://cve.now/CVE-2022-23255.md): Microsoft OneDrive for Android Security Feature Bypass Vulnerability (CVSS 5.9, Microsoft OneDrive for Android)
- [CVE-2022-23254](https://cve.now/CVE-2022-23254.md): Microsoft Power BI Information Disclosure Vulnerability (CVSS 4.9, Microsoft PowerBI-client JS SDK)
- [CVE-2022-23252](https://cve.now/CVE-2022-23252.md): Microsoft Office Information Disclosure Vulnerability (CVSS 5.5, Microsoft Office · Microsoft 365 Apps for Enterprise)
- [CVE-2022-22718](https://cve.now/CVE-2022-22718.md): Windows Print Spooler Elevation of Privilege Vulnerability (CVSS 7.8, KEV, Microsoft Windows)
- [CVE-2022-22717](https://cve.now/CVE-2022-22717.md): Windows Print Spooler Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2022-22716](https://cve.now/CVE-2022-22716.md): Microsoft Excel Information Disclosure Vulnerability (CVSS 5.5, Microsoft SharePoint Enterprise Server 2013 Service Pack… +2)
- [CVE-2022-22715](https://cve.now/CVE-2022-22715.md): Named Pipe File System Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-22712](https://cve.now/CVE-2022-22712.md): Windows Hyper-V Denial of Service Vulnerability (CVSS 5.6, Microsoft Windows)
- [CVE-2022-22710](https://cve.now/CVE-2022-22710.md): Windows Common Log File System Driver Denial of Service Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2022-22709](https://cve.now/CVE-2022-22709.md): VP9 Video Extensions Remote Code Execution Vulnerability (CVSS 7.8, Microsoft VP9 Video Extensions)
- [CVE-2022-22005](https://cve.now/CVE-2022-22005.md): Microsoft SharePoint Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2022-22004](https://cve.now/CVE-2022-22004.md): Microsoft Office ClickToRun Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Office 2013 Click-to-Run · Microsoft 365 Apps for…)
- [CVE-2022-22003](https://cve.now/CVE-2022-22003.md): Microsoft Office Graphics Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Office · Microsoft 365 Apps for Enterprise)
- [CVE-2022-22002](https://cve.now/CVE-2022-22002.md): Windows User Account Profile Picture Denial of Service Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2022-22001](https://cve.now/CVE-2022-22001.md): Windows Remote Access Connection Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-22000](https://cve.now/CVE-2022-22000.md): Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-21999](https://cve.now/CVE-2022-21999.md): Windows Print Spooler Elevation of Privilege Vulnerability (CVSS 7.8, KEV, Microsoft Windows)
- [CVE-2022-21998](https://cve.now/CVE-2022-21998.md): Windows Common Log File System Driver Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2022-21997](https://cve.now/CVE-2022-21997.md): Windows Print Spooler Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows)
- [CVE-2022-21996](https://cve.now/CVE-2022-21996.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-21995](https://cve.now/CVE-2022-21995.md): Windows Hyper-V Remote Code Execution Vulnerability (CVSS 7.9, Microsoft Windows)
- [CVE-2022-21994](https://cve.now/CVE-2022-21994.md): Windows DWM Core Library Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-21993](https://cve.now/CVE-2022-21993.md): Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2022-21992](https://cve.now/CVE-2022-21992.md): Windows Mobile Device Management Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-21991](https://cve.now/CVE-2022-21991.md): Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Visual Studio Code)
- [CVE-2022-21989](https://cve.now/CVE-2022-21989.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-21988](https://cve.now/CVE-2022-21988.md): Microsoft Office Visio Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Office · Microsoft 365 Apps for Enterprise)
- [CVE-2022-21987](https://cve.now/CVE-2022-21987.md): Microsoft SharePoint Server Spoofing Vulnerability (CVSS 8.0, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2022-21986](https://cve.now/CVE-2022-21986.md): .NET Denial of Service Vulnerability (CVSS 7.5, Microsoft Visual Studio · Microsoft .NET +14)
- [CVE-2022-21985](https://cve.now/CVE-2022-21985.md): Windows Remote Access Connection Manager Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2022-21984](https://cve.now/CVE-2022-21984.md): Windows DNS Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2022-21981](https://cve.now/CVE-2022-21981.md): Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-21974](https://cve.now/CVE-2022-21974.md): Roaming Security Rights Management Services Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2022-21971](https://cve.now/CVE-2022-21971.md): Windows Runtime Remote Code Execution Vulnerability (CVSS 7.8, KEV, Microsoft Windows)
- [CVE-2022-21968](https://cve.now/CVE-2022-21968.md): Microsoft SharePoint Server Security Feature Bypass Vulnerability (CVSS 4.3, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2022-21965](https://cve.now/CVE-2022-21965.md): Microsoft Teams Denial of Service Vulnerability (CVSS 7.5, Microsoft Teams for iOS · Microsoft Teams for Android +1)
- [CVE-2022-21957](https://cve.now/CVE-2022-21957.md): Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability (CVSS 7.2, Microsoft Dynamics 365 (on-premises))
- [CVE-2022-21927](https://cve.now/CVE-2022-21927.md): HEVC Video Extensions Remote Code Execution Vulnerability (CVSS 7.8, Microsoft HEVC Video Extension · Microsoft HEVC Video Exten…)
- [CVE-2022-21926](https://cve.now/CVE-2022-21926.md): HEVC Video Extensions Remote Code Execution Vulnerability (CVSS 7.8, Microsoft HEVC Video Extension · Microsoft HEVC Video Exten…)
- [CVE-2022-21844](https://cve.now/CVE-2022-21844.md): HEVC Video Extensions Remote Code Execution Vulnerability (CVSS 7.8, Microsoft HEVC Video Extension · Microsoft HEVC Video Exten…)
- [CVE-2021-44912](https://cve.now/CVE-2021-44912.md): In XE 1.116, when uploading the Normal button, there is no restriction on the file suffix, which leads to any file uploading to the files di (no CVSS)
- [CVE-2021-44911](https://cve.now/CVE-2021-44911.md): XE before 1.11.6 is vulnerable to Unrestricted file upload via modules/menu/menu.admin.controller.php. (no CVSS)
- [CVE-2022-23312](https://cve.now/CVE-2022-23312.md): A vulnerability has been identified in Spectrum Power 4 (All versions \< V4.70 SP9 Security Patch 1). (no CVSS, Siemens Spectrum Power)
- [CVE-2022-23102](https://cve.now/CVE-2022-23102.md): A vulnerability has been identified in SINEMA Remote Connect Server (All versions \< V2.0). (no CVSS, Siemens SINEMA Remote Connect Server)
- [CVE-2021-46161](https://cve.now/CVE-2021-46161.md): A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). (no CVSS, Siemens Simcenter Femap)
- [CVE-2021-46160](https://cve.now/CVE-2021-46160.md): A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). (no CVSS, Siemens Simcenter Femap)
- [CVE-2021-46159](https://cve.now/CVE-2021-46159.md): A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). (no CVSS, Siemens Simcenter Femap)
- [CVE-2021-46158](https://cve.now/CVE-2021-46158.md): A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). (no CVSS, Siemens Simcenter Femap)
- [CVE-2021-46157](https://cve.now/CVE-2021-46157.md): A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). (no CVSS, Siemens Simcenter Femap)
- [CVE-2021-46156](https://cve.now/CVE-2021-46156.md): A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). (no CVSS, Siemens Simcenter Femap)
- [CVE-2021-46155](https://cve.now/CVE-2021-46155.md): A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). (no CVSS, Siemens Simcenter Femap)
- [CVE-2021-46154](https://cve.now/CVE-2021-46154.md): A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). (no CVSS, Siemens Simcenter Femap)
- [CVE-2021-46153](https://cve.now/CVE-2021-46153.md): A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). (no CVSS, Siemens Simcenter Femap)
- [CVE-2021-46152](https://cve.now/CVE-2021-46152.md): A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). (no CVSS, Siemens Simcenter Femap)
- [CVE-2021-46151](https://cve.now/CVE-2021-46151.md): A vulnerability has been identified in Simcenter Femap V2020.2 (All versions), Simcenter Femap V2021.1 (All versions). (no CVSS, Siemens Simcenter Femap)
- [CVE-2021-45106](https://cve.now/CVE-2021-45106.md): A vulnerability has been identified in SICAM TOOLBOX II (All versions). (no CVSS, Siemens SICAM TOOLBOX II)
- [CVE-2021-44018](https://cve.now/CVE-2021-44018.md): A vulnerability has been identified in JT2Go (All versions \< V13.2.0.7), Solid Edge SE2021 (All versions \< SE2021MP9), Solid Edge SE2022 (Al (no CVSS, Siemens JT2Go · Siemens Solid Edge SE2021 +2)
- [CVE-2021-44016](https://cve.now/CVE-2021-44016.md): A vulnerability has been identified in JT2Go (All versions \< V13.2.0.7), Solid Edge SE2021 (All versions \< SE2021MP9), Solid Edge SE2022 (Al (no CVSS, Siemens JT2Go · Siemens Solid Edge SE2021 +2)
- [CVE-2021-44000](https://cve.now/CVE-2021-44000.md): A vulnerability has been identified in JT2Go (All versions \< V13.2.0.7), Solid Edge SE2021 (All versions \< SE2021MP9), Solid Edge SE2022 (Al (no CVSS, Siemens JT2Go · Siemens Solid Edge SE2021 +2)
- [CVE-2021-40363](https://cve.now/CVE-2021-40363.md): A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All version (no CVSS, Siemens SIMATIC PCS 7 · Siemens SIMATIC WinCC V15 and ea… +1)
- [CVE-2021-40360](https://cve.now/CVE-2021-40360.md): A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions), SIMATIC PCS 7 V9.1 (All version (no CVSS, Siemens SIMATIC PCS 7 · Siemens SIMATIC WinCC V15 and ea… +1)
- [CVE-2021-37205](https://cve.now/CVE-2021-37205.md): A vulnerability has been identified in SIMATIC Drive Controller family (All versions \>= V2.9.2 \< V2.9.4), SIMATIC ET 200SP Open Controller C (CVSS 7.5, Siemens SIMATIC Drive Controller family · Siemens SIMATI… +6)
- [CVE-2021-37204](https://cve.now/CVE-2021-37204.md): A vulnerability has been identified in SIMATIC Drive Controller family (All versions \< V2.9.2), SIMATIC Drive Controller family (All version (CVSS 7.5, Siemens SIMATIC Drive Controller family · Siemens SIMATI… +7)
- [CVE-2021-37194](https://cve.now/CVE-2021-37194.md): A vulnerability has been identified in COMOS V10.2 (All versions only if web components are used), COMOS V10.3 (All versions \< V10.3.3.3 onl (no CVSS, Siemens COMOS)
- [CVE-2021-37185](https://cve.now/CVE-2021-37185.md): A vulnerability has been identified in SIMATIC Drive Controller family (All versions \>= V2.9.2 \< V2.9.4), SIMATIC ET 200SP Open Controller C (CVSS 7.5, Siemens SIMATIC Drive Controller family · Siemens SIMATI… +6)
- [CVE-2021-3813](https://cve.now/CVE-2021-3813.md): Improper Privilege Management in chatwoot/chatwoot (CVSS 6.5, chatwoot/chatwoot)
- [CVE-2022-0539](https://cve.now/CVE-2022-0539.md): Cross-site Scripting (XSS) - Stored in ptrofimov/beanstalk\_console (CVSS 6.3, ptrofimov/beanstalk\_console)
- [CVE-2022-0538](https://cve.now/CVE-2022-0538.md): Jenkins 2.333 and earlier, LTS 2.319.2 and earlier defines custom XStream converters that have not been updated to apply the protections for (no CVSS, Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core)
- [CVE-2021-46354](https://cve.now/CVE-2021-46354.md): Thinfinity VirtualUI 2.1.28.0, 2.1.32.1 and 2.5.26.2, fixed in version 3.0 is affected by an information disclosure vulnerability in the par (no CVSS)
- [CVE-2022-23378](https://cve.now/CVE-2022-23378.md): A Cross-Site Scripting (XSS) vulnerability exists within the 3.2.2 version of TastyIgniter. (no CVSS)
- [CVE-2021-25939](https://cve.now/CVE-2021-25939.md): ArangoDB - Blind SSRF when Downloading Foxx Service from URL (CVSS 2.7, arangodb)
- [CVE-2021-40837](https://cve.now/CVE-2021-40837.md): Denial-of-Service (DoS) Vulnerability (CVSS 4.6, F-Secure endpoint protection products on Windows and Mac. F…)
- [CVE-2022-0536](https://cve.now/CVE-2022-0536.md): Improper Removal of Sensitive Information Before Storage or Transfer in follow-redirects/follow-redirects (CVSS 2.6, follow-redirects/follow-redirects · follow-redirects)
- [CVE-2021-37852](https://cve.now/CVE-2021-37852.md): LPE in ESET products for Windows (CVSS 7.8, ESET NOD32 Antivirus · ESET Internet Security +9)
- [CVE-2022-24694](https://cve.now/CVE-2022-24694.md): In Mahara 20.10 before 20.10.4, 21.04 before 21.04.3, and 21.10 before 21.10.1, the names of folders in the Files area can be seen by a pers (no CVSS)
- [CVE-2022-0527](https://cve.now/CVE-2022-0527.md): Cross-site Scripting (XSS) - Stored in chatwoot/chatwoot (CVSS 6.1, chatwoot/chatwoot)
- [CVE-2022-0526](https://cve.now/CVE-2022-0526.md): Cross-site Scripting (XSS) - Stored in chatwoot/chatwoot (CVSS 7.3, chatwoot/chatwoot)
- [CVE-2022-0525](https://cve.now/CVE-2022-0525.md): Out-of-bounds Read in mruby/mruby (CVSS 8.4, mruby/mruby)
- [CVE-2022-24682](https://cve.now/CVE-2022-24682.md): An issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15 patch 30 (update 1), as exploited in the w (CVSS 6.1, KEV)
- [CVE-2021-46360](https://cve.now/CVE-2021-46360.md): Authenticated remote code execution (RCE) in Composr-CMS 10.0.39 and earlier allows remote attackers to execute arbitrary code via uploading (no CVSS)
- [CVE-2022-0391](https://cve.now/CVE-2022-0391.md): A flaw was found in Python, specifically within the urllib.parse module. (CVSS 7.5, python · libpython +1)
- [CVE-2022-22807](https://cve.now/CVE-2022-22807.md): A CWE-1021 Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could cause unintended modifications of the produc (no CVSS, EcoStruxure EV Charging Expert (formerly known as EVlink Lo…)
- [CVE-2022-22808](https://cve.now/CVE-2022-22808.md): A CWE-352: Cross-Site Request Forgery (CSRF) exists that could cause a remote attacker to gain unauthorized access to the product when condu (no CVSS, EcoStruxure EV Charging Expert (formerly known as EVlink Lo…)
- [CVE-2022-22809](https://cve.now/CVE-2022-22809.md): A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow modifications of the touch configurations in a (no CVSS, spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeL…)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-02-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.