CVEs published February 10, 2022
47 CVEs were published on February 10, 2022: 17 critical, 4 high. 5 are now in CISA KEV.
- Published
- 47
- Critical
- 17
- High
- 4
- Medium
- 8
- Low
- 1
- Unrated
- 17
- Now in CISA KEV
- 5
- Fix available
- 10
Most affected products
- Cisco Small Business RV Series Router Firmware
- 15
- Palo Alto Networks GlobalProtect App
- 5
- Cisco Digital Network Architecture Center
- 1
- Cisco Prime Service Catalog
- 1
- Cisco Umbrella Insights Virtual Appliance
- 1
- gradle
- 1
- ifmeorg ifme
- 1
- microweber/microweber
- 1
- Palo Alto Networks Cortex XSOAR
- 1
- Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Access
- 1
Critical 17
- CVE-2022-20699Cisco Small Business RV Series Routers VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20700Cisco Small Business RV Series Routers VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20701Cisco Small Business RV Series Routers VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20702Cisco Small Business RV Series Routers VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20703Cisco Small Business RV Series Routers VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20704Cisco Small Business RV Series Routers VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20705Cisco Small Business RV Series Routers VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20706Cisco Small Business RV Series Routers VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20707Cisco Small Business RV Series Routers VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20708Cisco Small Business RV Series Routers VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20709Cisco Small Business RV Series Routers VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20710Cisco Small Business RV Series Routers VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20711Cisco Small Business RV Series Routers VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20712Cisco Small Business RV Series Routers VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20749Cisco Small Business RV Series Routers VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2021-25992ifme - Insufficient Session Expirationifmeorg ifme
- CVE-2022-0558Cross-site Scripting (XSS) - Stored in microweber/microwebermicroweber/microweber
High 4
- CVE-2022-23630Dependency verification bypass in Gradlegradle
- CVE-2022-0017GlobalProtect App: Improper Link Resolution Vulnerability Leads to Local Privilege EscalationPalo Alto Networks GlobalProtect App
- CVE-2022-0016GlobalProtect App: Privilege Escalation Vulnerability When Using Connect Before LogonPalo Alto Networks GlobalProtect App
- CVE-2022-0554Use of Out-of-range Pointer Offset in vim/vimvim/vim
Medium, low and unrated 26
- CVE-2022-24647Cuppa CMS v1.0 was discovered to contain an arbitrary file deletion vulnerability via the unlink() function.
- CVE-2022-24646Hospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-master/contact.php vi
- CVE-2021-44970MiniCMS v1.11 was discovered to contain a cross-site scripting (XSS) vulnerability via /mc-admin/page-edit.php.
- CVE-2021-44969Taocms v3.0.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Management Column component.
- CVE-2021-42000Ping Identity PingFederate Password Reset and Password Change Mishandling with an authentication policy in parallel reset flowsPing Identity PingFederate
- CVE-2022-24916Optimism before @eth-optimism/l2geth@0.5.11 allows economic griefing because a balance is duplicated upon contract self-destruction.
- CVE-2022-24568Novel-plus v3.6.0 was discovered to be vulnerable to Server-Side Request Forgery (SSRF) via user-supplied crafted input.
- CVE-2021-45364A Code Execution vulnerability exists in Statamic Version through 3.2.26 via SettingsController.php.
- CVE-2021-44850On Xilinx Zynq-7000 SoC devices, physical modification of an SD boot image allows for a buffer overflow attack in the ROM.
- CVE-2022-23321A persistent cross-site scripting (XSS) vulnerability exists on two input fields within the administrative panel when editing users in the X
- CVE-2022-0021GlobalProtect App: Information Exposure Vulnerability When Using Connect Before LogonPalo Alto Networks GlobalProtect App
- CVE-2022-0020Cortex XSOAR: Stored Cross-Site Scripting (XSS) Vulnerability in Web InterfacePalo Alto Networks Cortex XSOAR
- CVE-2022-0019GlobalProtect App: Insufficiently Protected Credentials Vulnerability on LinuxPalo Alto Networks GlobalProtect App
- CVE-2022-0018GlobalProtect App: Information Exposure Vulnerability When Connecting to GlobalProtect Portal With Single Sign-On EnabledPalo Alto Networks GlobalProtect App
- CVE-2022-0011PAN-OS: URL Category Exceptions Match More URLs Than Intended in URL FilteringPalo Alto Networks PAN-OS · Palo Alto Networks Prisma Access
- CVE-2021-45357Cross Site Scripting (XSS) vulnerability exists in Piwigo 12.x via the pwg_activity function in include/functions.inc.php.
- CVE-2022-20680Cisco Prime Service Catalog Information Disclosure VulnerabilityCisco Prime Service Catalog
- CVE-2022-20630Cisco DNA Center Information Disclosure VulnerabilityCisco Digital Network Architecture Center
- CVE-2022-20738Cisco Umbrella Secure Web Gateway File Inspection Bypass VulnerabilityCisco Umbrella Insights Virtual Appliance
- CVE-2021-41445A reflected cross-site-scripting attack in web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attack
- CVE-2021-31814In Stormshield 1.1.0, and 2.1.0 through 2.9.0, an attacker can block a client from accessing the VPN and can obtain sensitive information th
- CVE-2021-37613Stormshield Network Security (SNS) 1.0.0 through 4.2.3 allows a Denial of Service.
- CVE-2021-3398Stormshield Network Security (SNS) 3.x has an Integer Overflow in the high-availability component.
- CVE-2021-44892A Remote Code Execution (RCE) vulnerability exists in ThinkPHP 3.x.x via value[_filename] in index.php, which could let a malicious user obttopthink/framework
- CVE-2022-24111In Mahara 21.04 before 21.04.3 and 21.10 before 21.10.1, portfolios created in groups that have not been shared with non-group members and p
- CVE-2021-45901The password-reset form in ServiceNow Orlando provides different responses to invalid authentication attempts depending on whether the usern