CVEs published February 13, 2022
9 CVEs were published on February 13, 2022: 0 critical, 2 high.
- Published
- 9
- Critical
- 0
- High
- 2
- Medium
- 3
- Low
- 0
- Unrated
- 4
- Now in CISA KEV
- 0
- Fix available
- 6
Most affected products
- librenms/librenms
- 2
- impresscms/impresscms
- 1
- mruby/mruby
- 1
- phoronix-test-suite/phoronix-test-suite
- 1
- vim/vim
- 1
High 2
Medium, low and unrated 7
- CVE-2022-0575Cross-site Scripting (XSS) - Stored in librenms/librenmslibrenms/librenms
- CVE-2022-0576Cross-site Scripting (XSS) - Generic in librenms/librenmslibrenms/librenms
- CVE-2022-0571Cross-site Scripting (XSS) - Reflected in phoronix-test-suite/phoronix-test-suitephoronix-test-suite/phoronix-test-suite
- CVE-2022-24977ImpressCMS before 1.4.2 allows unauthenticated remote code execution via ...../// directory traversal in origName or imageName, leading to uimpresscms/impresscms
- CVE-2022-24976Atheme IRC Services before 7.2.12, when used in conjunction with InspIRCd, allows authentication bypass by ending an IRC handshake at a cert
- CVE-2021-45444In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argu
- CVE-2021-44879In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a move_data_page NULL poi