# CVEs published 2022-02-13

9 CVEs were published on February 13, 2022: 0 critical, 2 high. Days are UTC.

- [CVE-2022-0575](https://cve.now/CVE-2022-0575.md): Cross-site Scripting (XSS) - Stored in librenms/librenms (CVSS 5.4, librenms/librenms)
- [CVE-2022-0576](https://cve.now/CVE-2022-0576.md): Cross-site Scripting (XSS) - Generic in librenms/librenms (CVSS 5.4, librenms/librenms)
- [CVE-2022-0571](https://cve.now/CVE-2022-0571.md): Cross-site Scripting (XSS) - Reflected in phoronix-test-suite/phoronix-test-suite (CVSS 6.8, phoronix-test-suite/phoronix-test-suite)
- [CVE-2022-24977](https://cve.now/CVE-2022-24977.md): ImpressCMS before 1.4.2 allows unauthenticated remote code execution via ...../// directory traversal in origName or imageName, leading to u (no CVSS, impresscms/impresscms)
- [CVE-2022-24976](https://cve.now/CVE-2022-24976.md): Atheme IRC Services before 7.2.12, when used in conjunction with InspIRCd, allows authentication bypass by ending an IRC handshake at a cert (no CVSS)
- [CVE-2021-45444](https://cve.now/CVE-2021-45444.md): In zsh before 5.8.1, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argu (no CVSS)
- [CVE-2022-0570](https://cve.now/CVE-2022-0570.md): Heap-based Buffer Overflow in mruby/mruby (CVSS 8.4, mruby/mruby)
- [CVE-2021-44879](https://cve.now/CVE-2021-44879.md): In gc\_data\_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a move\_data\_page NULL poi (no CVSS)
- [CVE-2022-0572](https://cve.now/CVE-2022-0572.md): Heap-based Buffer Overflow in vim/vim (CVSS 8.4, vim/vim)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-02-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.