CVEs published February 18, 2022
223 CVEs were published on February 18, 2022: 9 critical, 108 high. 1 is now in CISA KEV.
- Published
- 223
- Critical
- 9
- High
- 108
- Medium
- 11
- Low
- 34
- Unrated
- 61
- Now in CISA KEV
- 1
- Fix available
- 31
Most affected products
- Bentley MicroStation CONNECT
- 74
- Bentley View
- 21
- Foxit PDF Reader
- 16
- Sante DICOM Viewer Pro
- 10
- Airspan Networks MMP · Airspan Networks PTP C-series +1
- 7
- samba
- 5
- kernel
- 4
- MariaDB
- 4
- net.mingsoft:ms-mcms
- 3
- LemMinX · org.eclipse.lemminx:lemminx-parent
- 2
Critical 9
- CVE-2022-24049This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1 (S2 systeSonos One Speaker
- CVE-2022-24046This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Speaker prior to 3.4.1Sonos One Speaker
- CVE-2022-0543It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escapeDebian redis
- CVE-2022-21141Airspan Networks Mimosa Incorrect AuthorizationAirspan Networks MMP · Airspan Networks PTP C-series +1
- CVE-2022-21196Airspan Networks Mimosa Improper AuthorizationAirspan Networks MMP · Airspan Networks PTP C-series +1
- CVE-2022-21215Airspan Networks Mimosa Server-Side Request Forgery (SSRF)Airspan Networks MMP · Airspan Networks PTP C-series +1
- CVE-2022-25299Arbitrary File Writecesanta/mongoose
- CVE-2022-0660Generation of Error Message Containing Sensitive Information in microweber/microwebermicroweber/microweber
- CVE-2022-25315In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.
High 108
- CVE-2022-23642Code Injection in Sourcegraphsourcegraph
- CVE-2022-23650Use of Hard-coded Cryptographic Key in Netmakergravitl netmaker · github.com/gravitl/netmaker
- CVE-2021-23702Prototype Pollutionobject-extend
- CVE-2022-24971This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543.Foxit PDF Reader
- CVE-2022-24369This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543.Foxit PDF Reader
- CVE-2022-24367This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543.Foxit PDF Reader
- CVE-2022-24366This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543.Foxit PDF Reader
- CVE-2022-24365This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543.Foxit PDF Reader
- CVE-2022-24364This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543.Foxit PDF Reader
- CVE-2022-24363This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543.Foxit PDF Reader
- CVE-2022-24362This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543.Foxit PDF Reader
- CVE-2022-24361This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543.Foxit PDF Reader
- CVE-2022-24360This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543.Foxit PDF Reader
- CVE-2022-24359This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543.Foxit PDF Reader
- CVE-2022-24358This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543.Foxit PDF Reader
- CVE-2022-24357This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543.Foxit PDF Reader
- CVE-2022-24356This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader Foxit reader 11.0.1.0719 Foxit PDF Reader
- CVE-2022-24355This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 2TP-Link TL-WR940N
- CVE-2022-24354This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 prior to 1.1.4 BuTP-Link AC1750
- CVE-2022-24064This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.8.8.0.Sante DICOM Viewer Pro
- CVE-2022-24063This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 13.2.0.21165.Sante DICOM Viewer Pro
- CVE-2022-24062This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 13.2.0.21165.Sante DICOM Viewer Pro
- CVE-2022-24059This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.8.7.0.Sante DICOM Viewer Pro
- CVE-2022-24058This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.8.7.0.Sante DICOM Viewer Pro
- CVE-2022-24057This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.8.7.0.Sante DICOM Viewer Pro
- CVE-2022-24056This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante DICOM Viewer Pro 11.8.7.0.Sante DICOM Viewer Pro
- CVE-2022-24052MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability.MariaDB
- CVE-2022-24051MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability.MariaDB
- CVE-2022-24050MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability.MariaDB
- CVE-2022-24048MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability.MariaDB
- CVE-2021-46656This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-46655This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-46653This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-46652This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-46648This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46647This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46646This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46645This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46644This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46643This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-46641This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-46640This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-46639This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46638This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46636This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46635This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46634This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46633This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46631This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-46627This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-46626This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-46625This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-46622This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46621This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46619This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46617This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46614Bentley MicroStation CONNECT 10.16.0.80 J2K File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability.Bentley MicroStation CONNECT
- CVE-2021-46613This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46612This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46609This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46606This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46605This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46604This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46603This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46601This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46598This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46597This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46592This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46591This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46590This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46588This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46587This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46586This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46585This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46584This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46583This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46582This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46581This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46580This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46579This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46578This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46577This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46576This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46575This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46574This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46573This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46572This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46571This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.16.0.80.Bentley View
- CVE-2021-46570This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.16.0.80.Bentley View
- CVE-2021-46569This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46568This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46567This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46566This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46565This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46564This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46563This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-46562This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80.Bentley MicroStation CONNECT
- CVE-2021-26619BigFileAgent arbitrary file Deleting vulnerabilityBluetree Co. BigFileAgent
- CVE-2021-26618Tmax ToOffice arbitrary file creation vulnerabilityTmaxSoft Co. ToOffice
- CVE-2022-21176Airspan Networks Mimosa SQL InjectionAirspan Networks MMP · Airspan Networks PTP C-series +1
- CVE-2022-21143Airspan Networks Mimosa OS Command InjectionAirspan Networks MMP · Airspan Networks PTP C-series +1
- CVE-2022-0138Airspan Networks Mimosa Deserialization of Untrusted DataAirspan Networks MMP · Airspan Networks PTP C-series +1
- CVE-2022-0666CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in microweber/microwebermicroweber/microweber
- CVE-2022-23647Cross-site Scripting in PrismPrismJS prism · prismjs
- CVE-2022-0664Use of Hard-coded Cryptographic Key in gravitl/netmakergravitl/netmaker · github.com/gravitl/netmaker
- CVE-2022-25298Path Traversalsprinfall/webcc
- CVE-2020-8107Process Control vulnerability in Bitdefender Antivirus PlusBitdefender Antivirus Plus · Bitdefender Internet Securi… +1
- CVE-2022-25314In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.platform/external/expat
Medium, low and unrated 106
- CVE-2021-44302BaiCloud-cms v2.5.7 was discovered to contain multiple SQL injection vulnerabilities via the tongji and baidu_map parameters in /user/ztconf
- CVE-2021-45082An issue was discovered in Cobbler before 3.3.1.cobbler
- CVE-2022-25137A command injection vulnerability in the function recvSlaveUpgstatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211
- CVE-2022-25136A command injection vulnerability in the function meshSlaveUpdate of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015
- CVE-2022-25135A command injection vulnerability in the function recv_mesh_info_sync of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211
- CVE-2022-25133A command injection vulnerability in the function isAssocPriDevice of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015
- CVE-2022-25134A command injection vulnerability in the function setUpgradeFW of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 all
- CVE-2022-25132A command injection vulnerability in the function meshSlaveDlfw of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 al
- CVE-2022-25130A command injection vulnerability in the function updateWifiInfo of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015
- CVE-2022-25131A command injection vulnerability in the function recvSlaveCloudCheckStatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748
- CVE-2017-0371MediaWiki before 1.23.16, 1.24.x through 1.27.x before 1.27.2, and 1.28.x before 1.28.1 allows remote attackers to discover the IP addresses
- CVE-2022-25358A ..%2F path traversal vulnerability exists in the path handler of awful-salmonella-tar before 0.0.4.
- CVE-2022-23228Pexip Infinity before 27.0 has improper WebRTC input validation.
- CVE-2021-29656Pexip Infinity Connect before 1.8.0 mishandles TLS certificate validation.
- CVE-2021-29655Pexip Infinity Connect before 1.8.0 omits certain provisioning authenticity checks.
- CVE-2022-23649Improper Certificate Validation in Cosignsigstore cosign · github.com/sigstore/cosign
- CVE-2022-23645Out-of-bounds read in swtpmstefanberger swtpm
- CVE-2021-40840A Stored XSS issue exists in the admin/users user administration form in LiveConfig 2.12.2.
- CVE-2021-40841A Path Traversal vulnerability for a log file in LiveConfig 2.12.2 allows authenticated attackers to read files on the underlying server.
- CVE-2021-46110Online Shopping Portal v3.1 was discovered to contain multiple time-based SQL injection vulnerabilities via the email and contactno paramete
- CVE-2021-46082Moxa TN-5900 v3.1 series routers, MGate 5109 v2.2 series protocol gateways, and MGate 5101-PBM-MN v2.1 series protocol gateways were discove
- CVE-2022-24370This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader Foxit reader 11.0Foxit PDF Reader
- CVE-2022-24368This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.1.0.52543.Foxit PDF Reader
- CVE-2022-24061This vulnerability allows remote attackers to disclose sensitive information on affected installations of Sante DICOM Viewer Pro 11.8.7.0.Sante DICOM Viewer Pro
- CVE-2022-24060This vulnerability allows remote attackers to disclose sensitive information on affected installations of Sante DICOM Viewer Pro 11.8.7.0.Sante DICOM Viewer Pro
- CVE-2022-24055This vulnerability allows remote attackers to disclose sensitive information on affected installations of Sante DICOM Viewer Pro 11.8.7.0.Sante DICOM Viewer Pro
- CVE-2022-24047This vulnerability allows remote attackers to bypass authentication on affected installations of BMC Track-It! 20.21.01.102.BMC Track-It!
- CVE-2021-46654This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-46651This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16Bentley MicroStation CONNECT
- CVE-2021-46650This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16Bentley MicroStation CONNECT
- CVE-2021-46649This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16Bentley MicroStation CONNECT
- CVE-2021-46642This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-46637This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16Bentley MicroStation CONNECT
- CVE-2021-46632This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-46630This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-46629This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-46628This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-46624This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-46623This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75.Bentley View
- CVE-2021-46620This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16Bentley MicroStation CONNECT
- CVE-2021-46618This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16Bentley MicroStation CONNECT
- CVE-2021-46616This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16Bentley MicroStation CONNECT
- CVE-2021-46615This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16Bentley MicroStation CONNECT
- CVE-2021-46611This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16Bentley MicroStation CONNECT
- CVE-2021-46610This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16Bentley MicroStation CONNECT
- CVE-2021-46608This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16Bentley MicroStation CONNECT
- CVE-2021-46607This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16Bentley MicroStation CONNECT
- CVE-2021-46602This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16Bentley MicroStation CONNECT
- CVE-2021-46600This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16Bentley MicroStation CONNECT
- CVE-2021-46599This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16Bentley MicroStation CONNECT
- CVE-2021-46596This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16Bentley MicroStation CONNECT
- CVE-2021-46595This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16Bentley MicroStation CONNECT
- CVE-2021-46594This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16Bentley MicroStation CONNECT
- CVE-2021-46593This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16Bentley MicroStation CONNECT
- CVE-2021-46589This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16Bentley MicroStation CONNECT
- CVE-2021-46063MCMS v5.2.5 was discovered to contain a Server Side Template Injection (SSTI) vulnerability via the Template Management module.net.mingsoft:ms-mcms
- CVE-2021-46062MCMS v5.2.5 was discovered to contain an arbitrary file deletion vulnerability via the component oldFileName.net.mingsoft:ms-basic · net.mingsoft:ms-mcms
- CVE-2021-46037MCMS v5.2.4 was discovered to contain an arbitrary file deletion vulnerability via the component /template/unzip.do.net.mingsoft:ms-mcms
- CVE-2021-46036An arbitrary file upload vulnerability in the component /ms/file/uploadTemplate.do of MCMS v5.2.4 allows attackers to execute arbitrary codenet.mingsoft:ms-mcms
- CVE-2021-30650A reflected cross-site scripting (XSS) vulnerability in the Symantec Layer7 API Management OAuth Toolkit (OTK) allows a remote attacker to cLayer7 API Management OAuth Toolkit
- CVE-2020-8242Unsanitized user input in ExpressionEngine <= 5.4.0 control panel member creation leads to an SQL injection.ExpressionEngine
- CVE-2021-3657A flaw was found in mbsync versions prior to 1.4.4.isync
- CVE-2021-3947A stack-buffer-overflow was found in QEMU in the NVME component.QEMU
- CVE-2021-3930An off-by-one error was found in the SCSI device emulation in QEMU.QEMU
- CVE-2021-20325Missing fixes for CVE-2021-40438 and CVE-2021-26691 in the versions of httpd, as shipped in Red Hat Enterprise Linux 8.5.0, causes a securithttpd
- CVE-2021-20322A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allkernel
- CVE-2021-20321A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in specific way with Ovekernel
- CVE-2021-20320A flaw was found in s390 eBPF JIT in bpf_jit_insn in arch/s390/net/bpf_jit_comp.c in the Linux kernel.kernel
- CVE-2022-0673A flaw was found in LemMinX in versions prior to 0.19.0.LemMinX · org.eclipse.lemminx:lemminx-parent
- CVE-2022-0672A flaw was found in LemMinX in versions prior to 0.19.0.LemMinX · org.eclipse.lemminx:lemminx-parent
- CVE-2022-0671A flaw was found in vscode-xml in versions prior to 0.19.0.vscode-xml · org.eclipse.lemminx:lemminx-parent
- CVE-2021-4093A flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization-Encrypted State (SEV-ES).kernel
- CVE-2022-0646A flaw use after free in the Linux kernel Management Component Transport Protocol (MCTP) subsystem was found in the way user triggers cancelKernel
- CVE-2022-21800Airspan Networks Mimosa Use of a Broken or Risky Cryptographic AlgorithmAirspan Networks MMP · Airspan Networks PTP C-series +1
- CVE-2022-23982WordPress Perfect Brands for WooCommerce plugin <= 2.0.4 - Server Information Exposure vulnerabilityQuadLayers Perfect Brands for WooCommerce
- CVE-2022-23981WordPress Perfect Brands for WooCommerce plugin <= 2.0.4 - Set Featured Brand vulnerabilityQuadLayers Perfect Brands for WooCommerce
- CVE-2022-25336Ibexa DXP ezsystems/ezpublish-kernel 7.5.x before 7.5.26 and 1.3.x before 1.3.12 allows Insecure Direct Object Reference (IDOR) attacks agaiezsystems/ezplatform-kernel
- CVE-2022-25337Ibexa DXP ezsystems/ezpublish-kernel 7.5.x before 7.5.26 and 1.3.x before 1.3.12 allows injection attacks via image filenames.ezsystems/ezpublish-kernel
- CVE-2021-39026IBM Guardium Data Encryption (GDE) 5.0.0.2 and 5.0.0.3 could allow a remote attacker to obtain sensitive information, caused by the failure IBM Security Guardium Data Encryption
- CVE-2021-38935IBM Maximo Asset Management 7.6.1.2 does not require that users should have strong passwords by default, which makes it easier for attackersIBM Maximo Asset Management
- CVE-2022-25335RigoBlock Dragos through 2022-02-17 lacks the onlyOwner modifier for setMultipleAllowances.
- CVE-2021-45401A Command injection vulnerability exists in Tenda AC10U AC1200 Smart Dual-band Wireless Router AC10U V1.0 Firmware V15.03.06.49_multi via th
- CVE-2021-44968A Use after Free vulnerability exists in IOBit Advanced SystemCare 15 pro via requests sent in sequential order using the IOCTL driver codes
- CVE-2022-25322ZEROF Web Server 2.0 allows /HandleEvent SQL Injection.
- CVE-2022-25323ZEROF Web Server 2.0 allows /admin.back XSS.
- CVE-2022-0631Heap-based Buffer Overflow in mruby/mrubymruby/mruby
- CVE-2022-0451Auth bypass in Dark SDKGoogle Dart SDK
- CVE-2021-46372Scoold 1.47.2 is a Q&A/knowledge base platform written in Java.
- CVE-2022-25313In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.
- CVE-2021-46108D-Link DSL-2730E CT-20131125 devices allow XSS via the username parameter to the password page in the maintenance configuration.
- CVE-2022-22922TP-Link TL-WA850RE Wi-Fi Range Extender before v6_200923 was discovered to use highly predictable and easily detectable session keys, allowi
- CVE-2016-2124A flaw was found in the way samba implemented SMB1 authentication.samba
- CVE-2020-25717A flaw was found in the way Samba maps domain users to local users.samba
- CVE-2020-25718A flaw was found in the way samba, as an Active Directory Domain Controller, is able to support an RODC (read-only domain controller).samba
- CVE-2020-25719A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication.samba
- CVE-2020-25722Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data.samba
- CVE-2021-20315A locking protection bypass flaw was found in some versions of gnome-shell as shipped within CentOS Stream 8, when the "Application menu" orgnome-shell
- CVE-2021-3948An incorrect default permissions vulnerability was found in the mig-controller.mig-controller
- CVE-2021-4090An out-of-bounds (OOB) memory write flaw was found in the NFSD in the Linux kernel.Linux kernel
- CVE-2021-4091A double-free was found in the way 389-ds-base handles virtual attributes context in persistent searches.389-ds-base
- CVE-2022-0585Large loops in multiple protocol dissectors in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allow denial of service via packet injection or Wireshark Foundation Wireshark
- CVE-2022-25317An issue was discovered in Cerebrate through 1.4.
- CVE-2022-25318An issue was discovered in Cerebrate through 1.4.
- CVE-2022-25319An issue was discovered in Cerebrate through 1.4.
- CVE-2022-25320An issue was discovered in Cerebrate through 1.4.
- CVE-2022-25321An issue was discovered in Cerebrate through 1.4.