CVEs published February 19, 2022
16 CVEs were published on February 19, 2022: 0 critical, 4 high.
- Published
- 16
- Critical
- 0
- High
- 4
- Medium
- 3
- Low
- 0
- Unrated
- 9
- Now in CISA KEV
- 0
- Fix available
- 8
Most affected products
- microweber/microweber
- 3
- mruby/mruby
- 2
- Debian duck
- 1
- kitodo/presentation
- 1
- star7th/showdoc · showdoc/showdoc
- 1
High 4
- CVE-2022-0690Cross-site Scripting (XSS) - Reflected in microweber/microwebermicroweber/microweber
- CVE-2022-0630Out-of-bounds Read in mruby/mrubymruby/mruby
- CVE-2022-0409Unrestricted Upload of File with Dangerous Type in star7th/showdocstar7th/showdoc · showdoc/showdoc
- CVE-2022-25365Docker Desktop before 4.5.1 on Windows allows attackers to move arbitrary files.
Medium, low and unrated 12
- CVE-2021-46700In libsixel 1.8.6, sixel_encoder_output_without_macro (called from sixel_encoder_encode_frame in encoder.c) has a double free.
- CVE-2016-1239duck before 0.10 did not properly handle loading of untrusted code from the current directory.Debian duck
- CVE-2022-0689Use multiple time the one-time coupon in microweber/microwebermicroweber/microweber
- CVE-2022-23375WikiDocs version 0.1.18 has an authenticated remote code execution vulnerability.
- CVE-2022-23376WikiDocs version 0.1.18 has multiple reflected XSS vulnerabilities on different pages.
- CVE-2022-0632NULL Pointer Dereference in mruby/mrubymruby/mruby
- CVE-2022-0678Cross-site Scripting (XSS) - Reflected in microweber/microwebermicroweber/microweber
- CVE-2016-20013sha256crypt and sha512crypt through 0.6 allow attackers to cause a denial of service (CPU consumption) because the algorithm's runtime is pr
- CVE-2022-24980An issue was discovered in the Kitodo.Presentation (aka dif) extension before 2.3.2, 3.x before 3.2.3, and 3.3.x before 3.3.4 for TYPO3.kitodo/presentation
- CVE-2022-24979An issue was discovered in the Varnishcache extension before 2.0.1 for TYPO3.
- CVE-2022-25366Cryptomator through 1.6.5 allows DYLIB injection because, although it has the flag 0x1000 for Hardened Runtime, it has the com.apple.securit
- CVE-2022-25256SAS Web Report Studio 4.4 allows XSS.