CVEs published February 20, 2022
13 CVEs were published on February 20, 2022: 1 critical, 2 high.
- Published
- 13
- Critical
- 1
- High
- 2
- Medium
- 4
- Low
- 0
- Unrated
- 6
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- nasa openmct
- 3
- cobbler
- 1
- microweber/microweber
- 1
- org.alluxio:alluxio-core-common
- 1
- unshiftio/url-parse · url-parse
- 1
- vim/vim
- 1
Critical 1
High 2
Medium, low and unrated 10
- CVE-2022-25375An issue was discovered in drivers/usb/gadget/function/rndis.c in the Linux kernel before 5.16.10.
- CVE-2022-25372Pritunl Client through 1.2.3019.52 on Windows allows local privilege escalation, related to an ACL entry for CREATOR OWNER in platform_windo
- CVE-2022-23054Openmct XSS via the “Summary Widget”nasa openmct
- CVE-2022-23053Openmct XSS via the “Condition Widget”nasa openmct
- CVE-2022-22126Openmct XSS via the “Web Page” elementnasa openmct
- CVE-2022-23848In Alluxio before 2.7.3, the logserver does not validate the input stream.org.alluxio:alluxio-core-common
- CVE-2021-45083An issue was discovered in Cobbler before 3.3.1.cobbler
- CVE-2021-45081An issue was discovered in Cobbler through 3.3.1.
- CVE-2021-45007Plesk 18.0.37 is affected by a Cross Site Request Forgery (CSRF) vulnerability that allows an attacker to insert data on the user and admin
- CVE-2022-0686Authorization Bypass Through User-Controlled Key in unshiftio/url-parseunshiftio/url-parse · url-parse