CVEs published February 26, 2022
14 CVEs were published on February 26, 2022: 0 critical, 2 high.
- Published
- 14
- Critical
- 0
- High
- 2
- Medium
- 4
- Low
- 0
- Unrated
- 8
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- microweber/microweber
- 3
- modx/revolution
- 1
- strapi/strapi · strapi
- 1
- zulip/zulip
- 1
High 2
Medium, low and unrated 12
- CVE-2021-3967Improper Access Control in zulip/zulipzulip/zulip
- CVE-2022-22908SangforCSClient.exe in Sangfor VDI Client 5.4.2.1006 allows attackers, when they are able to read process memory, to discover the contents o
- CVE-2022-26146Tricentis qTest before 10.4 allows stored XSS by an authenticated attacker.
- CVE-2020-27958The Job Composer app in Ohio Supercomputer Center Open OnDemand before 1.7.19 and 1.8.x before 1.8.18 allows remote authenticated users to p
- CVE-2022-0764Arbitrary Command Injection in strapi/strapistrapi/strapi · strapi
- CVE-2022-0763Cross-site Scripting (XSS) - Stored in microweber/microwebermicroweber/microweber
- CVE-2022-0762Incorrect Authorization in microweber/microwebermicroweber/microweber
- CVE-2022-25359On ICL ScadaFlex II SCADA Controller SC-1 and SC-2 1.03.07 devices, unauthenticated remote attackers can overwrite, delete, or create files.
- CVE-2022-24986KDE KCron through 21.12.2 uses a temporary file in /tmp when saving, but reuses the filename during an editing session.
- CVE-2020-36516An issue was discovered in the Linux kernel through 5.16.11.
- CVE-2021-46702Tor Browser 9.0.7 on Windows 10 build 10586 is vulnerable to information disclosure.
- CVE-2022-26149MODX Revolution through 2.8.3-pl allows remote authenticated administrators to execute arbitrary code by uploading an executable file, becaumodx/revolution