CVE-2022 records published in February 2022
Page two of two: records 1,001 to 1,078 of the 1,078 published in February 2022, newest first. The first page carries the figures for February 2022.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2022-22726 | EcoStruxure Power Monitoring Expert improper input validation | 6.5v3.1 | 0.8% | 2022-02-04 | Fix |
| CVE-2022-22725 | Easergy P3 buffer overflow | 8.8v3.1 | 2.8% | 2022-02-04 | Fix |
| CVE-2022-22724 | Modicon M340 CPUs: BMXP34 resource exhaustion | 7.5v3.1 | 0.9% | 2022-02-04 | Fix |
| CVE-2022-22723 | Easergy P5 buffer overflow | 8.8v3.1 | 2.8% | 2022-02-04 | Fix |
| CVE-2022-22722 | Schneider Electric Easergy P5 hard-coded credentials | 7.5v3.1 | 2.4% | 2022-02-04 | Fix |
| CVE-2022-22689 | CA Harvest Software Change Manager CSV injection | 8.8v3.1 | 1.3% | 2022-02-04 | Fix |
| CVE-2022-22150 | Foxit PDF Reader JavaScript engine of Foxit Software’s memory corruption | 8.8v3.1 | 1.8% | 2022-02-04 | Fix |
| CVE-2022-0487 | kernel use-after-free | 5.5NVD v3.1 | 0.4% | 2022-02-04 | Fix |
| CVE-2022-0484 | Improper URL Validation causes Mirantis Container Cloud Lens Extension to open external programs | 8.8CNA v3.1 | 1.0% | 2022-02-04 | Fix |
| CVE-2022-0481 | Null pointer dereference in mruby/mruby | 7.5v3.1 | 0.9% | 2022-02-04 | Fix |
| CVE-2022-0472 | Unrestricted upload of file with dangerous type in jsdecena/Laracom | 5.4NVD v3.1 | 0.8% | 2022-02-04 | Fix |
| CVE-2022-0381 | Embed Swagger reflected cross-site scripting | 6.1v3.1 | 3.9% | 2022-02-04 | Nuclei |
| CVE-2022-0380 | Fotobook reflected cross-site scripting | 6.1v3.1 | 0.9% | 2022-02-04 | Fix |
| CVE-2022-0365 | Ricon Industrial Cellular Router OS command injection | 9.8v3.1 | 2.2% | 2022-02-04 | |
| CVE-2022-0317 | Google improper input validation in AKPublic.Verify in go-attestation | 4.0CNA v3.1 | 0.1% | 2022-02-04 | Fix |
| CVE-2022-0264 | kernel improper exception handling | 5.5NVD v3.1 | 0.3% | 2022-02-04 | Fix |
| CVE-2022-0218 | WP HTML Mail missing authorization on REST-API route | 6.1NVD v3.1 | 66.4% | 2022-02-04 | NucleiFix |
| CVE-2022-24307 | Joinmastodon mastodon incorrect authorization | 9.8v3.1 | 1.4% | 2022-02-03 | Fix |
| CVE-2022-24121 | Unifiedoffice Total Connect Now SQL injection | 7.5v3.1 | 1.3% | 2022-02-03 | Fix |
| CVE-2022-24031 | InsydeH2O out-of-bounds write | 8.2v3.1 | 0.3% | 2022-02-03 | Fix |
| CVE-2022-24030 | InsydeH2O out-of-bounds write | 7.5v3.1 | 0.3% | 2022-02-03 | Fix |
| CVE-2022-23873 | Victor Cms SQL injection | 8.8v3.1 | 1.3% | 2022-02-03 | |
| CVE-2022-23871 | gibbonedu gibbon component outcomes_addProcess.php cross-site scripting | 5.4v3.1 | 0.6% | 2022-02-03 | |
| CVE-2022-23833 | Infinite loop in Django | 7.5v3.1 | 49.2% | 2022-02-03 | Fix |
| CVE-2022-23569 | Google `CHECK`-fails when building invalid tensor shapes in TensorFlow | 6.5CNA v3.1 | 0.5% | 2022-02-03 | Fix |
| CVE-2022-23568 | Google TensorFlow AddManySparseToTensorsMap op integer overflow | 6.5CNA v3.1 | 0.8% | 2022-02-03 | Fix |
| CVE-2022-23567 | Google TensorFlow sparse Cwise ops integer overflow | 6.5CNA v3.1 | 1.1% | 2022-02-03 | Fix |
| CVE-2022-23357 | moziloCMS path traversal | 9.1v3.1 | 19.9% | 2022-02-03 | |
| CVE-2022-22818 | Cross-site scripting in Django | 6.1v3.1 | 3.3% | 2022-02-03 | Exploit codeFix |
| CVE-2022-21741 | Google TensorFlow division by zero in TFLite | 6.5CNA v3.1 | 0.8% | 2022-02-03 | Fix |
| CVE-2022-21740 | Google heap overflow in TensorFlow | 7.6CNA v3.1 | 0.8% | 2022-02-03 | Fix |
| CVE-2022-21739 | Google null pointer dereference in TensorFlow | 6.5CNA v3.1 | 0.8% | 2022-02-03 | Fix |
| CVE-2022-21738 | Google integer overflow leading to crash in TensorFlow | 6.5CNA v3.1 | 0.8% | 2022-02-03 | Fix |
| CVE-2022-21737 | Google assertion failure based denial of service in TensorFlow | 6.5CNA v3.1 | 0.8% | 2022-02-03 | Fix |
| CVE-2022-21736 | Google undefined behavior in TensorFlow | 7.6CNA v3.1 | 0.8% | 2022-02-03 | Fix |
| CVE-2022-21735 | Google division by zero in TensorFlow | 6.5CNA v3.1 | 0.8% | 2022-02-03 | Fix |
| CVE-2022-21734 | Google TensorFlow MapStage type confusion | 6.5CNA v3.1 | 0.8% | 2022-02-03 | Fix |
| CVE-2022-21733 | Google memory exhaustion in TensorFlow | 4.3CNA v3.1 | 0.8% | 2022-02-03 | Fix |
| CVE-2022-21732 | Google memory exhaustion in TensorFlow | 4.3CNA v3.1 | 0.8% | 2022-02-03 | Fix |
| CVE-2022-21731 | Google type confusion leading to segfault in TensorFlow | 6.5CNA v3.1 | 0.9% | 2022-02-03 | Fix |
| CVE-2022-21730 | Google out-of-bounds read in TensorFlow | 8.1CNA v3.1 | 0.8% | 2022-02-03 | Fix |
| CVE-2022-21729 | Google Overflow and uncaught divide by zero in TensorFlow | 6.5CNA v3.1 | 0.8% | 2022-02-03 | Fix |
| CVE-2022-21728 | Google out-of-bounds read in TensorFlow | 8.1CNA v3.1 | 1.1% | 2022-02-03 | Fix |
| CVE-2022-21727 | Google integer overflow in TensorFlow | 7.6CNA v3.1 | 0.7% | 2022-02-03 | Fix |
| CVE-2022-21726 | Google out-of-bounds read in TensorFlow | 8.1CNA v3.1 | 0.8% | 2022-02-03 | Fix |
| CVE-2022-21725 | Google division by zero in TensorFlow | 6.5CNA v3.1 | 0.8% | 2022-02-03 | Fix |
| CVE-2022-24301 | minetest incorrect default permissions | 6.5v3.1 | 1.0% | 2022-02-02 | Fix |
| CVE-2022-24300 | Minetest ItemStack meta handling vulnerability | 9.8v3.1 | 1.7% | 2022-02-02 | Fix |
| CVE-2022-24069 | InsydeH2O AhciBusDxe privilege escalation | 8.2v3.1 | 0.3% | 2022-02-02 | Fix |
| CVE-2022-22510 | CODESYS: Null pointer dereference in CODESYS Profinet stack | 7.5v3.1 | 1.0% | 2022-02-02 | Fix |
| CVE-2022-22509 | Phoenix Contact: FL SWITCH 2xxx series incorrect privilege assignment | 8.8v3.1 | 1.0% | 2022-02-02 | Fix |
| CVE-2022-21817 | NVIDIA Omniverse Launcher code execution | 9.3CNA v3.1 | 1.7% | 2022-02-02 | Fix |
| CVE-2022-21724 | Postgresql Jdbc Driver Unchecked Class Instantiation when providing Plugin Classes | 7.0CNA v3.1 | 3.1% | 2022-02-02 | Fix |
| CVE-2022-0443 | vim/vim GitHub repository use-after-free | 7.8v3.1 | 1.4% | 2022-02-02 | Fix |
| CVE-2022-0432 | Prototype pollution in mastodon/mastodon | 6.1NVD v3.1 | 4.4% | 2022-02-02 | NucleiFix |
| CVE-2022-0366 | Capsule8 SQL injection | 8.8CNA v3.1 | 1.0% | 2022-02-02 | Fix |
| CVE-2022-24223 | Thedigitalcraft Atom CMS SQL injection | 9.8v3.1 | 62.0% | 2022-02-01 | NucleiExploit code |
| CVE-2022-24222 | Elite Cms SQL injection | 9.8v3.1 | 1.1% | 2022-02-01 | |
| CVE-2022-24221 | Elite Cms SQL injection | 9.8v3.1 | 1.1% | 2022-02-01 | |
| CVE-2022-24220 | Elite Cms SQL injection | 9.8v3.1 | 1.1% | 2022-02-01 | |
| CVE-2022-24219 | Elite Cms SQL injection | 9.8v3.1 | 1.1% | 2022-02-01 | |
| CVE-2022-24218 | Elite Cms arbitrary file deletion | 9.1v3.1 | 17.0% | 2022-02-01 | |
| CVE-2022-24198 | Out-of-bounds read in iText | 6.5v3.1 | 0.5% | 2022-02-01 | Fix |
| CVE-2022-24197 | Out-of-bounds write in iText | 6.5v3.1 | 1.5% | 2022-02-01 | Fix |
| CVE-2022-24196 | Allocation of resources without limits or throttling in iText | 6.5v3.1 | 1.6% | 2022-02-01 | Fix |
| CVE-2022-23774 | Docker Desktop before 4.4.4 on Windows allows attackers to move arbitrary files. | 5.3v3.1 | 0.9% | 2022-02-01 | Fix |
| CVE-2022-23607 | Unsafe handling of user-specified cookies in treq | 6.5CNA v3.1 | 1.1% | 2022-02-01 | Fix |
| CVE-2022-23603 | Code injection in iTunesRPC-Remastered | 9.9CNA v3.1 | 1.0% | 2022-02-01 | Fix |
| CVE-2022-23602 | nim-lang Nimforum nim's rst parser sandboxed mode allows include which can embed any local file | 7.7CNA v3.1 | 1.3% | 2022-02-01 | |
| CVE-2022-23601 | CSRF token missing in Symfony | 8.1CNA v3.1 | 0.6% | 2022-02-01 | Fix |
| CVE-2022-23597 | Element Desktop remote program execution with user interaction | 8.3CNA v3.1 | 1.5% | 2022-02-01 | Fix |
| CVE-2022-23596 | Infinite loop in junrar | 7.5CNA v3.1 | 1.6% | 2022-02-01 | Fix |
| CVE-2022-21687 | GitHub Ghost command injection in gh-ost | 6.8CNA v3.1 | 1.0% | 2022-02-01 | Fix |
| CVE-2022-0419 | Null pointer dereference in radareorg/radare2 | 5.5v3.1 | 0.9% | 2022-02-01 | Fix |
| CVE-2022-0417 | Heap-based buffer overflow in Vim/Vim | 7.8v3.1 | 1.5% | 2022-02-01 | Fix |
| CVE-2022-0401 | Path traversal in yuda-lyu/W-zip | 9.8v3.1 | 1.6% | 2022-02-01 | Fix |
| CVE-2022-0320 | Essential Addons for Elementor WordPress plugin unauthenticated LFI | 9.8NVD v3.1 | 2.0% | 2022-02-01 | Fix |
| CVE-2022-0220 | WordPress GDPR and CCPA plugin unauthenticated reflected cross-site scripting | 6.1NVD v3.1 | 2.3% | 2022-02-01 | NucleiFix |