| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-44652 | Hig | 0.51 | 7.8 | 0.03 | Jan 12, 2022 | Zoho ManageEngine O365 Manager Plus before Build 4416 allows remote code execution via BCP file overwrite through the ChangeDBAPI component. | ||
| CVE-2021-44651 | Hig | 0.58 | 8.8 | 0.05 | Jan 12, 2022 | Zoho ManageEngine CloudSecurityPlus before Build 4117 allows remote code execution through the updatePersonalizeSettings component due to an improper security patch for CVE-2021-40175. | ||
| CVE-2021-4080 | Hig | 0.50 | 8.8 | 0.02 | Jan 12, 2022 | crater is vulnerable to Unrestricted Upload of File with Dangerous Type | ||
| CVE-2021-44650 | Hig | 0.47 | 7.2 | 0.05 | Jan 12, 2022 | Zoho ManageEngine M365 Manager Plus before Build 4419 allows remote command execution when updating proxy settings through the Admin ProxySettings and Tenant ProxySettings components. | ||
| CVE-2021-44649 | Med | 0.35 | 5.4 | 0.01 | Jan 12, 2022 | Django CMS 3.7.3 does not validate the plugin_type parameter while generating error messages for an invalid plugin type, resulting in a Cross Site Scripting (XSS) vulnerability. The vulnerability allows an attacker to execute arbitrary JavaScript code in the web browser of the… | ||
| CVE-2021-44648 | Hig | 0.57 | 8.8 | 0.02 | Jan 12, 2022 | GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12. | ||
| CVE-2021-3852 | Hig | 0.49 | 7.5 | 0.01 | Jan 12, 2022 | growi is vulnerable to Authorization Bypass Through User-Controlled Key | ||
| CVE-2022-0179 | Med | 0.28 | 5.4 | 0.01 | Jan 12, 2022 | snipe-it is vulnerable to Missing Authorization | ||
| CVE-2022-0159 | Med | 0.28 | 5.4 | 0.01 | Jan 12, 2022 | orchardcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | ||
| CVE-2022-0087 | Med | 0.33 | 6.1 | 0.03 | Jan 12, 2022 | keystone is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | ||
| CVE-2022-21646 | Hig | 0.46 | 8.1 | 0.01 | Jan 11, 2022 | SpiceDB is a database system for managing security-critical application permissions. Any user making use of a wildcard relationship under the right hand branch of an `exclusion` or within an `intersection` operation will see `Lookup`/`LookupResources` return a resource as… | ||
| CVE-2021-46283 | Med | 0.36 | 5.5 | 0.00 | Jan 11, 2022 | nf_tables_newset in net/netfilter/nf_tables_api.c in the Linux kernel before 5.12.13 allows local users to cause a denial of service (NULL pointer dereference and general protection fault) because of the missing initialization for nft_set_elem_expr_alloc. A local user can set a… | ||
| CVE-2021-43999 | Hig | 0.57 | 8.8 | 0.02 | Jan 11, 2022 | Apache Guacamole 1.2.0 and 1.3.0 do not properly validate responses received from a SAML identity provider. If SAML support is enabled, this may allow a malicious user to assume the identity of another Guacamole user. | ||
| CVE-2021-41767 | Med | 0.42 | 6.5 | 0.02 | Jan 11, 2022 | Apache Guacamole 1.3.0 and older may incorrectly include a private tunnel identifier in the non-private details of some REST responses. This may allow an authenticated user who already has permission to access a particular connection to read from or interact with another user's… | ||
| CVE-2022-21970 | Med | 0.40 | 6.1 | 0.03 | Jan 11, 2022 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | ||
| CVE-2022-21969 | Cri | 0.59 | 9.0 | 0.01 | Jan 11, 2022 | Microsoft Exchange Server Remote Code Execution Vulnerability | ||
| CVE-2022-21964 | Med | 0.36 | 5.5 | 0.01 | Jan 11, 2022 | Remote Desktop Licensing Diagnoser Information Disclosure Vulnerability | ||
| CVE-2022-21963 | Med | 0.42 | 6.4 | 0.01 | Jan 11, 2022 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | ||
| CVE-2022-21962 | Med | 0.44 | 6.8 | 0.01 | Jan 11, 2022 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | ||
| CVE-2022-21961 | Med | 0.44 | 6.8 | 0.01 | Jan 11, 2022 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | ||
| CVE-2022-21960 | Med | 0.44 | 6.8 | 0.01 | Jan 11, 2022 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | ||
| CVE-2022-21959 | Med | 0.44 | 6.8 | 0.01 | Jan 11, 2022 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | ||
| CVE-2022-21958 | Med | 0.44 | 6.8 | 0.01 | Jan 11, 2022 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | ||
| CVE-2022-21954 | Med | 0.40 | 6.1 | 0.02 | Jan 11, 2022 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | ||
| CVE-2022-21932 | Hig | 0.49 | 7.6 | 0.01 | Jan 11, 2022 | Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability | ||
| CVE-2022-21931 | Med | 0.27 | 4.2 | 0.01 | Jan 11, 2022 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | ||
| CVE-2022-21930 | Med | 0.27 | 4.2 | 0.01 | Jan 11, 2022 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | ||
| CVE-2022-21929 | Low | 0.16 | 2.5 | 0.02 | Jan 11, 2022 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | ||
| CVE-2022-21928 | Med | 0.41 | 6.3 | 0.01 | Jan 11, 2022 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability | ||
| CVE-2022-21925 | Med | 0.35 | 5.3 | 0.03 | Jan 11, 2022 | Windows BackupKey Remote Protocol Security Feature Bypass Vulnerability | ||
| CVE-2022-21924 | Med | 0.35 | 5.3 | 0.03 | Jan 11, 2022 | Workstation Service Remote Protocol Security Feature Bypass Vulnerability | ||
| CVE-2022-21922 | Hig | 0.57 | 8.8 | 0.03 | Jan 11, 2022 | Remote Procedure Call Runtime Remote Code Execution Vulnerability | ||
| CVE-2022-21921 | Med | 0.29 | 4.4 | 0.01 | Jan 11, 2022 | Windows Defender Credential Guard Security Feature Bypass Vulnerability | ||
| CVE-2022-21920 | Hig | 0.57 | 8.8 | 0.03 | Jan 11, 2022 | Windows Kerberos Elevation of Privilege Vulnerability | ||
| CVE-2022-21919 | Hig | 0.58 | 7.0 | 0.03 | KEV | Jan 11, 2022 | Windows User Profile Service Elevation of Privilege Vulnerability | |
| CVE-2022-21918 | Med | 0.42 | 6.5 | 0.01 | Jan 11, 2022 | DirectX Graphics Kernel File Denial of Service Vulnerability | ||
| CVE-2022-21917 | Hig | 0.51 | 7.8 | 0.04 | Jan 11, 2022 | HEVC Video Extensions Remote Code Execution Vulnerability | ||
| CVE-2022-21916 | Hig | 0.51 | 7.8 | 0.01 | Jan 11, 2022 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | ||
| CVE-2022-21915 | Med | 0.42 | 6.5 | 0.03 | Jan 11, 2022 | Windows GDI+ Information Disclosure Vulnerability | ||
| CVE-2022-21914 | Hig | 0.51 | 7.8 | 0.01 | Jan 11, 2022 | Windows Remote Access Connection Manager Elevation of Privilege Vulnerability | ||
| CVE-2022-21913 | Med | 0.35 | 5.3 | 0.03 | Jan 11, 2022 | Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass | ||
| CVE-2022-21912 | Hig | 0.51 | 7.8 | 0.01 | Jan 11, 2022 | DirectX Graphics Kernel Remote Code Execution Vulnerability | ||
| CVE-2022-21911 | Hig | 0.49 | 7.5 | 0.03 | Jan 11, 2022 | .NET Framework Denial of Service Vulnerability | ||
| CVE-2022-21910 | Hig | 0.51 | 7.8 | 0.01 | Jan 11, 2022 | Microsoft Cluster Port Driver Elevation of Privilege Vulnerability | ||
| CVE-2022-21908 | Hig | 0.51 | 7.8 | 0.01 | Jan 11, 2022 | Windows Installer Elevation of Privilege Vulnerability | ||
| CVE-2022-21907 | Cri | 0.74 | 9.8 | 0.93 | Jan 11, 2022 | HTTP Protocol Stack Remote Code Execution Vulnerability | ||
| CVE-2022-21906 | Med | 0.36 | 5.5 | 0.01 | Jan 11, 2022 | Windows Defender Application Control Security Feature Bypass Vulnerability | ||
| CVE-2022-21905 | Med | 0.30 | 4.6 | 0.01 | Jan 11, 2022 | Windows Hyper-V Security Feature Bypass Vulnerability | ||
| CVE-2022-21904 | Hig | 0.49 | 7.5 | 0.04 | Jan 11, 2022 | Windows GDI Information Disclosure Vulnerability | ||
| CVE-2022-21903 | Hig | 0.46 | 7.0 | 0.01 | Jan 11, 2022 | Windows GDI Elevation of Privilege Vulnerability |
- risk 0.51cvss 7.8epss 0.03
Zoho ManageEngine O365 Manager Plus before Build 4416 allows remote code execution via BCP file overwrite through the ChangeDBAPI component.
- risk 0.58cvss 8.8epss 0.05
Zoho ManageEngine CloudSecurityPlus before Build 4117 allows remote code execution through the updatePersonalizeSettings component due to an improper security patch for CVE-2021-40175.
- risk 0.50cvss 8.8epss 0.02
crater is vulnerable to Unrestricted Upload of File with Dangerous Type
- risk 0.47cvss 7.2epss 0.05
Zoho ManageEngine M365 Manager Plus before Build 4419 allows remote command execution when updating proxy settings through the Admin ProxySettings and Tenant ProxySettings components.
- risk 0.35cvss 5.4epss 0.01
Django CMS 3.7.3 does not validate the plugin_type parameter while generating error messages for an invalid plugin type, resulting in a Cross Site Scripting (XSS) vulnerability. The vulnerability allows an attacker to execute arbitrary JavaScript code in the web browser of the…
- risk 0.57cvss 8.8epss 0.02
GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12.
- risk 0.49cvss 7.5epss 0.01
growi is vulnerable to Authorization Bypass Through User-Controlled Key
- risk 0.28cvss 5.4epss 0.01
snipe-it is vulnerable to Missing Authorization
- risk 0.28cvss 5.4epss 0.01
orchardcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- risk 0.33cvss 6.1epss 0.03
keystone is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- risk 0.46cvss 8.1epss 0.01
SpiceDB is a database system for managing security-critical application permissions. Any user making use of a wildcard relationship under the right hand branch of an `exclusion` or within an `intersection` operation will see `Lookup`/`LookupResources` return a resource as…
- risk 0.36cvss 5.5epss 0.00
nf_tables_newset in net/netfilter/nf_tables_api.c in the Linux kernel before 5.12.13 allows local users to cause a denial of service (NULL pointer dereference and general protection fault) because of the missing initialization for nft_set_elem_expr_alloc. A local user can set a…
- risk 0.57cvss 8.8epss 0.02
Apache Guacamole 1.2.0 and 1.3.0 do not properly validate responses received from a SAML identity provider. If SAML support is enabled, this may allow a malicious user to assume the identity of another Guacamole user.
- risk 0.42cvss 6.5epss 0.02
Apache Guacamole 1.3.0 and older may incorrectly include a private tunnel identifier in the non-private details of some REST responses. This may allow an authenticated user who already has permission to access a particular connection to read from or interact with another user's…
- risk 0.40cvss 6.1epss 0.03
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
- risk 0.59cvss 9.0epss 0.01
Microsoft Exchange Server Remote Code Execution Vulnerability
- risk 0.36cvss 5.5epss 0.01
Remote Desktop Licensing Diagnoser Information Disclosure Vulnerability
- risk 0.42cvss 6.4epss 0.01
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
- risk 0.44cvss 6.8epss 0.01
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
- risk 0.44cvss 6.8epss 0.01
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
- risk 0.44cvss 6.8epss 0.01
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
- risk 0.44cvss 6.8epss 0.01
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
- risk 0.44cvss 6.8epss 0.01
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
- risk 0.40cvss 6.1epss 0.02
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
- risk 0.49cvss 7.6epss 0.01
Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability
- risk 0.27cvss 4.2epss 0.01
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- risk 0.27cvss 4.2epss 0.01
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- risk 0.16cvss 2.5epss 0.02
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- risk 0.41cvss 6.3epss 0.01
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
- risk 0.35cvss 5.3epss 0.03
Windows BackupKey Remote Protocol Security Feature Bypass Vulnerability
- risk 0.35cvss 5.3epss 0.03
Workstation Service Remote Protocol Security Feature Bypass Vulnerability
- risk 0.57cvss 8.8epss 0.03
Remote Procedure Call Runtime Remote Code Execution Vulnerability
- risk 0.29cvss 4.4epss 0.01
Windows Defender Credential Guard Security Feature Bypass Vulnerability
- risk 0.57cvss 8.8epss 0.03
Windows Kerberos Elevation of Privilege Vulnerability
- risk 0.58cvss 7.0epss 0.03
Windows User Profile Service Elevation of Privilege Vulnerability
- risk 0.42cvss 6.5epss 0.01
DirectX Graphics Kernel File Denial of Service Vulnerability
- risk 0.51cvss 7.8epss 0.04
HEVC Video Extensions Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- risk 0.42cvss 6.5epss 0.03
Windows GDI+ Information Disclosure Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
- risk 0.35cvss 5.3epss 0.03
Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass
- risk 0.51cvss 7.8epss 0.01
DirectX Graphics Kernel Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.03
.NET Framework Denial of Service Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft Cluster Port Driver Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Installer Elevation of Privilege Vulnerability
- risk 0.74cvss 9.8epss 0.93
HTTP Protocol Stack Remote Code Execution Vulnerability
- risk 0.36cvss 5.5epss 0.01
Windows Defender Application Control Security Feature Bypass Vulnerability
- risk 0.30cvss 4.6epss 0.01
Windows Hyper-V Security Feature Bypass Vulnerability
- risk 0.49cvss 7.5epss 0.04
Windows GDI Information Disclosure Vulnerability
- risk 0.46cvss 7.0epss 0.01
Windows GDI Elevation of Privilege Vulnerability