Browse CVEs

MEDIUM 5.5 CVE-2022-21704 log4js-node is a port of log4js to node.js. In affected versions default file permissions for log files created by the file, fileSync and dateFile ap… Debian Linux 6.4.0+ Fix from $1,6002022-01-19 HIGH 8.8 CVE-2022-21699 IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Python prog… Debian Linux 7.16.3 / 7.31.1+ Fix from $1,9502022-01-19 MEDIUM 5.4 CVE-2021-23225 Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary web script or HTML in the "new_username" field during cr… Debian Linux Mitigation only Fix from $1,6002022-01-19 CRITICAL 9.8 CVE-2021-33912EPSS 10% libspf2 before 1.2.11 has a four-byte heap-based buffer overflow that might allow remote attackers to execute arbitrary code (via an unauthenticated … Debian Linux 1.2.11+ Fix from $2,3002022-01-19 CRITICAL 9.8 CVE-2022-23221EPSS 65% H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FO… Debian Linux 2.0.206+ Fix from $2,3002022-01-19 MEDIUM 5.3 CVE-2022-21349 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affecte… Debian Linux after 11.70.1 Fix from $1,6002022-01-19 MEDIUM 5.3 CVE-2022-21360 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are af… Debian Linux after 15.0.5 Fix from $1,6002022-01-19 MEDIUM 5.3 CVE-2022-21365 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are af… Debian Linux after 15.0.5 Fix from $1,6002022-01-19 MEDIUM 5.3 CVE-2022-21366 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are af… Debian Linux after 15.0.5 Fix from $1,6002022-01-19 MEDIUM 5.3 CVE-2022-21340EPSS 8% Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are … Debian Linux after 15.0.5 Fix from $1,6002022-01-19 MEDIUM 5.3 CVE-2022-21341 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that … Debian Linux after 15.0.5 Fix from $1,6002022-01-19 MEDIUM 5.3 CVE-2022-21305 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are af… Debian Linux after 15.0.5 Fix from $1,6002022-01-19 MEDIUM 5.3 CVE-2022-21291 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are af… Debian Linux after 15.0.5 Fix from $1,6002022-01-19 MEDIUM 5.3 CVE-2022-21293EPSS 8% Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are … Debian Linux after 15.0.5 Fix from $1,6002022-01-19 MEDIUM 5.3 CVE-2022-21294 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are … Debian Linux after 15.0.5 Fix from $1,6002022-01-19 MEDIUM 5.3 CVE-2022-21296 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affec… Debian Linux after 15.0.5 Fix from $1,6002022-01-19 MEDIUM 5.3 CVE-2022-21299 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affec… Debian Linux after 15.0.5 Fix from $1,6002022-01-19 MEDIUM 5.3 CVE-2022-21277 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are af… Debian Linux after 15.0.5 Fix from $1,6002022-01-19 MEDIUM 5.3 CVE-2022-21282 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affec… Debian Linux after 15.0.5 Fix from $1,6002022-01-19 MEDIUM 5.3 CVE-2022-21283 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are … Debian Linux after 15.0.5 Fix from $1,6002022-01-19 HIGH 7.8 CVE-2022-0261 Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. Debian Linux 8.2.4120 / 13.0+ Fix from $1,9502022-01-18 MEDIUM 6.1 CVE-2022-0235 node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor Debian Linux 1.0 / 2.6.7+ Fix from $1,6002022-01-16 MEDIUM 6.6 CVE-2022-0213 vim is vulnerable to Heap-based Buffer Overflow Debian Linux 8.2+ Fix from $1,6002022-01-14 CRITICAL 9.8 CVE-2022-23218 The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path argument on t… Debian Linux 2.31+ Fix from $2,3002022-01-14 CRITICAL 9.8 CVE-2022-23219 The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname argument on … Debian Linux 2.31+ Fix from $2,3002022-01-14 HIGH 7.5 CVE-2022-20698 A vulnerability in the OOXML parsing module in Clam AntiVirus (ClamAV) Software version 0.104.1 and LTS version 0.103.4 and prior versions could allo… Debian Linux 0.103.5 / 0.104.2+ Fix from $1,9502022-01-14 MEDIUM 5.5 CVE-2021-37529 A double-free vulnerability exists in fig2dev through 3.28a is affected by: via the free_stream function in readpics.c, which could cause a denial of… Debian Linux after 3.2.8a Fix from $1,6002022-01-12 MEDIUM 5.5 CVE-2021-37530 A denial of service vulnerabiity exists in fig2dev through 3.28a due to a segfault in the open_stream function in readpics.c. Debian Linux after 3.2.8a Fix from $1,6002022-01-12 HIGH 7.8 CVE-2021-36409 There is an Assertion `scaling_list_pred_matrix_id_delta==1' failed at sps.cc:925 in libde265 v1.0.8 when decoding file, which allows attackers to ca… Debian Linux No fix yet Fix from $1,9502022-01-10 MEDIUM 5.5 CVE-2021-36410 A stack-buffer-overflow exists in libde265 v1.0.8 via fallback-motion.cc in function put_epel_hv_fallback when running program dec265. Debian Linux No fix yet Fix from $1,6002022-01-10