Skip to content

CyberSecBulletin

CVEs published on January 13, 2022

9 vulnerabilities, ordered with the most urgent first.

9.8 Critical severity
Zabbix Frontend Authentication Bypass Exploited
CVE-2022-23131Jan 13, 2022ZabbixEPSS 95.7%
5.3 Medium severity
Zabbix Frontend Improper Access Control Exploited
CVE-2022-23134Jan 13, 2022ZabbixEPSS 95.3%
9.8 Critical severity
My Cloud: Out-of-bounds Write
CVE-2022-22989Jan 13, 2022Western DigitalEPSS 1.35%
9.1 Critical severity
EdgeRover: Incorrect Permission Assignment for Critical Resource
CVE-2022-22988Jan 13, 2022Western Digital
8.8 High severity
discourse: Improper Authentication
CVE-2022-21684Jan 13, 2022Discourse
8.8 High severity
My Cloud: Incorrect Comparison
CVE-2022-22990Jan 13, 2022Western DigitalEPSS 2.19%
8.8 High severity
My Cloud: Improper Neutralization of Special Elements used in a Command
CVE-2022-22991Jan 13, 2022Western DigitalEPSS 1.33%
8.8 High severity
In DayByDay CRM, versions 2.2.0 through 2.2.1 (latest) are vulnerable to Insufficient Session…
CVE-2022-22113Jan 13, 2022BotteletEPSS 1.06%
7.3 High severity
Proxy, Server: Incorrect Permission Assignment for Critical Resource
CVE-2022-23132Jan 13, 2022Zabbix