CVEs published in March 2022
2,440 vulnerabilities, 400 critical, 18 exploited.
- asciidoctor-include-ext project asciidoctor-include-ext Command Injection vulnerability in asciidoctor-include-ext 10.0 Critical
- deepmerge-ts project deepmerge-ts Prototype Pollution in deepmerge-ts 8.1 High
- internet routing registry daemon project routing registry daemon, irrdnet irrd +1 more Insufficient password hash filtering in some IRRd queries and exports 7.5 High
- auth0 express-openid-connect, express openid connect +1 more Open Redirect in express-openid-connect 7.5 High
- jens-maus raspberrymatic Remote Command Injection in RaspberryMatic 10.0 Critical
- pomerium Exposure of Sensitive Information in Pomerium 6.5 Medium
- jupyter notebook Insertion of Sensitive Information into Log File affects Jupyter Notebook 7.5 High
- netsarang xshell Xshell v7.0.0099 and below contains a binary hijack vulnerability which allows attackers to... 6.5 Medium
- netsarang xlpd Xlpd v7.0.0094 and below contains a binary hijack vulnerability which allows attackers to execute... 6.5 Medium
- netsarang xmanager Xmanager v7.0.0096 and below contains a binary hijack vulnerability which allows attackers to... 6.5 Medium
- netsarang xftp Xftp 7.0.0088p and below contains a binary hijack vulnerability which allows attackers to execute... 6.5 Medium
- freesshd freeftpd FreeFtpd version 1.0.13 and below contains an unquoted service path vulnerability which allows... 7.8 High
- bitcomet BitComet Service for Windows before version 1.8.6 contains an unquoted service path vulnerability... 7.8 High
- raidrive Raidrive before v2021.12.35 allows attackers to arbitrarily move log files by pre-creating a... 2.0 Low
- dlink dir-645 firmware D-Link DIR-645 1.03 A1 is vulnerable to Buffer Overflow. The hnap_main function in the cgibin... 9.8 Critical
- hospital management system project management system Hospital Management System v1.0 was discovered to lack an authorization component, allowing... 9.1 Critical
- maccms Cross Site Scripting (XSS) vulnerability exists in Maccms v10 via link_Name parameter. 6.1 Medium
- secretarycms the secretary A Remote Code Execution (RCE) vulnerability exists in The-Secretary 2.5 via install.php. 9.8 Critical
- hoosk A vulnerability exists in Hoosk 1.8.0 in /install/index.php, due to a failure to check if config... 5.4 Medium
- simple client management system project client management system A Remote Code Execution (RCE) vulnerability exists in Simple Client Management System 1.0 in... 9.8 Critical
- vmware spring framework, cisco cx cloud agent, oracle commerce platform +35 more +37 more Remote Code Execution in Spring Framework 9.8 Critical
- dolibarr erp\/crm Access Control vulnerability in Dolibarr 7.5 High
- htmly A Cross Site Scripting (XSS) vulnerability exists in htmly.2.8.1 via the Copyright field in the ... 4.8 Medium
- chikitsa patient management software A Cross Site Scripting (XSS) vulnerability exists in Chikista Patient Management Software 2.0.2... 4.8 Medium
- htmly A Cross Site Scripting (XSS) vulnerability exists in DanPros htmly 2.8.1 via the Description... 4.8 Medium
- pixelimity A Cross Site Scripting vulnerabilty exists in Pixelimity 1.0 via the Site Description field in... 4.8 Medium
- chikitsa patient management software A Cross Site Scripting (XSS) vulnerability exists in Chikista Patient Management Software 2.0.2... 4.8 Medium
- dolibarr erp\/crm SQL Injection in Dolibarr 8.8 High
- ibm security verify access IBM Security Verify Access could allow a user, using man in the middle techniques, to obtain... 4.8 Medium
- simple client management system project client management system An SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via... 9.8 Critical
- simple client management system project client management system Multiple Cross Site Scripting (XSS) vulnerabilities exist in Ssourcecodester Simple Client... 5.4 Medium
- wpanel cms project cms Unrestricted Upload of File with Dangerous Type in WPanel 4 8.8 High
- b3log vditor, vanessa219 vanessa219/vditor +1 more Cross-site Scripting (XSS) - Stored in vanessa219/vditor 6.1 Medium
- hospital management system project management system Hospital Management System v1.0 is affected by an unrestricted upload of dangerous file type... 9.8 Critical
- livehelperchat livehelperchat/livehelperchat, live helper chat +1 more Loose comparison causes IDOR on multiple endpoints in livehelperchat/livehelperchat 7.5 High
- elecom edwrc-2533gst2 firmware, wrc-1167gst2 firmware, wrc-1167gst2a firmware +21 more +23 more Improper access control vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and... 8.8 High
- livehelperchat livehelperchat/livehelperchat, live helper chat +1 more SSRF on index.php/cobrowse/proxycss/ in livehelperchat/livehelperchat 8.7 High
- hibara attachecase Untrusted search path vulnerability in AttacheCase ver.3.6.1.0 and earlier allows an attacker to... 7.8 High
- zero-channel bbs plus developers bbs plus, zero-channel plus project plus +1 more Cross-site scripting vulnerability in Zero-channel BBS Plus v0.7.4 and earlier allows a remote... 6.1 Medium
- netgate pfsense, pfsense plus, pfsense ce and pfsense plus +2 more Improper access control vulnerability in pfSense CE and pfSense Plus (pfSense CE software... 8.8 High
- hibara attachecase Untrusted search path vulnerability in AttacheCase ver.4.0.2.7 and earlier allows an attacker to... 7.8 High
- netgate pfsense, pfsense plus, pfsense ce and pfsense plus +2 more Improper input validation vulnerability in pfSense CE and pfSense Plus (pfSense CE software... 8.8 High
- advancedcustomfields advanced custom fields Missing authorization vulnerability in Advanced Custom Fields versions prior to 5.12.1 and... 6.5 Medium
- nippon telegraph and telephone east corporation (ntt east) and nippon telegraph and telephone west corporation (ntt west) netcommunity og410x and og810x series, ntt-east og810xi firmware, og410xa firmware +2 more +4 more Netcommunity OG410X and OG810X series (Netcommunity OG410Xa, OG410Xi, OG810Xa, and OG810Xi... 8.8 High
- netgate pfsense plus, pfsense, pfsense ce and pfsense plus +2 more Cross-site scripting vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions 2... 6.1 Medium
-
pjprojectDebian pjproject - regression update No score - totolink ex300 v2 firmware totolink EX300_v2 V4.0.3c.140_B20210429 was discovered to contain a command injection... 7.5 High
- totolink a720r firmware, ex300 v2 firmware +1 more totolink EX300_v2, ver V4.0.3c.140_B20210429 and A720R ,ver V4.1.5cu.470_B20200911 have an issue... 6.5 Medium
- totolink ex300 v2 firmware totolink EX300_v2 V4.0.3c.140_B20210429 was discovered to contain a reflected cross-site... 6.1 Medium
- totolink ex300 v2 firmware totolink EX300_v2 V4.0.3c.140_B20210429 was discovered to contain a command injection... 8.1 High
- Show olderLoading…