CVEs published in March 2022
2,440 vulnerabilities, 400 critical, 18 exploited.
- fortinet fortiosA improper input validation in Fortinet FortiGate version 6.4.3 and below, version 6.2.5 and...2.6 Low
- wireapp wire-avs, wire wire-audio video signaling +1 moreUse of Externally-Controlled Format String in wire-avs9.8 Critical
- fortinet fortianalyzer, fortimanager, fortimanager, fortianalyzer +2 moreA improper handling of insufficient permissions or privileges in Fortinet FortiAnalyzer version 5...4.3 Medium
- fortinet fortiwlmA improper neutralization of special elements used in an os command ('os command injection') in...8.8 High
- fortinet fortimailAn improper input validation vulnerability in the web server CGI facilities of FortiMail before 7...7.7 High
- fortinet fortimailAn improper authentication vulnerability in FortiMail before 7.0.1 may allow a remote attacker to...9.8 Critical
- fortinet fortiportalThe use of a cryptographically weak pseudo-random number generator in the password reset feature...8.1 High
- ibm mq, mq appliance +1 moreIBM MQ Appliance 9.2 CD and 9.2 LTS local messaging users stored with a password hash that...5.1 Medium
- ibm mq, mq appliance +1 moreIBM MQ Appliance 9.2 CD and 9.2 LTS does not invalidate session after logout which could allow an...5.6 Medium
- ibm aix, vios +1 moreIBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a local user with elevated privileges to cause a...4.4 Medium
- ibm spectrum scaleA security vulnerability in the Spectrum Scale 5.0 and 5.1 allows a non-root user to overflow the...6.2 Medium
- taocmsAn issue was discovered in taocms 3.0.2. This is a SQL blind injection that can obtain database...7.5 High
- ayacms project ayacmsAyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE) via /aya/module/admin/ust_tab_e.inc.php,7.2 High
- zyxel zywall 2 plus internet security appliance firmwareZyXEL ZyWALL 2 Plus Internet Security Appliance is affected by Cross Site Scripting (XSS)....6.1 Medium
- taogogo taocmsThere is a SQL injection vulnerability in the background of taocms 3.0.2 in parameter id:action...8.8 High
- keep archeevoArcheevo below 5.0 is affected by local file inclusion through file=~/web.config to allow an...7.5 High
- f-secure linux security, atlant, elements endpoint protection +3 more +5 moreDenial-of-Service (DoS) Vulnerability4.6 Medium
- microweber, microweber microweber/microweber +1 moreWeak Password Recovery Mechanism for Forgotten Password in microweber/microweber7.3 High
- hakimel hakimel/reveal.js, revealjs reveal.js +1 moreCross-site Scripting (XSS) - DOM in hakimel/reveal.js5.3 Medium
- debian linux, linux kernel, fedoraproject fedora +20 more +22 moreA vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in...7.8 High
- zyxel nwa1100-nh firmwareA command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware could...9.8 Critical
- zyxel vmg3625-t50b firmware, ax7501-b0 firmware, dx3301-t0 firmware +28 more +30 moreA command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware could...6.5 Medium
- trustedfirmware trusted firmware-mTrusted Firmware M 1.4.x through 1.4.1 has a buffer overflow issue in the Firmware Update...7.8 High
- zohocorp manageengine key manager plusAn issue was discovered in Zoho ManageEngine Key Manager Plus 6.1.6. A user, with the level...4.3 Medium
- asus rog live service, armoury crate & aura creator installer (rog live service) +1 moreASUS Armoury Crate & Aura Creator Installer之ROG Live Service - Improper Link Resolution Before File Access7.7 High
- hicos citizen certificate client-side component, moica hicos +1 moreHicos citizen certificate client-side component - Command Injection9.8 Critical
- slic3r libslic3rAn out-of-bounds read vulnerability exists in the GCode::extrude() functionality of Slic3r...5.5 Medium
- slic3r libslic3rA memory leakage flaw exists in the class PerimeterGenerator of Slic3r libslic3r 1.3.0 and Master...5.5 Medium
- algorithmia msolA Remote Code Execution (RCE) vulnerability exists in Algorithmia MSOL all versions before...8.8 High
- htmlyA cross-site scripting (XSS) vulnerability in Htmly v2.8.1 allows attackers to excute arbitrary...5.4 Medium
- pluxmlA cross-site scripting (XSS) vulnerability in Pluxml v5.8.7 allows attackers to execute arbitrary...5.4 Medium
- pluxmlPluxml v5.8.7 was discovered to allow attackers to execute arbitrary code via crafted PHP code...8.8 High
- cipiCross-site Scripting in Cipi5.4 Medium
- image processing project processing, janko image processing, debian linux +2 moreImproper Input Validation in image_processing9.8 Critical
- google android, mediatek, inc. mt6731, mt6732, mt6735, mt6737, mt6739, mt6750, mt6750s, mt6752, mt6753, mt6755, mt6755s, mt6757, mt6758, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6795, mt6797, mt6799, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6880, mt6883, mt6885, mt6889, mt6890, mt6891, mt6893, mt8167, mt8168, mt8173, mt8183, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8666, mt8667, mt8675, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn ims service, there is a possible escalation of privilege due to a missing permission check....7.8 High
- google android, mediatek, inc. mt5816, mt5835, mt6885, mt6893, mt9900, mt9901, mt9950, mt9969, mt9970, mt9980 +1 moreIn video decoder, there is a possible out of bounds write due to a missing bounds check. This...7.8 High
- google android, mediatek, inc. mt5816, mt5835, mt6885, mt6893, mt9900, mt9901, mt9950, mt9969, mt9970, mt9980 +1 moreIn video decoder, there is a possible out of bounds write due to a missing bounds check. This...7.8 High
- google android, pixel +1 moreIn kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due...7.8 High
- google androidIn usb_gadget_giveback_request of core.c, there is a possible use after free out of bounds read...4.1 Medium
- google androidProduct: AndroidVersions: Android kernelAndroid ID: A-208229524References: N/A9.8 Critical
- google androidIn prepare_io_entry and prepare_response of lwis_ioctl.c and lwis_periodic_io.c, there is a...6.7 Medium
- google androidIn gasket_alloc_coherent_memory of gasket_page_table.c, there is a possible memory corruption due...6.4 Medium
- google androidIn sendMessage of OneToOneChatImpl.java (? TBD), there is a possible way to send an RCS message...7.8 High
- google androidIn amcs_cdev_unlocked_ioctl of audiometrics.c, there is a possible out of bounds write due to...6.7 Medium
- google androidIn copy_io_entries of lwis_ioctl.c, there is a possible out of bounds write due to an integer...7.8 High
- google androidIn ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of...6.7 Medium
- google androidIn TBD of TBD, there is a possible out of bounds read due to a missing bounds check. This could...4.4 Medium
- google androidIn the TitanM chip, there is a possible out of bounds write due to a missing bounds check. This...6.7 Medium
- google androidIn eicPresentationRetrieveEntryValue of acropora/app/identity/libeic/EicPresentation.c, there is...4.1 Medium
- google androidIn cd_ParseMsg of cd_codec.c, there is a possible out of bounds read due to an incorrect bounds...7.5 High
- Show moreLoading…