CVEs published in March 2022
2,440 vulnerabilities, 400 critical, 18 exploited.
- vmware workspace one boxerVMware Workspace ONE Boxer contains a stored cross-site scripting (XSS) vulnerability. Due to...5.4 Medium
- zulip, zulip server +1 moreCross-site scripting vulnerability in Zulip Server4.6 Medium
- monitorjbl excel-streaming-reader, excel streaming reader project streaming reader +1 moreImproper Restriction of XML External Entity Reference in Excel-Streaming-Reader9.8 Critical
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP has incorrect default permissions for site members6.5 Medium
- seacmsseacms V11.5 is affected by an arbitrary code execution vulnerability in admin_config.php.9.8 Critical
phpMageiaUpdated php packages fix security vulnerabilityNo score- home owners collection management system project owners collection management systemHome Owners Collection Management System v1.0 was discovered to contain an arbitrary file upload...9.8 Critical
- fortinet fortiwlmMultiple relative path traversal vulnerabilities [CWE-23] in FortiWLM management interface 8.6.2...5.4 Medium
- ibm aix, vios +1 moreIBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a...6.2 Medium
- ibm aix, vios +1 moreIBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a...6.2 Medium
- dolibarr dolibarr/dolibarr, erp\/crm +1 moreCode Injection in dolibarr/dolibarr7.2 High
- zohocorp manageengine key manager plusAn issue was discovered in Zoho ManageEngine Key Manager Plus before 6200. A service exposed by...6.5 Medium
- zohocorp manageengine sharepoint manager plusZoho ManageEngine SharePoint Manager Plus before 4329 is vulnerable to a sensitive data leak that...9.8 Critical
- zohocorp manageengine sharepoint manager plusZoho ManageEngine SharePoint Manager Plus before 4329 allows account takeover because...9.8 Critical
- zohocorp manageengine desktop centralZoho ManageEngine Desktop Central before 10.1.2137.8 exposes the installed server name to anyone....5.3 Medium
- qtQt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working...7.5 High
- webmin, webmin webmin/webmin +1 moreImproper Authorization in webmin/webmin5.4 Medium
- jquery.cookie project jquery.cookiePrototype Pollution in jquery.cookie6.1 Medium
- fortinet fortitoken mobile, fortitokenandroid +1 moreAn improper access control vulnerability [CWE-284 ] in FortiToken Mobile (Android) external push...4.1 Medium
- fortinet fortiap-cAn improper neutralization of special elements used in an OS Command vulnerability [CWE-78] in...7.8 High
- fortinet fortimanagerAn exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE...2.8 Low
- containerd, debian linux, fedoraproject fedora +2 moreInsecure handling of image volumes in containerd CRI plugin7.5 High
- webmin, webmin webmin/webmin +1 moreImproper Access Control to Remote Code Execution in webmin/webmin8.3 High
- haproxy, debian linux, redhat enterprise linux +2 more +4 moreA flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header....7.5 High
- openstack nova, openstack-nova, redhat openstack platform +2 moreOpen Redirect in CPython that affects users of OpenStack Nova6.1 Medium
- tsmuxer project tsmuxertsMuxer git-2678966 was discovered to contain a heap-based buffer overflow via the function...5.5 Medium
- rtl 433 project 433An Off-by-one Error occurs in cmr113_decode of rtl_433 21.12 when decoding a crafted file.5.5 Medium
- tsmuxer project tsmuxerAn integer overflow in DTSStreamReader::findFrame() of tsMuxer git-2678966 allows attackers to...5.5 Medium
- tsmuxer project tsmuxertsMuxer git-c6a0277 was discovered to contain a segmentation fault via DTSStreamReader::findFrame...5.5 Medium
- tsmuxer project tsmuxerThere is an Assertion `num <= INT_BIT' failed at BitStreamReader::skipBits in /bitStream.h:132 of...5.5 Medium
- rtl 433 project rlt 433rtl_433 21.12 was discovered to contain a stack overflow in the function somfy_iohc_decode()....5.5 Medium
- extensis portfolioExtensis Portfolio v4.0 was discovered to contain hardcoded credentials which allows attackers to...8.8 High
- extensis portfolioAn unrestricted file upload vulnerability in the Backup/Restore Archive component of Extensis...8.8 High
- extensis portfolioExtensis Portfolio v4.0 was discovered to contain an authenticated unrestricted file upload...8.8 High
- extensis portfolioAn unrestricted file upload vulnerability in the FileTransferServlet component of Extensis...8.8 High
- extensis portfolioExtensis Portfolio v4.0 was discovered to contain an authenticated unrestricted file upload...8.8 High
- pfsensediag_routes.php in pfSense 2.5.2 allows sed data injection. Authenticated users are intended to...8.8 High
- argussurveillance dvrArgus Surveillance DVR v4.0 employs weak password encryption.5.5 Medium
- batflatInsecure permissions in the file database.sdb of BatFlat CMS v1.3.6 allows attackers to dump the...7.5 High
- stepmaniaThe component /rootfs in RageFile of Stepmania v5.1b2 and below allows attackers access to the...9.1 Critical
scrapyPyPIScrapy cookie-setting is not restricted based on the public suffix listNo score- scrapy, scrapy scrapy/scrapy, debian linux +2 moreExposure of Sensitive Information to an Unauthorized Actor in scrapy/scrapy8.8 High
- acquia mauticImproper regex in htaccess file7.2 High
github.com/pomerium/pomeriumGoMultiple security issues in Pomerium's embedded envoyNo scoregithub.com/google/fscryptGoPossible privilege escalation via bash completion scriptNo scoregithub.com/coredns/corednsGoImproper random number generation in github.com/coredns/corednsNo score- fluture-js fluture-nodeUnauthorized forwarding of confidential headers in fluture-node2.6 Low
- finastra ssr-pagesPath Traversal in ssr-pages7.6 High
- finastra ssr-pagesCross Site Scripting (XSS) in ssr-pages6.1 Medium
- fortinet fortiwlmA improper neutralization of special elements used in an sql command ('sql injection') in...8.8 High
- Show moreLoading…