CVEs published in March 2022
2,440 vulnerabilities, 400 critical, 18 exploited.
- zeplRemote Code Execution (RCE) vulnerability exists in Zepl Notebooks all previous versions before...8.8 High
- devolutions password hubThe biometric lock in Devolutions Password Hub for iOS before 2021.3.4 allows attackers to access...6.6 Medium
- element-it http commanderA stored cross-site scripting (XSS) vulnerability in the admin interface in Element-IT HTTP...6.1 Medium
- metalgenix genixcmsCross-site Scripting in GeniXCMS5.4 Medium
yaraOSS-FuzzHeap-buffer-overflow in dotnet_parse_tilde_2No score- frrouting, fedoraproject fedora +1 moreBuffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to the use of strdup with a...7.8 High
- frroutingBuffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the input...7.8 High
- vmware spring cloud gateway, oracle commerce guided search, communications cloud native core binding support function +7 more +9 moreSpring Cloud Gateway vulnerable to Code Injection when Gateway Actuator endpoint enabled, exposed, unsecured10.0 Critical
- twisted, debian linux, fedoraproject fedora +2 more +4 moreBuffer Overflow in Twisted7.5 High
- cacti, debian linux, fedoraproject fedora +2 moreUnder certain ldap conditions, Cacti authentication can be bypassed with certain credential types.9.8 Critical
- digitaldruid hoteldruidHotelDruid v3.0.3 was discovered to contain a remote code execution (RCE) vulnerability which is...8.8 High
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP fails to check origin of event messages5.3 Medium
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) in the Gogo Shell module5.4 Medium
- ok-file-formats project ok-file-formatsDavid Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow. When the function of the...7.8 High
- kofax printixPrintix Secure Cloud Print Management 1.3.1035.0 incorrectly uses Privileged APIs.9.8 Critical
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) in edit blog entry page5.4 Medium
- ok-file-formats project ok-file-formatsDavid Brackeen ok-file-formats 203defd is vulnerable to Buffer Overflow. When the function of the...7.8 High
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP cross-site scripting (XSS) vulnerability via the script console6.1 Medium
- open-emr openemrAn Insecure Direct Object Reference (IDOR) vulnerability in OpenEMR 6.0.0 allows any...8.1 High
- liferay portalLiferay Portal vulnerable to cross-site scripting (XSS) via the keywords parameter6.1 Medium
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS)5.4 Medium
- liferay portal, digital experience platform +1 moreLiferay Portal and Liferay DXP fails to properly import users from LDAP7.5 High
- bank management system project management systemBank Management System v1.o was discovered to contain a SQL injection vulnerability via the email...9.8 Critical
- simple mobile comparison website project mobile comparison websiteSimple Mobile Comparison Website v1.0 was discovered to contain a SQL injection vulnerability via...9.8 Critical
- air cargo management system project cargo management systemAir Cargo Management System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- simple real estate portal system project real estate portal systemSimple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via...9.8 Critical
- auto spare parts management project spare parts managementAuto Spare Parts Management v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- cosmetics and beauty product online store project and beauty product online storeCosmetics and Beauty Product Online Store v1.0 was discovered to contain a SQL injection...9.8 Critical
- cosmetics and beauty product online store project and beauty product online storeCosmetics and Beauty Product Online Store v1.0 was discovered to contain multiple reflected cross...9.6 Critical
- medical store management system project store management systemMedical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via...9.8 Critical
- simple bakery shop management project bakery shop managementSimple Bakery Shop Management v1.0 was discovered to contain a SQL injection vulnerability via...7.5 High
- home owners collection management system project owners collection management systemA remote code execution (RCE) vulnerability in the Avatar parameter under /admin/?page=user...7.8 High
- event management project managementEvent Management v1.0 was discovered to contain a reflected cross-site scripting (XSS)...6.1 Medium
- github view component, viewcomponent +1 moreCross-site Scripting in view_component8.1 High
- microsoft nbdkit, redhat enterprise linux +1 moreA flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS...3.1 Low
- hpe arubaos-cxMultiple unauthenticated command injection vulnerabilities were discovered in the AOS-CX API...6.1 Medium
- hpe arubaos-cxMultiple authenticated remote path traversal vulnerabilities were discovered in the AOS-CX...8.1 High
- hpe arubaos-cxMultiple authenticated remote code execution vulnerabilities were discovered in the AOS-CX...8.8 High
- hpe arubaos-cxAn authenticated remote code execution vulnerability was discovered in the AOS-CX Network...8.8 High
- hp probook 440 g8 firmware, prodesk 405 g6 small form factor firmware +1 morePotential vulnerabilities have been identified in the BIOS for some HP PC products which may...5.5 Medium
- hp probook 440 g8 firmware, prodesk 405 g6 small form factor firmware +1 morePotential vulnerabilities have been identified in the BIOS for some HP PC products which may...5.5 Medium
- hp probook 440 g8 firmware, prodesk 405 g6 small form factor firmware +1 morePotential vulnerabilities have been identified in the BIOS for some HP PC products which may...5.5 Medium
- hp probook 440 g8 firmware, prodesk 405 g6 small form factor firmware +1 morePotential vulnerabilities have been identified in the BIOS for some HP PC products which may...5.5 Medium
- osgeo shapelibA double-free condition exists in contrib/shpsort.c of shapelib 1.5.0 and older releases. This...9.8 Critical
- jfrog artifactoryJFrog Artifactory before 7.31.10, is vulnerable to Broken Access Control where a project admin...2.7 Low
- jfrog artifactoryJFrog Artifactory before 7.29.3 and 6.23.38, is vulnerable to Broken Access Control, a low...4.3 Medium
- puppet firewall, firewall module +1 morePuppet Firewall Module May Leave Unmanaged Rules5.6 Medium
- hp probook 440 g8 firmware, prodesk 405 g6 small form factor firmware +1 morePotential vulnerabilities have been identified in the BIOS for some HP PC products which may...5.5 Medium
- hp probook 440 g8 firmware, prodesk 405 g6 small form factor firmware +1 morePotential vulnerabilities have been identified in the BIOS for some HP PC products which may...5.5 Medium
- home owners collection management system project owners collection management systemHome Owners Collection Management System v1.0 was discovered to contain hardcoded credentials...9.8 Critical
- Show moreLoading…