CVEs published in March 2022
2,440 vulnerabilities, 400 critical, 18 exploited.
- google chromeInappropriate implementation in Full screen mode in Google Chrome on Android prior to 99.0.4844...6.5 Medium
- google chromeInappropriate implementation in Permissions in Google Chrome prior to 99.0.4844.51 allowed a...6.5 Medium
- google chromeInappropriate implementation in Full screen mode in Google Chrome on Android prior to 99.0.4844...6.5 Medium
- google chromeInappropriate implementation in HTML parser in Google Chrome prior to 99.0.4844.51 allowed a...6.1 Medium
- google chromeHeap buffer overflow in Cast UI in Google Chrome prior to 99.0.4844.51 allowed a remote attacker...8.8 High
- google chromeInsufficient policy enforcement in Installer in Google Chrome on Windows prior to 99.0.4844.51...8.8 High
- google chromeUse after free in MediaStream in Google Chrome prior to 99.0.4844.51 allowed an attacker who...8.8 High
- google chromeOut of bounds memory access in Mojo in Google Chrome prior to 99.0.4844.51 allowed a remote...8.8 High
- google chromeUse after free in Media in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to...8.8 High
- google chromeType confusion in Blink Layout in Google Chrome prior to 99.0.4844.51 allowed a remote attacker...8.8 High
- google chromeUse after free in WebShare in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who...8.8 High
- google chromeUse after free in Cast in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a...8.8 High
- google chromeOut of bounds read in ANGLE in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to...6.5 Medium
- google chromeUse after free in Omnibox in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who...8.8 High
- google chromeUse after free in Cast UI in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who...9.6 Critical
- google chromeHeap buffer overflow in ANGLE in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to...8.8 High
- vmware tools, tools for windows +1 moreVMware Tools for Windows (11.x.y and 10.x.y prior to 12.0.0) contains an uncontrolled search path...6.7 Medium
- petereport project petereportPeteReport Version 0.5 allows an authenticated admin user to inject persistent JavaScript code...4.8 Medium
- petereport project petereportPeteReport Version 0.5 contains a Cross Site Request Forgery (CSRF) vulnerability allowing an...6.5 Medium
- petereport project petereportPeteReport Version 0.5 allows an authenticated admin user to inject persistent JavaScript code...5.4 Medium
- insyde kernel, tianocore edk ii, edk2 +2 moreExisting CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.7.4 High
- elastic kibanaWithdrawn: Cross-site Scripting in Kibana6.1 Medium
- elastic kibanaA flaw was discovered in Kibana in which users with Read access to the Uptime feature could...4.3 Medium
- elastic elasticsearchElasticsearch privilege escalation4.3 Medium
- redhat clair, quay +1 morePath traversal in claircore9.8 Critical
- hazelcast, hazelcast hazelcast/hazelcast +1 moreImproper Restriction of XML External Entity Reference in hazelcast/hazelcast7.3 High
- gjtorikian commonmarker, github cmark-gfm +1 moreCommonMarker Integer Overflow Vulnerability9.8 Critical
- github cmark-gfm, fedoraproject fedora +1 moreInteger overflow in table parsing extension leads to heap memory corruption8.8 High
- ericcornelissen shescapeExposure of home directory through shescape on Unix with Bash6.2 Medium
- medialize uri.jsImproper Input Validation in URI.js5.3 Medium
@advanced-rest-client/basenpmExecution with Unnecessary Privileges in arc-electronNo score- cyberark identityCyberArk Identity versions up to and including 22.1 in the 'StartAuthentication' resource,...5.3 Medium
- mingsoft mcmsMCMS v5.2.4 was discovered to contain a SQL injection vulnerability via search.do in the file ...9.8 Critical
- mingsoft mcmsSQL injection in net.mingsoft:ms-mcms9.8 Critical
- mingsoft mcmsSQL injection in net.mingsoft:ms-mcms9.8 Critical
- frroutingBuffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the...7.8 High
- frroutingA buffer overflow vulnerability exists in FRRouting through 8.1.0 due to a wrong check on the...7.8 High
- frroutingA buffer overflow vulnerability exists in FRRouting through 8.1.0 due to missing a check on the...7.8 High
- axelor open suiteAxelor Open Suite v5.0 was discovered to contain a stored cross-site scripting (XSS)...5.4 Medium
- ljharb ljharb/npm-lockfile, npm-lockfile project npm-lockfile +1 moreOS Command Injection in ljharb/npm-lockfile3.8 Low
- hestiacp hestiacp/hestiacp, control panel +1 moreCross-site Scripting (XSS) - Reflected in hestiacp/hestiacp3.5 Low
- fujifilm apeosport-iv 2060 firmware, apeosport-iv 3060 firmware, apeosport-iv 3065 firmware +157 more +159 moreA risky-algorithm issue was discovered on Fujifilm DocuCentre-VI C4471 1.8 devices. An attacker...4.9 Medium
- arm bifrost gpu kernel driver, mali graphics processing unit (gpu), midgard gpu kernel driver +1 more +3 moreAn Arm product family through 2022-01-03 has an Exposed Dangerous Method or Function.7.8 High
- rdpsoft remote desktop commander suite agentRemote Desktop Commander Suite Agent before v4.8 contains an unquoted service path which allows...7.8 High
- wordline hidccemonitorsvcWordline HIDCCEMonitorSVC before v5.2.4.3 contains an unquoted service path which allows...6.4 Medium
- os4ed opensisOS4ED openSIS 8.0 is affected by cross-site scripting (XSS) in EmailCheckOthers.php. An attacker...6.1 Medium
- os4ed opensisOS4ED openSIS 8.0 is affected by SQL Injection in CheckDuplicateName.php, which can extract...7.5 High
- os4ed opensisOS4ED openSIS 8.0 is affected by SQL injection in ChooseCpSearch.php, ChooseRequestSearch.php. An...7.5 High
- huawei atuneatune before 0.3-0.8 log in as a local user and run the curl command to access the local atune...7.8 High
- transloadit transloadit/uppy, uppy +1 moreServer-Side Request Forgery (SSRF) in transloadit/uppy6.5 Medium
- Show moreLoading…