CVEs published in March 2022
2,440 vulnerabilities, 400 critical, 18 exploited.
- dlink dir-x1860 firmwareAn information disclosure in web interface in D-Link DIR-X1860 before 1.03 RevA1 allows a remote...5.3 Medium
- dell emc enterprise storage analytics for vrealize operations, enterprise storage analytics +1 moreDell EMC Enterprise Storage Analytics for vRealize Operations, versions 4.0.1 to 6.2.1, contain a...6.0 Medium
- dlink dir-859 a3 firmware, dir-859 firmware +1 moreD-Link DIR-859 v1.05 was discovered to contain a stack-based buffer overflow via the function...5.5 Medium
- hcltech bigfix insights" Insecure password storage issue.The application stores sensitive information in cleartext...7.5 High
- microweber whmcs, microweber-dev microweber-dev/whmcs plugin +1 moreImproper Resolution of Path Equivalence in microweber-dev/whmcs_plugin7.4 High
- veritas infoscale operations managerAn issue was discovered in Veritas InfoScale Operations Manager (VIOM) before 7.4.2 Patch 600 and...4.9 Medium
- veritas infoscale operations managerAn issue was discovered in Veritas InfoScale Operations Manager (VIOM) before 7.4.2 Patch 600 and...4.8 Medium
- watchguard firebox and xtm appliances, fireware +1 moreOn WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka...9.8 Critical
- netapp storagegrid, storagegrid (formerly storagegrid webscale) +1 moreStorageGRID (formerly StorageGRID Webscale) versions prior to 11.6.0 are susceptible to a...7.5 High
- netapp storagegrid, storagegrid (formerly storagegrid webscale) +1 moreStorageGRID (formerly StorageGRID Webscale) versions prior to 11.6.0 are susceptible to a...4.9 Medium
- weblateRemote Code Execution (RCE)7.2 High
- ivanti incapptic connectA user with high privilege access to the Incapptic Connect web console can remotely execute code...7.2 High
- symantec management agentThe Symantec Management Agent is susceptible to a privilege escalation vulnerability. A low...7.8 High
- google androidWhen the device is in factory state, it can be access the shell without adb authentication...7.8 High
- vmware spring cloud gateway, oracle commerce guided search, communications cloud native core binding support function +3 more +5 moreIn spring cloud gateway versions prior to 3.1.1+ , applications that are configured to enable...5.5 Medium
- netgear wac120 ac firmwareUnauthenticated cross-site scripting (XSS) in Netgear WAC120 AC Access Point may lead to mulitple...6.1 Medium
- dlink dap-1620 firmwareLocal File Inclusion due to path traversal in D-Link DAP-1620 leads to unauthorized internal...7.5 High
- dlink dir-850l firmwareDLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through URL...6.1 Medium
- dlink dir-850l firmwareDLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through an...7.5 High
- liquibase, liquibase liquibase/liquibase, oracle sqlcl +2 moreImproper Restriction of XML External Entity Reference in liquibase/liquibase7.3 High
- intelliants subrion cmsCross-site Scripting in intelliants/subrion6.1 Medium
- intelliants subrion cmsCross-site Scripting in Subrion CMS6.1 Medium
- intelliants subrion cmsCross Site Request Forgery in intelliants/subrion8.8 High
- alfrescoCross Site Scripting (XSS) vulnerability exists in Alfresco Alfresco Community Edition v5.2.0 via...6.1 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Stored in pimcore/pimcore4.6 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Stored in pimcore/pimcore4.6 Medium
- victor cms project cmsVictor CMS v1.0 was discovered to contain a SQL injection vulnerability.9.8 Critical
- tenda ax3 firmwareThere is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3...9.8 Critical
- tenda ax3 firmwareThere is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3...9.8 Critical
- st j-safe3 firmware, stsafe-j firmware +1 moreSTMicroelectronics STSAFE-J 1.1.4, J-SAFE3 1.2.5, and J-SIGN sometimes allow attackers to obtain...6.2 Medium
- st j-safe3 firmware, stsafe-j firmware +1 moreSTMicroelectronics STSAFE-J 1.1.4, J-SAFE3 1.2.5, and J-SIGN sometimes allow attackers to abuse...6.2 Medium
- mini-inventory-and-sales-management-system project mini-inventory-and-sales-management-systemMini-Inventory-and-Sales-Management-System is affected by Cross Site Request Forgery (CSRF),...5.0 Medium
arrow2crates.ioArrow2 allows double free in `safe` codeNo score- hestiacp hestiacp/hestiacp, control panel +1 moreCross-site Scripting (XSS) - Generic in hestiacp/hestiacp3.5 Low
- ethereum go ethereumDenial of Service in Go-Ethereum7.5 High
- ethereum go ethereumDenial of Service in Go-Ethereum7.5 High
spacewalk-javaSUSE,susemanager-sync-dataSUSE +1 moreSecurity update for SUSE Manager Server 4.2No score- part-db part-db/part-db, part-db project part-db +1 moreOS Command Injection in part-db/part-db10.0 Critical
- hestiacp hestiacp/hestiacp, control panel +1 moreCross-site Scripting (XSS) - Reflected in hestiacp/hestiacp6.6 Medium
ghostscriptOSS-FuzzUNKNOWN READ in pdfi_count_cff_indexNo score- google chromeInappropriate implementation in Omnibox in Google Chrome prior to 99.0.4844.51 allowed an...3.1 Low
- google chromeInappropriate implementation in Blink in Google Chrome prior to 99.0.4844.51 allowed a remote...6.5 Medium
- google chromeUse after free in Accessibility in Google Chrome prior to 99.0.4844.51 allowed a remote attacker...8.8 High
- apache poi, apache software foundation poi-scratchpad, netapp active iq unified manager +2 moreA carefully crafted TNEF file can cause an out of memory exception5.5 Medium
- cedargate ez-net portalThe Cedar Gate EZ-NET portal 6.5.5 6.8.0 Internet portal has a call to display messages to users...6.1 Medium
- google chromeOut of bounds memory access in WebXR in Google Chrome prior to 99.0.4844.51 allowed a remote...8.8 High
- google chromeUse after free in Chrome OS Shell in Google Chrome on Chrome OS prior to 99.0.4844.51 allowed a...8.8 High
- google chromeInappropriate implementation in Autofill in Google Chrome prior to 99.0.4844.51 allowed a remote...6.5 Medium
- google chromeData leak in Canvas in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who...6.5 Medium
- google chromeUse after free in Browser Switcher in Google Chrome prior to 99.0.4844.51 allowed a remote...8.8 High
- Show moreLoading…