CVEs published in March 2022
2,440 vulnerabilities, 400 critical, 18 exploited.
- huawei emui, harmonyos, magic ui +2 moreThere is a man-in-the-middle attack vulnerability during system update download in recovery mode....5.9 Medium
- huawei emui, magic ui +1 moreThere is a vulnerability of copying input buffer without checking its size in the video framework...7.5 High
- huawei emui, magic ui +1 moreThere is a heap-based and stack-based buffer overflow vulnerability in the video framework....7.5 High
- huawei emui, magic ui +1 moreThere is a heap-based buffer overflow vulnerability in the video framework. Successful...7.5 High
- huawei emui, magic ui +1 moreThere is a permission control vulnerability in the Wi-Fi module. Successful exploitation of this...6.5 Medium
- huawei emui, magic ui +1 moreThere is a heap-based buffer overflow vulnerability in the video framework. Successful...7.5 High
- huawei emui, harmonyos, magic ui +2 moreThere is a vulnerability of accessing resources using an incompatible type (type confusion) in...7.5 High
- huawei emui, magic ui +1 moreThere is a vulnerability of copying input buffer without checking its size in the video framework...7.5 High
- huawei emui, harmonyos, magic ui +2 moreThere is an improper access control vulnerability in the video module. Successful exploitation of...7.5 High
- huawei emui, harmonyos, magic ui +2 moreThere is a heap-based buffer overflow vulnerability in system components. Successful exploitation...7.5 High
- icewhale casaosCommand Injection in CasaOS9.8 Critical
- salesagility salesagility/suitecrm, suitecrm +1 moreSQL Injection in salesagility/suitecrm7.1 High
- bitdefender antivirus plus, endpoint security tools for windows, endpoint security tools +2 more +4 moreIncorrect Permission Assignment for Critical Resource vulnerability in BDReinit.exe (VA-10017)7.8 High
- bitdefender antivirus plus, endpoint security tools, internet security +2 more +4 moremessaging_ipc.dll NULL Pointer Dereference in multiple Bitdefender products (VA-10016)6.1 Medium
- omron cx-programmerUse after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4...7.8 High
- omron cx-programmerOut-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One ...7.8 High
- omron cx-programmerUse after free vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4...7.8 High
- omron cx-programmerOut-of-bounds read vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One ...7.8 High
- daj i-filter, i-filter browser \& cloud multiagent, digital arts inc. i-filter, i-filter browser & cloud multiagent for windows, and d-spa using i-filter +2 moreImproper check for certificate revocation in i-FILTER Ver.10.45R01 and earlier, i-FILTER Ver.9...3.7 Low
- marktextA stored cross-site scripting vulnerability in marktext versions prior to v0.17.0 due to improper...5.4 Medium
- pfsense pfsense-pkg-wireguardDirectory traversal vulnerability in pfSense-pkg-WireGuard pfSense-pkg-WireGuard 0.1.5 versions...6.5 Medium
- omron cx-programmerOut-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One ...7.8 High
- e2pdf, oleksandrz e2pdf – export to pdf tool for wordpress +1 moreE2Pdf < 1.16.45 - Admin+ Stored Cross-Site Scripting (XSS)4.8 Medium
- metaphorcreations ditty, unknown ditty (formerly ditty news ticker) +1 moreDitty (formerly Ditty News Ticker) < 3.0.15 - Reflected Cross-Site Scripting (XSS)6.1 Medium
- codepeople cp blocksCP Blocks < 1.0.15 - Admin+ Stored Cross-Site Scripting4.8 Medium
- devowl wordpress real cookie banner, unknown wordpress real cookie banner: gdpr (dsgvo) & eprivacy cookie consent +1 moreWordPress Real Cookie Banner < 2.14.2 - Settings Reset via CSRF6.5 Medium
- ayecode userswp, unknown userswp – user registration & user profile +1 moreUsersWP < 1.2.3.1 - Subscriber+ User Avatar Override4.3 Medium
- stylemixthemes masterstudy lms, unknown masterstudy lms – wordpress lms plugin +1 moreMasterStudy LMS < 2.7.6 - Unauthenticated Admin Account Creation9.8 Critical
- catch themes demo import themes demo import, catchplugins catch themes demo import +1 moreCatch Themes Demo Import < 2.1.1 - Admin+ Remote Code Execution7.2 High
- icegram email subscribers & newsletters, email subscribers \& newsletters +1 moreEmail Subscribers & Newsletters < 5.3.2 - Subscriber+ Blind SQL injection8.8 High
- a3rev page view countPage Views Count < 2.4.15 - Unauthenticated SQL Injection9.8 Critical
- unknown wp cerber security, anti-spam & malware scan, cerber wp cerber security\, anti-spam \& malware scan +1 moreWP Cerber Security, Anti-spam & Malware Scan < 8.9.6 - Unauthenticated Stored Cross-Site Scripting6.1 Medium
- adtribes product feed pro for woocommerceProduct Feed PRO for WooCommerce < 11.2.3 - Reflected Cross-Site Scripting5.4 Medium
- unknown white label cmsWhite Label MS < 2.2.9 - Reflected Cross-Site Scripting6.1 Medium
- metagauss registrationmagic, unknown registrationmagic – custom registration forms, user registration and user login plugin +1 moreRegistrationMagic < 5.0.2.2 - Admin+ SQL Injection7.2 High
- codepress visitor statistics, osamaesh wp visitor statistics (real time traffic) +1 moreWP Visitor Statistics (Real Time Traffic) < 5.6 - Subscriber+ SQL Injection8.8 High
- codepeople wp time slots booking formWP Time Slots Booking Form < 1.1.63 - Admin+ Stored Cross-Site Scripting4.8 Medium
- deepen bajracharya video conferencing with zoomVideo Conferencing with Zoom < 3.8.17 - E-mail Address Disclosure4.3 Medium
- wpdeveloper notificationx, unknown notificationx – best fomo, social proof, woocommerce sales popup & notification bar plugin with elementor +1 moreNotificationX < 2.3.9 - Unauthenticated Blind SQL Injection9.8 Critical
- unknown loginpress | custom login page customizer, wpbrigade loginpress +1 moreLoginPress < 1.5.12 - Reflected Cross-Site Scripting6.1 Medium
- adrotate project adrotate, unknown adrotate – ad manager & adsense ads +1 moreAdRotate < 5.8.22 - Admin+ SQL Injection7.2 High
- unknown yop poll, yop poll, yop-poll +2 moreYOP Poll < 6.3.5 - Author+ Stored Cross-Site Scripting5.4 Medium
- rednao smart forms, edgarrojas smart forms – when you need more than just a contact form +1 moreSmart Forms < 2.6.71 - Subscriber+ Form Data Download6.5 Medium
- fatcatapps easy pricing tables, unknown pricing tables wordpress plugin – easy pricing tables +1 moreEasy Pricing Tables < 3.1.3 - Arbitrary Post Removal via CSRF6.5 Medium
- codename065 download managerWordpress Download Manager < 3.2.25 - Sensitive Information Disclosure7.5 High
- unknown wordpress multisite content copier/updater, obtaininfotech multisite content copier\/updater +1 moreMultisite Content Copier/Updater < 2.1.0 - Reflected Cross-Site Scripting6.1 Medium
- unknown wordpress multisite user sync/unsync, obtaininfotech multisite user sync\/unsync +1 moreMultisite User Sync/Unsync < 2.1.2 - Reflected Cross-Site Scripting6.1 Medium
- correosexpress project correosexpress, unknown correosexpress – shipping management – tags +1 moreCorreosExpress <= 2.6.0 - Sensitive Information Disclosure5.3 Medium
- iptanus wordpress file upload, unknown wordpress-file-upload-pro, iptanus wordpress file upload pro +2 moreWordPress File Upload < 4.16.3 - Contributor+ Stored Cross-Site Scripting via Shortcode5.4 Medium
- iptanus wordpress file upload, unknown wordpress-file-upload-pro, iptanus wordpress file upload pro +2 moreWordPress File Upload < 4.16.3 - Contributor+ Stored Cross-Site Scripting via Malicious SVG5.4 Medium
- Show moreLoading…