CVEs published in March 2022
2,440 vulnerabilities, 400 critical, 18 exploited.
- libming ming, fedoraproject fedora +1 moreMing 0.4.8 has an out-of-bounds buffer access issue in the function getString() in decompiler.c...6.5 Medium
- libming ming, fedoraproject fedora +1 moreMing 0.4.8 has an out-of-bounds buffer access issue in the function decompileINCR_DECR() in...6.5 Medium
- libming ming, fedoraproject fedora +1 moreMing 0.4.8 has an out-of-bounds read vulnerability in the function decompileIF() in the decompile...6.5 Medium
- libming ming, fedoraproject fedora +1 moreMing 0.4.8 has an out-of-bounds read vulnerability in the function newVar_N() in decompile.c...6.5 Medium
- tp-link tapo c200, tapo c200 firmware +1 moreTP-LINK Tapo C200 remote code execution vulnerability9.8 Critical
- phicomm k2 firmware, k2g firmware, k2p firmware +2 more +4 moreA null byte interaction error has been discovered in the code that the telnetd_startup daemon...8.4 High
- zzinc keymouse firmwareZZ Inc. KeyMouse Windows 3.08 and prior is affected by a remote code execution vulnerability...8.8 High
- phicomm k2 firmware, k2g firmware, k2p firmware +2 more +4 moreImproper physical access control and use of hard-coded credentials in /etc/passwd permits an...6.8 Medium
- phicomm k2 firmware, k2g firmware, k2p firmware +2 more +4 moreImproper access control on the LocalMACConfig.asp interface allows an unauthenticated remote...5.3 Medium
- phicomm k2 firmware, k2g firmware, k2p firmware +2 more +4 moreThe use of the RSA algorithm without OAEP, or any other padding scheme, in telnetd_startup,...8.1 High
- phicomm k2 firmware, k3c firmware +1 moreUse of a hard-coded cryptographic key pair by the telnetd_startup service allows an attacker on...7.8 High
- phicomm k2 firmware, k2g firmware, k2p firmware +2 more +4 moreImproper access control on the LocalClientList.asp interface allows an unauthenticated remote...7.4 High
- hashicorp vault"Vault and Vault Enterprise 1.8.0 through 1.8.8, and 1.9.3 allowed the PKI secrets engine under...6.5 Medium
- hashicorp vaultVault Enterprise clusters using the tokenization transform feature can expose the tokenization...6.5 Medium
- evmosAccount compromise in Evmos8.1 High
- home-assistantAn information leak in Nabu Casa Home Assistant Operating System and Home Assistant Supervised...7.5 High
- smartbear collaboratorSmartBear CodeCollaborator v6.1.6102 was discovered to contain a vulnerability in the web UI...6.1 Medium
- quicklertAn arbitrary file upload vulnerability exists in albumimages.jsp in Quicklert for Digium 10.0.0 ...8.8 High
- quicklertThe login.jsp page of Quicklert for Digium 10.0.0 (1043) is affected by both Blind SQL Injection...6.5 Medium
- overit geocallAn issue was discovered in OverIT Geocall before 8.0. An authenticated user who has the Test...8.8 High
- overit geocallAn issue was discovered in OverIT Geocall before version 8.0. An authenticated user who has the...6.5 Medium
- couchbase cloud native operatorCouchbase Operator 2.2.x before 2.2.3 exposes Sensitive Information to an Unauthorized Actor....7.5 High
- exlibrisgroup aleph 500A cross-site scripting (XSS) vulnerability in the component cgi-bin/ej.cgi of Ex libris ALEPH 500...6.1 Medium
- salesagility suitecrmSuiteCRM through 7.12.1 and 8.x through 8.0.1 allows Remote Code Execution. Authenticated users...8.8 High
- proofpoint insider threat managementProofpoint Insider Threat Management Agent for Windows relies on an inherently dangerous function...7.8 High
- python, netapp active iq unified manager, ontap select deploy administration utility +3 more +5 moreIn Python before 3.10.3 on Windows, local users can gain privileges because the search path is...7.0 High
- foxcpp maddyMaddy Mail Server does not implement account expiry6.3 Medium
- ibm aix, vios +1 moreIBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged trusted host user to exploit a...6.1 Medium
- ibm aix, vios +1 moreIBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a...6.2 Medium
- ibm aix, vios +1 moreIBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a...6.2 Medium
- mi ax3600 firmwareA command injection vulnerability exists in the Xiaomi Router AX3600. The vulnerability is caused...9.8 Critical
- power line communications plc4trucks, hegemonelectronics plc4trucks firmware +1 moreICSA-22-063-01 Improper Protection against Electromagnetic Fault Injection in Trailer Power Line Communications (PLC) J24979.3 Critical
- power line communications plc4trucks, hegemonelectronics plc4trucks firmware +1 moreICSA-22-063-01 Missing Authentication for Critical Function in Trailer Power Line Communications (PLC) J24976.1 Medium
- mi ax3600 firmwareA command injection vulnerability exists in the Xiaomi Router AX3600. The vulnerability is caused...7.8 High
openldapTuxCare,openldap-clientsTuxCare,openldap-develTuxCare +1 more +3 moreUpdate of openldap-devel, openldap, openldap-servers, openldap-clients, openldap-devel, openldapNo score- secomea sitemanager, sitemanager 1129 firmware, sitemanager 1139 firmware +7 more +9 moreSiteManager Log View XSS Issue6.5 Medium
- yzmcmsYzmCMS v6.3 is affected by broken access control. Without login, unauthorized access to the user...9.1 Critical
- secomea gatemanagerGateManager information leak for LinkManager Users5.0 Medium
- northern.tech cfengineNorthern.tech CFEngine Enterprise 3.15.4 before 3.15.5 has Insecure Permissions that may allow...5.5 Medium
- northern.tech cfengineNorthern.tech CFEngine Enterprise before 3.15.5 and 3.18.x before 3.18.1 has Insecure Permissions...5.5 Medium
- mi ax6000 firmwareInformation Leak Vulnerability exists in the Xiaomi Router AX6000. The vulnerability is caused by...5.3 Medium
- keepass, fedoraproject extra packages for enterprise linux, fedora +2 moreA flaw was found in KeePass. The vulnerability occurs due to logging the plain text passwords in...7.5 High
- huawei emui, harmonyos, magic ui +2 moreThere is a vulnerability of memory not being released after effective lifetime in the Bastet...7.5 High
- huawei emui, harmonyos, magic ui +2 moreThere is an incorrect buffer size calculation vulnerability in the video framework. Successful...7.5 High
- huawei emui, harmonyos, magic ui +2 moreThere is a permission control vulnerability in the PMS module. Successful exploitation of this...7.5 High
- huawei emui, harmonyos, magic ui +2 moreThere is an out-of-bounds read vulnerability in the IFAA module. Successful exploitation of this...9.8 Critical
- huawei emui, harmonyos, magic ui +2 moreThere is an unauthorized access vulnerability in system components. Successful exploitation of...7.5 High
- huawei emui, harmonyos, magic ui +2 moreThere is an incorrect buffer size calculation vulnerability in the video framework. Successful...7.5 High
- huawei emui, harmonyos, magic ui +2 moreThere is a permission control vulnerability in the Nearby module. Successful exploitation of this...9.1 Critical
- huawei emui, magic ui +1 moreThere is an integer underflow vulnerability in the atcmdserver module. Successful exploitation of...7.5 High
- Show moreLoading…