CVEs published in March 2022
2,440 vulnerabilities, 400 critical, 18 exploited.
- google android, samsung mobile devices +1 morePendingIntent hijacking vulnerability in Wearable Manager Installer prior to SMR Mar-2022 Release...5.5 Medium
- google android, samsung cloud, samsung mobile clould +1 more +3 moreImproper Protection of Alternate Path vulnerability in Setup wizard process prior to SMR Mar-2022...4.2 Medium
- google android, samsung mobile devices +1 moreImproper access control vulnerability in dynamic receiver in ApkInstaller prior to SMR MAR-2022...7.9 High
- samsung wear os, samsung mobile wearable devices +1 moreAn Improper access control vulnerability in StRetailModeReceiver in Wear OS 3.0 prior to Firmware...4.4 Medium
- google android, samsung mobile devices +1 moreUnprotected Activity in AppLock prior to SMR Mar-2022 Release 1 allows attacker to change the...4.1 Medium
- google android, samsung mobile devices +1 moreSecurity misconfiguration of RKP in kernel prior to SMR Mar-2022 Release 1 allows a system not to...5.9 Medium
- sap financial consolidationSAP Financial Consolidation - version 10.1, does not perform necessary authorization checks for...5.3 Medium
- sap se netweaver (real time messaging framework), sap netweaver application server java +1 moreUnder certain conditions, SAP NetWeaver (Real Time Messaging Framework) - version 7.50, allows an...5.3 Medium
- sap fiori launchpadFiori launchpad - versions 754, 755, 756, does not sufficiently encode user-controlled inputs,...6.1 Medium
- sap simple diagnostics agentSimple Diagnostics Agent - versions 1.0 (up to version 1.57.), allows an attacker to access...7.5 High
- sap focused run, sap se focused run (real user monitoring) +1 moreThe SAP Focused Run (Real User Monitoring) - versions 200, 300, REST service does not...6.1 Medium
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not...6.1 Medium
- sap sapcarSAPCAR - version 7.22, does not contain sufficient input validation on the SAPCAR archive. As a...9.8 Critical
- sap se netweaver application server for abap, sap netweaver application server abap +1 moreDue to missing authorization check, SAP NetWeaver Application Server for ABAP - versions 700, 701...5.4 Medium
- sap simple diagnostics agent, sap se focused run (simple diagnostics agent) +1 moreThe Simple Diagnostics Agent - versions 1.0 up to version 1.57, does not perform any...7.8 High
- sap business objects business intelligence platformUnder certain conditions SAP Business Objects Business Intelligence Platform - versions 420, 430,...6.5 Medium
- bookstackapp bookstack, bookstackapp/bookstack +1 moreCross-site Scripting (XSS) - Stored in bookstackapp/bookstack7.6 High
- rust-lang regex, debian linux, fedoraproject fedora +2 moreRegular expression denial of service in Rust's regex crate7.5 High
- mendix, siemens mendix applications using mendix 7 +1 moreA vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23...6.5 Medium
- mendix forgot password, siemens mendix forgot password appstore module, mendix forgot password appstore module (mendix 7 compatible) +2 moreA vulnerability has been identified in Mendix Forgot Password Appstore module (All versions >= V3...9.8 Critical
- mendix forgot password, siemens mendix forgot password appstore module +1 moreA vulnerability has been identified in Mendix Forgot Password Appstore module (All versions >= V3...9.8 Critical
- siemens simcenter star-ccm+ viewer, simcenter star-ccm\+ viewer +1 moreA vulnerability has been identified in Simcenter STAR-CCM+ Viewer (All versions < V2022.1). The...7.8 High
- siemens sinumerik mc, sinumerik one, sinumerik mc firmware +1 more +3 moreA vulnerability has been identified in SINUMERIK MC (All versions < V1.15 SP1), SINUMERIK ONE ...7.8 High
- mendix, siemens mendix runtime v7, mendix runtime v8 +1 more +3 moreA vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23...6.8 Medium
- siemens polarion alm, polarion webclient for svn, polarion subversion webclient +2 moreA vulnerability has been identified in Polarion Subversion Webclient (V21 R1). A cross-site...6.1 Medium
- siemens ruggedcom i800, ruggedcom i800nc, ruggedcom i801 +134 more +136 moreA vulnerability has been identified in RUGGEDCOM ROS M2100 (All versions < V5.6.0), RUGGEDCOM ROS...7.5 High
- siemens ruggedcom i800, ruggedcom i800nc, ruggedcom i801 +150 more +152 moreA vulnerability has been identified in RUGGEDCOM ROS M2100 (All versions < V5.6.0), RUGGEDCOM ROS...5.9 Medium
- siemens ruggedcom i800, ruggedcom i800nc, ruggedcom i801 +150 more +152 moreA vulnerability has been identified in RUGGEDCOM ROS M2100 (All versions < V5.6.0), RUGGEDCOM ROS...5.9 Medium
- siemens ruggedcom i800, ruggedcom i801, ruggedcom i802 +88 more +90 moreA vulnerability has been identified in RUGGEDCOM ROS M2100 (All versions < V5.6.0), RUGGEDCOM ROS...5.9 Medium
- siemens ruggedcom i800, ruggedcom i801, ruggedcom i802 +88 more +90 moreA vulnerability has been identified in RUGGEDCOM ROS M2100 (All versions < V5.6.0), RUGGEDCOM ROS...7.5 High
- siemens climatix pol909 (awb module), climatix pol909 (awm module), climatix pol909 firmware +2 moreA vulnerability has been identified in Climatix POL909 (AWB module) (All versions < V11.44),...6.5 Medium
- siemens climatix pol909 (awb module), climatix pol909 (awm module), climatix pol909 firmware +2 moreA vulnerability has been identified in Climatix POL909 (AWB module) (All versions < V11.44),...6.1 Medium
- siemens climatix pol909 (awb module), climatix pol909 (awm module), climatix pol909 firmware +2 moreA vulnerability has been identified in Climatix POL909 (AWB module) (All versions < V11.44),...6.1 Medium
- siemens ruggedcom i800, ruggedcom i800nc, ruggedcom i801 +150 more +152 moreA vulnerability has been identified in RUGGEDCOM ROS M2100 (All versions < V5.6.0), RUGGEDCOM ROS...9.6 Critical
- atlassian jira server, jira data center +1 moreThis issue exists to document that a security improvement in the way that Jira Server and Data...7.2 High
exiv2OSS-FuzzContainer-overflow in Exiv2::Photoshop::locateIrbNo score- spip, debian linux +1 moreSPIP before 3.2.14 and 4.x before 4.0.5 allows unauthenticated access to information about...5.3 Medium
- spip, debian linux +1 moreSPIP before 3.2.14 and 4.x before 4.0.5 allows remote authenticated editors to execute arbitrary...8.8 High
- siemens sinec nms, sinema server v14, sinema server +1 more +3 moreA vulnerability has been identified in SINEC NMS (All versions). The affected software do not...7.3 High
- icinga web 2, icingaweb2 +1 morePath traversal in Icinga Web 27.5 High
- icinga web 2, icingaweb2 +1 moreArbitrary code execution for authenticated users in Icinga Web 28.5 High
- siemens sinec nms, sinema server v14, sinec network management system +2 moreA vulnerability has been identified in SINEC NMS (All versions). The affected system allows to...7.2 High
- siemens sinec nms, sinema server v14, sinec network management system +2 moreA vulnerability has been identified in SINEC NMS (All versions). A privileged authenticated...7.2 High
- cacalabs libcaca, fedoraproject fedora +1 morelibcaca is affected by a Divide By Zero issue via img2txt, which allows a remote malicious user...6.5 Medium
- siemens ruggedcom i800, ruggedcom i801, ruggedcom i802 +72 more +74 moreA vulnerability has been identified in RUGGEDCOM ROS M2100 (All versions < V5.6.0), RUGGEDCOM ROS...6.7 Medium
- sophos ssl vpn clientA local attacker can overwrite arbitrary files on the system with VPN client logs using...6.1 Medium
- httpie, fedoraproject fedora +1 moreExposure of Sensitive Information to an Unauthorized Actor in httpie6.5 Medium
- tryton proteus, trytond, debian linux +2 moreImproper Restriction of XML External Entity Reference in trytond and proteus6.5 Medium
- tryton proteus, trytond, debian linux +2 moreXML Entity Expansion in trytond and proteus7.5 High
- libming ming, fedoraproject fedora +1 moreMing 0.4.8 has an out-of-bounds buffer overwrite issue in the function getName() in decompiler.c...6.5 Medium
- Show moreLoading…