CVEs published in March 2022
2,440 vulnerabilities, 400 critical, 18 exploited.
- veritas system recoveryVeritas System Recovery (VSR) 18 and 21 stores a network destination password in the Windows...5.3 Medium
- pdftronUse after free vulnerability in PDFTron SDK6.5 Medium
- kingsoft wps office, wps office software office for windows +1 moreThe installer of WPS Office for Windows versions prior to v11.2.0.10258 fails to configure...7.8 High
ghostscriptOSS-FuzzUNKNOWN READ in spgetccNo scorelibvipsOSS-FuzzHeap-buffer-overflow in vips_rect_intersectrectNo score- mozilla firefoxIn unusual circumstances, an individual thread may outlive the thread's manager during shutdown....6.5 Medium
- mozilla firefoxWhile the text displayed in Autofill tooltips cannot be directly read by JavaScript, the text was...4.3 Medium
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreA heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4...6.1 Medium
- mozilla firefoxMozilla developers Kershaw Chang, Ryan VanderMeulen, and Randell Jesup reported memory safety...8.8 High
- google androidIn ion_buffer_kmap_get of ion.c, there is a possible use-after-free due to an integer overflow....7.8 High
- ericsson network managerEricsson Network Manager 20.2 has Insecure Permissions.6.5 Medium
- acer care centerAcer Care Center 4.00.30xx before 4.00.3042 contains a local privilege escalation vulnerability....7.8 High
- acer quickaccessAcer QuickAccess 2.01.300x before 2.01.3030 and 3.00.30xx before 3.00.3038 contains a local...7.8 High
- trend micro password manager, trend micro, inc. micro password manager +1 moreTrend Micro Password Manager (Consumer) installer version 5.0.0.1262 and below is vulnerable to...7.8 High
- trend micro portable securityAn installer search patch element vulnerability in Trend Micro Portable Security 3.0 Pro, 3.0 and...6.5 Medium
- alltube project alltubeServer-Side Request Forgery (SSRF) and URL Redirection to Untrusted Site ('Open Redirect') in alltube7.3 High
- rubyonrails active storage, debian linux, rails https://github.com/rails/rails +2 morePossible code injection vulnerability in Rails / Active Storage9.8 Critical
- icinga web 2, icingaweb2 +1 moreDisclosure of hosts and related data, linked to decommissioned services in Icinga Web 25.3 Medium
- nextcloud server, kiteworks security-advisories +1 moreAdvanced permissions is not respected for subfolders in Nextcloud server4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreWhen installing an add-on, Firefox verified the signature before prompting the user; but while...7.5 High
- mozilla firefox esr, thunderbird +1 morePreviously Firefox for macOS and Linux would download temporary files to a user-specific...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreIf an attacker could control the contents of an iframe sandboxed with <code>allow-popups</code>...9.6 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreWhen resizing a popup after requesting fullscreen access, the popup would not display the...4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreAn attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading...8.8 High
- nextcloud server, kiteworks security-advisories +1 moreUser enumeration setting not respected in Nextcloud server5.3 Medium
- arm cortex-a57 firmware, cortex-a65 firmware, cortex-a65ae firmware +19 more +21 moreCertain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache...5.6 Medium
- intel atom c3308, atom c3336, atom c3338 +501 more +503 moreImportant: kernel security, bug fix, and enhancement update6.5 Medium
- intel atom p5921b, atom p5931b, atom p5942b +455 more +457 moreImportant: kernel security, bug fix, and enhancement update6.5 Medium
- nextcloud talk, kiteworks security-advisories +1 moreNextcloud Talk app exposes chat messages on lockscreen2.4 Low
- nextcloud talk, kiteworks security-advisories +1 moreGeolocation preview links can be set to arbitrary links in nextcloud talk4.7 Medium
- softinventive network olympusNetwork Olympus version 1.8.0 allows an authenticated admin user to inject SQL queries in '/api...7.2 High
- cockpit-hq cockpit, redhat enterprise linux +1 moreA flaw was found in Cockpit in versions prior to 260 in the way it handles the certificate...7.5 High
- linux kernel, fedoraproject fedora +1 moreA NULL pointer dereference was found in the Linux kernel's KVM when dirty ring logging is enabled...5.5 Medium
- gnu grub2, fedoraproject fedora +1 moreA flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with...3.3 Low
- samsung mobile galaxy watch3 plugin, samsung galaxy watch 3 plugin +1 moreInformation Exposure vulnerability in Galaxy Watch3 Plugin prior to version 2.2.09.22012751...1.9 Low
- samsung watch active2 pluginInformation Exposure vulnerability in Watch Active2 Plugin prior to version 2.2.08.22012751...1.9 Low
- samsung watch active pluginInformation Exposure vulnerability in Watch Active Plugin prior to version 2.2.07.22012751 allows...1.9 Low
- samsung galaxy watch pluginInformation Exposure vulnerability in Galaxy Watch Plugin prior to version 2.2.05.22012751 allows...1.9 Low
- samsung mobile galaxy s3 plugin, samsung galaxy watch 3 plugin +1 moreInformation Exposure vulnerability in Galaxy S3 Plugin prior to version 2.2.03.22012751 allows...1.9 Low
- samasung accountImproper access control vulnerability in Samsung Account prior to version 13.1.0.1 allows...6.2 Medium
- samsung mobile bixbytouch, samsung bixby touch +1 moreImproper access control vulnerability in BixbyTouch prior to version 2.2.00.6 in China models...4.0 Medium
- samsung galaxy watch pluginInformation Exposure vulnerability in Galaxy Watch Plugin prior to version 2.2.05.220126741...1.9 Low
- google android, samsung mobile devices +1 moreAn use after free vulnerability in sdp driver prior to SMR Mar-2022 Release 1 allows kernel crash.4.0 Medium
- google android, samsung mobile devices +1 moreImproper use of SMS buffer pointer in Shannon baseband prior to SMR Mar-2022 Release 1 allows OOB...3.3 Low
- google android, samsung mobile devices +1 moreA vulnerable design in fingerprint matching algorithm prior to SMR Mar-2022 Release 1 allows...4.2 Medium
- google android, samsung mobile devices with exynos chipsets +1 moreOOB read vulnerability in hdcp2 device node prior to SMR Mar-2022 Release 1 allow an attacker to...5.3 Medium
- google android, samsung mobile devices +1 moreImproper boundary check in UWB stack prior to SMR Mar-2022 Release 1 allows arbitrary code...6.5 Medium
- google android, samsung mobile devices +1 moreImproper authentication in One UI Home prior to SMR Mar-2022 Release 1 allows attacker to...4.0 Medium
- google android, samsung mobile devices +1 moreImproper authentication in Samsung Lock and mask apps setting prior to SMR Mar-2022 Release 1...4.1 Medium
- google android, samsung mobile devices +1 morePendingIntent hijacking vulnerability in Weather application prior to SMR Mar-2022 Release 1...5.5 Medium
- Show moreLoading…