CVEs published in March 2022
2,440 vulnerabilities, 400 critical, 18 exploited.
- google android, mediatek, inc. mt6761, mt6762, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6877, mt6885, mt6893, mt8183, mt8185, mt8321, mt8385, mt8666, mt8667, mt8675, mt8735a, mt8735b, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn preloader (usb), there is a possible out of bounds write due to a missing bounds check. This...6.6 Medium
- google android, mediatek, inc. mt6739, mt6758, mt6761, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6883, mt6893, mt8163, mt8167, mt8168, mt8173, mt8362a, mt8365 +1 moreIn btif, there is a possible memory corruption due to incorrect error handling. This could lead...6.5 Medium
- google android, mediatek, inc. mt6761, mt6762, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6877, mt6885, mt6893, mt8183, mt8185, mt8321, mt8385, mt8666, mt8667, mt8675, mt8735a, mt8735b, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn preloader (usb), there is a possible out of bounds write due to a missing bounds check. This...6.6 Medium
- google android, mediatek, inc. mt6761, mt6762, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6877, mt6885, mt6893, mt8183, mt8185, mt8321, mt8385, mt8666, mt8667, mt8675, mt8735a, mt8735b, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn preloader (usb), there is a possible out of bounds write due to a missing bounds check. This...6.8 Medium
- google android, mediatek, inc. mt6580, mt6739, mt6750, mt6761, mt6762, mt6763, mt6765, mt6768, mt6771, mt6779, mt8167, mt8168, mt8173, mt8183, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8666, mt8667, mt8675, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn ims service, there is a possible AT command injection due to a missing permission check. This...7.8 High
- google android, mediatek, inc. mt6731, mt6732, mt6735, mt6737, mt6739, mt6750, mt6750s, mt6752, mt6753, mt6755, mt6755s, mt6757, mt6757c, mt6757cd, mt6757ch, mt6758, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6795, mt6797, mt6799, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6880, mt6883, mt6885, mt6889, mt6890, mt6891, mt6893, mt8167, mt8168, mt8173, mt8183, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8666, mt8667, mt8675, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn ims service, there is a possible unexpected application behavior due to incorrect privilege...5.5 Medium
- google android, mediatek, inc. mt6762, mt6765, mt6768, mt6769, mt6779, mt6781, mt6785, mt6795, mt6797, mt6799, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6880, mt6883, mt6885, mt6889, mt6891, mt6893, mt8163, mt8167, mt8167s, mt8168, mt8173, mt8175, mt8183, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8666, mt8667, mt8675, mt8696, mt8735a, mt8735b, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn connsyslogger, there is a possible symbolic link following due to improper link resolution....6.7 Medium
- google android, mediatek, inc. mt6779, mt6785, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893, mt8168, mt8175, mt8183, mt8185, mt8362a, mt8365, mt8385, mt8788 +1 moreIn vpu, there is a possible escalation of privilege due to a missing permission check. This could...6.7 Medium
- metaphorcreations post duplicatorA cross-site scripting (XSS) attack can cause arbitrary code (javascript) to run in a user’s...5.4 Medium
- apasionados customize login imageA Cross-Site Scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user’s...5.4 Medium
- aternity steelcentral appinternals dynamic sampling agentDirectory Traversal Read/Write/Delete at PluginServlet9.8 Critical
- aternity steelcentral appinternals dynamic sampling agentReflected Cross-site Scripting at DsaDataTest4.7 Medium
- aternity steelcentral appinternals dynamic sampling agentDirectory Traversal Write/Delete/Partial Read at AgentConfigurationServlet9.4 Critical
- aternity steelcentral appinternals dynamic sampling agentDirectory Traversal Partial Write at AgentDaServlet5.3 Medium
- aternity steelcentral appinternals dynamic sampling agentLocal privilege escalation due to misconfigured write permission on .debug_command.config file7.8 High
- aternity steelcentral appinternals dynamic sampling agentRemote Code Execution at AgentControllerServlet9.8 Critical
- aternity steelcentral appinternals dynamic sampling agentDirectory Traversal Delete/Read at AgentDiagnosticServlet9.1 Critical
- linux kernel, fedoraproject fedora +1 moreA flaw was found in the io-workqueue implementation in the Linux kernel versions prior to 5.15...5.5 Medium
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal - versions 7.30, 7.31, 7.40, 7.50, does not sufficiently encode...6.1 Medium
- linux kernel, fedoraproject fedora +1 moreA NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user...5.5 Medium
- opensuse build service, open build service +1 morelogin-proxy sends password to attacker-provided domain8.1 High
- solarwinds web help deskSensitive Data Disclosure Vulnerability5.3 Medium
- kofax printixPrintix Secure Cloud Print Management 1.3.1035.0 creates a temporary file in directory with...8.1 High
- ipcomm ipdio, ipdio firmware +1 moreICSA-22-062-01 IPCOMM ipDIO5.5 Medium
- ipcomm ipdio, ipdio firmware +1 moreICSA-22-062-01 IPCOMM ipDIO8.0 High
- ipcomm ipdio, ipdio firmware +1 moreICSA-22-062-01 IPCOMM ipDIO8.8 High
- ipcomm ipdio, ipdio firmware +1 moreICSA-22-062-01 IPCOMM ipDIO6.3 Medium
- mitel micollab, mivoice business express, micollab, mivoice business express +2 moreThe TP-240 (aka tp240dvr) component in Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business...9.8 Critical
- mattermost, mattermost server +1 moreStack overflow in document extractor in Mattermost4.3 Medium
- mattermost, mattermost server +1 moreStack overflow in SAML login in Mattermost5.3 Medium
- artica pfms pandora fms, pandora fms fms +1 moreVulnerability: Authenticated SQL Injection in API5.8 Medium
- phpmyadminPhpMyAdmin exposure of sensitive information5.3 Medium
- citrix federated authentication service (fas), federated authentication service +1 moreCitrix Federated Authentication Service (FAS)4.4 Medium
- signiant, signiant manager\+agents +1 moreSigniant - Manager+Agents XML External Entity (XXE)6.8 Medium
tomcatSUSESecurity update for tomcatNo score- luocms project luocmsLuocms v2.0 is affected by an incorrect access control vulnerability. Through /admin/templates...9.8 Critical
- luocms project luocmsLuocms v2.0 is affected by Cross Site Scripting (XSS) in /admin/news/sort_add.php and /inc...6.1 Medium
- luocms project luocmsLuocms v2.0 is affected by SQL Injection in /admin/news/news_ok.php.9.8 Critical
- luocms project luocmsLuocms v2.0 is affected by SQL Injection in /admin/news/sort_ok.php.9.8 Critical
- luocms project luocmsLuocms v2.0 is affected by SQL Injection in /admin/link/link_ok.php.9.8 Critical
- luocms project luocmsLuocms v2.0 is affected by SQL Injection in /admin/link/link_mod.php.9.8 Critical
- luocms project luocmsLuocms v2.0 is affected by SQL Injection in /admin/news/sort_mod.php.9.8 Critical
- luocms project luocmsLuocms v2.0 is affected by SQL Injection in /admin/news/news_mod.php.9.8 Critical
- luocms project luocmsLuocms v2.0 is affected by SQL Injection in /admin/manager/admin_mod.php. An attacker can obtain...7.5 High
- luocms project luocmsLuocms v2.0 is affected by SQL Injection through /admin/login.php. An attacker can log in to the...9.8 Critical
- heimdalsecurity heimdal premium securityHeimdal.Wizard.exe installer in Heimdal Premium Security 2.5.395 and earlier has insecure...7.8 High
- f-secure client security, countercept, elements +3 more +5 moreArbitrary Code Execution6.4 Medium
- microweber, microweber microweber/microweber +1 moreImproper Neutralization of Special Elements Used in a Template Engine in microweber/microweber7.1 High
- alextselegidis alextselegidis/easyappointments, easyappointments +1 moreExposure of Private Personal Information to an Unauthorized Actor in alextselegidis/easyappointments9.1 Critical
- chocobozzz chocobozzz/peertube, framasoft peertube +1 moreInsecure Storage of Sensitive Information in chocobozzz/peertube7.6 High
- Show moreLoading…