CVEs published in March 2022
2,440 vulnerabilities, 400 critical, 18 exploited.
- debian linux, xen, unspecified +2 moreLinux PV device frontends vulnerable to attacks by backends T[his CNA information record relates...7.0 High
- debian linux, xen, unspecified +2 moreLinux PV device frontends vulnerable to attacks by backends T[his CNA information record relates...7.0 High
- debian linux, xen, unspecified +2 moreLinux PV device frontends vulnerable to attacks by backends T[his CNA information record relates...7.0 High
- debian linux, xen, unspecified +2 moreLinux PV device frontends vulnerable to attacks by backends T[his CNA information record relates...7.0 High
- debian linux, xen, unspecified +2 moreLinux PV device frontends vulnerable to attacks by backends T[his CNA information record relates...7.0 High
- debian linux, xen, unspecified +2 moreLinux PV device frontends vulnerable to attacks by backends T[his CNA information record relates...7.0 High
ca-certificatesTuxCareUpdate of ca-certificatesNo scoreca-certificatesTuxCareUpdate of ca-certificatesNo score- croogoUnrestricted Upload of File with Dangerous Type in Croogo8.8 High
- sentcmssentcms 4.0.x allows remote attackers to cause arbitrary file uploads through an unauthorized...9.8 Critical
- sentcmssentcms 4.0.x allows remote attackers to cause arbitrary file uploads through an unauthorized...9.8 Critical
- wavpack, fedoraproject fedora +1 moreAn out of bounds read was found in Wavpack 5.4.0 in processing *.WAV files. This issue triggered...5.5 Medium
- asus myasusThe System Diagnosis service of MyASUS before 3.1.2.0 allows privilege escalation.9.8 Critical
- microweber, microweber microweber/microweber +1 moreUnrestricted file upload leads to stored XSS in microweber/microweber4.3 Medium
- rockcarry ffjpegThe function bitstr_tell at bitstr.c in ffjpeg commit 4ab404e has a NULL pointer dereference.5.5 Medium
- libpano13 project libpano13, debian linux +1 morePanorama Tools libpano13 v2.9.20 was discovered to contain an out-of-bounds read in the function...9.1 Critical
- abcm2ps project abcm2ps, debian linux, fedoraproject fedora +2 moreAn out-of-bounds read in the function write_title() in subs.c of abcm2ps v8.14.11 allows remote...6.5 Medium
- abcm2ps project abcm2ps, debian linux, fedoraproject fedora +2 moreStack-based buffer overflow in the function get_key in parse.c of abcm2ps v8.14.11 allows remote...5.5 Medium
- abcm2ps project abcm2ps, debian linux, fedoraproject fedora +2 moreabcm2ps v8.14.11 was discovered to contain an out-of-bounds read in the function calculate_beam...5.5 Medium
- microweber, microweber microweber/microweber +1 moreStatic Code Injection in microweber/microweber7.7 High
- apache spark, oracle financial services crime and compliance management studio +1 moreApache Spark Key Negotiation Vulnerability7.5 High
- linuxfoundation nats-server, nats streaming server +1 moreArbitrary file write in nats-server6.5 Medium
- mruby, mruby mruby/mruby +1 moreNULL Pointer Dereference in mruby/mruby5.5 Medium
- ultravncLow privilege user is able to exploit the service and gain SYSTEM privileges in UltraVNC server8.8 High
- gitea, go-gitea go-gitea/gitea +1 moreMissing Authorization in go-gitea/gitea6.5 Medium
- schneider electric ecostruxure control expert, ecostruxure process expert +1 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could...5.3 Medium
- schneider electric ecostruxure control expertA CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...5.3 Medium
- schneider electric ritto wiser doorA CWE-200: Information Exposure vulnerability exists which could allow a session hijack when the...8.8 High
- stripe cli, stripe-cli +1 moreCode injection in Stripe CLI on windows7.7 High
- runzero platform, shopware +1 moreInsufficient Session Expiration in shopware2.6 Low
- runzero platform, shopware +1 moreGuest session is shared between customers in shopware4.8 Medium
- runzero platform, shopware +1 moreHTML injection possibility in voucher code form6.1 Medium
- runzero platform, shopware +1 moreHTTP caching is marking private HTTP headers as public6.3 Medium
- runzero platform, shopware +1 moreIncorrect Authentication in shopware6.8 Medium
- tp-link tl-wr886n firmwareA Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloud_config...9.8 Critical
- tp-link tl-wr886n firmwareA Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloud_config...9.8 Critical
- tp-link tl-wr886n firmwareA Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloud_config...9.8 Critical
- tp-link tl-wr886n firmwareA Buffer Overflow vulnerabilitiy exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloud_config...9.8 Critical
- tp-link tl-wr886n firmwareA Buffer Overflow vulnerabiltiy exists in TP-LINK WR-886N 20190826 2.3.8 in thee /cloud_config...9.8 Critical
- tp-link tl-wr886n firmwareA Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloud_config...9.8 Critical
- tp-link tl-wr886n firmwareA Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloud_config...9.8 Critical
- tp-link tl-wr886n firmwareA Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in /cloud_config...9.8 Critical
- nextcloud server, kiteworks security-advisories +1 moreHigh memory usage in Nextcloud server3.5 Low
- mybbRemote code execution in mybb7.2 High
- tp-link tl-wr886n firmwareA Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 via the /cloud_config...9.8 Critical
- tp-link tl-wr886n firmwareA Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloud_config...9.8 Critical
- blackberry qnx momentics, qnx os for medical, qnx os for safety +2 more +4 moreAn elevation of privilege vulnerability in the QNX Neutrino Kernel of affected versions of QNX...8.1 High
- apple swiftnio http\/2, swift project swiftnio http2 +1 moreDenial of service via HTTP/2 HEADERS frames padding7.5 High
- wago 750-8100 firmware, 750-8101\/025-000 firmware, 750-8101 firmware +29 more +31 moreWAGO PLCs WBM vulnerable to reflected XSS5.4 Medium
- dependencytrack frontend, debian linux, fedoraproject fedora +2 moreReflected XSS in graph configuration window of Zabbix Frontend3.7 Low
- Show moreLoading…