CVEs published in March 2022
2,440 vulnerabilities, 400 critical, 18 exploited.
- gogs, gogs gogs/gogs +1 moreServer-Side Request Forgery (SSRF) in gogs/gogs5.0 Medium
- microweber, microweber microweber/microweber +1 moreCross-site Scripting (XSS) - Stored in microweber/microweber6.8 Medium
- microweber, microweber microweber/microweber +1 moreUnrestricted Upload of File with Dangerous Type in microweber/microweber4.8 Medium
- microweber, microweber microweber/microweber +1 moreInteger Overflow or Wraparound in microweber/microweber9.1 Critical
- yokogawa exaopc, yokogawa electric corporation centum vp, yokogawa centum vp entry firmware +1 more +3 moreThe following Yokogawa Electric products hard-code the password for CAMS server applications:...9.8 Critical
- yokogawa centum cs 3000, exaopc, yokogawa electric corporation centum vp +4 more +6 moreThe following Yokogawa Electric products contain insecure DLL loading issues. CENTUM CS 3000...7.8 High
- yokogawa centum cs 3000, exaopc, yokogawa electric corporation centum vp +4 more +6 moreCAMS for HIS Server contained in the following Yokogawa Electric products improperly authenticate...8.8 High
- yokogawa centum cs 3000, exaopc, yokogawa electric corporation centum vp +4 more +6 moreCAMS for HIS Log Server contained in the following Yokogawa Electric products fails to properly...8.1 High
- yokogawa centum cs 3000, exaopc, yokogawa electric corporation centum vp +4 more +6 more'Root Service' service implemented in the following Yokogawa Electric products creates some named...7.8 High
- yokogawa centum cs 3000, exaopc, yokogawa electric corporation centum vp +4 more +6 moreCAMS for HIS Log Server contained in the following Yokogawa Electric products is vulnerable to...8.1 High
- yokogawa centum cs 3000, exaopc, yokogawa electric corporation centum vp +4 more +6 more'Long-term Data Archive Package' service implemented in the following Yokogawa Electric products...7.8 High
- yokogawa centum cs 3000, exaopc, yokogawa electric corporation centum vp +4 more +6 morePath traversal vulnerability exists in CAMS for HIS Server contained in the following Yokogawa...8.8 High
- yokogawa exaopc, yokogawa electric corporation centum vp, yokogawa centum vp entry firmware +1 more +3 moreThe following Yokogawa Electric products do not change the passwords of the internal Windows...9.8 Critical
- yokogawa centum cs 3000, exaopc, yokogawa electric corporation centum vp +4 more +6 moreThere is a path traversal vulnerability in CAMS for HIS Log Server contained in the following...8.1 High
- smartbear swagger uiSpoofing attack in swagger-ui4.3 Medium
- linux kerneldrivers/bluetooth/virtio_bt.c in the Linux kernel before 5.16.3 has a memory leak (socket buffers...5.5 Medium
- debian linux, horde mime viewer +1 morelib/Horde/Mime/Viewer/Ooo.php in Horde Mime_Viewer before 2.2.4 allows XSS via an OpenOffice...5.4 Medium
- orchardcms orchardcms/orchardcore, orchardcore +1 moreCross-site Scripting (XSS) - Reflected in orchardcms/orchardcore5.4 Medium
phpOSS-FuzzHeap-buffer-overflow in zend_gc_collect_cyclesNo scoreghostscriptOSS-FuzzUNKNOWN READ in pdfi_fapi_get_glyphNo scoreopenscOSS-FuzzHeap-buffer-overflow in do_fileidNo score- teluu pjsip, debian linux, pjsip pjproject +2 moreBuffer overflow in pjsip8.5 High
- nvidia jetson linux, jetson nano, jetson nano 2gb +1 moreNVIDIA distributions of Jetson Linux contain a vulnerability where an error in the IOMMU...7.6 High
- saleor, saleor saleor/saleor +1 moreMissing Authorization in saleor/saleor6.5 Medium
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreOut-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service...5.5 Medium
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreDivide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service...5.5 Medium
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreNull source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in...7.7 High
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreUnchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers...5.5 Medium
- gogs, gogs gogs/gogs +1 moreMissing Authorization in gogs/gogs8.2 High
- moodleMoodle reflected XSS6.1 Medium
- moodleMoodle denial-of-service risk in the draft files area7.5 High
- moodleMoodle Exposure of Sensitive Information to an Unauthorized Actor4.3 Medium
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +33 more +35 moreDeeply nested json in jackson-databind7.5 High
- orchardcms orchardcms/orchardcore, orchardcore +1 moreImproper Authorization in orchardcms/orchardcore7.1 High
- freetakserver-ui project freetakserver-uiExposure of Sensitive Information to an Unauthorized Actor in FreeTAKServer-UI7.5 High
- freetakserver-ui project freetakserver-uiPath traversal in FreeTAKServer-UI6.5 Medium
- freetakserver-ui project freetakserver-uiHard coded credentials in FreeTAKServer8.8 High
- freetakserver-ui project freetakserver-uiImproper Authentication in FreeTAKServer7.5 High
- freetakserver-ui project freetakserver-uiCross-site Scripting in FreeTAKServer-UI5.4 Medium
- freetakserver-ui project freetakserver-uiSQL Injection in FreeTAKServer-UI6.5 Medium
- orchardcms orchardcms/orchardcore, orchardcore +1 moreCross-site Scripting (XSS) - Stored in orchardcms/orchardcore4.7 Medium
- mcafee total protection for windows, microsoft windows +1 moreMcAfee Total Protection (MTP) - File Deletion vulnerability7.5 High
- mcafee webadvisorMcAfee WebAdvisor - Extension Fingerprinting vulnerability6.5 Medium
- istioUnauthenticated control plane denial of service attack in Istio7.5 High
- nextcloud server, kiteworks security-advisories +1 moreMissing authorization in Nextcloud text6.5 Medium
- jeecg bootCross-site Scripting in jeecg-boot6.1 Medium
- ibm guardium data encryption, security guardium data encryption +1 moreIBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 could disclose internal IP address...5.3 Medium
- ibm guardium data encryption, security guardium data encryption +1 moreIBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 saves user-provided information into a...6.2 Medium
- ibm datapower gatewayIBM DataPower Gateway V10CD, 10.0.1, and 2108.4.1 could allow a remote attacker to bypass...3.7 Low
- debian linux, xen, unspecified +2 moreLinux PV device frontends vulnerable to attacks by backends T[his CNA information record relates...7.0 High
- Show moreLoading…