CVEs published in March 2022
2,440 vulnerabilities, 400 critical, 18 exploited.
- softing datafeed opc suite, opc ua c\+\+ software development kit, secure integration server +2 moreAn issue was discovered in Softing OPC UA C++ SDK before 5.70. An invalid XML element in the type...6.5 Medium
- dell alienware 13 r3 firmware, alienware 15 r3 firmware, alienware 15 r4 firmware +44 more +46 moreDell BIOS contains an improper input validation vulnerability. A local authenticated malicious...8.2 High
- dell alienware 13 r3 firmware, alienware 15 r3 firmware, alienware 15 r4 firmware +44 more +46 moreDell BIOS contains an improper input validation vulnerability. A local authenticated malicious...8.2 High
- dell alienware 13 r3 firmware, alienware 15 r3 firmware, alienware 15 r4 firmware +44 more +46 moreDell BIOS contains an improper input validation vulnerability. A local authenticated malicious...8.2 High
- dell alienware 13 r3 firmware, alienware 15 r3 firmware, alienware 15 r4 firmware +44 more +46 moreDell BIOS contains an improper input validation vulnerability. A local authenticated malicious...8.2 High
- dell alienware 13 r3 firmware, alienware 15 r3 firmware, alienware 15 r4 firmware +44 more +46 moreDell BIOS contains an improper input validation vulnerability. A local authenticated malicious...8.2 High
- url-js project url-jsImproper Input Validation4.3 Medium
- alibaba nacosCross-site Scripting in Nacos6.1 Medium
- wire, wire wire-ios-transport, wireapp wire-ios +2 moreDoS vulnerability: Malformed Resource Identifiers6.5 Medium
- oppo colorosIn ACE2 ColorOS11, the attacker can obtain the foreground package name through permission...7.5 High
- dvdfab 12 player, playerfab +1 moreAn absolute path traversal vulnerability allows a remote attacker to download any file on the...7.5 High
- intel atom c2308, atom c2316, atom c2338 +416 more +418 moreHardware allows activation of test or debug logic at runtime for some Intel(R) Trace Hub...6.8 Medium
- amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +124 more +126 moreSome AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially...6.5 Medium
- amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +124 more +126 moreLFENCE/JMP (mitigation V2-2) may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs.5.6 Medium
- adobe photoshopAdobe Photoshop 2022 Out-of-bounds Read could lead to Memory leak5.5 Medium
- adobe after effectsAdobe After Effects Heap-based Buffer Overflow Arbitrary code execution7.8 High
- adobe illustratorAdobe Illustrator 2022 Buffer Overflow could lead to Arbitrary code execution7.8 High
- adobe after effectsAdobe After Effects Out-of-bounds Write could lead to Arbitrary code execution7.8 High
- adobe after effectsAdobe After Effects Stack-based Buffer Overflow Arbitrary code execution7.8 High
- adobe after effectsAdobe After Effects Stack-based Buffer Overflow Arbitrary code execution7.8 High
- nec univerge wa1020 firmware, univerge wa1510 firmware, univerge wa1511 firmware +8 more +10 moreUUNIVERGE WA 1020 Ver8.2.11 and prior, UNIVERGE WA 1510 Ver8.2.11 and prior, UNIVERGE WA 1511...9.8 Critical
- redhat descision manager, jboss enterprise application platform, jboss enterprise application platform expansion pack +2 more +4 moreA flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss...7.5 High
- moodleMoodle Blind SQL injection possible via MNet authentication7.2 High
- moodleMoodle Information Disclosure vulnerability5.3 Medium
- moodleMoodle stored Cross-site Scripting5.4 Medium
- moodleMoodle Exposure of Sensitive Information to an Unauthorized Actor4.3 Medium
- hp pc biosPotential vulnerabilities have been identified in the system BIOS of certain HP PC products which...8.2 High
- hp pc biosPotential vulnerabilities have been identified in the system BIOS of certain HP PC products which...8.2 High
- hp pc biosPotential vulnerabilities have been identified in the system BIOS of certain HP PC products which...8.2 High
- hp pc biosPotential vulnerabilities have been identified in the system BIOS of certain HP PC products which...8.2 High
- hp pc biosPotential vulnerabilities have been identified in the system BIOS of certain HP PC products which...8.2 High
- hp pc biosPotential vulnerabilities have been identified in the system BIOS of certain HP PC products which...8.2 High
- hp pc biosPotential vulnerabilities have been identified in the system BIOS of certain HP PC products which...8.2 High
- hp pc biosPotential vulnerabilities have been identified in the system BIOS of certain HP PC products which...8.2 High
- hp pc biosPotential vulnerabilities have been identified in the system BIOS of certain HP PC products which...8.2 High
- hp pc biosPotential vulnerabilities have been identified in the system BIOS of certain HP PC products which...8.2 High
- hp pc biosPotential vulnerabilities have been identified in the system BIOS of certain HP PC products which...8.2 High
- lg webosV8 javascript engine (heap vulnerability) can cause privilege escalation ,which can impact on...7.8 High
- lg webosThe public API error causes for the attacker to be able to bypass API access control.9.8 Critical
- fedoraproject fedora, flippercode wp google map plugin (wordpress plugin), weplugins wp maps +2 moreWordPress WP Google Map plugin <= 4.2.3 - Cross-Site Request Forgery (CSRF) vulnerability5.4 Medium
- plugin-planet contact form x, fedoraproject fedora, jeff starr contact form x (wordpress plugin) +2 moreWordPress Contact Form X plugin <= 2.4 - Reflected Cross-Site Scripting (XSS) vulnerability4.7 Medium
- hitachi abb power grids ellipse enterprise asset management (eam), hitachienergy ellipse enterprise asset management +1 moreUser interface misrepresentation of critical information in Hitachi ABB Power Grids Ellipse EAM5.5 Medium
- hitachi abb power grids ellipse enterprise asset management (eam), hitachienergy ellipse enterprise asset management +1 moreCross-site scripting in Hitachi ABB Power Grids Ellipse EAM5.5 Medium
- secomea gatemanagerMissing XSS guards on firmware page5.0 Medium
- microweber, microweber microweber/microweber +1 moreAbusing Backup/Restore feature to achieve Remote Code Execution in microweber/microweber7.2 High
- simple-git project simple-gitCommand Injection8.1 High
- totolink a3100r firmwareA Command Injection vulnerability exits in TOTOLINK A3100R <=V4.1.2cu.5050_B20200504 in adm/ntm...9.8 Critical
- nystudio107 seomaticServer-side Template Injection in nystudio107/craft-seomatic9.8 Critical
tomcatSUSESecurity update for tomcatNo score- cobbler cobbler/cobbler, cobbler project cobbler, fedoraproject fedora +2 moreImproper Authorization in cobbler/cobbler8.2 High
- Show moreLoading…