CVEs published in March 2022
2,440 vulnerabilities, 400 critical, 18 exploited.
- showdoc, star7th star7th/showdoc +1 moreStored XSS due to Unrestricted File Upload in star7th/showdoc6.3 Medium
- apache http server, debian linux, fedoraproject fedora +1 more +3 moremod_sed: Read/write beyond bounds9.8 Critical
- apache http server, apple mac os x, macos +4 more +6 morecore: Possible buffer overflow with very large or unlimited LimitXMLRequestBody9.1 Critical
- apache http server, apple mac os x, macos +4 more +6 moreHTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier9.8 Critical
- apache http server, apple mac os x, macos +3 more +5 moremod_lua Use of uninitialized value of in r:parsebody7.5 High
- showdoc, star7th star7th/showdoc +1 moreStored XSS via file upload in star7th/showdoc7.1 High
- b3log vditor, vanessa219 vanessa219/vditor +1 moreCross-site Scripting (XSS) - Stored in vanessa219/vditor6.6 Medium
- showdoc, star7th star7th/showdoc +1 moreStored xss in showdoc through file upload in star7th/showdoc6.3 Medium
- atlassian crucible, fisheye +1 moreThe DefaultRepositoryAdminService class in Fisheye and Crucible before version 4.8.9 allowed...4.3 Medium
selinuxOSS-FuzzUNKNOWN READ in write_cond_nodes_to_confNo score- gpacGPAC 1.0.1 is affected by a heap-based buffer overflow in SFS_AddString () at bifs/script_dec.c.7.8 High
- gpacGPAC 1.0.1 is affected by a NULL pointer dereference in gf_utf8_wcslen ().7.8 High
- gpacGPAC 1.0.1 is affected by a NULL pointer dereference in gf_dump_vrml_field.isra ().5.5 Medium
- smartertools smartertrackStored XSS in SmarterTrack v100.0.8019.140108.8 High
- smartertools smartertrackInformation disclosure via direct object access on SmarterTrack v100.0.8019.140106.5 Medium
- smartertools smartertrackReflective XSS on SmarterTrack v100.0.8019.140108.8 High
- fishshell fish, debian linux, fedoraproject fedora +1 more +3 moreInjection in fish7.8 High
- vim, vim vim/vim, apple macos +2 more +4 moreHeap-based Buffer Overflow occurs in vim in vim/vim8.4 High
- linux kernel, netapp a400 firmware, aff 8300 firmware +11 more +13 moreMemory leak in ICMP6 in Linux Kernel9.1 Critical
- clickhouse, debian linux +1 moreHeap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There...8.8 High
- clickhouse, debian linux +1 moreHeap buffer overflow in Clickhouse's LZ4 compression codec when parsing a malicious query. There...8.8 High
- clickhouse, debian linux +1 moreHeap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As...8.1 High
- clickhouse, debian linux +1 moreHeap out-of-bounds read in Clickhouse's LZ4 compression codec when parsing a malicious query. As...8.1 High
- phpliteadminphpLiteAdmin through 1.9.8.2 allows XSS via the index.php newRows parameter (aka num or number).6.1 Medium
- mirametrix glanceMirametrix Glance before 5.1.1.42207 (released on 2018-08-30) allows a local attacker to elevate...7.8 High
- ponton x\/p messengerAn issue was discovered in PONTON X/P Messenger before 3.11.2. Due to path traversal in private...9.8 Critical
- ponton x\/p messengerAn issue was discovered in PONTON X/P Messenger before 3.11.2. Anti-CSRF tokens are globally...8.8 High
- ponton x\/p messengerAn issue was discovered in PONTON X/P Messenger before 3.11.2. Several functions are vulnerable...5.4 Medium
- ponton x\/p messengerAn issue was discovered in PONTON X/P Messenger before 3.11.2. The navigation tree that is shown...4.8 Medium
expatDebianexpat - regression updateNo scoredebian-archive-keyringDebiandebian-archive-keyring - security updateNo score- liblouis, apple ipados, iphone os +4 more +6 moreLiblouis through 3.21.0 has a buffer overflow in compilePassOpcode in compileTranslationTable.c ...7.8 High
- timescale timescaledbTimescale TimescaleDB 1.x and 2.x before 2.5.2 may allow privilege escalation during extension...8.0 High
- openbsd openssh, debian linux +1 more** DISPUTED ** An issue was discovered in OpenSSH before 8.9. If a client is using public-key...3.7 Low
- debian linux, linux kernel, netapp active iq unified manager +7 more +9 moreAn issue was discovered in the Linux kernel before 5.16.12. drivers/net/usb/sr9700.c allows...5.5 Medium
- microweber, microweber microweber/microweber +1 moreFile upload filter bypass leading to stored XSS in microweber/microweber8.0 High
- microweber, microweber microweber/microweber +1 moreXSS on dynamic_text module in microweber/microweber6.8 Medium
- microweber, microweber microweber/microweber +1 moreFile upload filter bypass leading to stored XSS in microweber/microweber7.1 High
- showdoc, star7th star7th/showdoc +1 moreCross-site Scripting (XSS) - Stored in star7th/showdoc7.6 High
- alistgo alistCross-site Scripting in Alist6.1 Medium
- onenavAn issue in index.php of OneNav v0.9.14 allows attackers to perform directory traversal.5.3 Medium
phpOSS-FuzzSegv on unknown address in i_zval_ptr_dtorNo scoreopenscOSS-FuzzStack-buffer-overflow in sc_format_oidNo score- gpacGPAC 2.0 allows a heap-based buffer overflow in gf_base64_encode. It can be triggered via MP4Box.7.8 High
- parse-community parse-serverCommand Injection in Parse server10.0 Critical
pillowPyPIInfinite loop in PillowNo score- bluproducts g90 firmware, g9 firmware, luna simo firmware +2 more +4 moreAn issue was discovered in Luna Simo PPR1.180610.011/202001031830. It sends the following...5.5 Medium
- bluproducts g90 firmware, g9 firmware, luna simo firmware +2 more +4 moreAn issue was discovered in Luna Simo PPR1.180610.011/202001031830. It mishandles software updates...7.8 High
- bluproducts g90 firmware, g9 firmware, luna simo firmware +2 more +4 moreAn issue was discovered in Luna Simo PPR1.180610.011/202001031830. A pre-installed app with a...7.8 High
- softing datafeed opc suite, opc ua c\+\+ software development kit, secure integration server +2 moreAn issue was discovered in Softing OPC UA C++ SDK before 5.70. A malformed OPC/UA message abort...7.5 High
- Show moreLoading…