CVEs published in March 2022
2,440 vulnerabilities, 400 critical, 18 exploited.
- showdoc, star7th star7th/showdoc +1 moreStored XSS via File Upload in star7th/showdoc7.1 High
- microweber, microweber microweber/microweber +1 moreMultiple Stored Cross-site Scripting (XSS) Vulnerabilities in Shop's Other Settings, Shop's Autorespond E-mail Settings and Shops' Payments Methods in microweber/microweber6.8 Medium
- prasathmani tiny file managerPath traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File...8.8 High
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Stored in pimcore/pimcore6.8 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Stored in pimcore/pimcore8.2 High
firewall-appletAlmaLinux,firewall-configAlmaLinux +1 morefirewalld bug fix and enhancement updateNo scorelibsmbclient-develAlmaLinux,libwbclient-develAlmaLinux,samba-develAlmaLinux +1 more +3 moresamba bug fix and enhancement updateNo scoredevice-mapper-develAlmaLinux,device-mapper-event-develAlmaLinux,lvm2-develAlmaLinux +2 morelvm2 bug fix and enhancement updateNo scoresubscription-manager-migrationAlmaLinuxsubscription-manager bug fix and enhancement updateNo scoreplymouthAlmaLinux,plymouth-core-libsAlmaLinux,plymouth-graphics-libsAlmaLinux +14 more +16 moreplymouth bug fix and enhancement updateNo scorenmstateAlmaLinux,nmstate-plugin-ovsdbAlmaLinux,python3-libnmstateAlmaLinux +2 morenmstate bug fix and enhancement updateNo scorejava-11-openjdkAlmaLinux,java-11-openjdk-demoAlmaLinux,java-11-openjdk-demo-fastdebugAlmaLinux +20 more +22 morejava-11-openjdk bug fix and enhancement updateNo scorefence-agents-aliyunAlmaLinux,fence-agents-allAlmaLinux,fence-agents-amt-wsAlmaLinux +39 more +41 morefence-agents bug fix and enhancement updateNo scoregdmAlmaLinuxgdm bug fix and enhancement updateNo scorecloud-initAlmaLinuxcloud-init bug fix and enhancement updateNo scorepcsAlmaLinux,pcs-snmpAlmaLinux +1 morepcs bug fix and enhancement updateNo score- showdoc, star7th star7th/showdoc +1 moreFile Upload Restriction Bypass leading to Stored XSS Vulnerability in star7th/showdoc8.2 High
- showdoc, star7th star7th/showdoc +1 moreUnrestricted Upload of File with Dangerous Type in star7th/showdoc6.5 Medium
- cvrf-csaf-converter project cvrf-csaf-converterXML External Entities Vulnerability in CVRF-CSAF-Converter6.1 Medium
- showdoc, star7th star7th/showdoc +1 moreStored XSS viva axd and cshtml file upload in star7th/showdoc in star7th/showdoc9.0 Critical
- sqlpad, sqlpad sqlpad/sqlpad +1 moreTemplate injection in connection test endpoint leads to RCE in sqlpad/sqlpad9.1 Critical
grokOSS-FuzzHeap-buffer-overflow in grk::PacketIter::genPrecinctInfoNo scoreopenscOSS-FuzzHeap-buffer-overflow in process_efNo scoregrokOSS-FuzzHeap-buffer-overflow in grk::PacketIter::next_pcrlNo score- openssl, debian linux, fedoraproject fedora +470 more +472 moreInfinite loop in BN_mod_sqrt() reachable when parsing certificates7.5 High
- fedoraproject fedora, nicotine-plus nicotine\+ +1 moreNicotine+ DoS on Null Character in Download Request7.5 High
@openzeppelin/contracts-upgradeablenpmInconsistent storage layout for ERC2771ContextUpgradeableNo scoregogs.io/gogsGoSSRF in repository migration5.0 MediumtwistedPyPIHTTP/2 DoS Attacks: Ping, Reset, and Settings FloodsNo score- jcubic sysend, sysend.js +1 moreExposure of Sensitive Information to an Unauthorized Actor in sysend.js6.5 Medium
- clickhouseDivide-by-zero in Clickhouse's Gorilla compression codec when parsing a malicious query. The...6.5 Medium
- clickhouseDivide-by-zero in Clickhouse's DeltaDouble compression codec when parsing a malicious query. The...6.5 Medium
- clickhouseDivide-by-zero in Clickhouse's Delta compression codec when parsing a malicious query. The first...6.5 Medium
- plone voltoImproper Authentication in Volto5.0 Medium
- syliusBasic Cross-site Scripting and Unrestricted Upload of File with Dangerous Type in Sylius6.1 Medium
- syliusInsufficient Session Expiration in Sylius7.1 High
- syliusExposure of Sensitive Information Due to Incompatible Policies in Sylius5.0 Medium
- syliusImproper Restriction of Rendered UI Layers or Frames in Sylius6.1 Medium
- rambus safezone basic crypto module, canon imageprograf firmware, imagerunner firmware +89 more +91 moreThe Rambus SafeZone Basic Crypto Module, as used in certain Fujifilm (formerly Fuji Xerox)...9.1 Critical
- libvcs project libvcsCommand Injection8.1 High
- ibm big sql, big sql on cloud pak for data +1 moreIBM Big SQL on IBM Cloud Pak for Data 7.1.0, 7.1.1, 7.2.0, and 7.2.3 could allow an authenticated...5.3 Medium
- ibm spectrum protect operations centerIBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.13.xxx is vulnerable to reverse...4.0 Medium
- ibm spectrum protect operations centerIBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.13.xxx is vulnerable to cross-site...4.3 Medium
- ibm data virtualization on cloud pak for dataIBM Data Virtualization on Cloud Pak for Data 1.3.0, 1.4.1, 1.5.0, 1.7.1 and 1.7.3 could allow an...4.9 Medium
chromium-browser-stableMageiaUpdated chromium-browser-stable packages fix security vulnerabilityNo score- ibm spectrum copy data management, spectrum protect plus +1 moreIBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.2 and IBM Spectrum Copy Data Management 2.2.0.0...6.2 Medium
- ibm spectrum copy data managementIBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to HTTP header injection...4.8 Medium
- ibm spectrum copy data managementIBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to cross-site scripting....5.4 Medium
- ibm spectrum copy data managementIBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to server-side request...4.8 Medium
- showdoc, star7th star7th/showdoc +1 moreStored XSS viva .webma file upload in star7th/showdoc9.0 Critical
- Show moreLoading…