CVEs published in March 2022
2,440 vulnerabilities, 400 critical, 18 exploited.
- hospital management system project management systemHMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in...9.8 Critical
- hospital management system project management systemHMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in...7.5 High
- hospital management system project management systemHMS v1.0 was discovered to contain a SQL injection vulnerability via the medicineid parameter in...9.8 Critical
- hospital management system project management systemHMS v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via...6.1 Medium
- online banking system project banking systemOnline Banking System v1.0 was discovered to contain a SQL injection vulnerability via...9.8 Critical
- cuppacmsThe component /jquery_file_upload/server/php/index.php of CuppaCMS v1.0 allows attackers to...9.8 Critical
- cuppacmsCuppaCMS v1.0 was discovered to contain an arbitrary file read via the copy function.5.3 Medium
- cuppacmsCuppaCMS v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the...9.8 Critical
- tibco jasperreports library, jasperreports server, tibco software inc. jasperreports library for activematrix bpm +3 more +5 moreTIBCO JasperReports Library Directory Traversal Vulnerability9.9 Critical
- ibm engineering workflow management, rational team concert +1 moreIBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 and IBM Rational Team Concert 6.0.6 and...4.3 Medium
- jenkins incapptic connect uploader, jenkins project incapptic connect uploader plugin +1 morePersonal tokens stored in plain text by Jenkins incapptic connect uploader Plugin4.3 Medium
- jenkins vmware vrealize codestream, jenkins project vmware vrealize codestream plugin +1 morePasswords stored in plain text by Jenkins Vmware vRealize CodeStream Plugin6.5 Medium
- jenkins dbcharts, jenkins project dbcharts plugin +1 morePasswords stored in plain text by Jenkins dbCharts Plugin6.5 Medium
- jenkins release helper, jenkins project release helper plugin +1 moreMissing permission checks in Jenkins Release Helper Plugin4.3 Medium
- jenkins release helper, jenkins project release helper plugin +1 moreCSRF vulnerability in Jenkins Release Helper Plugin4.3 Medium
- jenkins environment dashboard, jenkins project environment dashboard plugin +1 moreStored Cross-site Scripting vulnerability in Jenkins Environment Dashboard Plugin5.4 Medium
- jenkins list git branches parameter, jenkins project list git branches parameter plugin +1 moreStored Cross-site Scripting vulnerability in Jenkins List Git Branches Parameter Plugin5.4 Medium
- jenkins kubernetes continuous deploy, jenkins project kubernetes continuous deploy plugin +1 moreCSRF vulnerability and missing permission checks in Jenkins kubernetes-cd Plugin allow capturing credentials6.5 Medium
- jenkins kubernetes continuous deploy, jenkins project kubernetes continuous deploy plugin +1 moreCSRF vulnerability in Jenkins kubernetes-cd Plugin allow capturing credentials6.5 Medium
- jenkins kubernetes continuous deploy, jenkins project kubernetes continuous deploy plugin +1 moreMissing permission checks in Jenkins kubernetes-cd Plugin allow enumerating credentials IDs6.5 Medium
- jenkins kubernetes continuous deploy, jenkins project kubernetes continuous deploy plugin +1 moreArbitrary file read vulnerability in Jenkins kubernetes-cd Plugin6.5 Medium
- jenkins global-build-stats, jenkins project global-build-stats plugin +1 moreStored Cross-site Scripting vulnerability in Jenkins global-build-stats Plugin4.8 Medium
- jenkins gitlab authentication, jenkins project gitlab authentication plugin +1 moreClient Secret stored in plain text by Jenkins GitLab Authentication Plugin6.5 Medium
- jenkins extended choice parameter, jenkins project extended choice parameter plugin +1 moreCSRF vulnerability and missing permission checks in Extended Choice Parameter Plugin allow SSRF4.3 Medium
- jenkins extended choice parameter, jenkins project extended choice parameter plugin +1 moreCSRF vulnerability and missing permission checks in Jenkins Extended Choice Parameter Plugin allow SSRF8.8 High
- jenkins extended choice parameter, jenkins project extended choice parameter plugin +1 moreArbitrary JSON and property file read vulnerability in Jenkins Extended Choice Parameter Plugin6.5 Medium
- jenkins extended choice parameter, jenkins project extended choice parameter plugin +1 moreStored Cross-site Scripting vulnerability in Jenkins Extended Choice Parameter Plugin5.4 Medium
- jenkins semantic versioning, jenkins project semantic versioning plugin +1 moreAgent-to-controller security bypass in Jenkins Semantic Versioning Plugin6.5 Medium
- jenkins folder-based authorization strategy, jenkins project folder-based authorization strategy plugin +1 moreStored Cross-site Scripting in folder-auth plugin4.8 Medium
- jenkins cloudbees aws credentials, jenkins project cloudbees aws credentials plugin +1 moreMissing permission checks in AWS Credentials Plugin4.3 Medium
- jenkins cloudbees aws credentials, jenkins project cloudbees aws credentials plugin +1 moreCSRF vulnerability in Jenkins CloudBees AWS Credentials Plugin8.0 High
- jenkins dashboard view, jenkins project dashboard view plugin +1 moreStored Cross-site Scripting vulnerability in Jenkins Dashboard View Plugin5.4 Medium
- jenkins favorite, jenkins project favorite plugin +1 moreStored Cross-site Scripting vulnerability in Jenkins Favorite Plugin5.4 Medium
- jenkins parameterized trigger, jenkins project parameterized trigger plugin +1 moreSensitive parameter values captured in build metadata files by Jenkins Parameterized Trigger Plugin5.5 Medium
- getgrav getgrav/grav, grav +1 moreCross-site Scripting (XSS) - Stored in getgrav/grav7.1 High
- microweber, microweber microweber/microweber +1 moreThe microweber application allows large characters to insert in the input field "fist & last name" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. in microwebe…7.2 High
- apache cloudstackApache Cloudstack insecure random number generation affects project email invitation7.5 High
- showdoc, star7th star7th/showdoc +1 moreStored XSS viva .webmv file upload in star7th/showdoc8.0 High
- showdoc, star7th star7th/showdoc +1 moreStored XSS viva .ofd file upload in star7th/showdoc9.0 Critical
- showdoc, star7th star7th/showdoc +1 moreStored XSS via File Upload in star7th/showdoc in star7th/showdoc6.4 Medium
- showdoc, star7th star7th/showdoc +1 moreStored XSS via File Upload in star7th/showdoc in star7th/showdoc in star7th/showdoc6.9 Medium
- microweber, microweber microweber/microweber +1 moreUnrestricted XML Files Leads to Stored XSS in microweber/microweber5.7 Medium
- microweber, microweber microweber/microweber +1 moreThe microweber application allows large characters to insert in the input field "post title" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. in microweber/micr…7.1 High
- bareosMissing Release of Memory after Effective Lifetime in Bareos Director7.5 High
- sylius syliusgridbundleSQL Injection through sorting parameters in SyliusGridBundle9.8 Critical
- bareosIncorrect Authorization in Bareos Director8.1 High
- httpie, httpie httpie/httpie +1 moreExposure of Sensitive Information to an Unauthorized Actor in httpie/httpie2.4 Low
- cometdIncorrect Authorization in org.cometd.oort8.1 High
- showdoc, star7th star7th/showdoc +1 moreStored XSS due to Unrestricted File Upload in star7th/showdoc9.4 Critical
- showdoc, star7th star7th/showdoc +1 moreStored XSS via File Upload in star7th/showdoc7.6 High
- Show moreLoading…