CVEs published in March 2022
2,440 vulnerabilities, 400 critical, 18 exploited.
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Stored in pimcore/pimcore4.0 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Stored in pimcore/pimcore6.8 Medium
- atlassian crucible, fisheye +1 moreVarious rest resources in Fisheye and Crucible before version 4.8.9 allowed remote attackers to...9.8 Critical
- atlassian crucible, fisheye +1 moreAffected versions of Atlassian Fisheye & Crucible allowed remote attackers to browse local files...7.5 High
- atlassian crucible, fisheye +1 moreThe jQuery deserialize library in Fisheye and Crucible before version 4.8.9 allowed remote...6.1 Medium
- atlassian crucible, fisheye +1 moreThe /rest-service-fecru/server-v1 resource in Fisheye and Crucible before version 4.8.9 allowed...4.3 Medium
- gradle enterpriseGradle Enterprise before 2021.4.3 relies on cleartext data transmission in some situations. It...6.5 Medium
arrow-javaOSS-FuzzUncaught exception in java.base/java.nio.Bits.reserveMemoryNo score- ckeditor, ckeditor ckeditor4, drupal +7 more +9 moreRegular expression Denial of Service in dialog plugin6.5 Medium
- ckeditor, ckeditor ckeditor4, drupal +7 more +9 moreCross-site Scripting in CKEditor45.4 Medium
- isc bind, netapp h300e firmware, h300s firmware +6 more +8 moreAssertion failure on delayed DS lookup7.5 High
- isc bind, netapp h300e firmware, h300s firmware +6 more +8 moreVersions affected: BIND 9.18.0 When a vulnerable version of named receives a series of specific...7.5 High
- isc bind, fedoraproject fedora, netapp h300e firmware +8 more +10 moreDoS from specifically crafted TCP packets5.3 Medium
- isc bind, fedoraproject fedora, juniper junos +9 more +11 moreDNS forwarders - cache poisoning vulnerability6.8 Medium
- debian linux, linux kernel, netapp active iq unified manager +7 more +9 moreIn drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint index is...8.8 High
- mimecast email securityMimecast Email Security before 2020-01-10 allows any admin to spoof any domain, and pass DMARC...4.9 Medium
- totolink a7000r firmware, x5000r firmware +1 moreTotolink routers s X5000R V9.1.0u.6118_B20201102 and A7000R V9.1.0u.6115_B20201022 were...9.8 Critical
- totolink a7000r firmware, x5000r firmware +1 moreTotolink routers s X5000R V9.1.0u.6118_B20201102 and A7000R V9.1.0u.6115_B20201022 were...9.8 Critical
- totolink a7000r firmware, x5000r firmware +1 moreTotolink routers s X5000R V9.1.0u.6118_B20201102 and A7000R V9.1.0u.6115_B20201022 were...9.8 Critical
- commscope arris tr3300 firmwareArris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the ddns...9.8 Critical
- commscope arris tr3300 firmwareArris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the dhcp...9.8 Critical
- commscope arris tr3300 firmwareArris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the time and...9.8 Critical
- commscope arris tr3300 firmwareArris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the static ip...9.8 Critical
- commscope arris tr3300 firmwareArris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the wps...9.8 Critical
- commscope arris tr3300 firmwareArris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the upnp...9.8 Critical
- commscope arris tr3300 firmwareArris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the pppoe...9.8 Critical
- commscope arris tr3300 firmwareArris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the pptp ...9.8 Critical
- arris sbr-ac1200p firmware, sbr-ac1900p firmware, sbr-ac3200p firmware +2 moreArris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were...9.8 Critical
- arris sbr-ac1200p firmware, sbr-ac1900p firmware, sbr-ac3200p firmware +2 moreArris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were...9.8 Critical
- arris sbr-ac1200p firmware, sbr-ac1900p firmware, sbr-ac3200p firmware +2 moreArris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were...9.8 Critical
- arris sbr-ac1200p firmware, sbr-ac1900p firmware, sbr-ac3200p firmware +2 moreArris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were...9.8 Critical
- arris sbr-ac1200p firmware, sbr-ac1900p firmware, sbr-ac3200p firmware +2 moreArris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were...9.8 Critical
- totolink a3000ru firmware, a3100r firmware, a800r firmware +3 more +5 moreTotolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu...9.8 Critical
- totolink x5000r firmwareTotolink X5000R_Firmware v9.1.0u.6118_B20201102 was discovered to contain a command injection...9.8 Critical
- totolink a3000ru firmware, a3100r firmware, a800r firmware +3 more +5 moreTotolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu...9.8 Critical
- totolink a3000ru firmware, a3100r firmware, a800r firmware +3 more +5 moreTotolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu...9.8 Critical
- totolink a3000ru firmware, a3100r firmware, a800r firmware +3 more +5 moreTotolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu...9.8 Critical
- totolink a3000ru firmware, a3100r firmware, a800r firmware +3 more +5 moreTotolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu...9.8 Critical
- totolink a3000ru firmware, a3100r firmware, a800r firmware +3 more +5 moreTotolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu...9.8 Critical
- totolink a3000ru firmware, a3100r firmware, a800r firmware +3 more +5 moreTotolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu...9.8 Critical
- totolink a3000ru firmware, a3100r firmware, a800r firmware +3 more +5 moreTotolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu...9.8 Critical
- giteaPath Traversal in Gitea5.3 Medium
- stormshield network securityIn Stormshield Network Security (SNS) 3.7.6 through 3.7.24, 3.11.1 through 3.11.12, 4.2.1 through...7.5 High
- kubernetes cri-oCode Injection in CRI-O8.8 High
github.com/cri-o/cri-oGoSysctls applied to containers with host IPC or host network namespaces can affect the hostNo score- cuppacmsCuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts...7.8 High
- cuppacmsCuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts...7.8 High
- thedigitalcraft atomcmsAtom CMS v2.0 was discovered to contain a remote code execution (RCE) vulnerability via /admin...9.8 Critical
- thedigitalcraft atomcmsAtom CMS v2.0 was discovered to contain a SQL injection vulnerability via the id parameter in ...9.8 Critical
- thedigitalcraft atomcmsAtom CMS v2.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via...5.4 Medium
- Show moreLoading…