CVEs published in March 2022
2,440 vulnerabilities, 400 critical, 18 exploited.
- slims senayan library management systemSlims9 Bulian 9.4.2 is affected by Cross Site Scripting (XSS) in /admin/modules/system...4.8 Medium
- slims senayan library management systemSlims8 Akasia 8.3.1 is affected by SQL injection in /admin/modules/bibliography/index.php, /admin...8.8 High
- prasathmani prasathmani/tinyfilemanager, tiny file manager +1 morePath Traversal in prasathmani/tinyfilemanager8.8 High
- naver whale browser, navercorp whale +1 moreWhale browser before 3.12.129.18 allowed extensions to replace JavaScript files of the HWP viewer...6.5 Medium
- naver whale browser, navercorp whale +1 moreWhale Bridge, a default extension in Whale browser before 3.12.129.18, allowed to receive any...9.8 Critical
- naver whale browser, navercorp whale +1 moreThe Web Request API in Whale browser before 3.12.129.18 allowed to deny access to the extension...7.1 High
- naver whale browser, navercorp whale +1 moreThe devtools API in Whale browser before 3.12.129.18 allowed extension developers to inject...6.1 Medium
- sonicwall sra, sma 100, sma 200 firmware +9 more +11 more** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of Special Elements leading to OS Command...9.8 Critical
freeradiusOSS-FuzzHeap-buffer-overflow in __covrec_1D46B478ANUMBERNo score- nothings stb truetype.hstb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function...6.5 Medium
- nothings stb truetype.hstb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttULONG()...6.5 Medium
- nothings stb truetype.hstb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttUSHORT()...7.5 High
node-ipcnpmnode-ipc behavior changeNo scorenode-ipcnpmHidden functionality in node-ipcNo score- fisco-bcosFISCO-BCOS release-3.0.0-rc2 was discovered to contain an issue where a malicious node, via a...7.5 High
- eosio project eosEOS v2.1.0 was discovered to contain a heap-buffer-overflow via the function txn_test_gen_plugin.7.5 High
- ethereum go ethereumDenial of service in go-ethereum7.5 High
- online project time management system project project time management systemA stored cross-site scripting (XSS) vulnerability in /ptms/?page=user of Online Project Time...5.4 Medium
- online project time management system project project time management systemOnline Project Time Management System v1.0 was discovered to contain a SQL injection...9.8 Critical
- wire wire-serverImproper Verification of Cryptographic Signature in wire-server9.1 Critical
- node-ipc project node-ipcMalicious Package9.8 Critical
- fedoraproject fedora, paypal braintree\/sanitize-url +1 moreCross-site Scripting (XSS)5.4 Medium
- btiteam xbtitA cross-site scripting vulnerability is present in Xbtit 3.1. The stored XSS vulnerability occurs...6.1 Medium
- node-lmdb project node-lmdbDenial of Service (DoS)3.7 Low
- btiteam xbtitA blind SQL injection vulnerability exists in Xbtit 3.1 via the sid parameter in ajaxchat...8.8 High
- mikrotik routerosIn the SCEP Server of RouterOS in certain Mikrotik products, an attacker can trigger a heap-based...8.1 High
- robotronic runasspcRunAsSpc 4.0 uses a universal and recoverable encryption key. In possession of a file encrypted...7.5 High
- netapp snapcenterSnapCenter versions prior to 4.5 are susceptible to a vulnerability which could allow a local...5.5 Medium
- port389 389-ds-base, redhat enterprise linux +1 moreA vulnerability was discovered in the 389 Directory Server that allows an unauthenticated...7.5 High
- accel-pppBuffer Overflow via crafted client request in Accel-PPP v1.129.8 Critical
- google androidIn Package Manger, there is a possible permanent denial of service due to resource exhaustion....5.5 Medium
- open source pgadmin, pgadmin 4 +1 morepgAdmin 4 Path Traversal vulnerability6.5 Medium
- x2engine x2crmA Cross-Site Scripting (XSS) attack can cause arbitrary code (javascript) to run in a user’s...5.4 Medium
- ptc axeda agent, axeda desktop server for windows, axeda desktop server +2 morePTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function9.8 Critical
- ptc axeda agent, axeda desktop server for windows, axeda desktop server +2 morePTC Axeda agent and Axeda Desktop Server Improper Check or Handling Of Exceptional Conditions7.5 High
- ptc axeda agent, axeda desktop server for windows, axeda desktop server +2 morePTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function7.5 High
- ptc axeda agent, axeda desktop server for windows, axeda desktop server +2 morePTC Axeda agent and Axeda Desktop Server Path Traversal7.5 High
- ptc axeda agent, axeda desktop server for windows, axeda desktop server +2 morePTC Axeda agent and Axeda Desktop Server Information Exposure5.3 Medium
- ptc axeda agent, axeda desktop server for windows, axeda desktop server +2 morePTC Axeda agent and Axeda Desktop Server Use of Hard-Coded Credentials9.8 Critical
- ptc axeda agent, axeda desktop server for windows, axeda desktop server +2 morePTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function9.8 Critical
- adobe auditionAdobe Audition Memory Corruption could lead to Arbitrary code execution7.8 High
- adobe auditionAdobe Audition WAV file Memory corruption could lead to Arbitrary code execution7.8 High
- adobe auditionAdobe Audition NULL Pointer Dereference Application denial-of-service5.5 Medium
- adobe auditionAdobe Audition Memory Corruption could lead to Arbitrary code execution7.8 High
- adobe auditionAdobe Audition NULL Pointer Dereference Application denial-of-service5.5 Medium
- adobe auditionAdobe Audition Memory Corruption could lead to Arbitrary code execution7.8 High
- adobe auditionAdobe Audition Memory Corruption could lead to Application denial-of-service5.5 Medium
- adobe auditionAdobe Audition Memory Corruption could lead to Arbitrary code execution7.8 High
- adobe auditionAdobe Audition Memory Corruption could lead to Arbitrary code execution7.8 High
- adobe bridgeAdobe Bridge Buffer Overflow Arbitrary code execution7.8 High
- Show moreLoading…