CVEs published in March 2022
2,440 vulnerabilities, 400 critical, 18 exploited.
- google chromeUse after free in ANGLE in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to...8.8 High
- google chromeUse after free in Browser UI in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a remote...9.6 Critical
- google chromeHeap buffer overflow in GPU in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to...8.8 High
- google chromeUse after free in ANGLE in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to...8.8 High
- google chromeUse after free in Splitscreen in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a...8.8 High
- google chromeUse after free in Safe Browsing in Google Chrome prior to 99.0.4844.74 allowed a remote attacker...9.6 Critical
- google chromeUse after free in Extensions in Google Chrome prior to 99.0.4844.74 allowed an attacker who...8.8 High
- google chromeUse after free in Blink Layout in Google Chrome on Android prior to 99.0.4844.74 allowed a remote...8.8 High
- rapid7 nexposeRapid7 Nexpose Reflected XSS3.3 Low
- rapid7 nexposeRapid7 Nexpose SQL Injection5.5 Medium
- rapid7 insight agentRapid7 Insight Agent Privilege Escalation4.0 Medium
- attendance and payroll system project and payroll systemA Remote Code Execution (RCE) vulnerability exists in Sourcecodester Attendance and Payroll...9.8 Critical
- sonatype nexus repository managerSonatype Nexus Repository Manager 3.36.0 allows HTML Injection.4.3 Medium
- attendance and payroll system project and payroll systemAn SQL Injection vulnerability exists in Sourcecodester Attendance and Payroll System v1.0 which...9.8 Critical
- paramiko, debian linux, fedoraproject fedora +2 moreRace Condition in Paramiko5.9 Medium
- veeam backup & replication, backup \& replication +1 moreImproper limitation of path names in Veeam Backup & Replication 9.5U3, 9.5U4,10.x, and 11.x...8.8 High
- veeam backup \& replicationImproper authentication in Veeam Backup & Replication 9.5U3, 9.5U4,10.x and 11.x component used...8.8 High
- ligeo-archives ligeo basicsLigeo Archives Ligeo Basics as of 02_01-2022 is vulnerable to Server Side Request Forgery (SSRF)...7.5 High
- gradio-app gradioImproper Neutralization of Formula Elements in a CSV File in Gradio Flagging8.8 High
- nvidia flare, federated learning application runtime environment +1 moreAllocation of Resources Without Limits or Throttling in nvflare7.5 High
- veeam backup & replication, backup \& replication +1 moreVeeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2).9.8 Critical
- spatie laravel media libraryThe Spatie media-library-pro library through 1.17.10 and 2.x through 2.1.6 for Laravel allows...9.8 Critical
- kingsoft wps presentationWPS Presentation 11.8.0.5745 insecurely load d3dx9_41.dll when opening .pps files('current...7.8 High
- kingsoft wps office, kingsoft japan, inc. the installer of wps office +1 moreThe installer of WPS Office Version 10.8.0.5745 insecurely load shcore.dll, allowing an attacker...7.8 High
- kingsoft wps office, kingsoft japan, inc. the installer of wps office +1 moreThe installer of WPS Office Version 10.8.0.6186 insecurely load VERSION.DLL (or some other DLLs),...7.8 High
- kingsoft internet security 9 plusThe kernel mode driver kwatch3 of KINGSOFT Internet Security 9 Plus Version 2010.06.23.247 fails...7.8 High
- chainsafe js-libp2p-noiseFailure to validate signature during handshake in @chainsafe/libp2p-noise8.1 High
- gradle enterpriseIn Gradle Enterprise before 2021.4.2, the default built-in build cache configuration allowed...8.1 High
- veeamDeserialization of untrusted data in Veeam Agent for Windows 2.0, 2.1, 2.2, 3.0.2, 4.x, and 5.x...7.8 High
- uni-stuttgart frams\' fast file exchangefexsrv in F*EX (aka Frams' Fast File EXchange) before fex-20160919_2 allows eval injection (for...9.8 Critical
- anaconda anaconda3, conda miniconda3 +1 moreAnaconda Anaconda3 through 2021.11.0.0 and Miniconda3 through 11.0.0.0 can create a world...7.8 High
- substack minimistPrototype Pollution in minimist9.8 Critical
- agendaless waitress, debian linux +1 moreHTTP Request Smuggling in waitress7.5 High
- netgear r6220 firmware, r6900 firmware, r7450 firmware +2 more +4 moreA vulnerability is in the 'BRS_top.html' page of the Netgear W104, version WAC104-V1.0.4.13,...5.3 Medium
- netgear mbr1517 firmware, wac104 firmware, wnce3001 firmware +2 moreA vulnerability is in the 'MNU_top.htm' page of the Netgear W104, version WAC104-V1.0.4.13, which...7.5 High
- wavlink wl-wn531g3 firmwareA vulnerability is in the 'wx.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6...9.8 Critical
- wavlink wl-wn531g3 firmwareA vulnerability is in the 'live_mfg.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6...7.5 High
- sailsjs sailsPrototype Pollution in Sails.js9.8 Critical
- fasthttp project fasthttpDirectory Traversal5.9 Medium
- post-loader project post-loaderArbitrary Code Execution9.8 Critical
- ahdinosaur set-inPrototype Pollution8.6 High
- libnested project libnestedPrototype Pollution7.5 High
- guake-project guakeExposed Dangerous Method or Function6.4 Medium
- argencoders-notevil project argencoders-notevil, notevil project notevil +1 moreSandbox Bypass6.5 Medium
- accesslog project accesslogArbitrary Code Injection7.1 High
- git-for-windows gitRemote Code Execution (RCE)6.6 Medium
- bodymen project bodymenPrototype Pollution6.3 Medium
- singoo singoocms.utilityDeserialization of Untrusted Data7.4 High
- slims senayan library management systemSlims9 Bulian 9.4.2 is affected by SQL injection in /admin/modules/system/backup.php. User data...7.5 High
- slims senayan library management systemSlims9 Bulian 9.4.2 is affected by SQL injection in lib/comment.inc.php. User data can be obtained.7.5 High
- Show moreLoading…