CVEs published in March 2022
2,440 vulnerabilities, 400 critical, 18 exploited.
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- syltekSyltek Insufficient Verification of Data Authenticity7.5 High
- pmmp pocketmine-mpPocketMine-MP before 3.18.1 Denial of Service via MovePlayerPacket7.1 High
- misp-project mispAn issue was discovered in MISP before 2.4.156. app/View/Users/terms.ctp allows Local File...7.8 High
- misp-project mispAn issue was discovered in MISP before 2.4.156. A malicious site administrator could store an XSS...4.8 Medium
- misp-project mispAn issue was discovered in MISP before 2.4.156. app/Model/Server.php does not restrict...8.8 High
- misp-project mispAn issue was discovered in MISP before 2.4.156. An SVG org logo (which may contain JavaScript) is...6.1 Medium
- ibm business automation workflow, business process manager +1 moreIBM Business Automation Workflow 18.0, 19.0, 20.0, and 21.0 and IBM Business Process Manager 8.5...4.9 Medium
- ibm engineering requirements quality assistant, engineering requirements quality assistant on-premises +1 moreIBM Engineering Requirements Quality Assistant prior to 3.1.3 could allow an authenticated user...6.5 Medium
- digitalbazaar forgeImproper Verification of Cryptographic Signature in `node-forge`7.5 High
- digitalbazaar forgeImproper Verification of Cryptographic Signature in node-forge7.5 High
- automotivelinux kooky koiAutomotive Grade Linux Kooky Koi 11.0.0, 11.0.1, 11.0.2, 11.0.3, 11.0.4, and 11.0.5 is affected...9.8 Critical
- google sa360 webquery to bigquery exporter, google llc google/sa360-webquery-bigquery +1 moreInformation Leak in SA360-webquery-bigquery through read on /tmp5.5 Medium
- opendocmanAn attacker can upload or transfer files of dangerous types to the OpenDocMan 1.4.4 portal via...9.8 Critical
- online admission system project admissions systemThe Online Admission System 1.0 allows an unauthenticated attacker to upload or transfer files of...9.8 Critical
- netgear cax80 firmware, dc112a firmware, ex6100 firmware +1 more +3 moreA stack overflow vulnerability exists in the upnpd service in Netgear EX6100v1 201.0.2.28, CAX80...7.8 High
- pluck-cms pluckIn Pluck 4.7.16, an admin user can use the theme upload functionality at /admin.php?action...7.2 High
- linux kernel, netapp h300e firmware, h300s firmware +6 more +8 moreIn the Linux kernel before 5.15.3, fs/quota/quota_tree.c does not validate the block number in...5.5 Medium
- golang ssh, fedoraproject extra packages for enterprise linux, fedora +1 more +3 moregolang.org/x/crypto/ssh Denial of service via crafted Signer7.5 High
- glewlwyd sso server project sso serverscheme/webauthn.c in Glewlwyd SSO server 2.x before 2.6.2 has a buffer overflow associated with a webauthn assertion.9.8 Critical
- pascom cloud phone system, igniterealtime openfire +1 moreAn issue was discovered in Pascom Cloud Phone System before 7.20.x. A configuration error between...9.8 Critical
- pascom cloud phone systemAn issue was discovered in Pascom Cloud Phone System before 7.20.x. In the management REST API, ...9.8 Critical
- jivesoftware jive, pascom cloud phone system +1 moreAn issue was discovered in xmppserver jar in the XMPP Server component of the JIve platform, as...7.5 High
KernelLinuxvhost/vsock: don't check owner in vhost_vsock_stop() while releasingNo scoreKernelLinuxsr9700: sanity check for packet lengthNo scoreKernelLinuxgso: do not skip outer ip header in case of ipip and net_failoverNo scoreKernelLinuxopenvswitch: Fix setting ipv6 fields causing hw csum failureNo scoreKernelLinuxconfigfs: fix a race in configfs_{,un}register_subsystem()No scoreKernelLinuxRDMA/ib_srp: Fix a deadlockNo scoreKernelLinuxiio: adc: men_z188_adc: Fix a resource leak in an error handling pathNo scoreKernelLinuxusb: gadget: rndis: add spinlock for rndis response listNo scoreKernelLinuxxhci: Prevent futile URB re-submissions due to incorrect return value.No scoreKernelLinuxmac80211_hwsim: initialize ieee80211_tx_info at hw_scan_workNo scoreKernelLinuxcifs: fix double free race when mount fails in cifs_get_root()No scoreKernelLinuxASoC: ops: Shift tested values in snd_soc_put_volsw() by +minNo scoreKernelLinuxusb: gadget: clear related members when goto failNo scoreKernelLinuxxfrm: fix MTU regressionNo scoreKernelLinuxnetfilter: nf_queue: fix possible use-after-freeNo scoreKernelLinuxnet: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()No scoreKernelLinuxxen/xenbus: don't let xenbus_grant_ring() remove grants in error caseNo scoreKernelLinuxxen/gnttab: fix gnttab_end_foreign_access() without page specifiedNo scoreKernelLinuxxen/netfront: react properly to failing gnttab_end_foreign_access_ref()No scoreKernelLinuxvhost/vsock: don't check owner in vhost_vsock_stop() while releasingNo scoreKernelLinuxsr9700: sanity check for packet lengthNo scoreKernelLinuxgso: do not skip outer ip header in case of ipip and net_failoverNo scoreKernelLinuxopenvswitch: Fix setting ipv6 fields causing hw csum failureNo scoreKernelLinuxconfigfs: fix a race in configfs_{,un}register_subsystem()No scoreKernelLinuxRDMA/ib_srp: Fix a deadlockNo scoreKernelLinuxiio: adc: men_z188_adc: Fix a resource leak in an error handling pathNo score- Show moreLoading…