CVEs published in March 2022
2,440 vulnerabilities, 400 critical, 18 exploited.
- tenda ac9 firmwareTenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the...9.8 Critical
- tenda ac9 firmwareTenda AC9 v15.03.2.21 was discovered to contain a remote command execution (RCE) vulnerability...9.8 Critical
- tenda ac9 firmwareTenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the...9.8 Critical
- tenda ac9 firmwareTenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the list parameter in the...9.8 Critical
- tenda ac9 firmwareTenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the firewallen parameter in...9.8 Critical
- tenda ac9 firmwareTenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the urls parameter in the...9.8 Critical
- tenda ac9 firmwareTenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the deviceId parameter in...9.8 Critical
- tenda ac9 firmwareTenda AC9 v15.03.2.21 was discovered to contain multiple stack overflows via the NPTR, V12, V10...9.8 Critical
- tenda ac9 firmwareTenda AC9 v15.03.2.21 was discovered to contain a buffer overflow via the time parameter in the...9.8 Critical
- tenda ac9 firmwareTenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the schedendtime parameter...9.8 Critical
- unisoc chipsetThe UNISOC chipset through 2022-03-15 allows attackers to obtain remote control of a mobile phone...9.8 Critical
- ge reason rt43x clocks, rt430 firmware, rt431 firmware +1 more +3 moreGE Reason RT43X Clocks Use of Hard-coded Cryptographic Key5.3 Medium
- ge reason rt43x clocks, rt430 firmware, rt431 firmware +1 more +3 moreGE Reason RT43X Clocks Code Injection9.8 Critical
- rockwell automation isagraf runtime, rockwellautomation aadvance controller, isagraf free runtime +14 more +16 moreRockwell Automation ISaGRAF5 Runtime Use of Hard-coded Cryptographic Key5.3 Medium
- rockwell automation isagraf runtime, rockwellautomation aadvance controller, isagraf free runtime +14 more +16 moreRockwell Automation ISaGRAF5 Runtime Unprotected Storage of Credentials7.8 High
- rockwell automation isagraf runtime, rockwellautomation aadvance controller, isagraf free runtime +14 more +16 moreRockwell Automation ISaGRAF5 Runtime Relative Path Traversal9.1 Critical
- rockwell automation isagraf runtime, rockwellautomation aadvance controller, isagraf free runtime +14 more +16 moreRockwell Automation ISaGRAF5 Runtime Uncontrolled Search Path Element6.7 Medium
- rockwell automation isagraf runtime, rockwellautomation aadvance controller, isagraf free runtime +14 more +16 moreRockwell Automation ISaGRAF5 Runtime Cleartext Transmission of Sensitive Information7.5 High
- yokogawa widefield3Yokogawa WideField3 Buffer Copy Without Checking Size of Input2.8 Low
- foliovision fv flowplayer video player, fv flowplayer video player (wordpress plugin) +1 moreWordPress FV Flowplayer Video Player plugin <= 7.5.15.727 - SQL Injection (SQLi) vulnerability6.6 Medium
- wp-downloadmanager project wp-downloadmanager, lester 'gamerz' chan wp-downloadmanager (wordpress) +1 moreWordPress WP-DownloadManager plugin <= 1.68.6 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities4.8 Medium
- expresstech responsive menu, responsive menu (wordpress plugin) +1 moreWordPress Responsive Menu plugin <= 4.1.7 - Nonce token leak leading to arbitrary file upload, theme deletion, plugin settings change vulnerability8.3 High
- price table project table, greg priday price table (wordpress plugin) +1 moreWordPress Price Table plugin <= 0.2.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability4.1 Medium
- ampforwp accelerated mobile pages, ahmed kaludi, mohammed kaludi amp for wp – accelerated mobile pages (wordpress plugin) +1 moreWordPress AMP for WP – Accelerated Mobile Pages plugin <= 1.0.77.32 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilities4.8 Medium
- ampforwp accelerated mobile pages, ahmed kaludi, mohammed kaludi amp for wp – accelerated mobile pages (wordpress plugin) +1 moreWordPress AMP for WP – Accelerated Mobile Pages plugin <= 1.0.77.31 - Auth. Stored Cross-Site Scripting (XSS) vulnerability4.8 Medium
- wp-downloadmanager project wp-downloadmanager, lester 'gamerz' chan wp-downloadmanager (wordpress plugin) +1 moreWordPress WP-DownloadManager plugin <= 1.68.6 - Auth. Reflected Cross-Site Scripting (XSS) vulnerability4.8 Medium
- maxfoundry maxgalleria, max foundry maxgalleria (wordpress plugin) +1 moreWordPress MaxGalleria plugin <= 6.2.5 - Stored Cross-Site Scripting (XSS) vulnerability4.8 Medium
- mattermostHTML Injection while inviting Guests2.0 Low
- mattermostSysadmin can override existing configs & bypass restrictions like EnableUploads3.3 Low
- openvpn, debian linux, fedoraproject fedora +2 moreOpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication...9.8 Critical
- apple ipados, tvos, watchos +2 more +4 moreAn access issue was addressed with improved access restrictions. This issue is fixed in tvOS 15.4...3.3 Low
- apple ipados, ios and ipados, iphone os +2 moreA logic issue was addressed with improved state management. This issue is fixed in iOS 15.4 and...6.5 Medium
- apple ipados, ios and ipados, iphone os +2 moreA use after free issue was addressed with improved memory management. This issue is fixed in iOS...7.8 High
- apple macos, mac os x +1 moreA type confusion issue was addressed with improved state handling. This issue is fixed in macOS...7.8 High
- apple ipados, ios and ipados, iphone os +2 moreAn authentication issue was addressed with improved state management. This issue is fixed in iOS...4.6 Medium
- apple macosA use after free issue was addressed with improved memory management. This issue is fixed in...7.8 High
- apple macos, mac os x +1 moreA logic issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.3....7.8 High
- apple ipados, tvos, watchos +2 more +4 moreA memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15...7.8 High
- apple macosAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in...7.5 High
- apple macos, mac os x +1 moreAn authentication issue was addressed with improved state management. This issue is fixed in...3.3 Low
- apple ipados, ios and ipados, iphone os +2 moreA logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.4 and...7.5 High
- apple garageband, macos, logic pro x +2 moreAn out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Logic...7.8 High
- apple garageband, macos, logic pro x +2 moreA memory initialization issue was addressed with improved memory handling. This issue is fixed in...7.8 High
- apple macosThis issue was addressed with a new entitlement. This issue is fixed in macOS Monterey 12.3. An...5.5 Medium
- apple macos, mac os x +1 moreThis issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.5, macOS...5.5 Medium
- apple safari, watchos +1 moreA user interface issue was addressed. This issue is fixed in watchOS 8.5, Safari 15.4. Visiting a...4.3 Medium
- apple ipados, ios and ipados, iphone os +2 moreThis issue was addressed with improved checks. This issue is fixed in iOS 15.4 and iPadOS 15.4. A...9.8 Critical
- apple macosA privacy issue existed in the handling of Contact cards. This was addressed with improved state...5.5 Medium
- apple ipados, ios and ipados, iphone os +2 moreThe GSMA authentication panel could be presented on the lock screen. The issue was resolved by...6.1 Medium
- apple macos, mac os x +1 moreThis issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.5, macOS...5.5 Medium
- Show moreLoading…