CVEs published in March 2022
2,440 vulnerabilities, 400 critical, 18 exploited.
- shopxoAn arbitrary file upload vulnerability in the upload payment plugin of ShopXO v1.9.0 allows...7.8 High
- yafu project yafuYafu v2.0 contains a segmentation fault via the component /factor/avx-ecm/vecarith52.c. This...7.5 High
- eovaA stored cross-site scripting (XSS) vulnerability in the Add a Button function of Eova v1.6.0...5.4 Medium
- teamwork management system project management systemTMS v2.28.0 contains an insecure permissions vulnerability via the component /TMS/admin/user...5.9 Medium
- tms project tmsTMS v2.28.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the component...6.1 Medium
- html-js doracmsA stored cross-site scripting (XSS) vulnerability in the component /admin/contenttemp of DoraCMS...4.8 Medium
- wvti one card integrated management systemBeijing Wisdom Vision Technology Industry Co., Ltd One Card Integrated Management System 3.0 is...7.5 High
- fromsoftware dark souls iiiThe matchmaking servers of Bandai Namco FromSoftware Dark Souls III through 2022-03-19 allow...8.8 High
fluent-bitOSS-FuzzHeap-double-free in flb_pack_state_resetNo scorewordpressDebianwordpress - security updateNo score- thinkphpExposure of Resource to Wrong Sphere in ThinkPHP Framework7.5 High
- fromsoftware dark souls iiiA buffer overflow in the NRSessionSearchResult parser in Bandai Namco FromSoftware Dark Souls III...9.8 Critical
- admidio, admidio admidio/admidio +1 moreInsufficient Session Expiration in admidio/admidio8.2 High
- irz rl01 firmware, rl21 firmware, ru21 firmware +2 more +4 moreA CSRF issue in /api/crontab on iRZ Mobile Routers through 2022-03-16 allows a threat actor to...8.8 High
fluent-bitOSS-FuzzSegv on unknown address in flb_ra_createNo scorefluent-bitOSS-FuzzHeap-double-free in read_configNo scorefluent-bitOSS-FuzzHeap-double-free in read_configNo scoreopenexrOSS-FuzzHeap-double-free in Imf_3_1::RgbaInputFile::~RgbaInputFileNo scorefluent-bitOSS-FuzzSegv on unknown address in flb_config_map_properties_checkNo scorefluent-bitOSS-FuzzHeap-double-free in flb_pack_state_resetNo scorefluent-bitOSS-FuzzHeap-use-after-free in jsmn_parseNo scorebind9Debianbind9 - regression updateNo scorebarryvdh/laravel-translation-managerPackagistPossibility for Denial of Service by overwriting PHP files with language exportsNo score- piwigoPiwigo v12.2.0 was discovered to contain an information leak via the action parameter in /admin...7.5 High
- piwigoPiwigo v12.2.0 was discovered to contain a SQL injection vulnerability via pwg.users.php.8.8 High
- contaoRemote Code Execution in Contao Managed Edition9.8 Critical
- pmmp pocketmine-mpPocketMine-MP before 4.2.3 Denial of Service via NBT Metadata7.1 High
- classcmsClasscms v2.5 and below contains an arbitrary file upload via the component \class\classupload....7.8 High
- taogogo taocmstaocms v3.0.2 allows attackers to execute code injection via arbitrarily editing the .htaccess file.9.8 Critical
- dcnglobal dcme-520 firmwareDCN Firewall DCME-520 was discovered to contain a remote command execution (RCE) vulnerability...9.8 Critical
- dcnglobal dcme-520 firmwareDCN Firewall DCME-520 was discovered to contain an arbitrary file download vulnerability via the...7.5 High
- tenda ac6 firmwareTenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the endip parameter...9.8 Critical
- tenda ac6 firmwareTenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the startip parameter...9.8 Critical
- tenda ac6 firmwareTenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the S1 parameter in...9.8 Critical
- tenda ac6 firmwareTenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the cmdinput...9.8 Critical
- tenda ac6 firmwareTenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the ntpserver...9.8 Critical
- tenda ac6 firmwareTenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the security_5g...9.8 Critical
- tenda ac6 firmwareTenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the list parameter in...9.8 Critical
- tenda ac6 firmwareTenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the loginpwd...9.8 Critical
- tenda ac6 firmwareTenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the time parameter in...9.8 Critical
- tenda ac6 firmwareTenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the URLs parameter in...9.8 Critical
- tenda ac6 firmwareTenda AC6 V15.03.05.09_multi was discovered to contain a stack overflow via the list parameter in...9.8 Critical
- tenda ac6 firmwareTenda AC6 V15.03.05.09_multi was discovered to contain a stack overflow via the list parameter in...9.8 Critical
- tenda ac6 firmwareTenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the deviceId...9.8 Critical
- tenda ac6 firmwareTenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the day parameter in...9.8 Critical
- tenda ac6 firmwareTenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the schedendtime...9.8 Critical
- tenda ac6 firmwareTenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the schedstarttime...9.8 Critical
- tenda ac6 firmwareTenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the time parameter in...9.8 Critical
- tenda ac9 firmwareTenda AC9 v15.03.2.21 was discovered to contain a remote command execution (RCE) vulnerability...9.8 Critical
- tenda ac9 firmwareTenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the ntpserver parameter in...9.8 Critical
- Show moreLoading…