CVEs published in March 2022
2,440 vulnerabilities, 400 critical, 18 exploited.
- accesspressthemes ap mega menu, unknown mega menu plugin for wordpress – ap mega menu +1 moreAP Mega Menu < 3.0.8 - Reflected Cross-Site Scripting6.1 Medium
- tms-outsource amelia, unknown amelia – events & appointments booking calendar +1 moreAmelia < 1.0.46 - Reflected Cross-Site Scripting6.1 Medium
- tms-outsource amelia, unknown amelia – events & appointments booking calendar +1 moreAmelia < 1.0.46 - Arbitrary Customer Deletion via CSRF4.3 Medium
- subtlewebinc formcraft3, unknown formcraft +1 moreFormcraft3 < 3.8.28 - Unauthenticated SSRF9.1 Critical
- ait-pro bulletproof securityBulletProof Security < 5.8 - Admin+ Stored Cross-Site Scripting (XSS)4.8 Medium
- 3dflipbook 3d flipbook, iberezansky 3d flipbook – pdf flipbook viewer, flipbook image gallery +1 more3D FlipBook < 1.12.1 - Subscriber+ Stored Cross-Site Scripting5.4 Medium
- unknown modern events calendar liteModern Events Calendar Lite < 6.4.0 - Contributor+ Stored Cross Site Scripting5.4 Medium
- miniorange google authenticator, miniorange's google authenticator +1 moreminiOrange's Google Authenticator < 5.5 - Unauthenticated Arbitrary Options Deletion8.1 High
- seo squirrly plugin by squirrly seo, squirrly seo plugin by squirrly seo +1 moreSEO Plugin by Squirrly SEO < 11.1.12 - Reflected Cross-Site Scripting6.1 Medium
- unknown advanced contact form 7 db, vsourz advanced cf7 db +1 moreAdvanced Contact form 7 DB < 1.8.7 - Subscriber+ Arbitrary File Deletion8.0 High
- crater-invoice crater-invoice/crater, craterapp crater +1 moreCross-Site Request Forgery (CSRF) in crater-invoice/crater4.3 Medium
- crater-invoice crater-invoice/crater, craterapp crater +1 moreBusiness Logic Errors in crater-invoice/crater6.5 Medium
- mitmproxyInsufficient Protection against HTTP Request Smuggling in mitmproxy9.8 Critical
- No product listedTest update for SUSE:SLE-15-SP4:Update (security)No score
- snapt ariaA Cross-Site Request Forgery (CSRF) in the management portal of Snapt Aria v12.8 allows attackers...8.8 High
- snapt ariaAn insecure permissions vulnerability in Snapt Aria v12.8 allows unauthenticated attackers to...3.5 Low
- snapt ariaThe snaptPowered2 component of Snapt Aria v12.8 was discovered to contain a command injection...8.8 High
- ungit project ungitRemote Code Execution (RCE)8.8 High
- std42 elfinderPath Traversal in Studio-42 elFinder through 2.1.609.1 Critical
- ibm spectrum protect, spectrum protect server +1 moreThe IBM Spectrum Protect 8.1.14.000 server could allow a remote attacker to bypass security...7.5 High
- clash project clashIn Dreamacro 1.1.0, an attacker could embed a malicious iframe in a website with a crafted URL...8.8 High
- primekey signserverAn XSS was identified in the Admin Web interface of PrimeKey SignServer before 5.8.1. JavaScript...4.8 Medium
- opcfoundation ua-nodeset, siemens simatic net pc, sitop manager +1 more +3 moreThe OPC autogenerated ANSI C stack stubs (in the NodeSets) do not handle all error cases. This...6.5 Medium
- clickstudios passwordstateIn Click Studios (SA) Pty Ltd Passwordstate 9435, users with access to a passwordlist can gain...6.5 Medium
- hexoeditor project hexoeditorHexoEditor 1.1.8 is affected by Cross Site Scripting (XSS). By putting a common XSS payload in a...6.1 Medium
- garo wallbox glb firmware, wallbox gtb firmware, wallbox gtc firmware +2 moreMultiple versions of GARO Wallbox GLB/GTB/GTC are affected by incorrect access control. Lack of...9.1 Critical
- gogs, gogs gogs/gogs +1 moreRemote Command Execution in uploading repository file in gogs/gogs9.9 Critical
- garo wallbox glb firmware, wallbox gtb firmware, wallbox gtc firmware +2 moreMultiple versions of GARO Wallbox GLB/GTB/GTC are affected by hard coded credentials. A hardcoded...9.8 Critical
- garo wallbox glb firmware, wallbox gtb firmware, wallbox gtc firmware +2 moreMultiple versions of GARO Wallbox GLB/GTB/GTC are affected by unauthenticated command injection....9.8 Critical
- otrsInformation disclosure in the External Interface4.3 Medium
- otrsPossible XSS attack via translation3.5 Low
- otrs, otrs itsm, storm +3 more +5 moreAuthenticated remote code execution6.4 Medium
- netatalk, debian linux +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...9.8 Critical
- netatalk, debian linux +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...5.3 Medium
- netatalk, debian linux +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...5.3 Medium
- netatalk, debian linux +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...9.8 Critical
- netatalk, debian linux +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...9.8 Critical
- netatalk, debian linux +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...9.8 Critical
openscOSS-FuzzStack-use-after-return in template_sanity_checkNo scorefluent-bitOSS-FuzzSegv on unknown address in flb_sds_copyNo score- taogogo taocmsTaocms v3.0.2 was discovered to contain a SQL injection vulnerability via the id parameter in ...9.8 Critical
libjxlOSS-FuzzHeap-buffer-overflow in jxl::WriteToPixelCallbackStage::ProcessRowNo scorelibvipsOSS-FuzzHeap-buffer-overflow in jxl::N_AVX2::BlendingStage::ProcessRowNo score- python-poetry poetryPoetry before v1.1.9 contains Untrusted Search Path9.8 Critical
- pnpmUntrusted Search Path in PNPM8.8 High
- gpac, gpac gpac/gpac +1 moreSegmentation Fault caused by MP4Box -lsr in gpac/gpac2.9 Low
- diaowen dwsurveyDWSurvey v3.2.0 was discovered to contain an arbitrary file write vulnerability via the component...9.8 Critical
- eyoucmsThe wechat_return function in /controller/Index.php of EyouCms V1.5.4-UTF8-SP3 passes the user's...7.2 High
- diaowen dwsurveyDWSurvey v3.2.0 was discovered to contain a remote command execution (RCE) vulnerability via the...9.8 Critical
- shopxoThe PluginsUpload function in application/service/PluginsAdminService.php of ShopXO v1.9.0...7.8 High
- Show moreLoading…