CVEs published in March 2022
2,440 vulnerabilities, 400 critical, 18 exploited.
- totolink n600r firmwareTOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection...9.8 Critical
- totolink n600r firmwareTOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection...9.8 Critical
- totolink n600r firmwareTOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection...9.8 Critical
- radare radare2, radareorg radareorg/radare2 +1 moreUse After Free in op_is_set_bp in radareorg/radare27.3 High
fakernpmRemoval of functional code in faker.jsNo score- simple-plist project simple-plistPrototype Pollution in simple-plist9.8 Critical
- bitrix24In the vote (aka "Polls, Votes") module before 21.0.100 of Bitrix Site Manager, a remote...9.8 Critical
- grame faustFaust v2.35.0 was discovered to contain a heap-buffer overflow in the function realPropagate() at...9.8 Critical
- broadcom tcpreplaytcpprep v4.4.1 has a reachable assertion (assert(l2len > 0)) in packet2tree() at tree.c in...5.5 Medium
- cyclonedx bill of materials repository server, cyclonedx-bom-repo-server +1 moreImproper Input Validation leading to Path Traversal in CycloneDX BOM Repository Server7.1 High
- electronRenderers can obtain access to random bluetooth device without permission in Electron3.4 Low
- softwell webrunWebRun 3.6.0.42 is vulnerable to SQL Injection via the P_0 parameter used to set the username...9.8 Critical
- microweber, microweber microweber/microweber +1 moreAble to create an account with long password leads to memory corruption / Integer Overflow in microweber/microweber5.3 Medium
ptycrates.iopty is unmaintainedNo score- globalprotect-openconnect project globalprotect-openconnectMultiple versions of GlobalProtect-openconnect are affected by incorrect access control in...9.8 Critical
- showdoc, star7th star7th/showdoc +1 moreThere is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in star7th/showdoc9.1 Critical
ghostscriptOSS-FuzzUNKNOWN READ in pdf14_buf_freeNo scoreghostscriptOSS-FuzzStack-buffer-overflow in fn_ElIn_evaluateNo score- baomidou mybatis-plusMyBatis plus v3.4.3 was discovered to contain a SQL injection vulnerability via the Column...9.8 Critical
- pjsip pjproject, teluu pjsip, debian linux +2 moreStack buffer overflow in pjproject7.5 High
- globalprotect-openconnect project globalprotect-openconnectMultiple versions of GlobalProtect-openconnect are affected by incorrect access control in...7.5 High
- sophos utm, unified threat management +1 moreConfd log files contain local users', including root’s, SHA512crypt password hashes with...3.3 Low
- sophos utm, unified threat management +1 moreA post-auth SQL injection vulnerability in the Mail Manager potentially allows an authenticated...8.8 High
- simple client management system project client management systemSimple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- simple client management system project client management systemSimple Client Management System v1.0 was discovered to contain a SQL injection vulnerability via...9.8 Critical
- oretnom23 simple subscription websiteSimple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- axiosys bento4Bento4 1.6.0-639 has a heap-based buffer over-read in the AP4_HvccAtom class, a different issue...8.1 High
- beekeeperstudio beekeeper-studioA remote code execution (RCE) vulnerability in Beekeeper Studio v3.2.0 allows attackers to...9.8 Critical
- idccmsidcCMS v1.10 was discovered to contain an issue which allows attackers to arbitrarily delete the...7.5 High
- chshcms cscmsCscms Music Portal System v4.2 was discovered to contain a redirection vulnerability via the...5.4 Medium
- chamiloA Cross-Site Request Forgery (CSRF) in Chamilo LMS 1.11.14 allows attackers to execute arbitrary...8.8 High
- chamiloChamilo LMS v1.11.14 was discovered to contain a zero click code injection vulnerability which...6.8 Medium
stunnelMageiaUpdated stunnel packages fix security vulnerabilityNo score- lexar f35 firmwareAn access control issue in the authentication module of Lexar_F35 v1.0.34 allows attackers to access sensitive data and cause a Denial of Service (DoS). An attacker without access to securely protecte…6.8 Medium
- grafana, redhat ceph storage, storage +2 moreAn issue was discovered in Grafana through 7.3.4, when integrated with Zabbix. The Zabbix...9.8 Critical
- bigantsoft bigant serverBigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control.7.5 High
- bigantsoft bigant serverBigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control issues.8.8 High
- bigantsoft bigant serverAn issue in BigAnt Software BigAnt Server v5.6.06 can lead to a Denial of Service (DoS).7.5 High
- bigantsoft bigant serverBigAnt Software BigAnt Server v5.6.06 was discovered to utilize weak password hashes.5.3 Medium
- bigantsoft bigant serverBigAnt Software BigAnt Server v5.6.06 was discovered to contain a cross-site scripting (XSS)...5.4 Medium
- bigantsoft bigant serverBigAnt Software BigAnt Server v5.6.06 was discovered to contain a Cross-Site Request Forgery (CSRF).8.8 High
- bigantsoft bigant serverBigAnt Software BigAnt Server v5.6.06 was discovered to be vulnerable to directory traversal...7.5 High
- guzzle psr7, guzzlephp psr-7, drupal +2 moreImproper Input Validation in guzzlehttp/psr77.5 High
- quantumcloud simple link directorySimple Link Directory < 7.7.2 - Unauthenticated SQL injection9.8 Critical
- quantumcloud infographic maker, infographic maker – ilist +1 moreInfographic Maker - iList < 4.3.8 - Unauthenticated SQL Injection9.8 Critical
- reputeinfosystems bookingpress, unknown bookingpress – appointments booking calendar plugin and online scheduling plugin +1 moreBookingPress < 1.0.11 - Unauthenticated SQL Injection9.8 Critical
- advanced booking calendar booking calendar, elbtide advanced booking calendar +1 moreAdvanced Booking Calendar < 1.7.0 - Unauthenticated SQL Injection9.8 Critical
- tms-outsource amelia, unknown amelia – events & appointments booking calendar +1 moreAmelia < 1.0.46 - Manager+ RCE8.8 High
- simple-membership-plugin simple membershipSimple Membership < 4.1.0 - Arbitrary Transaction Deletion via CSRF6.5 Medium
- wpdevart pricing table builder, unknown pricing table builder – ap pricing tables lite +1 moreAP Pricing Tables Lite < 1.1.5 - Reflected Cross-Site Scripting6.1 Medium
- Show moreLoading…