CVEs published in March 2022
2,440 vulnerabilities, 400 critical, 18 exploited.
- ge ur family, multilin b30 firmware, multilin b90 firmware +17 more +19 moreGE UR family input validation5.3 Medium
- yooslider yoo slider – image slider & video slider (wordpress plugin), yoo slider +1 moreWordPress Yoo Slider plugin <= 2.0.0 - Stored Cross-Site Scripting (XSS) vulnerability5.4 Medium
- yooslider yoo slider – image slider & video slider (wordpress plugin), yoo slider +1 moreWordPress Yoo Slider – Image Slider & Video Slider plugin <= 2.0.0 - Cross-Site Request Forgery (CSRF) vulnerability leading to slider Duplicate/Delete5.4 Medium
- philips gemini 16 slice, gemini dual, gemini gxl 10 slice +19 more +21 morePhilips Gemini PET/CT Storage of Sensitive Data in a Mechanism Without Access Control2.4 Low
- [unknown] openstack-tripleo-heat-templates, redhat openstack, openstack tripleo heat templates +2 moreExposure of Sensitive Information to an Unauthorized Actor in OpenStack tripleo-heat-templates4.3 Medium
- hp laserjet pro m304-m305 w1a46a firmware, laserjet pro m304-m305 w1a47a firmware, laserjet pro m304-m305 w1a48a firmware +65 more +67 moreCertain HP Print devices may be vulnerable to potential information disclosure, denial of service...9.8 Critical
- hp laserjet pro m304-m305 w1a46a firmware, laserjet pro m304-m305 w1a47a firmware, laserjet pro m304-m305 w1a48a firmware +65 more +67 moreCertain HP Print devices may be vulnerable to potential information disclosure, denial of service...7.5 High
- hp laserjet pro m304-m305 w1a46a firmware, laserjet pro m304-m305 w1a47a firmware, laserjet pro m304-m305 w1a48a firmware +65 more +67 moreCertain HP Print devices may be vulnerable to potential information disclosure, denial of service...9.8 Critical
- imagemagickA flaw was found in ImageMagick. The vulnerability occurs due to improper use of open functions...5.5 Medium
- redhat 389 directory server, fedoraproject fedora, redhat enterprise linux +2 moreA vulnerability was found in the 389 Directory Server that allows expired passwords to access the...6.5 Medium
- debian linux, linux kernel +1 moreA memory leak flaw was found in the Linux kernel’s DMA subsystem, in the way a user calls...5.5 Medium
- okta advanced server access client, advanced server access +1 moreOkta Advanced Server Access Client for Linux and macOS prior to version 1.58.0 was found to be...8.8 High
- money transfer management system project transfer management systemMoney Transfer Management System Version 1.0 allows an authenticated user to inject SQL queries...4.3 Medium
- money transfer management system project transfer management systemMoney Transfer Management System Version 1.0 allows an unauthenticated user to inject SQL queries...9.8 Critical
- money transfer management system project transfer management systemMoney Transfer Management System Version 1.0 allows an attacker to inject JavaScript code in the...6.1 Medium
- theforeman foreman ansible, redhat satellite +1 moreMissing Authentication for Critical Function in Foreman Ansible8.0 High
- tendacn ac10 firmwareTenda AC10-1200 v15.03.06.23_EN was discovered to contain a buffer overflow in the...7.5 High
- tendacn ac10 firmwareTenda AC10-1200 v15.03.06.23_EN was discovered to contain a buffer overflow via the list...7.5 High
- tendacn ac10 firmwareTenda AC10-1200 v15.03.06.23_EN was discovered to contain a buffer overflow via the urls...9.8 Critical
- irfanviewIrfanView 4.59 is vulnerable to buffer overflow via the function at address 0x413c70 (in 32bit...7.8 High
nextcloudopenSUSESecurity update for nextcloudNo score- hashicorp sentinelSentinel 1.8.2 is vulnerable to Server-side request forgery (SSRF).7.5 High
- ibm mq applianceIBM MQ Appliance 9.2 CD and 9.2 LTS could allow an authenticated and authorized user to cause a...5.3 Medium
- xiaohuanxiong project cmsAn issus was discovered in xiaohuanxiong CMS 5.0.17. There is a CSRF vulnerability that can...6.5 Medium
- xiaohuanxiong cms project cmsAn issue was discovered in xiaohuanxiong CMS 5.0.17. There is a CSRF vulnerability that can that...8.8 High
- cmswingCmsWing CMS 1.3.7 is affected by a Remote Code Execution (RCE) vulnerability via parameter: log rule9.8 Critical
- teamviewer, teamviewer for linux +1 moreTeamViewer Linux - Deletion command not properly executed after process crash6.3 Medium
- cmswingCmsWing 1.3.7 is affected by a SQLi vulnerability via parameter: behavior rule.9.8 Critical
- mcafee epolicy orchestrator, mcafee,llc mcafee epolicy orchestrator (epo) +1 moreePO XML extended entity vulnerability3.5 Low
- mcafee epolicy orchestrator, mcafee,llc mcafee epolicy orchestrator (epo) +1 moreePO password change vulnerability3.1 Low
- mcafee epolicy orchestrator, mcafee,llc mcafee epolicy orchestrator (epo) +1 moreCross-site scripting vulnerability in ePO4.3 Medium
- mcafee epolicy orchestrator, mcafee,llc mcafee epolicy orchestrator (epo) +1 moreePO database restoration vulnerability6.5 Medium
- mcafee epolicy orchestrator, mcafee,llc mcafee epolicy orchestrator (epo) +1 moreePO Reflected Cross-site scripting vulnerability5.4 Medium
- mcafee epolicy orchestrator, mcafee,llc mcafee epolicy orchestrator (epo) +1 moreePO blind SQL Injection vulnerability5.4 Medium
- apache traffic server, debian linux +1 moreImproper authentication vulnerability in TLS origin verification8.1 High
- apache traffic server, debian linux +1 moreHTTP request line fuzzing attacks7.5 High
tzdataAlmaLinux,tzdata-javaAlmaLinux +1 moretzdata bug fix and enhancement updateNo score- asus rt-ac68u firmwareASUS AC68U <=3.0.0.4.385.20852 is affected by a buffer overflow in blocking.cgi, which may cause...7.5 High
- asus rt-ac5300 firmware, rt-ac68u firmware +1 moreAsus RT-AC68U <3.0.0.4.385.20633 and RT-AC5300 <3.0.0.4.384.82072 are affected by a buffer...9.8 Critical
- crater-invoice crater-invoice/crater, craterapp crater +1 moreUnrestricted Upload of File with Dangerous Type in crater-invoice/crater7.2 High
- debian linux, linux kernel, fedoraproject fedora +10 more +12 moreIn the Linux kernel before 5.16.15, there is a buffer overflow in ESP transformation in net/ipv4...7.8 High
- debian linux, openstack oslo.utils, redhat openshift container platform +1 more +3 morepython-oslo-utils has improper password parsing4.9 Medium
- razer synapseRazer Synapse before 3.7.0228.022817 allows privilege escalation because it relies on ...7.3 High
- jhead project jheadA Heap-based Buffer Overflow vulnerability exists in jhead 3.04 and 3.05 via the...7.8 High
- jhead project jheadA Heap-based Buffer Overflow vulnerabilty exists in jhead 3.04 and 3.05 is affected by: Buffer...7.8 High
- jhead project jheadA Denial of Service vulnerability exists in jhead 3.04 and 3.05 via a wild address read in the...7.5 High
- jhead project jheadA Denial of Service vulnerability exists in jhead 3.04 and 3.05 due to a wild address read in the...5.5 Medium
- tecnoteca cmdbuildIn CMDBuild from version 3.0 to 3.3.2 payload requests are saved in a temporary log table, which...6.5 Medium
- enhanced-github project enhanced-githubA Cross Site Scripting (XSS) vulnerabililty exists in enhanced-github v5.0.11 via the file name...6.1 Medium
- totolink n600r firmwareTOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection...9.8 Critical
- Show moreLoading…