CVEs published in March 2022
2,440 vulnerabilities, 400 critical, 18 exploited.
- tenda m3 firmwareTenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the...9.8 Critical
- tenda m3 firmwareTenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the...9.8 Critical
- dlink dir-816 firmwareD-Link DIR-816 A2 1.10 B05 allows unauthenticated attackers to arbitrarily reset the device via a...9.8 Critical
- passworkPasswork On-Premise Edition before 4.6.13 allows migration/downloadExportFile Directory Traversal...4.3 Medium
- passworkPasswork On-Premise Edition before 4.6.13 has multiple XSS issues.6.1 Medium
- passworkPasswork On-Premise Edition before 4.6.13 allows CSRF via the groups, password, and history...8.8 High
- passworkPasswork On-Premise Edition before 4.6.13 allows migration/uploadExportFile Directory Traversal ...8.8 High
- whatsappWhatsapp iOS 2.19.80 and prior and Android 2.19.222 and prior user interface does not properly...6.5 Medium
- apple imessageiMessage (Messages app) iOS 12.4 and prior user interface does not properly represent URI...6.5 Medium
- facebook instagramInstagram iOS 106.0 and prior and Android 107.0.0.11 and prior user interface does not properly...6.5 Medium
- facebook messengerThe Facebook Messenger app for iOS 227.0 and prior and Android 228.1.0.10.116 and prior user...6.5 Medium
- open-emr openemrOpenEMR v6.0.0 was discovered to contain an incorrect access control issue.4.3 Medium
- asseco dvs avilysThe Reporting module in Aseco Lietuva document management system DVS Avilys before 2022-03-10...7.5 High
- argoproj argo cd, argo-cd +1 moreImproper access control allows admin privilege escalation in Argo CD9.9 Critical
- argoproj argo cdArgo CD improper access control bug can allow malicious user to escalate privileges to admin level8.8 High
- wps officewpsupdater.exe in Kingsoft WPS Office through 11.2.0.10382 allows remote code execution by...9.8 Critical
- nxp lpc55s66jbd100 firmware, lpc55s66jbd64 firmware, lpc55s66jev98 firmware +3 more +5 moreNXP LPC55S66JBD64, LPC55S66JBD100, LPC55S66JEV98, LPC55S69JBD64, LPC55S69JBD100, and...7.8 High
- honda civic 2018 firmwareThe remote keyless system on Honda Civic 2018 vehicles sends the same RF signal for each door...5.3 Medium
- argoproj argo cd, argo-cd +1 morePath traversal allows leaking out-of-bound files from Argo CD repo-server6.8 Medium
- argoproj argo cd, argo-cd +1 morePath traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server7.7 High
- jupyter server, jupyter-server jupyter server +1 moreSensitive Auth & Cookie data stored in Jupyter server logs7.5 High
- zzzcms zzzphpZZZCMS zzzphp v2.1.0 was discovered to contain a remote command execution (RCE) vulnerability via...9.8 Critical
- taogogo taocmsAn arbitrary file upload vulnerability in the File Management function module of taoCMS v3.0.2...9.8 Critical
- saturdaydrive ninja forms - file uploads, ninjaforms ninja forms file uploads +1 moreNinja Forms - File Uploads Extension <= 3.3.0 - Arbitrary File Upload9.8 Critical
- deanoakley photoswipe masonry galleryPhotoswipe Masonry Gallery <= 1.2.14 Stored Cross-Site Scripting6.4 Medium
- saturdaydrive ninja forms - file uploads, ninjaforms ninja forms file uploads +1 moreNinja Forms - File Uploads Extension <= 3.3.12 - Reflected Cross-Site Scripting7.2 High
- wpamelia amelia, ameliabooking booking for appointments and events calendar – amelia +1 moreAmelia <= 1.0.46 - Stored Cross Site Scripting via lastName7.2 High
- vmware carbon black app controlVMware Carbon Black App Control (8.5.x prior to 8.5.14, 8.6.x prior to 8.6.6, 8.7.x prior to 8.7...9.1 Critical
- vmware carbon black app controlVMware Carbon Black App Control (8.5.x prior to 8.5.14, 8.6.x prior to 8.6.6, 8.7.x prior to 8.7...9.1 Critical
- linux kernelA use-after-free flaw was found in the add_partition in block/partitions/core.c in the Linux...5.5 Medium
- linux kernel, fedoraproject fedora +1 moreA vulnerability was found in the Linux kernel's block_invalidatepage in fs/buffer.c in the...5.5 Medium
- quarkusA flaw was found in Quarkus. The state and potentially associated permissions can leak from one...8.8 High
- rockwell automation connected components workbenchRockwell Automation Connected Components Workbench Deserialization of Untrusted Data8.6 High
- rockwell automation connected components workbenchRockwell Automation Connected Components Workbench Path Traversal7.7 High
- rockwell automation factorytalk assetcentreRockwell Automation FactoryTalk AssetCentre OS Command Injection10.0 Critical
- rockwell automation connected components workbenchRockwell Automation Connected Components Workbench Improper Input Validation6.1 Medium
- rockwell automation factorytalk assetcentreRockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data10.0 Critical
- rockwell automation factorytalk assetcentreRockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data10.0 Critical
- rockwell automation factorytalk assetcentreRockwell Automation FactoryTalk AssetCentre Use of Potentially Dangerous Function10.0 Critical
- rockwell automation factorytalk assetcentreRockwell Automation FactoryTalk AssetCentre SQL Injection10.0 Critical
- rockwell automation factorytalk assetcentreRockwell Automation FactoryTalk AssetCentre SQL Injection10.0 Critical
- rockwell automation factorytalk assetcentreRockwell Automation FactoryTalk AssetCentre SQL Injection10.0 Critical
- rockwell automation factorytalk assetcentreRockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data10.0 Critical
- rockwell automation factorytalk assetcentreRockwell Automation FactoryTalk AssetCentre Deserialization of Untrusted Data10.0 Critical
- ge ur family, multilin b30 firmware, multilin b90 firmware +17 more +19 moreGE UR family exposure of sensitive information to an unauthorized actor7.5 High
- ge ur family, multilin b30 firmware, multilin b90 firmware +17 more +19 moreGE UR family insecure default variable initialization9.8 Critical
- ge ur bootloader binaryGE UR family hardcoded credentials8.4 High
- ge ur family, multilin b30 firmware, multilin b90 firmware +17 more +19 moreGE UR family Unrestricted Upload of File with Dangerous Type9.8 Critical
- ge ur family, multilin b30 firmware, multilin b90 firmware +17 more +19 moreGE UR family exposure of sensitive information to an unauthorized actor5.3 Medium
- ge ur family, multilin b30 firmware, multilin b90 firmware +17 more +19 moreGE UR family input validation5.3 Medium
- Show moreLoading…