CVEs published in March 2022
2,440 vulnerabilities, 400 critical, 18 exploited.
- synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +2 moreBuffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in...9.8 Critical
- synology diskstation manager (dsm), diskstation manager +1 moreImproper neutralization of special elements used in a command ('Command Injection') vulnerability...8.8 High
- netatalk, western digital my cloud, my cloud home +12 more +14 moreWestern Digital My Cloud OS 5 and My Cloud Home Unauthenticated Arbitrary File Write Vulnerability in Netatalk10.0 Critical
- debian linux, linux kernel, netapp h300e firmware +8 more +10 moreModerate: kernel-rt security and bug fix update7.0 High
- redhat libvirt, netapp ontap select deploy administration utility +1 moreA flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method...4.3 Medium
- linux kernel, redhat enterprise linux +1 moreModerate: kernel-rt security and bug fix update4.4 Medium
- nokogiri, zlib, apple mac os x +28 more +30 moreNokogiri affected by zlib's Out-of-bounds Write vulnerability7.5 High
- anchorcms anchor cmsCross-Site Request Forgery in Anchor CMS4.5 Medium
- eyoucmsEyouCMS v1.5.5 was discovered to have no access control in the component /data/sqldata.9.8 Critical
- ionizecms ionizeA remote code execution (RCE) vulnerability in Ionize v1.0.8.1 allows attackers to execute...9.8 Critical
- hongmen parking management systemMultiple cross-site scripting (XSS) vulnerabilities in Parking Management System v1.0 allows...6.1 Medium
- yejiao tuzicmsTuziCMS v2.0.6 was discovered to contain a SQL injection vulnerability via the component App...9.8 Critical
- surveyking project surveykingSurvey King v0.3.0 does not filter data properly when exporting excel files, allowing attackers...9.8 Critical
- discourseSecure category names leaked via user activity export in Discourse4.3 Medium
- geon project geonMalicious users can take over the session of other players7.1 High
- bluedon internet access detectorBluedon Information Security Technologies Co.,Ltd Internet Access Detector v1.0 was discovered to...7.5 High
- dpgaspar flask-appbuilderOpen Redirect in Flask-AppBuilder6.1 Medium
- ibm power 9 ac922, power 9 ac922 firmware +1 moreThe BMC (IBM Power 9 AC922 OP910, OP920, OP930, and OP940) may be subject to downgrade attack...6.5 Medium
- iteachyou dreamer cmsAn SQL Injection vulnerability exists in Dreamer CMS 4.0.0 via the tableName parameter.9.8 Critical
- forkcms forkcms/forkcms, fork-cms fork cms +1 moreSQL Injection in forkcms/forkcms9.6 Critical
- nvidia data center gpu managerNVIDIA DCGM contains a vulnerability in nvhostengine, where a network user can cause detection of...6.3 Medium
- motioneye project motioneyeMotionEye allows attackers to access sensitive information7.5 High
- splus soroushplusAn Access Control vulnerability exists in SoroushPlus+ Messenger 1.0.30 in the Lock Screen...9.1 Critical
firefoxUbuntufirefox regressionsNo score- pimcore data-hub, pimcore/data-hub +1 moreCross-site Scripting (XSS) - Stored in pimcore/data-hub6.5 Medium
- rengine project rengineA Cross Site Scripting (XSS) vulnerability exists in Yogesh Ojha reNgine v1.0 via the Scan Engine...5.4 Medium
- hashgraph guardian, nozomi networks cmc +1 moreAuthenticated RCE on project configuration import in Guardian/CMC before 22.0.08.6 High
- hashgraph guardian, nozomi networks cmc +1 moreAuthenticated RCE on logo report upload in Guardian/CMC before 22.0.08.6 High
- gitea, go-gitea go-gitea/gitea +1 moreOpen Redirect on login in go-gitea/gitea7.2 High
- haloIn halo 1.4.14, the function point of uploading the avatar, any file can be uploaded, such as...5.4 Medium
- radare radare2, radareorg radareorg/radare2 +1 moreHeap Buffer Overflow in iterate_chained_fixups in radareorg/radare27.3 High
- apimanager project apimanagerAn issue was discovered in ApiManager 1.1. there is sql injection vulnerability that can use in ...9.8 Critical
- forkcms forkcms/forkcms, fork-cms fork cms +1 moreCross-site Scripting (XSS) - Stored in forkcms/forkcms6.8 Medium
- radare radare2, radareorg radareorg/radare2 +1 moreHeap Buffer Overflow in parseDragons in radareorg/radare27.3 High
pesignMageiaUpdated pesign packages fix security vulnerabilityNo score- horovod, horovod horovod/horovod +1 moreInsecure Temporary File in horovod/horovod8.2 High
- owasp zed attack proxyImproper Certificate Validation in OWASP ZAP4.0 Medium
openscOSS-FuzzSegv on unknown address in sc_file_clear_acl_entriesNo score- gnome ocrfeederGNOME OCRFeeder before 0.8.4 allows OS command injection via shell metacharacters in a PDF or...9.8 Critical
- debian linux, moby, fedoraproject fedora +1 more +3 moreDefault inheritable capabilities for linux container should be empty5.9 Medium
- arm mbed tls, debian linux +1 moreA Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the...7.5 High
- tenda m3 firmwareTenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the...9.8 Critical
- tenda m3 firmwareTenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the...9.8 Critical
- tenda m3 firmwareTenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the...9.8 Critical
- tenda m3 firmwareTenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the...9.8 Critical
- tenda m3 firmwareTenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the...9.8 Critical
- tenda m3 firmwareTenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the...9.8 Critical
- tenda m3 firmwareTenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the...9.8 Critical
- tenda m3 firmwareTenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the...9.8 Critical
- tenda m3 firmwareTenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the...9.8 Critical
- Show moreLoading…