CVEs published in March 2022
2,440 vulnerabilities, 400 critical, 18 exploited.
- kiwix libkiwix, fedoraproject fedora +1 morelibkiwix 10.0.0 and 10.0.1 allows XSS in the built-in webserver functionality via the search...6.1 Medium
- gradle enterpriseGradle Enterprise before 2022.1 allows remote code execution if the installation process did not...9.8 Critical
- mendelson oftp2Mendelson OFTP2 before 1.1 b43 is affected by directory traversal. To access the vulnerable code...5.9 Medium
- maccmsMaccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in ...6.1 Medium
- maccmsMaccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in ...6.1 Medium
- maccmsMaccms v10 was discovered to contain multiple reflected cross-site scripting (XSS)...6.1 Medium
- maccmsMaccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in ...6.1 Medium
- maccmsMaccms v10 was discovered to contain multiple reflected cross-site scripting (XSS)...6.1 Medium
- surveykingSurveyKing v0.2.0 was discovered to retain users' session cookies after logout, allowing...6.5 Medium
- redhat kubeclientImproper Certificate Validation in kubeclient8.1 High
- linux kernel, fedoraproject fedora, netapp h300e firmware +10 more +12 moreAn out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event...7.8 High
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreSQL Injection in Moodle8.8 High
- debian linux, linux kernel +1 moreA kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi...4.4 Medium
- linux kernel, fedoraproject fedora, netapp h300e firmware +7 more +9 moreA flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of...7.8 High
- clusterlabs pcs, debian linux +1 moreA flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired...8.8 High
- redhat keycloak, red hat keycloak-services +1 moreCross-site Scripting in Keycloak6.1 Medium
- redhat 3scaleIt was found that 3scale's APIdocs does not validate the access token, in the case of invalid...7.5 High
- theforeman openscapAn improper authorization handling flaw was found in Foreman. The OpenSCAP plugin for the smart...6.1 Medium
- linux kernel, fedoraproject fedora, netapp h300e firmware +7 more +9 moreAn out of memory bounds write flaw (1 or 2 bytes of memory) in the Linux kernel NFS subsystem was...8.0 High
- splunk, splunk enterprise +1 moreIndexer denial-of-service via malformed S2S request7.5 High
- cloudfoundry capi-release, cf-deployment +1 moreIn cloud foundry CAPI versions prior to 1.122, a denial-of-service attack in which a developer...5.3 Medium
- genians genian nac, genians co., ltd genian nac suite v4.0, genian nac v5.0 & genian nac suite v5.0 +2 moreGenian NAC remote code execution vulnerability9.6 Critical
- netu corp. mex01, netu mex01 firmware +1 moreNetis Korea MEX01 Buffer overflow vulnerability8.1 High
- efm networks co., ltd iptime nas product (nas1, 2, 3, 4, 1dual, 2dual 4dual), iptime nas-i firmware, nas-ii firmware +7 more +9 moreIPTIME NAS2dual improper authentication vulnerability7.5 High
- presstigers simple event planner, simple event planner (wordpress plugin) +1 moreWordPress Simple Event Planner plugin <= 1.5.4 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities4.1 Medium
- presstigers simple event planner, simple event planner (wordpress plugin) +1 moreWordPress Simple Event Planner plugin <= 1.5.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability4.1 Medium
- plugin-planet simple ajax chat, jeff starr simple ajax chat (wordpress plugin) +1 moreWordPress Simple Ajax Chat plugin <= 20220115 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability3.4 Low
- wp-downloadmanager project wp-downloadmanager, lester 'gamerz' chan wp-downloadmanager (wordpress) +1 moreWordPress WP-DownloadManager plugin <= 1.68.5 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities4.8 Medium
- delta electronics cncsoft, deltaww cncsoft screeneditor +1 moreDelta Electronics CNCSoft Out-of-bounds Read6.1 Medium
- delta electronics diaenergieDelta Electronics DIAEnergie CLEARTEXT Transmission of Sensitive Information7.1 High
- ge toolboxstGE Gas Power ToolBoxST Improper Restriction of XML External Entity Reference7.5 High
- horner automation cscape envisionrvHorner Automation Cscape EnvisionRV Improper Input Validation7.8 High
- solarwinds webhelpdeskAuthenticated Remote Code Execution in WebHelpDesk 12.7.88.2 High
- totolink t10 v2 firmwareTwo Buffer Overflow vulnerabilities exists in T10 V2_Firmware V4.1.8cu.5207_B20210320 in the...9.8 Critical
- containerd imgcrypt, fedoraproject fedora +1 moreIncorrect Authorization in imgcrypt7.5 High
- openbsdslaacd in OpenBSD 6.9 and 7.0 before 2022-03-22 has an integer signedness error and resultant...7.5 High
- openbsdengine.c in slaacd in OpenBSD 6.9 and 7.0 before 2022-02-21 has a buffer overflow triggerable by...7.5 High
- yonyou u8\+Yonyou u8 v13.0 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability...6.1 Medium
- classcms project classcmsA stored cross-site scripting (XSS) vulnerability in the Column module of ClassCMS v2.5 and below...5.4 Medium
- grpc grpc-swift, linuxfoundation grpc swift +1 moreDenial of Service via reachable assertion in grpc-swift7.5 High
- alf-bancoALF-BanCO v8.2.5 and below was discovered to use a hardcoded password to encrypt the SQLite...9.1 Critical
- yeswikiSQL Injection in Yeswiki7.5 High
- douco douphpA stored cross-site scripting (XSS) vulnerability in the upload function of /admin/show.php...4.8 Medium
- phpipamphpIPAM 1.4.4 allows Reflected XSS and CSRF via app/admin/subnets/find_free_section_subnets.php...6.1 Medium
- predic8 soa modelImproper Restriction of XML External Entity Reference in soa-model9.8 Critical
- tinyrise tinyshopA File Deletion vulnerability exists in TinyShop 3.1.1 in the back_list parameter in controllers...8.1 High
- powerdns authoritative server, recursor, fedoraproject fedora +2 moreIn PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and...7.5 High
- sophos firewall, sfos +1 moreAn authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker...9.8 Critical
- forkcms forkcms/forkcms, fork-cms fork cms +1 moreSQL injection through marking blog comments on bulk as spam in forkcms/forkcms9.0 Critical
- f-secure safe, safe browser for android version 18.5 & below +1 moreF-Secure SAFE Browser vulnerable to USSD attacks4.3 Medium
- Show moreLoading…