CVEs published in March 2022
2,440 vulnerabilities, 400 critical, 18 exploited.
- impresscmsSQL Injection in ImpressCMS9.8 Critical
- xiaohuanxiong project xiaohuanxiongXiaohuanxiong v1.0 was discovered to contain a SQL injection vulnerability via the id parameter...9.8 Critical
- impresscmsIncorrect Access Control in ImpressCMS5.3 Medium
- xiongmaitech ahb80n16t-gs firmware, ahb80n32f4-lme firmware, ahb80x04-r-mh-v3 firmware +7 more +9 moreA buffer over flow in Xiongmai DVR devices NBD80X16S-KL, NBD80X09S-KL, NBD80X08S-KL, NBD80X09RA...7.8 High
- google chrome, chromium v8 +1 morechromium - security update8.8 High
- libtiff, netapp active iq unified manager +1 moreOut-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of...5.5 Medium
- linux kernel, redhat enterprise linux +1 moreModerate: kernel-rt security and bug fix update5.5 Medium
- linux kernel, fedoraproject fedora, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreCVE-2022-1015 affecting package kernel for versions less than 5.15.37.1-26.6 Medium
- clash project clashClash for Windows v0.19.8 was discovered to allow arbitrary code execution via a crafted payload...9.8 Critical
- dlink dap-1360f1 firmwareIn DLink DAP-1360 F1 firmware version <=v6.10 in the "webupg" binary, an attacker can use the ...9.8 Critical
- wowonderWoWonder The Ultimate PHP Social Network Platform v4.0.0 was discovered to contain an access...5.3 Medium
- aapanelaaPanel v6.8.21 was discovered to be vulnerable to directory traversal. This vulnerability allows...6.5 Medium
- mruby, mruby mruby/mruby +1 moreuse after free in mrb_vm_exec in mruby/mruby7.2 High
- open-falcon falcon-plusSQLinjection in falcon-plus9.8 Critical
- tesla model 3 firmware, model s firmware, model x firmware +2 moreCertain Tesla vehicles through 2022-03-26 allow attackers to open the charging port via a 315 MHz...7.2 High
- marky project markyMarky commit 3686565726c65756e was discovered to contain a remote code execution (RCE)...9.8 Critical
fluent-bitOSS-FuzzHeap-double-free in read_configNo score- d-link dir-820l, dlink dir-820l firmware +1 moreD-Link DIR-820L 1.05B03 was discovered to contain a remote command execution (RCE) vulnerability...9.8 Critical
- notableNotable v1.8.4 does not filter text editing, allowing attackers to execute arbitrary code via a...9.8 Critical
- netgear r8500 firmwareNETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands ...8.8 High
- netgear r8500 firmwareNETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands ...8.8 High
- netgear r8500 firmwareNETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands ...8.8 High
- libsixelstb_image.h (aka the stb image loader) 2.19, as used in libsixel and other products, has a...5.5 Medium
- libsdl simple directmedia layerThere is a heap overflow problem in video/SDL_pixels.c in SDL (Simple DirectMedia Layer) 2.x to 2...8.8 High
- mruby, mruby mruby/mruby +1 moreUser after free in mrb_vm_exec in mruby/mruby7.7 High
squizlabs/php_codesnifferPackagistArbitrary shell executionNo scoresquizlabs/php_codesnifferPackagistArbitrary shell executionNo scoreopenscOSS-FuzzHeap-buffer-overflow in epassNUMBER_hook_pathNo scoreopenscOSS-FuzzHeap-buffer-overflow in cosm_new_fileNo scorefluent-bitOSS-FuzzHeap-use-after-free in jsmn_parseNo scoreexiv2OSS-FuzzHeap-buffer-overflow in Exiv2::getULongNo scorefluent-bitOSS-FuzzHeap-double-free in flb_pack_state_resetNo scoreghostscriptOSS-FuzzUNKNOWN READ in s_RLE_processNo score- gnu gcc, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morelibiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as...5.5 Medium
- broadcom tcpreplay, fedoraproject fedora +1 moretcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls in common/get.c.7.8 High
- broadcom tcpreplay, fedoraproject fedora +1 moretcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_l2len_protocol in common...7.8 High
- broadcom tcpreplay, fedoraproject fedora +1 moretcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_ipv6_next in common/get.c.7.8 High
- broadcom tcpreplay, fedoraproject fedora +1 moretcprewrite in Tcpreplay 4.4.1 has a reachable assertion in get_layer4_v6 in common/get.c.5.5 Medium
- sonicwall sonicos, sonicosv +1 moreA Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote...9.8 Critical
- checkmkCheckMK Raw Edition software (versions 1.5.0 to 1.6.0) does not sanitise the input of a web...6.1 Medium
- checkmkThe web management console of CheckMK Enterprise Edition (versions 1.5.0 to 2.0.0p9) does not...8.8 High
- checkmkThe web management console of CheckMK Raw Edition (versions 1.5.0 to 1.6.0) allows a...8.8 High
- statamic cms, statamic +1 moreDiscoverability of user password hash in Statamic CMS3.7 Low
- denoSandbox bypass leading to arbitrary code execution in Deno10.0 Critical
- duckduckgoThe DuckDuckGo browser 7.64.4 on iOS allows Address Bar Spoofing due to mishandling of the...8.2 High
- docker desktopDocker Desktop installer on Windows in versions before 4.6.0 allows an attacker to overwrite any...7.1 High
- typesettercms typesetterTypesetterCMS v5.1 was discovered to contain a Cross-Site Request Forgery (CSRF) which is...8.8 High
- cef fortessa ftbtld firmwareIncorrect permissions in the Bluetooth Services in the Fortessa FTBTLD Smart Lock as of 12-13...8.2 High
- open-emr openemrA stored cross-site scripting (XSS) issue was discovered in the OpenEMR Hospital Information...5.4 Medium
- joget dxJoget DX 7 was discovered to contain a cross-site scripting (XSS) vulnerability via the Datalist...5.4 Medium
- Show moreLoading…