CVEs published in March 2022
2,440 vulnerabilities, 400 critical, 18 exploited.
- database peek project peek, unknown database peek +1 moreDatabase Peek <= 1.2 - Reflected Cross-Site Scripting6.1 Medium
- myceliumdesign conference schedulerConference Scheduler < 2.4.3 - Reflected Cross-Site Scripting6.1 Medium
- mapping multiple urls redirect same page project multiple urls redirect same page, unknown mapping multiple urls redirect same page +1 moreMapping Multiple URLs Redirect Same Page <= 5.8 - Reflected Cross-Site Scripting6.1 Medium
- codedropz drag and drop multiple file upload - contact form 7, unknown drag and drop multiple file upload – contact form 7 +1 moreDrag and Drop Multiple File Upload - Contact Form 7 < 1.3.6.3 - Unauthenticated Stored XSS5.4 Medium
- sermon browser project browser, unknown sermon browser +1 moreSermon Browser <= 0.45.22 - Arbitrary File Upload via CSRF8.8 High
- instawp string locator, string locator project locator +1 moreString Locator < 2.5.0 - Admin+ Arbitrary File Read4.9 Medium
- sygnoos popup builder, popupbuilder popup builder – create highly converting, mobile friendly marketing popups. +1 morePopup Builder < 4.1.1 - SQL Injection to Reflected Cross-Site Scripting9.8 Critical
- takanakui menu image, icons made easy, freshlightlab menu image\, icons made easy +1 moreMenu Image, Icons made easy < 3.0.8 - Subscriber+ Stored Cross-Site Scripting5.4 Medium
- unknown wpc smart wishlist for woocommerceWPC Smart Wishlist for WooCommerce < 2.9.4 - Reflected Cross-Site Scripting5.4 Medium
- humananatomyillustrations interactive medical drawing of human bodyInteractive Medical Drawing of Human Body < 2.6 - Admin+ Stored XSS4.8 Medium
- inpsyde akismet privacy policiesAkismet Privacy Policies <= 2.0.1 - Reflected Cross-Site Scripting6.1 Medium
- stopbadbots block and stop bad bots, sminozzi block bad bots and stop bad bots crawlers and spiders and anti spam protection +1 moreWP Block and Stop Bad Bots < 6.88 - Unauthenticated SQLi9.8 Critical
- dpl sync woocommerce product feed to google shoppingSync WooCommerce Product feed to Google Shopping <= 1.2.4 - Admin+ SQLi7.2 High
- wow-company wow countdowns, unknown wow countdowns – easily create any countdowns, counters and timers +1 moreWow Countdowns <= 3.1.2 - Admin+ SQLi7.2 High
- poporon pz-linkcardPz-LinkCard <= 2.4.4.4 - Reflected Cross-Site Scripting6.1 Medium
- b4after osmapperOSMapper <= 2.1.5 - Unauthenticated Arbitrary Post Deletion5.3 Medium
- iptanus wordpress file upload, wordpress file upload pro +1 moreWordPress File Upload < 4.16.3 - Contributor+ Path Traversal to RCE8.8 High
- heateor sassy social share, social sharing plugin – sassy social share +1 moreSassy Social Share < 3.3.40 - Reflected Cross-Site Scripting6.1 Medium
- schneider electric scadapack workbenchA CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could...5.5 Medium
- schneider electric ecostruxure control expert, ecostruxure process expert, scadapack remoteconnect for x70 +1 more +3 moreA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal)...7.8 High
- schneider electric struxureware data center expertA CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection...9.1 Critical
- schneider electric struxureware data center expertA CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...9.1 Critical
- schneider-electric software update, schneider electric software update (sesu) – sut service component +1 moreA CWE-502: Deserialization of Untrusted Data vulnerability exists which could allow an attacker...7.3 High
graphicsmagickMageiaUpdated graphicsmagick packages fix security vulnerabilityNo score- hiby r3 pro firmwareHiby Music Hiby OS R3 Pro 1.5 and 1.6 is vulnerable to Directory Traversal. The HTTP Server does...7.5 High
- leanoteLeanote 2.7.0 is vulnerable to Cross Site Scripting (XSS) in the markdown type note. This leads...6.1 Medium
- spotweb project spotwebThere is a Cross Site Scripting (XSS) vulnerability in SpotPage_login.php of Spotweb 1.5.1 and...6.1 Medium
- minecraft bedrock serverMojang Bedrock Dedicated Server 1.18.2 is affected by an integer overflow leading to a bound...9.8 Critical
- zyxel atp series firmware, nsg series firmware, usg flex series firmware +25 more +27 moreAn authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware...9.8 Critical
- bytecodealliance wasmtimeUse after free in Wasmtime8.1 High
- tuzicmsTuziCMS 2.0.6 is affected by SQL injection in \App\Manage\Controller\BannerController.class.php.9.8 Critical
- emqx** UNSUPPORTED WHEN ASSIGNED ** EMQ X Dashboard V3.0.0 is affected by username enumeration in the...5.3 Medium
- fenom project fenomSandbox bypass in fenom10.0 Critical
perl-DBD-SQLiteopenSUSESecurity update for perl-DBD-SQLiteNo scoreperl-DBD-SQLiteSUSESecurity update for perl-DBD-SQLiteNo score- apache apisixApache APISIX: the body_schema check in request-validation plugin can be bypassed9.8 Critical
- linux kernelIn drivers/hid/hid-elo.c in the Linux kernel before 5.16.11, a memory leak exists for a certain...5.5 Medium
- 3cx3CX System through 2022-03-17 stores cleartext passwords in a database.6.5 Medium
- 3cxThe client applications in 3CX on Windows, the 3CX app for iOS, and the 3CX application for...9.1 Critical
- eyoucmsEyouCMS v1.5.4 was discovered to lack parameter filtering in \user\controller\shop.php, leading...9.8 Critical
- glpi-project glpiA SQL Injection vulnerability exits in the Ramo plugin for GLPI 9.4.6 via the idu parameter in...9.8 Critical
- open-xchange ox app suiteOX App Suite through 7.10.5 allows XSS via uuencoding in a multipart/alternative message.6.1 Medium
- open-xchange ox app suiteOX App Suite through 7.10.5 allows XSS via a trailing control character such as the SCRIPT\t...6.1 Medium
- open-xchange ox app suiteOX App Suite through 7.10.5 allows XSS via the class attribute of an element in an HTML e-mail...5.4 Medium
- 74cms74cmsSE v3.4.1 was discovered to contain an arbitrary file read vulnerability via the $url...7.5 High
- open-xchange ox app suiteOX App Suite through 7.10.5 allows XSS via NIFF (Notation Interchange File Format) data.6.1 Medium
- open-xchange ox app suiteOX App Suite through 7.10.5 allows XSS via an HTML 5 element such as AUDIO.6.1 Medium
- open-xchange ox app suiteOX App Suite through 7.10.5 allows XSS via an unknown system message in Chat.6.1 Medium
- impresscmsPath Traversal in ImpressCMS8.1 High
- impresscmsType Confusion in ImpressCMS9.8 Critical
- Show moreLoading…