CVEs published in March 2022
2,440 vulnerabilities, 400 critical, 18 exploited.
- diyhi bbsA File Upload vulnerability exists in bbs 5.3 is via MembershipCardManageAction.java in a GetType...7.2 High
- diyhi bbsA File Upload vulnerability exists in bbs 5.3 is via TopicManageAction.java in a GetType function...7.2 High
- diyhi bbsAn Archive Extraction (AKA "Zip Slip) vulnerability exists in bbs 5.3 in the UpgradeNow function...4.9 Medium
- diyhi bbsA File Upload vulnerability exists in bbs v5.3 via QuestionManageAction.java in a getType function.7.2 High
- diyhi bbsA Server-side Template Injection (SSTI) vulnerability exists in bbs 5.3 in TemplateManageAction...7.2 High
- tenda ac9 firmwareTenda AC9 v15.03.2.21_cn was discovered to contain a stack overflow via the time parameter in the...9.8 Critical
- weka interest security scannerWEKA INTEREST Security Scanner Portscan memory allocation4.3 Medium
- weka interest security scannerWEKA INTEREST Security Scanner LAN Viewer denial of service2.8 Low
- weka interest security scannerWEKA INTEREST Security Scanner Webspider denial of service2.8 Low
- weka interest security scannerWEKA INTEREST Security Scanner Stresstest Configuration denial of service2.8 Low
- weka interest security scannerWEKA INTEREST Security Scanner Stresstest Scheme denial of service2.8 Low
- weka interest security scannerWEKA INTEREST Security Scanner HTTP denial of service2.8 Low
- shemes grabitShemes GrabIt NZB Date Parser denial of service5.3 Medium
- pro2col stingray ftsPro2col Stingray FTS cross site scriting5.5 Medium
- broadcom siteminder, symantec siteminder +1 moreNetegrity SiteMinder Login smpwservicescgi.exe redirect5.4 Medium
- ibm iss blackice pc protection, iss blackice pc protection +1 moreISS BlackICE PC Protection Update cross site scriting5.0 Medium
- ibm iss blackice pc protection, iss blackice pc protection +1 moreISS BlackICE PC Protection Update cleartext transmission3.7 Low
- ibm iss blackice pc protection, iss blackice pc protection +1 moreISS BlackICE PC Protection Cross Site Scripting Detection privileges management5.3 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting versions 13.0 to 14.6.5, 14.7 to 14.7.4,...5.3 Medium
- gitlabAn issue has been discovered affecting GitLab versions prior to 13.5. An open redirect...4.7 Medium
- gitlabA vulnerability was discovered in GitLab versions 10.5 to 14.5.4, 14.6 to 14.6.4, and 14.7 to 14...5.4 Medium
- gitlabIn all versions of GitLab CE/EE since version 11.3, the endpoint for auto-completing Assignee...4.3 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting with version 8.10....3.5 Low
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 10.0 before 14.5.4,...3.1 Low
- gitlabA vulnerability was discovered in GitLab starting with version 12. GitLab was vulnerable to a...3.1 Low
- gitlabAn issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3...5.9 Medium
- gitlabMissing sanitization of HTML attributes in Jupyter notebooks in all versions of GitLab CE/EE...7.7 High
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 14.6 before 14.6.5,...4.2 Medium
- gitlabInaccurate display of Snippet files containing special characters in all versions of GitLab CE/EE...6.5 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 11.4 before 14...4.3 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions before 14.3.6, all versions...6.5 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14...10.0 Critical
- sap innovation managementUnder certain conditions, SAP Innovation management - version 2.0, allows an attacker to access...7.5 High
- mirmay file manager, secure private browser +1 moreMirmay Secure Private Browser / File Manager Auto Lock improper authentication3.3 Low
- teampassCross-site Scripting in teampass6.1 Medium
- kiddoware kids placeKiddoware Kids Place Home Button Protection denial of service5.3 Medium
- speakout\! email petitions project email petitions, steve d speakout! email petitions +1 moreSpeakOut! Email Petitions < 2.14.15.1 - Unauthenticated SQLi9.8 Critical
- andy moyle church admin, church admin project admin +1 moreChurch Admin < 3.4.135 - Unauthenticated Plugin's Backup Disclosure4.3 Medium
- yithemes woocommerce affiliate, elliot sowersby, relywp woocommerce affiliate plugin – coupon affiliates +1 moreCoupon Affiliates < 4.16.4.5 - Unauthenticated Stored XSS6.1 Medium
- limit login attempts project login attempts, unknown limit login attempts (spam protection) +1 moreLimit Login Attempts (Spam Protection) < 5.1 - Unauthenticated SQLi9.8 Critical
- jason funk title experiments free, title experiments free project experiments free +1 moreTitle Experiments Free < 9.0.1 - Unauthenticated SQLi9.8 Critical
- gtranslate translate wordpress with gtranslateTranslate WordPress with GTranslate < 2.9.9 - CSRF to Account Takeover8.8 High
- tms-outsource amelia, unknown amelia – events & appointments booking calendar +1 moreAmelia < 1.0.47 - Customer+ Arbitrary Appointments Update and Sensitive Data Disclosure5.4 Medium
- pleziPlezi < 1.0.3 - Unauthenticated Stored XSS6.1 Medium
- narnoo distributor project distributor, unknown narnoo distributor +1 moreNarnoo Distributor <= 2.5.1 - Unauthenticated LFI to Arbitrary File Read / RCE9.8 Critical
- bulk creator project creator, unknown bulk creator +1 moreBulk Creator <= 1.0.1 - Reflected Cross-Site Scripting6.1 Medium
- bank mellat project mellat, unknown bank mellat +1 moreBank Mellat <= 1.3.7 - Reflected Cross-Site Scripting6.1 Medium
- ays-pro popup like box, unknown popup like box – page plugin +1 morePopup Like box < 3.6.1 - Reflected Cross-Site Scripting6.1 Medium
- dtabs project dtabsdTabs <= 1.4 - Reflected Cross-Site Scripting6.1 Medium
- deleteoldorders project delete old ordersDelete Old Orders <= 0.2 - Reflected Cross-Site Scripting6.1 Medium
- Show moreLoading…