CVEs published in March 2022
2,440 vulnerabilities, 400 critical, 18 exploited.
- jenkins bitbucket server integration, jenkins project bitbucket server integration plugin +1 moreStored XSS vulnerability in Jenkins Bitbucket Server Integration Plugin5.4 Medium
- pearadmin pear admin thinkA Cross Site Scripting (XSS) vulnerability exists in pearadmin pear-admin-think <=5.0.6, which...5.4 Medium
- re2cA stack overflow re2c 2.2 exists due to infinite recursion issues in src/dfa/dead_rules.cc.9.8 Critical
- shopizerShopizer - Stored XSS in Manage Images4.8 Medium
openjdk-ltsUbuntuopenjdk-lts regressionNo score- crater-invoice crater-invoice/crater, craterapp crater +1 moreInsecure deserialization of not validated module file in crater-invoice/crater7.2 High
- google firebase php-jwtFirebase PHP-JWT key/algorithm type confusion9.1 Critical
- htmlyhtmly Edit Profile Module cross site scripting3.5 Low
- dolphinphp project dolphinphpDolphinPHP User Management Page cross site scripting3.5 Low
- cltphpCLTPHP POST Parameter cross site scripting3.5 Low
- one church management system project church management system, sourcecodester one church management system +1 moreSourceCodester One Church Management System Session userregister.php improper authentication7.3 High
- microfinance management system project management system, unspecified microfinance management system +1 moreMicrofinance Management System sql injection7.3 High
- microfinance management system project management system, sourcecodester microfinance management system +1 moreSourceCodester Microfinance Management System Login Page login.php sql injection7.3 High
- microfinance management system project management system, sourcecodester microfinance management system +1 moreSourceCodester Microfinance Management System addcustomerHandler.php cross site scripting4.3 Medium
- one church management system project church management system, sourcecodester one church management system +1 moreSourceCodester One Church Management System attendancy.php sql injection7.3 High
- one church management system project church management system, sourcecodester one church management system +1 moreSourceCodester One Church Management System churchprofile.php cross site scripting4.3 Medium
- college website management system project website management system, sourcecodester college website management system +1 moreSourceCodester College Website Management System sql injection7.3 High
- tem flex-1080, flex-1085, flex-1080 firmware +1 more +3 moreTEM FLEX-1080/FLEX-1085 Log information disclosure5.3 Medium
- automatic question paper generator system project question paper generator system, unspecified automatic question paper generator system +1 moreAutomatic Question Paper Generator System My Account Page login.php cross site scripting4.3 Medium
- college website management system project website management system, sourcecodester college website management system +1 moreCollege Website Management System Contact cross site scripting3.5 Low
- tem flex-1085, flex-1085 firmware +1 moreTEM FLEX-1085 injection4.3 Medium
- unspecified automatic question paper generator, automatic question paper generator system project question paper generator system +1 moreAutomatic Question Paper Generator password recovery7.3 High
- windriver vxworksIn Wind River VxWorks 6.9 and 7, a specific crafted packet may lead to an out-of-bounds read...5.3 Medium
- dhc-vision eqmsDHC Vision eQMS through 5.4.8.322 has Persistent XSS due to insufficient encoding of untrusted...5.4 Medium
- shopware b2b suiteAn issue was discovered in Shopware B2B-Suite through 4.4.1. The sort-by parameter of the search...6.5 Medium
- nttr goo blogNTT Resonant Incorporated goo blog App Web Application 1.0 is vulnerable to CLRF injection. This...9.8 Critical
- kreado kreasferoAn SQL Injection vulnerabilty exists in Kreado Kreasfero 1.5 via the id parameter.7.5 High
- student attendance management system project attendance management systemA File Upload vulnerability exists in Sourcecodester Student Attendance Manageent System 1.0 via...9.8 Critical
- student attendance management system project attendance management systemA Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Student Attendance...5.4 Medium
- globalsuzuki suzuki connectSuzuki Connect v1.0.15 allows attackers to tamper with displayed messages via spoofed CAN messages.4.6 Medium
- sophos firewall, sfos +1 moreAn information disclosure vulnerability in Webadmin allows an unauthenticated remote attacker to...5.3 Medium
libdatetime-timezone-perlDebianlibdatetime-timezone-perl - new upstream versionNo scoretzdataDebiantzdata - new timezone databaseNo score- nuuo network video recorder firmwareUNNO v03.11.00 was discovered to contain access control issue.9.8 Critical
- saltstack saltSaltStack Salt Permissions Bypass8.8 High
- saltstack saltSaltStack Salt Authentication Bypass by Capture-replay8.8 High
- saltstack saltSaltStack Salt Improper Authentication via Man in the Middle Attack3.7 Low
- saltstack saltSaltStack Improper Verification of Cryptographic Signature8.8 High
- qemuGuest driver might execute HW commands when shared buffers are not yet allocated, potentially...8.8 High
- boom-core risvc-boomBOOM: The Berkeley Out-of-Order RISC-V Processor commit d77c2c3 was discovered to allow...5.5 Medium
- tp-link tl-wr840n firmwareTP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the...7.2 High
- tp-link tl-wr840n firmwareTP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the httpRemotePort...7.2 High
- tp-link tl-wr840n firmwareTP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the minAddress...7.2 High
- tp-link tl-wr840n firmwareTP-LINK TL-WR840N(ES)_V6.20 was discovered to contain a buffer overflow via the DNSServers...7.2 High
- technitium dns serverA vulnerability in the bailiwick checking function in Technitium DNS Server <= v7.0 exists that...4.3 Medium
- debian linux, long range zip project range zip +1 morelrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the...5.5 Medium
- orckestra c1 cms, c1-cms-foundation +1 moreDeserialization of untrusted data in C1 CMS.7.6 High
- libarchive, fedoraproject fedora +1 moreLibarchive v3.6.0 was discovered to contain an out-of-bounds read via the component...6.5 Medium
- diyhi bbsA File Upload vulnerability exists in bbs 5.3 is via ForumManageAction.java in a GetType function...7.2 High
- diyhi bbsA File Upload vulnerability exists in bbs 5.3 is via HelpManageAction.java in a GetType function,...7.2 High
- Show moreLoading…