CVEs published in March 2022
2,440 vulnerabilities, 400 critical, 18 exploited.
- joomla joomla\!, joomla! project cms, joomla/archive +2 more[20220301] - Core - Zip Slip within the Tar extractor7.5 High
- profelis sambaboxAuthenticated Command Injection to RCE3.8 Low
- profelis sambaboxStored Cross-Site Scripting (XSS)3.8 Low
- snipe snipe/snipe-it, snipeitapp snipe-it +1 moreOld sessions are not blocked by the login enable function. in snipe/snipe-it7.4 High
- douco douphpDouPHP v1.6 Release 20220121 is affected by Cross Site Scripting (XSS) through /admin/login.php...6.1 Medium
- open-emr openemr, openemr openemr/openemr +1 moreNon-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in openemr/openemr4.6 Medium
- open-emr openemr, openemr openemr/openemr +1 moreReflected Cross Site Scripting in openemr/openemr4.6 Medium
- open-emr openemr, openemr openemr/openemr +1 moreStored Cross Site Scripting in openemr/openemr8.0 High
- open-emr openemr, openemr openemr/openemr +1 moreAccounting User Can Download Patient Reports in openemr in openemr/openemr6.5 Medium
- open-emr openemr, openemr openemr/openemr +1 moreStored Cross Site Scripting in openemr/openemr7.3 High
- ruoyiIn RuoYi v4.7.2 through the WebUI, user test1 does not have permission to reset the password of...6.5 Medium
- ruoyiRuoYi v4.7.2 contains a CSV injection vulnerability through ruoyi-admin when a victim opens .xlsx...7.8 High
- gpac, gpac gpac/gpac +1 moreNull Pointer Dereference Caused Segmentation Fault in gpac/gpac5.6 Medium
- apache dolphinschedulerApache DolphinScheduler user registration is vulnerable to ReDoS attacks7.5 High
- mineweb mineweb/minewebcms, minewebcms +1 moreCross-site Scripting (XSS) - Stored in mineweb/minewebcms6.8 Medium
- waycrate swhkdData Loss/Denial of Service in SWHKD7.1 High
- baicells neutrino 430 firmware, nova436q firmware +1 moreBaicells Nova436Q and Neutrino 430 devices with firmware through QRTB 2.7.8 have hardcoded...9.8 Critical
- nexusphpSQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute...9.8 Critical
- nexusphpSQL injection vulnerability in modrules.php in NexusPHP 1.5 allows remote attackers to execute...9.8 Critical
- nexusphpIncorrect access control in NexusPHP 1.5.beta5.20120707 allows unauthorized attackers to access...7.5 High
fluent-bitOSS-FuzzHeap-buffer-overflow in add_compile_stringNo scorefluent-bitOSS-FuzzSegv on unknown address in flb_ra_translateNo score- mediawikiAn issue was discovered in Mediawiki through 1.37.1. The check for the override-antispoof...9.8 Critical
- mediawikiAn issue was discovered in MediaWiki through 1.37.1. ImportPlanValidator.php in the FileImporter...9.8 Critical
- mediawikiAn issue was discovered in MediaWiki through 1.37.1. The CentralAuth extension mishandles a ttl...9.8 Critical
- mediawiki, debian linux, fedoraproject fedora +2 moreAn XSS issue was discovered in MediaWiki before 1.35.6, 1.36.x before 1.36.4, and 1.37.x before 1...6.1 Medium
- teluu pjsip, debian linux, pjsip pjproject +2 moreInfinite Loop in PJSIP7.5 High
- vim, vim vim/vim, fedoraproject fedora +2 moreheap buffer overflow in get_one_sourceline in vim/vim7.3 High
- vim, vim vim/vim, debian linux +2 more +4 moreUse after free in utf_ptr2char in vim/vim7.8 High
- linux kernel, redhat enterprise linux +1 moreA flaw was found in the Linux kernels implementation of audit rules, where a syscall can...3.4 Low
- rsa archerIn RSA Archer 6.9.SP1 P3, if some application functions are precluded by the Administrator, this...6.5 Medium
- rsa archerArcher 6.x through 6.10 (6.10.0.0) contains a reflected XSS vulnerability. A remote SAML...6.5 Medium
- rsa archerArcher 6.x through 6.9 P2 (6.9.0.2) is affected by an open redirect vulnerability. A remote...5.4 Medium
- rsa archerArcher 6.x through 6.9 SP2 P1 (6.9.2.1) contains an improper access control vulnerability on...5.3 Medium
- rsa archerThe Archer RSS feed integration for Archer 6.x through 6.9 SP1 (6.9.1.0) is affected by an...5.8 Medium
- rsa archerArcher 6.x through 6.9 SP3 (6.9.3.0) contains a reflected XSS vulnerability. A remote...6.3 Medium
- pluck-cms pluckA Cross-Site Request Forgery (CSRF) in Pluck CMS v4.7.15 allows attackers to change the password...8.8 High
- waycrate swhkdInsecure Temporary File in SWHKD7.8 High
- yubico ykneo-openpgpYubico ykneo-openpgp before 1.0.10 has a typo in which an invalid PIN can be used. When first...8.8 High
- hospital\'s patient records management system project patient records management systemA stored cross-site scripting (XSS) vulnerability in Hospital Patient Record Management System v1...5.4 Medium
- textpatterntextpattern 4.8.7 is vulnerable to Cross Site Scripting (XSS) via /textpattern/index.php,Body. A...8.3 High
- trend micro apex central, trend micro, inc. micro apex central, trendmicro apex one +2 moreAn arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated...9.8 Critical
- nvidia cuda toolkitNVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this...7.8 High
- draytek vigor2960 firmware, vigor300b firmware, vigor3900 firmware +2 moreA Remote Command Injection vulnerability exists in DrayTek Vigor 2960 1.5.1.3, DrayTek Vigor 3900...9.8 Critical
- draytek vigor2960 firmware, vigor300b firmware, vigor3900 firmware +2 moreA Format String vulnerability exists in DrayTek Vigor 2960 <= 1.5.1.3, DrayTek Vigor 3900 <= 1.5...9.8 Critical
- puneethreddyhc online-shopping-system project online-shopping-systemAn Access Conrol vulnerability exists in PuneethReddyHC online-shopping-system as of 11/01/2021...9.8 Critical
- puneethreddyhc online-shopping-system project online-shopping-systemAn SQL Injection vulnerability exits in PuneethReddyHC online-shopping-system as of 11/01/2021...7.5 High
- uclouvain openjpeg, debian linux, fedoraproject fedora +2 moreA flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it handles an input...5.5 Medium
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains an information disclosure vulnerability due to improper permission of...6.5 Medium
- cxuu cxuucmsCross Site Scripting (XSS) vulnerability exists in cxuucms v3 via the imgurl of /feedback/post/...6.1 Medium
- Show moreLoading…