CVEs published in March 2022
2,440 vulnerabilities, 400 critical, 18 exploited.
- google androidIn NFC, there is a possible memory corruption due to a use after free. This could lead to local...7.8 High
- google androidIn People, there is a possible way to determine whether an app is installed, without query...5.5 Medium
- google androidIn Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could...5.5 Medium
- google androidIn VpnManagerService, there is a possible disclosure of installed VPN packages due to side...5.5 Medium
- google androidIn Bluetooth, there is a possible way to access the a2dp audio control switch due to a missing...8.8 High
- google androidIn Settings, there is a possible way to misrepresent which app wants to add a wifi network due to...7.8 High
- google androidIn Framework, there is a possible disclosure of the device owner package due to a missing...5.5 Medium
- google androidIn Device Policy, there is a possible way to determine whether an app is installed, without query...5.5 Medium
- google androidIn Settings, there is a possible way to add an auto-connect WiFi network without the user's...7.8 High
- google androidIn miniadb, there is a possible way to get read/write access to recovery system properties due to...7.8 High
- google androidIn Settings, there is a possible way to determine whether an app is installed, without query...5.5 Medium
- google androidIn Gallery, there is a possible permission bypass due to a confused deputy. This could lead to...5.5 Medium
- google androidIn Settings, there is a possible way to display an incorrect app name due to improper input...7.8 High
- google androidIn Settings, there is a possible way to make the user enable WiFi due to improper input...7.8 High
- google androidIn tremolo, there is a possible out of bounds read due to an integer overflow. This could lead to...7.5 High
- google androidIn Media, there is a possible way to determine whether an app is installed, without query...5.5 Medium
- google androidIn AudioService, there is a possible way to determine whether an app is installed, without query...5.5 Medium
- google androidIn libstagefright, there is a possible out of bounds write due to an integer overflow. This could...7.8 High
- google androidIn WindowManager, there is a possible way to start a foreground activity from the background due...7.8 High
- google androidIn PermissionController, there is a possible permission bypass due to an unsafe PendingIntent....5.5 Medium
- google androidIn Framework, there is a possible way to determine whether an app is installed, without query...5.5 Medium
- google androidIn DevicePolicyManager, there is a possible way to reveal the existence of an installed package...5.5 Medium
- google androidIn DomainVerificationService, there is a possible way to access app domain verification...5.5 Medium
- google androidIn Bubbles, there is a possible way to interfere with Bubbles due to a permissions bypass. This...7.8 High
- google androidIn Settings, there is a possible way to read Bluetooth device names without proper permissions...5.5 Medium
- google androidIn PackageManager, there is a possible way to change the splash screen theme of other apps due to...7.8 High
- google androidIn WindowManager, there is a possible way to start non-exported and protected activities due to a...7.8 High
- google androidIn InputMethodEditor, there is a possible way to access some files accessible to Settings due to...5.5 Medium
- google androidIn Settings Provider, there is a possible way to list values of non-readable global settings due...5.5 Medium
- google androidIn PermissionController, there is a possible way to delete some local files due to an unsafe...7.8 High
- google androidIn DevicePolicyManager, there is a possible way to determine whether an app is installed, without...5.5 Medium
- google androidIn DevicePolicyManager, there is a possible way to determine whether an app is installed, without...5.5 Medium
- google androidIn PackageManager, there is a possible way to update the last usage time of another package due...7.8 High
- google androidIn Voicemail, there is a possible way to retrieve a trackable identifier due to a missing...5.5 Medium
- google androidIn Keymaster, there is a possible out of bounds write due to a missing bounds check. This could...7.8 High
- google androidIn Messaging, there is a possible way to bypass attachment restrictions due to improper input...5.5 Medium
- google androidIn ArrayMap, there is a possible leak of the content of SMS messages due to log information...3.3 Low
- google androidIn createGeneralSlice of ConnectedDevicesSliceProvider.java.java, there is a possible permission...7.8 High
- google androidIn createBluetoothDeviceSlice of ConnectedDevicesSliceProvider.java, there is a possible...7.8 High
- zte zxhn f680 firmwareThere is a stored XSS vulnerability in ZTE home gateway product. An attacker could modify the...5.4 Medium
- theforeman smart proxy saltAn improper authorization handling flaw was found in Foreman. The Salt plugin for the smart-proxy...7.1 High
- sonatype nexus repository managerSonatype Nexus Repository Manager 3.x before 3.38.0 allows SSRF.4.3 Medium
- joomla joomla\!, joomla! project cms +1 more[20220309] - Core - XSS attack vector through SVG6.1 Medium
- joomla joomla\!, joomla! project cms, joomla/filter +2 more[20220308] - Core - Inadequate content filtering within the filter code6.1 Medium
- joomla joomla\!, joomla! project cms, joomla/input +2 more[20220307] - Core - Variable Tampering on JInput $_REQUEST data9.8 Critical
- joomla joomla\!, joomla! project cms +1 more[20220306] - Core - Inadequate validation of internal URLs6.1 Medium
- joomla joomla\!, joomla! project cms +1 more[20220305] - Core - Inadequate filtering on the selected Ids9.8 Critical
- joomla joomla\!, joomla! project cms +1 more[20220304] - Core - Missing input validation within com_fields class inputs6.1 Medium
- joomla joomla\!, joomla! project cms +1 more[20220303] - Core - User row are not bound to a authentication mechanism9.8 Critical
- joomla joomla\!, joomla! project cms, joomla/filesystem +2 more[20220302] - Core - Path Disclosure within filesystem error messages5.3 Medium
- Show moreLoading…