CVEs published in March 2022
2,440 vulnerabilities, 400 critical, 18 exploited.
- oretnom23 banking systemOnline Banking System Protect v1.0 was discovered to contain multiple cross-site scripting (XSS)...6.1 Medium
- oretnom23 banking systemOnline Banking System Protect v1.0 was discovered to contain a local file inclusion (LFI)...9.8 Critical
- totolink a3100r firmwareIn Totolink A3100R V5.9c.4577, "test.asp" contains an API-like function, which is not...6.5 Medium
- totolink ex1200t firmware, ex300 v2 firmware +1 moretotolink EX300_v2 V4.0.3c.140_B20210429 and EX1200T V4.1.2cu.5230_B20210706 does not contain an...8.8 High
- oretnom23 banking systemA remote code execution (RCE) vulnerability in Online Banking System Protect v1.0 allows...9.8 Critical
- totolink a3100r firmwareIn totolink a3100r V5.9c.4577, the hard-coded telnet password can be discovered from official...8.8 High
- totolink a3100r firmwareIn Totolink A3100R V5.9c.4577, multiple pages can be read by curl or Burp Suite without...9.8 Critical
- totolink ar3100r firmwaretotolink a3100r V5.9c.4577 is vulnerable to os command injection. The backend of a page is...9.8 Critical
- totolink a3100r firmwareTotolink A3100R V5.9c.4577 suffers from Use of Insufficiently Random Values via the web...8.8 High
- softwareag mashzone nextgenMashZone NextGen through 10.7 GA allows a remote authenticated user, with access to the admin...7.2 High
openSUSE-build-keyopenSUSESecurity update for openSUSE-build-keyNo score- softwareag mashzone nextgenThe "Register an Ehcache Configuration File" admin feature in MashZone NextGen through 10.7 GA...7.2 High
- puma, debian linux, fedoraproject fedora +2 moreHTTP Request Smuggling in puma9.1 Critical
- softwareag mashzone nextgenMashZone NextGen through 10.7 GA has an SSRF vulnerability that allows an attacker to interact...7.2 High
- rsa archerIn RSA Archer 6.x through 6.9 SP3 (6.9.3.0), an authenticated attacker can make a GET request to...6.5 Medium
- vivoh webinar managerVivoh Webinar Manager before 3.6.3.0 has improper API authentication. When a user logs in to the...6.5 Medium
- jox project joxImproper Restriction of XML External Entity Reference in wutka jox9.8 Critical
- jfinaloa project jfinaloaAn SQL Injection vulnerability exists in glorylion JFinalOA as of 9/7/2021 in the defkey...6.5 Medium
- oasys project oasysAn SQL Injection vulnerability exists in oasys oa_system as of 9/7/2021 in resources/mappers...6.5 Medium
- owlet cam v2, wyze cam pan v2, cam v3 +3 more +5 moreAuthentication bypass in Wyze Cam Pan v2, Cam v2 and Cam v37.5 High
- owlet cam v2, wyze cam pan v2, cam v3 +3 more +5 moreStack buffer overflow in Wyze Cam Pan v2, Cam v2 and Cam v37.6 High
- mepsan usc+, stawiz usc\+\+ +1 moreWeak Authentication in Login Function of USC+7.7 High
drupal/cleantalkPackagistThis module provides integration with the CleanTalk spam protection service. The module does not properly filter data in certain circumstances. Update: 2022-03-31 - fix release node linksNo score- qingscan project qingscanQingScan 1.3.0 is affected by Cross Site Scripting (XSS) vulnerability in all search functions.6.1 Medium
- tekon kio-1m firmware, kio-2m firmware, kio-2md firmware +5 more +7 moreTekon KIO devices through 2022-03-30 allow an authenticated admin user to escalate privileges to...9.1 Critical
- vmware spring bootTemporary Directory Hijacking to Local Privilege Escalation Vulnerability in org.springframework.boot:spring-boot7.8 High
- phpshephpshe V1.8 is affected by a denial of service (DoS) attack in the registry's verification code,...7.5 High
- tibco managed file transfer platform server, tibco software inc. managed file transfer platform server for unix, managed file transfer platform server for z/linux +2 moreTIBCO Managed File Transfer Platform Server Remote Code Execution Vulnerability8.5 High
- firmware analysis and comparison tool project analysis and comparison toolAn issue was discovered in Firmware Analysis and Comparison Tool v3.2. Logged in administrators...8.8 High
- firmware analysis and comparison tool project analysis and comparison toolAn issue was discovered in Firmware Analysis and Comparison Tool v3.2. With administrator...4.8 Medium
- linux kernel, netapp h300e firmware, h300s firmware +6 more +8 moreAn integer overflow flaw was found in the Linux kernel’s virtio device driver code in the way a...7.8 High
- bosch autodome 7000 firmware, autodome ip 4000 hd firmware, autodome ip 4000i firmware +66 more +68 moreBuffer Overflow vulnerability in the recovery image web-based interface6.8 Medium
- bosch autodome 7000 firmware, autodome ip 4000 hd firmware, autodome ip 4000i firmware +66 more +68 moreBuffer Overflow vulnerability in the recovery image telnet server6.8 Medium
- sandisk professional g-raid 4/8 software utility, westerndigital sandisk professional g-raid 4\/8 software utility, sandisk professional g-raid 4\/8 software utility driver +2 moreSanDisk Professional G-RAID 4/8 Software Utility, Privilege Escalation7.8 High
- google androidIn ContextImpl, there is a possible way to determine whether an app is installed, without query...5.5 Medium
- google androidIn incfs, there is a possible way of mounting on arbitrary paths due to a missing permission...7.8 High
- google androidIn WallpaperManagerService, there is a possible way to determine whether an app is installed,...5.5 Medium
- google androidIn Dialer, there is a possible way to manipulate visual voicemail settings due to a missing...7.8 High
- google androidIn Telecom, there is a possible leak of TTY mode change due to a missing permission check. This...7.8 High
- google androidIn TelecomManager, there is a possible way to check if a particular self managed phone account...5.5 Medium
- google androidIn SystemUI, there is a possible arbitrary Activity launch due to a confused deputy. This could...7.8 High
- google androidIn NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to...6.7 Medium
- google androidIn CellBroadcastReceiver, there is a possible path to enable specific cellular features due to a...7.8 High
- google androidIn rcsservice, there is a possible way to modify TTY mode due to a missing permission check. This...7.8 High
- google androidIn Telephony, there is a possible unauthorized modification of the PLMN SIM file due to a missing...7.8 High
- google androidIn SmsController, there is a possible information disclosure due to a permissions bypass. This...7.8 High
- google androidIn Traceur, there is a possible bypass of developer settings requirements for capturing system...7.8 High
- google androidIn getCallStateUsingPackage of Telecom Service, there is a missing permission check. This could...5.5 Medium
- google androidIn Telecomm, there is a possible way to determine whether an app is installed, without query...5.5 Medium
- google androidIn Telephony, there is a possible way to determine whether an app is installed, without query...5.5 Medium
- Show moreLoading…