Skip to content
OpenAdvisories

Archive

3 March 2022

Vulnerabilities first published on this day (UTC), newest first.

← February 2022 2022 / March /3 April 2022 →
  1. 157
  2. 277
  3. 351
  4. 456
  5. 56
  6. 612
  7. 7128
  8. 874
  9. 9184
  10. 1042
  11. 1189
  12. 1210
  13. 138
  14. 1494
  15. 1597
  16. 16151
  17. 1753
  18. 18160
  19. 193
  20. 2013
  21. 2163
  22. 2223
  23. 23110
  24. 2431
  25. 2577
  26. 2613
  27. 279
  28. 28113
  29. 29105
  30. 30131
  31. 3145
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 7.4
    CVE-2021-38578

    Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.

    TianoCore EDK II edk2 edk2 Debian Ubuntu
  • High 7.8
    CVE-2021-3762

    Path traversal in claircore

    A directory traversal vulnerability was found in the ClairCore engine of Clair. An attacker can exploit this by supplying a crafted container image which, when scanned by Clair, allows for arbitrary file write on the filesystem, potentially allowing for remot…

    github.com/quay/claircore Go
  • High 7.3
    CVE-2022-0265 Public exploit

    Improper Restriction of XML External Entity Reference in hazelcast/hazelcast

    Improper Restriction of XML External Entity Reference in GitHub repository hazelcast/hazelcast in 5.1-BETA-1.

    hazelcast hazelcast/hazelcast com.hazelcast:hazelcast Maven
  • High 8.8
    CVE-2022-24724

    Integer overflow in table parsing extension leads to heap memory corruption

    cmark-gfm is GitHub's extended version of the C reference implementation of CommonMark. Prior to versions 0.29.0.gfm.3 and 0.28.3.gfm.21, an integer overflow in cmark-gfm's table row parsing `table.c:row_from_string` may lead to heap memory corruption when pa…

    GitHub cmark-gfm ruby-commonmarker python-cmarkgfm Debian Ubuntu
  • High —
    GHSA-v3wr-67px-44xg

    Execution with Unnecessary Privileges in arc-electron

    ### Impact When the end-user click on the response header that contains a link the target will be opened in ARC new window. This window will have the default preload script loaded which allows the scripts embedded in the link target to execute any logic that …

    @advanced-rest-client/base npm
  • High 7.8
    CVE-2022-26129

    Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the subtlv length in the functi…

    frr frr frr Debian Ubuntu Alpine
  • High 7.8
    CVE-2022-22706 Exploited Public exploit

    Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects…

    KEV Mar 30, 2023
  • High 7.8
    CVE-2022-0492 Exploited Public exploit

    A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. T…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
    KEV Jun 2, 2026
  • High 7.5
    CVE-2022-23648 Public exploit EPSS 27%

    Insecure handling of image volumes in containerd CRI plugin

    containerd is a container runtime available as a daemon for Linux and Windows. A bug was found in containerd prior to versions 1.6.1, 1.5.10, and 1.14.12 where containers launched through containerd’s CRI implementation on Linux with a specially-crafted image…

    containerd containerd ctop containerd Debian Ubuntu Alpine Wolfi Go
  • High 7.5
    CVE-2022-21716

    Buffer Overflow in Twisted

    Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 22.2.0, Twisted SSH client and server implement is able to accept an infinite amount of data for the peer's SSH version identifier. This ends up with a buffer usin…

    twisted twisted twisted twisted Debian Ubuntu Alpine PyPI
  • High 7.5
    CVE-2022-26125

    Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the input packet length in isis…

    frr frr frr Debian Ubuntu Alpine