Skip to content
OpenAdvisories

Archive

3 March 2022

Vulnerabilities first published on this day (UTC), newest first.

← February 2022 2022 / March /3 April 2022 →
  1. 157
  2. 277
  3. 351
  4. 456
  5. 56
  6. 612
  7. 7128
  8. 874
  9. 9184
  10. 1042
  11. 1189
  12. 1210
  13. 138
  14. 1494
  15. 1597
  16. 16151
  17. 1753
  18. 18160
  19. 193
  20. 2013
  21. 2163
  22. 2223
  23. 23110
  24. 2431
  25. 2577
  26. 2613
  27. 279
  28. 28113
  29. 29105
  30. 30131
  31. 3145
All Critical High Medium Low Exploited only Public exploit

51 results · Feed

  • Medium 5.4
    CVE-2022-24563

    Cross-site Scripting in GeniXCMS

    In Genixcms v1.1.11, a stored Cross-Site Scripting (XSS) vulnerability exists in /gxadmin/index.php?page=themes&view=options" via the intro_title and intro_image parameters.

    genix/cms Packagist
  • High 7.8
    CVE-2022-0492 Exploited Public exploit

    A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. T…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
    KEV Jun 2, 2026
  • Unscored —
    CVE-2022-0730

    Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.

    cacti cacti cacti Debian Ubuntu Alpine
  • High 7.5
    CVE-2022-23648 Public exploit EPSS 27%

    Insecure handling of image volumes in containerd CRI plugin

    containerd is a container runtime available as a daemon for Linux and Windows. A bug was found in containerd prior to versions 1.6.1, 1.5.10, and 1.14.12 where containers launched through containerd’s CRI implementation on Linux with a specially-crafted image…

    containerd containerd ctop containerd Debian Ubuntu Alpine Wolfi Go
  • High 7.5
    CVE-2022-21716

    Buffer Overflow in Twisted

    Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 22.2.0, Twisted SSH client and server implement is able to accept an infinite amount of data for the peer's SSH version identifier. This ends up with a buffer usin…

    twisted twisted twisted twisted Debian Ubuntu Alpine PyPI
  • Critical 10.0
    CVE-2022-22947 Exploited Public exploit Scanner template EPSS 98%

    Spring Cloud Gateway vulnerable to Code Injection when Gateway Actuator endpoint enabled, exposed, unsecured

    In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could al…

    org.springframework.cloud:spring-cloud-gateway Maven
    KEV May 16, 2022
  • Unscored —
    CVE-2022-26126

    Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to the use of strdup with a non-zero-terminated bi…

    frr frr frr Debian Ubuntu Alpine
  • High 7.5
    CVE-2022-26125

    Buffer overflow vulnerabilities exist in FRRouting through 8.1.0 due to wrong checks on the input packet length in isis…

    frr frr frr Debian Ubuntu Alpine
  • Unscored —
    CVE-2021-3638

    An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. This flaw occurs in the ati_2d_b…

    qemu qemu qemu Virtualization Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2021-26948

    Null pointer dereference in the htmldoc v1.9.11 and before may allow attackers to execute arbitrary code and cause a de…

    htmldoc htmldoc Debian Ubuntu
  • Unscored —
    CVE-2021-26259

    A flaw was found in htmldoc in v1.9.12. Heap buffer overflow in render_table_row(),in ps-pdf.cxx may lead to arbitrary …

    htmldoc htmldoc Debian Ubuntu