Skip to content
OpenAdvisories

Archive

4 March 2022

Vulnerabilities first published on this day (UTC), newest first.

← February 2022 2022 / March /4 April 2022 →
  1. 157
  2. 277
  3. 351
  4. 456
  5. 56
  6. 612
  7. 7128
  8. 874
  9. 9184
  10. 1042
  11. 1189
  12. 1210
  13. 138
  14. 1494
  15. 1597
  16. 16151
  17. 1753
  18. 18160
  19. 193
  20. 2013
  21. 2163
  22. 2223
  23. 23110
  24. 2431
  25. 2577
  26. 2613
  27. 279
  28. 28113
  29. 29105
  30. 30131
  31. 3145
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.2
    CVE-2022-23915

    Remote Code Execution (RCE)

    The package weblate from 0 and before 4.11.1 are vulnerable to Remote Code Execution (RCE) via argument injection when using git or mercurial repositories. Authenticated users, can change the behavior of the application in an unintended way, leading to comman…

    weblate PyPI
  • High 7.4
    CVE-2022-0855

    Improper Resolution of Path Equivalence in microweber-dev/whmcs_plugin

    Improper Resolution of Path Equivalence in GitHub repository microweber-dev/whmcs_plugin prior to 0.0.4.

    microweber-dev microweber-dev/whmcs_plugin
  • High 7.8
    CVE-2021-20319

    coreos-installer improperly verifies GPG signature when decompressing gzipped artifact

    An improper signature verification vulnerability was found in coreos-installer. A specially crafted gzip installation image can bypass the image signature verification and as a consequence can lead to the installation of unsigned content. An attacker able to …

    coreos-installer crates.io
  • High 7.3
    CVE-2022-0839

    Improper Restriction of XML External Entity Reference in liquibase/liquibase

    Improper Restriction of XML External Entity Reference in GitHub repository liquibase/liquibase prior to 4.8.0.

    liquibase liquibase/liquibase org.liquibase:liquibase-core Maven
  • High 8.8
    CVE-2020-18326 Public exploit

    Cross Site Request Forgery in intelliants/subrion

    Cross Site Request Forgery (CSRF) vulnerability exists in Intelliants Subrion CMS v4.2.1 via the Members administrator function, which could let a remote unauthenticated malicious user send an authorised request to victim and successfully create an arbitrary …

    intelliants/subrion Packagist
  • High 7.5
    CVE-2022-23328

    Denial of Service in Go-Ethereum

    A design flaw in all versions of Go-Ethereum allows an attacker node to send 5120 pending transactions of a high gas price from one account that all fully spend the full balance of the account to a victim Geth node, which can purge all of pending transactions…

    github.com/ethereum/go-ethereum Go
  • High 7.5
    CVE-2022-23327

    Denial of Service in Go-Ethereum

    A design flaw in Go-Ethereum 1.10.12 and older versions allows an attacker node to send 5120 future transactions with a high gas price in one message, which can purge all of pending transactions in a victim node's memory pool, causing a denial of service (DoS…

    github.com/ethereum/go-ethereum Go
  • High 7.5
    CVE-2021-3737 EPSS 13%

    A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote at…

    python3.4 python3.5 python3.6 python3.8 Debian Ubuntu