Skip to content
OpenAdvisories

Archive

6 March 2022

Vulnerabilities first published on this day (UTC), newest first.

← February 2022 2022 / March /6 April 2022 →
  1. 157
  2. 277
  3. 351
  4. 456
  5. 56
  6. 612
  7. 7128
  8. 874
  9. 9184
  10. 1042
  11. 1189
  12. 1210
  13. 138
  14. 1494
  15. 1597
  16. 16151
  17. 1753
  18. 18160
  19. 193
  20. 2013
  21. 2163
  22. 2223
  23. 23110
  24. 2431
  25. 2577
  26. 2613
  27. 279
  28. 28113
  29. 29105
  30. 30131
  31. 3145
All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • Low 3.4
    CVE-2022-0697

    Open Redirect in archivy/archivy

    Open Redirect in GitHub repository archivy/archivy prior to 1.7.0.

    archivy archivy/archivy archivy PyPI
  • Unscored —
    CVE-2021-44421

    The pointer-validation logic in util/mem_util.rs in Occlum before 0.26.0 for Intel SGX acts as a confused deputy that a…

  • Medium 5.5
    CVE-2021-44749

    Universal Cross-Site Scripting Vulnerability in F-Secure SAFE Browser Protection for Android

    A vulnerability affecting F-Secure SAFE browser protection was discovered improper URL handling can be triggered to cause universal cross-site scripting through browsing protection in a SAFE web browser. User interaction is required prior to exploitation. A s…

    F-Secure F-Secure SAFE Browser for Android Version 18.5 Android
  • Medium 5.5
    CVE-2021-44748

    Universal Cross-Site Scripting Vulnerability in F-Secure SAFE Browser for Android

    A vulnerability affecting F-Secure SAFE browser was discovered whereby browsers loads images automatically this vulnerability can be exploited remotely by an attacker to execute the JavaScript can be used to trigger universal cross-site scripting through the …

    F-Secure F-Secure SAFE Browser for Android Version 18.5 Android
  • High 8.0
    CVE-2022-0868

    Open Redirect in medialize/uri.js

    Open Redirect in GitHub repository medialize/uri.js prior to 1.19.10.

    medialize medialize/URI.js urijs npm
  • Medium 4.3
    CVE-2022-0869 Scanner template

    Multiple Open Redirect in nitely/spirit

    Multiple Open Redirect in GitHub repository nitely/spirit prior to 0.12.3.

    nitely nitely/spirit django-spirit PyPI
  • Critical 9.8
    CVE-2021-46704 Public exploit Scanner template EPSS 22%

    OS Command Injection in GenieACS

    In GenieACS 1.2.x before 1.2.8, the UI interface API is vulnerable to unauthenticated OS command injection via the ping host argument (lib/ui/api.ts and lib/ping.ts). The vulnerability arises from insufficient input validation combined with a missing authoriz…

    genieacs npm
  • Critical 9.8
    CVE-2021-46703 Public exploit

    Code injection in RazorEngine

    In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxed environment (if users can externally control template contents). NOTE: This vulnerability only affects products that…

    RazorEngine NuGet
  • Unscored —
    CVE-2022-26490

    st21nfca_connectivity_event_received in drivers/nfc/st21nfca/se.c in the Linux kernel through 5.16.12 has EVT_TRANSACTI…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2022-26495

    In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer overflow. A value of …

    nbd nbd nbd Debian Ubuntu Alpine
  • Unscored —
    CVE-2022-26496

    In nbd-server in nbd before 3.24, there is a stack-based buffer overflow. An attacker can cause a buffer overflow in th…

    nbd nbd nbd Debian Ubuntu Alpine
  • Unscored —
    CVE-2022-26505

    A DNS rebinding issue in ReadyMedia (formerly MiniDLNA) before 1.3.1 allows a remote web server to exfiltrate media fil…

    minidlna minidlna minidlna Debian Ubuntu Alpine