Skip to content
OpenAdvisories

Archive

7 March 2022

Vulnerabilities first published on this day (UTC), newest first.

← February 2022 2022 / March /7 April 2022 →
  1. 157
  2. 277
  3. 351
  4. 456
  5. 56
  6. 612
  7. 7128
  8. 874
  9. 9184
  10. 1042
  11. 1189
  12. 1210
  13. 138
  14. 1494
  15. 1597
  16. 16151
  17. 1753
  18. 18160
  19. 193
  20. 2013
  21. 2163
  22. 2223
  23. 23110
  24. 2431
  25. 2577
  26. 2613
  27. 279
  28. 28113
  29. 29105
  30. 30131
  31. 3145
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Medium 6.1
    CVE-2021-36809

    A local attacker can overwrite arbitrary files on the system with VPN client logs using administrator privileges, poten…

    Sophos SSL VPN client Network devices
  • Medium 6.5
    CVE-2022-24737

    Exposure of Sensitive Information to an Unauthorized Actor in httpie

    HTTPie is a command-line HTTP client. HTTPie has the practical concept of sessions, which help users to persistently store some of the state that belongs to the outgoing requests and incoming responses on the disk for further usage. Before 3.1.0, HTTPie didn‘…

    httpie httpie httpie httpie Debian Ubuntu PyPI
  • Medium 6.5
    CVE-2022-26661

    Improper Restriction of XML External Entity Reference in trytond and proteus

    An XXE issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton Application Platform (Command Line Client (proteus)) 5.x through 5.0.11, 6.x through 6.0.4, and 6.1.x and…

    trytond tryton-server tryton-server tryton Debian Ubuntu PyPI
  • Medium —
    CVE-2022-26520

    pgjdbc Arbitrary File Write Vulnerability

    In pgjdbc before 42.3.3, an attacker (who controls the jdbc URL or properties) can call java.util.logging.FileHandler to write to arbitrary files through the loggerFile and loggerLevel connection properties. An example situation is that an attacker could crea…

    libpgjava org.postgresql:postgresql Debian Maven
  • Medium 6.1
    CVE-2022-22351

    IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged trusted host user to exploit a vulnerability in the ni…

    IBM AIX VIOS
  • Medium 6.2
    CVE-2021-38989

    IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kerne…

    IBM AIX VIOS
  • Medium 6.2
    CVE-2021-38988

    IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kerne…

    IBM AIX VIOS
  • Medium 6.1
    CVE-2022-25922

    ICSA-22-063-01 Missing Authentication for Critical Function in Trailer Power Line Communications (PLC) J2497

    Power Line Communications PLC4TRUCKS J2497 trailer brake controllers implement diagnostic functions which can be invoked by replaying J2497 messages. There is no authentication or authorization for these functions.

    Power Line Communications PLC4TRUCKS
  • Medium 6.5
    CVE-2021-32005

    SiteManager Log View XSS Issue

    Cross-site Scripting (XSS) vulnerability in log view of Secomea SiteManager allows a logged in user to store javascript for later execution. This issue affects: Secomea SiteManager Version 9.6.621421014 and all prior versions.

    Secomea SiteManager
  • Medium 5.0
    CVE-2021-32006

    GateManager information leak for LinkManager Users

    This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Permission Issues vulnerability in LinkManager web portal of Secomea GateManager allows logged in LinkManager user to access stored SiteManager backup files.

    Secomea GateManager
  • Medium 6.1
    CVE-2021-4198

    messaging_ipc.dll NULL Pointer Dereference in multiple Bitdefender products (VA-10016)

    A NULL Pointer Dereference vulnerability in the messaging_ipc.dll component as used in Bitdefender Total Security, Internet Security, Antivirus Plus, Endpoint Security Tools, VPN Standalone allows an attacker to arbitrarily crash product processes and generat…

    Bitdefender Total Security Antivirus Plus Internet Security
  • Medium 6.5
    CVE-2022-0766

    Server-Side Request Forgery (SSRF) in janeczku/calibre-web

    Server-Side Request Forgery (SSRF) in GitHub repository janeczku/calibre-web prior to 0.6.17.

    janeczku janeczku/calibre-web calibreweb PyPI
  • Medium 5.5
    CVE-2022-0865

    Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. F…

    LibTIFF LibTIFF tiff tiff Debian Ubuntu Azure Linux Alpine
  • Medium 5.4
    CVE-2022-0756

    Missing Authorization in salesagility/suitecrm

    Missing Authorization in GitHub repository salesagility/suitecrm prior to 7.12.5.

    salesagility salesagility/suitecrm