Archive
7 March 2022
Vulnerabilities first published on this day (UTC), newest first.
128 results · Feed
-
Unscored —
TP-Link Omada SDN Software Controller before 5.0.15 does not check if the authentication method specified in a connecti…
-
Unscored —
otris Update Manager 1.2.1.0 allows local users to achieve SYSTEM access via unauthenticated calls to exposed interface…
-
Medium 5.5
Reachable Assertion in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. F…
-
Medium 5.4
Missing Authorization in salesagility/suitecrm
Missing Authorization in GitHub repository salesagility/suitecrm prior to 7.12.5.
-
High 7.8
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in co…
KEV Apr 25, 2022 -
High 7.1
Missing Authorization in salesagility/suitecrm
Missing Authorization in GitHub repository salesagility/suitecrm prior to 7.12.5.
-
Unscored —CVE-2022-26521 Public exploit
Abantecart through 1.3.2 allows remote authenticated administrators to execute arbitrary code by uploading an executabl…
-
Unscored —
There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTT…