Archive

9 March 2022

Vulnerabilities first published on this day (UTC), newest first.

← February 2022 2022 / March /9 April 2022 →

All Critical High Medium Low Exploited only Public exploit

184 results · Feed

Unscored —

CVE-2022-25558

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetProvince. This vulnerability al…

Mar 9, 2022
Unscored —

CVE-2022-25556

Tenda AX12 v22.03.01.21 was discovered to contain a stack overflow in the function sub_42E328. This vulnerability allow…

Mar 9, 2022
Unscored —

CVE-2022-25555

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability all…

Mar 9, 2022
Unscored —

CVE-2022-25547

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability all…

Mar 9, 2022
Unscored —

CVE-2022-25554

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerabil…

Mar 9, 2022
Unscored —

CVE-2022-25553

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS. This vulnerability…

Mar 9, 2022
Unscored —

CVE-2022-25552

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function form_fast_setting_wifi_set. This vulne…

Mar 9, 2022
Unscored —

CVE-2022-25551

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS. This vulnerability…

Mar 9, 2022
Unscored —

CVE-2022-25550

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function saveParentControlInfo. This vulnerabil…

Mar 9, 2022
Unscored —

CVE-2022-25549

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS. This vulnerability…

Mar 9, 2022
Unscored —

CVE-2022-25548

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime. This vulnerability all…

Mar 9, 2022
Unscored —

CVE-2022-25546 EPSS 12%

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS. This vulnerability…

Mar 9, 2022
Unscored —

CVE-2022-25368

Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history (stored in the CPU BHB) t…

Mar 9, 2022
Medium 4.1

CVE-2022-0022

PAN-OS: Use of a Weak Cryptographic Algorithm for Stored Password Hashes

Usage of a weak cryptographic algorithm in Palo Alto Networks PAN-OS software where the password hashes of administrator and local user accounts are not created with a sufficient level of computational effort, which allows for password cracking attacks on acc…

Palo Alto Networks PAN-OS Prisma Access Network devices

Mar 9, 2022
Medium 6.1

CVE-2022-24526

Visual Studio Code Spoofing Vulnerability

Visual Studio Code Spoofing Vulnerability

Microsoft Visual Studio Code

Mar 9, 2022
High 7.0

CVE-2022-24525

Windows Update Stack Elevation of Privilege Vulnerability

Windows Update Stack Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 21H2 Windows 11 version 21H2 Windows 10 Version 20H2 Windows

Mar 9, 2022
Medium 6.5

CVE-2022-24522

Skype Extension for Chrome Information Disclosure Vulnerability

Skype Extension for Chrome Information Disclosure Vulnerability

Microsoft Skype Extension for Chrome Browsers

Mar 9, 2022
High 7.2

CVE-2022-24520

Azure Site Recovery Remote Code Execution Vulnerability

Azure Site Recovery Remote Code Execution Vulnerability

Microsoft Azure Site Recovery VMWare to Azure

Mar 9, 2022
Medium 6.5

CVE-2022-24519

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Microsoft Azure Site Recovery VMWare to Azure

Mar 9, 2022
Medium 6.5

CVE-2022-24518

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Microsoft Azure Site Recovery VMWare to Azure

Mar 9, 2022
High 7.2

CVE-2022-24517

Azure Site Recovery Remote Code Execution Vulnerability

Azure Site Recovery Remote Code Execution Vulnerability

Microsoft Azure Site Recovery VMWare to Azure

Mar 9, 2022
Medium 6.5

CVE-2022-24515

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Microsoft Azure Site Recovery VMWare to Azure

Mar 9, 2022
Medium 6.3

CVE-2022-24512

.NET and Visual Studio Remote Code Execution Vulnerability

.NET and Visual Studio Remote Code Execution Vulnerability

Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) .NET 6.0 Microsoft Visual Studio 2022 version 17.0 NuGet

Mar 9, 2022
Medium 5.5

CVE-2022-24511

Microsoft Office Word Tampering Vulnerability

Microsoft Office Word Tampering Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC for Mac 2021

Mar 9, 2022
High 7.8

CVE-2022-24510

Microsoft Office Visio Remote Code Execution Vulnerability

Microsoft Office Visio Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office 2019

Mar 9, 2022
High 7.8

CVE-2022-24509

Microsoft Office Visio Remote Code Execution Vulnerability

Microsoft Office Visio Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office 2019

Mar 9, 2022
High 8.8

CVE-2022-24508

Win32 File Enumeration Remote Code Execution Vulnerability

Win32 File Enumeration Remote Code Execution Vulnerability

Microsoft Windows Server 2022 Windows 10 Version 21H2 Windows 11 version 21H2 Windows

Mar 9, 2022
High 7.8

CVE-2022-24507

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 9, 2022
Medium 6.5

CVE-2022-24506

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Microsoft Azure Site Recovery VMWare to Azure

Mar 9, 2022
High 7.0

CVE-2022-24505

Windows ALPC Elevation of Privilege Vulnerability

Windows ALPC Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 9, 2022
Medium 5.4

CVE-2022-24503

Remote Desktop Protocol Client Information Disclosure Vulnerability

Remote Desktop Protocol Client Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 9, 2022
Medium 4.3

CVE-2022-24502 EPSS 33%

Windows HTML Platforms Security Feature Bypass Vulnerability

Windows HTML Platforms Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Mar 9, 2022
High 7.8

CVE-2022-24501

VP9 Video Extensions Remote Code Execution Vulnerability

VP9 Video Extensions Remote Code Execution Vulnerability

Microsoft VP9 Video Extensions

Mar 9, 2022
High 7.2

CVE-2022-24471

Azure Site Recovery Remote Code Execution Vulnerability

Azure Site Recovery Remote Code Execution Vulnerability

Microsoft Azure Site Recovery VMWare to Azure

Mar 9, 2022
High 7.2

CVE-2022-24470

Azure Site Recovery Remote Code Execution Vulnerability

Azure Site Recovery Remote Code Execution Vulnerability

Microsoft Azure Site Recovery VMWare to Azure

Mar 9, 2022
High 8.1

CVE-2022-24469

Azure Site Recovery Elevation of Privilege Vulnerability

Azure Site Recovery Elevation of Privilege Vulnerability

Microsoft Azure Site Recovery VMWare to Azure

Mar 9, 2022
High 7.2

CVE-2022-24468

Azure Site Recovery Remote Code Execution Vulnerability

Azure Site Recovery Remote Code Execution Vulnerability

Microsoft Azure Site Recovery VMWare to Azure

Mar 9, 2022
High 7.2

CVE-2022-24467

Azure Site Recovery Remote Code Execution Vulnerability

Azure Site Recovery Remote Code Execution Vulnerability

Microsoft Azure Site Recovery VMWare to Azure

Mar 9, 2022
Low 3.3

CVE-2022-24465

Microsoft Intune Portal for iOS Security Feature Bypass Vulnerability

Microsoft Intune Portal for iOS Security Feature Bypass Vulnerability

Microsoft Intune Company Portal for iOS iOS

Mar 9, 2022
High 7.5

CVE-2022-24464

.NET and Visual Studio Denial of Service Vulnerability

.NET and Visual Studio Denial of Service Vulnerability

Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) .NET 6.0 Microsoft Visual Studio 2022 version 17.0 NuGet

Mar 9, 2022