Skip to content
OpenAdvisories

Archive

10 March 2022

Vulnerabilities first published on this day (UTC), newest first.

← February 2022 2022 / March /10 April 2022 →
  1. 157
  2. 277
  3. 351
  4. 456
  5. 56
  6. 612
  7. 7128
  8. 874
  9. 9184
  10. 1042
  11. 1189
  12. 1210
  13. 138
  14. 1494
  15. 1597
  16. 16151
  17. 1753
  18. 18160
  19. 193
  20. 2013
  21. 2163
  22. 2223
  23. 23110
  24. 2431
  25. 2577
  26. 2613
  27. 279
  28. 28113
  29. 29105
  30. 30131
  31. 3145
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 7.1
    CVE-2022-0821

    Improper Authorization in orchardcms/orchardcore

    Improper Authorization in GitHub repository orchardcms/orchardcore prior to 1.3.0.

    OrchardCMS orchardcms/orchardcore
  • High 7.5
    CVE-2022-25512

    Exposure of Sensitive Information to an Unauthorized Actor in FreeTAKServer-UI

    FreeTAKServer-UI v1.9.8 was discovered to leak sensitive API and Websocket keys.

    freetakserver-ui PyPI
  • High 8.8
    CVE-2022-25510

    Hard coded credentials in FreeTAKServer

    FreeTAKServer 1.9.8 contains a hardcoded Flask secret key which allows attackers to create crafted cookies to bypass authentication or escalate privileges.

    freetakserver PyPI
  • High 7.5
    CVE-2022-25508

    Improper Authentication in FreeTAKServer

    An access control issue in the component /ManageRoute/postRoute of FreeTAKServer v1.9.8 allows unauthenticated attackers to cause a Denial of Service (DoS) via an unusually large amount of created routes, or create unsafe or false routes for legitimate users.

    freetakserver PyPI
  • High 7.5
    CVE-2022-0280

    McAfee Total Protection (MTP) - File Deletion vulnerability

    A race condition vulnerability exists in the QuickClean feature of McAfee Total Protection for Windows prior to 16.0.43 that allows a local user to gain privilege elevation and perform an arbitrary file delete. This could lead to sensitive files being deleted…

    McAfee McAfee Total Protection for Windows Windows
  • High 7.5
    CVE-2022-24726

    Unauthenticated control plane denial of service attack in Istio

    Istio is an open platform to connect, manage, and secure microservices. In affected versions the Istio control plane, istiod, is vulnerable to a request processing error, allowing a malicious attacker that sends a specially crafted message which results in th…

    istio istio
  • High 8.8
    CVE-2021-44673 Public exploit

    Unrestricted Upload of File with Dangerous Type in Croogo

    A Remote Code Execution (RCE) vulnerability exists in Croogo 3.0.2via admin/file-manager/attachments, which lets a malicoius user upload a web shell script.

    croogo/croogo Packagist
  • High 7.7
    CVE-2022-0895

    Static Code Injection in microweber/microweber

    Static Code Injection in GitHub repository microweber/microweber prior to 1.3.

    microweber microweber/microweber microweber/microweber Packagist
  • High 7.5
    CVE-2021-38296

    Apache Spark Key Negotiation Vulnerability

    Apache Spark supports end-to-end encryption of RPC connections via "spark.authenticate" and "spark.network.crypto.enabled". In versions 3.1.2 and earlier, it uses a bespoke mutual authentication protocol that allows for full encryption key recovery. After an …

    Apache Software Foundation Apache Spark pyspark org.apache.spark:spark-core Maven PyPI
  • High 8.8
    CVE-2022-24750

    Low privilege user is able to exploit the service and gain SYSTEM privileges in UltraVNC server

    UltraVNC is a free and open source remote pc access software. A vulnerability has been found in versions prior to 1.3.8.0 in which the DSM plugin module, which allows a local authenticated user to achieve local privilege escalation (LPE) on a vulnerable syste…

    UltraVNC UltraVNC