Skip to content
OpenAdvisories

Archive

14 March 2022

Vulnerabilities first published on this day (UTC), newest first.

← February 2022 2022 / March /14 April 2022 →
  1. 157
  2. 277
  3. 351
  4. 456
  5. 56
  6. 612
  7. 7128
  8. 874
  9. 9184
  10. 1042
  11. 1189
  12. 1210
  13. 138
  14. 1494
  15. 1597
  16. 16151
  17. 1753
  18. 18160
  19. 193
  20. 2013
  21. 2163
  22. 2223
  23. 23110
  24. 2431
  25. 2577
  26. 2613
  27. 279
  28. 28113
  29. 29105
  30. 30131
  31. 3145
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.1
    CVE-2022-24743

    Insufficient Session Expiration in Sylius

    Sylius is an open source eCommerce platform. Prior to versions 1.10.11 and 1.11.2, the reset password token was not set to null after the password was changed. The same token could be used several times, which could result in leak of the existing token and un…

    Sylius Sylius sylius/sylius Packagist
  • High 8.1
    CVE-2022-21187

    Command Injection

    The package libvcs before 0.11.1 are vulnerable to Command Injection via argument injection. When calling the update_repo function (when using hg), the url parameter is passed to the hg clone command. By injecting some hg options it was possible to get arbitr…

    libvcs vcspull PyPI
  • High 7.3
    CVE-2022-0941

    Stored XSS due to Unrestricted File Upload in star7th/showdoc

    Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4.

    star7th star7th/showdoc showdoc/showdoc Packagist
  • High 7.1
    CVE-2022-0938

    Stored XSS via file upload in star7th/showdoc

    Stored XSS via file upload in GitHub repository star7th/showdoc prior to v2.10.4.

    star7th star7th/showdoc showdoc/showdoc Packagist
  • High 8.4
    CVE-2022-0943

    Heap-based Buffer Overflow occurs in vim in vim/vim

    Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563.

    vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine
  • High 8.8
    CVE-2022-24386

    Stored XSS in SmarterTrack v100.0.8019.14010

    Stored XSS in SmarterTools SmarterTrack This issue affects: SmarterTools SmarterTrack 100.0.8019.14010.

    SmarterTools SmarterTrack
  • High 8.8
    CVE-2022-24384 Scanner template

    Reflective XSS on SmarterTrack v100.0.8019.14010

    Cross-site Scripting (XSS) vulnerability in SmarterTools SmarterTrack This issue affects: SmarterTools SmarterTrack 100.0.8019.14010.

    SmarterTools SmarterTrack
  • High 7.8
    CVE-2022-20001

    Injection in fish

    fish is a command line shell. fish version 3.1.0 through version 3.3.1 is vulnerable to arbitrary code execution. git repositories can contain per-repository configuration that change the behavior of git, including running arbitrary commands. When using the d…

    fish-shell fish-shell fish fish Debian Ubuntu Alpine