Skip to content
OpenAdvisories

Archive

15 March 2022

Vulnerabilities first published on this day (UTC), newest first.

← February 2022 2022 / March /15 April 2022 →
  1. 157
  2. 277
  3. 351
  4. 456
  5. 56
  6. 612
  7. 7128
  8. 874
  9. 9184
  10. 1042
  11. 1189
  12. 1210
  13. 138
  14. 1494
  15. 1597
  16. 16151
  17. 1753
  18. 18160
  19. 193
  20. 2013
  21. 2163
  22. 2223
  23. 23110
  24. 2431
  25. 2577
  26. 2613
  27. 279
  28. 28113
  29. 29105
  30. 30131
  31. 3145
All Critical High Medium Low Exploited only Public exploit

97 results · Feed

  • Unscored —
    CVE-2022-27223

    In drivers/usb/gadget/udc/udc-xilinx.c in the Linux kernel before 5.16.12, the endpoint index is not validated and migh…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2020-36519

    Mimecast Email Security before 2020-01-10 allows any admin to spoof any domain, and pass DMARC alignment via SPF. This …

  • High 8.8
    CVE-2022-27004

    Totolink routers s X5000R V9.1.0u.6118_B20201102 and A7000R V9.1.0u.6115_B20201022 were discovered to contain a command…

  • High 8.8
    CVE-2022-27005

    Totolink routers s X5000R V9.1.0u.6118_B20201102 and A7000R V9.1.0u.6115_B20201022 were discovered to contain a command…

  • High 8.8
    CVE-2022-27003

    Totolink routers s X5000R V9.1.0u.6118_B20201102 and A7000R V9.1.0u.6115_B20201022 were discovered to contain a command…

  • Unscored —
    CVE-2022-27002

    Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the ddns function via the ddns_nam…

  • Unscored —
    CVE-2022-27001

    Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the dhcp function via the hostname…

  • Unscored —
    CVE-2022-27000

    Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the time and time zone function via…

  • Unscored —
    CVE-2022-26999

    Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the static ip settings function via…

  • Unscored —
    CVE-2022-26998

    Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the wps setting function via the wp…

  • Unscored —
    CVE-2022-26997

    Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the upnp function via the upnp_ttl …

  • Unscored —
    CVE-2022-26996

    Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the pppoe function via the pppoe_us…

  • Unscored —
    CVE-2022-26995

    Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the pptp (wan_pptp.html) function v…

  • Unscored —
    CVE-2022-26993

    Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a comma…

  • Unscored —
    CVE-2022-26994

    Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a comma…

  • Unscored —
    CVE-2022-26992

    Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a comma…

  • Unscored —
    CVE-2022-26991

    Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a comma…

  • Unscored —
    CVE-2022-26990

    Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a comma…

  • Unscored —
    CVE-2022-26213 EPSS 26%

    Totolink X5000R_Firmware v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the func…

  • Unscored —
    CVE-2022-26214

    Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.513…

  • Unscored —
    CVE-2022-26211

    Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.513…

  • Unscored —
    CVE-2022-26212

    Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.513…

  • Unscored —
    CVE-2022-26209

    Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.513…

  • Unscored —
    CVE-2022-26210

    Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.513…

  • Unscored —
    CVE-2022-26207

    Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.513…

  • Unscored —
    CVE-2022-26208

    Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.513…

  • Unscored —
    CVE-2022-26206

    Totolink A830R V5.9c.4729_B20191112, A3100R V4.1.2cu.5050_B20200504, A950RG V4.1.2cu.5161_B20200903, A800R V4.1.2cu.513…

  • Medium 5.3
    CVE-2021-29134

    Path Traversal in Gitea

    The avatar middleware in Gitea before 1.13.6 allows Directory Traversal via a crafted URL.

    code.gitea.io/gitea gitea Alpine Go
  • Unscored —
    CVE-2022-23989

    In Stormshield Network Security (SNS) before 3.7.25, 3.8.x through 3.11.x before 3.11.13, 4.x before 4.2.10, and 4.3.x …

  • Medium —
    GHSA-w2j5-3rcx-vx7x

    Sysctls applied to containers with host IPC or host network namespaces can affect the host

    ### Impact Before setting the sysctls for a pod, the pods namespaces must be unshared (created). However, in cases where the pod is using a host network or IPC namespace, a bug in CRI-O caused the namespace creating tool [pinns](https://github.com/cri-o/cri-o…

    github.com/cri-o/cri-o Go
  • Unscored —
    CVE-2022-25485 Scanner template

    CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertLightbox.php.

  • Unscored —
    CVE-2022-25486 Scanner template

    CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertConfigField.php.

  • Unscored —
    CVE-2022-25487 Scanner template EPSS 54%

    Atom CMS v2.0 was discovered to contain a remote code execution (RCE) vulnerability via /admin/uploads.php.

  • Unscored —
    CVE-2022-25488 Scanner template

    Atom CMS v2.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/ajax/avatar.php.

  • Unscored —
    CVE-2022-25489 Scanner template

    Atom CMS v2.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the "A" parameter in /…

  • Unscored —
    CVE-2022-25490

    HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in department.php.

  • Unscored —
    CVE-2022-25491

    HMS v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in appointment.php.

  • Unscored —
    CVE-2022-25492

    HMS v1.0 was discovered to contain a SQL injection vulnerability via the medicineid parameter in ajaxmedicine.php.

  • Unscored —
    CVE-2022-25493

    HMS v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via treatmentrecord.php.

  • Unscored —
    CVE-2022-25494

    Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via staff_login.php.