Skip to content
OpenAdvisories

Archive

16 March 2022

Vulnerabilities first published on this day (UTC), newest first.

← February 2022 2022 / March /16 April 2022 →
  1. 157
  2. 277
  3. 351
  4. 456
  5. 56
  6. 612
  7. 7128
  8. 874
  9. 9184
  10. 1042
  11. 1189
  12. 1210
  13. 138
  14. 1494
  15. 1597
  16. 16151
  17. 1753
  18. 18160
  19. 193
  20. 2013
  21. 2163
  22. 2223
  23. 23110
  24. 2431
  25. 2577
  26. 2613
  27. 279
  28. 28113
  29. 29105
  30. 30131
  31. 3145
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.1
    CVE-2022-23610

    Improper Verification of Cryptographic Signature in wire-server

    wire-server provides back end services for Wire, an open source messenger. In versions of wire-server prior to the 2022-01-27 release, it was possible to craft DSA Signatures to bypass SAML SSO and impersonate any Wire user with SAML credentials. In teams wit…

    wireapp wire-server
  • Critical 9.8
    CVE-2022-23812 Public exploit

    Malicious Package

    This affects the package node-ipc from 10.1.1 and before 10.1.3. This package contains malicious code, that targets users with IP located in Russia or Belarus, and overwrites their files with a heart emoji. **Note**: from versions 11.0.0 onwards, instead of h…

    node-ipc npm
  • Critical 9.8
    CVE-2022-25251

    PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function

    When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) may allow an attacker to send certain XML messages to a specific port without proper authentication. Successful exploitation of this vulnerability…

    PTC Axeda agent Axeda Desktop Server for Windows Windows
  • Critical 9.8
    CVE-2022-25246

    PTC Axeda agent and Axeda Desktop Server Use of Hard-Coded Credentials

    Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) uses hard-coded credentials for its UltraVNC installation. Successful exploitation of this vulnerability could allow a remote authenticated attacker to take full remote control of …

    PTC Axeda Desktop Server for Windows Axeda agent Windows
  • Critical 9.8
    CVE-2022-25247

    PTC Axeda agent and Axeda Desktop Server Missing Authentication For Critical Function

    Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) may allow an attacker to send certain commands to a specific port without authentication. Successful exploitation of this vulnerability could allow a remote unauthenticated attacke…

    PTC Axeda Desktop Server for Windows Axeda agent Windows
  • Critical 9.8
    CVE-2021-43958

    Various rest resources in Fisheye and Crucible before version 4.8.9 allowed remote attackers to brute force user login …

    Atlassian Crucible Fisheye