Skip to content
OpenAdvisories

Archive

17 March 2022

Vulnerabilities first published on this day (UTC), newest first.

← February 2022 2022 / March /17 April 2022 →
  1. 157
  2. 277
  3. 351
  4. 456
  5. 56
  6. 612
  7. 7128
  8. 874
  9. 9184
  10. 1042
  11. 1189
  12. 1210
  13. 138
  14. 1494
  15. 1597
  16. 16151
  17. 1753
  18. 18160
  19. 193
  20. 2013
  21. 2163
  22. 2223
  23. 23110
  24. 2431
  25. 2577
  26. 2613
  27. 279
  28. 28113
  29. 29105
  30. 30131
  31. 3145
All Critical High Medium Low Exploited only Public exploit

53 results · Feed

  • Unscored —
    CVE-2021-45794

    Slims9 Bulian 9.4.2 is affected by SQL injection in /admin/modules/system/backup.php. User data can be obtained.

  • Unscored —
    CVE-2021-45793 Scanner template

    Slims9 Bulian 9.4.2 is affected by SQL injection in lib/comment.inc.php. User data can be obtained.

  • Unscored —
    CVE-2021-45792

    Slims9 Bulian 9.4.2 is affected by Cross Site Scripting (XSS) in /admin/modules/system/custom_field.php.

  • Unscored —
    CVE-2021-45791

    Slims8 Akasia 8.3.1 is affected by SQL injection in /admin/modules/bibliography/index.php, /admin/modules/membership/me…

  • High 8.8
    CVE-2022-1000

    Path Traversal in prasathmani/tinyfilemanager

    Path Traversal in GitHub repository prasathmani/tinyfilemanager prior to 2.4.7.

    prasathmani prasathmani/tinyfilemanager
  • Unscored —
    CVE-2022-24075

    Whale browser before 3.12.129.18 allowed extensions to replace JavaScript files of the HWP viewer website which could a…

    NAVER NAVER Whale browser
  • Unscored —
    CVE-2022-24074

    Whale Bridge, a default extension in Whale browser before 3.12.129.18, allowed to receive any SendMessage request from …

    NAVER NAVER Whale browser
  • Unscored —
    CVE-2022-24073

    The Web Request API in Whale browser before 3.12.129.18 allowed to deny access to the extension store or redirect to an…

    NAVER NAVER Whale browser
  • Unscored —
    CVE-2022-24072

    The devtools API in Whale browser before 3.12.129.18 allowed extension developers to inject arbitrary JavaScript into t…

    NAVER NAVER Whale browser
  • Unscored —
    CVE-2022-22273

    Improper neutralization of Special Elements leading to OS Command Injection vulnerability impacting end-of-life Secure …

    SonicWall SonicWall SRA/SMA100 Network devices
  • Unscored —
    CVE-2022-25516

    stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function stbtt__find_table at stb_truetyp…

  • Unscored —
    CVE-2022-25515

    stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttULONG() at stb_truetype.h. NOT…

  • Unscored —
    CVE-2022-25514

    stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttUSHORT() at stb_truetype.h. NO…