Skip to content
OpenAdvisories

Archive

18 March 2022

Vulnerabilities first published on this day (UTC), newest first.

← February 2022 2022 / March /18 April 2022 →
  1. 157
  2. 277
  3. 351
  4. 456
  5. 56
  6. 612
  7. 7128
  8. 874
  9. 9184
  10. 1042
  11. 1189
  12. 1210
  13. 138
  14. 1494
  15. 1597
  16. 16151
  17. 1753
  18. 18160
  19. 193
  20. 2013
  21. 2163
  22. 2223
  23. 23110
  24. 2431
  25. 2577
  26. 2613
  27. 279
  28. 28113
  29. 29105
  30. 30131
  31. 3145
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-26265 Public exploit EPSS 30%

    Remote Code Execution in Contao Managed Edition

    Contao Managed Edition v1.5.0 was discovered to contain a remote command execution (RCE) vulnerability via the component php_cli parameter.

    contao/managed-edition Packagist
  • Critical 9.8
    CVE-2020-25197

    GE Reason RT43X Clocks Code Injection

    A code injection vulnerability exists in one of the webpages in GE Reason RT430, RT431 & RT434 GNSS clocks in firmware versions prior to version 08A06 that could allow an authenticated remote attacker to execute arbitrary code on the system.

    GE Reason RT43X Clocks
  • Critical 9.1
    CVE-2020-25176

    Rockwell Automation ISaGRAF5 Runtime Relative Path Traversal

    Some commands used by the Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x eXchange Layer (IXL) protocol perform various file operations in the file system. Since the parameter pointing to the file name is not checked for reserved characters, it is po…

    Rockwell Automation ISaGRAF Runtime ICS / OT
  • Critical 9.8
    CVE-2022-0547

    OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more tha…

    openvpn openvpn openvpn Debian Ubuntu Alpine
  • Critical 9.8
    CVE-2022-22587 Exploited EPSS 12%

    A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3…

    Apple macOS iOS and iPadOS macOS iOS
    KEV Jan 28, 2022
  • Critical 9.1
    CVE-2022-0742

    Memory leak in ICMP6 in Linux Kernel

    Memory leak in icmp6 implementation in Linux Kernel 5.13+ allows a remote attacker to DoS a host by making it go out-of-memory via icmp6 packets of type 130 or 131. We recommend upgrading past commit 2d3916f3189172d5c69d33065c3c21119fe539fc.

    Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2022-24637 Public exploit Scanner template EPSS 99%

    Improper Privilege Management in Open Web Analytics

    Open Web Analytics (OWA) before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with '<?php (instead of the intend…

    open-web-analytics/open-web-analytics Packagist