Skip to content
OpenAdvisories

Archive

21 March 2022

Vulnerabilities first published on this day (UTC), newest first.

← February 2022 2022 / March /21 April 2022 →
  1. 157
  2. 277
  3. 351
  4. 456
  5. 56
  6. 612
  7. 7128
  8. 874
  9. 9184
  10. 1042
  11. 1189
  12. 1210
  13. 138
  14. 1494
  15. 1597
  16. 16151
  17. 1753
  18. 18160
  19. 193
  20. 2013
  21. 2163
  22. 2223
  23. 23110
  24. 2431
  25. 2577
  26. 2613
  27. 279
  28. 28113
  29. 29105
  30. 30131
  31. 3145
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-24766

    Insufficient Protection against HTTP Request Smuggling in mitmproxy

    mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.4 and below, a malicious client or server is able to perform HTTP request smuggling attacks through mitmproxy. This means that a malicious client/server could smuggle a request/…

    mitmproxy mitmproxy mitmproxy mitmproxy Debian Ubuntu PyPI
  • Critical 9.1
    CVE-2022-26960 Scanner template EPSS 51%

    Path Traversal in Studio-42 elFinder through 2.1.60

    connector.minimal.php in std42 elFinder through 2.1.60 is affected by path traversal. This allows unauthenticated remote attackers to read, write, and browse files outside the configured document root. This is due to improper handling of absolute file paths.

    studio-42/elfinder Packagist
  • Critical 9.9
    CVE-2022-0415 Scanner template EPSS 66%

    Remote Command Execution in uploading repository file in gogs/gogs

    Remote Command Execution in uploading repository file in GitHub repository gogs/gogs prior to 0.12.6.

    Gogs gogs/gogs gogs.io/gogs golang-github-gogits-go-gogs-client Ubuntu Go
  • Critical 9.8
    CVE-2022-26184

    Poetry before v1.1.9 contains Untrusted Search Path

    Poetry v1.1.9 and below was discovered to contain an untrusted search path which causes the application to behave in unexpected ways when users execute Poetry commands in a directory containing malicious content. This vulnerability occurs when the application…

    poetry poetry poetry-core Ubuntu PyPI