Skip to content
OpenAdvisories

Archive

24 March 2022

Vulnerabilities first published on this day (UTC), newest first.

← February 2022 2022 / March /24 April 2022 →
  1. 157
  2. 277
  3. 351
  4. 456
  5. 56
  6. 612
  7. 7128
  8. 874
  9. 9184
  10. 1042
  11. 1189
  12. 1210
  13. 138
  14. 1494
  15. 1597
  16. 16151
  17. 1753
  18. 18160
  19. 193
  20. 2013
  21. 2163
  22. 2223
  23. 23110
  24. 2431
  25. 2577
  26. 2613
  27. 279
  28. 28113
  29. 29105
  30. 30131
  31. 3145
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 4.5
    CVE-2022-25576

    Cross-Site Request Forgery in Anchor CMS

    Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component anchor/routes/posts.php. This vulnerability allows attackers to arbitrarily delete posts.

    anchorcms/anchor-cms Packagist
  • Medium 4.3
    CVE-2022-24782

    Secure category names leaked via user activity export in Discourse

    Discourse is an open source discussion platform. Versions 2.8.2 and prior in the `stable` branch, 2.9.0.beta3 and prior in the `beta` branch, and 2.9.0.beta3 and prior in the `tests-passed` branch are vulnerable to a data leak. Users can request an export of …

    Discourse Discourse
  • Medium 6.1
    CVE-2022-24776

    Open Redirect in Flask-AppBuilder

    Flask-AppBuilder is an application development framework, built on top of the Flask web framework. Flask-AppBuilder contains an open redirect vulnerability when using database authentication login page on versions below 3.4.5. This issue is fixed in version 3…

    dpgaspar Flask-AppBuilder flask-appbuilder PyPI
  • Medium 6.5
    CVE-2022-22374

    The BMC (IBM Power 9 AC922 OP910, OP920, OP930, and OP940) may be subject to a firmware downgrade attack which may affe…

    IBM Power 9 AC922
  • Medium 6.3
    CVE-2022-21820 EPSS 17%

    NVIDIA DCGM contains a vulnerability in nvhostengine, where a network user can cause detection of error conditions with…

    NVIDIA NVIDIA Data Center GPU Manager
  • Medium 6.5
    CVE-2022-0955

    Cross-site Scripting (XSS) - Stored in pimcore/data-hub

    Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/data-hub prior to 1.2.4.

    pimcore pimcore/data-hub pimcore/data-hub Packagist
  • Medium 6.8
    CVE-2022-0145

    Cross-site Scripting (XSS) - Stored in forkcms/forkcms

    Cross-site Scripting (XSS) - Stored in GitHub repository forkcms/forkcms prior to 5.11.1.

    forkcms forkcms/forkcms forkcms/forkcms Packagist
  • Medium 4.0
    CVE-2022-27820

    Improper Certificate Validation in OWASP ZAP

    OWASP Zed Attack Proxy (ZAP) through w2022-03-21 does not verify the TLS certificate chain of an HTTPS server.

    org.zaproxy:zap Maven
  • Medium 5.9
    CVE-2022-24769

    Default inheritable capabilities for linux container should be empty

    Moby is an open-source project created by Docker to enable and accelerate software containerization. A bug was found in Moby (Docker Engine) prior to version 20.10.14 where containers were incorrectly started with non-empty inheritable Linux process capabilit…

    moby moby ctop docker-machine-driver-harvester Debian Ubuntu Azure Linux Alpine Wolfi Go