Skip to content
OpenAdvisories

Archive

26 March 2022

Vulnerabilities first published on this day (UTC), newest first.

← February 2022 2022 / March /26 April 2022 →
  1. 157
  2. 277
  3. 351
  4. 456
  5. 56
  6. 612
  7. 7128
  8. 874
  9. 9184
  10. 1042
  11. 1189
  12. 1210
  13. 138
  14. 1494
  15. 1597
  16. 16151
  17. 1753
  18. 18160
  19. 193
  20. 2013
  21. 2163
  22. 2223
  23. 23110
  24. 2431
  25. 2577
  26. 2613
  27. 279
  28. 28113
  29. 29105
  30. 30131
  31. 3145
All Critical High Medium Low Exploited only Public exploit

13 results · Feed

  • Unscored —
    CVE-2022-26198

    Notable v1.8.4 does not filter text editing, allowing attackers to execute arbitrary code via a crafted payload injecte…

  • Unscored —
    CVE-2022-27946

    NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via sh…

  • Unscored —
    CVE-2022-27947

    NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via sh…

  • Unscored —
    CVE-2022-27945

    NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via sh…

  • Unscored —
    CVE-2022-27938

    stb_image.h (aka the stb image loader) 2.19, as used in libsixel and other products, has a reachable assertion in stbi_…

    libstb libstb Debian Ubuntu
  • High 7.7
    CVE-2022-1071

    User after free in mrb_vm_exec in mruby/mruby

    User after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2.

    mruby mruby/mruby mruby mruby Debian Ubuntu Alpine
  • High —
    GHSA-3988-h75v-hwf6

    Arbitrary shell execution

    A properly crafted filename would allow for arbitrary code execution when using the --filter=gitmodified command line option

    squizlabs/php_codesniffer Packagist
  • High —
    GHSA-mhfv-8rc9-w38c

    Arbitrary shell execution

    Uses of shell_exec() and exec() were not escaping filenames and configuration settings in most cases

    squizlabs/php_codesniffer Packagist
  • Medium 5.5
    CVE-2022-27943

    libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new.

    binutils libiberty gdb gcc-arm-none-eabi Debian Ubuntu
  • Unscored —
    CVE-2022-27941

    tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_l2len_protocol in common/get.c.

    tcpreplay Debian
  • Unscored —
    CVE-2022-27939

    tcprewrite in Tcpreplay 4.4.1 has a reachable assertion in get_layer4_v6 in common/get.c.

    tcpreplay Debian
  • Unscored —
    CVE-2022-27942

    tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls in common/get.c.

    tcpreplay Debian
  • Unscored —
    CVE-2022-27940

    tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_ipv6_next in common/get.c.

    tcpreplay Debian