Archive

28 March 2022

Vulnerabilities first published on this day (UTC), newest first.

← February 2022 2022 / March /28 April 2022 →

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

High 7.6

CVE-2022-24789

Deserialization of untrusted data in C1 CMS.

C1 CMS is an open-source, .NET based Content Management System (CMS). Versions prior to 6.12 allow an authenticated user to exploit Server Side Request Forgery (SSRF) by causing the server to make arbitrary GET requests to other servers in the local network o…

Orckestra C1-CMS-Foundation C1CMS.Assemblies NuGet

Mar 28, 2022
High 7.7

CVE-2022-0427

Missing sanitization of HTML attributes in Jupyter notebooks in all versions of GitLab CE/EE since version 14.5 allows …

GitLab GitLab gitlab Web / CMS Ubuntu

Mar 28, 2022
High 7.8

CVE-2021-22797 EPSS 26%

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal) vulnerability exists that could…

Schneider Electric EcoStruxure Control Expert EcoStruxure™ Process Expert SCADAPack RemoteConnect for x70 ICS / OT

Mar 28, 2022
High 7.3

CVE-2019-6834

A CWE-502: Deserialization of Untrusted Data vulnerability exists which could allow an attacker to execute arbitrary co…

Schneider Electric Software Update (SESU) – SUT Service component ICS / OT

Mar 28, 2022
High 8.1

CVE-2021-26601

Path Traversal in ImpressCMS

ImpressCMS before 1.4.3 allows libraries/image-editor/image-edit.php image_temp Directory Traversal.

impresscms/impresscms Packagist

Mar 28, 2022