Skip to content
OpenAdvisories

Archive

March 2022

Vulnerabilities first published in this month (UTC), newest first.

← February 2022 2022 / March April 2022 →
  1. 157
  2. 277
  3. 351
  4. 456
  5. 56
  6. 612
  7. 7128
  8. 874
  9. 9184
  10. 1042
  11. 1189
  12. 1210
  13. 138
  14. 1494
  15. 1597
  16. 16151
  17. 1753
  18. 18160
  19. 193
  20. 2013
  21. 2163
  22. 2223
  23. 23110
  24. 2431
  25. 2577
  26. 2613
  27. 279
  28. 28113
  29. 29105
  30. 30131
  31. 3145
All Critical High Medium Low Exploited only Public exploit

16 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-26871 Exploited EPSS 19%

    An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to up…

    Trend Micro Trend Micro Apex Central
    KEV Mar 31, 2022
  • Medium 6.5
    CVE-2022-22948 Exploited Public exploit EPSS 13%

    The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious ac…

    Virtualization
    KEV Jul 17, 2024
  • Critical 9.8
    CVE-2022-26258 Exploited EPSS 92%

    D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set…

    KEV Sep 8, 2022
  • High 7.8
    CVE-2022-0995 Exploited Public exploit

    An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
    KEV Aug 26, 2026
  • Critical 9.8
    CVE-2022-1040 Exploited Public exploit Scanner template EPSS 100%

    An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Soph…

    Sophos Sophos Firewall Network devices
    KEV Mar 31, 2022
  • High 8.8
    CVE-2022-22620 Exploited Public exploit EPSS 16%

    A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS…

    Apple macOS Safari (v and ) qtwebkit-source macOS Browsers Debian Ubuntu Alpine
    KEV Feb 11, 2022
  • Critical 9.8
    CVE-2022-22587 Exploited EPSS 12%

    A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3…

    Apple macOS iOS and iPadOS macOS iOS
    KEV Jan 28, 2022
  • High 8.8
    CVE-2022-26500 Exploited · Ransomware

    Improper limitation of path names in Veeam Backup & Replication 9.5U3, 9.5U4,10.x, and 11.x allows remote authenticated…

    KEV Dec 13, 2022
  • Critical 9.8
    CVE-2022-26501 Exploited · Ransomware

    Veeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2).

    KEV Dec 13, 2022
  • High 7.8
    CVE-2021-39793 Exploited

    In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the…

    Android
    KEV Apr 11, 2022
  • Critical 9.8
    CVE-2022-26143 Exploited Scanner template EPSS 87%

    The TP-240 (aka tp240dvr) component in Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 allow…

    KEV Mar 25, 2022
  • High 7.8
    CVE-2022-0847 Exploited Public exploit EPSS 93%

    A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in co…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
    KEV Apr 25, 2022
  • Critical 9.8
    CVE-2022-26318 Exploited Public exploit EPSS 78%

    On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786. This vulne…

    KEV Mar 25, 2022
  • High 7.8
    CVE-2022-22706 Exploited Public exploit

    Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects…

    KEV Mar 30, 2023
  • High 7.8
    CVE-2022-0492 Exploited Public exploit

    A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. T…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
    KEV Jun 2, 2026
  • Critical 10.0
    CVE-2022-22947 Exploited Public exploit Scanner template EPSS 98%

    Spring Cloud Gateway vulnerable to Code Injection when Gateway Actuator endpoint enabled, exposed, unsecured

    In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could al…

    org.springframework.cloud:spring-cloud-gateway Maven
    KEV May 16, 2022