Skip to content
OpenAdvisories

Archive

March 2022

Vulnerabilities first published in this month (UTC), newest first.

← February 2022 2022 / March April 2022 →
  1. 157
  2. 277
  3. 351
  4. 456
  5. 56
  6. 612
  7. 7128
  8. 874
  9. 9184
  10. 1042
  11. 1189
  12. 1210
  13. 138
  14. 1494
  15. 1597
  16. 16151
  17. 1753
  18. 18160
  19. 193
  20. 2013
  21. 2163
  22. 2223
  23. 23110
  24. 2431
  25. 2577
  26. 2613
  27. 279
  28. 28113
  29. 29105
  30. 30131
  31. 3145
All Critical High Medium Low Exploited only Public exploit

21 results · Clear filters · Feed

  • High 7.8
    CVE-2022-27772 Public exploit

    Temporary Directory Hijacking to Local Privilege Escalation Vulnerability in org.springframework.boot:spring-boot

    spring-boot versions prior to version v2.2.11.RELEASE was vulnerable to temporary directory hijacking. This vulnerability impacted the org.springframework.boot.web.server.AbstractConfigurableWebServerFactory.createTempDir method. NOTE: This vulnerability only…

    org.springframework.boot:spring-boot Maven
  • High 8.8
    CVE-2021-40905 Public exploit

    The web management console of CheckMK Enterprise Edition (versions 1.5.0 to 2.0.0p9) does not properly sanitise the upl…

  • High 7.8
    CVE-2022-0995 Exploited Public exploit

    An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
    KEV Aug 26, 2026
  • High 7.5
    CVE-2018-25032 Public exploit EPSS 52%

    Nokogiri affected by zlib's Out-of-bounds Write vulnerability

    zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

    mariadb-10.3 mariadb-10.6 mariadb openjpeg2 Debian Ubuntu Azure Linux Alpine Wolfi RubyGems
  • High 8.8
    CVE-2022-22620 Exploited Public exploit EPSS 16%

    A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS…

    Apple macOS Safari (v and ) qtwebkit-source macOS Browsers Debian Ubuntu Alpine
    KEV Feb 11, 2022
  • High 8.8
    CVE-2022-0811 Public exploit EPSS 19%

    Code Injection in CRI-O

    A flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a pod on a Kubernetes cluster that uses the CRI-O runtime to achieve a container escape and arbitrary code execution as root on the cluster no…

    cri-o github.com/cri-o/cri-o cri-o Azure Linux Alpine Go
  • High 7.5
    CVE-2022-0778 Public exploit EPSS 73%

    Infinite loop in BN_mod_sqrt() reachable when parsing certificates

    The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or e…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine crates.io
  • High 7.5
    CVE-2020-36518 Public exploit

    Deeply nested json in jackson-databind

    jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.

    management-api-for-apache-cassandra-5.0 com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Wolfi Maven
  • High 8.8
    CVE-2021-44673 Public exploit

    Unrestricted Upload of File with Dangerous Type in Croogo

    A Remote Code Execution (RCE) vulnerability exists in Croogo 3.0.2via admin/file-manager/attachments, which lets a malicoius user upload a web shell script.

    croogo/croogo Packagist
  • High 7.2
    CVE-2022-24734 Public exploit EPSS 78%

    Remote code execution in mybb

    MyBB is a free and open source forum software. In affected versions the Admin CP's Settings management module does not validate setting types correctly on insertion and update, making it possible to add settings of supported type `php` with PHP code, executed…

    myBB Group mybb
  • High 8.8
    CVE-2022-23277 Public exploit EPSS 41%

    Microsoft Exchange Server Remote Code Execution Vulnerability

    Microsoft Exchange Server Remote Code Execution Vulnerability

    Microsoft Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 11 Microsoft Exchange Server 2016 Cumulative Update 22
  • High 7.5
    CVE-2022-24713 Public exploit EPSS 14%

    Regular expression denial of service in Rust's regex crate

    regex is an implementation of regular expressions for the Rust language. The regex crate features built-in mitigations to prevent denial of service attacks caused by untrusted regexes, or untrusted input matched by trusted regexes. Those (tunable) mitigations…

    rust-lang regex thunderbird firefox Debian Ubuntu Azure Linux Alpine crates.io
  • High 8.5
    CVE-2022-24715 Public exploit EPSS 15%

    Arbitrary code execution for authenticated users in Icinga Web 2

    Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Authenticated users, with access to the configuration, can create SSH resource files in unintended directories, leading to the execution of arbitrary code. This iss…

    Icinga icingaweb2 icingaweb2 icingaweb2 Debian Ubuntu
  • High 7.5
    CVE-2022-24716 Public exploit Scanner template EPSS 89%

    Path traversal in Icinga Web 2

    Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Unauthenticated users can leak the contents of files of the local system accessible to the web-server user, including `icingaweb2` configuration files with database…

    Icinga icingaweb2 icingaweb2 icingaweb2 Debian Ubuntu
  • High 7.8
    CVE-2022-0847 Exploited Public exploit EPSS 93%

    A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in co…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
    KEV Apr 25, 2022
  • High 8.8
    CVE-2020-18326 Public exploit

    Cross Site Request Forgery in intelliants/subrion

    Cross Site Request Forgery (CSRF) vulnerability exists in Intelliants Subrion CMS v4.2.1 via the Members administrator function, which could let a remote unauthenticated malicious user send an authorised request to victim and successfully create an arbitrary …

    intelliants/subrion Packagist
  • High 7.3
    CVE-2022-0265 Public exploit

    Improper Restriction of XML External Entity Reference in hazelcast/hazelcast

    Improper Restriction of XML External Entity Reference in GitHub repository hazelcast/hazelcast in 5.1-BETA-1.

    hazelcast hazelcast/hazelcast com.hazelcast:hazelcast Maven
  • High 7.8
    CVE-2022-22706 Exploited Public exploit

    Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects…

    KEV Mar 30, 2023
  • High 7.8
    CVE-2022-0492 Exploited Public exploit

    A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. T…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
    KEV Jun 2, 2026
  • High 7.5
    CVE-2022-23648 Public exploit EPSS 27%

    Insecure handling of image volumes in containerd CRI plugin

    containerd is a container runtime available as a daemon for Linux and Windows. A bug was found in containerd prior to versions 1.6.1, 1.5.10, and 1.14.12 where containers launched through containerd’s CRI implementation on Linux with a specially-crafted image…

    containerd containerd ctop containerd Debian Ubuntu Alpine Wolfi Go
  • High 8.3
    CVE-2022-0824 Public exploit Scanner template EPSS 97%

    Improper Access Control to Remote Code Execution in webmin/webmin

    Improper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990.

    Webmin webmin/webmin