Skip to content
OpenAdvisories

Archive

March 2022

Vulnerabilities first published in this month (UTC), newest first.

← February 2022 2022 / March April 2022 →
  1. 157
  2. 277
  3. 351
  4. 456
  5. 56
  6. 612
  7. 7128
  8. 874
  9. 9184
  10. 1042
  11. 1189
  12. 1210
  13. 138
  14. 1494
  15. 1597
  16. 16151
  17. 1753
  18. 18160
  19. 193
  20. 2013
  21. 2163
  22. 2223
  23. 23110
  24. 2431
  25. 2577
  26. 2613
  27. 279
  28. 28113
  29. 29105
  30. 30131
  31. 3145
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Medium 6.8
    CVE-2022-1163 Public exploit

    Cross-site Scripting (XSS) - Stored in mineweb/minewebcms

    Cross-site Scripting (XSS) - Stored in GitHub repository mineweb/minewebcms prior to next.

    mineweb mineweb/minewebcms
  • Medium 6.5
    CVE-2022-22948 Exploited Public exploit EPSS 13%

    The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious ac…

    Virtualization
    KEV Jul 17, 2024
  • Medium 5.3
    CVE-2022-1077 Public exploit

    TEM FLEX-1080/FLEX-1085 Log information disclosure

    A vulnerability was found in TEM FLEX-1080 and FLEX-1085 1.6.0. It has been declared as problematic. This vulnerability log.cgi of the component Log Handler. A direct request leads to information disclosure of hardware information. The attack can be initiated…

    TEM FLEX-1085 FLEX-1080
  • Medium 5.3
    CVE-2021-4191 Public exploit Scanner template EPSS 80%

    An issue has been discovered in GitLab CE/EE affecting versions 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2. Pri…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 6.1
    CVE-2021-20323 Public exploit Scanner template EPSS 37%

    Cross-site Scripting in Keycloak

    A POST based reflected Cross Site Scripting vulnerability on has been identified in Keycloak.

    org.keycloak:keycloak-core Maven
  • Medium 6.9
    CVE-2022-0967 Public exploit

    Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in star7th/showdoc

    Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.10.4.

    star7th star7th/showdoc showdoc/showdoc Packagist
  • Medium 6.1
    CVE-2021-44667 Public exploit

    Cross-site Scripting in Nacos

    A Cross Site Scripting (XSS) vulnerability exists in Nacos 2.0.3 in auth/users via the (1) pageSize and (2) pageNo parameters.

    com.alibaba.nacos:nacos-common Maven
  • Medium 4.3
    CVE-2018-25031 Public exploit EPSS 42%

    Spoofing attack in swagger-ui

    Swagger UI 4.1.2 and earlier could allow a remote attacker to conduct spoofing attacks. By persuading a victim to open a crafted URL, an attacker could exploit this vulnerability to display remote OpenAPI definitions. Note: This was originally claimed to be r…

    swagger-ui org.webjars:swagger-ui npm Maven
  • Medium 6.5
    CVE-2022-0001 Public exploit

    Non-transparent sharing of branch predictor selectors between contexts in some Intel(R) Processors may allow an authori…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Medium 6.5
    CVE-2022-23253 Public exploit EPSS 56%

    Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

    Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  • Medium 6.1
    CVE-2022-0891 Public exploit

    A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker t…

    LibTIFF LibTIFF tiff tiff Debian Ubuntu Azure Linux Alpine
  • Medium 6.1
    CVE-2020-18325 Public exploit

    Cross-site Scripting in intelliants/subrion

    Multilple Cross Site Scripting (XSS) vulnerability exists in Intelliants Subrion CMS v4.2.1 in the Configuration panel.

    intelliants/subrion Packagist
  • Medium 6.1
    CVE-2020-18324 Public exploit

    Cross-site Scripting in Subrion CMS

    Cross Site Scripting (XSS) vulnerability exists in Subrion CMS 4.2.1 via the q parameter in the Kickstart template.

    intelliants/subrion Packagist
  • Medium 6.5
    CVE-2021-35036 Public exploit

    A cleartext storage of information vulnerability in the Zyxel VMG3625-T50B firmware version V5.50(ABTL.0)b2k could allo…

    Zyxel VMG3625-T50B firmware Network devices