March 2023

2,519 results · Feed

• High 7.8
  CVE-2022-28310

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

  Bentley MicroStation CONNECT
  Mar 29, 2023
• Low 3.3
  CVE-2022-28309

  This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View …

  Bentley View
  Mar 29, 2023
• High 7.8
  CVE-2022-28311

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

  Bentley MicroStation CONNECT
  Mar 29, 2023
• High 7.8
  CVE-2022-28307

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.16.02…

  Bentley View
  Mar 29, 2023
• High 7.8
  CVE-2022-28304

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

  Bentley MicroStation CONNECT
  Mar 29, 2023
• High 7.8
  CVE-2022-28315

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

  Bentley MicroStation CONNECT
  Mar 29, 2023
• High 7.8
  CVE-2022-28687

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 P…

  AVEVA Edge Browsers
  Mar 29, 2023
• High 7.8
  CVE-2022-28641

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

  Bentley MicroStation CONNECT
  Mar 29, 2023
• High 7.8
  CVE-2022-28300

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

  Bentley MicroStation
  Mar 29, 2023
• High 7.8
  CVE-2022-28318

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

  Bentley MicroStation CONNECT
  Mar 29, 2023
• High 7.8
  CVE-2022-28301

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

  Bentley MicroStation CONNECT
  Mar 29, 2023
• High 7.8
  CVE-2022-28316

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

  Bentley MicroStation CONNECT
  Mar 29, 2023
• High 7.8
  CVE-2022-28305

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

  Bentley MicroStation CONNECT
  Mar 29, 2023
• High 7.8
  CVE-2022-28685 EPSS 17%

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 P…

  AVEVA Edge Browsers
  Mar 29, 2023
• High 7.8
  CVE-2022-28319

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

  Bentley MicroStation CONNECT
  Mar 29, 2023
• Low 3.3
  CVE-2022-28312

  This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley Micro…

  Bentley MicroStation CONNECT
  Mar 29, 2023
• High 7.8
  CVE-2022-28317

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

  Bentley MicroStation CONNECT
  Mar 29, 2023
• Low 3.3
  CVE-2022-28645

  This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley Micro…

  Bentley MicroStation CONNECT
  Mar 29, 2023
• High 7.8
  CVE-2022-28646

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

  Bentley MicroStation CONNECT
  Mar 29, 2023
• High 7.8
  CVE-2022-28306

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation …

  Bentley MicroStation CONNECT
  Mar 29, 2023
• Medium 5.4
  CVE-2022-1274 Public exploit

  HTML Injection in Keycloak Admin REST API

  A flaw was found in Keycloak in the execute-actions-email endpoint. This issue allows arbitrary HTML to be injected into emails sent to Keycloak users and can be misused to perform phishing or other attacks against users.

  org.keycloak:keycloak-services Maven
  Mar 29, 2023
• High 7.5
  CVE-2022-36979

  This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2…

  ivanti Avalanche Network devices
  Mar 29, 2023
• High 7.8
  CVE-2022-36970

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 20.0 Build…

  AVEVA Edge Browsers
  Mar 29, 2023
• Critical 9.8
  CVE-2022-36978

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.…

  ivanti Avalanche Network devices
  Mar 29, 2023
• Critical 9.8
  CVE-2022-36971 EPSS 15%

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.…

  ivanti Avalanche Network devices
  Mar 29, 2023
• Critical 9.1
  CVE-2022-36973

  This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2…

  ivanti Avalanche Network devices
  Mar 29, 2023
• Critical 9.1
  CVE-2022-36975

  This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2…

  ivanti Avalanche Network devices
  Mar 29, 2023
• High 7.5
  CVE-2022-36983

  This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche. Auth…

  ivanti Avalanche Network devices
  Mar 29, 2023
• Medium 5.5
  CVE-2022-36969 EPSS 14%

  This vulnerability allows remote attackers to disclose sensitive information on affected installations of AVEVA Edge 20…

  AVEVA Edge Browsers
  Mar 29, 2023
• High 8.8
  CVE-2022-36981 EPSS 83%

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.…

  ivanti Avalanche Network devices
  Mar 29, 2023
• Critical 9.4
  CVE-2022-36980 EPSS 82%

  This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2…

  ivanti Avalanche Network devices
  Mar 29, 2023
• Critical 9.8
  CVE-2022-36974 EPSS 84%

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.…

  ivanti Avalanche Network devices
  Mar 29, 2023
• Medium 6.5
  CVE-2022-36982 EPSS 74%

  This vulnerability allows remote attackers to read arbitrary files on affected installations of Ivanti Avalanche 6.3.3.…

  ivanti Avalanche Network devices
  Mar 29, 2023
• Critical 9.1
  CVE-2022-36976

  This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2…

  ivanti Avalanche Network devices
  Mar 29, 2023
• Critical 9.8
  CVE-2022-36977

  This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.…

  ivanti Avalanche Network devices
  Mar 29, 2023
• Critical 9.1
  CVE-2022-36972

  This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2…

  ivanti Avalanche Network devices
  Mar 29, 2023
• High 8.8
  CVE-2022-27643 EPSS 25%

  This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R67…

  NETGEAR R6700v3 Network devices
  Mar 29, 2023
• High 8.0
  CVE-2022-27646 Public exploit

  This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R67…

  NETGEAR R6700v3 Network devices
  Mar 29, 2023
• Medium 5.0
  CVE-2022-27644

  This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected …

  NETGEAR R6700v3 Network devices
  Mar 29, 2023
• Low 2.7
  CVE-2022-27598

  QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances)

  A vulnerability has been reported to affect QNAP operating systems. If exploited, the out-of-bounds read vulnerability allows remote authenticated administrators to get secret values. The vulnerability affects the following QNAP operating systems: QTS, QuTS h…

  QNAP Systems QTS QuTS hero
  Mar 29, 2023