Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: March 2022

123 records · 16 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 2 of 2

  • CVE-2021-20323
    35Monitor

    A POST based reflected Cross Site Scripting vulnerability on has been identified in Keycloak.

    MediumCVSS 6.1Proof of conceptEPSS 37%

    redhat · keycloakMar 25, 2022

  • CVE-2022-0435
    55Plan

    A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content wh

    HighCVSS 8.8Proof of conceptEPSS 67%

    linux · linux kernelMar 25, 2022

  • CVE-2022-0995
    64This week

    An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem.

    HighCVSS 7.8KEVWeaponizedEPSS 8%

    linux · linux kernelMar 25, 2022

  • CVE-2022-22274
    62This week

    A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Serv

    CriticalCVSS 9.8Proof of conceptEPSS 75%

    sonicwall · sonicosMar 25, 2022

  • CVE-2022-26245
    43Plan

    Falcon-plus v0.3 was discovered to contain a SQL injection vulnerability via the parameter grpName in /config/service/host.go.

    CriticalCVSS 9.8No exploitEPSS 14%

    open-falcon · falcon-plusMar 27, 2022

  • CVE-2022-26258
    96Now

    D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp.

    CriticalCVSS 9.8KEVWeaponizedEPSS 91%

    dlink · dir-820l firmwareMar 27, 2022

  • CVE-2021-26598
    24Monitor

    ImpressCMS before 1.4.3 has Incorrect Access Control because include/findusers.php allows access by unauthenticated attackers (who are, by d

    MediumCVSS 5.3Proof of conceptEPSS 10%

    impresscms · impresscmsMar 27, 2022

  • CVE-2021-26599
    45Plan

    ImpressCMS before 1.4.3 allows include/findusers.php groups SQL Injection.

    CriticalCVSS 9.8Proof of conceptEPSS 20%

    impresscms · impresscmsMar 27, 2022

  • CVE-2022-0342
    68This week

    An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70, USG FLEX series fi

    CriticalCVSS 9.8Proof of conceptEPSS 95%

    zyxel · usg40 firmwareMar 28, 2022

  • CVE-2022-0479
    52Plan

    Popup Builder < 4.1.1 - SQL Injection to Reflected Cross-Site Scripting

    CriticalCVSS 9.8Proof of conceptEPSS 43%

    sygnoos · popup builderMar 28, 2022

  • CVE-2022-0595
    25Monitor

    Drag and Drop Multiple File Upload - Contact Form 7 < 1.3.6.3 - Unauthenticated Stored XSS

    MediumCVSS 5.4Proof of conceptEPSS 13%

    codedropz · drag and drop multiple file upload - contact form 7Mar 28, 2022

  • CVE-2022-0679
    53Plan

    Narnoo Distributor <= 2.5.1 - Unauthenticated LFI to Arbitrary File Read / RCE

    CriticalCVSS 9.8Proof of conceptEPSS 47%

    narnoo distributor project · narnoo distributorMar 28, 2022

  • CVE-2022-0784
    42Plan

    Title Experiments Free < 9.0.1 - Unauthenticated SQLi

    CriticalCVSS 9.8Proof of conceptEPSS 10%

    title experiments free project · title experiments freeMar 28, 2022

  • CVE-2021-4191
    60This week

    An issue has been discovered in GitLab CE/EE affecting versions 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2.

    MediumCVSS 5.3WeaponizedEPSS 80%

    gitlab · gitlabMar 28, 2022

  • CVE-2022-0735
    43Plan

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14.6.5, all versions starting from 14.7 befor

    CriticalCVSS 9.8Proof of conceptEPSS 13%

    gitlab · gitlabMar 28, 2022

  • CVE-2022-25347
    33Monitor

    Delta Electronics DIAEnergie Path Traversal

    HighCVSS 7.5No exploitEPSS 11%

    deltaww · diaenergieMar 29, 2022

  • CVE-2022-22948
    60This week

    The vCenter Server contains an information disclosure vulnerability due to improper permission of files.

    MediumCVSS 6.5KEVWeaponizedEPSS 13%

    vmware · cloud foundationMar 29, 2022

  • CVE-2021-43118
    49Plan

    A Remote Command Injection vulnerability exists in DrayTek Vigor 2960 1.5.1.3, DrayTek Vigor 3900 1.5.1.3, and DrayTek Vigor 300B 1.5.1.3 vi

    CriticalCVSS 9.8No exploitEPSS 34%

    draytek · vigor2960 firmwareMar 29, 2022

  • CVE-2022-26871
    75This week

    An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary fil

    CriticalCVSS 9.8KEVWeaponizedEPSS 19%

    trendmicro · apex centralMar 29, 2022

  • CVE-2022-1178
    36Monitor

    Stored Cross Site Scripting in openemr/openemr

    MediumCVSS 5.4No exploitEPSS 51%

    open-emr · openemrMar 30, 2022

  • CVE-2022-1179
    44Plan

    Non-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in openemr/openemr

    MediumCVSS 5.4No exploitEPSS 76%

    open-emr · openemrMar 30, 2022

  • CVE-2022-1181
    36Monitor

    Stored Cross Site Scripting in openemr/openemr

    MediumCVSS 5.4No exploitEPSS 51%

    open-emr · openemrMar 30, 2022

  • CVE-2021-46009
    43Plan

    In Totolink A3100R V5.9c.4577, multiple pages can be read by curl or Burp Suite without authentication.

    CriticalCVSS 9.8No exploitEPSS 12%

    totolink · a3100r firmwareMar 30, 2022