İçeriğe atla
Noroxi

Yayın tarihine göre

Mart 2022: sömürülen ve yeni ciddi CVE kayıtları

123 kayıt · 16 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 2

  • CVE-2021-4039
    60Bu hafta

    A command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware could allow an attacker to execute arbitrary OS com

    KritikCVSS 9,8Kavram kanıtıEPSS %71

    zyxel · nwa1100-nh firmware1 Mar 2022

  • CVE-2021-46387
    30İzleyin

    ZyXEL ZyWALL 2 Plus Internet Security Appliance is affected by Cross Site Scripting (XSS).

    OrtaCVSS 6,1Kavram kanıtıEPSS %20

    zyxel · zywall 2 plus internet security appliance firmware1 Mar 2022

  • CVE-2021-41282
    61Bu hafta

    diag_routes.php in pfSense 2.5.2 allows sed data injection.

    YüksekCVSS 8,8SilahlaştırılmışEPSS %87

    pfsense · pfsense1 Mar 2022

  • CVE-2022-0824
    64Bu hafta

    Improper Access Control to Remote Code Execution in webmin/webmin

    YüksekCVSS 8,8SilahlaştırılmışEPSS %96

    webmin · webmin2 Mar 2022

  • CVE-2022-23779
    25İzleyin

    Zoho ManageEngine Desktop Central before 10.1.2137.8 exposes the installed server name to anyone.

    OrtaCVSS 5,3Kavram kanıtıEPSS %13

    zohocorp · manageengine desktop central2 Mar 2022

  • CVE-2022-0819
    48Planlayın

    Code Injection in dolibarr/dolibarr

    YüksekCVSS 8,8İstismar yokEPSS %42

    dolibarr · dolibarr erp\/crm2 Mar 2022

  • CVE-2022-0711
    35İzleyin

    A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header.

    YüksekCVSS 7,5İstismar yokEPSS %16

    haproxy · haproxy2 Mar 2022

  • CVE-2021-3654
    32İzleyin

    A vulnerability was found in openstack-nova's console proxy, noVNC.

    OrtaCVSS 6,1Kavram kanıtıEPSS %26

    openstack · nova2 Mar 2022

  • CVE-2022-22909
    49Planlayın

    HotelDruid v3.0.3 was discovered to contain a remote code execution (RCE) vulnerability which is exploited via an attacker inserting a craft

    YüksekCVSS 8,8Kavram kanıtıEPSS %45

    digitaldruid · hoteldruid2 Mar 2022

  • CVE-2022-25089
    45Planlayın

    Printix Secure Cloud Print Management through 1.3.1106.0 incorrectly uses Privileged APIs to modify values in HKEY_LOCAL_MACHINE via UITasks

    KritikCVSS 9,8Kavram kanıtıEPSS %18

    kofax · printix2 Mar 2022

  • CVE-2022-23648
    38İzleyin

    Insecure handling of image volumes in containerd CRI plugin

    YüksekCVSS 7,5Kavram kanıtıEPSS %27

    linuxfoundation · containerd3 Mar 2022

  • CVE-2022-22706
    61Bu hafta

    Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages.

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %1

    arm · bifrost gpu kernel driver3 Mar 2022

  • CVE-2022-0492
    63Bu hafta

    A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function.

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %5

    linux · linux kernel3 Mar 2022

  • CVE-2022-22947
    99Hemen

    In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuat

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %98

    vmware · spring cloud gateway3 Mar 2022

  • CVE-2022-0848
    50Planlayın

    OS Command Injection in part-db/part-db

    KritikCVSS 9,8Kavram kanıtıEPSS %35

    part-db project · part-db4 Mar 2022

  • CVE-2021-46393
    44Planlayın

    There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10_CN.

    KritikCVSS 9,8İstismar yokEPSS %15

    tenda · ax3 firmware4 Mar 2022

  • CVE-2022-0832
    41Planlayın

    Cross-site Scripting (XSS) - Stored in pimcore/pimcore

    OrtaCVSS 5,4İstismar yokEPSS %66

    pimcore · pimcore4 Mar 2022

  • CVE-2021-46378
    40Planlayın

    DLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through an unauthenticated remote configuration downlo

    YüksekCVSS 7,5Kavram kanıtıEPSS %31

    dlink · dir-850l firmware4 Mar 2022

  • CVE-2021-46379
    29İzleyin

    DLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through URL redirection to untrusted site.

    OrtaCVSS 6,1Kavram kanıtıEPSS %15

    dlink · dir-850l firmware4 Mar 2022

  • CVE-2021-46381
    48Planlayın

    Local File Inclusion due to path traversal in D-Link DAP-1620 leads to unauthorized internal files reading [/etc/passwd] and [/etc/shadow].

    YüksekCVSS 7,5Kavram kanıtıEPSS %58

    dlink · dap-1620 firmware4 Mar 2022

  • CVE-2022-26318
    92Hemen

    On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %78

    watchguard · fireware4 Mar 2022

  • CVE-2021-44827
    51Planlayın

    There is remote authenticated OS command injection on TP-Link Archer C20i 0.9.1 3.2 v003a.0 Build 170221 Rel.55462n devices vie the X_TP_Ext

    YüksekCVSS 8,8Kavram kanıtıEPSS %53

    tp-link · archer c20i firmware4 Mar 2022

  • CVE-2021-3737
    34İzleyin

    A flaw was found in python.

    YüksekCVSS 7,5İstismar yokEPSS %13

    python · python4 Mar 2022

  • CVE-2021-46704
    46Planlayın

    In GenieACS 1.2.x before 1.2.8, the UI interface API is vulnerable to unauthenticated OS command injection via the ping host argument (lib/u

    KritikCVSS 9,8Kavram kanıtıEPSS %21

    genieacs · genieacs6 Mar 2022

  • CVE-2022-0349
    49Planlayın

    NotificationX < 2.3.9 - Unauthenticated Blind SQL Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %34

    wpdeveloper · notificationx7 Mar 2022

  • CVE-2022-0434
    43Planlayın

    Page Views Count < 2.4.15 - Unauthenticated SQL Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %14

    a3rev · page view count7 Mar 2022

  • CVE-2022-0441
    65Bu hafta

    MasterStudy LMS < 2.7.6 - Unauthenticated Admin Account Creation

    KritikCVSS 9,8SilahlaştırılmışEPSS %85

    stylemixthemes · masterstudy lms7 Mar 2022

  • CVE-2022-24713
    34İzleyin

    Regular expression denial of service in Rust's regex crate

    YüksekCVSS 7,5Kavram kanıtıEPSS %14

    rust-lang · regex8 Mar 2022

  • CVE-2022-24715
    39İzleyin

    Arbitrary code execution for authenticated users in Icinga Web 2

    YüksekCVSS 8,8Kavram kanıtıEPSS %14

    icinga · icinga web 28 Mar 2022

  • CVE-2022-24716
    60Bu hafta

    Path traversal in Icinga Web 2

    YüksekCVSS 7,5SilahlaştırılmışEPSS %89

    icinga · icinga web 28 Mar 2022

  • CVE-2022-0482
    49Planlayın

    Exposure of Private Personal Information to an Unauthorized Actor in alextselegidis/easyappointments

    KritikCVSS 9,1Kavram kanıtıEPSS %43

    easyappointments · easyappointments9 Mar 2022

  • CVE-2022-21990
    41Planlayın

    Remote Desktop Client Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %18

    microsoft · windows 109 Mar 2022

  • CVE-2022-23253
    43Planlayın

    Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability

    OrtaCVSS 6,5Kavram kanıtıEPSS %56

    microsoft · windows 109 Mar 2022

  • CVE-2022-23277
    47Planlayın

    Microsoft Exchange Server Remote Code Execution Vulnerability

    YüksekCVSS 8,8SilahlaştırılmışEPSS %41

    microsoft · exchange server9 Mar 2022

  • CVE-2022-23285
    43Planlayın

    Remote Desktop Client Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %25

    microsoft · windows 109 Mar 2022

  • CVE-2022-24463
    36İzleyin

    Microsoft Exchange Server Spoofing Vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %31

    microsoft · exchange server9 Mar 2022

  • CVE-2022-24502
    27İzleyin

    Windows HTML Platforms Security Feature Bypass Vulnerability

    OrtaCVSS 4,3İstismar yokEPSS %33

    microsoft · windows 109 Mar 2022

  • CVE-2022-22805
    43Planlayın

    A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists that could cause remote code executio

    KritikCVSS 9,8İstismar yokEPSS %11

    schneider-electric · smt series 1015 ups firmware9 Mar 2022

  • CVE-2022-22806
    43Planlayın

    A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause an unauthenticated connection to the UPS when a mal

    KritikCVSS 9,8İstismar yokEPSS %12

    schneider-electric · smt series 1015 ups firmware9 Mar 2022

  • CVE-2022-24734
    51Planlayın

    Remote code execution in mybb

    YüksekCVSS 7,2SilahlaştırılmışEPSS %77

    mybb · mybb9 Mar 2022

  • CVE-2021-4045
    61Bu hafta

    TP-LINK Tapo C200 remote code execution vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %72

    tp-link · tapo c200 firmware10 Mar 2022

  • CVE-2022-0847
    89Hemen

    A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %92

    linux · linux kernel10 Mar 2022

  • CVE-2022-22835
    30İzleyin

    An issue was discovered in OverIT Geocall before version 8.0.

    OrtaCVSS 6,5İstismar yokEPSS %14

    overit · geocall10 Mar 2022

  • CVE-2022-23940
    51Planlayın

    SuiteCRM through 7.12.1 and 8.x through 8.0.1 allows Remote Code Execution.

    YüksekCVSS 8,8Kavram kanıtıEPSS %53

    salesagility · suitecrm10 Mar 2022

  • CVE-2022-24995
    43Planlayın

    Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetSysTime.

    KritikCVSS 9,8İstismar yokEPSS %13

    tenda · ax3 firmware10 Mar 2022

  • CVE-2022-25090
    35İzleyin

    Printix Secure Cloud Print Management through 1.3.1106.0 creates a temporary temp.ini file in a directory with insecure permissions, leading

    YüksekCVSS 8,1Kavram kanıtıEPSS %11

    kofax · printix10 Mar 2022

  • CVE-2022-25546
    34İzleyin

    Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS.

    YüksekCVSS 7,5İstismar yokEPSS %12

    tenda · ax1806 firmware10 Mar 2022

  • CVE-2022-26143
    95Hemen

    The TP-240 (aka tp240dvr) component in Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 allows remote attackers to

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %87

    mitel · micollab10 Mar 2022

  • CVE-2018-25031
    30İzleyin

    Swagger UI 4.1.2 and earlier could allow a remote attacker to conduct spoofing attacks.

    OrtaCVSS 4,3Kavram kanıtıEPSS %42

    smartbear · swagger ui11 Mar 2022

  • CVE-2022-25216
    34İzleyin

    An absolute path traversal vulnerability allows a remote attacker to download any file on the Windows file system for which the user account

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    dvdfab · 12 player11 Mar 2022

  • CVE-2022-24760
    55Planlayın

    Command Injection in Parse server

    KritikCVSS 10,0Kavram kanıtıEPSS %49

    parseplatform · parse-server11 Mar 2022

  • CVE-2022-22719
    51Planlayın

    mod_lua Use of uninitialized value of in r:parsebody

    YüksekCVSS 7,5İstismar yokEPSS %69

    apache · http server14 Mar 2022

  • CVE-2022-22720
    47Planlayın

    HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier

    KritikCVSS 9,8Kavram kanıtıEPSS %28

    apache · http server14 Mar 2022

  • CVE-2022-22721
    49Planlayın

    core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody

    KritikCVSS 9,1İstismar yokEPSS %41

    apache · http server14 Mar 2022

  • CVE-2022-23943
    54Planlayın

    mod_sed: Read/write beyond bounds

    KritikCVSS 9,8İstismar yokEPSS %50

    apache · http server14 Mar 2022

  • CVE-2021-25003
    56Planlayın

    WPCargo < 6.9.0 - Unauthenticated RCE

    KritikCVSS 9,8Kavram kanıtıEPSS %56

    wptaskforce · wpcargo track \& trace14 Mar 2022

  • CVE-2022-0169
    61Bu hafta

    Photo Gallery by 10Web < 1.6.0 - Unauthenticated SQL Injection

    KritikCVSS 9,8SilahlaştırılmışEPSS %74

    10web · photo gallery14 Mar 2022

  • CVE-2021-45010
    56Planlayın

    A path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager before 2.4.7 allows remote attac

    YüksekCVSS 8,8Kavram kanıtıEPSS %70

    prasathmani · tiny file manager15 Mar 2022

  • CVE-2022-25487
    55Planlayın

    Atom CMS v2.0 was discovered to contain a remote code execution (RCE) vulnerability via /admin/uploads.php.

    KritikCVSS 9,8Kavram kanıtıEPSS %53

    thedigitalcraft · atomcms15 Mar 2022

  • CVE-2022-0778
    52Planlayın

    Infinite loop in BN_mod_sqrt() reachable when parsing certificates

    YüksekCVSS 7,5Kavram kanıtıEPSS %73

    openssl · openssl15 Mar 2022

  • CVE-2022-26213
    47Planlayın

    Totolink X5000R_Firmware v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function setNtpCfg, via t

    KritikCVSS 9,8İstismar yokEPSS %25

    totolink · x5000r firmware15 Mar 2022

  • CVE-2021-39793
    61Bu hafta

    In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due to a logic error in the code.

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %0

    google · android16 Mar 2022

  • CVE-2021-41987
    37İzleyin

    In the SCEP Server of RouterOS in certain Mikrotik products, an attacker can trigger a heap-based buffer overflow that leads to remote code

    YüksekCVSS 8,1İstismar yokEPSS %16

    mikrotik · routeros16 Mar 2022

  • CVE-2022-0811
    41Planlayın

    A flaw was found in CRI-O in the way it set kernel options for a pod.

    YüksekCVSS 8,8Kavram kanıtıEPSS %19

    kubernetes · cri-o16 Mar 2022

  • CVE-2021-44261
    27İzleyin

    A vulnerability is in the 'BRS_top.html' page of the Netgear W104, version WAC104-V1.0.4.13, which can allow a remote attacker to access thi

    OrtaCVSS 5,3İstismar yokEPSS %20

    netgear · wac104 firmware17 Mar 2022

  • CVE-2022-26500
    67Bu hafta

    Improper limitation of path names in Veeam Backup & Replication 9.5U3, 9.5U4,10.x, and 11.x allows remote authenticated users access to inte

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %5

    veeam · veeam backup \& replication17 Mar 2022

  • CVE-2022-26501
    70Bu hafta

    Veeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2).

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %4

    veeam · veeam backup \& replication17 Mar 2022

  • CVE-2021-45967
    45Planlayın

    An issue was discovered in Pascom Cloud Phone System before 7.20.x.

    KritikCVSS 9,8Kavram kanıtıEPSS %20

    pascom · cloud phone system18 Mar 2022

  • CVE-2021-45968
    33İzleyin

    An issue was discovered in xmppserver jar in the XMPP Server component of the JIve platform, as used in Pascom Cloud Phone System before 7.2

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    pascom · cloud phone system18 Mar 2022

  • CVE-2022-26965
    39İzleyin

    In Pluck 4.7.16, an admin user can use the theme upload functionality at /admin.php?action=themeinstall to perform remote code execution.

    YüksekCVSS 7,2Kavram kanıtıEPSS %36

    pluck-cms · pluck18 Mar 2022

  • CVE-2022-24637
    69Bu hafta

    Open Web Analytics (OWA) before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to g

    KritikCVSS 9,8SilahlaştırılmışEPSS %99

    openwebanalytics · open web analytics18 Mar 2022

  • CVE-2020-25176
    41Planlayın

    Rockwell Automation ISaGRAF5 Runtime Relative Path Traversal

    KritikCVSS 9,8İstismar yokEPSS %6

    schneider-electric · easergy t300 firmware18 Mar 2022

  • CVE-2022-22587
    72Bu hafta

    A memory corruption issue was addressed with improved input validation.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %11

    apple · ipados18 Mar 2022

  • CVE-2022-22620
    70Bu hafta

    A use after free issue was addressed with improved memory management.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %16

    apple · safari18 Mar 2022

  • CVE-2022-25450
    42Planlayın

    Tenda AC6 V15.03.05.09_multi was discovered to contain a stack overflow via the list parameter in the SetVirtualServerCfg function.

    KritikCVSS 9,8İstismar yokEPSS %11

    tenda · ac6 firmware18 Mar 2022

  • CVE-2022-26265
    48Planlayın

    Contao Managed Edition v1.5.0 was discovered to contain a remote command execution (RCE) vulnerability via the component php_cli parameter.

    KritikCVSS 9,8Kavram kanıtıEPSS %30

    contao · contao18 Mar 2022

  • CVE-2022-27226
    45Planlayın

    A CSRF issue in /api/crontab on iRZ Mobile Routers through 2022-03-16 allows a threat actor to create a crontab entry in the router administ

    YüksekCVSS 8,8Kavram kanıtıEPSS %33

    irz · ru21 firmware19 Mar 2022

  • CVE-2022-0415
    55Planlayın

    Remote Command Execution in uploading repository file in gogs/gogs

    YüksekCVSS 8,8Kavram kanıtıEPSS %65

    gogs · gogs21 Mar 2022

  • CVE-2022-26960
    51Planlayın

    connector.minimal.php in std42 elFinder through 2.1.60 is affected by path traversal.

    KritikCVSS 9,1Kavram kanıtıEPSS %50

    std42 · elfinder21 Mar 2022

  • CVE-2022-24237
    43Planlayın

    The snaptPowered2 component of Snapt Aria v12.8 was discovered to contain a command injection vulnerability.

    YüksekCVSS 8,8İstismar yokEPSS %25

    snapt · aria21 Mar 2022

  • CVE-2022-25766
    45Planlayın

    Remote Code Execution (RCE)

    YüksekCVSS 8,8İstismar yokEPSS %34

    ungit project · ungit21 Mar 2022

  • CVE-2022-0364
    42Planlayın

    Modern Events Calendar Lite < 6.4.0 - Contributor+ Stored Cross Site Scripting

    OrtaCVSS 5,4İstismar yokEPSS %69

    webnus · modern events calendar lite21 Mar 2022

  • CVE-2022-0591
    42Planlayın

    Formcraft3 < 3.8.28 - Unauthenticated SSRF

    KritikCVSS 9,1Kavram kanıtıEPSS %20

    subtlewebinc · formcraft321 Mar 2022

  • CVE-2022-0739
    60Bu hafta

    BookingPress < 1.0.11 - Unauthenticated SQL Injection

    KritikCVSS 9,8SilahlaştırılmışEPSS %37

    reputeinfosystems · bookingpress21 Mar 2022

  • CVE-2022-0747
    43Planlayın

    Infographic Maker - iList < 4.3.8 - Unauthenticated SQL Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %14

    quantumcloud · infographic maker21 Mar 2022

  • CVE-2022-0760
    42Planlayın

    Simple Link Directory < 7.7.2 - Unauthenticated SQL injection

    KritikCVSS 9,8Kavram kanıtıEPSS %10

    quantumcloud · simple link directory21 Mar 2022

  • CVE-2022-23347
    34İzleyin

    BigAnt Software BigAnt Server v5.6.06 was discovered to be vulnerable to directory traversal attacks.

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    bigantsoft · bigant server21 Mar 2022

  • CVE-2022-26148
    55Planlayın

    An issue was discovered in Grafana through 7.3.4, when integrated with Zabbix.

    KritikCVSS 9,8Kavram kanıtıEPSS %52

    grafana · grafana21 Mar 2022

  • CVE-2022-27228
    45Planlayın

    In the vote (aka "Polls, Votes") module before 21.0.100 of Bitrix Site Manager, a remote unauthenticated attacker can execute arbitrary code

    KritikCVSS 9,8Kavram kanıtıEPSS %20

    bitrix24 · bitrix2422 Mar 2022

  • CVE-2022-26187
    45Planlayın

    TOTOLINK N600R V4.3.0cu.7570_B20200620 was discovered to contain a command injection vulnerability via the pingCheck function.

    KritikCVSS 9,8İstismar yokEPSS %19

    totolink · n600r firmware22 Mar 2022

  • CVE-2022-0888
    51Planlayın

    Ninja Forms - File Uploads Extension <= 3.3.0 - Arbitrary File Upload

    KritikCVSS 9,8İstismar yokEPSS %39

    ninjaforms · ninja forms file uploads23 Mar 2022

  • CVE-2022-22951
    42Planlayın

    VMware Carbon Black App Control (8.5.x prior to 8.5.14, 8.6.x prior to 8.6.6, 8.7.x prior to 8.7.4 and 8.8.x prior to 8.8.2) contains an OS

    KritikCVSS 9,1İstismar yokEPSS %20

    vmware · carbon black app control23 Mar 2022

  • CVE-2022-23881
    56Planlayın

    ZZZCMS zzzphp v2.1.0 was discovered to contain a remote command execution (RCE) vulnerability via danger_key() at zzz_template.php.

    KritikCVSS 9,8Kavram kanıtıEPSS %56

    zzzcms · zzzphp23 Mar 2022

  • CVE-2022-24934
    45Planlayın

    wpsupdater.exe in Kingsoft WPS Office through 11.2.0.10382 allows remote code execution by modifying HKEY_CURRENT_USER in the registry.

    KritikCVSS 9,8Kavram kanıtıEPSS %20

    wps · wps office23 Mar 2022

  • CVE-2022-1058
    40Planlayın

    Open Redirect on login in go-gitea/gitea

    OrtaCVSS 6,1Kavram kanıtıEPSS %53

    gitea · gitea24 Mar 2022

  • CVE-2022-21820
    30İzleyin

    NVIDIA DCGM contains a vulnerability in nvhostengine, where a network user can cause detection of error conditions without action, which may

    OrtaCVSS 6,3İstismar yokEPSS %16

    nvidia · data center gpu manager24 Mar 2022

  • CVE-2022-26272
    46Planlayın

    A remote code execution (RCE) vulnerability in Ionize v1.0.8.1 allows attackers to execute arbitrary code via a crafted string written to th

    KritikCVSS 9,8İstismar yokEPSS %22

    ionizecms · ionize24 Mar 2022

  • CVE-2022-1040
    99Hemen

    An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    sophos · sfos25 Mar 2022

  • CVE-2018-25032
    46Planlayın

    zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

    YüksekCVSS 7,5Kavram kanıtıEPSS %51

    zlib · zlib25 Mar 2022

  • CVE-2022-26263
    37İzleyin

    Yonyou u8 v13.0 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability via the component /u8sl/WebHelp.

    OrtaCVSS 6,1Kavram kanıtıEPSS %41

    yonyou · u8\+25 Mar 2022