CVEs published March 7 to March 13, 2022
532 CVEs were published Mar 7 to Mar 13, 2022, 12 of them critical. CISA added 11 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 532
- Critical
- 12
- Added to CISA KEV
- 11
- Busiest day
- Wed, Mar 9 (182)
- Quietest day
- Sun, Mar 13 (8)
- March 7, 2022128 CVEs · 3 critical
- March 8, 202274 CVEs · 1 critical
- March 9, 2022182 CVEs · 6 critical
- March 10, 202242 CVEs
- March 11, 202288 CVEs · 2 critical
- March 12, 202210 CVEs
- March 13, 20228 CVEs
Added to CISA KEV 11
- CVE-2009-3960Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and
- CVE-2013-0625Adobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote attackers to bypass authentication and possibly exe
- CVE-2013-0629Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted directories via unspeci
- CVE-2013-0631Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exploited in the wild in
- CVE-2016-6277NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before
- CVE-2017-6077ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via s
- CVE-2019-11581There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators and the SendBulkMail aAtlassian Jira Server and Data Center
- CVE-2020-8218A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code ePulse Connect Secure
- CVE-2021-21973The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in a vCenter ServVMware vCenter Server · VMware Cloud Foundation
- CVE-2022-26485Removing an XSLT parameter during processing could have lead to an exploitable use-after-free.Mozilla Firefox · Mozilla Thunderbird +1
- CVE-2022-26486An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape.Mozilla Firefox · Mozilla Thunderbird +1