CVEs published March 6 to March 12, 2023
470 CVEs were published Mar 6 to Mar 12, 2023, 42 of them critical. CISA added 5 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 470
- Critical
- 42
- Added to CISA KEV
- 5
- Busiest day
- Tue, Mar 7 (169)
- Quietest day
- Sat, Mar 11 (8)
- March 6, 2023101 CVEs · 4 critical
- March 7, 2023169 CVEs · 10 critical
- March 8, 202355 CVEs · 16 critical
- March 9, 202358 CVEs · 5 critical
- March 10, 202369 CVEs · 6 critical
- March 11, 20238 CVEs
- March 12, 202310 CVEs · 1 critical
Added to CISA KEV 5
- CVE-2022-28810Zoho ManageEngine ADSelfService Plus before build 6122 allows a remote authenticated administrator to execute arbitrary operating OS command
- CVE-2022-33891Apache Spark shell command injection vulnerability via Spark UIApache Software Foundation Apache Spark · org.apache.spa… +1
- CVE-2022-35914/vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.
- CVE-2020-5741Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated attacker to execute arbitrary Python code.Plex Media Server
- CVE-2021-39144XStream is vulnerable to a Remote Command Execution attackx-stream xstream · com.thoughtworks.xstream:xstream