CVEs published March 6, 2022
12 CVEs were published on March 6, 2022: 0 critical, 1 high.
- Published
- 12
- Critical
- 0
- High
- 1
- Medium
- 3
- Low
- 1
- Unrated
- 7
- Now in CISA KEV
- 0
- Fix available
- 6
Most affected products
- F-Secure SAFE Browser for Android
- 2
- archivy/archivy · archivy
- 1
- genieacs
- 1
- medialize/uri.js · urijs
- 1
- nitely/spirit · django-spirit
- 1
- RazorEngine
- 1
High 1
Medium, low and unrated 11
- CVE-2022-0697Open Redirect in archivy/archivyarchivy/archivy · archivy
- CVE-2021-44421The pointer-validation logic in util/mem_util.rs in Occlum before 0.26.0 for Intel SGX acts as a confused deputy that allows a local attacke
- CVE-2021-44749Universal Cross-Site Scripting Vulnerability in F-Secure SAFE Browser Protection for AndroidF-Secure SAFE Browser for Android
- CVE-2021-44748Universal Cross-Site Scripting Vulnerability in F-Secure SAFE Browser for AndroidF-Secure SAFE Browser for Android
- CVE-2022-0869Multiple Open Redirect in nitely/spiritnitely/spirit · django-spirit
- CVE-2021-46704In GenieACS 1.2.x before 1.2.8, the UI interface API is vulnerable to unauthenticated OS command injection via the ping host argument (lib/ugenieacs
- CVE-2021-46703In the IsolatedRazorEngine component of Antaris RazorEngine through 4.5.1-alpha001, an attacker can execute arbitrary .NET code in a sandboxRazorEngine
- CVE-2022-26490st21nfca_connectivity_event_received in drivers/nfc/st21nfca/se.c in the Linux kernel through 5.16.12 has EVT_TRANSACTION buffer overflows b
- CVE-2022-26495In nbd-server in nbd before 3.24, there is an integer overflow with a resultant heap-based buffer overflow.
- CVE-2022-26496In nbd-server in nbd before 3.24, there is a stack-based buffer overflow.
- CVE-2022-26505A DNS rebinding issue in ReadyMedia (formerly MiniDLNA) before 1.3.1 allows a remote web server to exfiltrate media files.