CVEs published March 9, 2022
182 CVEs were published on March 9, 2022: 6 critical, 61 high. 1 is now in CISA KEV.
- Published
- 182
- Critical
- 6
- High
- 61
- Medium
- 43
- Low
- 7
- Unrated
- 65
- Now in CISA KEV
- 1
- Fix available
- 93
Most affected products
- Microsoft Windows
- 30
- Microsoft Azure Site Recovery VMWare to Azure
- 11
- Aternity SteelCentral AppInternals Dynamic Sampling Agent
- 7
- Microsoft HEVC Video Extension · Microsoft HEVC Video Exten…
- 6
- MediaTek MT6761, MT6762, MT6765, MT6768, MT6771, MT6779, MT…
- 5
- IPCOMM ipDIO
- 4
- Microsoft Office · Microsoft 365 Apps for Enterprise
- 4
- Zabbix Frontend
- 4
- kernel
- 2
- Mattermost
- 2
Critical 6
- CVE-2021-42854Directory Traversal Read/Write/Delete at PluginServletAternity SteelCentral AppInternals Dynamic Sampling Agent
- CVE-2021-42787Directory Traversal Write/Delete/Partial Read at AgentConfigurationServletAternity SteelCentral AppInternals Dynamic Sampling Agent
- CVE-2021-42786Remote Code Execution at AgentControllerServletAternity SteelCentral AppInternals Dynamic Sampling Agent
- CVE-2021-42853Directory Traversal Delete/Read at AgentDiagnosticServletAternity SteelCentral AppInternals Dynamic Sampling Agent
- CVE-2022-26143The TP-240 (aka tp240dvr) component in Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 allows remote attackers to
- CVE-2022-0482Exposure of Private Personal Information to an Unauthorized Actor in alextselegidis/easyappointmentsalextselegidis/easyappointments
High 61
- CVE-2021-22783A CWE-200: Information Exposure vulnerability exists which could allow a session hijack when the door panel is communicating with the door.Schneider Electric Ritto Wiser Door
- CVE-2022-24753Code injection in Stripe CLI on windowsstripe-cli · github.com/stripe/stripe-cli
- CVE-2022-24734Remote code execution in mybbmybb
- CVE-2021-32025An elevation of privilege vulnerability in the QNX Neutrino Kernel of affected versions of QNX Software Development Platform version(s) 6.4.BlackBerry QNX Software Development Platform (SDP), QNX OS…
- CVE-2022-0715A CWE-287: Improper Authentication vulnerability exists that could cause an attacker to arbitrarily change the behavior of the UPS when a keSchneider Electric APC Smart-UPS · Schneider Electric Smart…
- CVE-2022-24525Windows Update Stack Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-24520Azure Site Recovery Remote Code Execution VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-24517Azure Site Recovery Remote Code Execution VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-24510Microsoft Office Visio Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise
- CVE-2022-24509Microsoft Office Visio Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise
- CVE-2022-24508Win32 File Enumeration Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-24507Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-24505Windows ALPC Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-24501VP9 Video Extensions Remote Code Execution VulnerabilityMicrosoft VP9 Video Extensions
- CVE-2022-24471Azure Site Recovery Remote Code Execution VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-24470Azure Site Recovery Remote Code Execution VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-24469Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-24468Azure Site Recovery Remote Code Execution VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-24467Azure Site Recovery Remote Code Execution VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-24464.NET and Visual Studio Denial of Service VulnerabilityMicrosoft .NET · Microsoft Visual Studio +12
- CVE-2022-24461Microsoft Office Visio Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise
- CVE-2022-24460Tablet Windows User Interface Application Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-24459Windows Fax and Scan Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-24457HEIF Image Extensions Remote Code Execution VulnerabilityMicrosoft HEIF Image Extension
- CVE-2022-24456HEVC Video Extensions Remote Code Execution VulnerabilityMicrosoft HEVC Video Extension · Microsoft HEVC Video Exten…
- CVE-2022-24455Windows CD-ROM Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-24454Windows Security Support Provider Interface Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-24453HEVC Video Extensions Remote Code Execution VulnerabilityMicrosoft HEVC Video Extension · Microsoft HEVC Video Exten…
- CVE-2022-24452HEVC Video Extensions Remote Code Execution VulnerabilityMicrosoft HEVC Video Extension · Microsoft HEVC Video Exten…
- CVE-2022-24451VP9 Video Extensions Remote Code Execution VulnerabilityMicrosoft VP9 Video Extensions
- CVE-2022-23301HEVC Video Extensions Remote Code Execution VulnerabilityMicrosoft HEVC Video Extension · Microsoft HEVC Video Exten…
- CVE-2022-23300Raw Image Extension Remote Code Execution VulnerabilityMicrosoft Raw Image Extension
- CVE-2022-23299Windows PDEV Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-23298Windows NT OS Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-23296Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-23295Raw Image Extension Remote Code Execution VulnerabilityMicrosoft Raw Image Extension
- CVE-2022-23294Windows Event Tracing Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-23293Windows Fast FAT File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-23291Windows DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-23290Windows Inking COM Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-23288Windows DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-23287Windows ALPC Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-23286Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-23285Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-23284Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-23283Windows ALPC Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-23282Paint 3D Remote Code Execution VulnerabilityMicrosoft Paint
- CVE-2022-23277Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server 2013 Cumulative Update · Micro… +1
- CVE-2022-23266Microsoft Defender for IoT Elevation of Privilege VulnerabilityMicrosoft Defender for IoT
- CVE-2022-23265Microsoft Defender for IoT Remote Code Execution VulnerabilityMicrosoft Defender for IoT
- CVE-2022-22007HEVC Video Extensions Remote Code Execution VulnerabilityMicrosoft HEVC Video Extension · Microsoft HEVC Video Exten…
- CVE-2022-22006HEVC Video Extensions Remote Code Execution VulnerabilityMicrosoft HEVC Video Extension · Microsoft HEVC Video Exten…
- CVE-2022-21990Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows · Microsoft Remote Desktop client for Win…
- CVE-2022-21967Xbox Live Auth Manager for Windows Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2021-42855Local privilege escalation due to misconfigured write permission on .debug_command.config fileAternity SteelCentral AppInternals Dynamic Sampling Agent
- CVE-2021-36777login-proxy sends password to attacker-provided domainopenSUSE Build service
- CVE-2022-24915ICSA-22-062-01 IPCOMM ipDIOIPCOMM ipDIO
- CVE-2022-22985ICSA-22-062-01 IPCOMM ipDIOIPCOMM ipDIO
- CVE-2022-0896Improper Neutralization of Special Elements Used in a Template Engine in microweber/microwebermicroweber/microweber
- CVE-2022-0881Insecure Storage of Sensitive Information in chocobozzz/peertubechocobozzz/peertube
- CVE-2022-0204A heap overflow vulnerability was found in bluez in versions prior to 5.63.bluez
Medium, low and unrated 115
- CVE-2022-24323A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of communication between Schneider Electric EcoStruxure Process Expert · Schneider E…
- CVE-2022-24322A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a disruption of comSchneider Electric EcoStruxure Control Expert
- CVE-2022-24744Insufficient Session Expiration in shopwareshopware platform · shopware/platform +1
- CVE-2022-24745Guest session is shared between customers in shopwareshopware platform · shopware/platform +1
- CVE-2022-24746HTML injection possibility in voucher code formshopware platform · shopware/platform +2
- CVE-2022-24747HTTP caching is marking private HTTP headers as publicshopware platform · shopware/platform +2
- CVE-2022-24748Incorrect Authentication in shopwareshopware platform · shopware/core
- CVE-2021-44632A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloud_config/router_post/upgrade_info feature, which allows
- CVE-2021-44631A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloud_config/router_post/reset_cloud_pwd feature, which all
- CVE-2021-44630A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloud_config/router_post/modify_account_pwd feature, which
- CVE-2021-44629A Buffer Overflow vulnerabilitiy exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloud_config/router_post/register feature, which allows ma
- CVE-2021-44628A Buffer Overflow vulnerabiltiy exists in TP-LINK WR-886N 20190826 2.3.8 in thee /cloud_config/router_post/login feature, which allows malic
- CVE-2021-44627A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloud_config/router_post/get_reset_pwd_veirfy_code feature,
- CVE-2021-44626A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloud_config/router_post/get_reg_verify_code feature, which
- CVE-2021-44625A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in /cloud_config/cloud_device/info interface, which allows a malici
- CVE-2022-24741High memory usage in Nextcloud servernextcloud security-advisories
- CVE-2021-44623A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 via the /cloud_config/router_post/check_reset_pwd_verify_code inter
- CVE-2021-44622A Buffer Overflow vulnerability exists in TP-LINK WR-886N 20190826 2.3.8 in the /cloud_config/router_post/check_reg_verify_code function whi
- CVE-2022-0618A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 fraSwift Project SwiftNIO HTTP2
- CVE-2022-24732Maddy Mail Server does not implement account expiryfoxcpp maddy · github.com/foxcpp/maddy
- CVE-2022-22511WAGO PLCs WBM vulnerable to reflected XSSWAGO Compact Controller CC100 · WAGO Edge Controller +5
- CVE-2022-24919Reflected XSS in graph configuration window of Zabbix FrontendZabbix Frontend
- CVE-2022-24918Reflected XSS in item configuration window of Zabbix FrontendZabbix Frontend
- CVE-2022-24917Reflected XSS in service configuration window of Zabbix FrontendZabbix Frontend
- CVE-2022-24349Reflected XSS in action configuration window of Zabbix FrontendZabbix Frontend
- CVE-2022-22806A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause an unauthenticated connection to the UPS when a malSchneider Electric SmartConnect
- CVE-2022-22805A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists that could cause remote code executioSchneider Electric SmartConnect
- CVE-2022-24995Tenda AX3 v16.03.12.10_CN was discovered to contain a stack overflow in the function fromSetSysTime.
- CVE-2021-46408Tenda AX12 v22.03.01.21 was discovered to contain a stack buffer overflow in the function sub_422CE4.
- CVE-2022-25566Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function saveParentControlInfo.
- CVE-2022-25560Tenda AX12 v22.03.01.21 was discovered to contain a stack overflow in the function sub_4327CC.
- CVE-2022-25561Tenda AX12 v22.03.01.21 was discovered to contain a stack overflow in the function sub_42DE00.
- CVE-2022-25557Tenda AX1806 v1.0.0.1 was discovered to contain a heap overflow in the function saveParentControlInfo.
- CVE-2022-25558Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetProvince.
- CVE-2022-25556Tenda AX12 v22.03.01.21 was discovered to contain a stack overflow in the function sub_42E328.
- CVE-2022-25555Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime.
- CVE-2022-25547Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime.
- CVE-2022-25553Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS.
- CVE-2022-25554Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function saveParentControlInfo.
- CVE-2022-25551Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS.
- CVE-2022-25552Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function form_fast_setting_wifi_set.
- CVE-2022-25549Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS.
- CVE-2022-25550Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function saveParentControlInfo.
- CVE-2022-25548Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function fromSetSysTime.
- CVE-2022-25546Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS.
- CVE-2022-25368Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history (stored in the CPU BHB) to influence mispredic
- CVE-2022-0022PAN-OS: Use of a Weak Cryptographic Algorithm for Stored Password HashesPalo Alto Networks PAN-OS · Palo Alto Networks Prisma Access
- CVE-2022-24526Visual Studio Code Spoofing VulnerabilityMicrosoft Visual Studio Code
- CVE-2022-24522Skype Extension for Chrome Information Disclosure VulnerabilityMicrosoft Skype Extension for Chrome
- CVE-2022-24519Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-24518Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-24515Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-24512.NET and Visual Studio Remote Code Execution VulnerabilityMicrosoft Visual Studio · Microsoft .NET +116
- CVE-2022-24511Microsoft Office Word Tampering VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2022-24506Azure Site Recovery Elevation of Privilege VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-24503Remote Desktop Protocol Client Information Disclosure VulnerabilityMicrosoft Windows · Microsoft Remote Desktop client for Win…
- CVE-2022-24502Windows HTML Platforms Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2022-24465Microsoft Intune Portal for iOS Security Feature Bypass VulnerabilityMicrosoft Intune Company Portal for iOS
- CVE-2022-24463Microsoft Exchange Server Spoofing VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Microsof…
- CVE-2022-24462Microsoft Word Security Feature Bypass VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise
- CVE-2022-23297Windows NT Lan Manager Datagram Receiver Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-23281Windows Common Log File System Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-23278Microsoft Defender for Endpoint Spoofing VulnerabilityMicrosoft Defender for Endpoint for Linux · Microsoft De… +4
- CVE-2022-23253Windows Point-to-Point Tunneling Protocol Denial of Service VulnerabilityMicrosoft Windows
- CVE-2022-22010Media Foundation Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-21977Media Foundation Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-21975Windows Hyper-V Denial of Service VulnerabilityMicrosoft Windows
- CVE-2022-21973Windows Media Center Update Denial of Service VulnerabilityMicrosoft Windows
- CVE-2022-20060In preloader (usb), there is a possible permission bypass due to a missing proper image authentication.MediaTek MT6761, MT6762, MT6765, MT6768, MT6771, MT6779, MT…
- CVE-2022-20059In preloader (usb), there is a possible out of bounds write due to a missing bounds check.MediaTek MT6761, MT6762, MT6765, MT6768, MT6771, MT6779, MT…
- CVE-2022-20058In preloader (usb), there is a possible out of bounds write due to a missing bounds check.MediaTek MT6761, MT6762, MT6765, MT6768, MT6771, MT6779, MT…
- CVE-2022-20057In btif, there is a possible memory corruption due to incorrect error handling.MediaTek MT6739, MT6758, MT6761, MT6765, MT6768, MT6769, MT…
- CVE-2022-20056In preloader (usb), there is a possible out of bounds write due to a missing bounds check.MediaTek MT6761, MT6762, MT6765, MT6768, MT6771, MT6779, MT…
- CVE-2022-20055In preloader (usb), there is a possible out of bounds write due to a missing bounds check.MediaTek MT6761, MT6762, MT6765, MT6768, MT6771, MT6779, MT…
- CVE-2022-20054In ims service, there is a possible AT command injection due to a missing permission check.MediaTek MT6580, MT6739, MT6750, MT6761, MT6762, MT6763, MT…
- CVE-2022-20051In ims service, there is a possible unexpected application behavior due to incorrect privilege assignment.MediaTek MT6731, MT6732, MT6735, MT6737, MT6739, MT6750, MT…
- CVE-2022-20050In connsyslogger, there is a possible symbolic link following due to improper link resolution.MediaTek MT6762, MT6765, MT6768, MT6769, MT6779, MT6781, MT…
- CVE-2022-20049In vpu, there is a possible escalation of privilege due to a missing permission check.MediaTek MT6779, MT6785, MT6853, MT6853T, MT6873, MT6875, M…
- CVE-2022-20053In ims service, there is a possible escalation of privilege due to a missing permission check.MediaTek MT6731, MT6732, MT6735, MT6737, MT6739, MT6750, MT…
- CVE-2022-20048In video decoder, there is a possible out of bounds write due to a missing bounds check.MediaTek MT5816, MT5835, MT6885, MT6893, MT9900, MT9901, MT…
- CVE-2022-20047In video decoder, there is a possible out of bounds write due to a missing bounds check.MediaTek MT5816, MT5835, MT6885, MT6893, MT9900, MT9901, MT…
- CVE-2021-33852A cross-site scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user's browser and can use an application as the vehicWordPress Post Duplicator Plugin
- CVE-2021-33851A cross-site scripting (XSS) attack can cause arbitrary code (JavaScript) to run in a user's browser and can use an application as the vehicWordPress Customize Login Image Plugin
- CVE-2021-42856Reflected Cross-site Scripting at DsaDataTestAternity SteelCentral AppInternals Dynamic Sampling Agent
- CVE-2021-42857Directory Traversal Partial Write at AgentDaServletAternity SteelCentral AppInternals Dynamic Sampling Agent
- CVE-2021-4023A flaw was found in the io-workqueue implementation in the Linux kernel versions prior to 5.15-rc1.kernel
- CVE-2022-24397SAP NetWeaver Enterprise Portal - versions 7.30, 7.31, 7.40, 7.50, does not sufficiently encode user-controlled inputs, resulting in reflectSAP SE SAP NetWeaver Enterprise Portal
- CVE-2022-0433A NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user triggers the map_get_next_key function of thkernel
- CVE-2021-20269A flaw was found in the permissions of a log file created by kexec-tools.kexec-tools
- CVE-2021-35251Sensitive Data Disclosure VulnerabilitySolarWinds Web Help Desk
- CVE-2022-25090Printix Secure Cloud Print Management through 1.3.1106.0 creates a temporary temp.ini file in a directory with insecure permissions, leading
- CVE-2022-24432ICSA-22-062-01 IPCOMM ipDIOIPCOMM ipDIO
- CVE-2022-21146ICSA-22-062-01 IPCOMM ipDIOIPCOMM ipDIO
- CVE-2022-0904Stack overflow in document extractor in MattermostMattermost
- CVE-2022-0903Stack overflow in SAML login in MattermostMattermost
- CVE-2022-0507Vulnerability: Authenticated SQL Injection in APIArtica PFMS Pandora FMS
- CVE-2022-0813PhpMyAdmin exposure of sensitive informationphpMyAdmin · phpmyadmin/phpmyadmin
- CVE-2022-26355Citrix Federated Authentication Service (FAS)Citrix Federated Authentication Service
- CVE-2022-22795Signiant - Manager+Agents XML External Entity (XXE)Signiant
- CVE-2022-24609Luocms v2.0 is affected by an incorrect access control vulnerability.
- CVE-2022-24608Luocms v2.0 is affected by Cross Site Scripting (XSS) in /admin/news/sort_add.php and /inc/function.php.
- CVE-2022-24607Luocms v2.0 is affected by SQL Injection in /admin/news/news_ok.php.
- CVE-2022-24606Luocms v2.0 is affected by SQL Injection in /admin/news/sort_ok.php.
- CVE-2022-24605Luocms v2.0 is affected by SQL Injection in /admin/link/link_ok.php.
- CVE-2022-24604Luocms v2.0 is affected by SQL Injection in /admin/link/link_mod.php.
- CVE-2022-24603Luocms v2.0 is affected by SQL Injection in /admin/news/sort_mod.php.
- CVE-2022-24602Luocms v2.0 is affected by SQL Injection in /admin/news/news_mod.php.
- CVE-2022-24601Luocms v2.0 is affected by SQL Injection in /admin/manager/admin_mod.php.
- CVE-2022-24600Luocms v2.0 is affected by SQL Injection through /admin/login.php.
- CVE-2022-24618Heimdal.Wizard.exe installer in Heimdal Premium Security 2.5.395 and earlier has insecure permissions, which allows unprivileged local users
- CVE-2021-44750Arbitrary Code ExecutionF-Secure Elements Agent, F-Secure MDR, F-Secure Client Secu…
- CVE-2022-26778Veritas System Recovery (VSR) 18 and 21 stores a network destination password in the Windows registry during configuration of the backup con
- CVE-2022-24960Use after free vulnerability in PDFTron SDK
- CVE-2022-25943The installer of WPS Office for Windows versions prior to v11.2.0.10258 fails to configure properly the ACL for the directory where the servWPS Office Software WPS Office for Windows
- CVE-2022-0891A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or olibtiff