CVEs published March 12, 2022
10 CVEs were published on March 12, 2022: 0 critical, 3 high.
- Published
- 10
- Critical
- 0
- High
- 3
- Medium
- 1
- Low
- 1
- Unrated
- 5
- Now in CISA KEV
- 0
- Fix available
- 6
Most affected products
- microweber/microweber
- 3
- :linux_kernel:
- 1
- github.com/Xhofe/alist
- 1
- star7th/showdoc · showdoc/showdoc
- 1
High 3
- CVE-2022-0930File upload filter bypass leading to stored XSS in microweber/microwebermicroweber/microweber
- CVE-2022-0926File upload filter bypass leading to stored XSS in microweber/microwebermicroweber/microweber
- CVE-2022-0880Cross-site Scripting (XSS) - Stored in star7th/showdocstar7th/showdoc · showdoc/showdoc
Medium, low and unrated 7
- CVE-2022-23960Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB.:linux_kernel:
- CVE-2021-36368An issue was discovered in OpenSSH before 8.9.
- CVE-2022-26966An issue was discovered in the Linux kernel before 5.16.12.
- CVE-2022-0929XSS on dynamic_text module in microweber/microwebermicroweber/microweber
- CVE-2022-26533Alist v2.1.0 and below was discovered to contain a cross-site scripting (XSS) vulnerability via /i/:data/ipa.plist.github.com/Xhofe/alist
- CVE-2022-26276An issue in index.php of OneNav v0.9.14 allows attackers to perform directory traversal.
- CVE-2022-26967GPAC 2.0 allows a heap-based buffer overflow in gf_base64_encode.