CVEs published March 27, 2022
9 CVEs were published on March 27, 2022: 1 critical, 2 high. 1 is now in CISA KEV.
- Published
- 9
- Critical
- 1
- High
- 2
- Medium
- 0
- Low
- 0
- Unrated
- 6
- Now in CISA KEV
- 1
- Fix available
- 1
Most affected products
- github.com/open-falcon/falcon-plus
- 1
- mruby/mruby
- 1
Critical 1
High 2
Medium, low and unrated 6
- CVE-2022-26255Clash for Windows v0.19.8 was discovered to allow arbitrary code execution via a crafted payload injected into the Proxies name column.
- CVE-2021-44127In DLink DAP-1360 F1 firmware version <=v6.10 in the "webupg" binary, an attacker can use the "file" parameter to execute arbitrary system c
- CVE-2022-26254WoWonder The Ultimate PHP Social Network Platform v4.0.0 was discovered to contain an access control issue which allows unauthenticated atta
- CVE-2022-26252aaPanel v6.8.21 was discovered to be vulnerable to directory traversal.
- CVE-2022-26245Falcon-plus v0.3 was discovered to contain a SQL injection vulnerability via the parameter grpName in /config/service/host.go.github.com/open-falcon/falcon-plus
- CVE-2022-26205Marky commit 3686565726c65756e was discovered to contain a remote code execution (RCE) vulnerability via the Display text fields.