| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-40051 | Hig | 0.49 | 7.5 | 0.01 | Mar 10, 2022 | There is an unauthorized access vulnerability in system components. Successful exploitation of this vulnerability will affect confidentiality. | ||
| CVE-2021-40049 | Hig | 0.49 | 7.5 | 0.01 | Mar 10, 2022 | There is a permission control vulnerability in the PMS module. Successful exploitation of this vulnerability can lead to sensitive system information being obtained without authorization. | ||
| CVE-2021-40048 | Hig | 0.49 | 7.5 | 0.01 | Mar 10, 2022 | There is an incorrect buffer size calculation vulnerability in the video framework. Successful exploitation of this vulnerability will affect availability. | ||
| CVE-2021-40047 | Hig | 0.49 | 7.5 | 0.01 | Mar 10, 2022 | There is a vulnerability of memory not being released after effective lifetime in the Bastet module. Successful exploitation of this vulnerability may affect integrity. | ||
| CVE-2021-3739 | Hig | 0.00 | 7.1 | 0.01 | Mar 10, 2022 | A NULL pointer dereference flaw was found in the btrfs_rm_device function in fs/btrfs/volumes.c in the Linux Kernel, where triggering the bug requires ‘CAP_SYS_ADMIN’. This flaw allows a local attacker to crash the system or leak kernel internal information. The highest… | ||
| CVE-2021-3698 | Hig | 0.49 | 7.5 | 0.01 | Mar 10, 2022 | A flaw was found in Cockpit in versions prior to 260 in the way it handles the certificate verification performed by the System Security Services Daemon (SSSD). This flaw allows client certificates to authenticate successfully, regardless of the Certificate Revocation List (CRL)… | ||
| CVE-2021-32025 | Hig | 0.53 | 8.1 | 0.00 | Mar 10, 2022 | An elevation of privilege vulnerability in the QNX Neutrino Kernel of affected versions of QNX Software Development Platform version(s) 6.4.0 to 7.0, QNX Momentics all 6.3.x versions, QNX OS for Safety versions 1.0.0 to 1.0.2, QNX OS for Safety versions 2.0.0 to 2.0.1, QNX for… | ||
| CVE-2020-36517 | Hig | 0.42 | 7.5 | 0.03 | Mar 10, 2022 | An information leak in Nabu Casa Home Assistant Operating System and Home Assistant Supervised 2022.03 allows a DNS operator to gain knowledge about internal network resources via the hardcoded DNS resolver configuration. | ||
| CVE-2020-14111 | Hig | 0.51 | 7.8 | 0.00 | Mar 10, 2022 | A command injection vulnerability exists in the Xiaomi Router AX3600. The vulnerability is caused by a lack of inspection for incoming data detection. Attackers can exploit this vulnerability to execute code. | ||
| CVE-2022-0905 | Hig | 0.39 | 7.1 | 0.01 | Mar 10, 2022 | Missing Authorization in GitHub repository go-gitea/gitea prior to 1.16.4. | ||
| CVE-2021-38296 | — | Hig | 0.49 | 7.5 | 0.02 | Mar 10, 2022 | Apache Spark supports end-to-end encryption of RPC connections via "spark.authenticate" and "spark.network.crypto.enabled". In versions 3.1.2 and earlier, it uses a bespoke mutual authentication protocol that allows for full encryption key recovery. After an initial interactive… | |
| CVE-2022-24753 | Hig | 0.43 | 7.7 | 0.00 | Mar 9, 2022 | Stripe CLI is a command-line tool for the Stripe eCommerce platform. A vulnerability in Stripe CLI exists on Windows when certain commands are run in a directory where an attacker has planted files. The commands are `stripe login`, `stripe config -e`, `stripe community`, and… | ||
| CVE-2021-22783 | Hig | 0.57 | 8.8 | 0.00 | Mar 9, 2022 | A CWE-200: Information Exposure vulnerability exists which could allow a session hijack when the door panel is communicating with the door. Affected Product: Ritto Wiser Door (All versions) | ||
| CVE-2022-24734 | Hig | 0.49 | 7.2 | 0.78 | Mar 9, 2022 | MyBB is a free and open source forum software. In affected versions the Admin CP's Settings management module does not validate setting types correctly on insertion and update, making it possible to add settings of supported type `php` with PHP code, executed on on _Change… | ||
| CVE-2022-24525 | Hig | 0.46 | 7.0 | 0.00 | Mar 9, 2022 | Windows Update Stack Elevation of Privilege Vulnerability | ||
| CVE-2022-24520 | Hig | 0.47 | 7.2 | 0.02 | Mar 9, 2022 | Azure Site Recovery Remote Code Execution Vulnerability | ||
| CVE-2022-24517 | Hig | 0.47 | 7.2 | 0.02 | Mar 9, 2022 | Azure Site Recovery Remote Code Execution Vulnerability | ||
| CVE-2022-24510 | Hig | 0.51 | 7.8 | 0.03 | Mar 9, 2022 | Microsoft Office Visio Remote Code Execution Vulnerability | ||
| CVE-2022-24509 | Hig | 0.51 | 7.8 | 0.03 | Mar 9, 2022 | Microsoft Office Visio Remote Code Execution Vulnerability | ||
| CVE-2022-24508 | Hig | 0.57 | 8.8 | 0.03 | Mar 9, 2022 | Win32 File Enumeration Remote Code Execution Vulnerability | ||
| CVE-2022-24507 | Hig | 0.51 | 7.8 | 0.04 | Mar 9, 2022 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | ||
| CVE-2022-24505 | Hig | 0.46 | 7.0 | 0.00 | Mar 9, 2022 | Windows ALPC Elevation of Privilege Vulnerability | ||
| CVE-2022-24501 | Hig | 0.51 | 7.8 | 0.03 | Mar 9, 2022 | VP9 Video Extensions Remote Code Execution Vulnerability | ||
| CVE-2022-24471 | Hig | 0.47 | 7.2 | 0.02 | Mar 9, 2022 | Azure Site Recovery Remote Code Execution Vulnerability | ||
| CVE-2022-24470 | Hig | 0.47 | 7.2 | 0.02 | Mar 9, 2022 | Azure Site Recovery Remote Code Execution Vulnerability | ||
| CVE-2022-24469 | Hig | 0.53 | 8.1 | 0.03 | Mar 9, 2022 | Azure Site Recovery Elevation of Privilege Vulnerability | ||
| CVE-2022-24468 | Hig | 0.47 | 7.2 | 0.02 | Mar 9, 2022 | Azure Site Recovery Remote Code Execution Vulnerability | ||
| CVE-2022-24467 | Hig | 0.47 | 7.2 | 0.02 | Mar 9, 2022 | Azure Site Recovery Remote Code Execution Vulnerability | ||
| CVE-2022-24464 | Hig | 0.49 | 7.5 | 0.04 | Mar 9, 2022 | .NET and Visual Studio Denial of Service Vulnerability | ||
| CVE-2022-24461 | Hig | 0.51 | 7.8 | 0.03 | Mar 9, 2022 | Microsoft Office Visio Remote Code Execution Vulnerability | ||
| CVE-2022-24460 | Hig | 0.46 | 7.0 | 0.02 | Mar 9, 2022 | Tablet Windows User Interface Application Elevation of Privilege Vulnerability | ||
| CVE-2022-24459 | Hig | 0.51 | 7.8 | 0.01 | Mar 9, 2022 | Windows Fax and Scan Service Elevation of Privilege Vulnerability | ||
| CVE-2022-24457 | Hig | 0.51 | 7.8 | 0.02 | Mar 9, 2022 | HEIF Image Extensions Remote Code Execution Vulnerability | ||
| CVE-2022-24456 | Hig | 0.51 | 7.8 | 0.02 | Mar 9, 2022 | HEVC Video Extensions Remote Code Execution Vulnerability | ||
| CVE-2022-24455 | Hig | 0.51 | 7.8 | 0.01 | Mar 9, 2022 | Windows CD-ROM Driver Elevation of Privilege Vulnerability | ||
| CVE-2022-24454 | Hig | 0.51 | 7.8 | 0.01 | Mar 9, 2022 | Windows Security Support Provider Interface Elevation of Privilege Vulnerability | ||
| CVE-2022-24453 | Hig | 0.51 | 7.8 | 0.02 | Mar 9, 2022 | HEVC Video Extensions Remote Code Execution Vulnerability | ||
| CVE-2022-24452 | Hig | 0.51 | 7.8 | 0.02 | Mar 9, 2022 | HEVC Video Extensions Remote Code Execution Vulnerability | ||
| CVE-2022-24451 | Hig | 0.51 | 7.8 | 0.02 | Mar 9, 2022 | VP9 Video Extensions Remote Code Execution Vulnerability | ||
| CVE-2022-23301 | Hig | 0.51 | 7.8 | 0.02 | Mar 9, 2022 | HEVC Video Extensions Remote Code Execution Vulnerability | ||
| CVE-2022-23300 | Hig | 0.51 | 7.8 | 0.02 | Mar 9, 2022 | Raw Image Extension Remote Code Execution Vulnerability | ||
| CVE-2022-23299 | Hig | 0.51 | 7.8 | 0.08 | Mar 9, 2022 | Windows PDEV Elevation of Privilege Vulnerability | ||
| CVE-2022-23298 | Hig | 0.46 | 7.0 | 0.01 | Mar 9, 2022 | Windows NT OS Kernel Elevation of Privilege Vulnerability | ||
| CVE-2022-23296 | Hig | 0.51 | 7.8 | 0.01 | Mar 9, 2022 | Windows Installer Elevation of Privilege Vulnerability | ||
| CVE-2022-23295 | Hig | 0.51 | 7.8 | 0.02 | Mar 9, 2022 | Raw Image Extension Remote Code Execution Vulnerability | ||
| CVE-2022-23294 | Hig | 0.57 | 8.8 | 0.02 | Mar 9, 2022 | Windows Event Tracing Remote Code Execution Vulnerability | ||
| CVE-2022-23293 | Hig | 0.51 | 7.8 | 0.01 | Mar 9, 2022 | Windows Fast FAT File System Driver Elevation of Privilege Vulnerability | ||
| CVE-2022-23291 | Hig | 0.51 | 7.8 | 0.01 | Mar 9, 2022 | Windows DWM Core Library Elevation of Privilege Vulnerability | ||
| CVE-2022-23290 | Hig | 0.51 | 7.8 | 0.01 | Mar 9, 2022 | Windows Inking COM Elevation of Privilege Vulnerability | ||
| CVE-2022-23288 | Hig | 0.46 | 7.0 | 0.01 | Mar 9, 2022 | Windows DWM Core Library Elevation of Privilege Vulnerability |
- risk 0.49cvss 7.5epss 0.01
There is an unauthorized access vulnerability in system components. Successful exploitation of this vulnerability will affect confidentiality.
- risk 0.49cvss 7.5epss 0.01
There is a permission control vulnerability in the PMS module. Successful exploitation of this vulnerability can lead to sensitive system information being obtained without authorization.
- risk 0.49cvss 7.5epss 0.01
There is an incorrect buffer size calculation vulnerability in the video framework. Successful exploitation of this vulnerability will affect availability.
- risk 0.49cvss 7.5epss 0.01
There is a vulnerability of memory not being released after effective lifetime in the Bastet module. Successful exploitation of this vulnerability may affect integrity.
- risk 0.00cvss 7.1epss 0.01
A NULL pointer dereference flaw was found in the btrfs_rm_device function in fs/btrfs/volumes.c in the Linux Kernel, where triggering the bug requires ‘CAP_SYS_ADMIN’. This flaw allows a local attacker to crash the system or leak kernel internal information. The highest…
- risk 0.49cvss 7.5epss 0.01
A flaw was found in Cockpit in versions prior to 260 in the way it handles the certificate verification performed by the System Security Services Daemon (SSSD). This flaw allows client certificates to authenticate successfully, regardless of the Certificate Revocation List (CRL)…
- risk 0.53cvss 8.1epss 0.00
An elevation of privilege vulnerability in the QNX Neutrino Kernel of affected versions of QNX Software Development Platform version(s) 6.4.0 to 7.0, QNX Momentics all 6.3.x versions, QNX OS for Safety versions 1.0.0 to 1.0.2, QNX OS for Safety versions 2.0.0 to 2.0.1, QNX for…
- risk 0.42cvss 7.5epss 0.03
An information leak in Nabu Casa Home Assistant Operating System and Home Assistant Supervised 2022.03 allows a DNS operator to gain knowledge about internal network resources via the hardcoded DNS resolver configuration.
- risk 0.51cvss 7.8epss 0.00
A command injection vulnerability exists in the Xiaomi Router AX3600. The vulnerability is caused by a lack of inspection for incoming data detection. Attackers can exploit this vulnerability to execute code.
- risk 0.39cvss 7.1epss 0.01
Missing Authorization in GitHub repository go-gitea/gitea prior to 1.16.4.
- risk 0.49cvss 7.5epss 0.02
Apache Spark supports end-to-end encryption of RPC connections via "spark.authenticate" and "spark.network.crypto.enabled". In versions 3.1.2 and earlier, it uses a bespoke mutual authentication protocol that allows for full encryption key recovery. After an initial interactive…
- risk 0.43cvss 7.7epss 0.00
Stripe CLI is a command-line tool for the Stripe eCommerce platform. A vulnerability in Stripe CLI exists on Windows when certain commands are run in a directory where an attacker has planted files. The commands are `stripe login`, `stripe config -e`, `stripe community`, and…
- risk 0.57cvss 8.8epss 0.00
A CWE-200: Information Exposure vulnerability exists which could allow a session hijack when the door panel is communicating with the door. Affected Product: Ritto Wiser Door (All versions)
- risk 0.49cvss 7.2epss 0.78
MyBB is a free and open source forum software. In affected versions the Admin CP's Settings management module does not validate setting types correctly on insertion and update, making it possible to add settings of supported type `php` with PHP code, executed on on _Change…
- risk 0.46cvss 7.0epss 0.00
Windows Update Stack Elevation of Privilege Vulnerability
- risk 0.47cvss 7.2epss 0.02
Azure Site Recovery Remote Code Execution Vulnerability
- risk 0.47cvss 7.2epss 0.02
Azure Site Recovery Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.03
Microsoft Office Visio Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.03
Microsoft Office Visio Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.03
Win32 File Enumeration Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.04
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- risk 0.46cvss 7.0epss 0.00
Windows ALPC Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.03
VP9 Video Extensions Remote Code Execution Vulnerability
- risk 0.47cvss 7.2epss 0.02
Azure Site Recovery Remote Code Execution Vulnerability
- risk 0.47cvss 7.2epss 0.02
Azure Site Recovery Remote Code Execution Vulnerability
- risk 0.53cvss 8.1epss 0.03
Azure Site Recovery Elevation of Privilege Vulnerability
- risk 0.47cvss 7.2epss 0.02
Azure Site Recovery Remote Code Execution Vulnerability
- risk 0.47cvss 7.2epss 0.02
Azure Site Recovery Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.04
.NET and Visual Studio Denial of Service Vulnerability
- risk 0.51cvss 7.8epss 0.03
Microsoft Office Visio Remote Code Execution Vulnerability
- risk 0.46cvss 7.0epss 0.02
Tablet Windows User Interface Application Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Fax and Scan Service Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.02
HEIF Image Extensions Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.02
HEVC Video Extensions Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows CD-ROM Driver Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Security Support Provider Interface Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.02
HEVC Video Extensions Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.02
HEVC Video Extensions Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.02
VP9 Video Extensions Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.02
HEVC Video Extensions Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.02
Raw Image Extension Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.08
Windows PDEV Elevation of Privilege Vulnerability
- risk 0.46cvss 7.0epss 0.01
Windows NT OS Kernel Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Installer Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.02
Raw Image Extension Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.02
Windows Event Tracing Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows DWM Core Library Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Inking COM Elevation of Privilege Vulnerability
- risk 0.46cvss 7.0epss 0.01
Windows DWM Core Library Elevation of Privilege Vulnerability