CVEs published in April 2022
3,733 vulnerabilities, 310 critical, 15 exploited.
- philips vue pacs, myvue, speech +3 more +5 morePhilips Vue PACS6.1 Medium
- moxa nport iaw5000a-i/o series firmware, nport iaw5150a-12i\/o firmware, nport iaw5150a-6i\/o firmware +2 more +4 moreMoxa NPort IAW5000A-I/O Series Serial Device Server Stack-based Buffer Overflow9.8 Critical
- moxa nport iaw5000a-i/o series firmware, nport iaw5150a-12i\/o firmware, nport iaw5150a-6i\/o firmware +2 more +4 moreMoxa NPort IAW5000A-I/O Series Serial Device Server Improper Input Validation9.8 Critical
- moxa nport iaw5000a-i/o series firmware, nport iaw5150a-12i\/o firmware, nport iaw5150a-6i\/o firmware +2 more +4 moreMoxa NPort IAW5000A-I/O Series Serial Device Server Improper Input Validation7.5 High
- moxa nport iaw5000a-i/o series firmware, nport iaw5150a-12i\/o firmware, nport iaw5150a-6i\/o firmware +2 more +4 moreMoxa NPort IAW5000A-I/O Series Serial Device Server Classic Buffer Overflow7.5 High
- rockwell automation factorytalk services platformRockwell Automation FactoryTalk Services Platform Protection Mechanism Failure8.5 High
- auvesy-mdt autosave, autosave for system platform, mdt software a4sp +1 more +3 moreMDT AutoSave Inadequate Encryption Strength7.5 High
- auvesy-mdt autosave, autosave for system platform, mdt software a4sp +1 more +3 moreMDT AutoSave Relative Path Traversal7.5 High
- auvesy-mdt autosave, autosave for system platform, mdt software a4sp +1 more +3 moreMDT AutoSave Uncontrolled Search Path Element7.5 High
- auvesy-mdt autosave, autosave for system platform, mdt software a4sp +1 more +3 moreMDT AutoSave Generation of Error Message Containing Sensitive Information7.5 High
- auvesy-mdt autosave, autosave for system platform, mdt software a4sp +1 more +3 moreMDT AutoSave Command Injection10.0 Critical
- auvesy-mdt autosave, autosave for system platform, mdt software a4sp +1 more +3 moreMDT AutoSave SQL Injection9.8 Critical
- netflix consolemeUse of Externally-Controlled Format String in consoleme9.8 Critical
- auvesy-mdt autosave, autosave for system platform, mdt software a4sp +1 more +3 moreMDT AutoSave Unrestricted Upload of File with Dangerous Type7.5 High
- ui ua lite firmwareA buffer overflow vulnerability found in the UniFi Door Access Reader Lite’s (UA Lite) firmware ...10.0 Critical
- rocket.chat livechatCross-site Scripting in @rocket.chat/livechat6.1 Medium
- totaljs content management systemA cross-site scripting (XSS) vulnerability in Totaljs commit 95f54a5 allows attackers to execute...4.8 Medium
- containers podman, fedoraproject fedora, redhat developer tools +11 more +13 morePodman's default inheritable capabilities for linux container not empty7.5 High
- dell alienware update, update, command update +1 more +3 moreDell Command | Update, Dell Update, and Alienware Update versions prior to 4.5 contain a Local...7.8 High
- dell wyse device agentWyse Device Agent version 14.6.1.4 and below contain a sensitive data exposure vulnerability. A...6.0 Medium
- dell wyse device agentWyse Device Agent version 14.6.1.4 and below contain a sensitive data exposure vulnerability. A...4.4 Medium
- dell wyse device agentWyse Device Agent version 14.6.1.4 and below contain an Improper Authentication vulnerability. A...6.0 Medium
- dell wyse management suiteDell Wyse Management Suite versions 2.0 through 3.5.2 contain an unrestricted file upload...7.2 High
- simple-git project simple-gitCommand Injection8.1 High
- radare radare2, radareorg radareorg/radare2 +1 moreOut-of-bounds read in radareorg/radare26.6 Medium
- element-hq synapseUncontrolled Resource Consumption in Matrix Synapse6.5 Medium
- cocoapods cocoapods-downloaderCommand Injection8.1 High
- cocoapods cocoapods-downloaderCommand Injection8.1 High
- ibm app connect enterprise certified containerIBM App Connect Enterprise Certified Container Dashboard UI (IBM App Connect Enterprise Certified...6.5 Medium
- ibm partner engagement manager, sterling partner engagement manager +1 moreIBM Sterling Partner Engagement Manager 6.2.0 could allow an attacker to impersonate another user...5.6 Medium
- ibm partner engagement manager, sterlingpartner engagement manager +1 moreIBM SterlingPartner Engagement Manager 6.2.0 could allow a remote authenticated attacker to...5.4 Medium
- ibm partner engagement manager, sterlingpartner engagement manager +1 moreIBM SterlingPartner Engagement Manager 6.2.0 could allow a malicious user to elevate their...6.2 Medium
- ibm urbancode deployIBM UrbanCode Deploy (UCD) 7.0.5, 7.1.0, 7.1.1, and 7.1.2 uses weaker than expected cryptographic...5.9 Medium
- vcs project vcsCommand Injection8.1 High
- buildah project buildah, fedoraproject fedora, redhat enterprise linux +2 moreNon-empty default inheritable capabilities for linux container in Buildah6.8 Medium
cuyz/valinorPackagistAutomatic named constructor discovery in ValinorNo score- pagekitSQL injection in pagekit/pagekit9.8 Critical
ezsystems/ezplatform-admin-uiPackagistImproper Certificate Validation in node-sass affects eZ Platform5.3 Medium- public knowledge project open journal systemsCross-site scripting (XSS) via Host Header injection in PKP Open Journals System 2.4.8 >= 3.3...6.1 Medium
- rancherSteve API proxy impersonation8.8 High
- rancherDeleting PRTBs associated to a group doesn't cause deletion of corresponding RoleBindings8.8 High
- suse rancher, rancher desktop +1 morerancher desktop: Dashboard API is network accessible8.3 High
- hitrontech chita firmwareHitron CHITA 7.2.2.0.3b6-CD devices contain a command injection vulnerability via the Device/DDNS...9.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon mobile, qualcomm apq8096au firmware, ar6003 firmware +26 more +28 moreImproper handling of multiple session supported by PVM backend can lead to use after free in...8.4 High
- qualcomm, inc. snapdragon connectivity, snapdragon mobile, qualcomm sd 8 gen1 5g firmware, wcd9380 firmware +4 more +6 morePossible buffer overflow to improper validation of hash segment of file while allocating memory...8.1 High
- qualcomm, inc. snapdragon auto, qualcomm qca6574au firmware, qca6696 firmware +1 more +3 morePossible buffer overflow due to lack of input IB amount validation while processing the user...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +127 more +129 moreImproper validation of buffer size input to the EFS file can lead to memory corruption in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +53 more +55 morePossible assertion due to improper validation of OTA configuration in Snapdragon Auto, Snapdragon...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm ar8035 firmware, fsm10055 firmware +75 more +77 morePossible buffer overflow due to improper data validation of external commands sent via DIAG...5.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +51 more +53 morePossible assertion due to improper validation of TCI configuration in Snapdragon Auto, Snapdragon...7.5 High
- Show moreLoading…