CVEs published in April 2022
3,733 vulnerabilities, 310 critical, 15 exploited.
- weechatWeeChat (aka Wee Enhanced Environment for Chat) 3.2 to 3.4 before 3.4.1 does not properly verify...4.3 Medium
- mruby, mruby mruby/mruby +1 moreNULL Pointer Dereference in mrb_vm_exec with super in mruby/mruby7.1 High
grokOSS-FuzzUse-of-uninitialized-value in unsigned long grk::N_SSE4::vscheduler<grk::N_SSE4::DecompressDcShiftIrrev>No score- linux kernelCVE-2022-1205 affecting package kernel for versions less than 5.15.67.1-44.7 Medium
- debian linux, linux kernel, fedoraproject fedora +2 moreCVE-2022-1204 affecting package kernel for versions less than 5.15.82.1-15.5 Medium
- linux kernel, netapp active iq unified manager, h300s firmware +5 more +7 moreA flaw was found in the Linux kernel. This flaw allows an attacker to crash the Linux kernel by...7.5 High
- linux kernel, redhat enterprise linux +1 moreA use-after-free vulnerabilitity was discovered in drivers/net/hamradio/6pack.c of linux that...5.5 Medium
- mitsubishielectric fx5uc-32mr\/ds-ts firmware, fx5uc-32mt\/d firmware, fx5uc-32mt\/ds-ts firmware +13 more +15 moreCleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F...5.9 Medium
- mitsubishielectric fx5uc-32mr\/ds-ts firmware, fx5uc-32mt\/d firmware, fx5uc-32mt\/ds-ts firmware +13 more +15 moreCleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric MELSEC iQ-F...9.1 Critical
- mitsubishielectric fx5uc-32mr\/ds-ts firmware, fx5uc-32mt\/d firmware, fx5uc-32mt\/ds-ts firmware +13 more +15 moreAuthentication Bypass by Capture-replay vulnerability in Mitsubishi Electric MELSEC iQ-F series...8.1 High
- mitsubishielectric fx5uc-32mr\/ds-ts firmware, fx5uc-32mt\/d firmware, fx5uc-32mt\/ds-ts firmware +13 more +15 moreUse of Password Hash Instead of Password for Authentication vulnerability in Mitsubishi Electric...9.1 Critical
- mitsubishielectric fx5uc-32mr\/ds-ts firmware, fx5uc-32mt\/d firmware, fx5uc-32mt\/ds-ts firmware +13 more +15 moreUse of Weak Hash vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU all versions...8.1 High
- mitsubishielectric fx5uc-32mr\/ds-ts firmware, fx5uc-32mt\/d firmware, fx5uc-32mt\/ds-ts firmware +13 more +15 moreUse of Password Hash Instead of Password for Authentication vulnerability in Mitsubishi Electric...8.1 High
- modbus tools slave, modbustools modbus slave +1 moreModbus Tools Modbus Slave Stack-Based Buffer Overflow5.5 Medium
- omron cx-positionRockwell Automation Studio 5000 Logix Designer Code Injection7.8 High
- omron cx-positionRockwell Automation Studio 5000 Logix Designer Out-of-Bounds Write7.8 High
- omron cx-positionRockwell Automation Studio 5000 Logix Designer Use After Free7.8 High
- omron cx-positionRockwell Automation Studio 5000 Logix Designer Improper Restriction of Operations within the Bounds of a Memory Buffer7.8 High
- inductiveautomation ignition, inductive automation ignition 7 gateway, ignition 8 gateway +2 moreICSA-20-147-01 Inductive Automation Ignition (Update B)5.3 Medium
- rockwell automation studio 5000 logix designer, rockwellautomation compact guardlogix 5380 firmware, compactlogix 5380 firmware +3 more +5 moreRockwell Automation Studio 5000 Logix Designer Code Injection7.7 High
- arista eosOn Arista Strata family products which have “TCAM profile” feature enabled when Port IPv4 access-list has a rule which matches on “vxlan” as protocol then that rule and subsequent rules ( rules declar…7.5 High
- kaspersky anti-virus, endpoint security, internet security +3 more +5 moreKaspersky Anti-Virus products for home and Kaspersky Endpoint Security with antivirus databases...9.8 Critical
- kaspersky anti-virus, endpoint security, internet security +3 more +5 moreA denial-of-service issue existed in one of modules that was incorporated in Kaspersky Anti-Virus...5.5 Medium
- keycloak, redhat single sign-on +1 moreKeycloak insufficient session expiration7.1 High
- sick ftmg firmwareUnauthenticated users can access sensitive web URLs through GET request, which should be...4.9 Medium
- abb 800xa, 800xa, control software for ac 800m, base software for softcontrol +4 more +6 moreAC 800M MMS - Denial of Service vulnerability in MMS communication7.5 High
- escanav escan anti-virus, microworld technologies inc. escan anti-virus for linux +1 moreeScan Anti-Virus Local privilege escalation Vulnerability7.8 High
- bandisoft bandizipBandisoft ARK Library Out-of-bound Vulnerability7.8 High
- gitlabImproper input validation in all versions of GitLab CE/EE using sendmail to send emails allowed...5.8 Medium
- gitlabA DNS rebinding vulnerability in the Irker IRC Gateway integration in all versions of GitLab CE...5.4 Medium
- gitlabIn all versions of GitLab CE/EE, certain Unicode characters can be abused to commit malicious...6.5 Medium
- gitlabImproper access control in GitLab CE/EE versions 12.4 to 14.5.4, 14.5 to 14.6.4, and 12.6 to 14.7...4.3 Medium
- gitlabImproper access control in Gitlab CE/EE versions 12.7 to 14.5.4, 14.6 to 14.6.4, and 14.7 to 14.7...4.3 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting with 8.15 . It was...3.5 Low
- eaton intelligent power protectorSecurity issues in Intelligent Power Protector5.6 Medium
- eaton intelligent power manager (ipm 1), intelligent power manager +1 moreSecurity issues in Intelligent Power Manager (IPM 1)5.6 Medium
- vmware spring frameworkAllocation of Resources Without Limits or Throttling in Spring Framework6.5 Medium
- linux kernel, fedoraproject fedora +1 moreAn unauthorized access to the execution of the setuid file with capabilities flaw in the Linux...7.8 High
- red hat business-central, redhat descision manager, process automation +2 moreIt was observed that while login into Business-central console, HTTP request discloses sensitive...7.5 High
- oppo quick appA command injection vulerability found in quick game engine allows arbitrary remote code in quick...9.8 Critical
- redhat openshift container platform, openshift machine-config-operator +1 moreIt was found in OpenShift Container Platform 4 that ignition config, served by the Machine Config Server, can be accessed externally from clusters without authentication. The MCS endpoint (port 22623)…3.7 Low
- rockwell automation isagraf, connected component workbench, safety instrumented systems workstation +1 more +3 moreICSA-22-088-01 Rockwell Automation ISaGRAF5.5 Medium
- philips e-alert, e-alert firmware +1 moreICSMA-22-088-01 Philips e-Alert6.5 Medium
- delta electronics diaenergieDelta Electronics DIAEnergie Uncontrolledly Search Path Element7.8 High
- philips vue pacs, myvue, speech +3 more +5 morePhilips Vue PACS Use of a Broken or Risky Cryptographic Algorithm7.5 High
- philips vue pacs, myvue, speech +3 more +5 morePhilips Vue PACS Cleartext Transmission of Sensitive Information7.5 High
- philips vue pacs, myvue, speech +3 more +5 morePhilips Vue PACS Protection Mechanism Failure6.5 Medium
- philips vue pacs, myvue, speech +3 more +5 morePhilips Vue PACS Insufficiently Protected Credentials3.7 Low
- philips vue pacs, myvue, speech +3 more +5 morePhilips Vue PACS Use of a Key Past its Expiration Date8.2 High
- philips vue pacs, myvue, speech +3 more +5 morePhilips Vue PACS Improper Adherence to Coding Standards7.5 High
- Show moreLoading…