CVEs published in April 2022
3,733 vulnerabilities, 310 critical, 15 exploited.
libarchiveOSS-FuzzHeap-use-after-free in read_data_compressedNo score- moment, debian linux, fedoraproject fedora +2 more +4 morePath Traversal in Moment.js7.5 High
- gpac, gpac gpac/gpac +1 moreInf loop in gpac/gpac4.0 Medium
- idearespa reftreeAn unrestricted file upload vulnerability in IdeaRE RefTree before 2021.09.17 allows remote...8.8 High
- idearespa reftreeA directory traversal vulnerability in IdeaRE RefTree before 2021.09.17 allows remote...6.5 Medium
- swaywm swaylockswaylock before 1.6 allows attackers to trigger a crash and achieve unlocked access to a Wayland...9.1 Critical
- barco control room management suiteBarco Control Room Management through Suite 2.9 Build 0275 was discovered to be vulnerable to...7.5 High
- belden eagle 20 tofino 943 987-501-tx\/tx firmware, eagle 20 tofino 943 987-502 -tx\/mm firmware, eagle 20 tofino 943 987-504-mm\/tx firmware +10 more +12 moreOn Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21,...6.8 Medium
- belden eagle 20 tofino 943 987-501-tx\/tx firmware, eagle 20 tofino 943 987-502 -tx\/mm firmware, eagle 20 tofino 943 987-504-mm\/tx firmware +10 more +12 moreOn Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21,...7.5 High
- belden eagle 20 tofino 943 987-501-tx\/tx firmware, eagle 20 tofino 943 987-502 -tx\/mm firmware, eagle 20 tofino 943 987-504-mm\/tx firmware +10 more +12 moreOn Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21,...9.8 Critical
- belden eagle 20 tofino 943 987-501-tx\/tx firmware, eagle 20 tofino 943 987-502 -tx\/mm firmware, eagle 20 tofino 943 987-504-mm\/tx firmware +8 more +10 moreOn Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon...7.5 High
- belden eagle 20 tofino 943 987-501-tx\/tx firmware, eagle 20 tofino 943 987-502 -tx\/mm firmware, eagle 20 tofino 943 987-504-mm\/tx firmware +8 more +10 moreOn Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon...7.5 High
- belden eagle 20 tofino 943 987-501-tx\/tx firmware, eagle 20 tofino 943 987-502 -tx\/mm firmware, eagle 20 tofino 943 987-504-mm\/tx firmware +10 more +12 moreOn Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21,...6.8 Medium
- busyboxBusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to...8.8 High
- debian linux, linux kernel, fedoraproject fedora +8 more +10 moreusb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c in the Linux kernel through 5.17.1 has a...5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +8 more +10 moremcba_usb_start_xmit in drivers/net/can/usb/mcba_usb.c in the Linux kernel through 5.17.1 has a...5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a...7.8 High
- janeczku calibre-web, janeczku/calibre-web +1 moreImproper Authorization in janeczku/calibre-web4.3 Medium
- allmediaserverMediaserver.exe in ALLMediaServer 1.6 has a stack-based buffer overflow that allows remote...9.8 Critical
- janeczku calibre-web, janeczku/calibre-web +1 moreImproper Access Control in janeczku/calibre-web4.3 Medium
- rc-httpd project rc-httpdThe rc-httpd component through 2022-03-31 for 9front (Plan 9 fork) allows ..%2f directory...7.5 High
- nginxproxymanager nginx proxy managerjc21.com Nginx Proxy Manager before 2.9.17 allows XSS during item deletion.6.8 Medium
- craftcms craft cmsCross-site Scripting in craftcms/cms6.1 Medium
- tildearrow furnacetildearrow Furnace FUR to VGM Converter stack-based overflow6.3 Medium
- yourls, yourls yourls/yourls +1 moreCross-Site Request Forgery (CSRF) in yourls/yourls3.5 Low
- verizon lvskihp firmwareVerizon LVSKIHP 5G outside devices through 2022-02-15 allow anyone (knowing the device's serial...8.1 High
libjxlOSS-FuzzNegative-size-param in jxl::N_SSE4::BlendingStage::ProcessPaddingRowNo score- dompdf project dompdfRemote code injection in dompdf/dompdf9.8 Critical
- libtiff, netapp ontap select deploy administration utility +1 moreLibTIFF tiff2ps resource consumption4.3 Medium
- google chromeInappropriate implementation in Resource Timing in Google Chrome prior to 100.0.4896.60 allowed a...6.5 Medium
- google chromeUse after free in Extensions in Google Chrome prior to 100.0.4896.60 allowed an attacker who...7.5 High
- google chromeUse after free in WebUI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who...8.8 High
- google chromeHeap buffer overflow in WebUI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker...8.8 High
- google chromeHeap buffer overflow in WebUI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker...8.8 High
- google chromeUse after free in File Manager in Google Chrome prior to 100.0.4896.60 allowed a remote attacker...8.8 High
- google chromeInappropriate implementation in Background Fetch API in Google Chrome prior to 100.0.4896.60...6.5 Medium
- google chromeInappropriate implementation in Web Cursor in Google Chrome prior to 100.0.4896.60 allowed a...6.5 Medium
- google chromeInappropriate implementation in Extensions in Google Chrome prior to 100.0.4896.60 allowed an...6.5 Medium
- google chromeUse after free in Tab Strip in Google Chrome prior to 100.0.4896.60 allowed an attacker who...8.8 High
- google chromeUse after free in Shopping Cart in Google Chrome prior to 100.0.4896.60 allowed a remote attacker...8.8 High
- google chromeType confusion in V8 in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to...8.8 High
- google chromeUse after free in WebRTC Perf in Google Chrome prior to 100.0.4896.60 allowed a remote attacker...8.8 High
- google chromeInappropriate implementation in Virtual Keyboard in Google Chrome on Chrome OS prior to 100.0...6.1 Medium
- google chromeUse after free in Cast UI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to...8.8 High
- google chromeInsufficient validation of trust input in WebOTP in Google Chrome on Android prior to 100.0.4896...8.1 High
- google chromeInappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 100.0.4896...6.5 Medium
- google chromeInappropriate implementation in Web Share API in Google Chrome on Windows prior to 100.0.4896.60...6.5 Medium
- google chromeUse after free in QR Code Generator in Google Chrome prior to 100.0.4896.60 allowed a remote...8.8 High
- google chromeUse after free in Portals in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who...8.8 High
- scala-js scala.jsrandomUUID in Scala.js before 1.10.0 generates predictable values.7.5 High
- Show moreLoading…