CVEs published in April 2022
3,733 vulnerabilities, 310 critical, 15 exploited.
- intelliants subrion cmsRemote code execution in Subrion8.8 High
- twisted, debian linux, fedoraproject fedora +1 more +3 moreHTTP Request Smuggling in twisted.web8.1 High
- bettinivideo sgsetupBettini Srl GAMS Product Line v4.3.0 was discovered to re-use static SSH keys across...9.8 Critical
- hisiphpAn Access Control vulnerability exists in HisiPHP 2.0.11 via special packets that are constructed...7.2 High
- ext2 file system driver project file system driverAn Unquoted Service Path vulnerability exists in Ext2Fsd v0.68 via a specially crafted file in...7.8 High
- rumble mail server project mail serverA Cross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the...5.4 Medium
- nootheme jobmonster, unknown noo jobmonster +1 moreJobMonster < 4.5.2.9 - Unauthenticated Reflected Cross-Site Scripting6.1 Medium
- eyecix careerfyCareerfy < 3.9.0 - Unauthenticated Reflected Cross-Site Scripting (XSS)6.1 Medium
- unknown wp jobsearch, eyecix jobsearch wp job board +1 moreJobSearch < 1.5.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)6.1 Medium
- apusthemes careerupCareerUp < 2.3.1 - Unauthenticated Reflected Cross-Site Scripting6.1 Medium
- nootheme jobmonster, unknown noo jobmonster +1 moreJobMonster < 4.6.6.1 - Directory Listing in Upload Folder5.3 Medium
- plugin-planet blackhole for bad botsBlackhole for Bad Bots < 3.3.2 - Arbitrary IP Address Blocking via IP Spoofing9.1 Critical
- wztechno wyzi, unknown wyzi business finder +1 moreWyzi < 2.4.3 - Reflected Cross-Site Scripting (XSS)6.1 Medium
- mark posts project posts, sven hofmann & michael schoenrock mark posts +1 moreMark Posts < 2.0.1 - Admin+ Stored Cross-Site Scripting4.8 Medium
- ad inserter project inserter, notfound ad inserter pro, spacetime ad inserter – ad manager & adsense ads +2 moreAd Inserter < 2.7.12 - Reflected Cross-Site Scripting6.1 Medium
- cybernetikz easy social iconsEasy Social Icons < 3.1.4 - Admin+ SQL Injection7.2 High
- cozmoslabs profile builder, unknown profile builder – user profile & user registration forms +1 moreProfile Builder < 3.6.8 - Admin+ Stored Cross-Site Scripting4.8 Medium
- unknown updraftplus wordpress backup plugin, updraftplus +1 moreUpdraftPlus < 1.22.9 - Reflected Cross-Site Scripting6.1 Medium
- ameliabooking ameliaAmelia < 1.0.48 - Customer+ SMS Service Abuse and Sensitive Data Disclosure5.4 Medium
- formbuilder project formbuilderFormBuilder <= 1.08 - Stored Cross-Site Scripting via CSRF6.5 Medium
- tms-outsource amelia, unknown amelia – events & appointments booking calendar +1 moreAmelia < 1.0.49 - Customer+ Arbitrary Appointments Status Update5.4 Medium
- saasproject booking package, unknown booking package – appointment booking calendar system +1 moreBooking Package < 1.5.29 - Unauthenticated Sensitive Data Disclosure7.5 High
- mappresspro mappress, unknown mappress maps for wordpress +1 moreMapPress Maps for WordPress < 2.73.13 - Admin+ File Upload to Remote Code Execution7.2 High
- insights from google pagespeed project from google pagespeed, unknown insights from google pagespeed +1 moreGoogle Pagespeed Insights < 4.0.4 - Reflected Cross-Site Scripting6.1 Medium
- material design for contact form 7 project design for contact form 7, unknown material design for contact form 7 +1 moreMaterial Design for Contact Form 7 <= 2.6.4 - Subscriber+ Arbitrary Settings Update leading to DoS6.5 Medium
- unknown library file managerLibrary File Manager < 5.2.3 - Subscriber+ Arbitrary File Creation/Upload/Deletion8.1 High
- dropdown menu widget project menu widget, unknown dropdown menu widget +1 moreDropdown Menu Widget <= 1.9.7 - Subscriber+ Arbitrary Settings Update to Stored XSS5.4 Medium
- king-theme kingcomposer, unknown page builder: kingcomposer – free drag and drop page builder by king-theme +1 moreKingComposer <= 2.9.6 - Subscriber+ Stored Cross-Site Scripting5.4 Medium
- rumble mail server project mail serverCross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the...5.4 Medium
- systemexplorer system explorerAn Unquoted Service Path vulnerability exists in System Explorer 7.0.0 via via a specially...7.8 High
- rumble mail server project mail serverA Cross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the (1)...5.4 Medium
- vembu bdr suiteAn Unquoted Service Path vulnerability exits in Vembu BDR 4.2.0.1 via a specially crafted file in...7.8 High
- bvpnAn Unquoted Service Path vulnerability exists in bVPN 2.5.1 via a specially crafted file in the...7.8 High
- rumble mail server project mail serverAn Unquoted Service Path vulnerablility exists in Rumble Mail Server 0.51.3135 via via a...7.8 High
- freelanAn Unquoted Service Path vulnerability exists in FreeLAN 2.2 via a specially crafted file in the...7.8 High
- kyocera multifunction printer net viewer, net viewer +1 moreKyocera Net View Address Book Exposure8.6 High
- anytxt searcherAn Unquoted Service Path vulnerability exists in AnyTXT Searcher 1.2.394 via a specially crafted...7.8 High
- simple bakery shop management system project bakery shop management systemSimple Bakery Shop Management System v1.0 contains a file disclosure via /bsms/?page=products.4.9 Medium
- online car rental system project car rental systemCar Rental System v1.0 contains an arbitrary file upload vulnerability via the Add Car component...8.8 High
- ecommerce-website project ecommerce-websiteA cross-site scripting (XSS) vulnerability in /public/admin/index.php?add_user at Ecommerce...4.8 Medium
- ecommerce-website project ecommerce-websiteAn unrestricted file upload at /public/admin/index.php?add_product of Ecommerce-Website v1.1.0...8.8 High
- public knowledge project open journal systemsPKP Vendor Open Journal System v2.4.8 to v3.3.8 allows attackers to perform reflected cross-site...6.1 Medium
- caucho resinPath Traversal in Caucho Resin7.5 High
- rsa archerRSA Archer 6.x through 6.9 SP1 P4 (6.9.1.4) allows stored XSS.5.4 Medium
- phpipam, phpipam phpipam/phpipam +1 moreIncorrect Privilege Assignment in phpipam/phpipam6.5 Medium
- phpipam, phpipam phpipam/phpipam +1 moreIncorrect Authorization in phpipam/phpipam6.5 Medium
- phpipam, phpipam phpipam/phpipam +1 moreImproper Authorization in phpipam/phpipam6.5 Medium
- htmldoc project htmldoc, fedoraproject fedora +1 moreIn HTMLDOC 1.9.14, an infinite loop in the gif_read_lzw function can lead to a pointer...5.5 Medium
- janeczku calibre-web, janeczku/calibre-web +1 moreServer-Side Request Forgery (SSRF) in janeczku/calibre-web9.0 Critical
ghostscriptOSS-FuzzHeap-buffer-overflow in template_compose_groupNo score- Show moreLoading…