CVEs published in April 2022
3,733 vulnerabilities, 310 critical, 15 exploited.
- beegoAccess control bypass in Beego9.8 Critical
- beegoPrivilege escalation in beego7.8 High
- beegoPrivilege escalation in beego7.8 High
- weibo android software development kitAn intent redirection issue was doscovered in Sina Weibo Android SDK 4.2.7 (com.sina.weibo.sdk...7.5 High
openvpnTuxCare,openvpn-develTuxCare +1 moreUpdate of openvpn-devel, openvpnNo scoreopenvpnTuxCare,openvpn-develTuxCare +1 moreUpdate of openvpn-devel, openvpnNo score- medialize medialize/uri.js, uri.js project uri.js +1 moreCRHTLF can lead to invalid protocol extraction potentially leading to XSS in medialize/uri.js7.2 High
- combodo itopPossible Cross-Site Request Forgery in Combodo iTop6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreDue to a layout change, iframe contents could have been rendered outside of its border. This...5.4 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreWhen generating the assembly code for <code>MLoadTypedArrayElementHole</code>, an incorrect...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreBy using a link with <code>rel="localization"</code> a use-after-free could have been triggered...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreIf a compromised content process sent an unexpected number of WebAuthN Extensions in a Register...8.8 High
- mozilla firefox esr, thunderbird +1 moreAfter a VR Process is destroyed, a reference to it may have been retained and used, leading to a...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 more<code>NSSToken</code> objects were referenced via direct points, and could have been accessed in...6.5 Medium
- easy-mock project easy mockeasy-mock v1.5.0-v1.6.0 allows remote attackers to bypass the vm2 sandbox and execute arbitrary...8.8 High
- weseek growi, weseek/growi +1 moreWeak Password Requirements in weseek/growi4.3 Medium
- livehelperchat livehelperchat/livehelperchat, live helper chat +1 moreWeak secrethash can be brute-forced in livehelperchat/livehelperchat7.5 High
- samsung t5 firmwareA DLL hijacking vulnerability in Samsung portable SSD T5 PC software before 1.6.9 could allow a...7.3 High
- gimmal sherpa connector serviceThere is an unquoted service path in Sherpa Connector Service (SherpaConnectorService.exe) 2020.2...7.8 High
- atlassian confluence data center, confluence server +1 moreAffected versions of Atlassian Confluence Server and Data Center allow users with a valid account...8.8 High
- mruby, mruby mruby/mruby +1 moreUse-After-Free in str_escape in mruby/mruby in mruby/mruby9.3 Critical
- livehelperchat livehelperchat/livehelperchat, live helper chat +1 moreSSRF filter bypass port 80, 433 in livehelperchat/livehelperchat7.7 High
- softwareag mashzone nextgenThe HTTP client in MashZone NextGen through 10.7 GA deserializes untrusted data when it gets an...9.8 Critical
- altn securitygatewayALIN MDaemon Security Gateway through 8.5.0 allows XML Injection.5.3 Medium
- bigantsoft bigant serverBigAnt Server v5.6.06 was discovered to contain an incorrect access control issue.7.5 High
- adminer, debian linux +1 moreFiles or Directories Accessible to External Parties in Adminer7.5 High
- zauner arcAn issue was discovered in Softwarebuero Zauner ARC 4.2.0.4., that allows attackers to escalate...8.8 High
- open5gsA buffer overflow in lib/sbi/message.c in Open5GS 2.3.6 and earlier allows remote attackers to...7.5 High
- open5gsA null pointer dereference in src/amf/namf-handler.c in Open5GS 2.3.6 and earlier allows remote...7.5 High
- college website content management system project website content management systemA cross-site scripting (XSS) vulnerability in College Website Content Management System v1.0...5.4 Medium
- simple student information system project student information systemSimple Student Information System v1.0 was discovered to contain a SQL injection vulnerability...9.8 Critical
- zauner arcAn issue was discovered in Softwarebuero Zauner ARC 4.2.0.4. There is storage of Passwords in a...5.9 Medium
- zauner arcAn issue was discovered in Softwarebuero Zauner ARC 4.2.0.4. There is Improper Handling of Case...7.5 High
- dcnglobal s4600-10p-si firmwareAn issue was discovered on DCN (Digital China Networks) S4600-10P-SI devices before R0241.0470....7.4 High
- zauner arcAn issue was discovered in Softwarebuero Zauner ARC 4.2.0.4. There is Cleartext Transmission of...5.9 Medium
- flexwatch fw3170-ps-e firmwareSeyeon Tech Co., Ltd FlexWATCH FW3170-PS-E Network Video System 4.23-3000_GY allows attackers to...7.5 High
- haloHalo Blog CMS v1.4.17 was discovered to allow attackers to upload arbitrary files via the...7.5 High
- mingsoft mcmsSQL injection in net.mingsoft:ms-mcms9.8 Critical
- github enterprise serverPath traversal in GitHub Enterprise Server management console leading to a bypass of CSRF protections8.8 High
openexrOSS-FuzzHeap-buffer-overflow in Imf_3_1::memstream_readNo scorelibvipsOSS-FuzzHeap-buffer-overflow in jxl::N_AVX2::BlendingStage::ProcessPaddingRowNo scorelibvipsOSS-FuzzHeap-use-after-free in decode_mcuNo scorelibvipsOSS-FuzzHeap-use-after-free in start_pass_phuff_decoderNo scorelibvipsOSS-FuzzHeap-use-after-free in read_markersNo score- impresscmsSQL injection in ImpressCMS7.2 High
- simplemachines simple machines forumSimpleMachinesForum 2.1.1 and earlier allows remote authenticated administrators to execute...7.2 High
- debian linux, fedoraproject fedora, xen +2 moreIOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to...7.8 High
- debian linux, fedoraproject fedora, xen +2 moreIOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to...7.8 High
- debian linux, fedoraproject fedora, xen +2 moreIOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to...7.8 High
- Show moreLoading…