CVEs published in April 2022
3,733 vulnerabilities, 310 critical, 15 exploited.
libvipsOSS-FuzzNull-dereference READ in ubsan_GetStackTraceNo score- pjsip pjproject, pjsip, debian linux +2 morePotential heap buffer overflow when parsing DNS packets in PJSIP7.5 High
- pjsip pjproject, pjsip, debian linux +2 morePotential out-of-bound read/write in PJSIP9.8 Critical
- struktur libde265, strukturag strukturag/libde265 +1 moreHeap-based Buffer Overflow in strukturag/libde2657.4 High
- radare radare2, radareorg radareorg/radare2 +1 moreOut-of-bounds Write in libr/bin/format/ne/ne.c in radareorg/radare27.6 High
- async project async, fedoraproject fedora +1 morePrototype Pollution in async7.8 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability8.3 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability8.3 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability8.3 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability8.3 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability8.3 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability8.3 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability8.3 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability4.3 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability8.3 High
- apache pinotPinot segment push endpoint has a vulnerability in unprotected environments7.5 High
- payroll management system project management systemPayroll Management System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- online student admission project student admissionOnline Student Admission v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- online banking system project banking systemOnline Banking System v1.0 was discovered to contain a SQL injection vulnerability via the id...9.8 Critical
- online sports complex booking project sports complex bookingOnline Sports Complex Booking v1.0 was discovered to contain a SQL injection vulnerability via...9.8 Critical
- oretnom23 student grading systemStudent Grading System v1.0 was discovered to contain a SQL injection vulnerability via the user...9.8 Critical
- angeljudesuarez insurance management systemInsurance Management System 1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- employee performance evaluation project performance evaluationEmployee Performance Evaluation v1.0 was discovered to contain a SQL injection vulnerability via...9.8 Critical
- matrimony project matrimonyMatrimony v1.0 was discovered to contain a SQL injection vulnerability via the Password parameter.9.8 Critical
- combodo itopCross-site Scripting in Combodo iTop5.4 Medium
- zohocorp manageengine adaudit plusZoho ManageEngine ADAudit Plus before 7060 is vulnerable to an unauthenticated XXE attack that...9.8 Critical
craftcms/cmsPackagistXSS Injection VulnerabilityNo score- monospace directusInsecure default value for CORS configuration9.8 Critical
- combodo itopCode Injection in Combodo iTop8.8 High
- zohocorp manageengine supportcenter plusZoho ManageEngine SupportCenter Plus before 11020 allows Stored XSS in the request history.5.4 Medium
- zohocorp manageengine servicedesk plusZoho ManageEngine ServiceDesk Plus before 13001 allows anyone to know the organisation's default...5.3 Medium
- zohocorp manageengine adaudit plusZoho ManageEngine ADAudit Plus before 7055 allows authenticated Privilege Escalation on...8.8 High
- jellycmsJellycms v3.8.1 and below was discovered to contain an arbitrary file upload vulnerability via ...8.8 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2021.3.3 it was possible to get passwords from protected fields8.4 High
- jetbrains youtrackIn JetBrains YouTrack before 2022.1.43700 it was possible to inject JavaScript into Markdown in...7.3 High
- jetbrains youtrackIn JetBrains YouTrack before 2022.1.43563 it was possible to include an iframe from a third-party...4.6 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2022.1.43563 HTML code from the issue description was being rendered5.7 Medium
- radare radare2, radareorg radareorg/radare2 +1 moreheap-buffer-overflow in radareorg/radare27.5 High
pocketmine/bedrock-protocolPackagistBuffer length underflow in LoginPacket causing unchecked exceptions to be thrown7.5 High- php memcachedPHP-Memcached v2.2.0 and below contains an improper NULL termination which allows attackers to...9.8 Critical
- ibm mq applianceIBM MQ Appliance 9.2 CD and 9.2 LTS could allow an attacker to enumerate account credentials due...5.3 Medium
- ibm mq applianceIBM MQ Appliance 9.2 CD and 9.2 LTS are vulnerable to a denial of service in the Login component...5.3 Medium
- tastyigniter, tastyigniter tastyigniter/tastyigniter +1 moreCross-site Scripting (XSS) - DOM in tastyigniter/tastyigniter7.4 High
- jerryscriptStack overflow vulnerability in Jerryscript before commit...9.8 Critical
- wwbn avideoOpen redirect in wwbn/avideo6.1 Medium
- jeesiteJeesite 1.2.7 uses the apache shiro version 1.2.3 affected by CVE-2016-4437. Because of this...9.8 Critical
- horizontcms project horizontcmsFile upload vulnerability in HorizontCMS before 1.0.0-beta.3 via uploading a .htaccess and *...9.8 Critical
- valine.js valineCross site scripting in valine5.4 Medium
- wwbn avideoCross Site Scripting (XSS) vulnerability in objects/function.php in function getDeviceID in WWBN...6.1 Medium
- jerryscriptBuffer overflow vulnerability in file ecma-builtin-array-prototype.c:909 in function...9.8 Critical
- Show moreLoading…