CVEs published in April 2022
3,733 vulnerabilities, 310 critical, 15 exploited.
- cisco telepresence video communication server, telepresence video communication server (vcs) expressway +1 moreCisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities9.0 Critical
- cisco telepresence video communication server, telepresence video communication server (vcs) expressway +1 moreCisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities9.0 Critical
- cisco web security appliance (wsa), asyncos +1 moreMultiple Cisco Security Products Simple Network Management Protocol Service Denial of Service Vulnerability5.3 Medium
- cisco staros, asr 5000 series software +1 moreCisco StarOS Command Injection Vulnerability6.0 Medium
- cisco secure network analyticsCisco Secure Network Analytics Network Diagrams Application Cross-Site Scripting Vulnerability5.4 Medium
- cisco webex meetings, webex meetings online +1 moreCisco Webex Meetings Java Deserialization Vulnerability5.4 Medium
- cisco ip phone 7800 series with multiplatform firmware, ip phone 6825 firmware, ip phone 6841 firmware +15 more +17 moreCisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware Cross-Site Request Forgery Vulnerability6.8 Medium
- cisco asyncos, web security appliance (wsa) +1 moreCisco Web Security Appliance Stored Cross-Site Scripting Vulnerability5.4 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Sensitive Information Disclosure Vulnerability6.5 Medium
- cisco web security appliance (wsa), web security appliance +1 moreCisco Web Security Appliance Filter Bypass Vulnerability5.8 Medium
- apache nifiInsufficiently protected credentials4.3 Medium
- finn podium layout, podium-lib proxy, finn podium proxy +2 moreDenial of Service in @podium/layout and @podium/proxy7.5 High
- fortinet fortiwanA use of a one-way hash with a predictable salt vulnerability [CWE-760] in FortiWAN before 4.5.9...6.2 Medium
- fortinet fortiauthenticatorAn improper neutralization of special elements used in an OS command vulnerability in the command...6.7 Medium
- fortinet fortiwanAn improper neutralization of input during web page generation vulnerability [CWE-79] in FortiWAN...7.2 High
- fortinet forticlient, forticlientlinux +1 moreAn improper input validation vulnerability in FortiClient for Linux 6.4.x before 6.4.3,...7.1 High
- fortinet fortiwebA relative path traversal in FortiWeb versions 6.4.1, 6.4.0, and 6.3.0 through 6.3.15 may allow...6.5 Medium
- fortinet fortianalyzer, fortimanager, fortiportal +1 more +3 moreMultiple OS command injection (CWE-78) vulnerabilities in the command line interface of FortiManager 6.2.7 and below, 6.4.5 and below and all versions of 6.2.x, 6.0.x and 5.6.x, FortiAnalyzer 6.2.7 an…7.8 High
- ibm watson queryIBM Watson Query with Cloud Pak for Data as a Service could allow an authenticated user to obtain...3.9 Low
- orangehrmOrangeHRM 4.10 is vulnerable to a Host header injection redirect via viewPersonalDetails endpoint.5.4 Medium
- orangehrmOrangeHRM 4.10 suffers from a Referer header injection redirect vulnerability.5.4 Medium
- orangehrmOrangeHRM 4.10 is vulnerable to Insecure Direct Object Reference (IDOR) via the end point symfony...4.3 Medium
- orangehrmOrangeHRM 4.10 is vulnerable to Stored XSS in the "Share Video" section under "OrangeBuzz" via...5.4 Medium
- radare radare2, radareorg radareorg/radare2 +1 moreHeap buffer overflow in libr/bin/format/mach0/mach0.c in radareorg/radare27.6 High
- radare radare2, radareorg radareorg/radare2 +1 moreImproper Validation of Array Index in radareorg/radare27.6 High
- fortinet forticlient, forticlientwindows +1 moreA improper initialization in Fortinet FortiClient (Windows) version 6.0.10 and below, version 6.2...8.2 High
- fortinet fortiedrA use of hard-coded cryptographic key vulnerability [CWE-321] in the registration mechanism of...7.8 High
- fortinet forticlient, forticlientlinux +1 moreAn exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in...4.3 Medium
- fortinet fortiwanA use of a broken or risky cryptographic algorithm vulnerability [CWE-327] in the Dynamic Tunnel...6.5 Medium
- fortinet fortiwanMultiple improper neutralization of special elements used in an OS command vulnerabilities (CWE...7.2 High
- fortinet fortiwanMultiple improper neutralization of special elements used in an SQL command vulnerabilities in...9.8 Critical
- fortinet fortiwanMultiple stack-based buffer overflow vulnerabilities [CWE-121] both in network daemons and in the...8.1 High
- fortinet fortiedrA use of hard-coded cryptographic key vulnerability [CWE-321] in FortiEDR versions 5.0.2, 5.0.1,...9.1 Critical
- fortinet fortisandboxAn improper input validation vulnerability in the sniffer interface of FortiSandbox before 3.2.2...5.4 Medium
- fortinet fortiedrA improper control of a resource through its lifetime in Fortinet FortiEDR version 5.0.3 and...4.4 Medium
- livehelperchat livehelperchat/livehelperchat, live helper chat +1 moreXSS in livehelperchat in livehelperchat/livehelperchat8.8 High
- sap information system project information system, unspecified sap information system +1 moreSAP Information System POST Request add_admin.php improper authentication7.3 High
- apperta openeyesApperta Foundation OpenEyes 3.5.1 allows remote attackers to view the sensitive information of...6.5 Medium
- apperta openeyeA stored cross-site scripting (XSS) vulnerability was identified in Apperta Foundation OpenEyes 3...5.4 Medium
- ivanti avalancheIvanti Avalanche (Premise) 6.3.2 allows remote unauthenticated users to read arbitrary files via...7.5 High
- wisc htcondor, debian linux +1 moreAn issue was discovered in HTCondor 8.8.x before 8.8.16, 9.0.x before 9.0.10, and 9.1.x before 9...8.8 High
- wisc htcondorAn issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker who...7.4 High
- wisc htcondorAn issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker can...8.1 High
- digi passport firmwareDigi Passport Firmware through 1.5.1,1 is affected by a buffer overflow in the function for...7.5 High
- digi passport firmwareDigi Passport Firmware through 1.5.1,1 is affected by a buffer overflow. An attacker can supply a...7.5 High
- synametrics synamanSynaman v5.1 and below was discovered to contain weak file permissions which allows authenticated...7.8 High
- synametrics synamanThe HTTP interface of Synaman v5.1 and below was discovered to allow authenticated attackers to...7.2 High
libvipsOSS-FuzzHeap-use-after-free in decode_mcuNo scorelibvipsOSS-FuzzHeap-use-after-free in jpeg_fill_bit_bufferNo scorelibvipsOSS-FuzzUNKNOWN READ in decompress_smooth_dataNo score- Show moreLoading…