CVEs published in April 2022
3,733 vulnerabilities, 310 critical, 15 exploited.
- codesys control rte (for beckhoff cx) sl, control rte (sl), control win (sl) +5 more +7 moreCODESYS driver SysDrv3S allows SYSTEM users on Microsoft Windows to read and write in restricted memory space.7.8 High
- codesys control for beaglebone sl, control for beckhoff cx9020 sl, control for empc-a/imx6 sl +22 more +24 moreA component of the CODESYS Control runtime system allows read and write access to configuration files8.1 High
- codesys control for beaglebone sl, control for beckhoff cx9020 sl, control for empc-a/imx6 sl +26 more +28 moreUntrusted Pointer Dereference in multiple CODESYS products can lead to a DoS.7.1 High
- codesys control for beaglebone sl, control for beckhoff cx9020 sl, control for empc-a/imx6 sl +26 more +28 moreNull Pointer Dereference in multiple CODESYS products can lead to a DoS.6.5 Medium
- apache hadoopArbitrary file write in FileUtil#unpackEntries on Windows9.8 Critical
- exrick xmallA Cross Site Scripting (XSS) vulnerability exists in Exrick XMall Admin Panel as of 11/7/2021 via...6.1 Medium
- bigantsoft bigant office messenger 5An Access Control vulnerability exists in BigAntSoft BigAnt office messenger 5.6 via im_webserver...8.8 High
- seagate cortx-s3 serverA Denial of Service vulnerability exists in CORTX-S3 Server as of 11/7/2021 via the...7.5 High
- std42 elfinderelFinder Unrestricted File Upload vulnerability9.8 Critical
- jhipster generator-jhipsterSQL Injection when creating an application with Reactive SQL backend8.1 High
- tenda ac9 firmwareThere is a stack overflow vulnerability in the SetSysTimeCfg() function in the httpd service of...9.8 Critical
- online project time management system project project time management systemOnline Project Time Management System v1.0 was discovered to contain an arbitrary file write...8.8 High
- owncloud clientownCloud owncloud/android 2.20 has Incorrect Access Control for local attackers.5.5 Medium
- tenda ac9 firmwareThere is a stack overflow vulnerability in the SetStaticRouteCfg() function in the httpd service...9.8 Critical
libsolvSUSE,libzyppSUSE +1 moreSecurity update for libsolv, libzyppNo score- owncloud clientownCloud owncloud/android before 2.20 has Incorrect Access Control for physically proximate...6.8 Medium
- telesquare tlr-2855ks6 firmwareAn unauthorized file deletion vulnerability in Telesquare TLR-2855KS6 via DELETE method can allow...9.1 Critical
- telesquare tlr-2855ks6 firmwareAn unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT method can allow...7.5 High
- franklinfueling colibri firmwareInsecure handling of a download function leads to disclosure of internal files due to path...7.5 High
- sma sunny tripower firmwareInsecure direct object reference in SUNNY TRIPOWER 5.0 Firmware version 3.10.16.R leads to...8.1 High
- wavlink wl-wn531p3 firmwareA command injection vulnerability in the API of the Wavlink WL-WN531P3 router, version M31G3...9.8 Critical
- waycrate swhkdInsecure temporary file usage in SWHKD9.1 Critical
- waycrate swhkdUnsafe parsing in SWHKD5.3 Medium
- drtrustusa icheck connect bp monitor bp testing 118 firmwareDr Trust USA iCheck Connect BP Monitor BP Testing 118 1.2.1 is vulnerable to Plain text command...8.8 High
- drtrustusa icheck connect bp monitor bp testing 118 firmwareDr Trust USA iCheck Connect BP Monitor BP Testing 118 1.2.1 is vulnerable to a Replay Attack to...7.5 High
- drtrustusa icheck connect bp monitor bp testing 118 firmwareDr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 is vulnerable to Transmitting...6.5 Medium
- drtrustusa icheck connect bp monitor bp testing 118 firmwareDr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 is vulnerable to Missing...8.8 High
libvipsOSS-FuzzUNKNOWN READNo scorelibvipsOSS-FuzzHeap-use-after-free in save_markerNo scorelibvipsOSS-FuzzUNKNOWN READ in start_output_passNo scorelibvipsOSS-FuzzUNKNOWN READ in [heap]No scoreopenexrOSS-FuzzHeap-buffer-overflow in generic_unpackNo scorednsmasqOSS-FuzzHeap-buffer-overflow in dhcp_replyNo score- google chromeUse after free in Browser History in Google Chrome prior to 100.0.4896.75 allowed a remote...6.1 Medium
- mozilla firefoxMozilla developers and community members Randell Jesup, Sebastian Hengst, and the Mozilla Fuzzing...8.8 High
- mozilla firefoxIn unusual circumstances, selecting text could cause text selection caching to behave incorrectly...6.5 Medium
- mozilla firefoxSVG's <code><use></code> element could have been used to load unexpected content that could...8.8 High
- mozilla firefoxThe sourceMapURL feature in devtools was missing security checks that would have allowed a...6.5 Medium
- gnu gzip, debian linux, redhat jboss data grid +5 more +7 moreAn arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is...8.8 High
- google chromeType confusion in V8 in Google Chrome prior to 100.0.4896.75 allowed a remote attacker to...8.8 High
- mozilla thunderbirdWhen importing a revoked key that specified key compromise as the revocation reason, Thunderbird...5.4 Medium
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreCVE-2022-1158 affecting package kernel for versions less than 5.15.67.1-47.8 High
- dnsmasq, redhat enterprise linux +1 moreA single-byte, non-arbitrary write/use-after-free flaw was found in dnsmasq. This flaw allows an...7.5 High
- xiongmaitech ahb7008t-mh-v2 firmware, ahb7804r-els firmware, ahb7804r-lms firmware +5 more +7 moreXiongmai Technology Co devices AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2,...9.8 Critical
- php-cms project php-cmsPHP-CMS v1.0 was discovered to contain a SQL injection vulnerability via the category parameter...9.8 Critical
- baigo cmsA remote code execution (RCE) vulnerability in baigo CMS v3.0-alpha-2 was discovered to allow...7.2 High
- dascomsoft eziosuiteeZiosuite v2.0.7 contains an authenticated arbitrary file upload via the Avatar upload...8.8 High
- fantec mwid25-ds firmwareFANTEC GmbH MWiD25-DS Firmware v2.000.030 allows unauthenticated attackers to access and download...7.5 High
- cisco ultra cloud core - subscriber microservices infrastructureCisco Ultra Cloud Core - Subscriber Microservices Infrastructure Privilege Escalation Vulnerability7.8 High
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine RADIUS Service Denial of Service Vulnerability8.6 High
- Show moreLoading…