CVEs published in April 2022
3,733 vulnerabilities, 310 critical, 15 exploited.
- car rental system project rental systemCar Rental System v1.0 was discovered to contain a SQL injection vulnerability at /Car_Rental...8.8 High
- phpgurukul zoo management systemZoo Management System v1.0 was discovered to contain a SQL injection vulnerability at ...8.8 High
- online banking system project banking systemOnline Banking System in PHP v1 was discovered to contain multiple SQL injection vulnerabilities...6.5 Medium
- ecommerce-website project ecommerce-websiteEcommerce-Website v1 was discovered to contain an arbitrary file upload vulnerability via ...9.8 Critical
- simple house rental system project house rental systemSimple House Rental System v1 was discovered to contain an arbitrary file upload vulnerability...8.8 High
- phpgurukul zoo management systemZoo Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via ...9.8 Critical
- socialcodia social codia smsSocial Codia SMS v1 was discovered to contain an arbitrary file upload vulnerability via...7.2 High
- socialcodia social codia smsSocial Codia SMS v1 was discovered to contain a stored cross-site scripting (XSS) vulnerability...4.8 Medium
- ecommerce-website project ecommerce-websiteEcommece-Website v1.1.0 was discovered to contain an arbitrary file upload vulnerability via ...8.8 High
- musical world project worldMusical World v1 was discovered to contain an arbitrary file upload vulnerability via...8.8 High
- aerocms project aerocmsAeroCMS v0.0.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability via...6.1 Medium
- aerocms project aerocmsAeroCMS v0.0.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability via...4.8 Medium
- aerocms project aerocmsAeroCMS v0.0.1 was discovered to contain an arbitrary file upload vulnerability via the Post...7.2 High
- ecommerce codeigniter bootstrap project codeigniter bootstrapBootstrap v3.1.11 and v3.3.7 was discovered to contain a cross-site scripting (XSS) vulnerability...6.1 Medium
libsolvSUSE,libzyppSUSE,zypperSUSE +2 moreSecurity update for libsolv, libzypp, zypperNo scorelibsolvSUSE,libzyppSUSE,zypperSUSE +2 moreSecurity update for libsolv, libzypp, zypperNo score- linux kernel, fedoraproject fedora, netapp active iq unified manager +12 more +14 morejbd2_journal_wait_updates in fs/jbd2/transaction.c in the Linux kernel before 5.17.1 has a use...7.0 High
kimageformatsOSS-FuzzHeap-buffer-overflow in LoadPSDNo score- lua, fedoraproject fedora +1 moresinglevar in lparser.c in Lua through 5.4.4 lacks a certain luaK_exp2anyregup call, leading to a...9.1 Critical
- roku osRoku devices running RokuOS v9.4.0 build 4200 or earlier that uses a Realtek WiFi chip is...5.7 Medium
- gpacGPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a use-after-free vulnerability in function...5.5 Medium
- gpacGPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a stack-overflow vulnerability in function...5.5 Medium
- apple macos, mac os x, fedoraproject fedora +2 moreA cookie management issue was addressed with improved state management. This issue is fixed in...6.5 Medium
- apple ipados, itunes, macos +4 more +6 moreA buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS...8.8 High
- apple macos, safari, tvos +3 more +5 moreA use after free issue was addressed with improved memory management. This issue is fixed in...8.8 High
- apple macos, safari, tvos +2 more +4 moreA use after free issue was addressed with improved memory management. This issue is fixed in...8.8 High
- linux kernel, redhat enterprise linux +1 moreA NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support...5.5 Medium
- stripe smokescreenSmokescreen SSRF via deny list bypass5.8 Medium
- devise-two-factorImproper one time password handling in devise-two-factor5.3 Medium
- zohocorp manageengine adselfservice plusZoho ManageEngine ADSelfService Plus before 6121 allows XSS via the welcome name attribute to the...6.1 Medium
- dlink dir-823g firmwareAn Access Control vulnerability exists in D-Link DIR-823G REVA1 1.02B05 (Lastest) via any...9.8 Critical
- jerryscriptA Heap-based Buffer Overflow vulnerability exists in JerryScript 2.4.0 and prior versions via an...9.8 Critical
- johnson controls metasys, johnsoncontrols metasys application and data server, metasys extended application and data server +1 more +3 moreMetasys UI8.4 High
- aenrich a+hrd, a\+hrd +1 moreaEnrich a+HRD - Broken Access Control9.8 Critical
- aenrich a+hrd, a\+hrd +1 moreaEnrich a+HRD - Path Traversal7.5 High
- secom dr.id access control, taiwan secom co., ltd., personnel attendance management system, secom dr.id attendance system +2 moreTAIWAN SECOM CO., LTD., a xDoor Access Control and Personnel Attendance Management system - Hard-coded Credentials7.3 High
- d-link dir-878, dlink dir-878 firmware +1 moreD-Link DIR-878 - Command Injection8.8 High
- asus rt-ac86u, rt-ac86u firmware +1 moreASUS RT-AC86U - Command Injection8.8 High
- asus rt-ac86u, rt-ac86u firmware +1 moreASUS RT-AC86U - Heap-based buffer overflow8.8 High
- asus rt-ac86u, rt-ac86u firmware +1 moreASUS RT-AC86U - Improper Input Validation6.5 Medium
- microprogram parking lot management systemMicroprogram parking lot management system - Exposure of Sensitive Information to an Unauthorized Actor5.3 Medium
- asus rt-ax56u, rt-ax56u firmware +1 moreASUS RT-AX56U - Stack overflew8.8 High
- asus rt-ax56u, rt-ax56u firmware +1 moreASUS RT-AX56U - SQL Injection8.8 High
- asus rt-ax56u, rt-ax56u firmware +1 moreASUS RT-AX56U - Path Traversal8.1 High
- asus rt-ax56u, rt-ax56u firmware +1 moreASUS RT-AX56U - Path Traversal8.1 High
- livehelperchat livehelperchat/livehelperchat, live helper chat +1 moreHost Header injection in password Reset in livehelperchat/livehelperchat8.8 High
- bitdefender endpoint security tools for linux, endpoint security tools for windows, endpoint security tools +2 more +4 moreImproper Handling of Length Parameter Inconsistency vulnerability in Bitdefender Update Server (VA-10144)7.5 High
- codesys control for beaglebone sl, control for beckhoff cx9020 sl, control for empc-a/imx6 sl +21 more +23 moreSpecial HTTP(s) Requests can cause a buffer-read causing a crash of the webserver and the runtime system.7.5 High
- codesys control for beaglebone sl, control for beckhoff cx9020 sl, control for empc-a/imx6 sl +9 more +11 moreA bug in the CODESYS V3 CmpUserMgr component fails to correctly apply a security policy.6.5 Medium
- codesys control for beaglebone sl, control for beckhoff cx9020 sl, control for empc-a/imx6 sl +28 more +30 moreCommunication Components in multiple CODESYS products vulnerable to communication channel disruption7.5 High
- Show moreLoading…