CVEs published in April 2022
3,733 vulnerabilities, 310 critical, 15 exploited.
- trend micro antivirus for macA link following vulnerability in Trend Micro Antivirus for Mac 11.5 could allow an attacker to...7.3 High
ndpiOSS-FuzzHeap-buffer-overflow in ndpi_search_tincNo scorednsmasqOSS-FuzzHeap-buffer-overflow in resize_packetNo scorelibvipsOSS-FuzzHeap-buffer-overflow in ConvertRGB24ToY_SSE41No scorec-blosc2OSS-FuzzHeap-buffer-overflow in frame_get_metalayersNo scoregrokOSS-FuzzStack-use-after-scope in std::__1::__function::__func<bool grk::WaveletReverse::decompress_partial_tile<gNo scorelwanOSS-FuzzHeap-buffer-overflow in lwan_h2_huffman_decode_for_fuzzingNo score- reprisesoftware reprise license managerReprise License Manager 14.2 is affected by an Information Disclosure vulnerability via a GET...5.3 Medium
- elideSQL Injection in elide-datastore-aggregation8.1 High
github.com/ipld/go-ipfsGoDaemon panics when processing certain blocksNo score- github.com/ipld/go-codec-dagpb, protocol go-codec-dagpb +1 morePanic when decoding invalid blocks in github.com/ipld/go-codec-dagpb7.5 High
- icehrmA Cross-Site Request Forgery (CSRF) in IceHrm 31.0.0.OS allows attackers to delete arbitrary...6.5 Medium
- qdpmqdPM 9.2 allows Cross-Site Request Forgery (CSRF) via the index.php/myAccount/update URI.8.8 High
- opservices opmonA Cross Site Scripting (XSS) vulnerability exists in OpServices OpMon through 9.11 via the search...6.1 Medium
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, versions 8.2.x-9.3.0.x, contains an incorrect default permissions...5.5 Medium
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, versions 8.2.x-9.2.x, contain risky cryptographic algorithms. A remote...8.1 High
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, versions 8.2.x-9.3.x, contain a predictable seed in pseudo-random number...8.1 High
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, 8.2.2-9.3.x, contains a predictable file name from observable state...9.1 Critical
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, versions 8.2.x, 9.0.0.x, 9.1.0.x, 9.2.0.x, 9.2.1.x, and 9.3.0.x, contain...6.3 Medium
- dell emc powerscale onefs, powerscale onefs +1 moreDell EMC Powerscale OneFS 8.2.x - 9.2.x omit security-relevant information in /etc/master.passwd....4.4 Medium
- dell vnx2, emc unity operating environment +1 moreDell VNX2 for File version 8.1.21.266 and earlier, contain a privilege escalation vulnerability....6.4 Medium
- dell vnx2, emc unity operating environment +1 moreDell VNX2 for File version 8.1.21.266 and earlier, contain a privilege escalation vulnerability....6.4 Medium
- dell vnx2, emc unity operating environment +1 moreDell VNX2 for File version 8.1.21.266 and earlier, contain a path traversal vulnerability which...8.6 High
- dell vnx2, emc unity operating environment +1 moreDell VNX2 for file version 8.1.21.266 and earlier, contain an unauthenticated remote code...7.3 High
- xwiki, xwiki xwiki-platform +1 moreUnauthenticated user can list hidden document from multiple velocity templates5.3 Medium
- xwiki, xwiki xwiki-platform +1 moreUnauthenticated user can retrieve the list of users through uorgsuggest.vm5.3 Medium
- xwiki, xwiki xwiki-platform +1 moreIncorrect Use of Privileged APIs in org.xwiki.platform.skin.skinx6.8 Medium
- radare radare2, radareorg radareorg/radare2 +1 moreheap-use-after-free in radareorg/radare27.5 High
- atutorAn Access Control vulnerability exists in ATutor 2.2.4 in password_reminder.php when the g, id, h...7.5 High
- radare radare2, radareorg radareorg/radare2 +1 moreNULL Pointer Dereference in r_bin_ne_get_entrypoints function in radareorg/radare26.6 Medium
- kimaiImproper Neutralization of Formula Elements in a CSV File in Kimai 27.8 High
- foscam fi9805e firmwareFOSCAM Camera FI9805E with firmware V4.02.R12.00018510.10012.143900.00000 contains a backdoor...9.8 Critical
- zlog project zlogA Buffer Overflow vulnerability exists in zlog 1.2.15 via zlog_conf_build_with_file in src/zlog...7.5 High
- moguit mogu blog cmsmogu_blog_cms 5.2 suffers from upload arbitrary files without any limitation.9.8 Critical
- gpacGPAC mp4box 1.1.0-DEV-rev1663-g881c6a94a-master is vulnerable to Integer Overflow.5.5 Medium
- gpacGPAC mp4box 1.1.0-DEV-rev1759-geb2d1e6dd-has a heap-buffer-overflow vulnerability in function...5.5 Medium
- ibm planning analyticsIBM Planning Analytics 2.0 is vulnerable to server-side request forgery (SSRF). This may allow an...6.5 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.3,...4.3 Medium
- claro kaon cg3000 firmwareAn Access Control vulnerability exists in CLARO KAON CG3000 1.00.67 in the router configuration,...8.0 High
- libsixellibsixel before 1.10 is vulnerable to Buffer Overflow in libsixel/src/quant.c:867.8.8 High
- saitoha libsixellibsixel 1.8.6 is affected by Buffer Overflow in libsixel/src/quant.c:876.8.8 High
- libsixellibsixel 1.10.0 is vulnerable to Use after free in libsixel/src/dither.c:379.8.8 High
- saitoha libsixellibsixel 1.8.6 suffers from a Heap Use After Free vulnerability in in libsixel/src/dither.c:388.8.8 High
- ritecmsRiteCMS version 3.1.0 and below suffers from a remote code execution vulnerability in the admin...7.2 High
- onlyoffice document serverA cross-site scripting (XSS) vulnerability in ONLYOFFICE Document Server Example before v7.0.0...6.1 Medium
- zzcmsAn issue was discovered in ZZCMS 2021. There is a cross-site scripting (XSS) vulnerability in...4.8 Medium
- zzcmsAn issue was discovered in ZZCMS 2021. There is a SQL injection vulnerability in ad_manage.php.7.2 High
- pimcore, pimcore pimcore/pimcore +1 moreSQL injection in RecyclebinController.php in pimcore/pimcore7.2 High
- movie seat reservation project seat reservationMovie Seat Reservation v1 was discovered to contain an unauthenticated file disclosure...7.5 High
- movie seat reservation project seat reservationMovie Seat Reservation v1 was discovered to contain a SQL injection vulnerability at /index.php...9.8 Critical
- Show moreLoading…