CVEs published in April 2022
3,733 vulnerabilities, 310 critical, 15 exploited.
- debian linux, linux kernel, netapp h300e firmware +10 more +12 moreThe SUNRPC subsystem in the Linux kernel through 5.17.2 can call xs_xprt_free before ensuring...7.8 High
perfettoOSS-FuzzStack-buffer-overflow in void unwindstack::Symbols::BuildRemapTable<Elf64_Sym>No scoregrokOSS-FuzzStack-use-after-return in std::__1::__function::__func<bool grk::WaveletReverse::decompress_partial_tile<iNo score- autodesk fbx reviewAn Out-Of-Bounds Read Vulnerability in Autodesk FBX Review version 1.5.2 and prior may lead to...7.8 High
- nokogiri, apple macos, debian linux +1 more +3 moreInefficient Regular Expression Complexity in Nokogiri7.5 High
- ofcms project ofcmsA cross-site scripting (XSS) vulnerability at /ofcms/company-c-47 in OFCMS v1.1.4 allows...5.4 Medium
- ofcms project ofcmsInsecure permissions configured in the user_id parameter at SysUserController.java of OFCMS v1.1...5.4 Medium
- newbee-mall project newbee-mallNewbee-Mall v1.0.0 was discovered to contain an arbitrary file upload via the Upload function at ...9.8 Critical
- febs-security project febs-securityInsecure permissions configured in the userid parameter at /user/getuserprofile of FEBS-Security...5.4 Medium
- newbee-mall project newbee-mallA cross-site scripting (XSS) vulnerability at /admin/goods/update in Newbee-Mall v1.0.0 allows...6.1 Medium
- zbzcmszbzcms v1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the...6.1 Medium
- zbzcmszbzcms v1.0 was discovered to contain a SQL injection vulnerability via the art parameter at ...9.8 Critical
- zbzcmsAn incorrect access control issue at /admin/run_ajax.php in zbzcms v1.0 allows attackers to...9.8 Critical
- zbzcmszbzcms v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php...6.5 Medium
- zbzcmsAn arbitrary file upload vulnerability at /admin/ajax.php in zbzcms v1.0 allows attackers to...9.8 Critical
- zbzcmsAn arbitrary file upload vulnerability at /zbzedit/php/zbz.php in zbzcms v1.0 allows attackers to...9.8 Critical
- zbzcmszbzcms v1.0 was discovered to contain an arbitrary file deletion vulnerability via /include/up.php.9.1 Critical
- inhandnetworks inrouter 900 firmwareInHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain...9.8 Critical
- inhandnetworks inrouter 900 firmwareInHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain...9.8 Critical
- inhandnetworks inrouter 900 firmwareInHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain...9.8 Critical
- inhandnetworks inrouter 900 firmwareInHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain...9.8 Critical
- inhandnetworks inrouter 900 firmwareInHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain...9.8 Critical
- inhandnetworks inrouter 900 firmwareInHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain...9.8 Critical
- inhandnetworks inrouter 900 firmwareInHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain...9.8 Critical
- inhandnetworks inrouter 900 firmwareInHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain...9.8 Critical
- inhandnetworks inrouter 900 firmwareInHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain...9.1 Critical
- inhandnetworks inrouter 900 firmwareInHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain...9.8 Critical
- inhandnetworks inrouter 900 firmwareInHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain...7.5 High
- inhandnetworks inrouter 900 firmwareInHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain...5.4 Medium
- dlink dir-619 ax firmwareD-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function...7.5 High
- dlink dir-619 firmwareD-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanPPTP...7.5 High
- dlink dir-619 ax firmwareD-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function...7.5 High
- dlink dir-619 firmwareD-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanL2TP...7.5 High
- dlink dir-619 firmwareD-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function...7.5 High
- dlink dir-619 firmwareD-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function...7.5 High
- dlink dir-619 firmwareD-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function...7.5 High
- dlink dir-619 firmwareD-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formWlanSetup....7.5 High
- dlink dir-619 firmwareD-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function...7.5 High
- dlink dir-619 firmwareD-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function...7.5 High
- hhurz hhurz/tableexport.jquery.plugin, tableexport.jquery.plugin project tableexport.jquery.plugin +1 moreXSS vulnerability with default `onCellHtmlData` function in hhurz/tableexport.jquery.plugin7.6 High
- polonel polonel/trudesk, trudesk project trudesk +1 moreStored XSS in "Name", "Group Name" & "Title" in polonel/trudesk9.0 Critical
- tildearrow furnacetildearrow Furnace Incomplete Fix CVE-2022-1211 denial of service4.3 Medium
- mruby, mruby mruby/mruby +1 moreheap-buffer-overflow in mrb_vm_exec in mruby/mruby in mruby/mruby5.9 Medium
- mruby, mruby mruby/mruby +1 moreOut-of-bounds Read in mrb_get_args in mruby/mruby8.4 High
qtOSS-FuzzStack-use-after-return in QSemaphore::releaseNo score- school club application system project club application system, unspecified school club application system +1 moreSchool Club Application System cross site scripting4.3 Medium
- school club application system project club application system, unspecified school club application system +1 moreSchool Club Application System resource injection6.5 Medium
- reprisesoftware reprise license managerReprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability (XSS)...5.4 Medium
- reprisesoftware reprise license managerReprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability (XSS)...6.1 Medium
- asana desktopAsana Desktop before 1.6.0 allows remote attackers to exfiltrate local files if they can trick...6.5 Medium
- Show moreLoading…