CVEs published in April 2022
3,733 vulnerabilities, 310 critical, 15 exploited.
- octa code accessibilityA vulnerability using PendingIntent in Accessibility prior to version 12.5.3.2 in Android R(11.0)...4.4 Medium
- google android, samsung mobile devices +1 moreImproper access control and path traversal vulnerability in StroageManager and...8.4 High
- google android, samsung mobile devices +1 moreImproper boundary check in UWB firmware prior to SMR Apr-2022 Release 1 allows arbitrary memory...7.6 High
- google android, samsung mobile devices +1 moreUse after free vulnerability in dsp_context_unload_graph function of DSP driver prior to SMR Apr...2.9 Low
- google android, samsung mobile devices +1 moreImproper input validation in DSP driver prior to SMR Apr-2022 Release 1 allows out-of-bounds...4.4 Medium
- google android, samsung mobile devices +1 moreImproper boundary check in media.extractor library prior to SMR Apr-2022 Release 1 allows...4.0 Medium
- google android, samsung mobile devices +1 moreImproper boundary check in sflvd_rdbuf_bits of libsflvextractor prior to SMR Apr-2022 Release 1...2.9 Low
- google android, samsung mobile devices +1 moreImproper validation vulnerability in SemBlurInfo prior to SMR Apr-2022 Release 1 allows attackers...8.5 High
- google android, samsung mobile devices +1 moreImproper validation vulnerability in VerifyCredentialResponse prior to SMR Apr-2022 Release 1...8.5 High
- google android, samsung mobile devices +1 moreImproper validation vulnerability in MediaMonitorEvent prior to SMR Apr-2022 Release 1 allows...8.5 High
- google android, samsung mobile devices +1 moreImproper validation vulnerability in MediaMonitorDimension prior to SMR Apr-2022 Release 1 allows...8.5 High
- google android, samsung mobile devices +1 moreImproper validation vulnerability in SemSuspendDialogInfo prior to SMR Apr-2022 Release 1 allows...8.5 High
- google android, samsung mobile devices +1 moreImproper size check in sapefd_parse_meta_HEADER function of libsapeextractor library prior to SMR...4.0 Medium
- google android, samsung mobile devices +1 moreImproper size check of in sapefd_parse_meta_DESCRIPTION function of libsapeextractor library...4.0 Medium
- google android, samsung mobile devices +1 moreImproper size check in sapefd_parse_meta_HEADER_old function of libsapeextractor library prior to...4.0 Medium
- google android, samsung mobile devices +1 moreInformation exposure vulnerability in ril property setting prior to SMR April-2022 Release 1...6.6 Medium
- google android, samsung mobile devices +1 moreImproper boundary check in Quram Agif library prior to SMR Apr-2022 Release 1 allows attackers to...4.0 Medium
- google android, samsung mobile devices +1 moreInformation exposure vulnerability in Samsung DeX Home prior to SMR April-2022 Release 1 allows...3.3 Low
- google android, samsung mobile devices +1 moreInformation exposure vulnerability in One UI Home prior to SMR April-2022 Release 1 allows to...3.3 Low
- google android, samsung mobile devices +1 moreImproper input validation vulnerability in parser_iloc and sheifd_find_itemIndexin fuctions of...4.4 Medium
- google android, samsung mobile devices +1 moreImproper input validation vulnerability in parser_infe and sheifd_find_itemIndexin fuctions of...4.4 Medium
- google android, samsung mobile devices +1 moreHeap-based buffer overflow vulnerability in parser_ipma function of libsimba library prior to SMR...8.1 High
- google android, samsung mobile devices +1 moreHeap-based buffer overflow vulnerability in sheifd_get_info_image function in libsimba library...8.1 High
- google android, samsung mobile devices +1 moreHeap-based buffer overflow vulnerability in parser_single_iref function in libsimba library prior...8.1 High
- google android, samsung mobile devices +1 moreHeap-based buffer overflow vulnerability in parser_infe function in libsimba library prior to SMR...8.1 High
- google android, samsung mobile devices +1 moreHeap-based buffer overflow vulnerability in parser_iloc function in libsimba library prior to SMR...8.1 High
- google android, samsung mobile devices +1 moreNull pointer dereference vulnerability in parser_hvcC function of libsimba library prior to SMR...5.9 Medium
- google android, samsung mobile devices +1 moreNull pointer dereference vulnerability in parser_infe function of libsimba library prior to SMR...5.9 Medium
- google android, samsung mobile devices +1 moreHeap-based buffer overflow vulnerability in sheifd_create function of libsimba library prior to...8.1 High
- google android, samsung mobile devices +1 moreNull pointer dereference vulnerability in parser_unknown_property function in libsimba library...5.9 Medium
- google android, samsung mobile devices +1 moreNull pointer dereference vulnerability in parser_ispe function in libsimba library prior to SMR...5.9 Medium
- google android, samsung mobile devices +1 moreNull pointer dereference vulnerability in parser_colr function in libsimba library prior to SMR...5.9 Medium
- google android, samsung mobile devices +1 moreNull pointer dereference vulnerability in parser_auxC function in libsimba library prior to SMR...5.9 Medium
- google android, samsung mobile devices +1 moreNull pointer dereference vulnerability in parser_irot function in libsimba library prior to SMR...5.9 Medium
- google android, samsung mobile devices +1 moreImproper boundary check in Quram Agif library prior to SMR Apr-2022 Release 1 allows arbitrary...7.4 High
- google android, samsung mobile devices +1 moreImproper access control vulnerability in Knox Manage prior to SMR Apr-2022 Release 1 allows that...5.7 Medium
- samsung mobile samsungcontacts, google android +1 moreImproper access control vulnerability in SamsungContacts prior to SMR Apr-2022 Release 1 allows...5.3 Medium
- google android, samsung mobile devices +1 moreImproper authentication in ImsService prior to SMR Apr-2022 Release 1 allows attackers to get...3.3 Low
- google android, samsung mobile devices +1 moreImproper authentication vulnerability in S Secure prior to SMR Apr-2022 Release 1 allows physical...4.0 Medium
- google android, samsung mobile devices +1 moreImproper access control vulnerability in S Secure prior to SMR Apr-2022 Release 1 allows physical...2.0 Low
- w3 eden, inc. pricing table (wordpress plugin), w3eden pricing table +1 moreWordPress Pricing Table plugin <= 1.5.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability4.8 Medium
- sharethis social media feather, socialmediafeather social media feather (wordpress plugin) +1 moreWordPress Social Media Feather plugin <= 2.0.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability3.4 Low
- marcel schmilgeit wp-appbox (wordpress plugin), wp-appbox project wp-appbox +1 moreWordPress WP-Appbox plugin <= 4.3.20 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability3.4 Low
- discoursePrivate group name exposure in discourse5.3 Medium
- i3international ax46 firmware, ax68 firmware, ax78 firmware +2 moreA Logic Flaw vulnerability exists in i3 International Inc Annexxus Camera V5.2.0 build 150317 ...8.1 High
- ibm curam social program managementIBM Curam Social Program Management 8.0.1 and 7.0.11 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm hardware management console, system storage ds8000 management console firmware +1 moreIBM System Storage DS8000 Management Console (HMC) R8.5 88.5x.x.x, R9.1 89.1x.0.0, and R9.2 89.2x...5.3 Medium
- ibm hardware management console, system storage ds8000 management console firmware +1 moreIBM System Storage DS8000 Management Console (HMC) R8.5 88.5x.x.x, R9.1 89.1x.0.0, and R9.2 89.2x...5.3 Medium
- kevinlab 4st l-bemsAn Access Control vulnerability exists in KevinLAB Inc Building Energy Management System 4ST BEMS...7.2 High
- jetbrains ktorIn JetBrains Ktor Native before version 2.0.0 random values used for nonce generation weren't...3.3 Low
- Show moreLoading…