CVEs published in April 2022
3,733 vulnerabilities, 310 critical, 15 exploited.
- dlink dir-1360 firmware, dir-1760 firmware, dir-1960 firmware +7 more +9 moreA command injection vulnerability in the protest binary allows an attacker with access to the...7.8 High
- ivanti incapptic connectAn authenticated high privileged user can perform a stored XSS attack due to incorrect output...4.8 Medium
- google android, mediatek, inc. mt6580, mt6735, mt6737, mt6739, mt6753, mt6757, mt6761, mt6763, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6873, mt6877, mt6883, mt6885, mt6889, mt6893, mt8168, mt8321, mt8365, mt8666, mt8765, mt8766, mt8768, mt8786, mt8788, mt8791, mt8797 +1 moreIn SUB2AF, there is a possible memory corruption due to a race condition. This could lead to...6.4 Medium
- google android, mediatek, inc. mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893, mt8185, mt8789, mt8791, mt8797 +1 moreIn vow, there is a possible read of uninitialized data due to a improper input validation. This...4.4 Medium
- google android, mediatek, inc. mt6833, mt6853, mt6853t, mt6873, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893, mt8791, mt8797 +1 moreIn vow, there is a possible memory corruption due to a race condition. This could lead to local...6.4 Medium
- google android, mediatek, inc. mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893, mt8185, mt8789, mt8791, mt8797 +1 moreIn vow, there is a possible memory corruption due to a race condition. This could lead to local...6.4 Medium
- google android, mediatek, inc. mt6580, mt6731, mt6735, mt6750s, mt6753, mt6755s, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893, mt8127, mt8135, mt8163, mt8167, mt8167s, mt8168, mt8173, mt8175, mt8176, mt8183, mt8312c, mt8312d, mt8321, mt8362a, mt8365, mt8382, mt8385, mt8389, mt8392, mt8392 90, mt8665, mt8685, mt8693, mt8735, mt8735b, mt8735m, mt8752, mt8765, mt8783, mt8785, mt8788 +1 moreIn ged, there is a possible memory corruption due to an incorrect error handling. This could lead...4.4 Medium
- google android, mediatek, inc. mt6580, mt6731, mt6735, mt6750s, mt6753, mt6755s, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893, mt8127, mt8135, mt8163, mt8167, mt8167s, mt8168, mt8173, mt8175, mt8176, mt8183, mt8312c, mt8312d, mt8321, mt8362a, mt8365, mt8382, mt8385, mt8389, mt8392, mt8392 90, mt8665, mt8685, mt8693, mt8735, mt8735b, mt8735m, mt8752, mt8765, mt8783, mt8785, mt8788 +1 moreIn ged, there is a possible out of bounds write due to an integer overflow. This could lead to...6.7 Medium
- google android, mediatek, inc. mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6779, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6880, mt6883, mt6885, mt6889, mt6890, mt6891, mt6893, mt6895, mt6983, mt6985, mt8185, mt8321, mt8385, mt8667, mt8675, mt8695, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn preloader (partition), there is a possible out of bounds write due to a missing bounds check....6.6 Medium
- google android, mediatek, inc. mt2601, mt6580, mt6735, mt6739, mt6761, mt6763, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6799, mt6833, mt6873, mt6877, mt6885, mt6893, mt8163, mt8167, mt8167s, mt8168, mt8173, mt8175, mt8183, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8666, mt8667, mt8675, mt8695, mt8696, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn preloader (usb), there is a possible out of bounds write due to a integer underflow. This...6.6 Medium
- google android, mediatek, inc. mt6580, mt6735, mt6737, mt6739, mt6753, mt6755, mt6755s, mt6761, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6795, mt6797, mt6799, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6880, mt6883, mt6885, mt6889, mt6890, mt6891, mt6893, mt6895, mt6983, mt6985, mt8167, mt8167s, mt8168, mt8173, mt8175, mt8183, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8675, mt8765, mt8766, mt8768, mt8786, mt8788, mt8791, mt8797 +1 moreIn search engine service, there is a possible way to change the default search engine due to an...6.7 Medium
- google android, mediatek, inc. mt6833, mt6853, mt6873, mt6877, mt6885, mt6893, mt8797 +1 moreIn ccu, there is a possible escalation of privilege due to a missing certificate validation. This...6.7 Medium
- google android, mediatek, inc. mt6731, mt6732, mt6735, mt6737, mt6739, mt6750, mt6750s, mt6752, mt6753, mt6755, mt6755s, mt6757, mt6757c, mt6757cd, mt6757ch, mt6758, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6795, mt6797, mt6799, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6880, mt6883, mt6885, mt6889, mt6890, mt6891, mt6893, mt6895, mt6983, mt6985 +1 moreIn ssmr, there is a possible out of bounds write due to a missing bounds check. This could lead...6.7 Medium
- google android, mediatek, inc. mt6580, mt6735, mt6739, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6799, mt6833, mt6853, mt6853t, mt6873, mt6877, mt6885, mt6893, mt6983, mt8167, mt8167s, mt8168, mt8173, mt8175, mt8183, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8666, mt8667, mt8675, mt8695, mt8696, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn preloader (usb), there is a possible out of bounds write due to an integer overflow. This...6.6 Medium
- google android, mediatek, inc. mt6731, mt6732, mt6735, mt6737, mt6739, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6795, mt6799, mt6833, mt6853t, mt6873, mt6875, mt6877, mt6880, mt6883, mt6885, mt6889, mt6890, mt6891, mt6893, mt6985, mt8163, mt8167, mt8167s, mt8168, mt8173, mt8175, mt8183, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8666, mt8667, mt8675, mt8735a, mt8735b, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn mobile_log_d, there is a possible symbolic link following due to an improper link resolution....6.7 Medium
- google android, mediatek, inc. mt6580, mt6735, mt6737, mt6739, mt6750, mt6753, mt6755, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6877, mt6885, mt6890, mt6891, mt6893, mt8163, mt8167, mt8167s, mt8168, mt8173, mt8175, mt8183, mt8321, mt8362a, mt8365, mt8385, mt8666, mt8667, mt8735a, mt8735b, mt8765, mt8766, mt8768, mt8786, mt8788 +1 moreIn mdp, there is a possible memory corruption due to a use after free. This could lead to local...6.5 Medium
- google android, mediatek, inc. mt6731, mt6735, mt6739, mt6750, mt6755, mt6755s, mt6757, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6885, mt6891, mt6893, mt8167, mt8167s, mt8168, mt8173, mt8183, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8666, mt8667, mt8675, mt8735a, mt8735b, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn mdp, there is a possible out of bounds write due to a missing bounds check. This could lead to...6.7 Medium
- google android, mediatek, inc. mt6580, mt6739, mt6761, mt6765, mt6769, mt6771, mt6785, mt6833, mt6873, mt6875, mt6877, mt6891, mt8168, mt8365, mt8666, mt8667, mt8696, mt8766, mt8768, mt8788 +1 moreIn atf (hwfde), there is a possible leak of sensitive information due to incorrect error handling...4.4 Medium
- google android, mediatek, inc. mt6580, mt6737, mt6739, mt6761, mt6762, mt6765, mt6768, mt6769, mt6779, mt6781, mt6785, mt6833, mt6873, mt6875, mt6877, mt6883, mt6885, mt6889, mt6983, mt8321, mt8667, mt8675, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8797 +1 moreIn ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to...6.7 Medium
- google android, mediatek, inc. mt6580, mt6737, mt6739, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6893, mt6895, mt6983, mt6985, mt8321, mt8667, mt8675, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8797 +1 moreIn ccci, there is a possible leak of kernel pointer due to an incorrect bounds check. This could...6.7 Medium
- google android, mediatek, inc. mt6765, mt8385, mt8666, mt8667, mt8766, mt8786, mt8788 +1 moreIn atf (spm), there is a possible out of bounds write due to a missing bounds check. This could...6.5 Medium
- google android, mediatek, inc. mt6765, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6877, mt6879, mt6885, mt6891, mt6893, mt8163, mt8167, mt8167s, mt8168, mt8173, mt8175, mt8183, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8666, mt8667, mt8675, mt8735a, mt8735b, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn mdp, there is a possible memory corruption due to a use after free. This could lead to local...6.7 Medium
- autodesk navisworksA maliciously crafted DWFX and SKP files in Autodesk Navisworks 2022 can be used to trigger use...7.8 High
- autodesk navisworksA Double Free vulnerability allows remote malicious actors to execute arbitrary code on DWF file...7.8 High
- autodesk autocad, navisworks, advance steel +8 more +10 moreA maliciously crafted DXF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks...7.8 High
- autodesk autocad, navisworks, advance steel +8 more +10 moreA Memory Corruption vulnerability for DWF and DWFX files in Autodesk AutoCAD 2022, 2021, 2020,...7.8 High
- autodesk autocad, navisworks, advance steel +8 more +10 moreA maliciously crafted DWF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks...7.8 High
- autodesk autocad, advance steel, autocad architecture +7 more +9 moreA maliciously crafted DWF, 3DS and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be...7.8 High
- microfocus operations bridgeUnauthenticated remote code execution in Micro Focus Operations Bridge containerized, affecting...9.8 Critical
- wp darko responsive tabs (wordpress plugin), wpdarko responsive tabs +1 moreWordPress Responsive Tabs plugin <= 4.0.5 - Cross-Site Scripting (XSS) vulnerability4.8 Medium
- sick ag msc800, sick msc800 firmware +1 moreThe vulnerability in the MSC800 in all versions before 4.15 allows for an attacker to predict the...9.1 Critical
- sick overall equipment effectivenessAn attacker can perform a privilege escalation through the SICK OEE if the application is...7.8 High
- samsung android usb driver windows installerUncontrolled search path element vulnerability in Samsung Android USB Driver windows installer...5.3 Medium
- samsung security supporterImproper access control vulnerability in Samsung Security Supporter prior to version 1.2.40.0...4.4 Medium
- samsung membersImproper access control vulnerability in Samsung Members prior to version 13.6.08.5 allows local...4.3 Medium
- samsung galaxy storeImproper access control vulnerability in Galaxy Store prior to version 4.5.36.4 allows attacker...5.9 Medium
- samsung flowImproper access control vulnerability in Samsung Flow prior to version 4.8.06.5 allows attacker...5.1 Medium
- premio chaty, chaty (wordpress plugin) +1 moreWordPress Chaty plugin <= 2.8.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability4.8 Medium
- vmware identity manager, workspace one access and identity manager, workspace one access +3 more +5 moreVMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability...9.8 Critical
- vmware photon osThe SchedulerServer in Vmware photon allows remote attackers to inject logs through \r in the...5.3 Medium
- samsung galaxy storePath traversal vulnerability in unzip method of InstallAgentCommonHelper in Galaxy store prior to...6.2 Medium
- samsung flowPath traversal vulnerability in Samsung Flow prior to version 4.8.07.4 allows local attackers to...4.0 Medium
- samsung galaxy storeImproper sanitization of incoming intent in Galaxy Store prior to version 4.5.40.5 allows local...6.8 Medium
- samsung updateUncontrolled search path element vulnerability in Samsung Update prior to version 3.0.77.0 allows...5.9 Medium
- samsung kiesDLL hijacking vulnerability in Kies prior to version 2.6.4.22014_2 allows attacker to execute...6.2 Medium
- samsung smart switch pcDLL hijacking vulnerability in Smart Switch PC prior to version 4.2.22022_4 allows attacker to...6.2 Medium
- samsung passImproper exception handling in Samsung Pass prior to version 3.7.07.5 allows physical attacker to...4.3 Medium
- samsung recoveryImproper access control vulnerability in SamsungRecovery prior to version 8.1.43.0 allows local...4.4 Medium
- samsung internetImproper authentication vulnerability in SecretMode in Samsung Internet prior to version 16.2.1...3.3 Low
- samsung factorycameraImproper access control vulnerability in FactoryCamera prior to version 2.1.96 allows attacker to...7.7 High
- Show moreLoading…