CVEs published in April 2022
3,733 vulnerabilities, 310 critical, 15 exploited.
- sap 3d visual enterprise viewerWhen a user opens a manipulated Picture Exchange (.pcx, 2d.x3d) received from untrusted sources...6.5 Medium
- sap netweaver enterprise portalSAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is...6.1 Medium
- sap 3d visual enterprise viewerWhen a user opens a manipulated Portable Document Format (.pdf, PDFView.x3d) received from...6.5 Medium
- sap businessobjects business intelligence platformUnder certain conditions, SAP BusinessObjects Business Intelligence platform, Client Management...7.5 High
- sap 3d visual enterprise viewerWhen a user opens a manipulated Jupiter Tesselation (.jt, JTReader.x3d) received from untrusted...6.5 Medium
- claderaform calderawp license manager, desertsnowman, shelob9 calderawp license manager (wordpress plugin) +1 moreWordPress CalderaWP License Manager plugin <= 1.2.11 - Cross-Site Request Forgery (CSRF) vulnerability leading to Reflected Cross-Site Scripting (XSS)6.1 Medium
- blueplanet-works appguardBeyondTrust AppGuard Enterprise through 6.6.20.2 creates a Temporary File in a Directory with...7.8 High
- roothub project roothubSQL injection vulnerability in Topics Searching feature of Roothub 2.6.0 allows unauthorized...9.8 Critical
- roothub project roothubSQL injection vulnerability in Topics Counting feature of Roothub 2.6.0 allows unauthorized...9.8 Critical
- apache strutsForced OGNL evaluation, when evaluated on raw not validated user input in tag attributes, may lead to RCE.9.8 Critical
- nconf project nconfPrototype Pollution7.3 High
- thedigitalcraft atomcmsAtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_navigation.php9.8 Critical
- thedigitalcraft atomcmsAtom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_blur-save.php9.8 Critical
- thedigitalcraft atomcmsAtomCMS 2.0 is vulnerabie to SQL Injection via Atom.CMS_admin_ajax_list-sort.php9.8 Critical
- thedigitalcraft atomcmsAtom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_uploads.php9.8 Critical
- thedigitalcraft atomcmsAtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_pages.php9.8 Critical
- cszcms csz cmsCSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Plugin_manager_setstatus9.8 Critical
- cszcms csz cmsCSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Users_viewUsers9.8 Critical
- cszcms csz cmsCSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Users_editUser9.8 Critical
- cszcms csz cmsCSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Members_editUser9.8 Critical
- cszcms csz cmsCsz Cms 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Members_viewUsers9.8 Critical
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreLarge aggregation pipelines with a specific stage can crash mongod under default configuration6.5 Medium
- debian linux, linux kernel +1 moreA use-after-free vulnerability was found in the Linux kernel in drivers/net/hamradio. This flaw...5.5 Medium
- combined charging system charging system, homeplug greenphy, combined charging system project charging system firmware +2 moreNovel attack against the Combined Charging System (CCS) in electric vehicles to remotely cause a denial of service4.6 Medium
libsolvopenSUSE,libzyppopenSUSE,zypperopenSUSE +2 moreSecurity update for libsolv, libzypp, zypperNo score- ritecmsRiteCMS version 3.1.0 and below suffers from an arbitrary file deletion via path traversal...6.5 Medium
- unknown visual form builderVisual Form Builder < 3.0.6 - CSV Injection9.8 Critical
- unknown visual form builderVisual Form Builder < 3.0.8 - Entries Deletion/Restoration via CSRF8.1 High
- unknown visual form builderVisual Form Builder < 3.0.6 - Unauthenticated Information Disclosure5.3 Medium
- ritecmsRiteCMS version 3.1.0 and below suffers from an arbitrary file overwrite via path traversal...6.5 Medium
- siemens simcenter femapA vulnerability has been identified in Simcenter Femap (All versions < V2022.1.2). The affected...7.8 High
- siemens simcenter femapA vulnerability has been identified in Simcenter Femap (All versions < V2022.1.2). The affected...6.5 Medium
- siemens simcenter femapA vulnerability has been identified in Simcenter Femap (All versions < V2022.1.2). The affected...8.8 High
- siemens scalance w1788-1 m12, scalance w1788-2 eec m12, scalance w1788-2 m12 +5 more +7 moreA vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE...6.5 Medium
- siemens scalance w1788-1 m12, scalance w1788-2 eec m12, scalance w1788-2 m12 +5 more +7 moreA vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE...7.5 High
- siemens scalance w1788-1 m12, scalance w1788-2 eec m12, scalance w1788-2 m12 +5 more +7 moreA vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE...5.3 Medium
- siemens sicam a8000 cp-8031, sicam a8000 cp-8050, sicam a8000 cp-8031 firmware +1 more +3 moreA vulnerability has been identified in SICAM A8000 CP-8031 (All versions < V4.80), SICAM A8000 CP...7.5 High
- mendix, siemens mendix applications using mendix 7, mendix applications using mendix 8 +2 more +4 moreA vulnerability has been identified in Mendix Applications using Mendix 7 (All versions), Mendix...7.5 High
- siemens simatic pcs neo (administration console), simatic pcs neo, sinetplan +2 more +4 moreA vulnerability has been identified in SIMATIC PCS neo (Administration Console) (All versions <...7.5 High
- siemens scalance x302-7 eec (230v), scalance x302-7 eec (230v, coated), scalance x302-7 eec (24v) +72 more +74 moreA vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V,...7.5 High
- siemens scalance x302-7 eec (230v), scalance x302-7 eec (230v, coated), scalance x302-7 eec (24v) +72 more +74 moreA vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V,...7.5 High
- siemens scalance x302-7 eec (230v), scalance x302-7 eec (230v, coated), scalance x302-7 eec (24v) +72 more +74 moreA vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V,...7.5 High
- siemens scalance x302-7 eec (230v), scalance x302-7 eec (230v, coated), scalance x302-7 eec (24v) +72 more +74 moreA vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V,...6.1 Medium
- siemens scalance x302-7 eec (230v), scalance x302-7 eec (230v, coated), scalance x302-7 eec (24v) +72 more +74 moreA vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V,...7.5 High
- siemens scalance x302-7 eec (230v), scalance x302-7 eec (230v, coated), scalance x302-7 eec (24v) +72 more +74 moreA vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V,...8.8 High
- siemens scalance x302-7 eec (230v), scalance x302-7 eec (230v, coated), scalance x302-7 eec (24v) +72 more +74 moreA vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V,...8.8 High
- siemens scalance x302-7 eec (230v), scalance x302-7 eec (230v, coated), scalance x302-7 eec (24v) +72 more +74 moreA vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V,...9.8 Critical
- siemens scalance x302-7 eec (230v), scalance x302-7 eec (230v, coated), scalance x302-7 eec (24v) +72 more +74 moreA vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V,...7.5 High
- mendix, siemens mendix applications using mendix 7, mendix applications using mendix 8 +2 more +4 moreA vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23...6.5 Medium
- siemens simatic energy manager basic, simatic energy manager pro +1 moreA vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1...9.8 Critical
- Show moreLoading…