CVEs published in April 2022
3,733 vulnerabilities, 310 critical, 15 exploited.
- logitech syncLogitech Sync desktop application prior to 2.4.574 - TOCTOU during installation leads to privelege escalation6.0 Medium
- git for windows project for windows, microsoft visual studio 2017 version 15.9 (includes 15.0 - 15.8), visual studio 2019 version 16.11 (includes 16.0 - 16.10) +7 more +9 moreGitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account.7.8 High
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, versions 8.2.2-9.3.x, contain a time-of-check-to-time-of-use vulnerability...4.4 Medium
- dell emc powerscale onefs, powerscale onefs +1 moreDell EMC PowerScale OneFS 8.2.x - 9.3.0.x contain an improper handling of value vulnerability. An...7.5 High
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS 8.2.2 and above contain an elevation of privilege vulnerability. A local...7.8 High
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, 8.2,x, 9.1.0.x, 9.2.1.x, and 9.3.0.x contain a denial of service...4.7 Medium
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS versions 8.2.x - 9.3.0.x contains a denial-of-service vulnerability in...7.5 High
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, versions 8.2.0-9.3.0, contains an Improper Handling of Insufficient...5.4 Medium
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, 8.2.2 - 9.3.0.x, contain a missing release of memory after effective...4.8 Medium
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, versions 9.0.0-9.3.0, contain an improper authorization of index...4.7 Medium
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, versions 8.2.0-9.3.0, contain a improper handling of missing values...7.5 High
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, versions 8.2.x-9.3.0.x, contain an improper restriction of excessive...8.1 High
- dell emc powerscale onefs, powerscale onefs +1 moreDell EMC PowerScale OneFS 8.1.x - 9.1.x contain hard coded credentials. This allows a local user...7.1 High
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, version 9.3.0, contains a use of a broken or risky cryptographic algorithm...7.5 High
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, versions 8.2.2 and above, contain a password disclosure vulnerability. An...6.7 Medium
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, 8.2.x-9.3.x, contains a Improper Certificate Validation. A unauthenticated...7.5 High
- minioImproper Privilege Management in MinIO8.8 High
- grafanaFGAC API Key privilege escalation in Grafana8.0 High
- ghostArbitrary file upload in Ghost9.8 Critical
- payloadcms payloadUnrestricted Upload of File with Dangerous Type in Payload9.8 Critical
- strapiUnrestricted Upload of File with Dangerous Type in Strapi9.8 Critical
- sailsjs skipperAn arbitrary file upload vulnerability in the file upload module of Skipper v0.9.1 allows...9.8 Critical
- express-fileupload project express-fileuploadExpress-FileUpload Arbitrary File Overwrite7.5 High
- buttercmsUnrestricted Upload of File with Dangerous Type in ButterCMS9.8 Critical
- ghostArbitrary file upload in Ghost9.8 Critical
- fernhill scada serverFernhill SCADA Uncontrolled Resource Consumption7.5 High
- fuji electric alpha5, fujielectric alpha5 smart loader firmware +1 moreICSA-22-090-03 Fuji Electric Alpha53.3 Low
- fuji electric alpha5, fujielectric alpha5 smart loader firmware +1 moreICSA-22-090-03 Fuji Electric Alpha57.8 High
- fuji electric alpha5, fujielectric alpha5 smart loader firmware +1 moreICSA-22-090-03 Fuji Electric Alpha57.8 High
- fuji electric alpha5, fujielectric alpha5 smart loader firmware +1 moreICSA-22-090-03 Fuji Electric Alpha57.8 High
- fuji electric alpha5, fujielectric alpha5 smart loader firmware +1 moreICSA-22-090-03 Fuji Electric Alpha53.3 Low
- hpe nimbleosA security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays, HPE...7.5 High
- hewlett packard enterprise (hpe) hpe superdome flex server; hpe superdome flex 280 server, hpe superdome flex 280 server firmware, superdome flex server firmware +2 moreA potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex...6.7 Medium
- hpe aruba instant on 1930 24g 4sfp\/sfp\+ firmware, aruba instant on 1930 24g class4 poe 4sfp\/sfp\+ 195w firmware, aruba instant on 1930 24g class4 poe 4sfp\/sfp\+ 370w firmware +4 more +6 moreA remote vulnerability was discovered in Aruba Instant On 1930 Switch Series version(s): Firmware...6.5 Medium
- hpe aruba instant on 1930 24g 4sfp\/sfp\+ firmware, aruba instant on 1930 24g class4 poe 4sfp\/sfp\+ 195w firmware, aruba instant on 1930 24g class4 poe 4sfp\/sfp\+ 370w firmware +4 more +6 moreA remote vulnerability was discovered in Aruba Instant On 1930 Switch Series version(s): Firmware...7.5 High
- avira password managerA vulnerability within the Avira Password Manager Browser Extensions provided a potential...6.5 Medium
- sap netweaver abap, sap se netweaver abap server and abap platform +1 moreSAP NetWeaver ABAP Server and ABAP Platform - versions 740, 750, 787, allows an unauthenticated...4.7 Medium
- sap web dispatcher, netweaver, sap se netweaver (internet communication manager) +2 moreBy overlong input values an attacker may force overwrite of the internal program stack in SAP Web...7.5 High
- sap businessobjects business intelligence platformA CSRF token visible in the URL may possibly lead to information disclosure vulnerability.6.5 Medium
- sap netweaver application server for javaAn unauthenticated user can use functions of XML Data Archiving Service of SAP NetWeaver...7.5 High
- sap web dispatcher, netweaver, sap se netweaver (internet communication manager) +2 moreDue to an uncontrolled recursion in SAP Web Dispatcher and SAP Internet Communication Manager,...7.5 High
- sap focused run, sap se focused run (simple diagnostics agent) +1 moreA highly privileged remote attacker, can gain unauthorized access to display contents of...2.7 Low
- sap sapui5 library, sap se sapui5 (vbm library) +1 moreDue to insufficient input validation, SAPUI5 library(vbm) - versions 750, 753, 754, 755, 75,...6.1 Medium
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (bi workspace) +1 moreSAP BusinessObjects Business Intelligence Platform (BI Workspace) - version 420, is susceptible...6.1 Medium
- sap businessobjects business intelligence platformWhen a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform -...8.1 High
- sap 3d visual enterprise viewerWhen a user opens a manipulated Photoshop Document (.psd, 2d.x3d) received from untrusted sources...6.5 Medium
- sap sql anywhere, sap se sql anywhere server +1 moreSAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users...6.5 Medium
- sap businessobjects business intelligence platformSAP BusinessObjects Business Intelligence Platform - versions 420, 430, may allow legitimate...6.5 Medium
- sap 3d visual enterprise viewerWhen a user opens a manipulated Universal 3D (.u3d, 3difr.x3d) received from untrusted sources in...6.5 Medium
- sap 3d visual enterprise viewerWhen a user opens a manipulated Computer Graphics Metafile (.cgm, CgmCore.dll) received from...6.5 Medium
- Show moreLoading…