CVEs published in April 2022
3,733 vulnerabilities, 310 critical, 15 exploited.
- autodesk dwg trueviewA Memory Corruption Vulnerability in Autodesk TrueView 2022 and 2021 may lead to remote code...7.8 High
- autodesk autocadA maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG...7.8 High
- google chromeUse after free in WebGPU in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to...8.8 High
- vmware identity manager, vrealize automation, workspace one access +3 more +5 moreVMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege...7.8 High
- vmware identity manager, vrealize automation, workspace one access +2 more +4 moreVMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code...7.2 High
- vmware workspace one access, identity manager, vrealize automation +2 moreVMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE...9.8 Critical
- google chromeType confusion in V8 in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to...8.8 High
- google chromeUse after free in tab groups in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to...8.8 High
- google chromeUse after free in storage in Google Chrome prior to 100.0.4896.88 allowed an attacker who...9.6 Critical
- google chromeUse after free in shell in Google Chrome on ChromeOS prior to 100.0.4896.88 allowed a remote...8.8 High
- google chromeUse after free in regular expressions in Google Chrome prior to 100.0.4896.88 allowed a remote...8.8 High
- google chromeInsufficient policy enforcement in developer tools in Google Chrome prior to 100.0.4896.88...9.6 Critical
- google chromeUse after free in BFCache in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to...8.8 High
- google chromeInappropriate implementation in full screen in Google Chrome on Android prior to 100.0.4896.88...4.3 Medium
- google chromeInappropriate implementation in compositing in Google Chrome prior to 100.0.4896.88 allowed a...4.3 Medium
- google chromeUse after free in storage in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to...8.8 High
- python, fedoraproject fedora, netapp active iq unified manager +5 more +7 moreIn Python (aka CPython) through 3.10.4, the mailcap module does not add escape characters into...7.6 High
- pluck-cms pluckA Cross-Site Request Forgery (CSRF) in Pluck CMS v4.7.15 allows attackers to delete arbitrary pages.6.5 Medium
- citrix xenmobile serverCitrix XenMobile Server 10.12 through RP11, 10.13 through RP6, and 10.14 through RP4 allows...7.2 High
- citrix xenmobile serverIn Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Command Injection...8.8 High
- alvarotrigo alvarotrigo/fullpage.js, fullpage project fullpage +1 morestored xss due to unsantized anchor url in alvarotrigo/fullpage.js9.4 Critical
- phoenixframework phoenix htmlphoenix_html allows Cross-site Scripting in HEEx class attributes6.1 Medium
- rtl 433 project 433rtl_433 21.12 was discovered to contain a stack overflow in the function acurite_00275rm_decode...5.5 Medium
- jenkins google compute engine, jenkins project google compute engine plugin +1 morePrivate key stored in plain text by Jenkins Google Compute Engine Plugin4.3 Medium
- jenkins publish over ftp, jenkins project publish over ftp plugin +1 moreMissing permission checks in Jenkins Publish Over FTP Plugin4.3 Medium
- jenkins publish over ftp, jenkins project publish over ftp plugin +1 moreCSRF vulnerability in Jenkins Publish Over FTP Plugin8.8 High
- jenkins subversion, jenkins project subversion plugin, apple macos +2 moreCSRF vulnerability in Jenkins Subversion Plugin4.3 Medium
- jenkins project pipeline: shared groovy libraries plugin, jenkins pipeline\ +1 moreUntrusted users can modify some Pipeline libraries in Jenkins Pipeline: Deprecated Groovy Libraries Plugin5.3 Medium
- jenkins subversion, jenkins project subversion plugin, apple macos +2 moreStored Cross-site Scripting vulnerability in Jenkins Subversion Plugin5.4 Medium
- jenkins node and label parameter, jenkins project node and label parameter plugin +1 moreStored Cross-site Scripting in Jenkins Node and Label parameter Plugin5.4 Medium
- jenkins mask passwords, jenkins project mask passwords plugin +1 moreStored Cross-site Scripting in Jenkins Mask Passwords Plugin5.4 Medium
- jenkins job generator, jenkins project job generator plugin +1 moreStored Cross-site Scripting vulnerability in Jenkins Job Generator Plugin5.4 Medium
- jenkins jira, jenkins project jira plugin +1 moreStored Cross-site Scripting vulnerability in Jenkins Jira Plugin5.4 Medium
- jenkins git parameter, jenkins project git parameter plugin +1 moreStored XSS vulnerability in Jenkins Git Parameter Plugin5.4 Medium
- jenkins gerrit trigger, jenkins project gerrit trigger plugin +1 moreStored Cross-site Scripting vulnerability in Jenkins Gerrit Trigger Plugin5.4 Medium
- jenkins extended choice parameter, jenkins project extended choice parameter plugin +1 moreStored Cross-site Scripting vulnerabilities in Jenkins Extended Choice Parameter Plugin5.4 Medium
- jenkins cvs, jenkins project cvs plugin +1 moreStored XSS in Jenkins CVS Plugin5.4 Medium
- ecto project ectoEcto missing `is_nil` requirement9.8 Critical
- mariadb, debian linux +1 moreMariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the...7.5 High
- mariadb, debian linux +1 moreMariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component...7.5 High
- mariadbAn issue in the component Used_tables_and_const_cache::used_tables_and_const_cache_join of...7.5 High
- mariadb, debian linux +1 moreAn issue in the component Item_subselect::init_expr_cache_tracker of MariaDB Server v10.6 and...7.5 High
- mariadb, debian linux +1 moreMariaDB Server v10.6 and below was discovered to contain an use-after-free in the component...7.5 High
- mariadbMariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component...7.5 High
- mariadb, debian linux +1 moreAn issue in the component Field::set_default of MariaDB Server v10.6 and below was discovered to...7.5 High
- mariadb, debian linux +1 moreAn issue in the component my_decimal::operator= of MariaDB Server v10.6.3 and below was...7.5 High
- mariadb, debian linux +1 moreAn issue in the component Arg_comparator::compare_real_fixed of MariaDB Server v10.6.2 and below...7.5 High
- mariadb, debian linux +1 moreAn issue in the component Create_tmp_table::finalize of MariaDB Server v10.7 and below was...7.5 High
- mariadb, debian linux +1 moreMariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component...7.5 High
- mariadb, debian linux +1 moreMariaDB Server v10.6.5 and below was discovered to contain an use-after-free in the component...7.5 High
- Show moreLoading…