CVEs published in April 2022
3,733 vulnerabilities, 310 critical, 15 exploited.
openscOSS-FuzzHeap-buffer-overflow in sc_pkcs15init_delete_by_pathNo scorendpiOSS-FuzzHeap-buffer-overflow in krb_parseNo scoreghostscriptOSS-FuzzHeap-use-after-free in gc_traceNo score- mutt, debian linux, fedoraproject fedora +2 moreBuffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3...4.3 Medium
- cmsmadesimple cms made simpleCross Site Scripting (XSS) vulnerability exists in CMS Made Simple 2.2.15 via the Name field in...6.1 Medium
- geoserverImproper Input Validation in GeoServer7.2 High
- vyperlang vyperInteger bounds error in Vyper8.8 High
- flipped-aurora gin-vue-adminPath Traversal in github.com/flipped-aurora/gin-vue-admin7.5 High
- flipped-aurora gin-vue-adminSQL Injection in github.com/flipped-aurora/gin-vue-admin8.1 High
- composer, fedoraproject fedora, tenable tenable.sc +2 moreMissing input validation can lead to command execution in composer8.3 High
- geotoolsUnchecked JNDI lookups in GeoTools8.2 High
- geosolutions-it jai-extImproper Control of Generation of Code in jai-ext10.0 Critical
- apache supersetSQL injection vulnerability in chart data API9.8 Critical
- palo alto networks pan-os, prisma access +1 morePAN-OS: Denial-of-Service (DoS) Vulnerability in DNS Proxy5.9 Medium
- vyperlang vyperBuffer overflow in Vyper7.1 High
- wire wire-serverDoS vulnerabiliity in wire-server json parser5.3 Medium
- causefx causefx/organizr, organizr +1 moreStored XSS in the "Username" & "Email" input fields leads to account takeover of Admin & Co-admin users in causefx/organizr9.6 Critical
- causefx causefx/organizr, organizr +1 moreStored XSS viva .svg file upload in causefx/organizr9.0 Critical
- causefx causefx/organizr, organizr +1 moreMultiple Stored XSS in causefx/organizr9.0 Critical
- causefx causefx/organizr, organizr +1 moreStored XSS due to no sanitization in the filename in causefx/organizr9.0 Critical
- autodesk dwg trueviewAn out-of-bounds read can be exploited in Autodesk TrueView 2022 may lead to an exposure of...7.1 High
- autodesk dwg trueviewA buffer over-read can be exploited in Autodesk TrueView 2022 may lead to an exposure of...7.1 High
- citirx citrix sd-wan, citrix sd-wan 1000 firmware, sd-wan 1100 firmware +10 more +12 moreReflected cross site scripting (XSS)6.1 Medium
- citirx citrix sd-wan, citrix sd-wan 1000 firmware, sd-wan 1100 firmware +12 more +14 moreHard-coded credentials allow administrators to access the shell via the SD-WAN CLI2.7 Low
- mattermost, mattermost server +1 moreRestricted custom admin role can bypass the restrictions and view the server logs and server config.json file contents4.3 Medium
- mattermost playbooksA specifically drafted Playbook could trigger large amount of webhook requests leading to Denial of Service3.5 Low
- mattermost, mattermost server +1 moreOOM DoS in Mattermost image proxy4.3 Medium
- vmware identity manager, vrealize automation, workspace one access +2 more +4 moreVMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code...7.2 High
- vmware workspace one access, identity manager, vrealize automation +2 moreVMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE...9.8 Critical
- vmware identity manager, vrealize automation, workspace one access +2 more +4 moreVMware Workspace ONE Access, Identity Manager and vRealize Automation contain an information...5.3 Medium
- citrix storefront, storefront server +1 moreCross-site Scripting (XSS) vulnerability in Citrix StoreFront affects version 1912 before CU5 and...6.1 Medium
- vmware identity manager, vrealize automation, workspace one access +2 more +4 moreVMware Workspace ONE Access, Identity Manager and vRealize Automation contain a cross site...4.3 Medium
- yooslider yoo slider, yoo slider – image slider & video slider (wordpress plugin) +1 moreWordPress Yoo Slider plugin <= 2.0.0 - Cross-Site Request Forgery (CSRF) vulnerability leading to Slider Creation / Modification4.3 Medium
- yooslider yoo slider, yoo slider – image slider & video slider (wordpress plugin) +1 moreWordPress Yoo Slider plugin <= 2.0.0 - Cross-Site Request Forgery (CSRF) vulnerability leading to Template Import4.3 Medium
- linux kernel, redhat enterprise linux +1 moreA use-after-free vulnerability was found in drm_lease_held in drivers/gpu/drm/drm_lease.c in the...6.3 Medium
- vanderbilt redcapA stored Cross-Site Scripting (XSS) vulnerability in the Missing Data Codes Functionality of...9.0 Critical
- wizplat pd065 firmwareAn access control issue in the authentication module of wizplat PD065 v1.19 allows attackers to access sensitive data and cause a Denial of Service (DoS).7.8 High
- roothubDirectory Traversal vulnerability in file cn/roothub/store/FileSystemStorageService in function...8.0 High
- mantisbtMantisBT vulnerable to XSS due to improper escape in manage_plugin_page.php and manage_plugin_uninstall.php6.1 Medium
- hubzillaAn open redirect vulnerability in Hubzilla before version 7.2 allows remote attackers to redirect...6.1 Medium
- johnsoncontrols easyio cpt graphicsAn issue in EasyIO CPT Graphics v0.8 allows attackers to discover valid users in the application.5.3 Medium
- cmsimpleCMSimple 5.4 is vulnerable to Directory Traversal. The vulnerability exists when a user changes...9.8 Critical
- cmsimpleCMSimple 5.4 is vulnerable to Cross Site Scripting (XSS) via the file upload feature.5.4 Medium
- automoxAutomox Agent prior to version 37 on Windows and Linux and Version 36 on OSX could allow for a...5.5 Medium
- froxlorHTML Injection in Froxlor6.1 Medium
rmp-serdecrates.io`rmp-serde` `Raw` and `RawRef` may crash when receiving invalid UTF-8No score- hotel management system project management systemCross site scripting (XSS) vulnerability in tramyardg hotel-mgmt-system, allows attackers to...6.1 Medium
- pimcore, pimcore pimcore/pimcore +1 moreSQL injection in ElementController.php in pimcore/pimcore8.8 High
- linux kernel, netapp h300e firmware, h300s firmware +6 more +8 moredrivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel before 5.16.12 has a double free...7.8 High
- sonicwall sma 210 firmware, sma 410 firmware, sma 500v firmware +3 more +5 more** UNSUPPORTED WHEN ASSIGNED ** A post-authentication arbitrary file read vulnerability impacting...4.9 Medium
- Show moreLoading…