CVEs published in April 2022
3,733 vulnerabilities, 310 critical, 15 exploited.
- waycrate swhkdExposure of Resource to Wrong Sphere in Simple-Wayland-HotKey-Daemon4.4 Medium
- waycrate swhkdExposure of Resource to Wrong Sphere in Simple-Wayland-HotKey-Daemon3.3 Low
- juniper junos, juniper networks junos os +1 moreJunos OS: MX MS-MPC or MS-MIC, or SRX SPC crashes if it receives a SIP message with a specific contact header format7.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An rpd core will be observed with proxy BGP route-target filtering enabled and certain route add and delete event happening7.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: The rpd CPU spikes to 100% after a malformed ISIS TLV has been received6.5 Medium
- juniper junos os evolved, juniper networks junos os +1 moreJunos OS Evolved: Specific packets reaching the RE lead to a counter overflow and eventually a crash7.5 High
- juniper junos os evolved, juniper networks junos os +1 moreJunos OS Evolved: PTX series: An attacker sending a crafted GRE packet will cause the PFE to restart7.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In a BGP rib-sharding scenario when a certain CLI command is executed the rpd process might crash5.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4300: PFE Denial of Service (DoS) upon receipt of a flood of specific ARP traffic6.5 Medium
- juniper paragon active assurance control center, juniper networks paragon active assurance +1 moreParagon Active Assurance Control Center: Information disclosure vulnerability in crafted URL7.4 High
- juniper contrail service orchestrationContrail Service Orchestration: An authenticated local user may have their permissions elevated via the device via management interface without authentication7.3 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5100/QFX5110/QFX5120/QFX5200/QFX5210/EX4600/EX4650 Series: When storm control profiling is enabled and a device is under an active storm, a Heap-based Buffer Overflow in the PFE will caus…7.5 High
- juniper identity management service, juniper networks identity management service (jims) +1 moreJIMS: Local Privilege Escalation vulnerability via repair functionality7.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4650 Series: Certain traffic received by the Junos OS device on the management interface may be forwarded to egress interfaces instead of discarded7.2 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Denial of service vulnerability in flowd daemon upon receipt of a specific fragmented packet7.5 High
- juniper junos os evolved, juniper networks junos os +1 moreJunos OS Evolved: A remote attacker may cause a CPU Denial of Service by sending genuine traffic to a device on a specific IPv4 port.7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: A XSS vulnerability allows an attacker to execute commands on a target J-Web session8.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: J-Web can be compromised through reflected XSS attacks8.0 High
- amazon aws client vpnAn issue was discovered in Amazon AWS VPN Client 2.0.0. A TOCTOU race condition exists during the...7.0 High
- amazon aws client vpnAn issue was discovered in Amazon AWS VPN Client 2.0.0. It is possible to include a UNC path in...5.0 Medium
- coins-global coins construction cloudAn issue was discovered in COINS Construction Cloud 11.12. Due to an inappropriate use of HTML...5.4 Medium
- f5 njsnginx njs 0.7.2 is affected suffers from Use-after-free in njs_function_frame_alloc() when it try...9.8 Critical
- f5 njsnginx njs 0.7.2 is vulnerable to Buffer Overflow. Type confused in Array.prototype.concat() when...7.5 High
tomcatSUSESecurity update for tomcatNo score- coins-global coins construction cloudAn XSS issue was discovered in COINS Construction Cloud 11.12. Due to insufficient neutralization...5.4 Medium
- mcafee agent, mcafee,llc mcafee agent +1 moreImproper Verification of Cryptographic Signature by McAfee Agent6.1 Medium
- mcafee agent, mcafee,llc mcafee agent epo extension +1 moreSQL injection vulnerability in McAfee Agent's ePO extension8.4 High
- mcafee agent, mcafee,llc mcafee agent for windows +1 moreImproper Privilege Management in McAfee Agent for Windows7.8 High
- mariadbMariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component...7.5 High
- mariadb, debian linux +1 moreMariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component...7.5 High
- mariadbMariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component...7.5 High
- mariadb, debian linux +1 moreMariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component...7.5 High
- mariadbMariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component...7.5 High
- mariadb, debian linux +1 moreMariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component...7.5 High
- mariadb, debian linux +1 moreThere is an Assertion failure in MariaDB Server v10.9 and below via 'node->pcur->rel_pos ==...7.5 High
- mariadb, debian linux +1 moreMariaDB Server v10.9 and below was discovered to contain a use-after-free via the component...7.5 High
- mariadbMariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component...7.5 High
- mariadb, debian linux +1 moreMariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component...7.5 High
- mariadbMariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component...7.5 High
- thoughtworks gocdAn issue was discovered in ThoughtWorks GoCD before 21.3.0. An attacker with privileges to create...8.8 High
- thoughtworks gocdAn issue was discovered in ThoughtWorks GoCD before 21.3.0. An attacker in control of a GoCD...5.4 Medium
- thoughtworks gocdAn issue was discovered in ThoughtWorks GoCD before 21.3.0. An attacker who has compromised a...7.5 High
- thoughtworks gocdAn issue was discovered in ThoughtWorks GoCD before 21.3.0. An attacker who has compromised a...9.8 Critical
- messaging web application project web applicationSourcecodester Messaging Web Application 1.0 is vulnerable to stored XSS. If a sender inserts...5.4 Medium
- att xmill, schneider-electric ecostruxure control expert, ecostruxure process expert +1 more +3 more** UNSUPPORTED WHEN ASSIGNED ** A heap-based buffer overflow exists in XML Decompression...9.8 Critical
- thoughtworks gocdAn issue was discovered in ThoughtWorks GoCD before 21.3.0. The business continuity add-on, which...7.5 High
- pimcore, pimcore pimcore/pimcore +1 moreStored XSS in Tooltip in pimcore/pimcore6.8 Medium
- ebics-java ebics-java-client, ebics java project java +1 moreInsecure EBICS messages encryption implementation in ebics-java/ebics-java-client could allow an adjacent attacker to decrypt EBICS payloads6.5 Medium
- linux kernelAn information leak flaw was found in NFS over RDMA in the net/sunrpc/xprtrdma/rpc_rdma.c in the...4.3 Medium
- artifex ghostpclGhostPCL gsmchunk.c chunk_free_object memory corruption4.3 Medium
- Show moreLoading…