CVEs published in April 2022
3,733 vulnerabilities, 310 critical, 15 exploited.
- cisco ios rommon software, ios +1 moreCisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches Vulnerabilities4.6 Medium
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software Tool Command Language Privilege Escalation Vulnerability5.1 Medium
- cisco iosCisco IOx Application Hosting Environment Vulnerabilities5.5 Medium
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software AppNav-XE Denial of Service Vulnerability8.6 High
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software IPSec Denial of Service Vulnerability6.8 Medium
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software for Cisco Catalyst 9000 Family Switches and Catalyst 9000 Family Wireless Controllers Privilege Escalation Vulnerability7.8 High
- cisco ios xe, ios xe software +1 moreCisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability8.6 High
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Application Visibility and Control Denial of Service Vulnerability8.6 High
- cisco ios xe, ios xe software +1 moreCisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Trap Denial of Service Vulnerability7.4 High
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software NETCONF Over SSH Denial of Service Vulnerability7.7 High
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software Web UI API Injection Vulnerability4.7 Medium
- cisco ios xe software, ios xe +1 moreCisco IOS XE Software Border Gateway Protocol Resource Public Key Infrastructure Denial of Service Vulnerability6.8 Medium
- cisco wireless lan controller (wlc), wireless lan controller 8.10.151.0, wireless lan controller 8.10.162.0 +2 moreCisco Wireless LAN Controller Management Interface Authentication Bypass Vulnerability10.0 Critical
- cisco ios, ios xe +1 moreCisco IOS and IOS XE Software Web Services Denial of Service Vulnerability8.6 High
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software for ASR 9000 Series Routers Lightspeed-Plus Line Cards Denial of Service Vulnerability8.6 High
- cisco sd-wan solution, sd-wan, catalyst sd-wan manager +4 more +6 moreCisco SD-WAN Solution Improper Access Control Vulnerability7.8 High
- cisco sd-wan vedge routerCisco SD-WAN vEdge Routers Denial of Service Vulnerability5.5 Medium
- cisco ios, ios xe +1 moreCisco IOx Application Hosting Environment Vulnerabilities5.5 Medium
- cisco ios, ios xe +1 moreCisco IOx Application Hosting Environment Vulnerabilities5.5 Medium
- yearningYearning versions 2.3.1 and 2.3.2 Interstellar GA and 2.3.4 - 2.3.6 Neptune is vulnerable to...7.5 High
- f5 njsNGINX NJS 0.7.2 was discovered to contain a NULL pointer dereference via the component...5.5 Medium
- stb project stb, fedoraproject fedora +1 moreSTB v2.27 was discovered to contain an integer shift of invalid size in the component...8.8 High
- irzip project irzip, debian linux +1 moreIrzip v0.640 was discovered to contain a heap memory corruption via the component lrzip.c...9.8 Critical
- salesagility suitecrmSuiteCRM v7.11.23 was discovered to allow remote code execution via a crafted payload injected...7.2 High
- f-secure safe, mobile security +1 moreAddress Bar Spoofing Vulnerability in F-Secure SAFE Browser for Android4.3 Medium
- f-secure safe, mobile security +1 moreAddress Bar Spoofing Vulnerability in F-Secure SAFE Browser for Android4.3 Medium
- f-secure safe, mobile security +1 moreAddress Bar Spoofing Vulnerability in F-Secure SAFE Browser for Android4.3 Medium
- signalThe Signal app before 5.34 for iOS allows URI spoofing via RTLO injection. It incorrectly renders...7.5 High
- kaseya unitrends backupKaseya Unitrends Client/Agent through 10.5,5 allows remote attackers to execute arbitrary code.9.8 Critical
- yokogawa centum vp, b\/m9000 vp, yokogawa electric corporation centum vp series with vp6e5150(graphic builder) installed and b/m9000 vp +2 moreOS command injection vulnerability exists in CENTUM VP R4.01.00 to R4.03.00, CENTUM VP Small R4...7.8 High
- yokogawa centum vp, b\/m9000 vp, yokogawa electric corporation centum vp series with vp6e5000(ad suite engineering serverfunction) installed and b/m9000 vp +2 moreImproper authentication vulnerability in the communication protocol provided by AD (Automation...9.1 Critical
clamavOSS-FuzzHeap-buffer-overflow in cli_bcomp_freemetaNo scoreopenscOSS-FuzzStack-buffer-overflow in sc_hsm_list_filesNo scorefastjson2OSS-FuzzUncaught exception in com.alibaba.fastjson.JSONPath.getPropertyValueNo score- debian linux, fedoraproject fedora, nothings stb image.h +2 morestb_image.h v2.27 was discovered to contain an heap-based use-after-free via the function...8.8 High
- debian linux, fedoraproject fedora, nothings stb image.h +2 morestb_image.h v2.27 was discovered to contain an integer overflow via the function...6.5 Medium
- digium asterisk, certified asterisk, debian linux +2 moreAn issue was discovered in Asterisk through 19.x and Certified Asterisk through 16.8-cert13. The...9.8 Critical
- digium asterisk, debian linux +1 moreAn SSRF issue was discovered in Asterisk through 19.x. When using STIR/SHAKEN, it's possible to...9.1 Critical
- digium asterisk, debian linux +1 moreAn issue was discovered in Asterisk through 19.x. When using STIR/SHAKEN, it is possible to...7.5 High
- metabaseFile system exposure in Metabase5.9 Medium
- metabaseDatabase bypassing any permissions in Metabase via SQlite attach8.0 High
- metabaseXSS vulnerability in Metabase8.7 High
- aiko-it-systems discatsharpContact to DisCatSharp-owned server using authenticated client6.5 Medium
- discourseCategory group permissions leaked in Discourse5.3 Medium
- geoserver geowebcacheUnchecked JNDI lookups in GeoWebCache9.1 Critical
- discourseAnonymous user cache poisoning in discourse5.3 Medium
- b. braun melsungen ag data module compactplus, spacecom, battery pack with wi-fi +1 more +3 moreB. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus3.3 Low
- b. braun melsungen ag data module compactplus, spacecom, battery pack with wi-fi +1 more +3 moreB. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus6.5 Medium
- b. braun melsungen ag data module compactplus, spacecom, battery pack with wi-fi +1 more +3 moreB. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus7.6 High
- b. braun melsungen ag data module compactplus, spacecom, battery pack with wi-fi +1 more +3 moreB. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus5.4 Medium
- Show moreLoading…