CVEs published in April 2022
3,733 vulnerabilities, 310 critical, 15 exploited.
- kentico xperienceKentico CMS before 13.0.66 has an Insecure Direct Object Reference vulnerability. It allows an...4.9 Medium
- forestblog project forestblogForestBlog through 2022-02-16 allows admin/profile/save userAvatar XSS during addition of a user...6.1 Medium
- cross-fetch project cross-fetch, lquixada lquixada/cross-fetch +1 moreExposure of Private Personal Information to an Unauthorized Actor in lquixada/cross-fetch8.8 High
- ruby-lang ruby, apple macos, debian linux +2 moreThere is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1...7.5 High
- ruby-lang rubyA double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2....9.8 Critical
- notableNotable before 1.9.0-beta.8 doesn't effectively prevent the opening of executable files when...8.8 High
- springtree madlib-object-utilsPrototype Pollution7.5 High
- 7-zip7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with...7.8 High
- chamilo lmsA Server-Side Request Forgery (SSRF) in Chamilo LMS v1.11.13 allows attackers to enumerate the...8.8 High
- chamiloChamilo LMS v1.11.13 was discovered to contain a cross-site scripting (XSS) vulnerability via the...6.1 Medium
- chamilo lmsChamilo LMS v1.11.13 was discovered to contain a SQL injection vulnerability via the blog_id...9.8 Critical
- chamilo lmsA reflected cross-site scripting (XSS) vulnerability in Chamilo LMS v1.11.13 allows attackers to...6.1 Medium
- chamilo lmsChamilo LMS v1.11.13 lacks validation on the user modification form, allowing attackers to...7.2 High
- microsoft yarp 1.0, yarp 1.1rc, yet another reverse proxy +2 moreYARP Denial of Service Vulnerability7.5 High
- microsoft visual studio codeVisual Studio Code Elevation of Privilege Vulnerability7.3 High
- microsoft windows 10 version 1809, windows 10 version 1909, windows 10 version 20h2 +10 more +12 moreWindows Graphics Component Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Fax Compose Form Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Fax Compose Form Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Fax Compose Form Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Secure Channel Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1809, windows 10 version 1909, windows 10 version 20h2 +10 more +12 moreWin32k Elevation of Privilege Vulnerability7.8 High
- microsoft lync server, lync server 2013 cu10, skype for business server 2015 cu12 +2 more +4 moreSkype for Business Information Disclosure Vulnerability6.5 Medium
- microsoft skype for business server 2015 cu12, skype for business server 2019 cu6, skype for business server +2 moreSkype for Business and Lync Spoofing Vulnerability5.3 Medium
- microsoft azure sdk for .netAzure SDK for .NET Information Disclosure Vulnerability5.3 Medium
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +35 more +37 moreWindows User Profile Service Elevation of Privilege Vulnerability7.0 High
- microsoft excel, excel mobile, excel for android +35 more +37 moreWindows Graphics Component Remote Code Execution Vulnerability7.8 High
- microsoft excel, 365 apps, excel rt +13 more +15 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft azure site recovery, azure site recovery vmware to azure +1 moreAzure Site Recovery Remote Code Execution Vulnerability7.2 High
- microsoft azure site recovery, azure site recovery vmware to azure +1 moreAzure Site Recovery Information Disclosure Vulnerability4.9 Medium
- microsoft azure site recovery, azure site recovery vmware to azure +1 moreAzure Site Recovery Information Disclosure Vulnerability4.9 Medium
- microsoft .net framework, .net framework 2.0 service pack 2, .net framework 3.0 service pack 2 +9 more +11 more.NET Framework Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability7.5 High
- microsoft windows 11 version 21h2, windows server 2022, windows 11 +2 moreDiskUsage.exe Remote Code Execution Vulnerability7.5 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +13 more +15 moreWindows DNS Server Remote Code Execution Vulnerability6.6 Medium
- microsoft windows 10 version 1809, windows 10 version 1909, windows 10 version 20h2 +8 more +10 moreWindows Bluetooth Driver Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 1909 +22 more +24 moreWindows File Server Resource Management Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 1909 +12 more +14 moreWindows DNS Server Remote Code Execution Vulnerability7.2 High
- microsoft windows server 2016, windows server 2016 (server core installation), windows server 2019 +3 more +5 moreWindows DNS Server Remote Code Execution Vulnerability7.2 High
- microsoft windows server 2016, windows server 2016 (server core installation), windows server 2019 +3 more +5 moreWindows DNS Server Remote Code Execution Vulnerability7.2 High
- microsoft windows server 2016, windows server 2016 (server core installation), windows server 2019 +3 more +5 moreWindows DNS Server Remote Code Execution Vulnerability7.2 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +13 more +15 moreWindows DNS Server Remote Code Execution Vulnerability6.6 Medium
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +13 more +15 moreWindows DNS Server Remote Code Execution Vulnerability6.6 Medium
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +13 more +15 moreWindows DNS Server Remote Code Execution Vulnerability6.6 Medium
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +13 more +15 moreWindows DNS Server Remote Code Execution Vulnerability6.6 Medium
- microsoft windows server 2012 r2, windows server 2012 r2 (server core installation), windows server 2016 +6 more +8 moreWindows DNS Server Remote Code Execution Vulnerability6.6 Medium
- microsoft windows server 2012 r2, windows server 2012 r2 (server core installation), windows server 2016 +6 more +8 moreWindows DNS Server Remote Code Execution Vulnerability6.6 Medium
- microsoft windows server 2016, windows server 2016 (server core installation), windows server 2019 +3 more +5 moreWindows DNS Server Information Disclosure Vulnerability6.5 Medium
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +13 more +15 moreWindows DNS Server Remote Code Execution Vulnerability7.2 High
- microsoft windows server 2012 r2, windows server 2012 r2 (server core installation), windows server 2016 +6 more +8 moreWindows DNS Server Remote Code Execution Vulnerability6.6 Medium
- Show moreLoading…