CVEs published in April 2022
3,733 vulnerabilities, 310 critical, 15 exploited.
- freedesktop libinputA format string vulnerability was found in libinput7.8 High
- humhubImproper access control in humhub6.5 Medium
- webtareas project webtareasAn SQL Injection vulnerability exists in Webtareas 2.4p3 and earlier via the $uq HTTP POST...9.8 Critical
- mdt scn-ip000.03 firmware, scn-ip100.03 firmware +1 moreA denial of service vulnerability exists in MDT's firmware for the KNXnet/IP Secure router SCN...7.5 High
- runzero platform, shopware +1 moreImproper Access Control in shopware8.1 High
- runzero platform, shopware +1 moreServer-Side Request Forgery (SSRF) in Shopware7.2 High
- atlassian bitbucket data centerSharedSecretClusterAuthenticator in Atlassian Bitbucket Data Center versions 5.14.0 and later...9.8 Critical
- atlassian jira service management server, jira server, jira service management +5 more +7 moreA vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication...9.8 Critical
- originprotocol origin-website, origin website +1 moreMalicious Javascript injection in OriginProtocol/origin-website4.1 Medium
- databasir project databasirServer-Side Request Forgery in Databasir7.7 High
- databasirRemote Code Execution in Databasir9.9 Critical
- wire wire-webappCross Site Scripting in Wire Webapp9.6 Critical
- mozilla convictPrototype Pollution7.5 High
- interlogix hills comnav, carrier hills comnav firmware +1 moreInterlogix Hills ComNav Improper Restriction of Excessive Authentication Attempts5.5 Medium
- interlogix comnav, carrier hills comnav firmware +1 moreHills ComNav Inadequate Encryption Strength6.2 Medium
- ovn ovn-kubernetesA flaw was found in ovn-kubernetes. This flaw allows a system administrator or privileged...9.1 Critical
- red lion da50n, redlion da50n firmware +1 moreICSA-22-104-03 Red Lion DA50N9.6 Critical
- red lion da50n, redlion da50n firmware +1 moreICSA-22-104-03 Red Lion DA50N8.4 High
- red lion da50n, redlion da50n firmware +1 moreICSA-22-104-03 Red Lion DA50N4.6 Medium
- fanuc roboguideICSA-22-109-03 FANUC ROBOGUIDE Simulation Platform6.1 Medium
- fanuc roboguideICSA-22-109-03 FANUC ROBOGUIDE Simulation Platform6.1 Medium
- fanuc roboguideICSA-22-109-03 FANUC ROBOGUIDE Simulation Platform6.0 Medium
- fanuc roboguideICSA-22-109-03 FANUC ROBOGUIDE Simulation Platform6.0 Medium
- fanuc roboguideICSA-22-109-03 FANUC ROBOGUIDE Simulation Platform6.1 Medium
- drupal core, drupal +1 moreAccess bypass in Drupal core5.4 Medium
- drupal core, drupal +1 moreDrupal core Denial of Service vulnerability7.5 High
- mcafee web gateway, mcafee,llc secure web gateway +1 moreSWG URL redirection vulnerability6.1 Medium
- olivetti d-color mf3555 firmwareAn XSS issue was discovered on Kyocera d-COLOR MF3555 2XD_S000.002.271 devices. The Web...6.1 Medium
- olivetti d-color mf3555 firmwareAn issue was discovered on Kyocera d-COLOR MF3555 2XD_S000.002.271 devices. The Web Application...7.5 High
- olivetti d-color mf3555 firmwareAn issue was discovered on Kyocera d-COLOR MF3555 2XD_S000.002.271 devices. The Web Application...8.1 High
- amazon ssm agentAmazon AWS amazon-ssm-agent before 3.1.1208.0 creates a world-writable sudoers file, which allows...7.0 High
- apache apisixapisix/jwt-auth may leak secrets in error response7.5 High
- graphicsmagick, debian linux +1 moreIn GraphicsMagick, a heap buffer overflow was found when parsing MIFF.7.8 High
- videowhisper micropayments, micropayments - paid author subscriptions, content, downloads, membership +1 moreCross-site request forgery (CSRF) vulnerability in 'MicroPayments - Paid Author Subscriptions,...8.8 High
libiglOSS-FuzzInvalid-free in igl::MshLoader::~MshLoaderNo score- gpacgp_rtp_builder_do_hevc in ietf/rtp_pck_mpeg4.c in GPAC 2.0.0 has a heap-based buffer over-read,...5.5 Medium
- misp-project mispAn issue was discovered in MISP before 2.4.158. In UsersController.php, password confirmation can...7.5 High
- misp-project mispAn issue was discovered in MISP before 2.4.158. There is XSS in app/Controller...6.1 Medium
- misp-project mispAn issue was discovered in MISP before 2.4.158. There is XSS in the cerebrate view if one...4.8 Medium
- misp-project mispAn issue was discovered in MISP before 2.4.158. There is stored XSS in the event graph via a tag...5.4 Medium
- misp-project mispAn issue was discovered in MISP before 2.4.158. There is stored XSS in the galaxy clusters.5.4 Medium
- misp-project mispAn issue was discovered in MISP before 2.4.158. There is stored XSS via the LinOTP login field.5.4 Medium
- misp-project mispAn issue was discovered in MISP before 2.4.158. PHAR deserialization can occur.9.8 Critical
- golang go, fedoraproject extra packages for enterprise linux, fedora +2 moreThe generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows...7.5 High
- golang goCertificate.Verify in crypto/x509 in Go 1.18.x before 1.18.1 can be caused to panic on macOS when...7.5 High
- golang go, fedoraproject fedora, netapp kubernetes monitoring operator +2 moreencoding/pem in Go before 1.17.9 and 1.8.x before 1.8.1 has a Decode stack overflow via a large...7.5 High
- git-lfs, git large file storage project large file storage +1 moreGit LFS can execute a binary from the current directory on Windows9.8 Critical
- databasir project databasirDatabasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability.7.4 High
- nextauth.js next-authDefault redirect callback vulnerable to open redirects6.1 Medium
- amazon web services hotdogHotdog Container Escape8.8 High
- Show moreLoading…