CVEs published in April 2022
3,733 vulnerabilities, 310 critical, 15 exploited.
- cisco unified communications managerCisco Unified Communications Products Denial of Service Vulnerability5.3 Medium
- cisco adaptive security appliance, adaptive security appliance (asa) software, adaptive security appliance software +1 more +3 moreCisco Adaptive Security Appliance and Cisco Firepower Threat Defense Software AnyConnect SSL VPN Denial of Service Vulnerability5.8 Medium
- cisco unified communications managerCisco Unified Communications Products Arbitrary File Read Vulnerability6.5 Medium
- cisco unified communications managerCisco Unified Communications Products Arbitrary File Write Vulnerability4.9 Medium
- cisco unified communications manager, unity connection +1 moreCisco Unified Communications Products Cross-Site Scripting Vulnerability6.1 Medium
- cisco unified communications managerCisco Unified Communications Products Cross-Site Request Forgery Vulnerability5.7 Medium
- cisco unified communications manager im and presence serviceCisco Unified Communications Manager IM & Presence Service SQL Injection Vulnerability5.4 Medium
- cisco roomos software, roomos, telepresence collaboration endpoint +2 moreCisco TelePresence Collaboration Endpoint and RoomOS Software H.323 Denial of Service Vulnerability7.5 High
- cisco webex meetingsCisco Webex Meetings Cross-Site Scripting Vulnerability6.1 Medium
- bulletproofs project bulletproofsThe Bulletproofs 2017/1066 paper mishandles Fiat-Shamir generation because the hash computation...8.1 High
- elastic kibanaA vulnerability in Kibana could expose sensitive information related to Elastic Stack monitoring...5.3 Medium
- solarwinds database performance monitor, database performance analyzer +1 moreCross-Site Scripting Vulnerability using SQL Query6.8 Medium
- pivotal spring security oauth, spring security oauth, oracle communications design studio +2 moreDenial of service in Spring Security OAuth26.5 Medium
- f5 nginx ingress controllerOn version 2.x before 2.0.3 and 1.x before 1.12.3, the command line restriction that controls...6.5 Medium
- helpsystems titus data classificationThe Labeling tool in Titus Classification Suite 18.8.1910.140 allows users to avoid the...5.5 Medium
- foscam r2c application firmware, r2c system firmware +1 moreTime-of-check Time-of-use (TOCTOU) Race Condition vulerability in Foscam R2C IP camera running...9.1 Critical
- adobe acs aem commons, experience manager +1 moreAdobe Consulting Services Reflected Cross-Site Scripting Arbitrary Code Execution6.1 Medium
- mi content centerA improper permission configuration vulnerability in Xiaomi Content Center APP. This...5.3 Medium
- mi app storeAn intent redirection vulnerability in the Mi App Store product. This vulnerability is caused by...6.1 Medium
- mi miuiSome Xiaomi models have a vulnerability in a certain application. The vulnerability is caused by...8.8 High
- mi miuiSome Xiaomi phones have information leakage vulnerabilities, and some of them may be able to...5.5 Medium
- mi app storeA business logic vulnerability exists in Mi App Store. The vulnerability is caused by incomplete...5.5 Medium
- mi browserAn intent redirection vulnerability in the Mi Browser product. This vulnerability is caused by...7.5 High
- cve cve-servicesPotential Secrets being logged to disk in CVEProject/cve-services5.3 Medium
- glpi-project glpiCross Site Scripting in GLPI4.6 Medium
- glpi-project glpiCross site scripting via SVG file upload in GLPI7.3 High
- glpi-project glpiLDAP password exposure in glpi7.5 High
- combodo itopCross-site Scripting in Combodo iTop9.3 Critical
- combodo itopStored Cross-site Scripting in Combodo iTop8.7 High
- ibm maximo asset managementIBM Maximo Asset Management 7.6.1.2 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm maximo asset managementIBM Maximo Asset Management 7.6.1.2 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- combodo itopXSS in csvimport in 3.0.0-beta versions9.3 Critical
- detekt, detekt detekt/detekt +1 moreImproper Restriction of XML External Entity Reference in detekt/detekt7.3 High
- chatwoot, chatwoot chatwoot/chatwoot +1 moreCross-site Scripting (XSS) - Stored in chatwoot/chatwoot8.1 High
tomcatSUSE,javapackages-toolsSUSE +1 moreSecurity update for tomcatNo scoretomcatSUSESecurity update for tomcatNo scoretomcatSUSESecurity update for tomcatNo score- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreMongoDB Server (mongod) may crash in response to unexpected requests6.5 Medium
- ni flexlogger, labview, static test software suite +2 more +4 moreThere is a cross-site scripting (XSS) vulnerability in an NI Web Server component installed with...6.1 Medium
- blazer project blazerSQL injection in blazer7.5 High
- pam tacplus project tacplusIn pam_tacplus.c in pam_tacplus before 1.4.1, pam_sm_acct_mgmt does not zero out the arep data...9.8 Critical
- mediawiki createredirectThe CreateRedirect extension before 2022-04-14 for MediaWiki does not properly check whether the...7.5 High
libredwgOSS-FuzzHeap-use-after-free in dwg_free_TABLEGEOMETRY_privateNo scoreopenscOSS-FuzzUNKNOWN READ in sc_pkcs15_decode_pubkey_ecNo score- wso2 api manager, api manager analytics, api microgateway +6 more +8 moreA reflected XSS issue exists in the Management Console of several WSO2 products. This affects API...4.6 Medium
- vim, vim vim/vim, apple macos +1 more +3 moreUse of Out-of-range Pointer Offset in vim/vim6.8 Medium
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreA reflected cross-site scripting (XSS) vulnerability in the /public/launchNewWindow.jsp component...6.1 Medium
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreZimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP...7.2 High
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreZimbra Collaboration (aka ZCS) 8.8.15 and 9.0 allows an unauthenticated attacker to inject...7.5 High
- gnome epiphany, debian linux, fedoraproject fedora +2 moreIn GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer...7.5 High
- Show moreLoading…