CVEs published in April 2022
3,733 vulnerabilities, 310 critical, 15 exploited.
afirecrates.ioRelative Path Traversal in afire serve_staticNo score- link-admin project link-adminLink-Admin v0.0.1 was discovered to contain a SQL injection vulnerability via DictRest...9.8 Critical
- jfinalcms project jfinalcmsJFinalCMS v2.0 was discovered to contain a SQL injection vulnerability via the Article Management...9.8 Critical
- mingsoft mcmsCross Site Request Forgery in Mingsoft MCMS8.8 High
- git-interface project git-interface, yarkeev yarkeev/git-interface +1 moreCommand Injection vulnerability in git-interface@2.1.1 in yarkeev/git-interface9.8 Critical
- openscadA vulnerbiility was found in Openscad, where a .scad file with no trailing newline could cause an...7.1 High
- openscadA vulnerbiility was found in Openscad, where a DXF-format drawing with particular (not...5.5 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow an authenticated user to view report...4.3 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 could allow a remote attacker to obtain...4.6 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting, caused by...5.4 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site request forgery which...4.3 Medium
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to priviledge escalation where a...3.1 Low
- ibm cognos analytics, netapp oncommand insight +1 moreIBM Cognos Analytics PowerPlay (IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7) could be...6.5 Medium
- microweber, microweber microweber/microweber +1 moreReflected XSS on demo.microweber.org/demo/module/ in microweber/microweber6.3 Medium
- crypt-server project crypt-serverCrypt Server before 3.3.0 allows XSS in the index view. This is related to serial, computername,...6.1 Medium
- mi miuiThere is a pointer double free vulnerability in Some MIUI Services. When a function is called,...7.5 High
- uffizio gps trackerUffizio GPS Tracker Cross-site Scripting7.1 High
- uffizio gps trackerUffizio GPS Tracker Cross-site Request Forgery4.3 Medium
- johnnson controls metasys system configuration tool (sct), metasys system configuration tool pro (sct pro), johnsoncontrols metasys system configuration tool +2 moreJohnson Controls Metasys SCT Pro5.3 Medium
- radare radare2, radareorg radareorg/radare2 +1 moreHeap-based Buffer Overflow in radareorg/radare25.3 Medium
- fit2cloud haloHalo-1.5.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via \admin...4.8 Medium
tomcatopenSUSESecurity update for tomcatNo score- pimcore, pimcore pimcore/pimcore +1 moreSQL injection in GridHelperService.php in pimcore/pimcore7.2 High
- asus rt-ax88u, rt-ax88u firmware +1 moreASUS RT-AX88U - Format String9.8 Critical
- asus rt-ax88u, rt-ax88u firmware +1 moreASUS RT-AX88U - Stored XSS5.4 Medium
- asus webstorageASUS WebStorage - Use of Hard-coded Credentials7.3 High
- service project serviceDisputed: OS Command injection in github.com/kardianos/service7.8 High
- debian linux, linux kernel +1 moreIn the Linux kernel before 5.17.3, fs/io_uring.c has a use-after-free due to a race condition in...7.0 High
- freetype, fedoraproject fedora +1 moreFreeType commit 22a0cccb4d9d002f33c1ba7a4b36812c7d4f46b5 was discovered to contain a segmentation...7.5 High
- freetype, fedoraproject fedora +1 moreFreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation...7.5 High
- freetype, fedoraproject fedora +1 moreFreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer...9.8 Critical
- antisamy project antisamy, oracle enterprise manager base platform, weblogic server +2 moreCross-site Scripting in OWASP AntiSamy6.1 Medium
- antisamy project antisamyCross-site Scripting in OWASP AntiSamy6.1 Medium
- antisamy project antisamy, cyberneko html project html, htmlunit +2 moreDenial of service in HtmlUnit-Neko7.5 High
els-defineTuxCareUpdate of els-defineNo scorephpTuxCare,php-bcmathTuxCare,php-cliTuxCare +24 more +26 moreUpdate of php 5.3: Remove mariadb102 patch to eliminate faulty functionalityNo scorephpTuxCare,php-bcmathTuxCare,php-cliTuxCare +24 more +26 moreUpdate of php 5.3: Fix segfault during graceful Apache restartNo score- dell emc repository manager, repository manager (drm) +1 moreDell EMC Repository Manager version 3.4.0 contains a plain-text password storage vulnerability. A...8.2 High
- dell appsync, emc appsync +1 moreDell EMC AppSync versions from 3.9 to 4.3 contain a path traversal vulnerability in AppSync...7.5 High
- dell integrated dell remote access controller 8, integrated dell remote access controller 8 firmware +1 moreDell EMC iDRAC8 versions 2.81.81 and earlier contain a denial of service vulnerability. A remote...5.3 Medium
- dell c4130 firmware, c6320 firmware, fc430 firmware +18 more +20 moreDell PowerEdge Server BIOS contains an Improper SMM communication buffer verification...5.7 Medium
- attendance and payroll system project and payroll systemAttendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via...8.8 High
- victor cms project cmsVictor v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the...8.8 High
- attendance and payroll system project and payroll systemAttendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via...8.8 High
- attendance and payroll system project and payroll systemAttendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via...8.8 High
- attendance and payroll system project and payroll systemAttendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via...8.8 High
- attendance and payroll system project and payroll systemAttendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via...8.8 High
- attendance and payroll system project and payroll systemAttendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via...8.8 High
- attendance and payroll system project and payroll systemAttendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via...8.8 High
- Show moreLoading…