CVEs published in April 2022
3,733 vulnerabilities, 310 critical, 15 exploited.
KernelLinuxnet/smc: Fix NULL pointer dereference in smc_pnet_find_ib()No scoreKernelLinuxnfc: nci: add flush_workqueue to prevent uafNo scoreKernelLinuxmacvlan: Fix leaking skb in source mode with nodst optionNo scoreKernelLinuxcifs: potential buffer overflow in handling symlinksNo scoreKernelLinuxblock: null_blk: end timed out poll requestNo scoreKernelLinuxio_uring: abort file assignment prior to assigning credsNo scoreKernelLinuxdrm/amdkfd: Check for potential null return of kmalloc_array()No scoreKernelLinuxDrivers: hv: vmbus: Deactivate sysctl_record_panic_msg by default in isolated guestsNo scoreKernelLinuxscsi: lpfc: Fix unload hang after back to back PCI EEH faultsNo scoreKernelLinuxscsi: target: tcmu: Fix possible page UAFNo scoreKernelLinuxmm: fix unexpected zeroed page mapping with zram swapNo scoreKernelLinuxdrivers: net: slip: fix NPD bug in sl_tx_timeout()No scoreKernelLinuxspi: cadence-quadspi: fix protocol setup for non-1-1-X operationsNo scoreKernelLinuxnet: usb: aqc111: Fix out-of-bounds accesses in RX fixupNo scoreKernelLinuxmemory: renesas-rpc-if: fix platform-device leak in error pathNo scoreKernelLinuxmm/secretmem: fix panic when growing a memfd_secretNo scoreKernelLinuxperf/imx_ddr: Fix undefined behavior due to shift overflowing the constantNo scoreKernelLinuxgcc-plugins: latent_entropy: use /dev/urandomNo scoreKernelLinuxipv6: fix panic when forwarding a pkt with no in6 devNo scoreKernelLinuxep93xx: clock: Fix UAF in ep93xx_clk_register_gate()No scoreKernelLinuxARM: davinci: da850-evm: Avoid NULL pointer dereferenceNo scoreKernelLinuxi2c: dev: check return value when calling dev_set_name()No scoreKernelLinuxALSA: pcm: Test for "silence" field in struct "pcm_format_data"No scoreKernelLinuxdm integrity: fix memory corruption when tag_size is less than digest sizeNo scoreKernelLinuxax25: Fix UAF bugs in ax25 timersNo score- snipe snipe/snipe-it, snipeitapp snipe-it +1 moreStored Cross Site Scripting vulnerability in the checked_out_to parameter in snipe/snipe-it9.0 Critical
rusoto_credentialcrates.ioRusoto is unmaintainedNo score- radare radare2, radareorg radareorg/radare2 +1 moreheap-use-after-free in radareorg/radare27.5 High
libexifOSS-FuzzHeap-buffer-overflow in exif_get_longNo scorelibjxlOSS-FuzzSegv on unknown address in jxl::N_SSE4::WriteToU8Stage::ProcessRowNo score- mruby, mruby mruby/mruby +1 moreOut-of-bounds Read in mrb_obj_is_kind_of in in mruby/mruby7.7 High
- lenovo fan power controller2 (fpc2), system management module (smm), ibm nextscale fan power controller firmware +4 more +6 moreAn authentication bypass vulnerability was discovered in an internal service of the Lenovo Fan...9.8 Critical
- lenovo fan power controller2 (fpc2), system management module (smm), ibm nextscale fan power controller firmware +4 more +6 moreAn authentication bypass vulnerability was discovered in the web interface of the Lenovo Fan...9.8 Critical
- pmmp pocketmine-mpPocketMine-MP before 4.2.9 Denial of Service via NBT Deserialization7.1 High
- lenovo thinkpad bios, thinkpad x1 fold gen 1 firmware +1 moreA potential vulnerability due to improper buffer validation in the SMI handler...6.7 Medium
- lenovo thinkpad bios, thinkpad 11e firmware, thinkpad 11e yoga firmware +28 more +30 moreA potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler in some...6.7 Medium
- lenovo thin installerA denial of service vulnerability was reported in Lenovo Thin Installer prior to version 1.3.0039...5.0 Medium
- dell system updateA vulnerability was reported in Lenovo System Update that could allow a local user with...7.3 High
- honor pcmanagerA DLL search path vulnerability was reported in Lenovo PCManager prior to version 4.0.40.2175...7.3 High
- lenovo bios, c340-14iml firmware, c340-15iml firmware +60 more +62 moreA potential vulnerability in the SMI callback function used in the Legacy BIOS mode driver in...6.7 Medium
- lenovo bios, a340-22icb firmware, a340-22ick firmware +51 more +53 moreA potential vulnerability in the SMI callback function used in the SMBIOS event log driver in...6.7 Medium
- lenovo a540-24icb firmware, a540-27icb firmware, bios +30 more +32 moreA potential vulnerability in the SMI callback function used in the NVME driver in some Lenovo...6.7 Medium
- lenovo ideapad 3-14ada05 firmware, ideapad 3-14ada6 firmware, ideapad 3-14alc6 firmware +103 more +105 moreA potential vulnerability by a driver used during manufacturing process on some consumer Lenovo...6.7 Medium
- lenovo ideapad 3-14ada05 firmware, ideapad 3-14ada6 firmware, ideapad 3-14alc6 firmware +71 more +73 moreA potential vulnerability by a driver used during older manufacturing processes on some consumer...6.7 Medium
- lenovo ideapad 3-14ada05 firmware, ideapad 3-14ada6 firmware, ideapad 3-14alc6 firmware +103 more +105 moreA potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some...6.7 Medium
- motorola device help android app, device help, ready for +1 more +3 moreVersions of Motorola Ready For and Motorola Device Help Android applications prior to 2021-04-08...6.8 Medium
- honor pcmanagerA denial of service vulnerability was reported in Lenovo PCManager prior to version 4.0.40.2175...5.0 Medium
- honor pcmanagerA denial of service vulnerability was reported in Lenovo PCManager prior to version 4.0.20.10282...5.5 Medium
xml2rfcPyPISVG with embedded scripts can lead to cross-site scripting attacks in xml2rfcNo scoreckbcrates.ioDep Group Remote Memory Exhaustion (Denial of Service) in ckbNo score- Show moreLoading…