CVEs published in April 2022
3,733 vulnerabilities, 310 critical, 15 exploited.
- apache doris, apache software foundation doris(incubating) +1 moreApache Doris hardcoded cryptography initialization7.5 High
- cuppacmsCuppaCMS v1.0 was discovered to contain a SQL injection vulnerability via /administrator/alerts...9.8 Critical
- cuppacmsCuppaCMS v1.0 was discovered to contain a SQL injection vulnerability via the menu_filter...9.8 Critical
gdmAlmaLinuxgdm bug fix and enhancement updateNo scorelibiscsiAlmaLinux,libiscsi-develAlmaLinux,libiscsi-utilsAlmaLinux +15 more +17 morevirt:rhel and virt-devel:rhel bug fix updateNo scorecustodiaAlmaLinux,ipa-clientAlmaLinux,ipa-client-commonAlmaLinux +19 more +21 moreidm:DL1 bug fix updateNo scoreldapjdkAlmaLinux,ldapjdk-javadocAlmaLinux,pki-acmeAlmaLinux +8 more +10 morepki-core:10.6 bug fix updateNo scorecloud-initAlmaLinuxcloud-init bug fix and enhancement updateNo scorepython3-sudsAlmaLinuxpython-suds bug fix and enhancement updateNo score- mariadbMariaDB Server before 10.7 is vulnerable to Denial of Service. While executing the plugin...5.5 Medium
- mariadbMariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_xbstream...5.5 Medium
alsa-sof-firmwareAlmaLinux,alsa-sof-firmware-debugAlmaLinux +1 morealsa-sof-firmware bug fix and enhancement updateNo scoreNetworkManager-cloud-setupAlmaLinux,NetworkManager-libnm-develAlmaLinux +1 moreNetworkManager bug fix and enhancement updateNo scoredevice-mapper-multipath-develAlmaLinuxdevice-mapper-multipath bug fix and enhancement updateNo scoresanlockAlmaLinux,python3-sanlockAlmaLinux,sanlk-resetAlmaLinux +1 more +3 moresanlock bug fix and enhancement updateNo scoremingw32-glib2AlmaLinux,mingw32-glib2-staticAlmaLinux,mingw64-glib2AlmaLinux +1 more +3 moremingw-glib2 bug fix and enhancement updateNo score- monstaftp monsta ftpMonstaftp v2.10.3 was discovered to allow attackers to execute Server-Side Request Forgery (SSRF).9.8 Critical
- monstaftp monsta ftpMonstaftp v2.10.3 was discovered to contain an arbitrary file upload which allows attackers to...9.8 Critical
- hospital management system project management systemHospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
gitUbuntugit regressionNo score- zoneminderZoneMinder before 1.36.13 allows remote code execution via an invalid language.9.8 Critical
- mitel mivoice connectThe Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code...9.8 Critical
libredwgOSS-FuzzHeap-buffer-overflow in decode_preR13_section_hdrNo scorendpiOSS-FuzzHeap-buffer-overflow in ndpi_search_raknetNo scoregrokOSS-FuzzStack-use-after-return in std::__1::__function::__func<bool grk::WaveletReverse::decompress_partial_tile<iNo scorelibredwgOSS-FuzzHeap-buffer-overflow in dwg_encode_VERTEX_2DNo score- freerdp, fedoraproject fedora +1 moreFreeRDP Server authentication might allow invalid credentials to pass7.4 High
- freerdp, fedoraproject extra packages for enterprise linux, fedora +2 moreServer side NTLM does not properly check parameters in FreeRDP9.1 Critical
- apache couchdbRemote Code Execution Vulnerability in Packaging9.8 Critical
- flask-session-captcha project flask-session-captchaPotential Captcha Validate Bypass in flask-session-captcha5.3 Medium
- solarwinds serv-uDirectory Transversal Vulnerability in Serv-U 15.37.5 High
- git-php project git-phpCommand Injection8.1 High
- 3xsocializer project 3xsocializer, don crowther 3xsocializer (wordpress plugin) +1 moreWordPress 3xSocializer plugin <= 0.98.22 - Authenticated SQL Injection (SQLi) vulnerability6.0 Medium
- night mode project mode, mark daniels night mode (wordpress plugin) +1 moreWordPress Night Mode plugin <= 1.0.0 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability4.8 Medium
- shortpixel adaptive images, adaptive images (wordpress plugin) +1 moreWordPress ShortPixel Adaptive Images plugin <= 3.3.1 - Subscriber+ Plugin Settings Update vulnerability4.3 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 11.9 before 14.5.4,...4.9 Medium
- welaunch wordpress country selectorReflective Cross-Site Scripting vulnerability in WordPress Country Selector Plugin Version 1.6.5....6.1 Medium
- donorbox, unknown donorbox – free recurring donation form +1 moreDonorbox < 7.1.7 - Admin+ Stored Cross-Site Scripting4.8 Medium
- a-j-evolution videos sync pdfVideos sync PDF <= 1.7.4 - Unauthenticated LFI7.5 High
- kanev cab fare calculatorCab fare calculator < 1.0.4 - Unauthenticated LFI9.8 Critical
- admin word count column project word count column, unknown admin word count column +1 moreAdmin Word Count Column <= 2.2 - Unauthenticated Arbitrary File Read9.8 Critical
- unknown opensea, opensea project opeansea +1 moreOpensea < 1.0.3 - Admin+ Stored XSS4.8 Medium
- unknown books & papers, books \& papers project \& papers +1 moreBooks & Papers <= 0.20210223 - Admin+ Stored Cross-Site Scripting4.8 Medium
- kreaturamedia layersliderLayerSlider < 7.1.2 - Admin+ Stored Cross-Site Scripting4.8 Medium
- menubarMenubar < 5.8 - Reflected Cross-Site Scripting5.4 Medium
- anmari amr usersAmr Users < 4.59.4 - Admin+ Stored Cross-Site Scripting4.8 Medium
- saad iqbal mycredmyCred < 2.4.4 - Subscriber+ Import/Export to Email Address Disclosure4.3 Medium
- minioragne page restriction, unknown page restriction wordpress (wp) – protect wp pages/post +1 morePage Restriction WordPress < 1.2.7 - Admin+ Stored Cross-Site Scripting4.8 Medium
- download anti-malware security and brute-force firewall project anti-malware security and brute-force firewallAnti-Malware Security and Brute-Force Firewall < 4.20.96 - Reflected Cross-Site Scripting6.1 Medium
- unknown social comments by wpdevart, wpdevart social comments +1 moreSocial comments by WpDevArt < 2.5.0 - Admin+ Stored Cross-Site Scripting4.8 Medium
- Show moreLoading…