CVEs published in April 2022
3,733 vulnerabilities, 310 critical, 15 exploited.
- google chromeInappropriate implementation in iframe in Google Chrome prior to 101.0.4951.41 allowed a remote...6.5 Medium
- google chromeInsufficient data validation in Dev Tools in Google Chrome prior to 101.0.4951.41 allowed a...6.5 Medium
- google chromeInappropriate implementation in WebAuthentication in Google Chrome prior to 101.0.4951.41 allowed...6.3 Medium
- google chromeInappropriate implementation in HTML Parser in Google Chrome prior to 101.0.4951.41 allowed a...4.3 Medium
- google chromeInappropriate implementation in Input in Google Chrome prior to 101.0.4951.41 allowed a remote...6.5 Medium
- google chromeUse after free in File Manager in Google Chrome prior to 101.0.4951.41 allowed a remote attacker...8.8 High
- google chromeIncorrect security UI in Downloads in Google Chrome on Android prior to 101.0.4951.41 allowed a...4.3 Medium
- google chromeInsufficient data validation in Trusted Types in Google Chrome prior to 101.0.4951.41 allowed a...6.1 Medium
- google chromeUse after free in Dev Tools in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to...8.8 High
- google chromeInsufficient data validation in Blink Editing in Google Chrome prior to 101.0.4951.41 allowed a...6.1 Medium
- google chromeUse after free in Bookmarks in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to...8.8 High
- google chromeUse after free in Browser Switcher in Google Chrome prior to 101.0.4951.41 allowed a remote...8.8 High
- google chromeOut of bounds memory access in UI Shelf in Google Chrome on Chrome OS, Lacros prior to 101.0.4951...8.8 High
- google chromeInappropriate implementation in Extensions API in Google Chrome prior to 101.0.4951.41 allowed an...4.3 Medium
- google chromeUse after free in Ozone in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to...7.5 High
- google chromeType confusion in V8 in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to obtain...8.8 High
- google chromeUse after free in File System API in Google Chrome prior to 101.0.4951.41 allowed a remote...7.5 High
- google chromeHeap buffer overflow in Web UI Settings in Google Chrome prior to 101.0.4951.41 allowed a remote...8.8 High
- google chromeHeap buffer overflow in WebGPU in Google Chrome prior to 101.0.4951.41 allowed a remote attacker...8.8 High
- google chromeInappropriate implementation in WebGL in Google Chrome prior to 101.0.4951.41 allowed a remote...6.5 Medium
- google chromeUse after free in Sharing in Google Chrome on Mac prior to 101.0.4951.41 allowed a remote...8.8 High
- google chromeUse after free in ANGLE in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to...8.8 High
- google chromeUse after free in SwiftShader in Google Chrome prior to 101.0.4951.41 allowed a remote attacker...8.8 High
- google chromeUse after free in Vulkan in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to...8.8 High
- palantir foundry issuesThe Foundry Issues service was found to be logging in a manner that captured session tokens.5.5 Medium
- digitaldruid hoteldruidHotelDruid Hotel Management Software v3.0.3 contains a cross-site scripting (XSS) vulnerability...6.1 Medium
- keycloakKeycloak vulnerable to privilege escalation on Token Exchange feature9.8 Critical
- njtech greencmsGreenCMS v2.3.0603 was discovered to contain an arbitrary file deletion vulnerability via /index...8.1 High
- bloofox bloofoxcmsbloofoxCMS v0.5.2.1 was discovered to contain an arbitrary file upload vulnerability via /admin...8.8 High
- dhcms project dhcmsdhcms v20170919 was discovered to contain an arbitrary folder deletion vulnerability via /admin...8.1 High
- ed01-cms project ed01-cmsED01-CMS v20180505 was discovered to contain an arbitrary file upload vulnerability via /admin...8.8 High
- ed01-cms project ed01-cmsED01-CMS v20180505 was discovered to contain a SQL injection vulnerability via the component post...9.8 Critical
- hongcms project hongcmsHongCMS 3.0.0 allows arbitrary file deletion via the component /admin/index.php/template/ajax...8.1 High
- zcms project zcmsZCMS v20170206 was discovered to contain a stored cross-site scripting (XSS) vulnerability via...5.4 Medium
- zcms project zcmsZCMS v20170206 was discovered to contain a file inclusion vulnerability via index.php?m=home&c...9.8 Critical
- verydowsVerydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend...8.1 High
- verydowsVerydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend...8.1 High
- nopcommercenopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS) via the "Text" parameter (forums)...5.4 Medium
- nopcommercenopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS). At Apply for vendor account...6.1 Medium
- nopcommercenopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS). An attacker (role customer) can...5.4 Medium
- discourse assign, discourse-assign +1 moreExposure of Sensitive Information to an Unauthorized Actor in Discourse Assign4.3 Medium
- alexander ustimenko psychological tests & quizzes (wordpress plugin), psychological tests \& quizzes project tests \& quizzes +1 moreWordPress Psychological tests & quizzes plugin <= 0.21.19 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability5.4 Medium
- redhat keycloak, single sign-on +1 moreImproper authorization in Keycloak6.5 Medium
- maxb maxboardMaxBoard XSS and File Upload Vulnerability8.1 High
- tobesoft xplatformtobesoft XPLATFORM Path Traversal Vulnerability8.8 High
- tripetto, tripetto (wordpress plugin) +1 moreWordPress Tripetto plugin <= 5.1.4 - Unauthenticated Cross-Site Scripting (XSS) vulnerability via SVG image upload4.7 Medium
- alexander ustimenko psychological tests & quizzes (wordpress plugin), psychological tests \& quizzes project tests \& quizzes +1 moreWordPress Psychological tests & quizzes plugin <= 0.21.19 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability5.4 Medium
- ciphermail webmail messengerAn issue was discovered in CipherMail Webmail Messenger 1.1.1 through 4.1.4. A local attacker...5.5 Medium
- getgrav getgrav/grav, grav +1 morestored xss in getgrav/grav8.2 High
- ballcat codegen, ballcat-projects ballcat-codegen +1 moreCommand Injection in Ballcat Codegen8.8 High
- Show moreLoading…