CVEs published in April 2022
3,733 vulnerabilities, 310 critical, 15 exploited.
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3, 7.4, and 7.5 allows for users to access information across tenant and domain...4.3 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3, 7.4, and 7.5 in some situations may not automatically log users out after...4.3 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3, 7.4, and 7.5 could allow an authenticated user to obtain sensitive...3.1 Low
- seacmsSeacms v11.6 was discovered to contain a remote code execution (RCE) vulnerability via the...9.8 Critical
- miele benchmark programming toolPrivilege Escalation in Miele Benchmark Programming Tool7.3 High
- bender cc612, cc612 firmware, cc613 +3 more +5 moreBender Charge Controller: Long URL could lead to webserver crash8.8 High
- bender cc612, cc612 firmware, cc613 +3 more +5 moreBender Charge Controller: Hardcoded Credentials in Charge Controller9.8 Critical
- bender cc612, cc612 firmware, cc613 +3 more +5 moreBender Charge Controller: Command injection via Web interface8.8 High
- bender cc612, cc612 firmware, cc613 +3 more +5 moreBender Charge Controller: Local privilege Escalation7.8 High
- bender cc612, cc612 firmware, cc613 +3 more +5 moreBender Charge Controller: Cross-site Scripting5.4 Medium
- bender cc612, cc612 firmware, cc613 +6 more +8 moreBender Charge Controller: RFID leak7.5 High
- bender cc612, cc612 firmware, cc613 +3 more +5 moreBender Charge Controller: Unprotected data export8.6 High
- bender cc612, cc612 firmware, cc613 +6 more +8 moreBender Charge Controller: Long URL could lead to webserver crash5.3 Medium
- nextcloud server, kiteworks security-advisories +1 moreInsufficient Verification of Data Authenticity in Nextcloud Server2.4 Low
- line corporation for windows, linecorp line +1 moreDue to build misconfiguration in openssl dependency, LINE for Windows before 7.8 is vulnerable to...7.8 High
- nextcloud server, kiteworks security-advisories +1 morePossible Injection in Nextcloud Server4.3 Medium
- controlupIn ControlUp Real-Time Agent before 8.6, an unquoted path can result in privilege escalation. An...7.2 High
- nextcloud talk, kiteworks security-advisories +1 moreOpen Redirect in Nextcloud Talk4.3 Medium
- nextcloud, kiteworks security-advisories +1 moreExposure of Sensitive Information to an Unauthorized Actor in com.nextcloud.client2.2 Low
- nextcloud, kiteworks security-advisories +1 moreImproper Authentication in Nextcloud Android Files2.0 Low
- apifoxApifox through 2.1.6 is vulnerable to Cross Site Scripting (XSS) which can lead to remote code...9.0 Critical
array-macrocrates.io`array!` macro is unsound when its length is impure constantNo score- telesquare tlr-2005ksh firmwareTelesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows...9.1 Critical
- telesquare tlr-2005ksh firmwareTelesquare TLR-2005KSH 1.0.0 is affected by an unauthenticated file download vulnerability that...5.3 Medium
- telesquare sdt-cs3b1 firmwareTelesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a...9.8 Critical
- franklinfueling ts-550 evo firmwareFranklin Fueling Systems FFS T5 Series 1.8.7.7299 is affected by an unauthenticated directory...7.5 High
- franklinfueling ts-550 evo firmwareFranklin Fueling Systems FFS TS-550 evo 2.23.4.8936 is affected by an unauthenticated directory...7.5 High
- microweber, microweber microweber/microweber +1 moreXSS in /demo/module/?module=HERE in microweber/microweber6.3 Medium
- dlink dir-825 firmwareIn the "webupg" binary of D-Link DIR-825 G1, because of the lack of parameter verification,...8.8 High
- dlink dir-825 firmwareIn the "webupg" binary of D-Link DIR-825 G1, attackers can bypass authentication through...9.8 Critical
- get-simple getsimple cms, getsimple cms +1 moreGetSimple CMS Content Module edit.php cross site scripting3.5 Low
- haxx curl, broadcom fabric operating system, debian linux +13 more +15 moreA insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak...6.5 Medium
- haxx curl, broadcom fabric operating system, debian linux +12 more +14 moreAn information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by...7.5 High
- haxx curl, broadcom fabric operating system, debian linux +12 more +14 moreAn insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82...5.7 Medium
- haxx curl, broadcom fabric operating system, debian linux +12 more +14 moreAn improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which...8.1 High
- hashicorp go-getterInsertion of Sensitive Information into Log File in Hashicorp go-getter5.5 Medium
- zammadA lack of password length restriction in Zammad v5.1.0 allows for the creation of extremely long...7.5 High
- zammadA lack of rate limiting in the 'forgot password' feature of Zammad v5.1.0 allows attackers to...7.5 High
- zammadAn access control issue in Zammad v5.0.3 allows attackers to write entries to the CTI caller log...9.1 Critical
- zammadAn access control issue in Zammad v5.0.3 broadcasts administrative configuration changes to all...4.3 Medium
- htmldoc project htmldocA flaw was found in htmldoc commit 31f7804. A heap buffer overflow in the function...7.8 High
- eclipse openj9, the eclipse foundation eclipse openj9, oracle java se +2 moreIn Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during...5.3 Medium
openscOSS-FuzzStack-buffer-overflow in sc_asn1_read_tagNo scorelibredwgOSS-FuzzSegv on unknown address in bit_write_TVNo score- google chromeHeap buffer overflow in Blink in Google Chrome prior to 101.0.4951.41 allowed a remote attacker...9.6 Critical
- google chromeUse after free in Base Internals in Google Chrome prior to 101.0.4951.41 allowed a remote...8.8 High
- microsoft windows defender for endpointA time-of-check-time-of-use (TOCTOU) race condition vulnerability was found in networkd...4.7 Medium
- microsoft windows defender for endpointA vulnerability was found in networkd-dispatcher. This flaw exists because no functions are...5.5 Medium
- samba cifs-utils, debian linux, fedoraproject fedora +16 more +18 moreIn cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command...7.8 High
- owasp enterprise security api, esapi esapi-java-legacy, netapp active iq unified manager +2 more +4 moreCross-site Scripting in org.owasp.esapi:esapi -- antisamy-esapi.xml configuration file5.4 Medium
- Show moreLoading…