CVEs published in April 2022
3,733 vulnerabilities, 310 critical, 15 exploited.
- encode httpxImproper Input Validation in httpx9.1 Critical
- lexmark firmwareLexmark products through 2022-02-10 have Incorrect Access Control.7.5 High
- ericom powerterm webconnectThe Ericom PowerTerm WebConnect 6.0 login portal can unsafely write an XSS payload from the...6.1 Medium
- xxyopen novel-plusnovel-plus V3.6.1 allows unrestricted file uploads. Unrestricted file suffixes and contents can...9.8 Critical
bpftoolTuxCare,kernelTuxCare,kernel-coreTuxCare +19 more +21 moreUpdate of kernel-core, kernel-debug-modules-internal, kernel-headers, kernel-debug-devel, kernel-modules-internal, python3-perf, kernel-tools, kernel-devel, kernel-tools-libs-devel, perf, kernel, kern…No score- nomachineNoMachine for Windows prior to version 6.15.1 and 7.5.2 suffer from local privilege escalation...7.3 High
- hestiacp hestiacp/hestiacp, control panel +1 moreCommand Injection Vulnerability in hestiacp/hestiacp9.9 Critical
- jetbrains rider, pycharm +1 moreIn JetBrains Rider before 2022.1 local code execution via links in ReSharper Quick Documentation...6.9 Medium
- jetbrains pycharmIn JetBrains PyCharm before 2022.1 exposure of the debugger port to the internal network was...3.0 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.1 local code execution via links in Quick Documentation...6.9 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.1 origin checks in the internal web server were flawed3.9 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.1 reflected XSS via error messages in internal web server...3.9 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.1 HTML injection into IDE messages was possible2.8 Low
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.1 local code execution via workspace settings was possible6.9 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.1 local code execution via HTML descriptions in custom...6.9 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.1 local code execution via custom Pandoc path was possible6.9 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.1 notification mechanisms about using Unicode...2.3 Low
- jetbrains hubIn JetBrains Hub before 2022.1.14638 stored XSS via project icon was possible.6.1 Medium
- hammock assetviewMissing authentication for critical function in AssetView prior to Ver.13.2.0 allows a remote...9.8 Critical
- samba cifs-utils, debian linux, fedoraproject fedora +2 morecifs-utils through 6.14, with verbose logging, can cause an information leak when a file contains...5.3 Medium
- maharaMahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0 is vulnerable to Cross Site Request Forgery ...8.8 High
- snipe snipe/snipe-it, snipeitapp snipe-it +1 moreMissing Authorization in snipe/snipe-it6.5 Medium
- debian linux, rails https://github.com/rails/rails, rubyonrails actionpack +2 moreXSS Vulnerability in Action View tag helpers6.1 Medium
- amb1 sdk project sdkcomponent/common/network/dhcp/dhcps.c in ambiot amb1_sdk (aka SDK for Ameba1) before 2022-03-11...9.8 Critical
- debian linux, rails https://github.com/rails/rails, rubyonrails actionpack +2 moreCross-site Scripting Vulnerability in Action Pack6.1 Medium
- keycloak, redhat openshift container platform, single sign-on +2 moreECP SAML binding bypasses authentication flows6.8 Medium
github.com/rancher/rancherGoExposure of SSH credentials in Rancher/FleetNo score- redhat apicastA flaw was found in 3Scale APICast in versions prior to 2.11.0, where it incorrectly identified...7.5 High
- redis, fedoraproject fedora, netapp management services for element software +2 more +4 moreA Malformed Lua script can crash Redis3.3 Low
- redis, fedoraproject fedora, netapp management services for element software +2 more +4 moreLua scripts can be manipulated to overcome ACL rules in Redis3.9 Low
- nvidia jetson linux, jetson agx xavier series, jetson xavier nx +1 moreNVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot ext4_mount function,...5.0 Medium
- nvidia jetson linux, jetson agx xavier series, jetson xavier nx, jetson tx2 nx, jetson tx2 series +1 moreNVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot blob_decompress function...4.6 Medium
- nvidia jetson linux, jetson agx xavier series, jetson xavier nx +1 moreNVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot ext4_read_file function,...5.7 Medium
- nvidia jetson linux, jetson agx xavier series, jetson xavier nx +1 moreNVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrabl_cbo.c,...7.3 High
- nvidia jetson linux, jetson agx xavier series, jetson xavier nx +1 moreNVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot module tegrabl_cbo.c,...5.6 Medium
- ibm urbancode deployIBM UrbanCode Deploy (UCD) 7.2.2.1 could allow an authenticated user with special permissions to...5.0 Medium
- linksys mr9600 firmwareLinksys MR9600 devices before 2.0.5 allow attackers to read arbitrary files via a symbolic link...4.6 Medium
- chafa project chafa, hpjansson hpjansson/chafa, fedoraproject fedora +2 morechafa: NULL Pointer Dereference in function gif_internal_decode_frame at libnsgif.c:599 allows attackers to cause a denial of service (crash) via a crafted input file. in hpjansson/chafa5.5 Medium
- sophos authenticator, intercept x for mobile (android), intercept x +1 more +3 moreAn insecure data storage vulnerability allows a physical attacker with root privileges to...3.9 Low
- sonicwall sonicos, nsa 2650 firmware, nsa 2700 firmware +47 more +49 moreA vulnerability in SonicOS CFS (Content filtering service) returns a large 403 forbidden HTTP...7.5 High
- sonicwall sonicos, nsa 2650 firmware, nsa 2700 firmware +47 more +49 moreA vulnerability in SonicOS SNMP service resulting exposure of Wireless Access Point sensitive...5.3 Medium
- sonicwall sonicos, nsa 2650 firmware, nsa 2700 firmware +47 more +49 moreA vulnerability in SonicOS SNMP service resulting exposure of sensitive information to an...5.3 Medium
- sonicwall sonicosImproper Restriction of TCP Communication Channel in HTTP/S inbound traffic from WAN to DMZ...7.5 High
- amd-xilinx zynq-7000 soc fsbl, xilinx zynq-7000 firmware, zynq-7000s firmware +2 moreIn this physical attack, an attacker may potentially exploit the Zynq-7000 SoC First Stage Boot...6.8 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar 7.3, 7.4, and 7.5 is vulnerable to cross-site scripting. This vulnerability allows...4.8 Medium
- ibm security verify password synchronization plug-in for windows ad, security verify password synchronization +1 moreIBM Security Identity Manager (IBM Security Verify Password Synchronization Plug-in for Windows...5.7 Medium
- ibm security verify password synchronization plug-in for windows ad, security verify password synchronization +1 moreIBM Security Identity Manager (IBM Security Verify Password Synchronization Plug-in for Windows...5.7 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3, 7.4, and 7.5 stores potentially sensitive information in log files that...3.7 Low
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3, 7.4, and 7.5 in some senarios may reveal authorized service tokens to other...5.9 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar 7.3, 7.4, and 7.5 could allow a malicious actor to impersonate an actor due to key...5.9 Medium
- Show moreLoading…