CVE-2022 list

CVE-2022 records published in April 2022

Page two of two: records 1,001 to 1,543 of the 1,543 published in April 2022, newest first. The first page carries the figures for April 2022.

CVE-2022 records published in April 2022, newest first: records 1,001 to 1,543 of 1,543
CVE Summary CVSS EPSS Published Signals
CVE-2022-27837Samsung Mobile Accessibility code injection4.4CNA v3.10.6%2022-04-11Fix
CVE-2022-27836Samsung Mobile Devices improper access control8.4CNA v3.10.1%2022-04-11Fix
CVE-2022-27835Samsung Mobile Devices improper input validation7.6CNA v3.10.3%2022-04-11Fix
CVE-2022-27834Samsung Mobile Devices use-after-free2.9CNA v3.10.1%2022-04-11Fix
CVE-2022-27833Samsung Mobile Devices DSP driver improper input validation4.4CNA v3.10.1%2022-04-11Fix
CVE-2022-27832Samsung Mobile Devices out-of-bounds read4.0CNA v3.10.1%2022-04-11Fix
CVE-2022-27831Samsung Mobile Devices out-of-bounds read2.9CNA v3.10.1%2022-04-11Fix
CVE-2022-27830Samsung Mobile Devices SemBlurInfo improper input validation8.5CNA v3.10.1%2022-04-11Fix
CVE-2022-27829Samsung Mobile Devices VerifyCredentialResponse improper input validation8.5CNA v3.10.1%2022-04-11Fix
CVE-2022-27828Samsung Mobile Devices MediaMonitorEvent improper input validation8.5CNA v3.10.1%2022-04-11Fix
CVE-2022-27827Samsung Mobile Devices MediaMonitorDimension improper input validation8.5CNA v3.10.1%2022-04-11Fix
CVE-2022-27826Samsung Mobile Devices SemSuspendDialogInfo improper input validation8.5CNA v3.10.2%2022-04-11Fix
CVE-2022-27825Samsung Mobile Devices out-of-bounds read4.0CNA v3.10.2%2022-04-11Fix
CVE-2022-27824Samsung Mobile Devices out-of-bounds read4.0CNA v3.10.3%2022-04-11Fix
CVE-2022-27823Samsung Mobile Devices out-of-bounds read4.0CNA v3.10.3%2022-04-11Fix
CVE-2022-27822Samsung Mobile Devices ril property setting information disclosure6.6CNA v3.10.1%2022-04-11Fix
CVE-2022-27821Samsung Mobile Devices out-of-bounds read4.0CNA v3.10.3%2022-04-11Fix
CVE-2022-27578SICK Overall Equipment Effectiveness execution with unnecessary privileges7.8v3.10.3%2022-04-11Fix
CVE-2022-27577The vulnerability in the MSC800 in all versions before 4.15 allows for an attacker to predict the TCP initial sequence number. When the TCP sequence is predictable, an attacker can send packets that are forged to appear to come from a trusted computer. These forged packets could compromise services9.1v3.11.4%2022-04-11Fix
CVE-2022-27576Samsung Mobile Devices Samsung DeX Home information disclosure3.3CNA v3.10.3%2022-04-11Fix
CVE-2022-27575Samsung Mobile Devices One UI Home information disclosure3.3CNA v3.10.3%2022-04-11Fix
CVE-2022-27574Samsung Mobile Devices improper input validation4.4CNA v3.10.4%2022-04-11Fix
CVE-2022-27573Samsung Mobile Devices improper input validation4.4CNA v3.10.4%2022-04-11Fix
CVE-2022-27572Samsung Mobile Devices parser_ipma function of libsimba library heap-based buffer overflow8.1CNA v3.11.4%2022-04-11Fix
CVE-2022-27571Samsung Mobile Devices heap-based buffer overflow8.1CNA v3.11.4%2022-04-11Fix
CVE-2022-27570Samsung Mobile Devices heap-based buffer overflow8.1CNA v3.11.4%2022-04-11Fix
CVE-2022-27569Samsung Mobile Devices parser_infe function in libsimba library heap-based buffer overflow8.1CNA v3.11.4%2022-04-11Fix
CVE-2022-27568Samsung Mobile Devices parser_iloc function in libsimba library heap-based buffer overflow8.1CNA v3.11.4%2022-04-11Fix
CVE-2022-27567Samsung Mobile Devices parser_hvcC function of libsimba library null pointer dereference5.9CNA v3.10.5%2022-04-11Fix
CVE-2022-27528Autodesk Navisworks use-after-free7.8v3.11.2%2022-04-11Fix
CVE-2022-27156Thedaylightstudio Fuel CMS cross-site scripting5.4v3.10.5%2022-04-11
CVE-2022-27115RCE in Studio-42 elFinder on Windows9.8v3.128.6%2022-04-11Fix
CVE-2022-27111jflyfox jfinal_cms cross-site scripting5.4v3.10.5%2022-04-11
CVE-2022-27089Fujitsu Plugfree Network unquoted search path7.8v3.10.2%2022-04-11
CVE-2022-27088Ivanti Dsm Remote unquoted search path7.8v3.10.6%2022-04-11
CVE-2022-27041OS4ED Opensis SQL injection7.5v3.11.3%2022-04-11
CVE-2022-26414Zyxel VMG3312-T20A firmware buffer overflow6.0CNA v3.10.2%2022-04-11Fix
CVE-2022-26413Zyxel VMG3312-T20A firmware CGI program command injection8.0CNA v3.10.7%2022-04-11Fix
CVE-2022-26099Samsung Mobile Devices parser_infe function of libsimba library null pointer dereference5.9CNA v3.10.5%2022-04-11Fix
CVE-2022-26098Samsung Mobile Devices sheifd_create function of libsimba library heap-based buffer overflow8.1CNA v3.11.4%2022-04-11Fix
CVE-2022-26097Samsung Mobile Devices null pointer dereference5.9CNA v3.10.5%2022-04-11Fix
CVE-2022-26096Samsung Mobile Devices parser_ispe function in libsimba library null pointer dereference5.9CNA v3.10.5%2022-04-11Fix
CVE-2022-26095Samsung Mobile Devices parser_colr function in libsimba library null pointer dereference5.9CNA v3.10.5%2022-04-11Fix
CVE-2022-26094Samsung Mobile Devices parser_auxC function in libsimba library null pointer dereference5.9CNA v3.10.5%2022-04-11Fix
CVE-2022-26093Samsung Mobile Devices parser_irot function in libsimba library null pointer dereference5.9CNA v3.10.5%2022-04-11Fix
CVE-2022-26092Samsung Mobile Devices heap-based buffer overflow7.4CNA v3.10.1%2022-04-11Fix
CVE-2022-26091Samsung Mobile Devices Knox Manage improper access control5.7CNA v3.10.1%2022-04-11Fix
CVE-2022-26090Samsung Mobile SamsungContacts improper access control5.3CNA v3.10.1%2022-04-11Fix
CVE-2022-25833Samsung Mobile Devices ImsService improper authentication3.3CNA v3.10.1%2022-04-11Fix
CVE-2022-25832Samsung Mobile Devices S Secure improper authentication4.0CNA v3.10.1%2022-04-11Fix
CVE-2022-25831Samsung Mobile Devices S Secure improper access control2.0CNA v3.10.1%2022-04-11Fix
CVE-2022-25796Autodesk Navisworks double free7.8v3.11.1%2022-04-11Fix
CVE-2022-25794Autodesk FBX Review An out-of-bounds read7.8v3.11.2%2022-04-11Fix
CVE-2022-25792Autodesk Advanced Steel out-of-bounds write7.8v3.11.6%2022-04-11Fix
CVE-2022-25791Autodesk Advanced Steel out-of-bounds write7.8v3.10.7%2022-04-11Fix
CVE-2022-25790Autodesk Navisworks out-of-bounds write7.8v3.11.6%2022-04-11Fix
CVE-2022-25789Autodesk Advanced Steel use-after-free7.8v3.11.6%2022-04-11Fix
CVE-2022-25615eRoom WordPress plugin cross-site request forgery (CSRF) vulnerability leading to Cache deletion4.3v3.10.4%2022-04-11Fix
CVE-2022-25614eRoom WordPress plugin cross-site request forgery (CSRF) leading to Sync with Zoom Meetings4.3v3.10.4%2022-04-11Fix
CVE-2022-24839sparklemotion nekohtml uncontrolled resource consumption in org.cyberneko.html (nokogiri fork)7.5CNA v3.12.1%2022-04-11Fix
CVE-2022-24838Command injection in Appointment Emails for Nextcloud Calendar5.3CNA v3.133.0%2022-04-11Fix
CVE-2022-24837Enumerable upload file names in hedgedoc5.3CNA v3.11.1%2022-04-11Fix
CVE-2022-24836Inefficient regular expression complexity in Nokogiri7.5CNA v3.13.5%2022-04-11Fix
CVE-2022-24833Persistent cross-site scripting (XSS) vulnerability in PrivateBin8.2CNA v3.11.4%2022-04-11Fix
CVE-2022-24832gocd bundled ldap-authentication-plugin fails to neutralise LDAP special elements in usernames8.2CNA v3.11.7%2022-04-11Fix
CVE-2022-24829Missing authentication in Garden8.1CNA v3.11.2%2022-04-11Fix
CVE-2022-24827yahoo elide SQL injection in elide-datastore-aggregation8.1CNA v3.11.4%2022-04-11Fix
CVE-2022-24815jhipster generator-jhipster SQL injection when creating an application with Reactive SQL backend8.1CNA v3.11.4%2022-04-11Fix
CVE-2022-24804Private group name exposure in discourse5.3CNA v3.10.9%2022-04-11Fix
CVE-2022-22964VMware Horizon Agent local privilege escalation7.8v3.10.2%2022-04-11Fix
CVE-2022-22962VMware Horizon Agent link following7.8v3.10.3%2022-04-11Fix
CVE-2022-22954VMware Workspace ONE Access and Identity Manager server-side template injection9.8NVD v3.1100.0%2022-04-11KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix
CVE-2022-22572Ivanti Incapptic Connect password reset privilege escalation8.8v3.12.1%2022-04-11Fix
CVE-2022-22571Ivanti Incapptic Connect cross-site scripting4.8v3.10.9%2022-04-11Fix
CVE-2022-22258HarmonyOS event notification vulnerability in the Wi-Fi module9.8v3.11.0%2022-04-11Fix
CVE-2022-22257Huawei HarmonyOS vulnerability of improper permission control in the customization framework7.5v3.10.6%2022-04-11Fix
CVE-2022-22256Huawei HarmonyOS vulnerability of improper access control in the DFX module7.5v3.10.7%2022-04-11Fix
CVE-2022-22255Huawei HarmonyOS common DoS vulnerability in the application framework7.5v3.10.7%2022-04-11Fix
CVE-2022-22254Huawei HarmonyOS permission bypass vulnerability when the CAs in the NFC module accesses the TEE7.5v3.10.7%2022-04-11Fix
CVE-2022-22253Huawei HarmonyOS vulnerability of improper validation of integrity check values in the DFX module7.5v3.10.3%2022-04-11Fix
CVE-2022-20081MediaTek chipsets insecure default initialization of resource in A-GPS5.9v3.10.6%2022-04-11Fix
CVE-2022-20080MediaTek chipsets concurrent execution using shared resource with improper synchronization in SUB2AF6.4v3.10.1%2022-04-11Fix
CVE-2022-20079MediaTek chipsets improper input validation in vow4.4v3.10.1%2022-04-11Fix
CVE-2022-20078MediaTek chipsets concurrent execution using shared resource with improper synchronization in vow6.4v3.10.1%2022-04-11Fix
CVE-2022-20077MediaTek chipsets concurrent execution using shared resource with improper synchronization in vow6.4v3.10.1%2022-04-11Fix
CVE-2022-20076MediaTek chipsets improper handling of exceptional conditions in ged4.4v3.10.1%2022-04-11Fix
CVE-2022-20075MediaTek chipsets integer overflow or wraparound in ged6.7v3.10.1%2022-04-11Fix
CVE-2022-20074MediaTek chipsets out-of-bounds read in preloader (partition)6.6v3.10.1%2022-04-11Fix
CVE-2022-20073MediaTek chipsets integer underflow (wrap or wraparound) in preloader (usb)6.6v3.10.2%2022-04-11Fix
CVE-2022-20072MediaTek chipsets incorrect comparison in search engine service6.7v3.10.4%2022-04-11Fix
CVE-2022-20071MediaTek chipsets improperly implemented security check for standard in ccu6.7v3.10.1%2022-04-11Fix
CVE-2022-20070MediaTek chipsets improper input validation in ssmr6.7v3.10.1%2022-04-11Fix
CVE-2022-20069MediaTek chipsets integer overflow or wraparound in preloader (usb)6.6v3.10.1%2022-04-11Fix
CVE-2022-20068MediaTek chipsets unix symbolic link (symlink) following in mobile_log_d6.7v3.10.1%2022-04-11Fix
CVE-2022-20067MediaTek chipsets improper input validation in mdp6.7v3.10.1%2022-04-11Fix
CVE-2022-20066MediaTek chipsets improper handling of exceptional conditions in atf (hwfde)4.4v3.10.1%2022-04-11Fix
CVE-2022-20065MediaTek chipsets out-of-bounds read in ccci6.7v3.10.1%2022-04-11Fix
CVE-2022-20064MediaTek chipsets out-of-bounds read in ccci6.7v3.10.1%2022-04-11Fix
CVE-2022-20063MediaTek chipsets out-of-bounds write in atf (spm)6.5v3.10.1%2022-04-11Fix
CVE-2022-20062MediaTek chipsets use-after-free in mdp6.7v3.10.1%2022-04-11Fix
CVE-2022-20052MediaTek chipsets use-after-free in mdp6.5v3.10.1%2022-04-11Fix
CVE-2022-1316Incorrect permission assignment for critical resource in zerotier/Zerotierone7.8v3.10.4%2022-04-11Fix
CVE-2022-1297Out-of-bounds read in r_bin_ne_get_entrypoints function in radareorg/radare29.1v3.10.9%2022-04-11Fix
CVE-2022-1296Out-of-bounds read in `r_bin_ne_get_relocs` function in radareorg/radare29.1v3.10.8%2022-04-11Fix
CVE-2022-1295Prototype pollution in alvarotrigo/Fullpage.js9.8v3.11.3%2022-04-11Fix
CVE-2022-1262D-Link Routers protest binary command injection7.8NVD v3.12.2%2022-04-11
CVE-2022-1252gnuboard/gnuboard5 GitHub repository weak cryptographic algorithm9.1v3.10.5%2022-04-11
CVE-2022-1193GitLab improper access control4.3CNA v3.10.9%2022-04-11Fix
CVE-2022-1161Rockwell Automation 1768 CompactLogix controllers inclusion of untrusted functionality9.8v3.15.0%2022-04-11
CVE-2022-1157GitLab sensitive information in log files2.6CNA v3.10.6%2022-04-11Fix
CVE-2022-1067LifePoint Informatics Patient Portal lab report generation authentication bypass6.5v3.10.9%2022-04-11Fix
CVE-2022-1045Stored XSS viva .svg file upload in polonel/trudesk5.4NVD v3.11.6%2022-04-11Fix
CVE-2022-1023Podcast Importer SecondLine WordPress plugin Admin+ SQLi7.2NVD v3.11.5%2022-04-11Fix
CVE-2022-1008One Click Demo Import WordPress plugin Admin+ arbitrary file upload7.2NVD v3.11.7%2022-04-11Fix
CVE-2022-1007Advanced Booking Calendar WordPress plugin reflected cross-site scripting6.1NVD v3.11.9%2022-04-11NucleiFix
CVE-2022-1006Advanced Booking Calendar WordPress plugin Admin+ SQLi7.2NVD v3.11.5%2022-04-11Fix
CVE-2022-0999mySCADA myPRO command injection8.8v3.11.4%2022-04-11Fix
CVE-2022-0989NS WooCommerce Watermark WordPress plugin Abuse of functionality7.5NVD v3.11.2%2022-04-11Fix
CVE-2022-0969Image optimization and Lazy Load WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.7%2022-04-11Fix
CVE-2022-0949WP Block and Stop Bad Bots WordPress plugin unauthenticated SQLi9.8NVD v3.17.7%2022-04-11NucleiFix
CVE-2022-0936Cross-site scripting (XSS) Stored in Autolab/Autolab5.4NVD v3.10.7%2022-04-11Fix
CVE-2022-0920Salon Booking System booking endpoints incorrect authorization7.5NVD v3.11.5%2022-04-11Fix
CVE-2022-0919Salon booking system WordPress plugin unauthenticated sensitive data disclosure5.3NVD v3.11.2%2022-04-11Fix
CVE-2022-0914Export All URLs WordPress plugin Private/Draft Post/Page Title disclosure via CSRF6.5NVD v3.10.6%2022-04-11Fix
CVE-2022-0892Export All URLs WordPress plugin reflected cross-site scripting6.1NVD v3.10.8%2022-04-11Fix
CVE-2022-0840Easy Social Icons WordPress plugin Admin+ stored cross-site scripting in add icon4.8NVD v3.10.6%2022-04-11Fix
CVE-2022-0835AVEVA System Platform cleartext storage of sensitive information in memory5.5NVD v3.10.2%2022-04-11Fix
CVE-2022-0828Download Manager WordPress plugin unauthenticated brute force of files master key7.5NVD v3.11.5%2022-04-11Fix
CVE-2022-0728Easy Smooth Scroll Links WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-04-11Fix
CVE-2022-0556Zyxel AP Configurator (ZAC) improper privilege management7.3CNA v3.10.4%2022-04-11Fix
CVE-2022-0552origin-aggregated-logging/elasticsearch HTTP request smuggling5.9NVD v3.11.2%2022-04-11Fix
CVE-2022-0531WPvivid Backup and Migration WordPress plugin reflected cross-site scripting6.1NVD v3.10.8%2022-04-11Fix
CVE-2022-0471Favicon by RealFaviconGenerator WordPress plugin reflected cross-site scripting6.1NVD v3.10.9%2022-04-11Fix
CVE-2022-0447Post Grid WordPress plugin reflected cross-site scripting via post_types6.4NVD v3.10.6%2022-04-11Fix
CVE-2022-0314Nimble Page Builder WordPress plugin reflected cross-site scripting6.1NVD v3.10.8%2022-04-11Fix
CVE-2022-0271LearnPress WordPress plugin reflected cross-site scripting6.1NVD v3.11.9%2022-04-11NucleiFix
CVE-2022-0246iQ Block Country WordPress plugin Admin+ arbitrary file deletion via Zip Slip4.9NVD v3.13.4%2022-04-11Fix
CVE-2022-27961OFCMS cross-site scripting5.4v3.10.4%2022-04-10
CVE-2022-27960OFCMS user_id parameter at SysUserController.java insecure permissions5.4v3.10.5%2022-04-10
CVE-2022-27958Febs-security userid parameter at /user/getuserprofile insecure permissions5.4v3.10.6%2022-04-10
CVE-2022-27477newbee-mall unrestricted file upload9.8v3.11.1%2022-04-10
CVE-2022-27476newbee-mall cross-site scripting6.1v3.10.6%2022-04-10
CVE-2022-27295D-Link Dir-619 out-of-bounds write7.5v3.11.4%2022-04-10
CVE-2022-27294D-Link Dir-619 out-of-bounds write7.5v3.11.5%2022-04-10
CVE-2022-27293D-Link Dir-619 out-of-bounds write7.5v3.12.6%2022-04-10
CVE-2022-27292D-Link Dir-619 out-of-bounds write7.5v3.11.2%2022-04-10
CVE-2022-27291D-Link Dir-619 out-of-bounds write7.5v3.11.5%2022-04-10
CVE-2022-27290D-Link Dir-619 out-of-bounds write7.5v3.11.5%2022-04-10
CVE-2022-27289D-Link Dir-619 out-of-bounds write7.5v3.11.5%2022-04-10
CVE-2022-27288D-Link Dir-619 out-of-bounds write7.5v3.11.5%2022-04-10
CVE-2022-27287D-Link Dir-619 Ax out-of-bounds write7.5v3.11.5%2022-04-10
CVE-2022-27286D-Link Dir-619 Ax out-of-bounds write7.5v3.11.5%2022-04-10
CVE-2022-27280InHand Networks Inrouter 900 cross-site scripting5.4v3.10.6%2022-04-10
CVE-2022-27279InHand Networks Inrouter 900 path traversal7.5v3.11.5%2022-04-10
CVE-2022-27277InHand Networks Inrouter 900 path traversal9.1v3.11.4%2022-04-10
CVE-2022-27276InHand Networks Inrouter 900 OS command injection9.8v3.13.6%2022-04-10
CVE-2022-27275InHand Networks Inrouter 900 OS command injection9.8v3.13.5%2022-04-10
CVE-2022-27274InHand Networks Inrouter 900 OS command injection9.8v3.13.5%2022-04-10
CVE-2022-27273InHand Networks Inrouter 900 OS command injection9.8v3.13.5%2022-04-10
CVE-2022-27272InHand Networks Inrouter 900 OS command injection9.8v3.13.5%2022-04-10
CVE-2022-27271InHand Networks Inrouter 900 OS command injection9.8v3.13.5%2022-04-10
CVE-2022-27270InHand Networks Inrouter 900 OS command injection9.8v3.13.5%2022-04-10
CVE-2022-27269InHand Networks Inrouter 900 OS command injection9.8v3.13.8%2022-04-10
CVE-2022-27268InHand Networks Inrouter 900 OS command injection9.8v3.13.8%2022-04-10
CVE-2022-27133Zbzcms arbitrary file deletion9.1v3.11.1%2022-04-10
CVE-2022-27131Zbzcms unrestricted file upload9.8v3.11.6%2022-04-10
CVE-2022-27129Zbzcms unrestricted file upload9.8v3.11.6%2022-04-10
CVE-2022-27128Zbzcms improper access control9.8v3.11.2%2022-04-10
CVE-2022-27127Zbzcms SQL injection6.5v3.10.7%2022-04-10
CVE-2022-27126Zbzcms SQL injection9.8v3.11.0%2022-04-10
CVE-2022-27125Zbzcms cross-site scripting6.1v3.10.6%2022-04-10
CVE-2022-1291XSS vulnerability with default `onCellHtmlData` function in hhurz/Tableexport.jquery.plugin5.4NVD v3.10.7%2022-04-10Fix
CVE-2022-1290polonel/trudesk "Name" stored cross-site scripting5.4NVD v3.11.7%2022-04-10Fix
CVE-2022-1289tildearrow Furnace Incomplete Fix denial of service6.5v3.11.2%2022-04-10
CVE-2022-1286mruby heap-based buffer overflow9.8v3.11.2%2022-04-10Fix
CVE-2022-1276Out-of-bounds read in mrb_get_args in mruby/mruby9.8v3.11.6%2022-04-10Fix
CVE-2022-28365Reprisesoftware Reprise License Manager forced browsing5.3v3.18.4%2022-04-09Nuclei
CVE-2022-28364Reprisesoftware Reprise License Manager cross-site scripting5.4v3.11.0%2022-04-09
CVE-2022-28363Reprisesoftware Reprise License Manager cross-site scripting6.1v3.14.9%2022-04-09Nuclei
CVE-2022-27883Trend Micro Antivirus link following7.3v3.11.2%2022-04-09Fix
CVE-2022-26877Asana Desktop files accessible to external parties6.5v3.11.1%2022-04-09Fix
CVE-2022-1288School Club Application System cross-site scripting6.1v3.10.6%2022-04-09
CVE-2022-1287School Club Application System resource injection9.8v3.10.7%2022-04-09
CVE-2022-28805Lua out-of-bounds read9.1v3.13.0%2022-04-08Fix
CVE-2022-28796Linux kernel race condition7.0v3.10.3%2022-04-08Fix
CVE-2022-28002Movie Seat Reservation files accessible to external parties7.5v3.11.8%2022-04-08
CVE-2022-28001Movie Seat Reservation SQL injection9.8v3.11.8%2022-04-08
CVE-2022-28000Car Rental System SQL injection8.8v3.11.5%2022-04-08
CVE-2022-27992PHPGurukul Zoo Management System SQL injection8.8v3.11.5%2022-04-08
CVE-2022-27991Online Banking System SQL injection6.5v3.11.0%2022-04-08
CVE-2022-27357E-Commerce Website unrestricted file upload9.8v3.13.6%2022-04-08
CVE-2022-27352Simple House Rental System unrestricted file upload8.8v3.12.7%2022-04-08
CVE-2022-27351PHPGurukul Zoo Management System unrestricted file upload9.8v3.13.5%2022-04-08
CVE-2022-27349Social Codia Sms unrestricted file upload7.2v3.12.6%2022-04-08
CVE-2022-27348Social Codia Sms cross-site scripting4.8v3.11.1%2022-04-08
CVE-2022-27346E-Commerce Website unrestricted file upload8.8v3.12.7%2022-04-08
CVE-2022-27152Roku OS arbitrary file write5.7v3.10.3%2022-04-08
CVE-2022-27148gpac integer overflow5.5v3.10.8%2022-04-08Fix
CVE-2022-27147GPAC MP4Box use-after-free5.5v3.10.7%2022-04-08Fix
CVE-2022-27146gpac out-of-bounds write5.5v3.10.8%2022-04-08Fix
CVE-2022-27145gpac out-of-bounds write5.5v3.10.8%2022-04-08Fix
CVE-2022-27064Musical World unrestricted file upload8.8v3.12.7%2022-04-08
CVE-2022-27063Aero CMS cross-site scripting6.1v3.11.5%2022-04-08
CVE-2022-27062Aero CMS cross-site scripting4.8v3.11.1%2022-04-08
CVE-2022-27061Aero CMS unrestricted file upload7.2v3.12.7%2022-04-08
CVE-2022-27047Moguit Mogu Blog Cms unrestricted file upload9.8v3.11.1%2022-04-08
CVE-2022-27046saitoha libsixel use-after-free8.8v3.11.0%2022-04-08Fix
CVE-2022-27044saitoha libsixel out-of-bounds write8.8v3.11.0%2022-04-08Fix
CVE-2022-26855Dell PowerScale OneFS incorrect default permissions5.5CNA v3.10.2%2022-04-08Fix
CVE-2022-26854Dell PowerScale OneFS weak cryptographic algorithm8.1CNA v3.10.7%2022-04-08Fix
CVE-2022-26852Dell PowerScale OneFS pseudo-random number generator vulnerability8.1CNA v3.11.2%2022-04-08Fix
CVE-2022-26851Dell PowerScale OneFS insufficient randomness9.1CNA v3.10.9%2022-04-08Fix
CVE-2022-26624Ecommerce-CodeIgniter-Bootstrap cross-site scripting6.1v3.10.9%2022-04-08Fix
CVE-2022-26588IceHrm A cross-site request forgery6.5v3.10.6%2022-04-08
CVE-2022-26180qdPM cross-site request forgery8.8v3.13.8%2022-04-08Exploit code
CVE-2022-24821xwiki-platform incorrect use of privileged apis in org.Xwiki.platform.skin.skinx6.8CNA v3.10.8%2022-04-08Fix
CVE-2022-24820xwiki-platform unauthenticated user can list hidden document from multiple velocity templates5.3CNA v3.11.0%2022-04-08Fix
CVE-2022-24819xwiki-platform unauthenticated user can retrieve the list of users through uorgsuggest.vm5.3CNA v3.13.2%2022-04-08NucleiFix
CVE-2022-24428Dell PowerScale OneFS improper preservation of permissions6.3CNA v3.10.6%2022-04-08Fix
CVE-2022-24229ONLYOFFICE Document Server cross-site scripting6.1v3.11.9%2022-04-08
CVE-2022-22563Dell PowerScale OneFS account change logging vulnerability4.4CNA v3.10.2%2022-04-08Fix
CVE-2022-22339IBM Planning Analytics server-side request forgery6.5CNA v3.00.6%2022-04-08Fix
CVE-2022-1284Heap-use-after-free in radareorg/radare25.5NVD v3.10.8%2022-04-08Fix
CVE-2022-1283Null pointer dereference in r_bin_ne_get_entrypoints function in radareorg/radare25.5v3.10.7%2022-04-08Fix
CVE-2022-1219SQL injection in RecyclebinController.php in pimcore/pimcore7.5v3.11.4%2022-04-08Fix
CVE-2022-27819Waycrate Swhkd resource exhaustion5.3v3.10.9%2022-04-07Fix
CVE-2022-27818Insecure temporary file usage in Swhkd9.1v3.11.8%2022-04-07Fix
CVE-2022-27022Tenda AC9 SetSysTimeCfg function in the httpd service stack-based buffer overflow9.8v3.11.7%2022-04-07
CVE-2022-27016Tenda AC9 stack-based buffer overflow9.8v3.11.7%2022-04-07
CVE-2022-26676aEnrich a+HRD broken access control9.8v3.11.4%2022-04-07Fix
CVE-2022-26675aEnrich a+HRD path traversal7.5v3.12.2%2022-04-07Fix
CVE-2022-26671SECOM Dr.ID Access Control system login page hard-coded credentials7.3v3.11.0%2022-04-07Exploit codeFix
CVE-2022-26670D-Link DIR-878 command injection8.8v3.11.5%2022-04-07Fix
CVE-2022-26627Online Project Time Management System unrestricted file upload8.8v3.11.5%2022-04-07
CVE-2022-26612Apache Hadoop arbitrary file write in FileUtil#unpackEntries on Windows9.8v3.14.2%2022-04-07Fix
CVE-2022-25597ASUS RT-AC86U command injection8.8v3.10.9%2022-04-07Fix
CVE-2022-25596ASUS RT-AC86U heap-based buffer overflow8.8v3.10.6%2022-04-07Fix
CVE-2022-25595ASUS RT-AC86U improper input validation6.5v3.10.4%2022-04-07Fix
CVE-2022-25594Microprogram Parking lot management system information disclosure5.3v3.11.0%2022-04-07Fix
CVE-2022-25339ownCloud owncloud/android 2.20 has Incorrect Access Control for local attackers.5.5v3.10.2%2022-04-07Fix
CVE-2022-25338ownCloud owncloud/android before 2.20 has Incorrect Access Control for physically proximate attackers.6.8v3.10.2%2022-04-07Fix
CVE-2022-24681Zoho ManageEngine ADSelfService Plus cross-site scripting6.1v3.13.6%2022-04-07NucleiFix
CVE-2022-23973ASUS RT-AX56U user profile configuration buffer overflow8.8v3.10.6%2022-04-07Fix
CVE-2022-23972ASUS RT-AX56U SQL injection8.8v3.10.5%2022-04-07Fix
CVE-2022-23971ASUS RT-AX56U path traversal8.1v3.10.5%2022-04-07Fix
CVE-2022-23970ASUS RT-AX56U path traversal8.1v3.10.5%2022-04-07Fix
CVE-2022-23900WAVLINK Wl-wn531p3 API of the Wavlink command injection9.8v3.13.5%2022-04-07Fix
CVE-2022-22519CODESYS Control runtime system webserver out-of-bounds read7.5v3.11.5%2022-04-07Fix
CVE-2022-22518A bug in the CODESYS V3 CmpUserMgr component fails to correctly apply a security policy6.5v3.10.6%2022-04-07Fix
CVE-2022-22517Communication components in multiple CODESYS products vulnerable to communication channel disruption7.5v3.11.3%2022-04-07Fix
CVE-2022-22516CODESYS Control runtime system SysDrv3S driver incorrect permission assignment7.8v3.10.3%2022-04-07Fix
CVE-2022-22515CODESYS Control runtime system configuration files vulnerability8.1v3.11.1%2022-04-07Fix
CVE-2022-22514Untrusted pointer dereference in multiple CODESYS products can lead to a DoS7.1v3.10.9%2022-04-07Fix
CVE-2022-22513Null pointer dereference in multiple CODESYS products can lead to a DoS6.5v3.11.0%2022-04-07Fix
CVE-2022-0935Host header injection in password Reset in livehelperchat/livehelperchat8.8v3.11.3%2022-04-07Fix
CVE-2022-0677Improper handling of length parameter inconsistency vulnerability in Bitdefender Update Server7.5CNA v3.11.2%2022-04-07Fix
CVE-2022-27110orangehrm open redirect5.4v3.10.5%2022-04-06
CVE-2022-27109orangehrm open redirect5.4v3.10.5%2022-04-06
CVE-2022-27108orangehrm insecure direct object reference4.3v3.10.6%2022-04-06
CVE-2022-27107orangehrm cross-site scripting5.4v3.10.5%2022-04-06
CVE-2022-26953Digi Passport Firmware out-of-bounds write7.5v3.11.8%2022-04-06Fix
CVE-2022-26952Digi Passport Firmware out-of-bounds write7.5v3.12.1%2022-04-06Fix
CVE-2022-26850Apache NiFi insufficiently protected credentials4.3v3.11.5%2022-04-06Fix
CVE-2022-26613Php-cms SQL injection9.8v3.11.4%2022-04-06
CVE-2022-26607Baigo Cms remote code execution7.2v3.12.2%2022-04-06
CVE-2022-26605Dascomsoft Eziosuite unrestricted file upload8.8v3.11.0%2022-04-06
CVE-2022-26591Fantec Mwid25-ds Firmware session fixation7.5v3.11.1%2022-04-06
CVE-2022-26251Synametrics Synaman improper privilege management7.2v3.11.9%2022-04-06
CVE-2022-26250Synametrics Synaman incorrect permission assignment7.8v3.10.3%2022-04-06
CVE-2022-26110HTCondor CLAIMTOBE authentication vulnerability8.8v3.11.5%2022-04-06Fix
CVE-2022-24822Denial of service in @podium/layout and @podium/proxy7.5CNA v3.11.7%2022-04-06Fix
CVE-2022-24793Potential heap buffer overflow when parsing DNS packets in PJSIP7.5CNA v3.12.2%2022-04-06Fix
CVE-2022-24786Potential out-of-bound read/write in PJSIP9.8CNA v3.12.1%2022-04-06Fix
CVE-2022-23446Fortinet FortiEDR A improper resource control4.4CNA v3.10.2%2022-04-06Fix
CVE-2022-23441Fortinet FortiEDR hard-coded credentials9.1CNA v3.10.9%2022-04-06Fix
CVE-2022-23440Fortinet FortiEDR hard-coded credentials7.8CNA v3.10.2%2022-04-06Fix
CVE-2022-22410IBM Watson Query information disclosure3.9CNA v3.00.6%2022-04-06Fix
CVE-2022-20784Cisco Web Security Appliance Filter Bypass vulnerability5.8CNA v3.10.9%2022-04-06Fix
CVE-2022-20782Cisco Identity Services Engine sensitive information disclosure6.5CNA v3.11.0%2022-04-06Fix
CVE-2022-20781Cisco Web Security Appliance stored cross-site scripting5.4CNA v3.10.6%2022-04-06Fix
CVE-2022-20774Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware cross-site request forgery6.8CNA v3.10.4%2022-04-06Fix
CVE-2022-20763Cisco Webex Meetings Java deserialization5.4CNA v3.10.9%2022-04-06Fix
CVE-2022-20762Cisco Ultra Cloud Core Subscriber Microservices Infrastructure privilege escalation7.8CNA v3.10.3%2022-04-06Fix
CVE-2022-20756Cisco Identity Services Engine RADIUS service denial of service8.6CNA v3.11.5%2022-04-06Fix
CVE-2022-20755Cisco TelePresence Video Communication Server (VCS) Expressway relative path traversal9.0CNA v3.13.3%2022-04-06Fix
CVE-2022-20754Cisco TelePresence Video Communication Server (VCS) Expressway relative path traversal9.0CNA v3.13.3%2022-04-06Fix
CVE-2022-20741Cisco Secure Network Analytics Network Diagrams application cross-site scripting5.4CNA v3.10.6%2022-04-06Fix
CVE-2022-20675Multiple Cisco Security Products Simple Network Management protocol service denial of service5.3CNA v3.11.3%2022-04-06Fix
CVE-2022-20665Cisco StarOS command injection6.0CNA v3.10.3%2022-04-06Fix
CVE-2022-1253Heap-based buffer overflow in strukturag/libde2659.8v3.12.1%2022-04-06Fix
CVE-2022-1248SAP Information System POST request add_admin.php improper authentication7.3v3.11.4%2022-04-06
CVE-2022-1240Heap buffer overflow in libr/bin/format/mach0/mach0.c in radareorg/radare27.8v3.10.7%2022-04-06Fix
CVE-2022-1238Out-of-bounds write in libr/bin/format/ne/ne.c in radareorg/radare27.8v3.10.8%2022-04-06Fix
CVE-2022-1237Improper validation of array index in radareorg/radare27.8v3.10.8%2022-04-06Fix
CVE-2022-1234XSS in livehelperchat in livehelperchat/livehelperchat6.1NVD v3.10.7%2022-04-06Fix
CVE-2022-28651JetBrains IntelliJ IDEA system information disclosure8.4CNA v3.10.3%2022-04-05Fix
CVE-2022-28650JetBrains YouTrack cross-site scripting7.3CNA v3.10.6%2022-04-05Fix
CVE-2022-28649JetBrains YouTrack clickjacking4.6CNA v3.10.4%2022-04-05Fix
CVE-2022-28648JetBrains YouTrack cross-site scripting5.7CNA v3.11.4%2022-04-05Fix
CVE-2022-28468Payroll Management System SQL injection9.8v3.11.6%2022-04-05
CVE-2022-28467Online Student Admission SQL injection9.8v3.11.1%2022-04-05
CVE-2022-28219Zoho ManageEngine ADAudit Plus XML external entity injection9.8v3.197.0%2022-04-05NucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2022-28116Online Banking System SQL injection9.8v3.11.2%2022-04-05
CVE-2022-28115Online Sports Complex Booking SQL injection9.8v3.11.2%2022-04-05
CVE-2022-27463Open redirect in wwbn/AVideo6.1v3.10.6%2022-04-05
CVE-2022-27462WWBN AVideo objects/function.php in function getDeviceID cross-site scripting6.1v3.10.6%2022-04-05
CVE-2022-27304oretnom23 Student Grading System SQL injection9.8v3.11.3%2022-04-05
CVE-2022-27124Angeljudesuarez Insurance Management System SQL injection9.8v3.11.1%2022-04-05
CVE-2022-27123Employee Performance Evaluation SQL injection9.8v3.11.3%2022-04-05
CVE-2022-26986SQL injection in ImpressCMS7.2v3.14.1%2022-04-05Exploit code
CVE-2022-26982Simple Machines Forum code injection7.2v3.19.2%2022-04-05Exploit code
CVE-2022-26912Microsoft Edge (Chromium-based) elevation of privilege8.3CNA v3.11.8%2022-04-05Fix
CVE-2022-26909Microsoft Edge (Chromium-based) elevation of privilege8.3CNA v3.11.8%2022-04-05Fix
CVE-2022-26908Microsoft Edge (Chromium-based) elevation of privilege8.3CNA v3.11.8%2022-04-05Fix
CVE-2022-26900Microsoft Edge (Chromium-based) elevation of privilege8.3CNA v3.11.8%2022-04-05Fix
CVE-2022-26895Microsoft Edge (Chromium-based) elevation of privilege8.3CNA v3.11.8%2022-04-05Fix
CVE-2022-26894Microsoft Edge (Chromium-based) elevation of privilege8.3CNA v3.11.8%2022-04-05Fix
CVE-2022-26891Microsoft Edge (Chromium-based) elevation of privilege8.3CNA v3.11.8%2022-04-05Fix
CVE-2022-26635PHP Memcached improper null termination9.8v3.121.4%2022-04-05Fix
CVE-2022-26630Jellycms unrestricted file upload8.8v3.11.0%2022-04-05
CVE-2022-26628Matrimony SQL injection9.8v3.11.5%2022-04-05
CVE-2022-26619halo unrestricted file upload7.5v3.10.9%2022-04-05
CVE-2022-26615College Website Content Management System cross-site scripting5.4v3.10.5%2022-04-05
CVE-2022-26585Mingsoft MCMS SQL injection in net.Mingsoft:ms-mcms9.8v3.15.6%2022-04-05Nuclei
CVE-2022-26361Xen RMRR and unity map handling memory corruption7.8v3.10.4%2022-04-05Fix
CVE-2022-26360Xen RMRR and unity map handling memory corruption7.8v3.10.4%2022-04-05Fix
CVE-2022-26359Xen RMRR and unity map handling memory corruption7.8v3.10.4%2022-04-05Fix
CVE-2022-26358Xen RMRR and unity map handling memory corruption7.8v3.10.4%2022-04-05Fix
CVE-2022-26357Xen VT-d domain ID cleanup race condition7.0v3.10.3%2022-04-05Fix
CVE-2022-26356Xen improper locking5.6v3.10.2%2022-04-05Fix
CVE-2022-26281BigAntSoft BigAnt Server missing encryption7.5v3.10.9%2022-04-05
CVE-2022-25584Flexwatch Fw3170-ps-e information disclosure7.5v3.11.3%2022-04-05Exploit code
CVE-2022-25373Zoho Manageengine Supportcenter Plus cross-site scripting5.4v3.11.1%2022-04-05Fix
CVE-2022-25356Altn Security Gateway XML injection5.3v3.15.9%2022-04-05Nuclei
CVE-2022-25245Zoho ManageEngine ServiceDesk Plus missing authentication5.3v3.11.3%2022-04-05Fix
CVE-2022-25154Samsung T5 DLL hijacking7.3v3.10.2%2022-04-05Fix
CVE-2022-24978Zoho ManageEngine ADAudit Plus cleartext transmission of sensitive information8.8v3.11.1%2022-04-05Fix
CVE-2022-24811Cross-site scripting in Combodo iTop5.4CNA v3.10.7%2022-04-05Fix
CVE-2022-24795Buffer overflow and integer overflow in yajl-ruby5.9CNA v3.13.5%2022-04-05Fix
CVE-2022-24780Code injection in Combodo iTop8.8CNA v3.15.7%2022-04-05Exploit codeFix
CVE-2022-24523Microsoft Edge (Chromium-based) spoofing4.3CNA v3.11.4%2022-04-05Fix
CVE-2022-24475Microsoft Edge (Chromium-based) elevation of privilege8.3CNA v3.11.8%2022-04-05Fix
CVE-2022-24231Simple Student Information System SQL injection9.8v3.11.8%2022-04-05
CVE-2022-23974Pinot segment push endpoint has a vulnerability in unprotected environments7.5v3.12.1%2022-04-05Fix
CVE-2022-23909Gimmal Sherpa Connector Service There is an unquoted search path7.8v3.11.0%2022-04-05Exploit code
CVE-2022-23732GitHub Enterprise Server management console path traversal8.8v3.11.7%2022-04-05Fix
CVE-2022-22356IBM MQ Appliance observable discrepancy5.3CNA v3.00.9%2022-04-05Fix
CVE-2022-22355IBM MQ Appliance denial of service5.3CNA v3.01.1%2022-04-05Fix
CVE-2022-1244radare2 heap-based buffer overflow5.5NVD v3.10.8%2022-04-05Fix
CVE-2022-1243CRHTLF can lead to invalid protocol extraction potentially leading to XSS in medialize/uri.js6.1NVD v3.10.7%2022-04-05Fix
CVE-2022-1236Weak password requirements in weseek/growi6.5v3.10.6%2022-04-05Fix
CVE-2022-1235Weak secrethash can be brute-forced in livehelperchat/livehelperchat8.2v3.10.6%2022-04-05Fix
CVE-2022-1213SSRF filter bypass port 80, 433 in livehelperchat/livehelperchat8.1v3.10.6%2022-04-05Fix
CVE-2022-1212mruby/mruby str_escape use-after-free9.8v3.11.8%2022-04-05Fix
CVE-2022-0809Google Chrome WebXR out-of-bounds access8.8v3.11.1%2022-04-05Fix
CVE-2022-0808Google Chrome Chrome OS Shell use-after-free8.8v3.10.9%2022-04-05Fix
CVE-2022-0807Google Chrome Autofill inappropriate implementation6.5v3.10.9%2022-04-05Fix
CVE-2022-0806Google Chrome Canvas information disclosure6.5v3.11.0%2022-04-05Fix
CVE-2022-0805Google Chrome Browser Switcher use-after-free8.8v3.10.9%2022-04-05Fix
CVE-2022-0804Google Chrome Full screen mode inappropriate implementation6.5v3.10.9%2022-04-05Fix
CVE-2022-0803Google Chrome Permissions inappropriate implementation6.5v3.10.9%2022-04-05Fix
CVE-2022-0802Google Chrome Full screen mode inappropriate implementation6.5v3.10.9%2022-04-05Fix
CVE-2022-0800Google Chrome Cast UI heap-based buffer overflow8.8v3.11.0%2022-04-05Fix
CVE-2022-0799Google Chrome Installer insufficient policy enforcement8.8v3.11.0%2022-04-05Fix
CVE-2022-0798Google Chrome MediaStream use-after-free8.8v3.10.7%2022-04-05Fix
CVE-2022-0797Google Chrome Mojo out-of-bounds access8.8v3.11.7%2022-04-05Fix
CVE-2022-0796Google Chrome Media use-after-free8.8v3.11.0%2022-04-05Fix
CVE-2022-0795Google Chrome Blink Layout type confusion8.8v3.11.0%2022-04-05Fix
CVE-2022-0794Google Chrome WebShare use-after-free8.8v3.11.0%2022-04-05Fix
CVE-2022-0793Google Chrome Cast use-after-free8.8v3.10.7%2022-04-05Fix
CVE-2022-0792Google Chrome ANGLE out-of-bounds read6.5v3.11.0%2022-04-05Fix
CVE-2022-0791Google Chrome Omnibox use-after-free8.8v3.10.9%2022-04-05Fix
CVE-2022-0790Google Chrome Cast UI use-after-free9.6v3.10.9%2022-04-05Fix
CVE-2022-0789Google Chrome ANGLE heap-based buffer overflow8.8v3.11.2%2022-04-05Fix
CVE-2022-0610Google Chrome Gamepad API inappropriate implementation8.8v3.10.8%2022-04-05Fix
CVE-2022-0609Google Chromium Animation use-after-free8.8v3.122.9%2022-04-05KEVFix
CVE-2022-0608Google Chrome Mojo integer overflow8.8v3.11.1%2022-04-05Fix
CVE-2022-0607Google Chrome GPU use-after-free8.8v3.10.8%2022-04-05Fix
CVE-2022-0606Google Chrome ANGLE use-after-free8.8v3.10.8%2022-04-05Fix
CVE-2022-0605Google Chrome Webstore API use-after-free8.8v3.10.6%2022-04-05Fix
CVE-2022-0604Google Chrome Tab Groups heap-based buffer overflow8.8v3.10.7%2022-04-05Fix
CVE-2022-0603Google Chrome File Manager use-after-free8.8v3.10.8%2022-04-05Fix
CVE-2022-0602Cross-site scripting (XSS) DOM in TastyIgniter/TastyIgniter5.4NVD v3.10.7%2022-04-05Fix
CVE-2022-0470Google Chrome V8 out-of-bounds access8.8v3.11.0%2022-04-05Fix
CVE-2022-0469Google Chrome Cast use-after-free8.8v3.10.7%2022-04-05Fix
CVE-2022-0468Google Chrome Payments use-after-free8.8v3.10.7%2022-04-05Fix
CVE-2022-0467Google Chrome Pointer Lock inappropriate implementation8.8v3.11.0%2022-04-05Fix
CVE-2022-0466Google Chrome Extensions Platform inappropriate implementation9.6v3.10.6%2022-04-05Fix
CVE-2022-0465Google Chrome extensions use-after-free8.8v3.10.8%2022-04-05Fix
CVE-2022-0464Google Chrome Accessibility use-after-free8.8v3.10.8%2022-04-05Fix
CVE-2022-0463Google Chrome Accessibility use-after-free8.8v3.10.7%2022-04-05Fix
CVE-2022-0462Google Chrome Scroll inappropriate implementation6.5v3.10.9%2022-04-05Fix
CVE-2022-0461Policy bypass in COOP in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to bypass iframe sandbox via a crafted HTML page.6.5v3.10.9%2022-04-05Fix
CVE-2022-0460Google Chrome Window Dialogue use-after-free8.8v3.10.8%2022-04-05Fix
CVE-2022-0459Google Chrome Screen Capture use-after-free8.8v3.10.8%2022-04-05Fix
CVE-2022-0458Google Chrome Thumbnail Tab Strip use-after-free8.8v3.10.7%2022-04-05Fix
CVE-2022-0457Google Chrome V8 type confusion8.8v3.10.8%2022-04-05Fix
CVE-2022-0456Google Chrome Web Search use-after-free8.8v3.10.8%2022-04-05Fix
CVE-2022-0455Google Chrome Full Screen Mode inappropriate implementation6.5v3.10.7%2022-04-05Fix
CVE-2022-0454Google Chrome ANGLE heap-based buffer overflow8.8v3.10.9%2022-04-05Fix
CVE-2022-0453Google Chrome Reader Mode use-after-free8.8v3.10.8%2022-04-05Fix
CVE-2022-0452Google Chrome Safe Browsing use-after-free9.6v3.10.8%2022-04-05Fix
CVE-2022-28063Simple Bakery Shop Management System products page vulnerability4.9v3.11.2%2022-04-04
CVE-2022-28062Online Car Rental System unrestricted file upload8.8v3.11.8%2022-04-04
CVE-2022-27651Non-empty default inheritable capabilities for linux container in Buildah6.8v3.11.3%2022-04-04Fix
CVE-2022-27650crun incorrect default permissions7.5v3.11.2%2022-04-04Fix
CVE-2022-27649Podman's default inheritable capabilities for linux container not empty7.5v3.11.4%2022-04-04Fix
CVE-2022-27609Forcepoint One Endpoint incorrect authorization6.0CNA v3.10.2%2022-04-04Fix
CVE-2022-27608Forcepoint One Endpoint incorrect authorization6.0CNA v3.10.2%2022-04-04Fix
CVE-2022-27442Tpcms sensitive information in log files7.5v3.11.0%2022-04-04
CVE-2022-27441Tpcms A stored cross-site scripting4.8v3.10.4%2022-04-04
CVE-2022-27436E-Commerce Website cross-site scripting4.8v3.11.0%2022-04-04
CVE-2022-27435E-Commerce Website unrestricted file upload8.8v3.11.7%2022-04-04
CVE-2022-26616Public Knowledge Project OPEN JOURNAL SYSTEMS cross-site scripting6.1v3.11.0%2022-04-04Fix
CVE-2022-26572Xerox Colorqube 8580 improper access control7.5v3.11.0%2022-04-04
CVE-2022-25618wpDataTables WordPress plugin stored cross-site scripting (XSS)4.8v3.10.6%2022-04-04Fix
CVE-2022-25613FV Flowplayer Video Player WordPress plugin authenticated persistent cross-site scripting (XSS)5.4v3.10.6%2022-04-04Fix
CVE-2022-25569Bettinivideo Sgsetup hard-coded credentials9.8v3.11.2%2022-04-04
CVE-2022-24814Cross-site scripting in Directus8.8CNA v3.11.0%2022-04-04Fix
CVE-2022-24813Authentication bypass using an alternate path or channel in CreateWiki5.3CNA v3.11.0%2022-04-04Fix
CVE-2022-24801twisted HTTP request smuggling in twisted.web8.1CNA v3.12.8%2022-04-04Fix
CVE-2022-24787Incorrect comparison in Vyper7.5CNA v3.11.0%2022-04-04Fix
CVE-2022-24785moment path traversal in Moment.js7.5CNA v3.113.9%2022-04-04Exploit codeFix
CVE-2022-24191htmldoc infinite loop5.5v3.10.7%2022-04-04Fix
CVE-2022-23700HPE OneView information disclosure5.5v3.10.3%2022-04-04Fix
CVE-2022-23699A local authentication restriction bypass vulnerability was discovered in HPE OneView version(s): Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView.7.8v3.10.3%2022-04-04Fix
CVE-2022-23698HPE OneView information disclosure7.5v3.11.4%2022-04-04Fix
CVE-2022-23697HPE OneView cross-site scripting6.1v3.10.7%2022-04-04Fix
CVE-2022-1233URL Confusion when Scheme not Supplied in medialize/uri.js6.1v3.10.8%2022-04-04Fix
CVE-2022-1225Incorrect privilege assignment in phpipam/phpipam6.5v3.11.0%2022-04-04Fix
CVE-2022-1224Improper authorization in phpipam/phpipam6.5v3.11.0%2022-04-04Fix
CVE-2022-1223Incorrect authorization in phpipam/phpipam6.5v3.11.0%2022-04-04Fix
CVE-2022-1222gpac/gpac infinite loop5.5v3.10.8%2022-04-04Fix
CVE-2022-1190GitLab cross-site scripting8.7CNA v3.187.4%2022-04-04Fix
CVE-2022-1189GitLab approval rules vulnerability3.1CNA v3.10.7%2022-04-04Fix
CVE-2022-1188GitLab server-side request forgery3.7CNA v3.11.2%2022-04-04Fix
CVE-2022-1185GitLab out-of-bounds write6.5CNA v3.11.3%2022-04-04Fix
CVE-2022-1175GitLab improper neutralization8.7CNA v3.182.0%2022-04-04Exploit codeFix
CVE-2022-1174GitLab improper quantity validation4.3CNA v3.11.5%2022-04-04Fix
CVE-2022-1170JobMonster WordPress theme unauthenticated reflected cross-site scripting6.1NVD v3.11.8%2022-04-04NucleiFix
CVE-2022-1169Careerfy WordPress theme unauthenticated reflected cross-site scripting (XSS)6.1NVD v3.10.9%2022-04-04Fix
CVE-2022-1168JobSearch WordPress plugin unauthenticated reflected cross-site scripting (XSS)6.1NVD v3.11.8%2022-04-04NucleiFix
CVE-2022-1167CareerUp WordPress theme unauthenticated reflected cross-site scripting6.1NVD v3.11.1%2022-04-04Fix
CVE-2022-1166JobMonster WordPress theme directory listing in upload Folder5.3NVD v3.11.6%2022-04-04Fix
CVE-2022-1165Blackhole for Bad Bots WordPress plugin arbitrary IP Address Blocking via IP spoofing9.1NVD v3.11.7%2022-04-04Fix
CVE-2022-1164Wyzi WordPress theme reflected cross-site scripting (XSS)6.1NVD v3.10.8%2022-04-04Fix
CVE-2022-1162GitLab hard-coded credentials9.1CNA v3.175.6%2022-04-04NucleiEmerging ThreatsExploit codeFix
CVE-2022-1148GitLab improper authorization5.3CNA v3.11.2%2022-04-04Fix
CVE-2022-1121GitLab Pages resource exhaustion5.3CNA v3.11.1%2022-04-04Fix
CVE-2022-1120GitLab information disclosure through error messages4.8CNA v3.11.0%2022-04-04Fix
CVE-2022-1111GitLab Project Import business logic error2.4CNA v3.10.6%2022-04-04Fix
CVE-2022-1105GitLab An improper access control4.3CNA v3.10.8%2022-04-04Fix
CVE-2022-1100GitLab missing resource release4.3CNA v3.11.0%2022-04-04Fix
CVE-2022-1099GitLab resource exhaustion4.3CNA v3.10.9%2022-04-04Fix
CVE-2022-1026Kyocera Net View Address Book Exposure8.6NVD v3.114.7%2022-04-04NucleiExploit codeFix
CVE-2022-0990Server-side request forgery (SSRF) in janeczku/Calibre-Web9.1v3.11.3%2022-04-04Fix
CVE-2022-0958Mark Posts WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.7%2022-04-04Fix
CVE-2022-0939Server-side request forgery (SSRF) in janeczku/Calibre-Web9.9v3.11.1%2022-04-04Fix
CVE-2022-0901Ad Inserter WordPress plugin reflected cross-site scripting6.1NVD v3.13.6%2022-04-04Fix
CVE-2022-0887Easy Social Icons WordPress plugin Admin+ SQL injection7.2NVD v3.11.3%2022-04-04Fix
CVE-2022-0884Profile Builder WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.7%2022-04-04Fix
CVE-2022-0864UpdraftPlus WordPress plugin reflected cross-site scripting6.1NVD v3.17.4%2022-04-04NucleiFix
CVE-2022-0837Tms-outsource Amelia SMS service missing authorization5.4NVD v3.10.6%2022-04-04Fix
CVE-2022-0830FormBuilder WordPress plugin stored cross-site scripting via CSRF6.5NVD v3.10.5%2022-04-04
CVE-2022-0825Tms-outsource Amelia appointment status update incorrect authorization5.4NVD v3.10.8%2022-04-04Fix
CVE-2022-0740GitLab incorrect authorization3.1CNA v3.11.0%2022-04-04Fix
CVE-2022-0709Booking Package WordPress plugin unauthenticated sensitive data disclosure7.5NVD v3.11.6%2022-04-04Fix
CVE-2022-0537MapPress Maps for WordPress plugin Admin+ file upload to remote code execution7.2NVD v3.11.5%2022-04-04Fix
CVE-2022-0431Google Pagespeed Insights WordPress plugin reflected cross-site scripting6.1NVD v3.10.9%2022-04-04Fix
CVE-2022-0404Material Design for Contact Form 7 WordPress plugin arbitrary settings update leading to DoS6.5NVD v3.11.1%2022-04-04
CVE-2022-0403Library File Manager WordPress plugin Subscriber+ arbitrary file creation/Upload/Deletion8.1NVD v3.11.3%2022-04-04Fix
CVE-2022-28391BusyBox argument injection8.8v3.13.5%2022-04-03Fix
CVE-2022-28390Linux kernel double free7.8v3.10.4%2022-04-03Fix
CVE-2022-28389Linux kernel double free5.5v3.10.3%2022-04-03Fix
CVE-2022-28388Linux kernel double free5.5v3.10.4%2022-04-03Fix
CVE-2022-28381Allmediaserver out-of-bounds write9.8v3.170.4%2022-04-03Exploit code
CVE-2022-28380Rc-httpd path traversal7.5v3.11.5%2022-04-03
CVE-2022-28379nginx-proxy-manager cross-site scripting4.8v3.171.2%2022-04-03Fix
CVE-2022-28378Cross-site scripting in craftcms/cms6.1v3.10.6%2022-04-03Fix
CVE-2022-28376Verizon Lvskihp improper authentication8.1v3.11.2%2022-04-03
CVE-2022-28368Remote code injection in dompdf/dompdf9.8v3.182.4%2022-04-03Reported exploitedMetasploitExploit codeFix
CVE-2022-27249Idearespa Reftree arbitrary file upload8.8v3.14.9%2022-04-03
CVE-2022-27248Idearespa Reftree path traversal6.5v3.12.9%2022-04-03
CVE-2022-26530Swaywm Swaylock crash9.1v3.11.6%2022-04-03Fix
CVE-2022-26233Barco Control Room Management Suite path traversal7.5v3.115.0%2022-04-03Nuclei
CVE-2022-1211tildearrow Furnace FUR to VGM Converter stack-based overflow6.5v3.10.9%2022-04-03
CVE-2022-1210LibTIFF tiff2ps resource consumption6.5v3.11.9%2022-04-03Fix
CVE-2022-0406Improper authorization in janeczku/Calibre-Web4.3v3.10.7%2022-04-03Fix
CVE-2022-0405Improper access control in janeczku/Calibre-Web4.3v3.10.8%2022-04-03Fix
CVE-2022-0088Cross-site request forgery (CSRF) in yourls/yourls7.4v3.12.0%2022-04-03Exploit codeFix
CVE-2022-28356Linux kernel resource leak5.5v3.10.6%2022-04-02Fix
CVE-2022-28355Scala.js insufficient randomness7.5v3.11.4%2022-04-02Fix
CVE-2022-28352weechat improper certificate validation4.8v3.10.4%2022-04-02Fix
CVE-2022-1201Null pointer dereference in mrb_vm_exec with super in mruby/mruby6.5NVD v3.10.4%2022-04-02Fix
CVE-2022-27534Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security arbitrary code execution9.8NVD v3.13.1%2022-04-01
CVE-2022-27177ConsoleMe format string9.8v3.12.3%2022-04-01Fix
CVE-2022-26565Total.js Content Management System Totaljs all versions cross-site scripting4.8v3.10.5%2022-04-01
CVE-2022-26562Kopano Groupware Core improper authentication9.8v3.12.2%2022-04-01Fix
CVE-2022-26419OMRON CX-Position Rockwell Automation Studio 5000 Logix Designer code injection7.8v3.12.1%2022-04-01Fix
CVE-2022-26417OMRON CX-Position Rockwell Automation Studio 5000 Logix Designer use-after-free7.8v3.11.5%2022-04-01Fix
CVE-2022-26022OMRON CX-Position Rockwell Automation Studio 5000 Logix Designer out-of-bounds write7.8v3.11.5%2022-04-01Fix
CVE-2022-25959OMRON CX-Position memory corruption7.8v3.11.5%2022-04-01Fix
CVE-2022-25160Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU cleartext storage of sensitive information5.9v3.11.2%2022-04-01
CVE-2022-25159Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU authentication bypass by replay8.1v3.12.2%2022-04-01
CVE-2022-25158Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU cleartext storage of sensitive information9.1v3.11.4%2022-04-01
CVE-2022-25157Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU improper authentication9.1v3.12.4%2022-04-01
CVE-2022-25156Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU weak hash8.1v3.11.3%2022-04-01
CVE-2022-25155Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU improper authentication8.1v3.12.1%2022-04-01
CVE-2022-25017Hitrontech Chita OS command injection8.8NVD v3.129.1%2022-04-01
CVE-2022-24803Command injection vulnerability in asciidoctor-include-ext10.0CNA v3.12.8%2022-04-01Fix
CVE-2022-24802Prototype pollution in deepmerge-ts8.1CNA v3.11.7%2022-04-01Fix
CVE-2022-24440cocoapods-downloader command injection9.8v3.12.5%2022-04-01Fix
CVE-2022-24426Dell Command Update (DCU) uncontrolled search path7.8CNA v3.10.2%2022-04-01Fix
CVE-2022-24181Public Knowledge Project OPEN JOURNAL SYSTEMS PKP Open Journals System cross-site scripting6.1v3.16.1%2022-04-01NucleiExploit code
CVE-2022-24066simple-git command injection9.8v3.13.8%2022-04-01Fix
CVE-2022-23158Dell Wyse Device Agent permissive allowlist6.0CNA v3.10.7%2022-04-01Fix
CVE-2022-23157Dell Wyse Device Agent information disclosure4.4CNA v3.10.2%2022-04-01Fix
CVE-2022-23156Dell Wyse Device Agent improper authentication6.0CNA v3.10.2%2022-04-01Fix
CVE-2022-23155Dell Wyse Management Suite unrestricted file upload7.2CNA v3.11.4%2022-04-01Fix
CVE-2022-22965Spring Framework JDK 9+ remote code execution9.8NVD v3.199.6%2022-04-01KEVNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2022-22963VMware Tanzu Spring Cloud function remote code execution9.8v3.199.9%2022-04-01KEVNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2022-22950Allocation of resources without limits or throttling in Spring Framework6.5NVD v3.136.1%2022-04-01Fix
CVE-2022-22570UniFi Door Access Reader Lite buffer overflow10.0v3.11.1%2022-04-01Fix
CVE-2022-22404IBM App Connect Enterprise Certified Container resource exhaustion6.5CNA v3.01.0%2022-04-01Fix
CVE-2022-22332IBM Sterling Partner Engagement Manager operation on a released resource5.6CNA v3.00.8%2022-04-01Fix
CVE-2022-22331IBM Sterling Partner Engagement Manager insecure direct object reference5.4CNA v3.00.7%2022-04-01Fix
CVE-2022-22328IBM Sterling Partner Engagement Manager privilege escalation6.2CNA v3.00.2%2022-04-01Fix
CVE-2022-22327IBM UrbanCode Deploy weak cryptographic algorithm5.9CNA v3.00.7%2022-04-01Fix
CVE-2022-21947Rancher Desktop: Dashboard API is network accessible8.3CNA v3.10.6%2022-04-01
CVE-2022-21830Cross-site scripting in @rocket.chat/livechat6.1v3.10.8%2022-04-01Fix
CVE-2022-21235github.com/Masterminds/vcs command injection9.8v3.11.6%2022-04-01Fix
CVE-2022-21223cocoapods-downloader command injection9.8v3.11.7%2022-04-01Fix
CVE-2022-1207Out-of-bounds read in radareorg/radare26.6v3.10.9%2022-04-01Fix
CVE-2022-1159Rockwell Automation Studio 5000 Logix Designer code injection7.2v3.13.5%2022-04-01Fix
CVE-2022-1098Delta Electronics DIAEnergie Uncontrolledly Search Path Element7.8v3.10.2%2022-04-01Fix
CVE-2022-1068Modbus Tools Modbus Slave stack-based buffer overflow7.5v3.11.0%2022-04-01Exploit codeFix
CVE-2022-1018Rockwell Automation ISaGRAF XML external entity injection5.5v3.12.2%2022-04-01Fix
CVE-2022-0922Philips e-Alert missing authentication6.5v3.10.4%2022-04-01Fix
CVE-2022-0741GitLab all versions improper input validation5.8CNA v3.11.5%2022-04-01Fix
CVE-2022-0489GitLab denial of service3.5CNA v3.11.5%2022-04-01Fix
CVE-2022-0425GitLab server-side request forgery5.4CNA v3.10.6%2022-04-01Fix
CVE-2022-0390GitLab improper access control4.3CNA v3.10.9%2022-04-01Fix
CVE-2022-0373GitLab improper access control4.3CNA v3.10.9%2022-04-01Fix