CVEs published April 12, 2022
166 CVEs were published on April 12, 2022: 1 critical, 19 high. Browse them by severity, product and exploitation status.
- Published
- 166
- Critical
- 1
- High
- 19
- Medium
- 12
- Low
- 2
- Unrated
- 132
- Now in CISA KEV
- 0
- Fix available
- 37
Most affected products
- Android
- 18
- Dell PowerScale OneFS
- 14
- Siemens SCALANCE X302-7 EEC · Siemens SCALANCE X304-2FE +18
- 9
- SAP SE SAP 3D Visual Enterprise Viewer
- 6
- Fuji Electric Alpha5
- 5
- SAP SE SAP BusinessObjects Business Intelligence Platform
- 5
- Siemens SCALANCE W1788-1 M12 · Siemens SCALANCE W1788-2… +2
- 3
- Siemens SIMATIC Energy Manager Basic · Siemens SIMATIC Ener…
- 3
- Siemens Simcenter Femap
- 3
- Visual Form Builder
- 3
Critical 1
High 19
- CVE-2022-24767GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account.Microsoft Visual Studio
- CVE-2022-24412Dell EMC PowerScale OneFS 8.2.x - 9.3.0.x contain an improper handling of value vulnerability.Dell PowerScale OneFS
- CVE-2022-24411Dell PowerScale OneFS 8.2.2 and above contain an elevation of privilege vulnerability.Dell PowerScale OneFS
- CVE-2022-23161Dell PowerScale OneFS versions 8.2.x - 9.3.0.x contain a denial-of-service vulnerability in SmartConnect.Dell PowerScale OneFS
- CVE-2022-22562Dell PowerScale OneFS, versions 8.2.0-9.3.0, contain a improper handling of missing values exploit.Dell PowerScale OneFS
- CVE-2022-22561Dell PowerScale OneFS, versions 8.2.x-9.3.0.x, contain an improper restriction of excessive authentication attempts.Dell PowerScale OneFS
- CVE-2022-22560Dell EMC PowerScale OneFS 8.1.x - 9.1.x contain hard coded credentials.Dell PowerScale OneFS
- CVE-2022-22559Dell PowerScale OneFS, version 9.3.0, contains a use of a broken or risky cryptographic algorithm.Dell PowerScale OneFS
- CVE-2022-22549Dell PowerScale OneFS, 8.2.x-9.3.x, contains a Improper Certificate Validation.Dell PowerScale OneFS
- CVE-2022-24842Improper Privilege Management in MinIOminio
- CVE-2022-24812FGAC API Key privilege escalation in Grafanagrafana
- CVE-2022-21155Fernhill SCADA Uncontrolled Resource ConsumptionFernhill SCADA Server
- CVE-2022-24383ICSA-22-090-03 Fuji Electric Alpha5Fuji Electric Alpha5
- CVE-2022-21228ICSA-22-090-03 Fuji Electric Alpha5Fuji Electric Alpha5
- CVE-2022-21214ICSA-22-090-03 Fuji Electric Alpha5Fuji Electric Alpha5
- CVE-2022-21803Prototype Pollutionnconf
- CVE-2021-40368A vulnerability has been identified in SIMATIC S7-400 CPU 412-1 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 DP V7 (All versions)…Siemens SIMATIC S7-400 CPU 412-1 DP · Siemens SIMATIC S… +18
- CVE-2022-1302Malformed Goose Message in LibIEC61850 may result in a denial of serviceMZ Automation libIEC61850
- CVE-2022-0436Path Traversal in gruntjs/gruntgruntjs/grunt · grunt
Medium, low and unrated 146
- CVE-2022-26589A Cross-Site Request Forgery (CSRF) in Pluck CMS v4.7.15 allows attackers to delete arbitrary pages.
- CVE-2022-26151Citrix XenMobile Server 10.12 through RP11, 10.13 through RP7, and 10.14 through RP4 allows Command Injection.
- CVE-2021-44520In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Command Injection vulnerability, leading to remote code execution…
- CVE-2022-27419rtl_433 21.12 was discovered to contain a stack overflow in the function acurite_00275rm_decode at /devices/acurite.c.
- CVE-2022-29052Jenkins Google Compute Engine Plugin 4.3.8 and earlier stores private keys unencrypted in cloud agent config.xml files on the Jenkins…Jenkins project Jenkins Google Compute Engine Plugin · org.…
- CVE-2022-29051Missing permission checks in Jenkins Publish Over FTP Plugin 1.16 and earlier allow attackers with Overall/Read permission to connect to…Jenkins project Jenkins Publish Over FTP Plugin · org.jenki…
- CVE-2022-29050A cross-site request forgery (CSRF) vulnerability in Jenkins Publish Over FTP Plugin 1.16 and earlier allows attackers to connect to an…Jenkins project Jenkins Publish Over FTP Plugin · org.jenki…
- CVE-2022-29048A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Plugin 2.15.3 and earlier allows attackers to connect to an…Jenkins project Jenkins Subversion Plugin · org.jenkins-ci.…
- CVE-2022-29047Jenkins Pipeline: Shared Groovy Libraries Plugin 564.ve62a_4eb_b_e039 and earlier, except 2.21.3, allows attackers able to submit pull…Jenkins project Jenkins Pipeline: Shared Groovy Libraries P…
- CVE-2022-29046Jenkins Subversion Plugin 2.15.3 and earlier does not escape the name and description of List Subversion tags (and more) parameters on…Jenkins project Jenkins Subversion Plugin · org.jenkins-ci.…
- CVE-2022-29044Jenkins Node and Label parameter Plugin 1.10.3 and earlier does not escape the name and description of Node and Label parameters on views…Jenkins project Jenkins Node and Label parameter Plugin · o…
- CVE-2022-29043Jenkins Mask Passwords Plugin 3.0 and earlier does not escape the name and description of Non-Stored Password parameters on views…Jenkins project Jenkins Mask Passwords Plugin · org.jenkins…
- CVE-2022-29042Jenkins Job Generator Plugin 1.22 and earlier does not escape the name and description of Generator Parameter and Generator Choice…Jenkins project Jenkins Job Generator Plugin · org.jenkins-…
- CVE-2022-29041Jenkins Jira Plugin 3.7 and earlier, except 3.6.1, does not escape the name and description of Jira Issue and Jira Release Version…Jenkins project Jenkins Jira Plugin · org.jenkins-ci.plugin…
- CVE-2022-29040Jenkins Git Parameter Plugin 0.9.15 and earlier does not escape the name and description of Git parameters on views displaying parameters…Jenkins project Jenkins Git Parameter Plugin · org.jenkins-…
- CVE-2022-29039Jenkins Gerrit Trigger Plugin 2.35.2 and earlier does not escape the name and description of Base64 Encoded String parameters on views…Jenkins project Jenkins Gerrit Trigger Plugin · com.sonyeri…
- CVE-2022-29038Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier does not escape the name and description of Extended Choice…Jenkins project Jenkins Extended Choice Parameter Plugin ·…
- CVE-2022-29037Jenkins CVS Plugin 2.19 and earlier does not escape the name and description of CVS Symbolic Name parameters on views displaying…Jenkins project Jenkins CVS Plugin · org.jenkins-ci.plugins…
- CVE-2022-27386MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component sql/sql_class.cc.
- CVE-2022-27387MariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component decimal_bin_size, which is exploited…
- CVE-2022-27385An issue in the component Used_tables_and_const_cache::used_tables_and_const_cache_join of MariaDB Server v10.7 and below was discovered…
- CVE-2022-27384An issue in the component Item_subselect::init_expr_cache_tracker of MariaDB Server v10.6 and below was discovered to allow attackers to…
- CVE-2022-27382MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component…
- CVE-2022-27383MariaDB Server v10.6 and below was discovered to contain an use-after-free in the component my_strcasecmp_8bit, which is exploited via…
- CVE-2022-27380An issue in the component my_decimal::operator= of MariaDB Server v10.6.3 and below was discovered to allow attackers to cause a Denial of…
Show all 146 entriesShow fewer entries
- CVE-2022-27381An issue in the component Field::set_default of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of…
- CVE-2022-27378An issue in the component Create_tmp_table::finalize of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial…
- CVE-2022-27379An issue in the component Arg_comparator::compare_real_fixed of MariaDB Server v10.6.2 and below was discovered to allow attackers to…
- CVE-2022-27377MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Item_func_in::cleanup(), which is exploited…
- CVE-2022-27376MariaDB Server v10.6.5 and below was discovered to contain an use-after-free in the component Item_args::walk_arg, which is exploited via…
- CVE-2022-0915Logitech Sync desktop application prior to 2.4.574 - TOCTOU during installation leads to privelege escalationLogitech Sync
- CVE-2022-24413Dell PowerScale OneFS, versions 8.2.2-9.3.x, contain a time-of-check-to-time-of-use vulnerability.Dell PowerScale OneFS
- CVE-2022-23163Dell PowerScale OneFS, 8.2,x, 9.1.0.x, 9.2.1.x, and 9.3.0.x contain a denial of service vulnerability.Dell PowerScale OneFS
- CVE-2022-23160Dell PowerScale OneFS, versions 8.2.0-9.3.0, contains an Improper Handling of Insufficient Permissions vulnerability.Dell PowerScale OneFS
- CVE-2022-23159Dell PowerScale OneFS, 8.2.2 - 9.3.0.x, contain a missing release of memory after effective lifetime vulnerability.Dell PowerScale OneFS
- CVE-2022-22565Dell PowerScale OneFS, versions 9.0.0-9.3.0, contain an improper authorization of index containing sensitive information.Dell PowerScale OneFS
- CVE-2022-22550Dell PowerScale OneFS, versions 8.2.2 and above, contain a password disclosure vulnerability.Dell PowerScale OneFS
- CVE-2022-24070Apache Subversion mod_dav_svn is vulnerable to memory corruptionApache Software Foundation Apache Subversion
- CVE-2021-28544Apache Subversion SVN authz protected copyfrom paths regressionApache Software Foundation Apache Subversion
- CVE-2022-28397An arbitrary file upload vulnerability in the file upload module of Ghost CMS v4.42.0 allows attackers to execute arbitrary code via a…ghost
- CVE-2022-27952An arbitrary file upload vulnerability in the file upload module of PayloadCMS v0.15.0 allows attackers to execute arbitrary code via a…payload
- CVE-2022-27262An arbitrary file upload vulnerability in the file upload module of Skipper v0.9.1 allows attackers to execute arbitrary code via a…
- CVE-2022-27263An arbitrary file upload vulnerability in the file upload module of Strapi v4.1.5 allows attackers to execute arbitrary code via a crafted…strapi
- CVE-2022-27261An arbitrary file write vulnerability in Express-FileUpload v1.3.1 allows attackers to upload multiple files with the same name, causing…express-fileupload
- CVE-2022-27260An arbitrary file upload vulnerability in the file upload component of ButterCMS v1.2.8 allows attackers to execute arbitrary code via a…buttercms
- CVE-2022-27139An arbitrary file upload vulnerability in the file upload module of Ghost v4.39.0 allows attackers to execute arbitrary code via a crafted…ghost
- CVE-2021-39814In ppmp_validate_wsm of drm_fw.c, there is a possible out of bounds write due to an incorrect bounds check.Android
- CVE-2022-21202ICSA-22-090-03 Fuji Electric Alpha5Fuji Electric Alpha5
- CVE-2021-39812In TBD of TBD, there is a possible out of bounds read due to a use after free.Android
- CVE-2022-21168ICSA-22-090-03 Fuji Electric Alpha5Fuji Electric Alpha5
- CVE-2021-39809In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2021-39808In createNotificationChannelGroup of PreferencesHelper.java, there is a possible way for a service to run in foreground without user…Android
- CVE-2021-39807In handleNfcStateChanged of SecureNfcEnabler.java, there is a possible way to enable NFC from the Guest account due to a missing…Android
- CVE-2021-39804In reinit of HeifDecoderImpl.cpp, there is a possible crash due to a missing null check.Android
- CVE-2021-39805In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2021-39803In ~Impl of C2AllocatorIon.cpp, there is a possible out of bounds read due to a use after free.Android
- CVE-2021-39802In change_pte_range of mprotect.c , there is a possible way to make a shared mmap writable due to a permissions bypass.Android
- CVE-2021-39800In ion_ioctl of ion-ioctl.c, there is a possible way to leak kernel head data due to a use after free.Android
- CVE-2021-39801In ion_ioctl of ion-ioctl.c, there is a possible use after free due to improper locking.Android
- CVE-2021-39799In AttributionSource of AttributionSource.java, there is a possible permission bypass due to improper input validation.Android
- CVE-2021-39798In Bitmap_createFromParcel of Bitmap.cpp, there is a possible arbitrary code execution due to a missing bounds check.Android
- CVE-2021-39796In HarmfulAppWarningActivity of HarmfulAppWarningActivity.java, there is a possible way to trick victim to install harmful app due to a…Android
- CVE-2021-39797In several functions of of LauncherApps.java, there is a possible escalation of privilege due to a logic error in the code.Android
- CVE-2021-39794In broadcastPortInfo of AdbService.java, there is a possible way for apps to run code as the shell user, if wireless debugging is enabled…Android
- CVE-2021-0694In setServiceForegroundInnerLocked of ActiveServices.java, there is a possible way for a background application to regain foreground…Android
- CVE-2021-0707In dma_buf_release of dma-buf.c, there is a possible memory corruption due to a use after free.Android
- CVE-2022-23703A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays, HPE Nimble Storage All Flash Arrays and HPE Nimble…HPE Nimble Storage Hybrid Flash Arrays; Nimble Storage All…
- CVE-2022-23702A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 Servers.HPE Superdome Flex Server; HPE Superdome Flex 280 Server
- CVE-2021-41004A remote vulnerability was discovered in Aruba Instant On 1930 Switch Series version(s): Firmware below v1.0.7.0.Aruba Instant On 1930 Switch Series
- CVE-2021-41005A remote vulnerability was discovered in Aruba Instant On 1930 Switch Series version(s): Firmware below v1.0.7.0.Aruba Instant On 1930 Switch Series
- CVE-2022-28795A vulnerability within the Avira Password Manager Browser Extensions provided a potential loophole where, if a user visited a page crafted…Avira Password Manager – Browser Extensions
- CVE-2022-28215SAP NetWeaver ABAP Server and ABAP Platform - versions 740, 750, 787, allows an unauthenticated attacker to redirect users to a malicious…SAP SE SAP NetWeaver ABAP Server and ABAP Platform
- CVE-2022-28772By overlong input values an attacker may force overwrite of the internal program stack in SAP Web Dispatcher - versions 7.53, 7.77, 7.81…SAP SE SAP NetWeaver · SAP SE SAP Web Dispatcher
- CVE-2022-27669An unauthenticated user can use functions of XML Data Archiving Service of SAP NetWeaver Application Server for Java - version 7.50, to…SAP SE SAP NetWeaver Application Server for Java
- CVE-2022-27671A CSRF token visible in the URL may possibly lead to information disclosure vulnerability.SAP SE SAP BusinessObjects Business Intelligence Platform
- CVE-2022-28773Due to an uncontrolled recursion in SAP Web Dispatcher and SAP Internet Communication Manager, the application may crash, leading to…SAP SE SAP NetWeaver · SAP SE SAP Web Dispatcher
- CVE-2022-27657A highly privileged remote attacker, can gain unauthorized access to display contents of restricted directories by exploiting insufficient…SAP SE SAP Focused Run
- CVE-2022-28216SAP BusinessObjects Business Intelligence Platform (BI Workspace) - version 420, is susceptible to a Cross-Site Scripting attack by an…SAP SE SAP BusinessObjects Business Intelligence Platform
- CVE-2022-28770Due to insufficient input validation, SAPUI5 library(vbm) - versions 750, 753, 754, 755, 75, allows an unauthenticated attacker to inject…SAP SE SAPUI5
- CVE-2022-28213When a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform - version 420, 430, it does not sufficiently…SAP SE SAP BusinessObjects Business Intelligence Platform
- CVE-2022-27654When a user opens a manipulated Photoshop Document (.psd, 2d.x3d) received from untrusted sources in SAP 3D Visual Enterprise Viewer…SAP SE SAP 3D Visual Enterprise Viewer
- CVE-2022-22541SAP BusinessObjects Business Intelligence Platform - versions 420, 430, may allow legitimate users to access information they shouldn't…SAP SE SAP BusinessObjects Business Intelligence Platform
- CVE-2022-27670SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users from accessing a SQL Anywhere database…SAP SE SAP SQL Anywhere Server
- CVE-2022-27655When a user opens a manipulated Universal 3D (.u3d, 3difr.x3d) received from untrusted sources in SAP 3D Visual Enterprise Viewer…SAP SE SAP 3D Visual Enterprise Viewer
- CVE-2022-26106When a user opens a manipulated Computer Graphics Metafile (.cgm, CgmCore.dll) received from untrusted sources in SAP 3D Visual Enterprise…SAP SE SAP 3D Visual Enterprise Viewer
- CVE-2022-26105SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution attack by an…SAP SE SAP NetWeaver Enterprise Portal
- CVE-2022-26108When a user opens a manipulated Picture Exchange (.pcx, 2d.x3d) received from untrusted sources in SAP 3D Visual Enterprise Viewer…SAP SE SAP 3D Visual Enterprise Viewer
- CVE-2022-26109When a user opens a manipulated Portable Document Format (.pdf, PDFView.x3d) received from untrusted sources in SAP 3D Visual Enterprise…SAP SE SAP 3D Visual Enterprise Viewer
- CVE-2022-27667Under certain conditions, SAP BusinessObjects Business Intelligence platform, Client Management Console (CMC) - version 430, allows an…SAP SE SAP BusinessObjects Business Intelligence Platform
- CVE-2022-26107When a user opens a manipulated Jupiter Tesselation (.jt, JTReader.x3d) received from untrusted sources in SAP 3D Visual Enterprise Viewer…SAP SE SAP 3D Visual Enterprise Viewer
- CVE-2021-36914WordPress CalderaWP License Manager plugin <= 1.2.11 - Cross-Site Request Forgery (CSRF) vulnerability leading to Reflected Cross-Site…Desertsnowman, Shelob9 CalderaWP License Manager
- CVE-2021-42255AppGuard Enterprise before 6.7.100.1 creates a Temporary File in a Directory with Insecure Permissions.
- CVE-2022-27473SQL injection vulnerability in Topics Searching feature of Roothub 2.6.0 allows unauthorized attackers to execute arbitrary SQL commands…
- CVE-2022-27472SQL injection vulnerability in Topics Counting feature of Roothub 2.6.0 allows unauthorized attackers to execute arbitrary SQL commands…
- CVE-2021-31805Forced OGNL evaluation, when evaluated on raw not validated user input in tag attributes, may lead to RCE.Apache Software Foundation Apache Struts · org.apache.strut…
- CVE-2022-28036AtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_navigation.php
- CVE-2022-28035Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_blur-save.php
- CVE-2022-28034AtomCMS 2.0 is vulnerabie to SQL Injection via Atom.CMS_admin_ajax_list-sort.php
- CVE-2022-28033Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_uploads.php
- CVE-2022-28032AtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_pages.php
- CVE-2022-27165CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Plugin_manager_setstatus
- CVE-2022-27164CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Users_viewUsers
- CVE-2022-27163CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Users_editUser
- CVE-2022-27162CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Members_editUser
- CVE-2022-27161Csz Cms 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Members_viewUsers
- CVE-2021-32040Large aggregation pipelines with a specific stage can crash mongod under default configurationMongoDB Server
- CVE-2022-0878Novel attack against the Combined Charging System (CCS) in electric vehicles to remotely cause a denial of serviceCombined Charging System
- CVE-2022-24248RiteCMS version 3.1.0 and below suffers from an arbitrary file deletion via path traversal vulnerability in Admin Panel.
- CVE-2022-0142Visual Form Builder < 3.0.6 - CSV InjectionVisual Form Builder
- CVE-2022-0141Visual Form Builder < 3.0.8 - Entries Deletion/Restoration via CSRFVisual Form Builder
- CVE-2022-0140Visual Form Builder < 3.0.6 - Unauthenticated Information DisclosureVisual Form Builder
- CVE-2022-24247RiteCMS version 3.1.0 and below suffers from an arbitrary file overwrite via path traversal vulnerability in Admin Panel.
- CVE-2022-28663A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.2).Siemens Simcenter Femap
- CVE-2022-28662A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.2).Siemens Simcenter Femap
- CVE-2022-28661A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.2).Siemens Simcenter Femap
- CVE-2022-28329A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0)…Siemens SCALANCE W1788-1 M12 · Siemens SCALANCE W1788-2… +2
- CVE-2022-28328A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0)…Siemens SCALANCE W1788-1 M12 · Siemens SCALANCE W1788-2… +2
- CVE-2022-27481A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0)…Siemens SCALANCE W1788-1 M12 · Siemens SCALANCE W1788-2… +2
- CVE-2022-27480A vulnerability has been identified in SICAM A8000 CP-8031 (All versions < V4.80), SICAM A8000 CP-8050 (All versions < V4.80).Siemens SICAM A8000 CP-8031 · Siemens SICAM A8000 CP-8050
- CVE-2022-27241A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.31), Mendix Applications using Mendix 8…Siemens Mendix Applications using Mendix
- CVE-2022-27194A vulnerability has been identified in SIMATIC PCS neo (Administration Console) (All versions < V3.1 SP1), SINETPLAN (All versions), TIA…Siemens SIMATIC PCS neo · Siemens SINETPLAN +1
- CVE-2022-26380A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE…Siemens SCALANCE X302-7 EEC · Siemens SCALANCE X304-2FE +18
- CVE-2022-26335A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE…Siemens SCALANCE X302-7 EEC · Siemens SCALANCE X304-2FE +18
- CVE-2022-26334A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE…Siemens SCALANCE X302-7 EEC · Siemens SCALANCE X304-2FE +18
- CVE-2022-25756A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE…Siemens SCALANCE X302-7 EEC · Siemens SCALANCE X304-2FE +18
- CVE-2022-25755A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE…Siemens SCALANCE X302-7 EEC · Siemens SCALANCE X304-2FE +18
- CVE-2022-25754A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE…Siemens SCALANCE X302-7 EEC · Siemens SCALANCE X304-2FE +18
- CVE-2022-25753A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE…Siemens SCALANCE X302-7 EEC · Siemens SCALANCE X304-2FE +18
- CVE-2022-25752A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE…Siemens SCALANCE X302-7 EEC · Siemens SCALANCE X304-2FE +18
- CVE-2022-25751A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE…Siemens SCALANCE X302-7 EEC · Siemens SCALANCE X304-2FE +18
- CVE-2022-25650A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.27), Mendix Applications using Mendix 8…Siemens Mendix Applications using Mendix
- CVE-2022-23450A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All…Siemens SIMATIC Energy Manager Basic · Siemens SIMATIC Ener…
- CVE-2022-23449A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All…Siemens SIMATIC Energy Manager Basic · Siemens SIMATIC Ener…
- CVE-2022-23448A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All…Siemens SIMATIC Energy Manager Basic · Siemens SIMATIC Ener…
- CVE-2021-42029A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) V15 (All versions), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16…Siemens SIMATIC STEP 7 (TIA Portal)
- CVE-2022-29080The npm-dependency-versions package through 0.3.0 for Node.js allows command injection if an attacker is able to call dependencyVersions…npm-dependency-versions
- CVE-2022-24765Uncontrolled search for the Git directory in Git for Windowsgit-for-windows git · git
- CVE-2022-25622The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the…Siemens SIMATIC CFU DIQ · Siemens SIMATIC CFU PA +70
- CVE-2022-27140An arbitrary file upload vulnerability in the file upload module of express-fileupload 1.3.1 allows attackers to execute arbitrary code…
- CVE-2022-27416Tcpreplay v4.4.1 was discovered to contain a double-free via __interceptor_free.
- CVE-2022-27418Tcpreplay v4.4.1 has a heap-based buffer overflow in do_checksum_math at /tcpedit/checksum.c.
- CVE-2022-28346An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4.django
- CVE-2022-28347A SQL injection issue was discovered in QuerySet.explain() in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4.django
- CVE-2022-29036Jenkins Credentials Plugin 1111.v35a_307992395 and earlier, except 1087.1089.v2f1b_9a_b_040e4, 1074.1076.v39c30cecb_0e2, and 2.6.1.1, does…Jenkins project Jenkins Credentials Plugin · org.jenkins-ci…
- CVE-2022-29045Jenkins promoted builds Plugin 873.v6149db_d64130 and earlier, except 3.10.1, does not escape the name and description of Promoted Build…Jenkins project Jenkins promoted builds Plugin · org.jenkin…
- CVE-2022-29049Jenkins promoted builds Plugin 873.v6149db_d64130 and earlier, except 3.10.1, does not validate the names of promotions defined in Job…Jenkins project Jenkins promoted builds Plugin · org.jenkin…