CVEs published April 3, 2022
25 CVEs were published on April 3, 2022: 0 critical, 2 high.
- Published
- 25
- Critical
- 0
- High
- 2
- Medium
- 6
- Low
- 1
- Unrated
- 16
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- janeczku/calibre-web
- 2
- craftcms/cms
- 1
- dompdf/dompdf
- 1
- LibTIFF
- 1
- tildearrow Furnace
- 1
- yourls/yourls
- 1
High 2
- CVE-2021-30065On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance,
- CVE-2022-28391BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compat
Medium, low and unrated 23
- CVE-2022-27249An unrestricted file upload vulnerability in IdeaRE RefTree before 2021.09.17 allows remote authenticated users to execute arbitrary code by
- CVE-2022-27248A directory traversal vulnerability in IdeaRE RefTree before 2021.09.17 allows remote authenticated users to download arbitrary .dwg files f
- CVE-2022-26530swaylock before 1.6 allows attackers to trigger a crash and achieve unlocked access to a Wayland compositor.
- CVE-2022-26233Barco Control Room Management through Suite 2.9 Build 0275 was discovered to be vulnerable to directory traversal, allowing attackers to acc
- CVE-2021-30066On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance,
- CVE-2021-30064On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance,
- CVE-2021-30063On Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon Security Appliance, crafted OPC packets can ca
- CVE-2021-30062On Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon Security Appliance, crafted OPC packets can by
- CVE-2021-30061On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon Security Appliance,
- CVE-2022-28388usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c in the Linux kernel through 5.17.1 has a double free.
- CVE-2022-28389mcba_usb_start_xmit in drivers/net/can/usb/mcba_usb.c in the Linux kernel through 5.17.1 has a double free.
- CVE-2022-28390ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.
- CVE-2022-0406Improper Authorization in janeczku/calibre-webjaneczku/calibre-web
- CVE-2022-28381Mediaserver.exe in ALLMediaServer 1.6 has a stack-based buffer overflow that allows remote attackers to execute arbitrary code via a long st
- CVE-2022-0405Improper Access Control in janeczku/calibre-webjaneczku/calibre-web
- CVE-2022-28380The rc-httpd component through 2022-03-31 for 9front (Plan 9 fork) allows ..%2f directory traversal if serve-static is used.
- CVE-2022-28379jc21.com Nginx Proxy Manager before 2.9.17 allows XSS during item deletion.
- CVE-2022-28378Craft CMS before 3.7.29 allows XSS.craftcms/cms
- CVE-2022-1211tildearrow Furnace FUR to VGM Converter stack-based overflowtildearrow Furnace
- CVE-2022-0088Cross-Site Request Forgery (CSRF) in yourls/yourlsyourls/yourls
- CVE-2022-28376Verizon 5G Home LVSKIHP outside devices through 2022-02-15 allow anyone (knowing the device's serial number) to access a CPE admin website,
- CVE-2022-1210LibTIFF tiff2ps resource consumptionLibTIFF
- CVE-2022-28368Dompdf 1.2.1 allows remote code execution via a .php file in the src:url field of an @font-face Cascading Style Sheets (CSS) statement (withdompdf/dompdf