CVEs published April 9, 2022
7 CVEs were published on April 9, 2022: 0 critical, 0 high.
- Published
- 7
- Critical
- 0
- High
- 0
- Medium
- 2
- Low
- 0
- Unrated
- 5
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- School Club Application System
- 2
- Trend Micro Antivirus for Mac
- 1
Medium, low and unrated 7
- CVE-2022-1288School Club Application System cross site scriptingSchool Club Application System
- CVE-2022-1287School Club Application System resource injectionSchool Club Application System
- CVE-2022-28364Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability (XSS) in the /goform/rlmswitchr_process file para
- CVE-2022-28363Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability (XSS) in the /goform/login_process username param
- CVE-2022-26877Asana Desktop before 1.6.0 allows remote attackers to exfiltrate local files if they can trick the Asana desktop app into loading a maliciou
- CVE-2022-27883A link following vulnerability in Trend Micro Antivirus for Mac 11.5 could allow an attacker to create a specially-crafted file as a symlinkTrend Micro Antivirus for Mac
- CVE-2022-28365Reprise License Manager 14.2 is affected by an Information Disclosure vulnerability via a GET request to /goforms/rlminfo.