CVEs published April 12, 2022
166 CVEs were published on April 12, 2022: 1 critical, 19 high.
- Published
- 166
- Critical
- 1
- High
- 19
- Medium
- 12
- Low
- 2
- Unrated
- 132
- Now in CISA KEV
- 0
- Fix available
- 37
Most affected products
- Android
- 18
- Dell PowerScale OneFS
- 14
- Siemens SCALANCE X302-7 EEC · Siemens SCALANCE X304-2FE +18
- 9
- SAP SE SAP 3D Visual Enterprise Viewer
- 6
- Fuji Electric Alpha5
- 5
- SAP SE SAP BusinessObjects Business Intelligence Platform
- 5
- Siemens SCALANCE W1788-1 M12 · Siemens SCALANCE W1788-2… +2
- 3
- Siemens SIMATIC Energy Manager Basic · Siemens SIMATIC Ener…
- 3
- Siemens Simcenter Femap
- 3
- Visual Form Builder
- 3
Critical 1
High 19
- CVE-2022-24767GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account.Microsoft Visual Studio
- CVE-2022-24412Dell EMC PowerScale OneFS 8.2.x - 9.3.0.x contain an improper handling of value vulnerability.Dell PowerScale OneFS
- CVE-2022-24411Dell PowerScale OneFS 8.2.2 and above contain an elevation of privilege vulnerability.Dell PowerScale OneFS
- CVE-2022-23161Dell PowerScale OneFS versions 8.2.x - 9.3.0.x contain a denial-of-service vulnerability in SmartConnect.Dell PowerScale OneFS
- CVE-2022-22562Dell PowerScale OneFS, versions 8.2.0-9.3.0, contain a improper handling of missing values exploit.Dell PowerScale OneFS
- CVE-2022-22561Dell PowerScale OneFS, versions 8.2.x-9.3.0.x, contain an improper restriction of excessive authentication attempts.Dell PowerScale OneFS
- CVE-2022-22560Dell EMC PowerScale OneFS 8.1.x - 9.1.x contain hard coded credentials.Dell PowerScale OneFS
- CVE-2022-22559Dell PowerScale OneFS, version 9.3.0, contains a use of a broken or risky cryptographic algorithm.Dell PowerScale OneFS
- CVE-2022-22549Dell PowerScale OneFS, 8.2.x-9.3.x, contains a Improper Certificate Validation.Dell PowerScale OneFS
- CVE-2022-24842Improper Privilege Management in MinIOminio
- CVE-2022-24812FGAC API Key privilege escalation in Grafanagrafana
- CVE-2022-21155Fernhill SCADA Uncontrolled Resource ConsumptionFernhill SCADA Server
- CVE-2022-24383ICSA-22-090-03 Fuji Electric Alpha5Fuji Electric Alpha5
- CVE-2022-21228ICSA-22-090-03 Fuji Electric Alpha5Fuji Electric Alpha5
- CVE-2022-21214ICSA-22-090-03 Fuji Electric Alpha5Fuji Electric Alpha5
- CVE-2022-21803Prototype Pollutionnconf
- CVE-2021-40368A vulnerability has been identified in SIMATIC S7-400 CPU 412-1 DP V7 (All versions), SIMATIC S7-400 CPU 412-2 DP V7 (All versions), SIMASiemens SIMATIC S7-400 CPU 412-1 DP · Siemens SIMATIC S… +18
- CVE-2022-1302Malformed Goose Message in LibIEC61850 may result in a denial of serviceMZ Automation libIEC61850
- CVE-2022-0436Path Traversal in gruntjs/gruntgruntjs/grunt · grunt
Medium, low and unrated 146
- CVE-2022-26589A Cross-Site Request Forgery (CSRF) in Pluck CMS v4.7.15 allows attackers to delete arbitrary pages.
- CVE-2022-26151Citrix XenMobile Server 10.12 through RP11, 10.13 through RP7, and 10.14 through RP4 allows Command Injection.
- CVE-2021-44520In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Command Injection vulnerability, leading to remote code execution wi
- CVE-2022-27419rtl_433 21.12 was discovered to contain a stack overflow in the function acurite_00275rm_decode at /devices/acurite.c.
- CVE-2022-29052Jenkins Google Compute Engine Plugin 4.3.8 and earlier stores private keys unencrypted in cloud agent config.xml files on the Jenkins controJenkins project Jenkins Google Compute Engine Plugin · org.…
- CVE-2022-29051Missing permission checks in Jenkins Publish Over FTP Plugin 1.16 and earlier allow attackers with Overall/Read permission to connect to an Jenkins project Jenkins Publish Over FTP Plugin · org.jenki…
- CVE-2022-29050A cross-site request forgery (CSRF) vulnerability in Jenkins Publish Over FTP Plugin 1.16 and earlier allows attackers to connect to an FTP Jenkins project Jenkins Publish Over FTP Plugin · org.jenki…
- CVE-2022-29048A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Plugin 2.15.3 and earlier allows attackers to connect to an attackerJenkins project Jenkins Subversion Plugin · org.jenkins-ci.…
- CVE-2022-29047Jenkins Pipeline: Shared Groovy Libraries Plugin 564.ve62a_4eb_b_e039 and earlier, except 2.21.3, allows attackers able to submit pull requeJenkins project Jenkins Pipeline: Shared Groovy Libraries P…
- CVE-2022-29046Jenkins Subversion Plugin 2.15.3 and earlier does not escape the name and description of List Subversion tags (and more) parameters on viewsJenkins project Jenkins Subversion Plugin · org.jenkins-ci.…
- CVE-2022-29044Jenkins Node and Label parameter Plugin 1.10.3 and earlier does not escape the name and description of Node and Label parameters on views diJenkins project Jenkins Node and Label parameter Plugin · o…
- CVE-2022-29043Jenkins Mask Passwords Plugin 3.0 and earlier does not escape the name and description of Non-Stored Password parameters on views displayingJenkins project Jenkins Mask Passwords Plugin · org.jenkins…
- CVE-2022-29042Jenkins Job Generator Plugin 1.22 and earlier does not escape the name and description of Generator Parameter and Generator Choice parameterJenkins project Jenkins Job Generator Plugin · org.jenkins-…
- CVE-2022-29041Jenkins Jira Plugin 3.7 and earlier, except 3.6.1, does not escape the name and description of Jira Issue and Jira Release Version parameterJenkins project Jenkins Jira Plugin · org.jenkins-ci.plugin…
- CVE-2022-29040Jenkins Git Parameter Plugin 0.9.15 and earlier does not escape the name and description of Git parameters on views displaying parameters, rJenkins project Jenkins Git Parameter Plugin · org.jenkins-…
- CVE-2022-29039Jenkins Gerrit Trigger Plugin 2.35.2 and earlier does not escape the name and description of Base64 Encoded String parameters on views displJenkins project Jenkins Gerrit Trigger Plugin · com.sonyeri…
- CVE-2022-29038Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier does not escape the name and description of Extended Choice parameteJenkins project Jenkins Extended Choice Parameter Plugin ·…
- CVE-2022-29037Jenkins CVS Plugin 2.19 and earlier does not escape the name and description of CVS Symbolic Name parameters on views displaying parameters,Jenkins project Jenkins CVS Plugin · org.jenkins-ci.plugins…
- CVE-2022-27386MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component sql/sql_class.cc.
- CVE-2022-27387MariaDB Server v10.7 and below was discovered to contain a global buffer overflow in the component decimal_bin_size, which is exploited via
- CVE-2022-27385An issue in the component Used_tables_and_const_cache::used_tables_and_const_cache_join of MariaDB Server v10.7 and below was discovered to
- CVE-2022-27384An issue in the component Item_subselect::init_expr_cache_tracker of MariaDB Server v10.6 and below was discovered to allow attackers to cau
- CVE-2022-27382MariaDB Server v10.7 and below was discovered to contain a segmentation fault via the component Item_field::used_tables/update_depend_map_fo
- CVE-2022-27383MariaDB Server v10.6 and below was discovered to contain an use-after-free in the component my_strcasecmp_8bit, which is exploited via speci
- CVE-2022-27380An issue in the component my_decimal::operator= of MariaDB Server v10.6.3 and below was discovered to allow attackers to cause a Denial of S
- CVE-2022-27381An issue in the component Field::set_default of MariaDB Server v10.6 and below was discovered to allow attackers to cause a Denial of Servic
- CVE-2022-27378An issue in the component Create_tmp_table::finalize of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial o
- CVE-2022-27379An issue in the component Arg_comparator::compare_real_fixed of MariaDB Server v10.6.2 and below was discovered to allow attackers to cause
- CVE-2022-27377MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Item_func_in::cleanup(), which is exploited vi
- CVE-2022-27376MariaDB Server v10.6.5 and below was discovered to contain an use-after-free in the component Item_args::walk_arg, which is exploited via sp
- CVE-2022-0915Logitech Sync desktop application prior to 2.4.574 - TOCTOU during installation leads to privelege escalationLogitech Sync
- CVE-2022-24413Dell PowerScale OneFS, versions 8.2.2-9.3.x, contain a time-of-check-to-time-of-use vulnerability.Dell PowerScale OneFS
- CVE-2022-23163Dell PowerScale OneFS, 8.2,x, 9.1.0.x, 9.2.1.x, and 9.3.0.x contain a denial of service vulnerability.Dell PowerScale OneFS
- CVE-2022-23160Dell PowerScale OneFS, versions 8.2.0-9.3.0, contains an Improper Handling of Insufficient Permissions vulnerability.Dell PowerScale OneFS
- CVE-2022-23159Dell PowerScale OneFS, 8.2.2 - 9.3.0.x, contain a missing release of memory after effective lifetime vulnerability.Dell PowerScale OneFS
- CVE-2022-22565Dell PowerScale OneFS, versions 9.0.0-9.3.0, contain an improper authorization of index containing sensitive information.Dell PowerScale OneFS
- CVE-2022-22550Dell PowerScale OneFS, versions 8.2.2 and above, contain a password disclosure vulnerability.Dell PowerScale OneFS
- CVE-2022-24070Apache Subversion mod_dav_svn is vulnerable to memory corruptionApache Software Foundation Apache Subversion
- CVE-2021-28544Apache Subversion SVN authz protected copyfrom paths regressionApache Software Foundation Apache Subversion
- CVE-2022-28397An arbitrary file upload vulnerability in the file upload module of Ghost CMS v4.42.0 allows attackers to execute arbitrary code via a craftghost
- CVE-2022-27952An arbitrary file upload vulnerability in the file upload module of PayloadCMS v0.15.0 allows attackers to execute arbitrary code via a crafpayload
- CVE-2022-27262An arbitrary file upload vulnerability in the file upload module of Skipper v0.9.1 allows attackers to execute arbitrary code via a crafted
- CVE-2022-27263An arbitrary file upload vulnerability in the file upload module of Strapi v4.1.5 allows attackers to execute arbitrary code via a crafted fstrapi
- CVE-2022-27261An arbitrary file write vulnerability in Express-FileUpload v1.3.1 allows attackers to upload multiple files with the same name, causing an express-fileupload
- CVE-2022-27260An arbitrary file upload vulnerability in the file upload component of ButterCMS v1.2.8 allows attackers to execute arbitrary code via a crabuttercms
- CVE-2022-27139An arbitrary file upload vulnerability in the file upload module of Ghost v4.39.0 allows attackers to execute arbitrary code via a crafted Sghost
- CVE-2021-39814In ppmp_validate_wsm of drm_fw.c, there is a possible out of bounds write due to an incorrect bounds check.Android
- CVE-2022-21202ICSA-22-090-03 Fuji Electric Alpha5Fuji Electric Alpha5
- CVE-2021-39812In TBD of TBD, there is a possible out of bounds read due to a use after free.Android
- CVE-2022-21168ICSA-22-090-03 Fuji Electric Alpha5Fuji Electric Alpha5
- CVE-2021-39809In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2021-39808In createNotificationChannelGroup of PreferencesHelper.java, there is a possible way for a service to run in foreground without user notificAndroid
- CVE-2021-39807In handleNfcStateChanged of SecureNfcEnabler.java, there is a possible way to enable NFC from the Guest account due to a missing permission Android
- CVE-2021-39804In reinit of HeifDecoderImpl.cpp, there is a possible crash due to a missing null check.Android
- CVE-2021-39805In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2021-39803In ~Impl of C2AllocatorIon.cpp, there is a possible out of bounds read due to a use after free.Android
- CVE-2021-39802In change_pte_range of mprotect.c , there is a possible way to make a shared mmap writable due to a permissions bypass.Android
- CVE-2021-39800In ion_ioctl of ion-ioctl.c, there is a possible way to leak kernel head data due to a use after free.Android
- CVE-2021-39801In ion_ioctl of ion-ioctl.c, there is a possible use after free due to improper locking.Android
- CVE-2021-39799In AttributionSource of AttributionSource.java, there is a possible permission bypass due to improper input validation.Android
- CVE-2021-39798In Bitmap_createFromParcel of Bitmap.cpp, there is a possible arbitrary code execution due to a missing bounds check.Android
- CVE-2021-39796In HarmfulAppWarningActivity of HarmfulAppWarningActivity.java, there is a possible way to trick victim to install harmful app due to a tapjAndroid
- CVE-2021-39797In several functions of of LauncherApps.java, there is a possible escalation of privilege due to a logic error in the code.Android
- CVE-2021-39794In broadcastPortInfo of AdbService.java, there is a possible way for apps to run code as the shell user, if wireless debugging is enabled, dAndroid
- CVE-2021-0694In setServiceForegroundInnerLocked of ActiveServices.java, there is a possible way for a background application to regain foreground permissAndroid
- CVE-2021-0707In dma_buf_release of dma-buf.c, there is a possible memory corruption due to a use after free.Android
- CVE-2022-23703A security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays, HPE Nimble Storage All Flash Arrays and HPE Nimble SHPE Nimble Storage Hybrid Flash Arrays; Nimble Storage All…
- CVE-2022-23702A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 Servers.HPE Superdome Flex Server; HPE Superdome Flex 280 Server
- CVE-2021-41004A remote vulnerability was discovered in Aruba Instant On 1930 Switch Series version(s): Firmware below v1.0.7.0.Aruba Instant On 1930 Switch Series
- CVE-2021-41005A remote vulnerability was discovered in Aruba Instant On 1930 Switch Series version(s): Firmware below v1.0.7.0.Aruba Instant On 1930 Switch Series
- CVE-2022-28795A vulnerability within the Avira Password Manager Browser Extensions provided a potential loophole where, if a user visited a page crafted bAvira Password Manager – Browser Extensions
- CVE-2022-28215SAP NetWeaver ABAP Server and ABAP Platform - versions 740, 750, 787, allows an unauthenticated attacker to redirect users to a malicious siSAP SE SAP NetWeaver ABAP Server and ABAP Platform
- CVE-2022-28772By overlong input values an attacker may force overwrite of the internal program stack in SAP Web Dispatcher - versions 7.53, 7.77, 7.81, 7.SAP SE SAP NetWeaver · SAP SE SAP Web Dispatcher
- CVE-2022-27669An unauthenticated user can use functions of XML Data Archiving Service of SAP NetWeaver Application Server for Java - version 7.50, to whicSAP SE SAP NetWeaver Application Server for Java
- CVE-2022-27671A CSRF token visible in the URL may possibly lead to information disclosure vulnerability.SAP SE SAP BusinessObjects Business Intelligence Platform
- CVE-2022-28773Due to an uncontrolled recursion in SAP Web Dispatcher and SAP Internet Communication Manager, the application may crash, leading to denial SAP SE SAP NetWeaver · SAP SE SAP Web Dispatcher
- CVE-2022-27657A highly privileged remote attacker, can gain unauthorized access to display contents of restricted directories by exploiting insufficient vSAP SE SAP Focused Run
- CVE-2022-28216SAP BusinessObjects Business Intelligence Platform (BI Workspace) - version 420, is susceptible to a Cross-Site Scripting attack by an unautSAP SE SAP BusinessObjects Business Intelligence Platform
- CVE-2022-28770Due to insufficient input validation, SAPUI5 library(vbm) - versions 750, 753, 754, 755, 75, allows an unauthenticated attacker to inject a SAP SE SAPUI5
- CVE-2022-28213When a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform - version 420, 430, it does not sufficiently valiSAP SE SAP BusinessObjects Business Intelligence Platform
- CVE-2022-27654When a user opens a manipulated Photoshop Document (.psd, 2d.x3d) received from untrusted sources in SAP 3D Visual Enterprise Viewer - versiSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2022-22541SAP BusinessObjects Business Intelligence Platform - versions 420, 430, may allow legitimate users to access information they shouldn't see SAP SE SAP BusinessObjects Business Intelligence Platform
- CVE-2022-27670SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users from accessing a SQL Anywhere database server SAP SE SAP SQL Anywhere Server
- CVE-2022-27655When a user opens a manipulated Universal 3D (.u3d, 3difr.x3d) received from untrusted sources in SAP 3D Visual Enterprise Viewer - version SAP SE SAP 3D Visual Enterprise Viewer
- CVE-2022-26106When a user opens a manipulated Computer Graphics Metafile (.cgm, CgmCore.dll) received from untrusted sources in SAP 3D Visual Enterprise VSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2022-26105SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution attack by an unautheSAP SE SAP NetWeaver Enterprise Portal
- CVE-2022-26108When a user opens a manipulated Picture Exchange (.pcx, 2d.x3d) received from untrusted sources in SAP 3D Visual Enterprise Viewer - versionSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2022-26109When a user opens a manipulated Portable Document Format (.pdf, PDFView.x3d) received from untrusted sources in SAP 3D Visual Enterprise VieSAP SE SAP 3D Visual Enterprise Viewer
- CVE-2022-27667Under certain conditions, SAP BusinessObjects Business Intelligence platform, Client Management Console (CMC) - version 430, allows an attacSAP SE SAP BusinessObjects Business Intelligence Platform
- CVE-2022-26107When a user opens a manipulated Jupiter Tesselation (.jt, JTReader.x3d) received from untrusted sources in SAP 3D Visual Enterprise Viewer -SAP SE SAP 3D Visual Enterprise Viewer
- CVE-2021-36914WordPress CalderaWP License Manager plugin <= 1.2.11 - Cross-Site Request Forgery (CSRF) vulnerability leading to Reflected Cross-Site Scripting (XSS)Desertsnowman, Shelob9 CalderaWP License Manager
- CVE-2021-42255AppGuard Enterprise before 6.7.100.1 creates a Temporary File in a Directory with Insecure Permissions.
- CVE-2022-27473SQL injection vulnerability in Topics Searching feature of Roothub 2.6.0 allows unauthorized attackers to execute arbitrary SQL commands via
- CVE-2022-27472SQL injection vulnerability in Topics Counting feature of Roothub 2.6.0 allows unauthorized attackers to execute arbitrary SQL commands via
- CVE-2021-31805Forced OGNL evaluation, when evaluated on raw not validated user input in tag attributes, may lead to RCE.Apache Software Foundation Apache Struts · org.apache.strut…
- CVE-2022-28036AtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_navigation.php
- CVE-2022-28035Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_blur-save.php
- CVE-2022-28034AtomCMS 2.0 is vulnerabie to SQL Injection via Atom.CMS_admin_ajax_list-sort.php
- CVE-2022-28033Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_uploads.php
- CVE-2022-28032AtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_pages.php
- CVE-2022-27165CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Plugin_manager_setstatus
- CVE-2022-27164CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Users_viewUsers
- CVE-2022-27163CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Users_editUser
- CVE-2022-27162CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Members_editUser
- CVE-2022-27161Csz Cms 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Members_viewUsers
- CVE-2021-32040Large aggregation pipelines with a specific stage can crash mongod under default configurationMongoDB Server
- CVE-2022-0878Novel attack against the Combined Charging System (CCS) in electric vehicles to remotely cause a denial of serviceCombined Charging System
- CVE-2022-24248RiteCMS version 3.1.0 and below suffers from an arbitrary file deletion via path traversal vulnerability in Admin Panel.
- CVE-2022-0142Visual Form Builder < 3.0.6 - CSV InjectionVisual Form Builder
- CVE-2022-0141Visual Form Builder < 3.0.8 - Entries Deletion/Restoration via CSRFVisual Form Builder
- CVE-2022-0140Visual Form Builder < 3.0.6 - Unauthenticated Information DisclosureVisual Form Builder
- CVE-2022-24247RiteCMS version 3.1.0 and below suffers from an arbitrary file overwrite via path traversal vulnerability in Admin Panel.
- CVE-2022-28663A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.2).Siemens Simcenter Femap
- CVE-2022-28662A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.2).Siemens Simcenter Femap
- CVE-2022-28661A vulnerability has been identified in Simcenter Femap (All versions < V2022.1.2).Siemens Simcenter Femap
- CVE-2022-28329A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0), SCALASiemens SCALANCE W1788-1 M12 · Siemens SCALANCE W1788-2… +2
- CVE-2022-28328A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0), SCALASiemens SCALANCE W1788-1 M12 · Siemens SCALANCE W1788-2… +2
- CVE-2022-27481A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0), SCALASiemens SCALANCE W1788-1 M12 · Siemens SCALANCE W1788-2… +2
- CVE-2022-27480A vulnerability has been identified in SICAM A8000 CP-8031 (All versions < V4.80), SICAM A8000 CP-8050 (All versions < V4.80).Siemens SICAM A8000 CP-8031 · Siemens SICAM A8000 CP-8050
- CVE-2022-27241A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.31), Mendix Applications using Mendix 8 (AllSiemens Mendix Applications using Mendix
- CVE-2022-27194A vulnerability has been identified in SIMATIC PCS neo (Administration Console) (All versions < V3.1 SP1), SINETPLAN (All versions), TIA PorSiemens SIMATIC PCS neo · Siemens SINETPLAN +1
- CVE-2022-26380A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE XSiemens SCALANCE X302-7 EEC · Siemens SCALANCE X304-2FE +18
- CVE-2022-26335A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE XSiemens SCALANCE X302-7 EEC · Siemens SCALANCE X304-2FE +18
- CVE-2022-26334A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE XSiemens SCALANCE X302-7 EEC · Siemens SCALANCE X304-2FE +18
- CVE-2022-25756A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE XSiemens SCALANCE X302-7 EEC · Siemens SCALANCE X304-2FE +18
- CVE-2022-25755A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE XSiemens SCALANCE X302-7 EEC · Siemens SCALANCE X304-2FE +18
- CVE-2022-25754A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE XSiemens SCALANCE X302-7 EEC · Siemens SCALANCE X304-2FE +18
- CVE-2022-25753A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE XSiemens SCALANCE X302-7 EEC · Siemens SCALANCE X304-2FE +18
- CVE-2022-25752A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE XSiemens SCALANCE X302-7 EEC · Siemens SCALANCE X304-2FE +18
- CVE-2022-25751A vulnerability has been identified in SCALANCE X302-7 EEC (230V), SCALANCE X302-7 EEC (230V, coated), SCALANCE X302-7 EEC (24V), SCALANCE XSiemens SCALANCE X302-7 EEC · Siemens SCALANCE X304-2FE +18
- CVE-2022-25650A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.27), Mendix Applications using Mendix 8 (AllSiemens Mendix Applications using Mendix
- CVE-2022-23450A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versionsSiemens SIMATIC Energy Manager Basic · Siemens SIMATIC Ener…
- CVE-2022-23449A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versionsSiemens SIMATIC Energy Manager Basic · Siemens SIMATIC Ener…
- CVE-2022-23448A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.3 Update 1), SIMATIC Energy Manager PRO (All versionsSiemens SIMATIC Energy Manager Basic · Siemens SIMATIC Ener…
- CVE-2021-42029A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) V15 (All versions), SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 USiemens SIMATIC STEP 7 (TIA Portal)
- CVE-2022-29080The npm-dependency-versions package through 0.3.0 for Node.js allows command injection if an attacker is able to call dependencyVersions witnpm-dependency-versions
- CVE-2022-24765Uncontrolled search for the Git directory in Git for Windowsgit-for-windows git
- CVE-2022-25622The PROFINET (PNIO) stack, when integrated with the Interniche IP stack, improperly handles internal resources for TCP segments where the miSiemens SIMATIC CFU DIQ · Siemens SIMATIC CFU PA +70
- CVE-2022-27140An arbitrary file upload vulnerability in the file upload module of express-fileupload 1.3.1 allows attackers to execute arbitrary code via
- CVE-2022-27416Tcpreplay v4.4.1 was discovered to contain a double-free via __interceptor_free.
- CVE-2022-27418Tcpreplay v4.4.1 has a heap-based buffer overflow in do_checksum_math at /tcpedit/checksum.c.
- CVE-2022-28346An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4.django
- CVE-2022-28347A SQL injection issue was discovered in QuerySet.explain() in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4.django
- CVE-2022-29036Jenkins Credentials Plugin 1111.v35a_307992395 and earlier, except 1087.1089.v2f1b_9a_b_040e4, 1074.1076.v39c30cecb_0e2, and 2.6.1.1, does nJenkins project Jenkins Credentials Plugin · org.jenkins-ci…
- CVE-2022-29045Jenkins promoted builds Plugin 873.v6149db_d64130 and earlier, except 3.10.1, does not escape the name and description of Promoted Build parJenkins project Jenkins promoted builds Plugin · org.jenkin…
- CVE-2022-29049Jenkins promoted builds Plugin 873.v6149db_d64130 and earlier, except 3.10.1, does not validate the names of promotions defined in Job DSL, Jenkins project Jenkins promoted builds Plugin · org.jenkin…