CVEs published April 15, 2022
234 CVEs were published on April 15, 2022: 5 critical, 106 high. 2 are now in CISA KEV.
- Published
- 234
- Critical
- 5
- High
- 106
- Medium
- 55
- Low
- 1
- Unrated
- 67
- Now in CISA KEV
- 2
- Fix available
- 123
Most affected products
- Microsoft Windows
- 69
- Microsoft Windows Server
- 25
- Cisco IOS
- 13
- Cisco IOS XE Software
- 10
- Cisco SD-WAN vManage
- 3
- F-Secure Mobile Security
- 3
- Microsoft Azure Site Recovery VMWare to Azure
- 3
- Cisco IOS ROMMON Software
- 2
- Cisco IOS XR Software
- 2
- Jeff Starr Simple Ajax Chat
- 2
Critical 5
- CVE-2022-26809Remote Procedure Call Runtime Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-24497Windows Network File System Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-24491Windows Network File System Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-1231XSS via Embedded SVG in SVG Diagram Format in plantuml/plantumlplantuml/plantuml
- CVE-2022-20695Cisco Wireless LAN Controller Management Interface Authentication Bypass VulnerabilityCisco Wireless LAN Controller
High 106
- CVE-2022-1365Exposure of Private Personal Information to an Unauthorized Actor in lquixada/cross-fetchlquixada/cross-fetch
- CVE-2022-24279Prototype Pollutionmadlib-object-utils
- CVE-2022-26924YARP Denial of Service VulnerabilityMicrosoft YARP · Yarp.ReverseProxy
- CVE-2022-26921Visual Studio Code Elevation of Privilege VulnerabilityMicrosoft Visual Studio Code
- CVE-2022-26919Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-26918Windows Fax Compose Form Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-26917Windows Fax Compose Form Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-26916Windows Fax Compose Form Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-26915Windows Secure Channel Denial of Service VulnerabilityMicrosoft Windows
- CVE-2022-26914Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-26904Windows User Profile Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-26903Windows Graphics Component Remote Code Execution VulnerabilityMicrosoft Windows · Microsoft Excel for Android +5
- CVE-2022-26901Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office 2019 for Mac · Microsoft Office Online… +5
- CVE-2022-26898Azure Site Recovery Remote Code Execution VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-26832.NET Framework Denial of Service VulnerabilityMicrosoft .NET Framework 3.5 AND · Microsoft .NET Framework
- CVE-2022-26831Windows Lightweight Directory Access Protocol (LDAP) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2022-26830DiskUsage.exe Remote Code Execution VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2022-26828Windows Bluetooth Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-26827Windows File Server Resource Management Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-26826Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-26825Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2022-26824Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2022-26823Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2022-26815Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2022-26813Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2022-26812Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2022-26811Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2022-26810Windows File Server Resource Management Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-26808Windows File Explorer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-26807Windows Work Folder Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-26803Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-26802Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-26801Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-26798Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-26797Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-26796Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-26795Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-26794Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-26793Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-26792Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-26791Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-26790Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-26789Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-26788PowerShell Elevation of Privilege VulnerabilityMicrosoft Windows · Microsoft PowerShell +1
- CVE-2022-26787Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-26786Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-24550Windows Telephony Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-24549Windows AppX Package Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-24547Windows Digital Media Receiver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-24546Windows DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-24545Windows Kerberos Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-24544Windows Kerberos Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-24543Windows Upgrade Assistant Remote Code Execution VulnerabilityMicrosoft Windows Upgrade Assistant
- CVE-2022-24542Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-24541Windows Server Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-24540Windows ALPC Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-24539Windows Hyper-V Shared Virtual Hard Disks Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2022-24537Windows Hyper-V Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-24536Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2022-24534Win32 Stream Enumeration Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-24533Remote Desktop Protocol Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-24532HEVC Video Extensions Remote Code Execution VulnerabilityMicrosoft HEVC Video Extension · Microsoft HEVC Video Exten…
- CVE-2022-24530Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-24528Remote Procedure Call Runtime Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-24527Microsoft Endpoint Configuration Manager Elevation of Privilege VulnerabilityMicrosoft Endpoint Configuration Manager
- CVE-2022-24521Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-24513Visual Studio Elevation of Privilege VulnerabilityMicrosoft Visual Studio
- CVE-2022-24500Windows SMB Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-24499Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-24496Windows Local Security Authority (LSA) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-24495Windows Direct Show Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-24494Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-24492Remote Procedure Call Runtime Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-24490Windows Hyper-V Shared Virtual Hard Disks Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2022-24489Cluster Client Failover (CCF) Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2022-24488Windows Desktop Bridge Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-24487Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-24486Windows Kerberos Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-24485Win32 File Enumeration Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-24482Windows ALPC Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-24481Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-24479Connected User Experiences and Telemetry Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-24474Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2022-24473Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office 2019 for Mac · Microsoft 365 Apps for E… +2
- CVE-2022-24472Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2022-23259Microsoft Dynamics 365 On-Premises Remote Code Execution VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2022-23257Windows Hyper-V Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-22009Windows Hyper-V Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-22008Windows Hyper-V Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-21983Win32 Stream Enumeration Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2022-24857Multi factor authentication bypass in django-mfa3xi django-mfa3 · django-mfa3
- CVE-2022-24851Stored XSS and path traversal in LDAPAccountManager/lamLDAPAccountManager lam
- CVE-2021-36205Metasys session tokenJohnson Controls Metasys
- CVE-2022-21159A denial of service vulnerability exists in the parseNormalModeParameters functionality of MZ Automation GmbH libiec61850 1.5.0.MZ Automation libiec61850
- CVE-2022-20739Cisco SD-WAN vManage Software Privilege Escalation VulnerabilityCisco SD-WAN vManage
- CVE-2022-20761Cisco 1000 Series Connected Grid Router Integrated Wireless Access Point Denial of Service VulnerabilityCisco IOS
- CVE-2022-20622Cisco Embedded Wireless Controller with Catalyst Access Points IP Flood Denial of Service VulnerabilityCisco Aironet Access Point Software
- CVE-2022-20678Cisco IOS XE Software AppNav-XE Denial of Service VulnerabilityCisco IOS XE Software
- CVE-2022-20681Cisco IOS XE Software for Cisco Catalyst 9000 Family Switches and Catalyst 9000 Family Wireless Controllers Privilege Escalation VulnerabilityCisco IOS XE Software
- CVE-2022-20682Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service VulnerabilityCisco IOS XE Software
- CVE-2022-20683Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Application Visibility and Control Denial of Service VulnerabilityCisco IOS XE Software
- CVE-2022-20684Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Trap Denial of Service VulnerabilityCisco IOS XE Software
- CVE-2022-20692Cisco IOS XE Software NETCONF Over SSH Denial of Service VulnerabilityCisco IOS XE Software
- CVE-2022-20697Cisco IOS and IOS XE Software Web Services Denial of Service VulnerabilityCisco IOS
- CVE-2022-20714Cisco IOS XR Software for ASR 9000 Series Routers Lightspeed-Plus Line Cards Denial of Service VulnerabilityCisco IOS XR Software
- CVE-2022-20716Cisco SD-WAN Solution Improper Access Control VulnerabilityCisco SD-WAN Solution
Medium, low and unrated 123
- CVE-2022-29287Kentico CMS before 13.0.66 has an Insecure Direct Object Reference vulnerability.
- CVE-2022-29020ForestBlog through 2022-02-16 allows admin/profile/save userAvatar XSS during addition of a user avatar.
- CVE-2022-29281Notable before 1.9.0-beta.8 doesn't effectively prevent the opening of executable files when clicking on a link.
- CVE-2022-290727-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is dragged to the Help>C
- CVE-2022-27426A Server-Side Request Forgery (SSRF) in Chamilo LMS v1.11.13 allows attackers to enumerate the internal network and execute arbitrary system
- CVE-2022-27425Chamilo LMS v1.11.13 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /blog/blog.php.
- CVE-2022-27423Chamilo LMS v1.11.13 was discovered to contain a SQL injection vulnerability via the blog_id parameter at /blog/blog.php.
- CVE-2022-27421Chamilo LMS v1.11.13 lacks validation on the user modification form, allowing attackers to escalate privileges to Platform Admin.
- CVE-2022-27422A reflected cross-site scripting (XSS) vulnerability in Chamilo LMS v1.11.13 allows attackers to execute arbitrary web scripts or HTML via u
- CVE-2022-26920Windows Graphics Component Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-26911Skype for Business Information Disclosure VulnerabilityMicrosoft Lync Server 2013 CU10 · Microsoft Skype for Bu… +1
- CVE-2022-26910Skype for Business and Lync Spoofing VulnerabilityMicrosoft Skype for Business Server 2015 CU12 · Microsoft S…
- CVE-2022-26907Azure SDK for .NET Information Disclosure VulnerabilityMicrosoft Azure SDK for .Net · Microsoft.Rest.ClientRuntime
- CVE-2022-26897Azure Site Recovery Information Disclosure VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-26896Azure Site Recovery Information Disclosure VulnerabilityMicrosoft Azure Site Recovery VMWare to Azure
- CVE-2022-26829Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2022-26822Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2022-26821Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2022-26820Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2022-26819Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2022-26818Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2022-26817Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2022-26816Windows DNS Server Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2022-26814Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2022-26785Windows Hyper-V Shared Virtual Hard Disks Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2022-26784Windows Cluster Shared Volume (CSV) Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2022-26783Windows Hyper-V Shared Virtual Hard Disks Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2022-24548Microsoft Defender Denial of Service VulnerabilityMicrosoft Malware Protection Engine
- CVE-2022-24538Windows Cluster Shared Volume (CSV) Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2022-24498Windows iSCSI Target Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-24493Microsoft Local Security Authority (LSA) Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-24484Windows Cluster Shared Volume (CSV) Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2022-24483Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2022-23292Microsoft Power BI Spoofing VulnerabilityMicrosoft On-Premises Data Gateway
- CVE-2022-23268Windows Hyper-V Denial of Service VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2022-27048A vulnerability has been discovered in Moxa MGate which allows an attacker to perform a man-in-the-middle (MITM) attack on the device.
- CVE-2022-28113An issue in upload.csp of FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows attackers to write files and reset the user passwords without hav
- CVE-2022-27158pearweb < 1.32 suffers from Deserialization of Untrusted Data.
- CVE-2021-44507An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base).
- CVE-2022-27157pearweb < 1.32 is suffers from a Weak Password Recovery Mechanism via include/users/passwordmanage.php.
- CVE-2021-44510An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base).
- CVE-2021-44509An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base).
- CVE-2021-44508An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base).
- CVE-2021-44506An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base).
- CVE-2022-27257A PHP Local File Inclusion vulneraility in the default Redbasic theme for Hubzilla before version 7.2 allows remote attackers to include arb
- CVE-2021-44505An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base).
- CVE-2021-44504An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base).
- CVE-2021-44503An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base).
- CVE-2021-44502An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base).
- CVE-2021-44501An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base).
- CVE-2021-44500An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base).
- CVE-2021-44499An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base).
- CVE-2021-44498An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base).
- CVE-2021-44497An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base).
- CVE-2021-44496An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base).
- CVE-2021-44495An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000.
- CVE-2021-44494An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000.
- CVE-2021-44493An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000.
- CVE-2022-27367Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component dance_Topic.php_del.
- CVE-2022-27369Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component news_News.php_hy.
- CVE-2022-27368Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component dance_Lists.php_zhuan.
- CVE-2022-27365Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component dance_Dance.php_del.
- CVE-2022-27366Cscms Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the component dance_Dance.php_hy.
- CVE-2021-44492An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000.
- CVE-2021-44491An issue was discovered in YottaDB through r1.32 and V7.0-000.
- CVE-2021-44490An issue was discovered in YottaDB through r1.32 and V7.0-000.
- CVE-2021-44489An issue was discovered in YottaDB through r1.32 and V7.0-000.
- CVE-2021-44488An issue was discovered in YottaDB through r1.32 and V7.0-000.
- CVE-2021-44487An issue was discovered in YottaDB through r1.32 and V7.0-000.
- CVE-2021-44486An issue was discovered in YottaDB through r1.32 and V7.0-000.
- CVE-2021-44485An issue was discovered in YottaDB through r1.32 and V7.0-000.
- CVE-2021-44484An issue was discovered in YottaDB through r1.32 and V7.0-000.
- CVE-2021-44483An issue was discovered in YottaDB through r1.32 and V7.0-000.
- CVE-2021-44482An issue was discovered in YottaDB through r1.32 and V7.0-000.
- CVE-2021-44481An issue was discovered in YottaDB through r1.32 and V7.0-000.
- CVE-2022-27852WordPress KB Support plugin <= 1.5.5 - Multiple Unauth. Stored Cross-Site Scripting (XSS) vulnerabilitiesWPChill Media Labs L.L.C KB Support
- CVE-2021-36828WordPress WP Maintenance plugin <= 6.0.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilityFlorent Maillefaud WP Maintenance
- CVE-2022-27851WordPress Use Any Font plugin <= 6.1.7 - Cross-Site Request Forgery (CSRF) vulnerabilityDnesscarkey Use Any Font | Custom Font Uploader
- CVE-2022-27850WordPress Simple Ajax Chat plugin <= 20220115 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilityJeff Starr Simple Ajax Chat
- CVE-2022-27849WordPress Simple Ajax Chat plugin <= 20220115 - Sensitive Information Disclosure vulnerabilityJeff Starr Simple Ajax Chat
- CVE-2021-42230Seowon 130-SLC router all versions as of 2021-09-15 is vulnerable to Remote Code Execution via the queriesCnt parameter.
- CVE-2022-27258Multiple Cross-Site Scripting (XSS) vulnerabilities in Hubzilla 7.0.3 and earlier allows remote attacker to include arbitrary web script or
- CVE-2022-26594Multiple cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.3.5 through 7.4.0, and Liferay DXP 7.3 before service pack 3 allow rcom.liferay:com.liferay.dynamic.data.mapping.form.field.typ…
- CVE-2022-28109Selenium Selenium Grid (formerly Selenium Standalone Server) Fixed in 4.0.0-alpha-7 is affected by: DNS rebinding.
- CVE-2022-23865Nyron 1.0 is affected by a SQL injection vulnerability through Nyron/Library/Catalog/winlibsrch.aspx.
- CVE-2022-20720Cisco IOx Application Hosting Environment VulnerabilitiesCisco IOS
- CVE-2022-20721Cisco IOx Application Hosting Environment VulnerabilitiesCisco IOS
- CVE-2022-20722Cisco IOx Application Hosting Environment VulnerabilitiesCisco IOS
- CVE-2022-20723Cisco IOx Application Hosting Environment VulnerabilitiesCisco IOS
- CVE-2022-20724Cisco IOx Application Hosting Environment VulnerabilitiesCisco IOS
- CVE-2022-20725Cisco IOx Application Hosting Environment VulnerabilitiesCisco IOS
- CVE-2022-20726Cisco IOx Application Hosting Environment VulnerabilitiesCisco IOS
- CVE-2022-20727Cisco IOx Application Hosting Environment VulnerabilitiesCisco IOS
- CVE-2022-20731Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches VulnerabilitiesCisco IOS ROMMON Software
- CVE-2022-20735Cisco SD-WAN vManage Software Cross-Site Request Forgery VulnerabilityCisco SD-WAN vManage
- CVE-2022-20747Cisco SD-WAN vManage Software Information Disclosure VulnerabilityCisco SD-WAN vManage
- CVE-2022-20758Cisco IOS XR Software Border Gateway Protocol Ethernet VPN Denial of Service VulnerabilityCisco IOS XR Software
- CVE-2022-20661Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches VulnerabilitiesCisco IOS ROMMON Software
- CVE-2022-20676Cisco IOS XE Software Tool Command Language Privilege Escalation VulnerabilityCisco IOS XE Software
- CVE-2022-20677Cisco IOx Application Hosting Environment VulnerabilitiesCisco IOS
- CVE-2022-20679Cisco IOS XE Software IPSec Denial of Service VulnerabilityCisco IOS XE Software
- CVE-2022-20693Cisco IOS XE Software Web UI API Injection VulnerabilityCisco IOS XE Software
- CVE-2022-20694Cisco IOS XE Software Border Gateway Protocol Resource Public Key Infrastructure Denial of Service VulnerabilityCisco IOS XE Software
- CVE-2022-20717Cisco SD-WAN vEdge Routers Denial of Service VulnerabilityCisco SD-WAN vEdge router
- CVE-2022-20718Cisco IOx Application Hosting Environment VulnerabilitiesCisco IOS
- CVE-2022-20719Cisco IOx Application Hosting Environment VulnerabilitiesCisco IOS
- CVE-2022-27043Yearning versions 2.3.1 and 2.3.2 Interstellar GA and 2.3.4 - 2.3.6 Neptune is vulnerable to Directory Traversal.
- CVE-2022-28049NGINX NJS 0.7.2 was discovered to contain a NULL pointer dereference via the component njs_vmcode_array at /src/njs_vmcode.c.
- CVE-2022-28048STB v2.27 was discovered to contain an integer shift of invalid size in the component stbi__jpeg_decode_block_prog_ac.
- CVE-2022-28044Irzip v0.640 was discovered to contain a heap memory corruption via the component lrzip.c:initialise_control.
- CVE-2022-27474SuiteCRM v7.11.23 was discovered to allow remote code execution via a crafted payload injected into the FirstName text field.
- CVE-2022-28869Address Bar Spoofing Vulnerability in F-Secure SAFE Browser for AndroidF-Secure Mobile Security
- CVE-2022-28868Address Bar Spoofing Vulnerability in F-Secure SAFE Browser for AndroidF-Secure Mobile Security
- CVE-2022-28870Address Bar Spoofing Vulnerability in F-Secure SAFE Browser for AndroidF-Secure Mobile Security
- CVE-2022-28345The Signal app before 5.34 for iOS allows URI spoofing via RTLO injection.
- CVE-2021-40386Kaseya Unitrends Client/Agent through 10.5,5 allows remote attackers to execute arbitrary code.
- CVE-2022-27188OS command injection vulnerability exists in CENTUM VP R4.01.00 to R4.03.00, CENTUM VP Small R4.01.00 to R4.03.00, CENTUM VP Basic R4.01.00 Yokogawa Electric CENTUM VP series with VP6E5150(Graphic Bu…
- CVE-2022-26034Improper authentication vulnerability in the communication protocol provided by AD (Automation Design) server of CENTUM VP R6.01.10 to R6.09Yokogawa Electric CENTUM VP series with VP6E5000(AD Suite E…
- CVE-2022-26498An issue was discovered in Asterisk through 19.x.
- CVE-2022-26499An SSRF issue was discovered in Asterisk through 19.x.
- CVE-2022-26651An issue was discovered in Asterisk through 19.x and Certified Asterisk through 16.8-cert13.
- CVE-2022-28041stb_image.h v2.27 was discovered to contain an integer overflow via the function stbi__jpeg_decode_block_prog_dc.
- CVE-2022-28042stb_image.h v2.27 was discovered to contain an heap-based use-after-free via the function stbi__jpeg_huff_decode.