CVEs published April 18, 2022
98 CVEs were published on April 18, 2022: 39 critical, 6 high. 2 are now in CISA KEV.
- Published
- 98
- Critical
- 39
- High
- 6
- Medium
- 10
- Low
- 1
- Unrated
- 42
- Now in CISA KEV
- 2
- Fix available
- 21
Most affected products
- CGAL Project libcgal
- 38
- opensc
- 5
- Eaton Intelligent Power Manager Infrastructure
- 3
- AccessPress Themes Access Demo Importer
- 2
- Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, Aut…
- 2
- Easy Digital Downloads – Simple eCommerce for Selling Digit…
- 2
- OSIsoft PI Vision
- 2
- 389-ds-base
- 1
- Ad Injection
- 1
- ansible
- 1
Critical 39
- CVE-2020-35632Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-35631Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-35630Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-35629Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-28635Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-28634Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-28633Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-28632Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-28631Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-28630Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-28629Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-28628Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-28627Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-28626Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-28625Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-28624Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-28623Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-28622Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-28621Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-28620Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-28619Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-28618Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-28617Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-28616Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-28615Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-28614Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-28613Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-28612Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-28611Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-28610Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-28609Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-28608Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-28607Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-28606Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-28605Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-28604Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-28603Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2020-28602Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1.CGAL Project libcgal
- CVE-2022-29464Certain WSO2 products allow unrestricted file upload with resultant remote code execution.
High 6
- CVE-2022-24863Denial of service in http-swaggerswaggo http-swagger · github.com/swaggo/http-swagger
- CVE-2020-25163OSIsoft PI Vision Cross-site ScriptingOSIsoft PI Vision
- CVE-2022-23976WordPress Access Demo Importer plugin <= 1.0.7 - Cross-Site Request Forgery (CSRF) vulnerability leading to Data Reset (Posts / Pages / Media)AccessPress Themes Access Demo Importer
- CVE-2020-6099An exploitable code execution vulnerability exists in the file format parsing functionality of Graphisoft BIMx Desktop Viewer 2019.2.2328.Graphisoft BIMx Desktop Viewer
- CVE-2020-13567Multiple SQL injection vulnerabilities exist in phpGACL 3.3.7.OpenEMR · phpGACL
- CVE-2022-29458ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the termi
Medium, low and unrated 53
- CVE-2022-24841Improper Authorization in github.com/fleetdm/fleetfleetdm fleet
- CVE-2022-29457Zoho ManageEngine ADSelfService Plus before 6121, ADAuditPlus 7060, Exchange Reporter Plus 5701, and ADManagerPlus 7131 allow NTLM Hash disc
- CVE-2022-1112Autolinks <= 1.0.1 - Stored Cross-Site Scripting via CSRFAutolinks
- CVE-2022-1091Safe SVG < 1.9.10 - SVG Sanitisation BypassSafe SVG · darylldoyle/safe-svg
- CVE-2022-1090Good & Bad Comments <= 1.0.0 - Admin+ Stored Cross-Site ScriptingGood & Bad comments
- CVE-2022-1088Page Security & Membership <= 1.5.15 - Admin+ Stored Cross-Site ScriptingPage Security & Membership
- CVE-2022-1063Thank Me Later <= 3.3.4 - Admin+ Stored Cross-Site ScriptingThank Me Later
- CVE-2022-1054RSVP and Event Management < 2.7.8 - Unauthenticated Entries ExportRSVP and Event Management Plugin
- CVE-2022-1037EXMAGE < 1.0.7 - Admin+ Blind SSRFEXMAGE – WordPress Image Links
- CVE-2022-1020Woo Product Table < 3.1.2 - Unauthenticated Arbitrary Function CallProduct Table for WooCommerce
- CVE-2022-1001WP Downgrade < 1.2.3 - Admin+ Stored Cross-Site ScriptingWP Downgrade | Specific Core Version
- CVE-2022-0994Hummingbird < 3.3.2 - Admin+ Stored Cross-Site ScriptingHummingbird – Optimize Speed, Enable Cache, Minify CSS & De…
- CVE-2022-0879Caldera Forms < 1.9.7 - Reflected Cross-Site ScriptingCaldera Forms – More Than Contact Forms
- CVE-2022-0785Daily Prayer Time < 2022.03.01 - Unauthenticated SQLiDaily Prayer Time
- CVE-2022-0780SearchIQ < 3.9 - Unauthenticated Stored XSSSearchIQ – The Search Solution
- CVE-2022-0765Loco Translate < 2.6.1 - Authenticated Stored Cross-Site ScriptingLoco Translate
- CVE-2022-0737Text Hover < 4.2 - Admin+ Stored Cross-Site ScriptingText Hover
- CVE-2022-0707Easy Digital Downloads < 2.11.6 - Arbitrary Payment Note Insertion via CSRFEasy Digital Downloads – Simple eCommerce for Selling Digit…
- CVE-2022-0706Easy Digital Downloads < 2.11.6 - Admin+ Stored Cross-Site ScriptingEasy Digital Downloads – Simple eCommerce for Selling Digit…
- CVE-2022-0661Ad Injection <= 1.2.0.19 - Admin+ Stored Cross-Site Scripting & RCEAd Injection
- CVE-2021-25120Easy Social Feed < 6.2.7 - Reflected Cross-Site ScriptingEasy Social Feed Pro · Easy Social Feed – Social Photos Gal…
- CVE-2020-25167OSIsoft PI Vision Incorrect AuthorizationOSIsoft PI Vision
- CVE-2022-25226ThinVNC version 1.0b1 allows an unauthenticated user to bypass the authentication process via 'http://thin-vnc:8080/cmd?cmd=connect' by obtaThinVNC
- CVE-2011-4917In the Linux kernel through 3.1 there is an information disclosure issue via /proc/stat.Linux kernel
- CVE-2021-42778A heap double free issue was found in Opensc before version 0.22.0 in sc_pkcs15_free_tokeninfo.opensc
- CVE-2011-1762A flaw exists in Wordpress related to the 'wp-admin/press-this.php 'script improperly checking user permissions when publishing posts.wordpress
- CVE-2021-3503A flaw was found in Wildfly where insufficient RBAC restrictions may lead to expose metrics data.wildfly · org.wildfly:wildfly-metrics
- CVE-2021-3681A flaw was found in Ansible Galaxy Collections.ansible
- CVE-2021-3624There is an integer overflow vulnerability in dcraw.dcraw
- CVE-2022-27853WordPress Contest Gallery plugin <= 13.1.0.9 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilityContest Gallery
- CVE-2022-1341An issue was discovered in in bwm-ng v0.6.2.bwm-ng
- CVE-2021-23286Security issues in Eaton Intelligent Power Manager InfrastructureEaton Intelligent Power Manager Infrastructure
- CVE-2021-23284Security issues in Eaton Intelligent Power Manager InfrastructureEaton Intelligent Power Manager Infrastructure
- CVE-2021-23285Security issues in Eaton Intelligent Power Manager InfrastructureEaton Intelligent Power Manager Infrastructure
- CVE-2022-23975WordPress Access Demo Importer plugin <= 1.0.7 - Cross-Site Request Forgery (CSRF) vulnerability leading to Arbitrary Plugin ActivationAccessPress Themes Access Demo Importer
- CVE-2022-27652A flaw was found in cri-o, where containers were incorrectly started with non-empty default permissions.cri-o · github.com/cri-o/cri-o
- CVE-2022-27530A maliciously crafted TIF or PICT file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to write beyond the allocated buffer through BAutodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, Aut…
- CVE-2022-27529A maliciously crafted PICT, BMP, PSD or TIF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 may be used to write beyond the allocated bufferAutodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, Aut…
- CVE-2022-27526A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability.Autodesk Design Review
- CVE-2022-27525A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by wrAutodesk® Design Review
- CVE-2020-13590Multiple exploitable SQL injection vulnerabilities exist in the 'entities/fields' page of the Rukovoditel Project Management App 2.7.2.Rukovoditel Project Management App
- CVE-2020-13495An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles file offsets in binary USD files.Apple macOS · Pixar OpenUSD
- CVE-2021-46122Tp-Link TL-WR840N (EU) v6.20 Firmware (0.9.1 4.17 v0001.0 Build 201124 Rel.64328n) is vulnerable to Buffer Overflow via the Password reset f
- CVE-2022-26665An Insecure Direct Object Reference issue exists in the Tyler Odyssey Portal platform before 17.1.20.
- CVE-2022-26631Automatic Question Paper Generator v1.0 contains a Time-Based Blind SQL injection vulnerability via the id GET parameter.
- CVE-2022-28810Zoho ManageEngine ADSelfService Plus before build 6122 allows a remote authenticated administrator to execute arbitrary operating OS command
- CVE-2022-27908Zoho ManageEngine OpManager before 125588 (and before 125603) is vulnerable to authenticated SQL Injection in the Inventory Reports module.
- CVE-2021-3652A flaw was found in 389-ds-base.389-ds-base
- CVE-2021-42779A heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid.opensc
- CVE-2021-42780A use after return issue was found in Opensc before version 0.22.0 in insert_pin function that could potentially crash programs using the liopensc
- CVE-2021-42781Heap buffer overflow issues were found in Opensc before version 0.22.0 in pkcs15-oberthur.c that could potentially crash programs using the opensc
- CVE-2021-42782Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could potentially crash programs using the liopensc
- CVE-2022-24859Manipulated inline images can cause Infinite Loop in PyPDF2py-pdf PyPDF2 · pypdf2