Skip to content
OpenAdvisories

Archive

3 April 2022

Vulnerabilities first published on this day (UTC), newest first.

← March 2022 2022 / April /3 May 2022 →
  1. 1104
  2. 24
  3. 325
  4. 4107
  5. 5122
  6. 659
  7. 746
  8. 859
  9. 97
  10. 1039
  11. 11189
  12. 12166
  13. 1351
  14. 14110
  15. 15234
  16. 165
  17. 172
  18. 1898
  19. 19131
  20. 2044
  21. 21106
  22. 2248
  23. 231
  24. 244
  25. 2579
  26. 2636
  27. 2764
  28. 2860
  29. 2952
  30. 306
All Critical High Medium Low Exploited only Public exploit

25 results · Feed

  • Unscored —
    CVE-2022-27249

    An unrestricted file upload vulnerability in IdeaRE RefTree before 2021.09.17 allows remote authenticated users to exec…

  • Unscored —
    CVE-2022-27248

    A directory traversal vulnerability in IdeaRE RefTree before 2021.09.17 allows remote authenticated users to download a…

  • Unscored —
    CVE-2022-26530

    swaylock before 1.6 allows attackers to trigger a crash and achieve unlocked access to a Wayland compositor.

    swaylock swaylock swaylock Debian Ubuntu Alpine
  • Unscored —
    CVE-2022-26233 Scanner template EPSS 15%

    Barco Control Room Management through Suite 2.9 Build 0275 was discovered to be vulnerable to directory traversal, allo…

  • Unscored —
    CVE-2021-30066

    On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon…

  • High 7.5
    CVE-2021-30065

    On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon…

  • Unscored —
    CVE-2021-30064

    On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon…

  • Unscored —
    CVE-2021-30063

    On Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon Security Appliance, craft…

  • Unscored —
    CVE-2021-30062

    On Schneider Electric ConneXium Tofino OPCLSM TCSEFM0000 before 03.23 and Belden Tofino Xenon Security Appliance, craft…

  • Unscored —
    CVE-2021-30061

    On Schneider Electric ConneXium Tofino Firewall TCSEFEA23F3F22 before 03.23, TCSEFEA23F3F20/21, and Belden Tofino Xenon…

  • High 8.8
    CVE-2022-28391

    BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's…

    busybox busybox busybox Azure Linux Alpine Wolfi
  • Medium 5.5
    CVE-2022-28388

    usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c in the Linux kernel through 5.17.1 has a double free.

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2022-28389

    mcba_usb_start_xmit in drivers/net/can/usb/mcba_usb.c in the Linux kernel through 5.17.1 has a double free.

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2022-28390

    ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  • Medium 4.3
    CVE-2022-0406

    Improper Authorization in janeczku/calibre-web

    Improper Authorization in GitHub repository janeczku/calibre-web prior to 0.6.16.

    janeczku janeczku/calibre-web
  • Unscored —
    CVE-2022-28381 Public exploit EPSS 70%

    Mediaserver.exe in ALLMediaServer 1.6 has a stack-based buffer overflow that allows remote attackers to execute arbitra…

  • Medium 4.3
    CVE-2022-0405

    Improper Access Control in janeczku/calibre-web

    Improper Access Control in GitHub repository janeczku/calibre-web prior to 0.6.16.

    janeczku janeczku/calibre-web
  • Unscored —
    CVE-2022-28380

    The rc-httpd component through 2022-03-31 for 9front (Plan 9 fork) allows ..%2f directory traversal if serve-static is …

  • Medium 6.8
    CVE-2022-28379 EPSS 71%

    jc21.com Nginx Proxy Manager before 2.9.17 allows XSS during item deletion.

  • Medium 6.1
    CVE-2022-28378

    Cross-site Scripting in craftcms/cms

    Craft CMS before 3.7.29 allows XSS.

    craftcms/cms Packagist
  • Medium 6.3
    CVE-2022-1211

    tildearrow Furnace FUR to VGM Converter stack-based overflow

    A vulnerability classified as critical has been found in tildearrow Furnace dev73. This affects the FUR to VGM converter in console mode which causes stack-based overflows and crashes. It is possible to initiate the attack remotely but it requires user-intera…

    tildearrow furnace
  • Low 3.5
    CVE-2022-0088 Public exploit

    Cross-Site Request Forgery (CSRF) in yourls/yourls

    Cross-Site Request Forgery (CSRF) in GitHub repository yourls/yourls prior to 1.8.3.

    YOURLS yourls/yourls yourls/yourls Packagist
  • Unscored —
    CVE-2022-28376

    Verizon 5G Home LVSKIHP outside devices through 2022-02-15 allow anyone (knowing the device's serial number) to access …

  • Critical 9.8
    CVE-2022-28368 Public exploit EPSS 84%

    Remote code injection in dompdf/dompdf

    Dompdf 1.2.1 allows remote code execution via a .php file in the src:url field of an @font-face Cascading Style Sheets (CSS) statement (within an HTML input file).

    dompdf/dompdf Packagist
  • Medium 4.3
    CVE-2022-1210

    LibTIFF tiff2ps resource consumption

    A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Handler of tiff2ps. Opening a malicious file leads to a denial of service. The attack can be launched remotely but requires user interaction.…

    tiff libtiff jbigkit Debian Ubuntu Azure Linux