Skip to content
OpenAdvisories

Archive

8 April 2022

Vulnerabilities first published on this day (UTC), newest first.

← March 2022 2022 / April /8 May 2022 →
  1. 1104
  2. 24
  3. 325
  4. 4107
  5. 5122
  6. 659
  7. 746
  8. 859
  9. 97
  10. 1039
  11. 11189
  12. 12166
  13. 1351
  14. 14110
  15. 15234
  16. 165
  17. 172
  18. 1898
  19. 19131
  20. 2044
  21. 21106
  22. 2248
  23. 231
  24. 244
  25. 2579
  26. 2636
  27. 2764
  28. 2860
  29. 2952
  30. 306
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High —
    GHSA-mcq2-w56r-5w2w

    Daemon panics when processing certain blocks

    ### Impact go-ipfs nodes with versions 0.10.0, 0.11.0, 0.12.0, or 0.12.1 can crash when trying to traverse certain malformed graphs due to an issue in the go-codec-dagpb dependency. Vulnerable nodes that work with these malformed graphs may crash leading to d…

    github.com/ipld/go-ipfs Go
  • High 8.1
    CVE-2022-26854

    Dell PowerScale OneFS, versions 8.2.x-9.2.x, contain risky cryptographic algorithms. A remote unprivileged malicious at…

    Dell PowerScale OneFS
  • High 8.1
    CVE-2022-26852

    Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a predictable seed in pseudo-random number generator. A remote una…

    Dell PowerScale OneFS
  • High 8.6
    CVE-2021-36288

    Dell VNX2 for File version 8.1.21.266 and earlier, contain a path traversal vulnerability which may lead unauthenticate…

    Dell VNX2
  • High 7.3
    CVE-2021-36287

    Dell VNX2 for file version 8.1.21.266 and earlier, contain an unauthenticated remote code execution vulnerability which…

    Dell VNX2
  • High 7.5
    CVE-2022-1284

    heap-use-after-free in radareorg/radare2

    heap-use-after-free in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of inducing denial of service.

    radareorg radareorg/radare2 radare2 radare2 Ubuntu Alpine
  • High 7.8
    CVE-2021-43515

    Improper Neutralization of Formula Elements in a CSV File in Kimai 2

    CSV Injection (aka Excel Macro Injection or Formula Injection) exists in creating new timesheet in Kimai. By filling the Description field with malicious payload, it will be mistreated while exporting to a CSV file.

    kevinpapst/kimai2 Packagist
  • High 7.2
    CVE-2022-1219

    SQL injection in RecyclebinController.php in pimcore/pimcore

    SQL injection in RecyclebinController.php in GitHub repository pimcore/pimcore prior to 10.3.5. This vulnerability is capable of steal the data

    pimcore pimcore/pimcore pimcore/pimcore Packagist