Skip to content
OpenAdvisories

Archive

8 April 2022

Vulnerabilities first published on this day (UTC), newest first.

← March 2022 2022 / April /8 May 2022 →
  1. 1104
  2. 24
  3. 325
  4. 4107
  5. 5122
  6. 659
  7. 746
  8. 859
  9. 97
  10. 1039
  11. 11189
  12. 12166
  13. 1351
  14. 14110
  15. 15234
  16. 165
  17. 172
  18. 1898
  19. 19131
  20. 2044
  21. 21106
  22. 2248
  23. 231
  24. 244
  25. 2579
  26. 2636
  27. 2764
  28. 2860
  29. 2952
  30. 306
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Medium 5.5
    CVE-2022-26855

    Dell PowerScale OneFS, versions 8.2.x-9.3.0.x, contains an incorrect default permissions vulnerability. A local malicio…

    Dell PowerScale OneFS
  • Medium 6.3
    CVE-2022-24428

    Dell PowerScale OneFS, versions 8.2.x, 9.0.0.x, 9.1.0.x, 9.2.0.x, 9.2.1.x, and 9.3.0.x, contain an improper preservatio…

    Dell PowerScale OneFS
  • Medium 4.4
    CVE-2022-22563

    Dell EMC Powerscale OneFS 8.2.x - 9.2.x omit security-relevant information in /etc/master.passwd. A high-privileged use…

    Dell PowerScale OneFS
  • Medium 6.4
    CVE-2021-36293

    Dell VNX2 for File version 8.1.21.266 and earlier, contain a privilege escalation vulnerability. A local malicious admi…

    Dell VNX2
  • Medium 6.4
    CVE-2021-36290

    Dell VNX2 for File version 8.1.21.266 and earlier, contain a privilege escalation vulnerability. A local malicious admi…

    Dell VNX2
  • Medium 5.3
    CVE-2022-24820

    Unauthenticated user can list hidden document from multiple velocity templates

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A guest user without the right to view pages of the wiki can still list documents by rendering some velocity documents. The problem has been patched in XW…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-web Maven
  • Medium 5.3
    CVE-2022-24819 Scanner template

    Unauthenticated user can retrieve the list of users through uorgsuggest.vm

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A guest user without the right to view pages of the wiki can still list documents related to users of the wiki. The problem has been patched in XWiki vers…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-web-templates Maven
  • Medium 6.8
    CVE-2022-24821

    Incorrect Use of Privileged APIs in org.xwiki.platform.skin.skinx

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Simple users can create global SSX/JSX without specific rights: in theory only users with Programming Rights should be allowed to create SSX or JSX that a…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-skin-skinx Maven
  • Medium 6.6
    CVE-2022-1283

    NULL Pointer Dereference in r_bin_ne_get_entrypoints function in radareorg/radare2

    NULL Pointer Dereference in r_bin_ne_get_entrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability allows attackers to cause a denial of service (application crash).

    radareorg radareorg/radare2 radare2 radare2 Ubuntu Alpine
  • Medium 6.5
    CVE-2022-22339

    IBM Planning Analytics 2.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacke…

    IBM Planning Analytics
  • Medium 4.3
    CVE-2020-4668

    IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.3, and 6.1.1.0 is vulnerabl…

    IBM Sterling B2B Integrator