Skip to content
OpenAdvisories

Archive

13 April 2022

Vulnerabilities first published on this day (UTC), newest first.

← March 2022 2022 / April /13 May 2022 →
  1. 1104
  2. 24
  3. 325
  4. 4107
  5. 5122
  6. 659
  7. 746
  8. 859
  9. 97
  10. 1039
  11. 11189
  12. 12166
  13. 1351
  14. 14110
  15. 15234
  16. 165
  17. 172
  18. 1898
  19. 19131
  20. 2044
  21. 21106
  22. 2248
  23. 231
  24. 244
  25. 2579
  26. 2636
  27. 2764
  28. 2860
  29. 2952
  30. 306
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.2
    CVE-2022-24818 Public exploit

    Unchecked JNDI lookups in GeoTools

    GeoTools is an open source Java library that provides tools for geospatial data. The GeoTools library has a number of data sources that can perform unchecked JNDI lookups, which in turn can be used to perform class deserialization and result in arbitrary code…

    geotools geotools
  • Critical 10.0
    CVE-2022-24816 Exploited Public exploit Scanner template EPSS 100%

    Improper Control of Generation of Code in jai-ext

    JAI-EXT is an open-source project which aims to extend the Java Advanced Imaging (JAI) API. Programs allowing Jiffle script to be provided via network request can lead to a Remote Code Execution as the Jiffle script is compiled into Java code via Janino, and …

    geosolutions-it jai-ext it.geosolutions.jaiext.jiffle:jt-jiffle-language it.geosolutions.jaiext.jiffle:jt-jiffle Maven
    KEV Jun 26, 2024
  • Unscored —
    CVE-2021-42136 Public exploit

    A stored Cross-Site Scripting (XSS) vulnerability in the Missing Data Codes functionality of REDCap before 11.4.0 allow…

  • High 7.8
    CVE-2015-20107 Public exploit

    In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the…

    python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux Alpine
  • High 7.8
    CVE-2022-22960 Exploited Public exploit EPSS 36%

    VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due …

    KEV Apr 15, 2022
  • Unscored —
    CVE-2022-22957 Public exploit EPSS 23%

    VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities…

  • Unscored —
    CVE-2022-22956 Public exploit Scanner template EPSS 50%

    VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE-2022-22956) in the OAut…