Skip to content
OpenAdvisories

Archive

13 April 2022

Vulnerabilities first published on this day (UTC), newest first.

← March 2022 2022 / April /13 May 2022 →
  1. 1104
  2. 24
  3. 325
  4. 4107
  5. 5122
  6. 659
  7. 746
  8. 859
  9. 97
  10. 1039
  11. 11189
  12. 12166
  13. 1351
  14. 14110
  15. 15234
  16. 165
  17. 172
  18. 1898
  19. 19131
  20. 2044
  21. 21106
  22. 2248
  23. 231
  24. 244
  25. 2579
  26. 2636
  27. 2764
  28. 2860
  29. 2952
  30. 306
All Critical High Medium Low Exploited only Public exploit

51 results · Feed

  • Medium 6.1
    CVE-2020-29653

    HTML Injection in Froxlor

    Froxlor through 0.10.22 does not perform validation on user input passed in the customermail GET parameter. The value of this parameter is reflected in the login webpage, allowing the injection of arbitrary HTML tags.

    froxlor/froxlor Packagist
  • Unscored —
    CVE-2022-27475

    Cross site scripting (XSS) vulnerability in tramyardg hotel-mgmt-system, allows attackers to execute arbitrary code whe…

  • High 8.8
    CVE-2022-1339

    SQL injection in ElementController.php in pimcore/pimcore

    SQL injection in ElementController.php in GitHub repository pimcore/pimcore prior to 10.3.5. This vulnerability is capable of steal the data

    pimcore pimcore/pimcore pimcore/pimcore Packagist
  • Unscored —
    CVE-2022-29156

    drivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel before 5.16.12 has a double free related to rtrs_clt_dev_rel…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2022-22279

    A post-authentication arbitrary file read vulnerability impacting end-of-life Secure Remote Access (SRA) products and o…

    SonicWall SonicWall SRA/SMA100 Network devices
  • High 7.8
    CVE-2015-20107 Public exploit

    In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the…

    python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux Alpine
  • Unscored —
    CVE-2022-25797

    A maliciously crafted PDF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to dereference for a write beyond…

  • Unscored —
    CVE-2022-25795

    A Memory Corruption Vulnerability in Autodesk TrueView 2022 and 2021 may lead to remote code execution through maliciou…

  • High 7.8
    CVE-2022-22960 Exploited Public exploit EPSS 36%

    VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due …

    KEV Apr 15, 2022
  • Unscored —
    CVE-2022-22957 Public exploit EPSS 23%

    VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities…

  • Unscored —
    CVE-2022-22956 Public exploit Scanner template EPSS 50%

    VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2022-22955 & CVE-2022-22956) in the OAut…