Skip to content
OpenAdvisories

Archive

14 April 2022

Vulnerabilities first published on this day (UTC), newest first.

← March 2022 2022 / April /14 May 2022 →
  1. 1104
  2. 24
  3. 325
  4. 4107
  5. 5122
  6. 659
  7. 746
  8. 859
  9. 97
  10. 1039
  11. 11189
  12. 12166
  13. 1351
  14. 14110
  15. 15234
  16. 165
  17. 172
  18. 1898
  19. 19131
  20. 2044
  21. 21106
  22. 2248
  23. 231
  24. 244
  25. 2579
  26. 2636
  27. 2764
  28. 2860
  29. 2952
  30. 306
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.9
    CVE-2022-24853 Public exploit

    File system exposure in Metabase

    Metabase is an open source business intelligence and analytics application. Metabase has a proxy to load arbitrary URLs for JSON maps as part of our GeoJSON support. While we do validation to not return contents of arbitrary URLs, there is a case where a part…

    metabase metabase
  • High 7.5
    CVE-2022-22968 Public exploit

    Improper handling of case sensitivity in Spring Framework

    In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for disallowedFields on a DataBinder are case sensitive which means a field is not effectively protected unless it is listed with both upper and lower ca…

    libspring-java libspring-java org.springframework:spring-context Debian Ubuntu Maven
  • Medium 6.1
    CVE-2022-1257 Public exploit

    Improper Verification of Cryptographic Signature by McAfee Agent

    Insecure storage of sensitive information vulnerability in MA for Linux, macOS, and Windows prior to 5.7.6 allows a local user to gain access to sensitive information through storage in ma.db. The sensitive information has been moved to encrypted database fil…

    McAfee McAfee Agent
  • Unscored —
    CVE-2021-43287 Public exploit Scanner template EPSS 28%

    An issue was discovered in ThoughtWorks GoCD before 21.3.0. The business continuity add-on, which is enabled by default…