15 April 2022

234 results · Feed

• Medium 4.9
  CVE-2022-29287

  Kentico CMS before 13.0.66 has an Insecure Direct Object Reference vulnerability. It allows an attacker with user manag…

  Apr 15, 2022
• Unscored —
  CVE-2022-29020

  ForestBlog through 2022-02-16 allows admin/profile/save userAvatar XSS during addition of a user avatar.

  Apr 15, 2022
• High 8.8
  CVE-2022-1365

  Exposure of Private Personal Information to an Unauthorized Actor in lquixada/cross-fetch

  Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository lquixada/cross-fetch prior to 3.1.5.

  lquixada lquixada/cross-fetch
  Apr 15, 2022
• Unscored —
  CVE-2022-29281

  Notable before 1.9.0-beta.8 doesn't effectively prevent the opening of executable files when clicking on a link. There …

  Apr 15, 2022
• High 7.5
  CVE-2022-24279

  Prototype Pollution

  The package madlib-object-utils before 0.1.8 are vulnerable to Prototype Pollution via the setValue method, as it allows an attacker to merge object prototypes into it. *Note:* This vulnerability derives from an incomplete fix of [CVE-2020-7701](https://secur…

  madlib-object-utils madlib Ubuntu npm
  Apr 15, 2022
• Unscored —
  CVE-2022-29072 Public exploit

  7-Zip through 21.07 on Windows allows privilege escalation and command execution when a file with the .7z extension is …

  Apr 15, 2022
• Unscored —
  CVE-2022-27426

  A Server-Side Request Forgery (SSRF) in Chamilo LMS v1.11.13 allows attackers to enumerate the internal network and exe…

  Apr 15, 2022
• Unscored —
  CVE-2022-27425

  Chamilo LMS v1.11.13 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /blog/blog.…

  Apr 15, 2022
• Unscored —
  CVE-2022-27423

  Chamilo LMS v1.11.13 was discovered to contain a SQL injection vulnerability via the blog_id parameter at /blog/blog.ph…

  Apr 15, 2022
• Unscored —
  CVE-2022-27421

  Chamilo LMS v1.11.13 lacks validation on the user modification form, allowing attackers to escalate privileges to Platf…

  Apr 15, 2022
• Unscored —
  CVE-2022-27422

  A reflected cross-site scripting (XSS) vulnerability in Chamilo LMS v1.11.13 allows attackers to execute arbitrary web …

  Apr 15, 2022
• High 7.5
  CVE-2022-26924

  YARP Denial of Service Vulnerability

  YARP Denial of Service Vulnerability

  Microsoft YARP 1.0 YARP 1.1RC Yarp.ReverseProxy NuGet
  Apr 15, 2022
• High 7.3
  CVE-2022-26921

  Visual Studio Code Elevation of Privilege Vulnerability

  Visual Studio Code Elevation of Privilege Vulnerability

  Microsoft Visual Studio Code
  Apr 15, 2022
• Medium 5.5
  CVE-2022-26920

  Windows Graphics Component Information Disclosure Vulnerability

  Windows Graphics Component Information Disclosure Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 15, 2022
• High 8.1
  CVE-2022-26919

  Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

  Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 15, 2022
• High 7.8
  CVE-2022-26918

  Windows Fax Compose Form Remote Code Execution Vulnerability

  Windows Fax Compose Form Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 15, 2022
• High 7.8
  CVE-2022-26917

  Windows Fax Compose Form Remote Code Execution Vulnerability

  Windows Fax Compose Form Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 15, 2022
• High 7.8
  CVE-2022-26916

  Windows Fax Compose Form Remote Code Execution Vulnerability

  Windows Fax Compose Form Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 15, 2022
• High 7.5
  CVE-2022-26915

  Windows Secure Channel Denial of Service Vulnerability

  Windows Secure Channel Denial of Service Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 15, 2022
• High 7.8
  CVE-2022-26914

  Win32k Elevation of Privilege Vulnerability

  Win32k Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 15, 2022
• Medium 6.5
  CVE-2022-26911

  Skype for Business Information Disclosure Vulnerability

  Skype for Business Information Disclosure Vulnerability

  Microsoft Microsoft Lync Server 2013 CU10 Skype for Business Server 2019 CU6 Skype for Business Server 2015 CU12
  Apr 15, 2022
• Medium 5.3
  CVE-2022-26910

  Skype for Business and Lync Spoofing Vulnerability

  Skype for Business and Lync Spoofing Vulnerability

  Microsoft Skype for Business Server 2015 CU12 Skype for Business Server 2019 CU6
  Apr 15, 2022
• Medium 5.3
  CVE-2022-26907

  Azure SDK for .NET Information Disclosure Vulnerability

  Azure SDK for .NET Information Disclosure Vulnerability

  Microsoft Azure SDK for .Net Microsoft.Rest.ClientRuntime NuGet
  Apr 15, 2022
• High 7.0
  CVE-2022-26904 Exploited Public exploit EPSS 17%

  Windows User Profile Service Elevation of Privilege Vulnerability

  Windows User Profile Service Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 15, 2022

  KEV Apr 25, 2022
• High 7.8
  CVE-2022-26903

  Windows Graphics Component Remote Code Execution Vulnerability

  Windows Graphics Component Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows Android
  Apr 15, 2022
• High 7.8
  CVE-2022-26901

  Microsoft Excel Remote Code Execution Vulnerability

  Microsoft Excel Remote Code Execution Vulnerability

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC for Mac 2021
  Apr 15, 2022
• High 7.2
  CVE-2022-26898

  Azure Site Recovery Remote Code Execution Vulnerability

  Azure Site Recovery Remote Code Execution Vulnerability

  Microsoft Azure Site Recovery VMWare to Azure
  Apr 15, 2022
• Medium 4.9
  CVE-2022-26897

  Azure Site Recovery Information Disclosure Vulnerability

  Azure Site Recovery Information Disclosure Vulnerability

  Microsoft Azure Site Recovery VMWare to Azure
  Apr 15, 2022
• Medium 4.9
  CVE-2022-26896

  Azure Site Recovery Information Disclosure Vulnerability

  Azure Site Recovery Information Disclosure Vulnerability

  Microsoft Azure Site Recovery VMWare to Azure
  Apr 15, 2022
• High 7.5
  CVE-2022-26832

  .NET Framework Denial of Service Vulnerability

  .NET Framework Denial of Service Vulnerability

  Microsoft Microsoft .NET Framework 3.5 AND 4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Microsoft .NET Framework 4.8
  Apr 15, 2022
• High 7.5
  CVE-2022-26831

  Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

  Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 15, 2022
• High 7.5
  CVE-2022-26830

  DiskUsage.exe Remote Code Execution Vulnerability

  DiskUsage.exe Remote Code Execution Vulnerability

  Microsoft Windows Server 2022 Windows 11 version 21H2 Windows
  Apr 15, 2022
• Medium 6.6
  CVE-2022-26829

  Windows DNS Server Remote Code Execution Vulnerability

  Windows DNS Server Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  Apr 15, 2022
• High 7.0
  CVE-2022-26828

  Windows Bluetooth Driver Elevation of Privilege Vulnerability

  Windows Bluetooth Driver Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 15, 2022
• High 7.0
  CVE-2022-26827

  Windows File Server Resource Management Service Elevation of Privilege Vulnerability

  Windows File Server Resource Management Service Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 15, 2022
• High 7.2
  CVE-2022-26826

  Windows DNS Server Remote Code Execution Vulnerability

  Windows DNS Server Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 15, 2022
• High 7.2
  CVE-2022-26825

  Windows DNS Server Remote Code Execution Vulnerability

  Windows DNS Server Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  Apr 15, 2022
• High 7.2
  CVE-2022-26824

  Windows DNS Server Remote Code Execution Vulnerability

  Windows DNS Server Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  Apr 15, 2022
• High 7.2
  CVE-2022-26823

  Windows DNS Server Remote Code Execution Vulnerability

  Windows DNS Server Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  Apr 15, 2022
• Medium 6.6
  CVE-2022-26822

  Windows DNS Server Remote Code Execution Vulnerability

  Windows DNS Server Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  Apr 15, 2022