Archive

15 April 2022

Vulnerabilities first published on this day (UTC), newest first.

← March 2022 2022 / April /15 May 2022 →

All Critical High Medium Low Exploited only Public exploit

56 results · Clear filters · Feed

Medium 4.9

CVE-2022-29287

Kentico CMS before 13.0.66 has an Insecure Direct Object Reference vulnerability. It allows an attacker with user manag…

Apr 15, 2022
Medium 5.5

CVE-2022-26920

Windows Graphics Component Information Disclosure Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 15, 2022
Medium 6.5

CVE-2022-26911

Skype for Business Information Disclosure Vulnerability

Skype for Business Information Disclosure Vulnerability

Microsoft Microsoft Lync Server 2013 CU10 Skype for Business Server 2019 CU6 Skype for Business Server 2015 CU12

Apr 15, 2022
Medium 5.3

CVE-2022-26910

Skype for Business and Lync Spoofing Vulnerability

Skype for Business and Lync Spoofing Vulnerability

Microsoft Skype for Business Server 2015 CU12 Skype for Business Server 2019 CU6

Apr 15, 2022
Medium 5.3

CVE-2022-26907

Azure SDK for .NET Information Disclosure Vulnerability

Azure SDK for .NET Information Disclosure Vulnerability

Microsoft Azure SDK for .Net Microsoft.Rest.ClientRuntime NuGet

Apr 15, 2022
Medium 4.9

CVE-2022-26897

Azure Site Recovery Information Disclosure Vulnerability

Azure Site Recovery Information Disclosure Vulnerability

Microsoft Azure Site Recovery VMWare to Azure

Apr 15, 2022
Medium 4.9

CVE-2022-26896

Azure Site Recovery Information Disclosure Vulnerability

Azure Site Recovery Information Disclosure Vulnerability

Microsoft Azure Site Recovery VMWare to Azure

Apr 15, 2022
Medium 6.6

CVE-2022-26829

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Apr 15, 2022
Medium 6.6

CVE-2022-26822

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Apr 15, 2022
Medium 6.6

CVE-2022-26821

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Apr 15, 2022
Medium 6.6

CVE-2022-26820

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Apr 15, 2022
Medium 6.6

CVE-2022-26819

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Apr 15, 2022
Medium 6.6

CVE-2022-26818

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Apr 15, 2022
Medium 6.6

CVE-2022-26817

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Apr 15, 2022
Medium 6.5

CVE-2022-26816

Windows DNS Server Information Disclosure Vulnerability

Windows DNS Server Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Apr 15, 2022
Medium 6.6

CVE-2022-26814

Windows DNS Server Remote Code Execution Vulnerability

Windows DNS Server Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Apr 15, 2022
Medium 6.5

CVE-2022-26785

Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability

Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Apr 15, 2022
Medium 6.5

CVE-2022-26784

Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability

Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Apr 15, 2022
Medium 6.5

CVE-2022-26783

Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability

Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Apr 15, 2022
Medium 5.5

CVE-2022-24548

Microsoft Defender Denial of Service Vulnerability

Microsoft Defender Denial of Service Vulnerability

Microsoft Microsoft Malware Protection Engine

Apr 15, 2022
Medium 6.5

CVE-2022-24538

Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability

Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Apr 15, 2022
Medium 6.5

CVE-2022-24498

Windows iSCSI Target Service Information Disclosure Vulnerability

Windows iSCSI Target Service Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 15, 2022
Medium 5.5

CVE-2022-24493

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 15, 2022
Medium 5.5

CVE-2022-24484

Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability

Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Apr 15, 2022
Medium 5.5

CVE-2022-24483 Public exploit

Windows Kernel Information Disclosure Vulnerability

Windows Kernel Information Disclosure Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 15, 2022
Medium 6.5

CVE-2022-23268

Windows Hyper-V Denial of Service Vulnerability

Windows Hyper-V Denial of Service Vulnerability

Microsoft Windows Server 2022 Windows 11 version 21H2 Windows

Apr 15, 2022
Medium 6.1

CVE-2022-27852

WordPress KB Support plugin <= 1.5.5 - Multiple Unauth. Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Unauthenticated Stored Cross-Site Scripting (XSS) vulnerabilities in KB Support (WordPress plugin) <= 1.5.5 versions.

WPChill Media Labs L.L.C KB Support Web / CMS

Apr 15, 2022
Medium 4.8

CVE-2021-36828

WordPress WP Maintenance plugin <= 6.0.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated (admin+) Stored Cross-Site Scripting (XSS) in WP Maintenance plugin <= 6.0.7 versions.

Florent Maillefaud WP Maintenance

Apr 15, 2022
Medium 5.4

CVE-2022-27851

WordPress Use Any Font plugin <= 6.1.7 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) in Use Any Font (WordPress plugin) <= 6.1.7 allows an attacker to deactivate the API key.

Dnesscarkey Use Any Font | Custom Font Uploader (WordPress plugin) Web / CMS

Apr 15, 2022
Medium 5.4

CVE-2022-27850

WordPress Simple Ajax Chat plugin <= 20220115 - Multiple Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) in Simple Ajax Chat (WordPress plugin) <= 20220115 allows an attacker to clear the chat log or delete a chat message.

Jeff Starr Simple Ajax Chat (WordPress plugin) Web / CMS

Apr 15, 2022
Medium 5.3

CVE-2022-27849 Scanner template

WordPress Simple Ajax Chat plugin <= 20220115 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure (sac-export.csv) in Simple Ajax Chat (WordPress plugin) <= 20220115

Jeff Starr Simple Ajax Chat (WordPress plugin) Web / CMS

Apr 15, 2022
Medium 6.1

CVE-2022-26594

Liferay Portal and Liferay DXP allows arbitrary injection via form field

Multiple cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.3.5 through 7.4.0, and Liferay DXP 7.3 before service pack 3 allow remote attackers to inject arbitrary web script or HTML via a form field's help text to (1) Forms module's form builder,…

com.liferay.portal:release.dxp.bom com.liferay:com.liferay.dynamic.data.mapping.form.field.type Maven

Apr 15, 2022
Medium 5.5

CVE-2022-20720

Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating syste…

Cisco Cisco IOS iOS Network devices

Apr 15, 2022
Medium 5.5

CVE-2022-20721

Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating syste…

Cisco Cisco IOS iOS Network devices

Apr 15, 2022
Medium 5.5

CVE-2022-20722

Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating syste…

Cisco Cisco IOS iOS Network devices

Apr 15, 2022
Medium 5.5

CVE-2022-20723

Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating syste…

Cisco Cisco IOS iOS Network devices

Apr 15, 2022
Medium 5.5

CVE-2022-20724

Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating syste…

Cisco Cisco IOS iOS Network devices

Apr 15, 2022
Medium 5.5

CVE-2022-20725

Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating syste…

Cisco Cisco IOS iOS Network devices

Apr 15, 2022
Medium 5.5

CVE-2022-20726

Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating syste…

Cisco Cisco IOS iOS Network devices

Apr 15, 2022
Medium 5.5

CVE-2022-20727

Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating syste…

Cisco Cisco IOS iOS Network devices

Apr 15, 2022