Skip to content
OpenAdvisories

Archive

19 April 2022

Vulnerabilities first published on this day (UTC), newest first.

← March 2022 2022 / April /19 May 2022 →
  1. 1104
  2. 24
  3. 325
  4. 4107
  5. 5122
  6. 659
  7. 746
  8. 859
  9. 97
  10. 1039
  11. 11189
  12. 12166
  13. 1351
  14. 14110
  15. 15234
  16. 165
  17. 172
  18. 1898
  19. 19131
  20. 2044
  21. 21106
  22. 2248
  23. 231
  24. 244
  25. 2579
  26. 2636
  27. 2764
  28. 2860
  29. 2952
  30. 306
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.5
    CVE-2022-21449 Public exploit EPSS 77%

    Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…

    Oracle Java SE JDK and JRE openjdk-16 openjdk-18 Debian Ubuntu Alpine Wolfi
  • Critical 9.8
    CVE-2022-21445 Exploited Public exploit EPSS 62%

    Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: ADF…

    Oracle Application Development Framework (ADF)
    KEV Sep 18, 2024
  • High 7.5
    CVE-2022-1119 Public exploit Scanner template EPSS 17%

    Simple File List <= 3.2.7 - Arbitrary File Download

    The Simple File List WordPress plugin is vulnerable to Arbitrary File Download via the eeFile parameter found in the ~/includes/ee-downloader.php file due to missing controls which makes it possible unauthenticated attackers to supply a path to a file that wi…

    eemitch Simple File List Web / CMS
  • Unscored —
    CVE-2022-27927 Public exploit Scanner template EPSS 14%

    A SQL injection vulnerability exists in Microfinance Management System 1.0 when MySQL is being used as the application …

  • Unscored —
    CVE-2021-43129 Public exploit

    A bypass exists for Desire2Learn/D2L Brightspace’s “Disable Right Click” option in the quizzing feature, which allows a…

  • High 8.8
    CVE-2022-1329 Public exploit Scanner template EPSS 93%

    Elementor Website Builder 3.6.0 - 3.6.2 - Missing Authorization to Remote Code Execution

    The Elementor Website Builder plugin for WordPress is vulnerable to unauthorized execution of several AJAX actions due to a missing capability check in the ~/core/app/modules/onboarding/module.php file that make it possible for attackers to modify site data i…

    elemntor Elementor Website Builder Web / CMS