Skip to content
OpenAdvisories

Archive

20 April 2022

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • High 7.2
    CVE-2022-27925 Exploited · Ransomware Public exploit Scanner template EPSS 99%

    Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts fil…

    KEV Aug 11, 2022
  • Unscored —
    CVE-2021-43481 Public exploit

    An SQL Injection vulnerability exists in Webtareas 2.4p3 and earlier via the $uq HTTP POST parameter in editapprovalsta…

  • Unscored —
    CVE-2021-37740 Public exploit

    A denial of service vulnerability exists in MDT's firmware for the KNXnet/IP Secure router SCN-IP100.03 and KNX IP inte…

  • Critical 9.8
    CVE-2022-26133 Public exploit EPSS 71%

    SharedSecretClusterAuthenticator in Atlassian Bitbucket Data Center versions 5.14.0 and later before 7.6.14, 7.7.0 and …

  • Critical 9.8
    CVE-2022-0540 Public exploit Scanner template EPSS 88%

    A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a speciall…

  • Unscored —
    CVE-2022-24675 Public exploit

    Stack overflow from a large amount of PEM data in encoding/pem

    encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 has a Decode stack overflow via a large amount of PEM data.