Skip to content
OpenAdvisories

Archive

21 April 2022

Vulnerabilities first published on this day (UTC), newest first.

← March 2022 2022 / April /21 May 2022 →
  1. 1104
  2. 24
  3. 325
  4. 4107
  5. 5122
  6. 659
  7. 746
  8. 859
  9. 97
  10. 1039
  11. 11189
  12. 12166
  13. 1351
  14. 14110
  15. 15234
  16. 165
  17. 172
  18. 1898
  19. 19131
  20. 2044
  21. 21106
  22. 2248
  23. 231
  24. 244
  25. 2579
  26. 2636
  27. 2764
  28. 2860
  29. 2952
  30. 306
All Critical High Medium Low Exploited only Public exploit

106 results · Feed

  • Medium 6.1
    CVE-2022-29577 Public exploit

    Cross-site Scripting in OWASP AntiSamy

    OWASP AntiSamy before 1.6.7 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer does not properly encode the supposed Cascading Style Sheets (CSS) content. NOTE: this issue exists because of an incomplete fix for CVE-2…

    libowasp-antisamy-java org.owasp.antisamy:antisamy Ubuntu Maven
  • Medium 6.1
    CVE-2022-28367

    Cross-site Scripting in OWASP AntiSamy

    OWASP AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer does not properly encode the supposed Cascading Style Sheets (CSS) content.

    libowasp-antisamy-java org.owasp.antisamy:antisamy libowasp-antisamy-java Debian Ubuntu Maven
  • High 7.5
    CVE-2022-28366

    Denial of service in HtmlUnit-Neko

    Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction (PI) input that causes excessive heap memory consumption. In particular, this issue exists in HtmlUnit-Neko through 2.26, and is fixed in 2.27. This issue also exis…

    libowasp-antisamy-java libowasp-antisamy-java net.sourceforge.htmlunit:neko-htmlunit Debian Ubuntu Maven
  • High 8.2
    CVE-2022-26856

    Dell EMC Repository Manager version 3.4.0 contains a plain-text password storage vulnerability. A local attacker could …

    Dell Dell Repository Manager (DRM)
  • High 7.5
    CVE-2022-24424

    Dell EMC AppSync versions from 3.9 to 4.3 contain a path traversal vulnerability in AppSync server. A remote unauthenti…

    Dell AppSync
  • Medium 5.3
    CVE-2022-24423

    Dell iDRAC8 versions prior to 2.83.83.83 contain a denial of service vulnerability. A remote unauthenticated attacker c…

    Dell Integrated Dell Remote Access Controller 8
  • Medium 5.7
    CVE-2022-22558

    Dell PowerEdge Server BIOS and Dell Precision Workstation 7910 and 7920 Rack BIOS contain an Improper SMM communication…

    Dell PowerEdge Platform
  • Unscored —
    CVE-2022-28006

    Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\emp…

  • Unscored —
    CVE-2022-27478 EPSS 20%

    Victor v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component admin/profile.php?s…

  • Unscored —
    CVE-2022-28008

    Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\att…

  • Unscored —
    CVE-2022-28007

    Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\cas…

  • Unscored —
    CVE-2022-28010

    Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\ove…

  • Unscored —
    CVE-2022-28009

    Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\att…

  • Unscored —
    CVE-2022-28011

    Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\sch…

  • Unscored —
    CVE-2022-28012

    Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\pos…

  • Unscored —
    CVE-2022-28013

    Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\sch…

  • Unscored —
    CVE-2022-28014

    Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\att…

  • Unscored —
    CVE-2022-28015

    Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\cas…

  • Unscored —
    CVE-2022-28016

    Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\ded…

  • Unscored —
    CVE-2022-28017

    Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\ove…

  • Unscored —
    CVE-2022-28018

    Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\sch…

  • Unscored —
    CVE-2022-28019

    Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\emp…

  • Unscored —
    CVE-2022-28021 EPSS 24%

    Purchase Order Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via /purcha…

  • Unscored —
    CVE-2022-28022

    Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchase_order/class…

  • Unscored —
    CVE-2022-28020

    Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\pos…

  • Unscored —
    CVE-2022-28023

    Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchase_order/class…

  • Unscored —
    CVE-2022-28025

    Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php…

  • Unscored —
    CVE-2022-28024

    Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php…

  • Unscored —
    CVE-2022-28026

    Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php…

  • Unscored —
    CVE-2022-28028

    Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.…

  • Unscored —
    CVE-2022-28029

    Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.…

  • Unscored —
    CVE-2022-28030

    Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.…

  • Unscored —
    CVE-2022-28410

    Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Users.p…

  • Unscored —
    CVE-2022-28411

    Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/admin/?page=age…

  • Unscored —
    CVE-2022-28412

    Car Driving School Managment System v1.0 was discovered to contain a SQL injection vulnerability via /cdsms/classes/Mas…

  • Unscored —
    CVE-2022-28414

    Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classe…

  • Unscored —
    CVE-2022-28413

    Car Driving School Management System v1.0 was discovered to contain a SQL injection vulnerability via /cdsms/classes/Ma…

  • Unscored —
    CVE-2022-28416

    Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classe…

  • Unscored —
    CVE-2022-28415

    Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classe…

  • Unscored —
    CVE-2022-28417

    Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classe…