Skip to content
OpenAdvisories

Archive

30 April 2022

Vulnerabilities first published on this day (UTC), newest first.

← March 2022 2022 / April /30 May 2022 →
  1. 1104
  2. 24
  3. 325
  4. 4107
  5. 5122
  6. 659
  7. 746
  8. 859
  9. 97
  10. 1039
  11. 11189
  12. 12166
  13. 1351
  14. 14110
  15. 15234
  16. 165
  17. 172
  18. 1898
  19. 19131
  20. 2044
  21. 21106
  22. 2248
  23. 231
  24. 244
  25. 2579
  26. 2636
  27. 2764
  28. 2860
  29. 2952
  30. 306
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.0
    CVE-2021-42001

    PingID Desktop encryption libraries misconfiguration can lead to sensitive data exposure

    PingID Desktop prior to 1.7.3 has a misconfiguration in the encryption libraries which can lead to sensitive data exposure. An attacker capable of exploiting this vulnerability may be able to successfully complete an MFA challenge via OTP.

    Ping Identity PingID Desktop
  • High 7.7
    CVE-2021-41992

    PingID Windows Login RSA cryptographic weakness with possible offline MFA bypass

    A misconfiguration of RSA in PingID Windows Login prior to 2.7 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass.

    Ping Identity PingID Windows Login Windows
  • High 7.5
    CVE-2022-29265

    Improper Restriction of XML External Entity References in Multiple Components

    Multiple components in Apache NiFi 0.0.1 to 1.16.0 do not restrict XML External Entity references in the default configuration. The Standard Content Viewer service attempts to resolve XML External Entity references when viewing formatted XML files. The follow…

    Apache Software Foundation Apache NiFi org.apache.nifi:nifi Maven