Skip to content
OpenAdvisories

Archive

April 2022

Vulnerabilities first published in this month (UTC), newest first.

← March 2022 2022 / April May 2022 →
  1. 1104
  2. 24
  3. 325
  4. 4107
  5. 5122
  6. 659
  7. 746
  8. 859
  9. 97
  10. 1039
  11. 11189
  12. 12166
  13. 1351
  14. 14110
  15. 15234
  16. 165
  17. 172
  18. 1898
  19. 19131
  20. 2044
  21. 21106
  22. 2248
  23. 231
  24. 244
  25. 2579
  26. 2636
  27. 2764
  28. 2860
  29. 2952
  30. 306
All Critical High Medium Low Exploited only Public exploit

16 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-29499 Exploited · Ransomware EPSS 55%

    The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because of incor…

    KEV Jun 27, 2022
  • Critical 9.8
    CVE-2022-24706 Exploited Public exploit Scanner template EPSS 93%

    Remote Code Execution Vulnerability in Packaging

    In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including re…

    Apache Software Foundation Apache CouchDB
    KEV Aug 25, 2022
  • Medium 6.1
    CVE-2022-27926 Exploited Scanner template EPSS 18%

    A reflected cross-site scripting (XSS) vulnerability in the /public/launchNewWindow.jsp component of Zimbra Collaborati…

    KEV Apr 3, 2023
  • High 7.2
    CVE-2022-27925 Exploited · Ransomware Public exploit Scanner template EPSS 99%

    Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts fil…

    KEV Aug 11, 2022
  • Critical 9.8
    CVE-2022-27924 Exploited · Ransomware Scanner template EPSS 94%

    Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 allows an unauthenticated attacker to inject arbitrary memcache commands …

    KEV Aug 4, 2022
  • Critical 9.8
    CVE-2022-21445 Exploited Public exploit EPSS 62%

    Vulnerability in the Oracle Application Development Framework (ADF) product of Oracle Fusion Middleware (component: ADF…

    Oracle Application Development Framework (ADF)
    KEV Sep 18, 2024
  • Medium 6.8
    CVE-2022-28810 Exploited Public exploit EPSS 71%

    Zoho ManageEngine ADSelfService Plus before build 6122 allows a remote authenticated administrator to execute arbitrary…

    KEV Mar 7, 2023
  • Critical 9.8
    CVE-2022-29464 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fil…

    KEV Apr 25, 2022
  • High 7.0
    CVE-2022-26904 Exploited Public exploit EPSS 17%

    Windows User Profile Service Elevation of Privilege Vulnerability

    Windows User Profile Service Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Apr 25, 2022
  • High 7.8
    CVE-2022-24521 Exploited · Ransomware Public exploit

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Apr 13, 2022
  • Critical 10.0
    CVE-2022-24816 Exploited Public exploit Scanner template EPSS 100%

    Improper Control of Generation of Code in jai-ext

    JAI-EXT is an open-source project which aims to extend the Java Advanced Imaging (JAI) API. Programs allowing Jiffle script to be provided via network request can lead to a Remote Code Execution as the Jiffle script is compiled into Java code via Janino, and …

    geosolutions-it jai-ext it.geosolutions.jaiext.jiffle:jt-jiffle-language it.geosolutions.jaiext.jiffle:jt-jiffle Maven
    KEV Jun 26, 2024
  • High 7.8
    CVE-2022-22960 Exploited Public exploit EPSS 36%

    VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due …

    KEV Apr 15, 2022
  • Critical 9.8
    CVE-2022-22954 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side templ…

    KEV Apr 14, 2022
  • High 8.8
    CVE-2022-0609 Exploited EPSS 23%

    Use after free in Animation

    Use after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine NuGet
    KEV Feb 15, 2022
  • Critical 9.8
    CVE-2022-22965 Exploited Public exploit Scanner template EPSS 100%

    Remote Code Execution in Spring Framework

    A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot…

    libspring-java libspring-java org.springframework:spring-webmvc org.springframework:spring-webflux Debian Ubuntu Maven
    KEV Apr 4, 2022
  • Critical 9.8
    CVE-2022-22963 Exploited Public exploit Scanner template EPSS 100%

    Spring Cloud Function Code Injection with a specially crafted SpEL as a routing expression

    In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local …

    org.springframework.cloud:spring-cloud-function-context Maven
    KEV Aug 25, 2022