Skip to content
OpenAdvisories

Archive

April 2022

Vulnerabilities first published in this month (UTC), newest first.

← March 2022 2022 / April May 2022 →
  1. 1104
  2. 24
  3. 325
  4. 4107
  5. 5122
  6. 659
  7. 746
  8. 859
  9. 97
  10. 1039
  11. 11189
  12. 12166
  13. 1351
  14. 14110
  15. 15234
  16. 165
  17. 172
  18. 1898
  19. 19131
  20. 2044
  21. 21106
  22. 2248
  23. 231
  24. 244
  25. 2579
  26. 2636
  27. 2764
  28. 2860
  29. 2952
  30. 306
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Medium 5.4
    CVE-2022-24891 Public exploit

    Cross-site Scripting in org.owasp.esapi:esapi -- antisamy-esapi.xml configuration file

    ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library. Prior to version 2.3.0.0, there is a potential for a cross-site scripting vulnerability in ESAPI caused by a incorrect regular expression for "onsiteUR…

    ESAPI esapi-java-legacy org.owasp.esapi:esapi libowasp-esapi-java Debian Ubuntu Maven
  • Medium 6.7
    CVE-2021-3972 Public exploit

    A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices' BIOS …

    Lenovo Notebook BIOS
  • Medium 6.1
    CVE-2022-29577 Public exploit

    Cross-site Scripting in OWASP AntiSamy

    OWASP AntiSamy before 1.6.7 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer does not properly encode the supposed Cascading Style Sheets (CSS) content. NOTE: this issue exists because of an incomplete fix for CVE-2…

    libowasp-antisamy-java org.owasp.antisamy:antisamy Ubuntu Maven
  • Medium 4.6
    CVE-2022-29548 Public exploit Scanner template EPSS 41%

    A reflected XSS issue exists in the Management Console of several WSO2 products. This affects API Manager 2.2.0, 2.5.0,…

  • Medium 6.8
    CVE-2022-28810 Exploited Public exploit EPSS 71%

    Zoho ManageEngine ADSelfService Plus before build 6122 allows a remote authenticated administrator to execute arbitrary…

    KEV Mar 7, 2023
  • Medium 5.5
    CVE-2022-24483 Public exploit

    Windows Kernel Information Disclosure Vulnerability

    Windows Kernel Information Disclosure Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  • Medium 5.9
    CVE-2022-24853 Public exploit

    File system exposure in Metabase

    Metabase is an open source business intelligence and analytics application. Metabase has a proxy to load arbitrary URLs for JSON maps as part of our GeoJSON support. While we do validation to not return contents of arbitrary URLs, there is a case where a part…

    metabase metabase
  • Medium 6.1
    CVE-2022-1257 Public exploit

    Improper Verification of Cryptographic Signature by McAfee Agent

    Insecure storage of sensitive information vulnerability in MA for Linux, macOS, and Windows prior to 5.7.6 allows a local user to gain access to sensitive information through storage in ma.db. The sensitive information has been moved to encrypted database fil…

    McAfee McAfee Agent
  • Medium 6.0
    CVE-2022-24765 Public exploit

    Uncontrolled search for the Git directory in Git for Windows

    Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where untrusted parties have write access to the same hard disk. Those untrusted parties could create the folder `C:\.git`, …

    git-for-windows git git git Debian Ubuntu Alpine
  • Medium 5.4
    CVE-2021-46416 Public exploit

    Insecure direct object reference in SUNNY TRIPOWER 5.0 Firmware version 3.10.16.R leads to unauthorized user groups acc…

  • Medium 5.5
    CVE-2022-1068 Public exploit

    Modbus Tools Modbus Slave Stack-Based Buffer Overflow

    Modbus Tools Modbus Slave (versions 7.4.2 and prior) is vulnerable to a stack-based buffer overflow in the registration field. This may cause the program to crash when a long character string is used.

    Modbus Tools Modbus Slave