CVEs published in May 2022
2,612 vulnerabilities, 425 critical, 9 exploited.
- hcl software traveler HCL Traveler is susceptible to a cross-site scripting vulnerability which could allow an attacker to execute a malicious script to access sensitive information. 4.9 Medium
- hospital management system project management system Project Worlds Official Hospital Management System in php 1.0 is vulnerable to SQL Injection on... 9.8 Critical
- egavilanmedia user registration and login system with admin panel EGavilan Media User-Registration-and-Login-System-With-Admin-Panel 1.0 is vulnerable to SQL... 9.8 Critical
- contact-form-with-messages-entry-management project contact-form-with-messages-entry-management EGavilan Media Contact-Form-With-Messages-Entry-Management 1.0 is vulnerable to SQL Injection via... 9.8 Critical
- egavilanmedia expense management system EGavilan Media Expense-Management-System 1.0 is vulnerable to SQL Injection via /expense_action... 9.8 Critical
- flightradar24 flight tracker An issue was discovered in FlightRadar24 v8.9.0, v8.10.0, v8.10.2, v8.10.3, v8.10.4 for Android,... 5.5 Medium
- webbank webcube An issue in Webbank WeCube v3.2.2 allows attackers to execute a directory traversal via a crafted... 9.8 Critical
- totolink ex1200t firmware TOTOLINK EX1200T V4.1.2cu.5215 is affected by a command injection vulnerability that can remotely... 9.8 Critical
- agendaless waitress Uncaught Exception (due to a data race) leads to process termination in Waitress 6.5 Medium
- swftools An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the... 7.8 High
- chat server project server, ramank775 chat-server +1 more Authentication bypass in Vartalap chat-server 9.1 Critical
- polonel polonel/trudesk, trudesk project trudesk +1 more Use of Incorrect Operator in polonel/trudesk 9.1 Critical
- polonel polonel/trudesk, trudesk project trudesk +1 more Execution with Unnecessary Privileges in polonel/trudesk 8.8 High
- polonel polonel/trudesk, trudesk project trudesk +1 more Improper Removal of Sensitive Information Before Storage or Transfer in polonel/trudesk 4.6 Medium
- ofcms project ofcms OFCMS v1.1.4 was discovered to contain a cross-site scripting (XSS) vulnerability via the... 6.1 Medium
- jflyfox jfinal cms Cross site scripting in Jfinal 5.4 Medium
- mingsoft mcms Cross Site Request Forgery in Mingsoft MCMS 8.8 High
- gogs OS Command Injection in gogs 8.8 High
- tpcms project tpcms An arbitrary file upload vulnerability in the Add File function of TPCMS v3.2 allows attackers to... 8.8 High
- ecommerce-project-with-php-and-mysqli-fruits-bazar project ecommerce-project-with-php-and-mysqli-fruits-bazar Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in ... 9.8 Critical
- ecommerce-project-with-php-and-mysqli-fruits-bazar project ecommerce-project-with-php-and-mysqli-fruits-bazar Ecommerce-project-with-php-and-mysqli-Fruits-Bazar- 1.0 is vulnerable to Cross Site Scripting ... 4.8 Medium
- food-order-and-table-reservation-system project food-order-and-table-reservation-system Food-order-and-table-reservation-system- 1.0 is vulnerable to SQL Injection in categorywise-menu... 9.8 Critical
- resi gemini-net resi-calltrace in RESI Gemini-Net 4.2 is affected by Multiple XSS issues. Unauthenticated remote... 6.1 Medium
- couchbase server Couchbase Server before 7.1.0 has Incorrect Access Control. 4.9 Medium
- linkplay sound bar LinkPlay Sound Bar v1.0 allows attackers to escalate privileges via a hardcoded password for the... 9.8 Critical
- winaprs ** UNSUPPORTED WHEN ASSIGNED ** An issue was discovered in WinAPRS 2.9.0. A buffer overflow in... 7.8 High
- winaprs ** UNSUPPORTED WHEN ASSIGNED ** An issue was discovered in WinAPRS 2.9.0. A buffer overflow in... 7.5 High
- winaprs ** UNSUPPORTED WHEN ASSIGNED ** An issue was discovered in WinAPRS 2.9.0. A buffer overflow in... 9.8 Critical
- keysight n6854a geolocation server and n6841a rf sensor software, n6841a rf firmware, n6854a firmware +2 more Keysight N6854A Geolocation server and N6841A RF Sensor software 7.5 High
- vapor Integer Overflow in Vapor's HTTP Range Request 7.5 High
- keysight n6854a geolocation server and n6841a rf sensor software, n6841a rf firmware, n6854a firmware +2 more Keysight N6854A Geolocation server and N6841A RF Sensor software 9.8 Critical
- supsystic social share buttons, social share buttons by supsystic (wordpress plugin) +1 more WordPress Social Share Buttons by Supsystic plugin <= 2.2.2 - Cross-Site Request Forgery (CSRF) vulnerability 4.3 Medium
- pingcap tidb TiDB authentication bypass vulnerability 7.8 High
- elabftw Privilege escalation from administrator in eLabFTW 4.9 Medium
- fatcatapps easy pricing tables, fatcat apps easy pricing tables (wordpress plugin) +1 more WordPress Easy Pricing Tables plugin <= 3.1.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability 4.8 Medium
- rockwell automation compact guardlogix 5370 controllers, compact guardlogix 5380 controllers, compactlogix 5370 controllers +15 more +17 more Rockwell Automation Logix Controllers Uncontrolled Resource Consumption 6.8 Medium
- No product listed From the original tweet: Interesting maldoc was submitted from Belarus. It uses Word's external link to load the HTML and then uses the "ms-msdt" scheme to execute PowerShell code. From Microsoft:… No score
- swftools An issue was discovered in swftools through 20201222. A heap-use-after-free exists in the... 7.8 High
- linux kernel, netapp h300s firmware, h410c firmware +3 more +5 more A use-after-free flaw was found in the Linux kernel’s io_uring subsystem in the way a user sets... 7.8 High
- swftools An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the... 5.5 Medium
- swftools An issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the... 7.8 High
- dnnsoftware dotnetnuke, dnn platform +1 more DNN CMS Server-Side Request Forgery (SSRF) 6.5 Medium
- abb e-design e-Design - Multiple vulnerabilities 7.8 High
- abb e-design e-Design - Multiple vulnerabilities 6.1 Medium
- wedding management system project management system In Wedding Management System v1.0, there is an arbitrary file upload vulnerability in the picture... 8.8 High
- wedding management system project management system In Wedding Management v1.0, there is an arbitrary file upload vulnerability in the picture upload... 8.8 High
- wedding management system project management system In Wedding Management System v1.0, the editing function of the "Services" module in the... 8.8 High
- swftools An issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the... 5.5 Medium
- wedding management system project management system In Wedding Management System v1.0, there is an arbitrary file upload vulnerability in the picture... 8.8 High
- wedding management system project management system Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\blog_events_edit.php. 7.2 High
- Show olderLoading…