CVEs published in May 2022
2,612 vulnerabilities, 425 critical, 9 exploited.
- sinatrarb sinatra, debian linux +1 moresinatra does not validate expanded path matches7.5 High
- debian linux, linux kernel +1 moreA NULL pointer dereference flaw was found in the Linux kernel’s X.25 set of standardized network...5.5 Medium
- debian linux, linux kernel +1 moreThe root cause of this vulnerability is that the ioctl$DRM_IOCTL_MODE_DESTROY_DUMB can decrease...7.8 High
- progress openedgeIn Progress OpenEdge before 11.7.14 and 12.x before 12.2.9, certain SUID binaries within the...7.8 High
- osgeo geoserverGeoServer allows SSRF via the option for setting a proxy host7.5 High
- nopcommercenopCommerce 4.50.1 is vulnerable to Directory Traversal via the backup file in the Maintenance...7.5 High
- cyclosA Dom-based Cross-site scripting (XSS) vulnerability at registration account in Cyclos 4 PRO.14.7...6.1 Medium
- cyclosCyclos 4 PRO 4.14.7 and before does not validate user input at error inform, which allows remote...6.1 Medium
- jsgui-lang-essentials project jsgui-lang-essentialsPrototype Pollution7.7 High
- s-cartCross-site Scripting (XSS)5.4 Medium
- dset project dsetPrototype Pollution6.5 Medium
- ureport2 project ureport2Remote Code Execution9.8 Critical
- google gson, debian linux, netapp active iq unified manager +3 more +5 moreDeserialization of Untrusted Data7.7 High
- materializecss materializeCross-site Scripting (XSS)5.4 Medium
- ldqk masuit.toolsArbitrary Code Execution7.5 High
- pistache project pistachePath Traversal6.5 Medium
- alibabagroup one-java-agentArbitrary File Write via Archive Extraction (Zip Slip)6.9 Medium
- angular, angularjs, fedoraproject fedora +1 more +3 moreRegular Expression Denial of Service (ReDoS)5.3 Medium
- jailed project jailedSandbox Bypass8.6 High
- dexiePrototype Pollution7.3 High
- libxmljs project libxmljsDenial of Service (DoS)7.5 High
- nanohttpdInformation Exposure5.5 Medium
- git-pull-or-clone project git-pull-or-cloneCommand Injection9.8 Critical
- proxyscotch project proxyscotchServer-side Request Forgery (SSRF)7.5 High
- csv-safe project csv-safeCSV-Safe improperly filters special characters potentially leading to CSV injection9.8 Critical
- shopizerShopizer - IDOR delete superadmin6.5 Medium
- shopizerShopizer - Stored XSS in Manage Files4.8 Medium
- luya yii-helpers, luyadev luyadev/yii-helpers +1 moreFormula Injection/CSV Injection due to Improper Neutralization of Formula Elements in CSV File in luyadev/yii-helpers8.0 High
libdwarfOSS-FuzzGlobal-buffer-overflow in _dwarf_pathjoinlNo scorelibredwgOSS-FuzzSegv on unknown address in dwg_ref_get_objectNo scorelibredwgOSS-FuzzSegv on unknown address in bit_write_TVNo scoreopenscOSS-FuzzInvalid-free in change_pinNo score- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8009 firmware, apq8017 firmware +56 more +58 moreBuffer overflow can occur due to improper validation of NDP application information length in...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8053 firmware, aqt1000 firmware +114 more +116 morekernel event may contain unexpected content which is not generated by NPU software in...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +165 more +167 moreOut of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto,...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +160 more +162 morePossible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, ar8035 firmware +78 more +80 moreUse after free in graphics fence due to a race condition while closing fence file descriptor and...8.4 High
- google androidIn getNodeValue of USCCDMPlugin.java, there is a possible disclosure of ICCID due to a missing...5.5 Medium
- google androidProduct: AndroidVersions: Android kernelAndroid ID: A-203213034References: N/A9.8 Critical
- google androidIn private_handle_t of mali_gralloc_buffer.h, there is a possible information disclosure due to...5.5 Medium
- google androidIn ion_ioctl and related functions of ion.c, there is a possible use after free due to a race...7.0 High
- google androidIn (TBD) of (TBD), there is a possible way to decrypt local data encrypted by the GSC due to...5.5 Medium
- google androidIn onEntryUpdated of OngoingCallController.kt, it is possible to launch non-exported activities...7.8 High
- google androidIn broadcastServiceStateChanged of TelephonyRegistry.java, there is a possible way to learn base...5.5 Medium
- google androidIn placeCall of TelecomManager.java, there is a possible way for an application to keep itself...7.8 High
- google androidIn mPreference of DefaultUsbConfigurationPreferenceController.java, there is a possible way to...7.8 High
- google androidIn getAvailabilityStatus of PrivateDnsPreferenceController.java, there is a possible way for a...5.5 Medium
- google android, mediatek, inc. mt6580, mt6735, mt6737, mt6739, mt6750, mt6750s, mt6753, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6797, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6883, mt6885, mt6889, mt6893, mt8167, mt8168, mt8173, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8666, mt8675, mt8695, mt8696, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn ion, there is a possible use after free due to a race condition. This could lead to local...7.0 High
- google android, mediatek, inc. mt6580, mt6735, mt6737, mt6739, mt6750, mt6750s, mt6753, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6797, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6883, mt6885, mt6889, mt6893, mt8167, mt8168, mt8173, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8666, mt8675, mt8695, mt8696, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn ion, there is a possible use after free due to improper update of reference count. This could...7.8 High
- google android, mediatek, inc. mt6731, mt6732, mt6735, mt6737, mt6739, mt6750, mt6750s, mt6752, mt6753, mt6755, mt6755s, mt6757, mt6757c, mt6757cd, mt6757ch, mt6758, mt6761, mt6762, mt6763, mt6768, mt6771, mt6779, mt6781, mt6785, mt6789, mt6795, mt6797, mt6799, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6891, mt6893, mt6895, mt6983, mt6985, mt8321, mt8666, mt8667, mt8675, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn telephony, there is a possible way to disable receiving emergency broadcasts due to a missing...7.8 High
- Show moreLoading…