CVEs published in May 2022
2,612 vulnerabilities, 425 critical, 9 exploited.
- delta electronics diaenergieDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection...9.8 Critical
- delta electronics diaenergieDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection...9.8 Critical
- delta electronics diaenergieDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection...9.8 Critical
- delta electronics diaenergieDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection...9.8 Critical
- delta electronics diaenergieDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection...9.8 Critical
- delta electronics diaenergieDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection...9.8 Critical
- delta electronics diaenergieDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection...9.8 Critical
- delta electronics diaenergieDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection...9.8 Critical
- delta electronics diaenergieDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection...9.8 Critical
- ibm cloud pak for business automationIBM ICP4A - User Management System Component (IBM Cloud Pak for Business Automation V21.0.3...3.5 Low
- 10web photo gallery, photo gallery by 10web – mobile-friendly image gallery +1 morePhoto Gallery < 1.6.3 - Reflected Cross-Site Scripting6.1 Medium
- 10web photo gallery, photo gallery by 10web – mobile-friendly image gallery +1 morePhoto Gallery < 1.6.3 - Unauthenticated SQL Injection9.8 Critical
- importwp import wp, unknown import wp – import and export wordpress data to xml or csv files +1 moreImport WP < 2.4.6 - Admin+ Arbitrary File Upload to RCE7.2 High
- fastflow fast flow, fastflow +1 moreFast Flow < 1.2.12 - Reflected Cross-Site Scripting6.1 Medium
- carazo import and export users and customersImport and export users and customers < 1.19.2.1 - Admin+ Stored Cross-Site Scripting4.8 Medium
- lifterlms, unknown lifterlms paypal +1 moreLifterLMS PayPal < 1.4.0 - Reflected Cross-Site Scripting6.1 Medium
- hubspot, unknown hubspot – crm, email marketing, live chat, forms & analytics +1 moreHubSpot < 8.8.15 - Contributor+ Blind SSRF8.8 High
- unknown visual form builderVisual Form Builder < 3.0.7 - Admin+ Stored Cross-Site Scripting4.8 Medium
- sitemap project sitemap, unknown sitemap by click5 +1 moreSitemap by click5 < 1.0.36 - Unauthenticated Arbitrary Options Update8.8 High
- unknown multiple shipping address woocommerce, themehigh multiple shipping addresses for woocommerce +1 moreMultiple Shipping Address Woocommerce < 2.0 - Unauthenticated SQLi9.8 Critical
- documentor project documentor, unknown documentor – create product documentation +1 moreDocumentor <= 1.5.3 - Unauthenticated SQLi9.8 Critical
- marketingheroes sitesuperchargerSiteSuperCharger < 5.2.0 - Unauthenticated SQLi9.8 Critical
- ajdg adrotate, unknown adrotate – ad manager & adsense ads +1 moreAdrotate < 5.8.23 - Admin+ XSS via Advert Name4.8 Medium
- ajdg adrotate, unknown adrotate – ad manager & adsense ads +1 moreAdrotate < 5.8.23 - Admin+ XSS via Group Name4.8 Medium
- keywordrush content eggContent Egg < 5.3.0 - Reflected Cross-Site Scripting6.1 Medium
- event list project list, ovatheme.com event list +1 moreEvent List < 0.8.8 - Admin+ Stored Cross-Site Scripting4.8 Medium
- acnam ad invalid click protector, unknown ad invalid click protector (aicp) +1 moreAd Invalid Click Protector (AICP) < 1.2.7 - Arbitrary Ban Deletion via CSRF6.5 Medium
- all in one wp security & firewall team in one wp security & firewall, unknown all in one wp security & firewall, tipsandtricks-hq all in one wp security \& firewall +2 moreAll In One WP Security < 4.4.11 - Authenticated Reflected Cross-Site Scripting4.7 Medium
- advanced page visit counter project page visit counter, unknown advanced page visit counter – advanced wordpress visit counter +1 moreAdvanced Page Visit Counter < 6.1.2 - Unauthenticated Stored Cross-Site Scripting6.1 Medium
- tipsacarrier project tipsacarrierTipsacarrier < 1.5.0.5 - Unauthenticated Orders Disclosure7.5 High
- shopxoIncorrect Permission Assignment for Critical Resource in ShopXO9.8 Critical
- vandyke vshellImproper sanitization of trigger action scripts in VanDyke Software VShell for Windows v4.6.2...9.8 Critical
- ruijienetworks rg-nbr2100g-e firmwareRG-NBR-E Enterprise Gateway RG-NBR2100G-E was discovered to contain an arbitrary file read...7.5 High
- ruijienetworks rg-nbr2100g-e firmwareRG-NBR-E Enterprise Gateway RG-NBR2100G-E was discovered to contain a remote code execution (RCE)...9.8 Critical
- mingsoft mcmsMCMS v5.2.27 was discovered to contain a SQL injection vulnerability in the orderBy parameter at ...9.8 Critical
- dlink dir-823 pro firmwareD-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the...9.8 Critical
- tenda ax1803 firmware, ax1806 firmware +1 moreTenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability in ...8.8 High
- dlink dir-882 firmwareD-link 882 DIR882A1_FW130B06 was discovered to contain a command injection vulnerability in`/usr...9.8 Critical
- vendureVendure - XSS via SVG File Upload5.4 Medium
- grokability, inc. snipe-itSnipe-IT - Host Header Injection8.8 High
- rainworx auctionworxRainworx Auctionworx < 3.1R2 is vulnerable to a Cross-Site Request Forgery (CSRF) attack that...8.0 High
- trumpf trutops boost, trutops fab (incl. trutops monitor), trutops fab +1 more +3 moreMissing authentication in TRUMPF products may result in corruption of data9.8 Critical
- suse rancherWrite access to the Catalog for any user when restricted-admin role is enabled5.4 Medium
- suse rancherPrivilege escalation for users with create/update permissions in Global Roles7.2 High
- suse rancherExposure of repository credentials to external third-party sources7.3 High
- debian linux, tuxera ntfs-3g, fedoraproject fedora +2 morentfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2....7.8 High
- exfat project exfatrelan exFAT 1.3.0 allows local users to obtain sensitive information (data from deleted files in...4.7 Medium
- mediawiki rss for mediawikiThe RSS extension before 2022-04-29 for MediaWiki allows XSS via an rss element (if the feed is...6.1 Medium
- linux kernel, fedoraproject fedora, netapp h300s firmware +5 more +7 moreAn issue was discovered in the Linux kernel through 5.17.5. io_rw_init_file in fs/io_uring.c...7.8 High
ghostscriptOSS-FuzzHeap-buffer-overflow in s_PFBD_processNo score- Show moreLoading…