CVEs published in May 2022
2,612 vulnerabilities, 425 critical, 9 exploited.
- paulledemon tkvideoplayerMemory issue in playing videos2.9 Low
- cisco firepower management center, secure firewall management center +1 moreCisco Firepower Management Center Software Information Disclosure Vulnerability4.3 Medium
- cisco firepower management center, secure firewall management center +1 moreCisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities5.4 Medium
- cisco firepower management center, secure firewall management center +1 moreCisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities5.4 Medium
- cisco firepower management center, secure firewall management center +1 moreCisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities5.4 Medium
- cisco adaptive security appliance software, adaptive security appliance (asa) software, secure firewall threat defense +2 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability8.6 High
- cisco firepower threat defense software, secure firewall threat defense +1 moreCisco Firepower Threat Defense Software XML Injection Vulnerability4.4 Medium
- cisco firepower threat defense software, secure firewall threat defense +1 moreCisco Firepower Threat Defense Software Security Intelligence DNS Feed Bypass Vulnerability4.0 Medium
- cisco adaptive security appliance software, adaptive security appliance (asa) software +1 moreCisco Adaptive Security Appliance Software Clientless SSL VPN Heap Overflow Vulnerability8.5 High
- cisco firepower management center 6.1.0, secure firewall management center +1 moreCisco Firepower Management Center Software Cross-Site Scripting Vulnerability6.1 Medium
- cisco adaptive security appliance software, adaptive security appliance (asa) software, secure firewall threat defense +2 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software IPsec IKEv2 VPN Information Disclosure Vulnerability7.4 High
- cisco firepower management center, secure firewall management center +1 moreCisco Firepower Management Center File Upload Security Bypass Vulnerability6.5 Medium
- cisco firepower threat defense software, secure firewall threat defense +1 moreCisco Firepower Threat Defense Software DNS Enforcement Denial of Service Vulnerability8.6 High
- cisco adaptive security appliance software, adaptive security appliance (asa) software, secure firewall threat defense +2 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Privilege Escalation Vulnerability8.8 High
- cisco adaptive security appliance software, adaptive security appliance (asa) software, secure firewall threat defense +2 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software DNS Inspection Denial of Service Vulnerability8.6 High
- cisco firepower threat defense software, secure firewall threat defense +1 moreCisco Firepower Threat Defense Software Denial of Service Vulnerability8.6 High
- cisco firepower threat defense software, secure firewall threat defense +1 moreCisco Firepower Threat Defense Software Snort Out of Memory Denial of Service Vulnerability8.6 High
- cisco firepower threat defense software, secure firewall threat defense +1 moreCisco Firepower Threat Defense Software Local Malware Analysis Denial of Service Vulnerability5.3 Medium
- cisco firepower threat defense software, secure firewall threat defense +1 moreCisco Firepower Threat Defense Software TCP Proxy Denial of Service Vulnerability8.6 High
- cisco adaptive security appliance software, adaptive security appliance (asa) software, secure firewall threat defense +2 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Denial of Service Vulnerability8.6 High
- sscms siteserver cmsRCE in SiteServer CMS9.8 Critical
- xmlsoft libxml2, libxslt, debian linux +19 more +21 moreIn libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c ...6.5 Medium
- openssl, netapp a250 firmware, a700s firmware +28 more +30 moreResource leakage when decoding certificates and keys7.5 High
- openssl, netapp a250 firmware, a700s firmware +27 more +29 moreIncorrect MAC key used in the RC4-MD5 ciphersuite5.9 Medium
- openssl, netapp a250 firmware, a700s firmware +28 more +30 moreOCSP_basic_verify may incorrectly verify the response signing certificate5.3 Medium
- openssl, debian linux, fedoraproject fedora +37 more +39 moreThe c_rehash script allows command injection7.3 High
- squire-technologies svi ms management systemThe Java Remote Management Interface of all versions of SVI MS Management System was discovered...9.8 Critical
- orlansoft erpThe Java Remote Management Interface of all versions of Orlansoft ERP was discovered to contain a...9.8 Critical
- xtendtech voice loggerA reflected cross site scripting (XSS) vulnerability in Xtend Voice Logger 1.0 allows attackers...6.1 Medium
- totolink n100re firmware, n200re firmware +1 moreA cross site scripting (XSS) vulnerability in the error page of Totolink N200RE and N100RE...6.1 Medium
- adobe xmp toolkit, xmp toolkit software development kit, debian linux +2 moreXMP-Toolkit SDK Stack-based Buffer Overflow Could Lead To Arbitrary Code Execution7.8 High
- adobe xmp toolkit, xmp toolkit software development kit, debian linux +2 moreXMP-Toolkit SDK Stack-based Buffer Overflow Could Lead To Arbitrary Code Execution7.8 High
- adobe xmp toolkit, xmp toolkit software development kit, debian linux +2 moreXMP-Toolkit SDK Stack-based Buffer Overflow Could Lead To Arbitrary Code Execution7.8 High
- adobe xmp toolkit, xmp toolkit software development kit, debian linux +2 moreXMP-Toolkit SDK Stack-based Buffer Overflow Could Lead To Arbitrary Code Execution7.8 High
- adobe xmp toolkit, xmp toolkit software development kit, debian linux +2 moreXMP-Toolkit Null Pointer Dereference Application denial-of-service5.5 Medium
- menlosecurity email isolationLinks may not be rewritten according to policy in some specially formatted emails.5.3 Medium
- mozilla geckodriverImproved Host header checks to reject requests not sent to a well-known local hostname or IP, or...5.3 Medium
- ping identity pingfederate pingone mfa integration kit, pingidentity pingone mfa integration kit +1 morePingFederate PingOneMFA Integration Kit MFA Bypass7.7 High
- ping identity pingfederatePingFederate Password Reset via Authentication API Mishandling6.5 Medium
- mythemeshop wp subscribe, wp subscribe (wordpress plugin) +1 moreWordPress WP Subscribe plugin <= 1.2.12 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability3.4 Low
- m-files serverScript injection in M-Files Admin5.2 Medium
- cloudways breeze, breeze (wordpress plugin) +1 moreWordPress Breeze plugin <= 2.0.2 - Plugin Settings Change leading to Cross-Site Scripting (XSS) vulnerability6.5 Medium
- abb rtu500 firmware, hitachi energy rtu500 series cmu firmware +1 moreSpecially Crafted Modbus TCP Packet Vulnerability in RTU500 series7.5 High
- matio project matioA memory leak was discovered in matio 1.5.21 and earlier in Mat_VarReadNextInfo5() in mat5.c via...5.5 Medium
- qemu, redhat enterprise linux +1 moreA DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU. EHCI does not...8.2 High
- chris bagwell sox, sound exchange project exchange +1 moreA flaw was found in sox 14.4.1. The lsx_adpcm_init function within libsox leads to a global...9.1 Critical
- micro focus netiq access managerPotential open redirection vulnerability in NetIQ Access Manager versions prior to version 5.0.24.0 Medium
- micro focus netiq access managerCross Site Scripting vulnerability in NetIQ Access Manager versions prior to version 5.0.22.9 Low
- delta electronics diaenergieDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection...9.8 Critical
- delta electronics diaenergieDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection...9.8 Critical
- Show moreLoading…