CVEs published in May 2022
2,612 vulnerabilities, 425 critical, 9 exploited.
- google android, mediatek, inc. mt6731, mt6732, mt6735, mt6737, mt6739, mt6750, mt6750s, mt6752, mt6753, mt6755, mt6755s, mt6757, mt6757c, mt6757cd, mt6757ch, mt6758, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6795, mt6797, mt6799, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt6985, mt8321, mt8666, mt8675, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn telephony, there is a possible way to disable receiving SMS messages due to a missing...7.8 High
- google android, mediatek, inc. mt6761, mt6768, mt6779, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6877, mt6879, mt6883, mt6885, mt6889, mt6893, mt6895, mt6983, mt8173, mt8175, mt8183, mt8185, mt8385, mt8791, mt8797 +1 moreIn alac decoder, there is a possible out of bounds read due to a missing bounds check. This could...5.5 Medium
- google android, mediatek, inc. mt6580, mt6731, mt6739, mt6761, mt6762, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt8163, mt8167, mt8168, mt8173, mt8185, mt8321, mt8362a, mt8365, mt8696, mt8735, mt8735b, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn aee driver, there is a possible use after free due to a race condition. This could lead to...6.4 Medium
- google android, mediatek, inc. mt6580, mt6731, mt6739, mt6761, mt6762, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt8163, mt8167, mt8168, mt8173, mt8185, mt8321, mt8362a, mt8365, mt8696, mt8735, mt8735b, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn aee driver, there is a possible use after free due to a race condition. This could lead to...6.4 Medium
- google android, mediatek, inc. mt6580, mt6731, mt6739, mt6761, mt6762, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt8163, mt8167, mt8168, mt8173, mt8185, mt8321, mt8362a, mt8365, mt8695, mt8696, mt8735, mt8735b, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn aee driver, there is a possible memory corruption due to active debug code. This could lead to...6.7 Medium
- google android, mediatek, inc. mt6580, mt6731, mt6739, mt6761, mt6762, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt8163, mt8167, mt8168, mt8173, mt8185, mt8321, mt8362a, mt8365, mt8696, mt8735, mt8735b, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn aee driver, there is a possible reference count mistake due to incorrect error handling. This...7.8 High
- google android, mediatek, inc. mt6833, mt6853, mt6873, mt6877, mt6885, mt6893 +1 moreIn ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to...6.7 Medium
- giteaArbitrary file deletion in gitea7.5 High
- google android, mediatek, inc. mt6580, mt6731, mt6735, mt6750s, mt6753, mt6755s, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6883, mt6885, mt6889, mt6891, mt6893, mt8167, mt8167s, mt8168, mt8173, mt8175, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8666, mt8675, mt8696, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn netdiag, there is a possible symbolic link following due to an improper link resolution. This...6.7 Medium
- samsung galaxy s22 firmware, samsung mobile devices +1 moreGiven the TEE is compromised and controlled by the attacker, improper state maintenance in...4.4 Medium
- samsung gear iconx pc managerDLL hijacking vulnerability in Gear IconX PC Manager prior to version 2.1.220405.51 allows...6.2 Medium
- samsung galaxy storeImproper input validation vulnerability in InstallAgent in Galaxy Store prior to version 4.5.41.8...6.2 Medium
- samsung link to windows serviceImproper authentication in Link to Windows Service prior to version 2.3.04.1 allows attacker to...4.0 Medium
- samsung voice noteUnprotected activities in Voice Note prior to version 21.3.51.11 allows attackers to record voice...6.2 Medium
- google android, samsung mobile devices +1 moreImproper buffer size check logic in aviextractor library prior to SMR May-2022 Release 1 allows...4.0 Medium
- google android, samsung mobile devices +1 moreImproper buffer size check logic in wmfextractor library prior to SMR May-2022 Release 1 allows...4.0 Medium
- google android, samsung mobile devices +1 moreImproper buffer size check logic in aviextractor library prior to SMR May-2022 Release 1 allows...4.0 Medium
- google android, samsung mobile devices +1 moreImproper buffer size check logic in aviextractor library prior to SMR May-2022 Release 1 allows...4.0 Medium
- google android, samsung mobile devices +1 morePath traversal vulnerability in Galaxy Themes prior to SMR May-2022 Release 1 allows attackers to...4.0 Medium
- google android, samsung mobile devices +1 moreImproper validation of removing package name in Galaxy Themes prior to SMR May-2022 Release 1...6.2 Medium
- google android, samsung mobile devices +1 moreImproper access control vulnerability in Contents To Window prior to SMR May-2022 Release 1...4.6 Medium
- google android, samsung mobile devices +1 moreImproper input validation in Settings prior to SMR-May-2022 Release 1 allows attackers to launch...7.7 High
- google android, samsung mobile devices +1 moreImproper access control vulnerability in Weather prior to SMR May-2022 Release 1 allows that...5.0 Medium
- delta electronics dmarsDelta Electronics DMARS Improper Restriction of XML External Entity Reference5.5 Medium
- ibm spectrum scaleIBM Spectrum Scale 5.1.0 through 5.1.3.0 uses weaker than expected cryptographic algorithms that...5.9 Medium
- ibm maximo asset management, maximo application suite +1 moreIBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 is vulnerable to HTTP header injection, caused by...5.4 Medium
- thedaylightstudio fuel cmsA stored cross-site scripting (XSS) vulnerability exists in FUEL-CMS 1.5.1 that allows an...5.4 Medium
- springbootmovie project springbootmovieIn SpringBootMovie <=1.2, the uploaded file suffix parameter is not filtered, resulting in...7.2 High
- springbootmovie project springbootmovieIn SpringBootMovie <=1.2 when adding movie names, malicious code can be stored because there are...5.4 Medium
- strapiInsecure password handling vulnerability in Strapi7.5 High
- phome empirecmsEmpireCMS 7.5 has a SQL injection vulnerability in AdClass.php9.8 Critical
- bluecms project bluecmsBluecms 1.6 has a SQL injection vulnerability at cooike.9.8 Critical
- jflyfox jfinal cmsJfinal_cms 5.1.0 is vulnerable to SQL Injection via com.jflyfox.system.log.LogController.java.7.2 High
- accusoft imagegearA stack-based buffer overflow vulnerability exists in the IGXMPXMLParser::parseDelimiter...7.1 High
- accusoft imagegearA memory corruption vulnerability exists in the ioca_mys_rgb_allocate functionality of Accusoft...9.8 Critical
- google fuchsia, google llc fuchsia kernel +1 moreIllegal access to Kernel log in Fuchsia5.3 Medium
- google fuchsia, google llc fuchsia kernel +1 moreInteger Overflow in Fuchsia Kernel5.3 Medium
- google llc google-oauth-java-client, google oauth client library for java +1 moreIncorrect signature verification on Google-oauth-java-client8.7 High
- tenda ax12 firmwareThere is a stack overflow vulnerability in the /goform/setMacFilterCfg function in the httpd...9.8 Critical
- tenda ac9 firmwareThere is a stack overflow vulnerability in the goform/fast_setting_wifi_set function in the httpd...9.8 Critical
- pixelimityA stored cross-site scripting (XSS) vulnerability in Pixelimity 1.0 allows attackers to execute...4.8 Medium
- pixelimityA Remote Code Execution (RCE) vulnerability exists in Pixelimity 1.0 via admin/admin-ajax.php...7.2 High
- logitech optionsBroken authentication on Logitech Options due to misvalidation of Oauth state parameter8.4 High
- partkeeprStored XSS in PartKeepr 1.4.0 Edit section in multiple api endpoints via name parameter.5.4 Medium
- mitrastar gpt-2541gnac-n1 firmwareMitraStar GPT-2541GNAC-N1 (HGU) 100VNZ0b33 devices allow remote authenticated users to obtain...8.8 High
- jerryscriptJerryScript Git version 14ff5bf does not sufficiently track and release allocated memory via...7.5 High
- rice open motion planning libraryOMPL v1.5.2 contains a memory leak in VFRRT.cpp7.5 High
- shopizerShopizer - Insufficient Session Expiration8.8 High
- clinical-genomics clinical-genomics/scout, scout +1 morePath Traversal due to `send_file` call in clinical-genomics/scout6.8 Medium
- opensuse open build serviceMultiple XXE vulnerabilities in OBS8.8 High
- Show moreLoading…