CVEs published in May 2022
2,612 vulnerabilities, 425 critical, 9 exploited.
- cisco small business rv series router firmware, rv340 firmware, rv340w firmware +2 more +4 moreCisco Small Business RV Series Routers Remote Code Execution Vulnerability4.7 Medium
- cisco sd-wan vmanage, catalyst sd-wan manager +1 moreCisco SD-WAN vManage Software Information Disclosure Vulnerability4.4 Medium
- microweber, microweber microweber/microweber +1 moreReflected XSS in microweber/microweber6.3 Medium
- enhancesoft osticketSQL injection in osTicket before 1.14.8 and 1.15.4 login and password reset process allows...9.8 Critical
- ping identity pingid integration for windows loginPingID Integration for Windows Login MFA Bypass6.4 Medium
drupal/quick_node_clonePackagistThe module adds a "Clone" tab to a node. When clicked, a new node is created and fields from the previous node are populated into the new fields. This module supports paragraphs, groups, and other ref…No scoredrupal/image_field_captionPackagistImage Field Caption (image_field_caption) adds an extra text area for captions on image fields. The module doesn't sanitize user input in certain cases, which leads to a Cross-Site-Scripting (XSS) vul…No scoredrupal/dfpPackagistDoubleclick for Publishers (DFP) module enables a site to place ads from Doubleclick For Publishers. The module doesn't sanitize user input in certain cases, which leads to Cross-Site-Scripting (XSS)…No score- h3c magic r100 firmwareIn H3C MagicR100 <=V100R005, the / Ajax / ajaxget interface can be accessed without authorization...7.5 High
- fortinet fortios, fortiproxy, fortios, fortiproxy +2 moreA server-generated error message containing sensitive information in Fortinet FortiOS 7.0.0...4.3 Medium
- fortinet fortisoarAn improper access control in Fortinet FortiSOAR before 7.2.0 allows unauthenticated attackers to...7.5 High
- fortinet fortiosAn improper access control vulnerability [CWE-284] in FortiOS versions 6.4.8 and prior and 7.0.3...6.3 Medium
- fortinet fortiisolatorAn improper access control vulnerability [CWE-284] in FortiIsolator versions 2.3.2 and below may...8.8 High
- sonicwall global vpn clientSonicWall Global VPN Client 4.10.7.1117 installer (32-bit and 64-bit) and earlier versions have a...7.8 High
- tenda ac15 firmwareThere is a command injection vulnerability at the /goform/setsambacfg interface of Tenda AC15...9.8 Critical
- tenda ac15 firmwareTenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin is vulnerable to Buffer Overflow. The stack...7.5 High
- chshcms cscmsCscms 4.1 is vulnerable to SQL Injection. Log into the background, open the song module, create a...8.8 High
- simple doctor\'s appointment system project doctor\'s appointment systemSourcecodester Doctor's Appointment System 1.0 is vulnerable to File Upload to RCE via Image...9.8 Critical
- web\@rchiv project web\@rchivAn arbitrary file upload vulnerability in Web@rchiv 1.0 allows attackers to execute arbitrary...9.8 Critical
- fantastic blog project blogA SQL injection vulnerability exists in Sourcecodester Fantastic Blog CMS 1.0 . An attacker can...9.8 Critical
- experian hunterExperian Hunter 1.16 allows remote authenticated users to modify assumed-immutable elements via...4.3 Medium
- libwav project libwavThe function wav_format_write in libwav.c in libwav through 2017-04-20 has an Use of...7.5 High
- fujitsu lifebook a3510 firmware, lifebook e449 firmware, lifebook e459 firmware +9 more +11 moreAn issue was discovered on certain Fujitsu LIEFBOOK devices (A3510, U9310, U7511/U7411/U7311,...7.8 High
- nopcommerceIn nopCommerce 4.50.1, an open redirect vulnerability can be triggered by luring a user to...6.1 Medium
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreGTA URLs issued by LMM WEB API may leak information7.5 High
- secomea sitemanager, sitemanager 1129 firmware, sitemanager 1139 firmware +7 more +9 moreBuffer overrun6.6 Medium
- secomea sitemanager, sitemanager 1129 firmware, sitemanager 1139 firmware +7 more +9 moreUser controllable HTML element attribute (potential XSS)9.1 Critical
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreHacking attempts from logged-in users are not properly logged by GM4.3 Medium
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreInsufficient privilege checks on object access and updates.5.4 Medium
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreReflected XSS issues in GateManager4.2 Medium
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreInformation leak via device availability query function4.3 Medium
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreInsufficient scope checks allows adding unrelated audit log entries4.3 Medium
- mantisbtMantisBT vulnerable to XSS via unescaped output in browser_search_plugin.php6.1 Medium
- secomea gatemanager, gatemanager 4250 firmware, gatemanager 4260 firmware +2 more +4 moreUnload handlers may unintentionally defeat CSRF guards4.2 Medium
- secomea gatemanager, linkmanager, sitemanager +13 more +15 moreClients may connect to a GateManager with TLS 1.05.6 Medium
- sandboxieAn incorrect access control issue in Sandboxie Classic v5.55.13 allows attackers to cause a...8.6 High
- poultry farm management system project farm management systemPoultry Farm Management System v1.0 was discovered to contain a SQL injection vulnerability via...8.8 High
- seacmsSeacms v11.6 was discovered to contain a remote command execution (RCE) vulnerability via the...7.2 High
- eve-ngAn OS Command Injection vulnerability in the configuration parser of Eve-NG Professional through...8.8 High
- ar-php arphpA reflected cross-site scripting (XSS) vulnerability in the component Query.php of arPHP v3.6.0...6.1 Medium
- tenda ax12 firmwareTenda AX12 v22.03.01.21_CN was discovered to contain a stack overflow via the list parameter at ...9.8 Critical
- ujcms jspxcmsJspxcms v10.2.0 allows attackers to execute a Server-Side Request Forgery (SSRF) via /cmscp/ext...6.5 Medium
- skycaijiSkycaiji v2.4 was discovered to contain a remote code execution (RCE) vulnerability via ...7.2 High
- wdjawdja v2.1 is affected by a SQL injection vulnerability in the foreground search function.9.8 Critical
- facturascripts, neorazorx neorazorx/facturascripts +1 moreCross-site scripting - Reflected in Create Subaccount in neorazorx/facturascripts9.9 Critical
- microweber, microweber microweber/microweber +1 moreDOM XSS in microweber ver 1.2.15 in microweber/microweber8.8 High
- octopus serverPermissions were not properly verified in the API on projects using version control in Git. This...4.3 Medium
- fusionpbxFusionpbx v4.4 and below contains a command injection vulnerability via the download email logs...9.8 Critical
- fedoraproject fedora, libsdl sdl ttf +1 moreSDL_ttf v2.0.18 and below was discovered to contain an arbitrary memory write via the function...7.8 High
- wuzhicmsWuzhicms v4.1.0 was discovered to contain a SQL injection vulnerability via the groupid parameter...9.8 Critical
- Show moreLoading…