CVEs published in May 2022
2,612 vulnerabilities, 425 critical, 9 exploited.
- twinoaks computing coredx ddsTwinOaks Computing CoreDX DDS Secure Network Amplification7.5 High
- rti connext micro, connext professional, connext dds micro +3 more +5 morePotential Network Amplification and Information Exposure in RTI Connext Professional and Connext Micro8.8 High
- objectcomputing openddsOCI OpenDDS Secure Amplification8.6 High
- objectcomputing openddsOCI OpenDDS Secure Improper Handling of Length Parameter Inconsistency7.0 High
- eclipse cycloneddsEclipse CycloneDDS Improper Handling of Syntactically Invalid Structure6.6 Medium
- eclipse cycloneddsEclipse CycloneDDS Write-what-where Condition6.6 Medium
- gurum gurumddsGurumDDS Heap-based Buffer Overflow8.6 High
- gogs, gogs gogs/gogs +1 moreStored xss bug in gogs/gogs7.3 High
- mozilla thunderbirdThe parent process would not properly check whether the Speech Synthesis feature is enabled, when...6.5 Medium
- mozilla thunderbirdWhen viewing an email message A, which contains an attached message B, where B is encrypted or...4.3 Medium
- masacmsMasaCMS 7.2.1 is affected by a path traversal vulnerability in /index.cfm/_api/asset/image/.7.5 High
- gpacGPAC 2.1-DEV-rev87-g053aae8-master. has a Null Pointer Dereference vulnerability in...7.5 High
- gpacIn GPAC 2.1-DEV-rev87-g053aae8-master, function BS_ReadByte() in utils/bitstream.c has a failed...7.5 High
- rockcarry ffjpegIn ffjpeg (commit hash: caade60), the function bmp_load() in bmp.c contains an integer overflow...6.5 Medium
- xxyopen novel-plusnovel-plus 3.6.0 suffers from an Arbitrary file reading vulnerability.7.5 High
- mingyuefusu project mingyuefusumingyuefusu Library Management System all versions as of 03-27-2022 is vulnerable to SQL Injection.9.8 Critical
- jflyfox jfinal cmsA command execution vulnerability exists in jfinal_cms 5.0.1 via com.jflyfox.component.controller...9.8 Critical
- diagrams drawio, jgraph jgraph/drawio +1 moreArbitrary Code Execution through Sanitizer Bypass in jgraph/drawio9.6 Critical
- librehealth ehrIn LibreHealth EHR 2.0.0, lack of sanitization of the GET parameter payment_id in interface...8.8 High
- librehealth ehrIn LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters debug and InsId in interface...5.4 Medium
- librehealth ehrIn LibreHealth EHR 2.0.0, lack of sanitization of the GET parameters formseq and formid in...5.4 Medium
- articatech artica proxyA OS Command Injection vulnerability was discovered in Artica Proxy 4.30.000000. Attackers can...9.8 Critical
- yetiforcecompany yetiforcecompany/yetiforcecrm, yetiforce customer relationship management +1 moreUnrestructed file upload in yetiforcecompany/yetiforcecrm9.1 Critical
- bookeen notea firmwareBookeen Notea Firmware BK_R_1.0.5_20210608 is affected by a directory traversal vulnerability...4.6 Medium
- clinical-genomics clinical-genomics/scout, scout +1 moreServer-Side Request Forgery in scout in clinical-genomics/scout9.4 Critical
mysql-8.0Ubuntumysql-8.0 regressionNo score- bluditBludit New Content Module new-content cross site scripting3.5 Low
- apache jenaProcessing external DTDs9.8 Critical
- rsyslog, debian linux, fedoraproject fedora +1 more +3 moreBuffer overflow in TCP syslog server (receiver) components in rsyslog8.1 High
- squirrel-lang squirrel, fedoraproject fedora +1 morethread_call in sqbaselib.cpp in SQUIRREL 3.2 lacks a certain sq_reservestack call.10.0 Critical
- ohler agooAgoo through 2.14.2 does not reject GraphQL fragment spreads that form cycles, leading to an...7.5 High
- python-libnmap project python-libnmapArgument injection in python-libnmap9.0 Critical
- openldap, debian linux, netapp h300s firmware +8 more +10 moreIn OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the...9.8 Critical
- fluxcd flux2, kustomize-controller +1 moreImproper path handling in kustomization files allows path traversal9.9 Critical
- jquery json-viewer project json-viewerCross-site Scripting in jquery.json-viewer6.1 Medium
networkd-dispatcherUbuntunetworkd-dispatcher regressionNo score- talend administration centerTalend Administration Center has a vulnerability that allows an authenticated user to use XML...6.5 Medium
- talend administration centerTalend Administration Center has a vulnerability that allows an authenticated user to use the...6.5 Medium
- secomea gatemanagerGateManager debug interface is included in production builds4.9 Medium
- cisco small business rv series router firmware, rv340 firmware, rv340w firmware +2 more +4 moreCisco Small Business RV Series Routers Command Injection Vulnerabilities4.7 Medium
- cisco small business rv series router firmware, rv340 firmware, rv340w firmware +2 more +4 moreCisco Small Business RV Series Routers Command Injection Vulnerabilities4.7 Medium
- clamav, cisco amp for endpoints, secure endpoint +2 more +4 moreClamAV Truncated File Denial of Service Vulnerability Affecting Cisco Products: April 20226.5 Medium
- cisco roomos software, roomos, telepresence collaboration endpoint +2 moreCisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities6.5 Medium
- clamav, cisco amp for endpoints, secure endpoint +2 more +4 moreClamAV HTML Scanning Memory Leak Vulnerability Affecting Cisco Products: April 20227.5 High
- cisco enterprise nfv infrastructure softwareCisco Enterprise NFV Infrastructure Software Vulnerabilities9.9 Critical
- cisco enterprise nfv infrastructure softwareCisco Enterprise NFV Infrastructure Software Vulnerabilities9.9 Critical
- cisco enterprise nfv infrastructure softwareCisco Enterprise NFV Infrastructure Software Vulnerabilities9.9 Critical
- clamav, cisco amp for endpoints, secure endpoint +2 more +4 moreClamAV TIFF File Parsing Denial of Service Vulnerability Affecting Cisco Products: April 20227.5 High
- clamav, cisco amp for endpoints, secure endpoint +2 more +4 moreClamAV CHM File Parsing Denial of Service Vulnerability Affecting Cisco Products: April 20228.6 High
- cisco roomos software, roomos, telepresence collaboration endpoint +2 moreCisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities6.5 Medium
- Show moreLoading…