CVEs published in May 2022
2,612 vulnerabilities, 425 critical, 9 exploited.
- xwiki, xwiki xwiki-platform +1 moreCrypto script service uses hashing algorithm SHA1 with RSA for certificate signature in xwiki-platform5.4 Medium
- sourcegraphRemote Code Execution in sourcegraph6.6 Medium
- argoproj argo-workflows, argo workflows +1 morePrivilege Escalation in argo-workflows7.1 High
- matrix irc bridge, matrix-org matrix-appservice-irc +1 moreImproper handling of multiline messages in matrix-appservice-irc8.0 High
- mozilla hawkReDoS vulnerability in header parsing in hawk7.4 High
- auth0 lockHTML injection with additional signup fields6.1 Medium
- theupdateframework go-tufNo protection against rollback attacks in go-tuf8.0 High
- zohocorp manageengine opmanagerZoho ManageEngine OPManager through 125588 allows SQL Injection via a few default reports.9.8 Critical
- rubygems rubygems.orgUnauthorized gem takeover for some gems on rubygems.org9.9 Critical
- freedesktop poppler, debian linux, fedoraproject fedora +2 moreA logic error in the Hints::Hints function of Poppler v22.03.0 allows attackers to cause a Denial...6.5 Medium
- foxit pdf editor, pdf reader +1 moreFoxit PDF Reader v11.2.1.53537 was discovered to contain a NULL pointer dereference via the...5.5 Medium
- bladex springbladeSpringBlade v3.2.0 and below was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- totolink n600r firmwareTOTOLINK N600R v5.3c.5507_B20171031 was discovered to contain a command injection vulnerability...9.8 Critical
- sophos firewall, firewall firmware +1 moreMultiple XSS vulnerabilities in Webadmin allow for privilege escalation from MySophos admin to...8.4 High
- sophos firewall, firewall firmware +1 moreMultiple XSS vulnerabilities in Webadmin allow for privilege escalation from admin to super-admin...6.8 Medium
- totolink a7100ru firmwareIt is found that there is a command injection vulnerability in the setWiFiWpsCfg interface in...9.8 Critical
- totolink a7100ru firmwareIt is found that there is a command injection vulnerability in the setWiFiSignalCfg interface in...9.8 Critical
- totolink a7100ru firmwareIt is found that there is a command injection vulnerability in the setWiFiAdvancedCfg interface...9.8 Critical
- totolink a7100ru firmwareIt is found that there is a command injection vulnerability in the setL2tpServerCfg interface in...9.8 Critical
- totolink a7100ru firmwareIt is found that there is a command injection vulnerability in the setParentalRules interface in...9.8 Critical
- totolink a7100ru firmwareIt is found that there is a command injection vulnerability in the setOpenVpnCfg interface in...9.8 Critical
- anker eufy homebase 2, eufy homebase 2 firmware +1 moreA denial of service vulnerability exists in the libxm_av.so DemuxCmdInBuffer functionality of...7.4 High
- anker eufy homebase 2, eufy homebase 2 firmware +1 moreAn authentication bypass vulnerability exists in the libxm_av.so getpeermac() functionality of...7.1 High
- totolink a7100ru firmwareIt is found that there is a command injection vulnerability in the delParentalRules interface in...9.8 Critical
- totolink a7100ru firmwareIt is found that there is a command injection vulnerability in the setopenvpnclientcfg interface...9.8 Critical
- totolink a7100ru firmwareIt is found that there is a command injection vulnerability in the setWiFiWpsStart interface in...9.8 Critical
- qnap qvrVulnerability in QVR9.8 Critical
- qnap photo stationImproper authentication in Photo Station7.1 High
- qnap video stationImproper authentication in Video Station7.1 High
- qnap video stationInformation leakage in Video Station5.3 Medium
- qnap qts, quts hero, qutscloud +2 moreOpen redirect4.3 Medium
- qnap qts, quts hero, qutscloud +2 moreReflected XSS5.7 Medium
- qnap qts, quts hero, qutscloud +2 moreArbitrary file read6.5 Medium
- qnap qts, quts hero, qutscloud +2 moreCommand injection8.8 High
- qnap qts, quts hero, qutscloud +2 morePath Traversal in thttpd5.3 Medium
- f5 big-ip ltm, advanced waf, asm, and apm, big-ip access policy manager, big-ip advanced web application firewall +2 more +4 moreOn F5 BIG-IP LTM, Advanced WAF, ASM, or APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn F5 BIG-IP 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, when...5.3 Medium
- f5 big-ip, big-iq centralized management, big-ip access policy manager +10 more +12 moreOn F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x...5.3 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x...4.3 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x...5.9 Medium
- f5 big-ip apm, big-ip apm clients, access policy manager clients +1 more +3 moreOn F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x...7.8 High
- covid-19 directory on vaccination system project directory on vaccination systemSourcecodester Covid-19 Directory on Vaccination System 1.0 is vulnerable to SQL Injection via...9.8 Critical
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn F5 BIG-IP 15.1.x versions prior to 15.1.5.1 and 14.1.x versions prior to 14.1.4.6, when...6.5 Medium
- f5 big-ip, big-ip advanced firewall manager, big-ip carrier-grade nat +1 more +3 moreOn 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to...7.5 High
- f5 big-ip apm, big-ip apm clients, big-ip access policy manager +1 more +3 moreOn F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x...7.3 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn F5 BIG-IP 16.1.x versions prior to 16.1.2.2 and 15.1.x versions prior to 15.1.5.1, when a BIG...5.9 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, and 14.1.x...8.0 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn F5 BIG-IP 16.1.x versions prior to 16.1.2 and 15.1.x versions prior to 15.1.5.1, when the DNS...5.9 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn F5 BIG-IP 16.1.x versions prior to 16.1.2.2, when the stream profile is configured on a...7.5 High
- Show moreLoading…