CVEs published in May 2022
2,612 vulnerabilities, 425 critical, 9 exploited.
- adobe photoshopAdobe Photoshop PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe photoshopAdobe Photoshop Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe photoshopAdobe Photoshop Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe photoshopAdobe Photoshop Font Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- adobe photoshopAdobe Photoshop Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe photoshopAdobe Photoshop Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe photoshopAdobe Photoshop PDF File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe photoshopAdobe Photoshop SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe photoshopAdobe Photoshop U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe photoshopAdobe Photoshop Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- adobe photoshopAdobe Photoshop PCX File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- adobe photoshopAdobe Photoshop Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adam skaat countdown & clock (wordpress plugin), edmonsoft countdown builder +1 moreWordPress Countdown & Clock plugin <= 2.3.2 - Reflected Cross-Site Scripting (XSS) vulnerability4.7 Medium
- adam skaat countdown & clock (wordpress plugin), edmonsoft countdown builder +1 moreWordPress Countdown & Clock plugin <= 2.3.2 - Auth. Stored Cross-Site Scripting (XSS) vulnerability5.9 Medium
- andrea pernici news sitemap for google (wordpress plugin), google-news-sitemap project google-news-sitemap +1 moreAndrea Pernici News Sitemap for Google plugin <= 1.0.16 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability5.4 Medium
- bdt-121 project firmwareDragon Path Technologies Bharti Airtel Routers Hardware BDT-121 version 1.0 is vulnerable to...4.8 Medium
- splunk, splunk enterprise +1 moreReflected XSS in a query parameter of the Monitoring Console8.8 High
- splunk, splunk enterprise +1 morePath Traversal in search parameter results in external content injection8.8 High
- splunk, splunk enterprise +1 moreError message discloses internal path4.3 Medium
- splunk, splunk enterprise +1 moreLocal privilege escalation via a default path in Splunk Enterprise Windows8.8 High
- splunk, splunk enterprise +1 moreUsername enumeration through lockout message in REST API5.3 Medium
- splunk, splunk enterprise +1 moreS2S TcpToken authentication bypass7.5 High
- splunk, splunk enterprise +1 moreBypass of Splunk Enterprise's implementation of DUO MFA8.1 High
- fudforumFUDforum 3.1.1 is vulnerable to Stored XSS.5.4 Medium
- broadcom sannavA vulnerability in the role-based access control (RBAC) functionality of the Brocade SANNav...8.8 High
- broadcom sannavIn Brocade SANnav before Brocade SANnav 2.2.0, multiple endpoints associated with Zone management...9.8 Critical
- broadcom sannavBrocade SANnav before SANnav 2.2.0 application uses the Blowfish symmetric encryption algorithm...6.5 Medium
- johnson controls metasys ads/adx/oas server, johnsoncontrols metasys application and data server, metasys extended application and data server +1 more +3 moreMetasys Unverified Password Change8.0 High
- ibm guardium data encryptionIBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 prepares a structured message for...3.0 Low
- ibm guardium data encryptionIBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 could allow a remote attacker to obtain...2.7 Low
- piwigoSQL Injection vulnerability in admin/batch_manager.php in piwigo v2.9.5, via the filter_category...8.8 High
- piwigoSQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter...8.8 High
- piwigoSQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter...8.8 High
- piwigoSQL Injection vulnerability in cat_move.php in piwigo v2.9.5, via the selection parameter to...9.8 Critical
- piwigoSQL Injection vulnerability in admin/group_list.php in piwigo v2.9.5, via the group parameter to...4.9 Medium
- tenda ax1806 firmwareTenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the wanMTU parameter in the...7.5 High
- tenda ax1806 firmwareTenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in...7.5 High
- tenda ax1806 firmwareTenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the...7.5 High
- tenda ax1806 firmwareTenda AX1806 v1.0.0.1 was discovered to contain a heap overflow via the mac parameter in the...7.5 High
- tenda ax1806 firmwareTenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the shareSpeed parameter in...7.5 High
- netty, netapp active iq unified manager, oncommand workflow automation +2 more +4 moreLocal Information Disclosure Vulnerability in io.netty:netty-codec-http5.5 Medium
- uclibc, uclibc-ng project uclibc-ng +1 moreuClibc-ng through 1.0.40 and uClibc through 0.9.33.2 use predictable DNS transaction IDs that may...6.5 Medium
- webkitgtk, debian linux +1 moreIn WebKitGTK through 2.36.0 (and WPE WebKit), there is a heap-based buffer overflow in WebCore:...7.5 High
- fluxcd flux2, kustomize-controller +1 moreImproper path handling in Kustomization files allows for denial of service7.7 High
- kubernetes ingress-nginxIngress-nginx directive injection via annotations7.6 High
- kubernetes ingress-nginxIngress-nginx path can be pointed to service account token file7.6 High
- fluxcd flux2, helm-controller, kustomize-controller +2 moreImproper kubeconfig validation allows arbitrary code execution9.9 Critical
- 3cxAn issue was discovered in the 3CX Phone System Management Console prior to version 18 Update 3...9.8 Critical
- ecdsautils project ecdsautils, debian linux, fedoraproject fedora +2 moreTrivial signature forgery in ecdsautils10.0 Critical
- contaoCross site scripting via canonical tag7.2 High
- Show moreLoading…