CVEs published in May 2022
2,612 vulnerabilities, 425 critical, 9 exploited.
- ibm cloud pak systemIBM Cloud Pak System 2.3.0 through 2.3.3.3 Interim Fix 1 uses weaker than expected cryptographic...5.9 Medium
- brocade sannavAn information exposure through log file vulnerability in Brocade SANNav versions before Brocade...5.5 Medium
- broadcom sannavBrocade SANnav before version SANnav 2.2.0 logs the REST API Authentication token in plain text.3.3 Low
MozillaFirefoxSUSESecurity update for MozillaFirefoxNo score- galsys nts-6002-gps firmwareAn issue was discovered in Galleon NTS-6002-GPS 4.14.103-Galleon-NTS-6002.V12 4. An authenticated...7.2 High
- microweber, microweber microweber/microweber +1 moreUsers Account Pre-Takeover or Users Account Takeover. in microweber/microweber6.8 Medium
- ejointech acom508 firmware, acom516 firmware, acom532 firmware +2 moreCommand injection vulnerability in Manual Ping Form (Web UI) in Shenzhen Ejoin Information...8.8 High
- pyscriptpyscriptjs (aka PyScript Demonstrator) in PyScript through 2022-05-04 allows a remote user to...7.5 High
- constantoine totp-rsObservable Timing Discrepancy in totp-rs4.2 Medium
- solana rbpfSolana rBPF - Incorrect Calculation in sdiv instruction9.1 Critical
libredwgOSS-FuzzHeap-use-after-free in dwg_add_handlerefNo score- debian linux, rarlab unrar +1 moreRARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an...7.5 High
- vim, vim vim/vim, apple macos +2 more +4 moreHeap buffer overflow in vim_strncpy find_word in vim/vim7.3 High
- python pypiCode-execution backdoor in marcador9.8 Critical
- admesh project admesh, debian linux +1 moreOut-of-bounds read in admesh8.1 High
harfbuzzOSS-FuzzUNKNOWN READ in OT::gvar::subsetNo scorelibredwgOSS-FuzzHeap-double-free in dwg_free_XRECORD_privateNo score- imagemagick, debian linux +1 moreImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.7.8 High
- vim, vim vim/vim, apple macos +1 more +3 moreNULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in vim/vim6.6 Medium
- vim, vim vim/vim, apple macos +4 more +6 moreHeap-based Buffer Overflow in function cmdline_erase_chars in vim/vim6.1 Medium
- braveBrave before 1.34, when a Private Window with Tor Connectivity is used, leaks .onion URLs in...5.3 Medium
- charmCharm vulnerable to server-side request forgery (SSRF)5.9 Medium
- keepkey firmwareIn the KeepKey firmware before 7.3.2, the bootloader can be exploited in unusual situations in...6.6 Medium
libredwgOSS-FuzzHeap-buffer-overflow in json_common_entity_dataNo score- mozilla firefoxMozilla developers Gabriele Svelto, Randell Jesup and the Mozilla Fuzzing Team reported memory...8.8 High
- mozilla firefoxThe Performance API did not properly hide the fact whether a request cross-origin resource has...4.3 Medium
- cisco clam antivirus (clamav), clamav +1 moreA vulnerability in the regex module used by the signature database load module of Clam AntiVirus ...7.8 High
- vim, vim vim/vim, apple macos +2 more +4 moreUse after free in append_command in vim/vim7.3 High
- thinkphpDeserialization of Untrusted Data7.7 High
- twelvemonkeys project twelvemonkeysXML External Entity (XXE) Injection7.3 High
- bignum project bignumDenial of Service (DoS)7.5 High
- hcl software bigfix platformHCL BigFix Platform Console is affected by a Privilege Escalation Vulnerability6.7 Medium
- hcl software bigfix platformHCL BigFix Platform Client is affected by a Privilege Escalation Vulnerability6.7 Medium
- hcl software bigfix platformHCL BigFix Platform Server API is affected by Privilege Escalation Vulnerability6.7 Medium
- hcl bigfix webuiHCL BigFix WebUI Cookie missing attributes7.4 High
- hcl software bigfix platformHCL BigFix Platform is affected by misconfigured security-related HTTP headers4.7 Medium
- hcl software bigfix platformHCL BigFix Platform is affected by weak web transport security4.8 Medium
- hcl notes, hcltech hcl inotes +1 moreHCL Notes 11.0 - 11.0.1 FP4 Sametime Embedded chat clients are vulnerable to group chats loading script on restart4.6 Medium
- hcl bigfix inventoryThis vulnerability arises because the application allows the user to perform some sensitive...2.3 Low
- hcl bigfix inventoryThere is a security vulnerability in login form related to Cross-site Request Forgery which...4.3 Medium
- hcl commerce, hcltechsw hcl commerce +1 moreHCL Commerce is affected by an Insufficient Session Expiration vulnerability.4.4 Medium
- jdownloadsExtension - Incorrect Access Control within jdownloads extension4.3 Medium
- ijoomla guruExtension - Insecure Permissions within Joomla Guru extensions7.5 High
- adam skaat countdown & clock (wordpress plugin), edmonsoft countdown builder +1 moreWordPress Countdown & Clock plugin <= 2.3.2 - Pro Features Lock Bypass vulnerability3.8 Low
- adam skaat countdown & clock (wordpress plugin), edmonsoft countdown builder +1 moreWordPress Countdown & Clock plugin <= 2.3.2 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities4.8 Medium
- gok smartbox 4 lan, smartbox 4 lan pro, smartbox 4 lan firmware +7 more +9 moreTECSON/GOK: Improper Authentication and Access Control on multiple devices9.8 Critical
- adobe after effectsAdobe After Effects Stack Buffer Overflow Could Lead To RCE7.8 High
- adobe after effectsAdobe After Effects Stack Buffer Overflow Could Lead To RCE7.8 High
- adobe photoshopAdobe Photoshop Font Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe photoshopAdobe Photoshop Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- Show moreLoading…