CVEs published in May 2022
2,612 vulnerabilities, 425 critical, 9 exploited.
accountsserviceAlmaLinux,accountsservice-develAlmaLinux,accountsservice-libsAlmaLinux +2 moreaccountsservice bug fix and enhancement updateNo scorelibmemcachedAlmaLinux,libmemcached-develAlmaLinux,libmemcached-libsAlmaLinux +2 morelibmemcached bug fix and enhancement updateNo scorelibpinyinAlmaLinux,libpinyin-dataAlmaLinux,libpinyin-develAlmaLinux +1 more +3 morelibpinyin bug fix and enhancement updateNo scorecertmongerAlmaLinuxcertmonger bug fix and enhancement updateNo scorelorax-templates-rhelAlmaLinuxlorax-templates-rhel bug fix and enhancement updateNo scoreloraxAlmaLinux,composer-cliAlmaLinux,lorax-composerAlmaLinux +3 more +5 morelorax bug fix and enhancement updateNo scorejs-d3-flame-graphAlmaLinuxjs-d3-flame-graph bug fix and enhancement updateNo scoreanacondaAlmaLinux,anaconda-coreAlmaLinux,anaconda-dracutAlmaLinux +4 more +6 moreanaconda bug fix and enhancement updateNo scoregdmAlmaLinux,gdm-develAlmaLinux,gdm-pam-extensions-develAlmaLinux +2 moregdm bug fix and enhancement updateNo scoreevinceAlmaLinux,evince-browser-pluginAlmaLinux,evince-develAlmaLinux +2 more +4 moreevince bug fix and enhancement updateNo scorepcpAlmaLinux,pcp-confAlmaLinux,pcp-develAlmaLinux +97 more +99 morepcp bug fix and enhancement updateNo scoregcc-toolset-11-gccAlmaLinux,gcc-toolset-11-gcc-c++AlmaLinux,gcc-toolset-11-gcc-gdb-pluginAlmaLinux +15 more +17 moregcc-toolset-11-gcc bug fix and enhancement updateNo scorenetwork-manager-appletAlmaLinux,nm-connection-editorAlmaLinux +1 morenetwork-manager-applet bug fix and enhancement updateNo scorefence-agents-aliyunAlmaLinux,fence-agents-allAlmaLinux,fence-agents-amt-wsAlmaLinux +42 more +44 morefence-agents bug fix and enhancement updateNo score- vim, vim vim/vim, apple macos +1 more +3 moreBuffer Over-read in function find_next_quote in vim/vim6.6 Medium
- gruntjs grunt, gruntjs/grunt +1 morefile.copy operations in GruntJS are vulnerable to a TOCTOU race condition leading to arbitrary file write in gruntjs/grunt7.8 High
- fapolicyd project fapolicydA vulnerability was found in fapolicyd. The vulnerability occurs due to an assumption on how...8.4 High
- employee daily task management system project daily task management systemStored XSS in Add New Employee Form in Sourcecodester Employee Daily Task Management System 1.0...5.4 Medium
- hpe nimbleosA security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays, HPE...7.5 High
- hp integrated lights-out 4A potential security vulnerability has been identified in Integrated Lights-Out 4 (iLO 4). The...7.5 High
- wealth bonanza wealth management systemBonanza Wealth Management System (BWM) 7.3.2 allows SQL injection via the login form. Users who...9.8 Critical
- 1password1Password for Mac 7.2.4 through 7.9.x before 7.9.3 is vulnerable to a process validation bypass....5.5 Medium
- xpdfreader xpdfThere is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because...7.8 High
- craftcms craft cmsImproper account password reset in Craft CMS8.8 High
- exploreit explore cmsExplore CMS v1.0 was discovered to contain a SQL injection vulnerability via a /page.php?id=...9.8 Critical
- phprojekt phpsimplygest project phpsimplygestA stored cross-site scripting (XSS) vulnerability in PHProjekt PhpSimplyGest v1.3.0 allows...5.4 Medium
- insightsoftware magnitude simba amazon redshift jdbc driverAn argument injection vulnerability in the browser-based authentication component of the...7.8 High
- insightsoftware magnitude simba amazon athena jdbc driverAn argument injection vulnerability in the browser-based authentication component of the...7.8 High
- insightsoftware magnitude simba amazon redshift odbc driverAn argument injection vulnerability in the browser-based authentication component of the...7.8 High
- insightsoftware magnitude simba amazon athena odbc driverAn argument injection vulnerability in the browser-based authentication component of the...7.8 High
- htmldoc project htmldoc, debian linux +1 moreThere is a vulnerability in htmldoc 1.9.16. In image_load_jpeg function image.cxx when it calls...5.5 Medium
- commonninja easily generate rest api, unknown easily generate rest api url +1 moreEasily Generate Rest API Url <= 1.0.0 - Admin+ Stored Cross-Site Scripting4.8 Medium
- slide anything project anything, unknown slide anything – responsive content / html slider and carousel +1 moreSlide Anything < 2.3.44 - Editor+ Stored Cross-Site Scripting4.8 Medium
- unknown vertical scroll recent post, vertical scroll recent post project scroll recent post +1 moreVertical scroll recent post < 14.0 - Reflected Cross-Site Scripting6.1 Medium
- code-atlantic popup maker, unknown popup maker – popup for opt-ins, lead gen, & more +1 morePopup Maker < 1.16.5 - Admin+ Stored Cross-Site Scripting4.8 Medium
- themify post type builder search addon, unknown themify-ptb-search +1 moreThemify - Post Type Builder Search Addon < 1.4.0 - Reflected Cross-Site Scripting6.1 Medium
- ays-pro personal dictionaryPersonal Dictionary < 1.3.4 - Unauthenticated SQLi9.8 Critical
- pluginbazaar order listener for woocommerce, unknown order listener for woocommerce – play sounds instantly on new orders +1 moreOrder Listener for WooCommerce < 3.2.2 - Unauthenticated SQLi9.8 Critical
- getigniteup igniteup, unknown igniteup – coming soon and maintenance mode +1 moreIgniteUp <= 3.4.1 - Admin+ Stored Cross-Site Scripting5.4 Medium
- unknown wp social buttonsWP Social Buttons <= 2.1 - Admin+ Stored Cross-Site Scripting4.8 Medium
- semadatacoop sema apiSEMA API < 4.02 - Unauthenticated SQLi9.8 Critical
- unknown wp video gallery, wp-video-gallery-free project wp-video-gallery-free +1 moreWP Video Gallery <= 1.7.1 - Unauthenticated SQLi9.8 Critical
- badgeosBadgeOS <= 3.7.0 - Unauthenticated SQLi9.8 Critical
- ubigeo de peru para woocommerce project de peru para woocommerce, unknown ubigeo de perú para woocommerce y wordpress +1 moreUbigeo de Peru < 3.6.4 - Unauthenticated SQLi9.8 Critical
- admin menu editor project menu editor, janis elsts admin menu editor +1 moreAdmin Menu Editor <= 1.0.4 - Reflected Cross-Site Scripting6.1 Medium
- mapsvgMapSVG < 6.2.20 - Unauthenticated SQLi9.8 Critical
- supsystic popup, popup by supsystic +1 morePopup by Supsystic < 1.10.9 - Unauthenticated Subscriber Email Addresses Disclosure5.3 Medium
- unknown wpgraphqlWP-GraphQL < 0.3.5 - Improper Access Control5.3 Medium
- ibm iIBM Navigator for i 7.2, 7.3, and 7.4 (heritage version) could allow a remote attacker to obtain...3.7 Low
- ibm robotic process automation, robotic process automation as a service +1 moreIBM Robotic Process Automation 21.0.1 could allow a register user on the system to physically...4.6 Medium
- Show moreLoading…