CVEs published in May 2022
2,612 vulnerabilities, 425 critical, 9 exploited.
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 12.10 before 14.8.6,...4.3 Medium
- red hat wildfly, redhat jboss enterprise application platform, openstack platform +2 moreThis is a concurrency issue that can result in the wrong caller principal being returned from the...5.3 Medium
- google androidIn CarSetings, there is a possible to pair BT device bypassing user's consent due to a missing...7.8 High
- google androidIn several functions of KeyguardServiceWrapper.java and related files,, there is a possible way...7.0 High
- totolink n600r firmwareTOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the url...9.8 Critical
- totolink n600r firmwareTOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the File...9.8 Critical
- totolink n600r firmwareTOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment...9.8 Critical
- totolink n600r firmwareTOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment...9.8 Critical
- totolink n600r firmwareTOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the...9.8 Critical
- totolink n600r firmwareTOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the...9.8 Critical
- totolink n600r firmwareTOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment...9.8 Critical
- totolink n600r firmwareTOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment...9.8 Critical
- totolink n600r firmwareTOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment...9.8 Critical
- synopsys black duck hubA vulnerability in Black Duck Hub’s embedded MadCap Flare documentation files could allow an...6.1 Medium
- eset endpoint antivirus, endpoint security, file security +16 more +18 moreArbitrary File Deletion in ESET products for Windows7.1 High
- halmat wp js, wp-js project wp-js +1 moreWP JS <= 2.0.6 - Reflected Cross-Site Scripting6.1 Medium
- booking calendar project calendar, wpdevelop booking calendar +1 moreBooking Calendar <= 9.1 - PHP Object Injection via Shortcode8.8 High
- carrcommunications rsvpmakerRSVPMaker <= 9.2.6 - Unauthenticated SQL Injection9.8 Critical
- ultimatemember ultimate member, ultimate member – user profile, registration, login, member directory, content restriction & membership plugin +1 moreUltimate Member <= 2.3.1 - Arbitrary Redirect4.3 Medium
- wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 moreMetform Elementor Contact Form Builder <= 2.1.3 - Sensitive Information Disclosure7.5 High
- carrcommunications rsvpmakerRSVPMaker <= 9.2.5 - Unauthenticated SQL Injection9.8 Critical
- servmask all-in-one wp migration, all-in-one wp migration and backup +1 moreAll-in-One WP Migration <= 7.58 - Directory Traversal to File Deletion on Windows Hosts6.6 Medium
- abb arg600 wireless gateway series, arc600a2323na firmware, arc600a2324na firmware +22 more +24 moreArctic Wireless Gateway Firewall vulnerability9.0 Critical
- lmsdoctor 2 factor authenticationLMS Doctor Simple 2 Factor Authentication Plugin For Moodle Affected: 2021072900 has an Insecure...7.5 High
- amd 3rd gen epyc, epyc 72f3 firmware, epyc 7313 firmware +21 more +23 moreDue to a mishandled error, it is possible to leave the DRTM UApp in a partially initialized state...7.8 High
- amd 3rd gen amd epyc™, epyc 72f3 firmware, epyc 7313 firmware +21 more +23 moreInsufficient validation of addresses in AMD Secure Processor (ASP) firmware system call may...7.8 High
- safedog apacheIn Safedog Apache v4.0.30255, attackers can bypass this product for SQL injection. Attackers can...7.5 High
- amd 3rd gen amd epyc™, epyc 72f3 firmware, epyc 7313 firmware +21 more +23 moreA bug with the SEV-ES TMR may lead to a potential loss of memory integrity for SNP-active VMs.7.8 High
- amd 3rd gen amd epyc™, epyc 72f3 firmware, epyc 7313 firmware +21 more +23 moreFailure to verify SEV-ES TMR is not in MMIO space, SEV-ES FW could result in a potential loss of...7.1 High
- amd athlon™ series, ryzen 3 5300g firmware, ryzen 3 5300ge firmware +29 more +31 moreInsufficient bound checks in System Management Unit (SMU) PCIe Hot Plug table may result in...5.5 Medium
- amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7002 firmware +48 more +50 moreImproper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and...7.1 High
- amd athlon 300u firmware, athlon™ series, ryzen 3 3200u firmware +36 more +38 moreA malicious or compromised UApp or ABL may coerce the bootloader into corrupting arbitrary memory...6.2 Medium
- amd 1st gen amd epyc™, 2nd gen amd epyc™, epyc 7001 firmware +37 more +39 moreInsufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy...7.1 High
- arubanetworks 2530 firmware, 2540 firmware, 2615 firmware +8 more +10 moreA remote execution of arbitrary code vulnerability was discovered in ArubaOS-Switch Devices...8.1 High
- arubanetworks 2530 firmware, 2540 firmware, 2615 firmware +8 more +10 moreA remote execution of arbitrary code vulnerability was discovered in ArubaOS-Switch Devices...9.8 Critical
- tibco managed file transfer command center, managed file transfer internet server +1 moreTIBCO Managed File Transfer Command Center XXE Vulnerability8.6 High
- ibm infosphere information server, infosphere information server on cloud +1 moreIBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to execute...5.9 Medium
- ibm guardium data encryptionIBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 is vulnerable to cross-site scripting....4.8 Medium
sssdAlmaLinux,libipa_hbacAlmaLinux,libsss_autofsAlmaLinux +26 more +28 moresssd bug fix and enhancement updateNo scorejava-1.8.0-openjdkAlmaLinux,java-1.8.0-openjdk-accessibilityAlmaLinux,java-1.8.0-openjdk-accessibility-fastdebugAlmaLinux +17 more +19 morejava-1.8.0-openjdk bug fix and enhancement updateNo scorejava-11-openjdkAlmaLinux,java-11-openjdk-demoAlmaLinux,java-11-openjdk-demo-fastdebugAlmaLinux +20 more +22 morejava-11-openjdk bug fix and enhancement updateNo scoreosbuild-composerAlmaLinux,osbuild-composer-coreAlmaLinux,osbuild-composer-dnf-jsonAlmaLinux +1 more +3 moreosbuild-composer bug fix and enhancement updateNo scorejava-17-openjdkAlmaLinux,java-17-openjdk-demoAlmaLinux,java-17-openjdk-demo-fastdebugAlmaLinux +20 more +22 morejava-17-openjdk bug fix and enhancement updateNo scorebuildahAlmaLinux,podmanAlmaLinux,runcAlmaLinux +31 more +33 morecontainer-tools:4.0 bug fix updateNo scoreaspnetcore-runtime-3.1AlmaLinux,aspnetcore-targeting-pack-3.1AlmaLinux,dotnet-apphost-pack-3.1AlmaLinux +6 more +8 more.NET Core 3.1 bugfix updateNo scorebuildahAlmaLinux,podmanAlmaLinux,runcAlmaLinux +31 more +33 morecontainer-tools:rhel8 bug fix updateNo scoretlogAlmaLinuxtlog bug fix and enhancement updateNo scorerhel-system-rolesAlmaLinuxrhel-system-roles bug fix and enhancement updateNo score- fastcom fac1900r firmware, mercusys mercury d196g firmware, tp-link tl-wdr5660 firmware +3 more +5 moreTP-Link TL-WDR7660 2.0.30, Mercury D196G 20200109_2.0.4, and Fast FAC1900R 20190827_2.0.2 routers...7.8 High
- fastcom fac1900r firmware, mercusys mercury d196g firmware, tp-link tl-wdr5660 firmware +3 more +5 moreTP-Link TL-WDR7660 2.0.30, Mercury D196G 20200109_2.0.4, and Fast FAC1900R 20190827_2.0.2 routers...7.8 High
- Show moreLoading…