CVEs published in May 2022
2,612 vulnerabilities, 425 critical, 9 exploited.
- wedding management system project management systemWedding Management System v1.0 was discovered to contain a SQL injection vulnerability via the id...9.8 Critical
- wedding management system project management systemAn arbitrary file upload vulnerability in the Upload Photos module of Wedding Management System...7.2 High
- car rental management system project rental management systemAn arbitrary file upload vulnerability in the New Entry module of Car Rental Management System v1...7.2 High
- simple bus ticket booking system project bus ticket booking systemSimple Bus Ticket Booking System v1.0 was discovered to contain multiple SQL injection...9.8 Critical
- complete online job search system project online job search systemComplete Online Job Search System v1.0 was discovered to contain a SQL injection vulnerability...9.8 Critical
- surveysparrow enterprise survey softwareSurvey Sparrow Enterprise Survey Software 2022 has a Stored cross-site scripting (XSS)...5.4 Medium
- altn mdaemonAn Authenticated Reflected Cross-site scripting at BCC Parameter was discovered in MDaemon before...5.4 Medium
- altn mdaemonAn Authenticated Reflected Cross-site scripting at CC Parameter was discovered in MDaemon before...5.4 Medium
- bluditAn issue was found in bludit v3.13.0, unsafe implementation of the backup plugin allows attackers...7.2 High
double-checked-cellcrates.iodouble-checked-cell is unmaintainedNo scorestatic_type_mapcrates.io`static_type_map` has been renamed to `erased_set`No scorerocksdbcrates.iorocksdb vulnerable to out-of-bounds readNo scorewee_alloccrates.iowee_alloc is UnmaintainedNo score- asus dsl-n14u-b1 firmwareAsus DSL-N14U-B1 1.1.2.3_805 allows remote attackers to cause a Denial of Service (DoS) via a TCP...7.5 High
- haxx curl, netapp clustered data ontap, h300s firmware +10 more +12 moreUsing its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure...4.3 Medium
- haxx curl, netapp clustered data ontap, h300s firmware +11 more +13 morelibcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided...5.3 Medium
- haxx curl, netapp active iq unified manager, bh500s firmware +14 more +16 moreA use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when...8.1 High
- fortinet fortinacMultiple improper neutralization of special elements used in SQL commands ('SQL Injection')...7.2 High
- haxx curl, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 morelibcurl would reuse a previously created connection even when a TLS or SSHrelated option had been...7.5 High
- haxx curl, debian linux, netapp clustered data ontap +12 more +14 morelibcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be...7.5 High
- haxx curl, netapp clustered data ontap, h300s firmware +12 more +14 moreThe curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host...7.5 High
- checkpoint zonealarmCheck Point ZoneAlarm before version 15.8.200.19118 allows a local actor to escalate privileges...7.8 High
- libtiff, debian linux, fedoraproject fedora +1 more +3 moreLibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:624, allowing...5.5 Medium
- libtiff, apple iphone os, macos +4 more +6 moreLibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing...5.5 Medium
- wso2 api manager, identity server, identity server as key manager +2 moreXML External Entity (XXE) vulnerability in the file based service provider creation feature of...9.1 Critical
- lmsdoctor 2 factor authenticationA Two-Factor Authentication (2FA) bypass vulnerability in "Simple 2FA Plugin for Moodle" by LMS...6.5 Medium
- microsoft .net framework, .net framework 3.5 and 4.6/4.6.2, .net framework 4.6.2 +1 more +3 more.NET Framework Denial of Service Vulnerability3.3 Low
- microsoft visual studio codeVisual Studio Code Remote Code Execution Vulnerability8.8 High
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +8 more +10 moreWindows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability7.0 High
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +8 more +10 moreWindows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability7.0 High
- microsoft visual studio 2017 version 15.9 (includes 15.0 - 15.8), visual studio 2017 +1 moreVisual Studio Remote Code Execution Vulnerability7.8 High
- microsoft .net, fedoraproject fedora, microsoft .net 5.0 +9 more +11 more.NET and Visual Studio Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1809, windows 10 version 1909, windows 10 version 20h2 +7 more +9 moreWindows Kernel Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 1909 +13 more +15 moreWindows Print Spooler Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability8.8 High
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +8 more +10 moreWindows Clustered Shared Volume Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability8.8 High
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +8 more +10 moreWindows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability7.0 High
- microsoft windows server 2012 r2, windows server 2012 r2 (server core installation), windows server 2016 +7 more +9 moreWindows Clustered Shared Volume Information Disclosure Vulnerability6.5 Medium
- microsoft windows 11 version 21h2, windows 11 +1 moreWindows Kernel Elevation of Privilege Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows Print Spooler Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 1909, windows 10 version 20h2 +16 more +18 moreWindows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreBitLocker Security Feature Bypass Vulnerability4.2 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +20 more +22 moreTablet Windows User Interface Application Core Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +20 more +22 moreWindows Push Notifications Apps Elevation of Privilege Vulnerability7.0 High
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +8 more +10 moreWindows Clustered Shared Volume Information Disclosure Vulnerability6.5 Medium
- Show moreLoading…