CVEs published in May 2022
2,612 vulnerabilities, 425 critical, 9 exploited.
- amd epyc 72f3 firmware, epyc 7313 firmware, epyc 7313p firmware +21 more +23 moreFailure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU)...5.5 Medium
- amd epyc 7232p firmware, epyc 7252 firmware, epyc 7262 firmware +42 more +44 moreInsufficient bounds checking in an SMU mailbox register could allow an attacker to potentially...5.5 Medium
- amd epyc 72f3 firmware, epyc 7313 firmware, epyc 7313p firmware +21 more +23 moreFailure to assign a new report ID to an imported guest may potentially result in an SEV-SNP guest...5.5 Medium
- amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +83 more +85 moreInsufficient bound checks in the System Management Unit (SMU) may result in access to an invalid...5.5 Medium
- amd epyc 7002 firmware, epyc 7232p firmware, epyc 7252 firmware +47 more +49 moreTOCTOU (time-of-check to time-of-use) issue in the System Management Unit (SMU) may result in a...4.7 Medium
- amd epyc 7001 firmware, epyc 7251 firmware, epyc 7261 firmware +36 more +38 moreIn SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer (TLB) following a...3.3 Low
- amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +83 more +85 moreInsufficient General Purpose IO (GPIO) bounds check in System Management Unit (SMU) may result in...5.5 Medium
- amd athlon™ series, epyc 7232p firmware, epyc 7252 firmware +44 more +46 moreInsufficient bound checks related to PCIE in the System Management Unit (SMU) may result in...5.5 Medium
- amd athlon™ series, epyc 72f3 firmware, epyc 7313 firmware +84 more +86 moreA bug in AMD CPU’s core logic may allow for an attacker, using specific code from an unprivileged...5.5 Medium
- amd epyc 7232p firmware, epyc 7252 firmware, epyc 7262 firmware +42 more +44 moreA TOCTOU race condition in SMU may allow for the caller to obtain and manipulate the address of a...4.7 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows...4.8 Medium
- ibm jazz team server, jazz foundation +1 moreIBM Jazz Foundation (IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2) is vulnerable to...5.4 Medium
- ibm spectrum virtualizeIBM Spectrum Virtualize 8.2, 8.3, and 8.4 could allow an attacker to allow unauthorized access...5.6 Medium
- fortinet forticlient, forticlientwindows +1 moreA external control of file name or path in Fortinet FortiClientWindows version 7.0.2 and below,...8.4 High
- vmware pinnipedAn issue was discovered in the Pinniped Supervisor with either LADPIdentityProvider or ActiveDirectoryIdentityProvider resources. An attack would involve the malicious user changing the common name (C…6.6 Medium
- zte zxcdn, zxcdn firmware +1 moreZTE's ZXCDN product has a reflective XSS vulnerability. The attacker could modify the parameters...6.1 Medium
- sap se host agent, netweaver and abap platform, sap netweaver as abap kernel +2 more +4 moreSAP Host Agent, SAP NetWeaver and ABAP Platform allow an attacker to leverage logical errors in...7.5 High
- sap employee self service, sap se employee self service (fiori my leave request) +1 moreDue to insufficient input validation, SAP Employee Self Service allows an authenticated attacker...4.3 Medium
- sap se netweaver application server for abap and abap platform, sap netweaver application server abap +1 moreSAP NetWeaver Application Server for ABAP and ABAP Platform do not perform necessary...8.8 High
- sap netweaver application server abapSAP NetWeaver Application Server ABAP allows an authenticated attacker to upload malicious files...5.4 Medium
- sap host agentUnder certain conditions, the SAP Host Agent logfile shows information which would otherwise be...5.5 Medium
- sap businessobjects, businessobjects business intelligence, sap se businessobjects enterprise (central management server) +2 moreDuring an update of SAP BusinessObjects Enterprise, Central Management Server (CMS) - versions...7.8 High
- sap netweaver as abap kernel, netweaver as abap krnl64uc, webdispatcher +2 more +4 moreThe Web administration UI of SAP Web Dispatcher and the Internet Communication Manager (ICM) does...6.1 Medium
- gitlabAn improper authorization issue has been discovered in GitLab CE/EE affecting all versions prior...4.3 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 13.9 before 14.8.6,...6.5 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 9.2 before 14.8.6,...6.1 Medium
- gitlabImproper input validation in GitLab CE/EE affecting all versions from 8.12 prior to 14.8.6, all...6.5 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions before 14.8.6, all versions...4.3 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 12.6 before 14.8.6,...2.0 Low
- fortinet fortiproxy, fortios +1 moreAn improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS...6.1 Medium
- gitlabDue to an insecure direct object reference vulnerability in Gitlab EE/CE affecting all versions...5.3 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 14.4 before 14.8.6,...2.6 Low
- phoenix contact rad-ism-900-en-bd, rad-ism-900-en-bd-bus, rad-ism-900-en-bd/b +3 more +5 moreRemote Code Execution in all versions of various RAD-ISM-900-EN-* devices by PHOENIX CONTACT9.1 Critical
- phoenix contact rad-ism-900-en-bd, rad-ism-900-en-bd-bus, rad-ism-900-en-bd/b +3 more +5 moreRemote Code Execution in all versions of various RAD-ISM-900-EN-* devices by PHOENIX CONTACT9.1 Critical
- xinje xd/e series plc program tool, xd\/e series plc program tool +1 moreXINJE XD/E Series PLC Program Tool DLL Hijacking7.3 High
- xinje xd/e series plc program tool, xd\/e series plc program tool +1 moreXinje XD/E Series PLC Program Tool Zip Slip7.3 High
- gitlabIt was possible to disclose details of confidential notes created via the API in Gitlab CE/EE...4.3 Medium
- fortinet forticlient, forticlientlinux +1 moreAn incorrect permission assignment for critical resource vulnerability [CWE-732] in FortiClient...6.8 Medium
- pentest collaboration framework project collaboration frameworkA Server Side Template Injection (SSTI) vulnerability in Pentest-Collaboration-Framework v1.0.8...8.8 High
- eset endpoint antivirus, endpoint security, file security +16 more +18 moreLocal Privilege Escalation in ESET product for Windows7.3 High
- home owners collection management system project owners collection management systemHome Owners Collection Management v1 was discovered to contain a reflected cross-site scripting ...6.1 Medium
- home owners collection management system project owners collection management systemHome Owners Collection Management v1 was discovered to contain a reflected cross-site scripting ...6.1 Medium
- primeur spazioThe HTTP Server in PRIMEUR SPAZIO 2.5.1.954 (File Transfer) allows an unauthenticated attacker to...7.5 High
- saitoha libsixelThere is a floating point exception error in sixel_encoder_do_resize, encoder.c:633 in libsixel...6.5 Medium
- saitoha libsixelThere is an assertion failure error in stbi__jpeg_huff_decode, stb_image.h:1894 in libsixel...6.5 Medium
- phpgurukul cyber cafe management systemMultiple SQL injection vulnerabilities via the username and password parameters in the Admin...9.8 Critical
- phpgurukul bus pass management systemAn insecure direct object reference (IDOR) vulnerability in the viewid parameter of Bus Pass...6.5 Medium
- phpgurukul dairy farm shop management systemMultiple SQL injection vulnerabilities via the username and password parameters in the Admin...9.8 Critical
- phpgurukul directory management systemMultiple SQL injection vulnerabilities via the username and password parameters in the Admin...9.8 Critical
- surveysparrow enterprise survey softwareSurvey Sparrow Enterprise Survey Software 2022 has a Reflected cross-site scripting (XSS)...6.1 Medium
- Show moreLoading…