CVEs published in May 2022
2,612 vulnerabilities, 425 critical, 9 exploited.
- simple client management system project client management systemSimple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice...9.8 Critical
- simple client management system project client management systemSimple Client Management System 1.0 is vulnerable to SQL Injection via \cms\admin?page=client...9.8 Critical
- simple client management system project client management systemSimple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f...9.8 Critical
- simple client management system project client management systemSimple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f...9.8 Critical
- simple client management system project client management systemSimple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f...9.8 Critical
- simple client management system project client management systemSimple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Users.php?f...9.8 Critical
- resi gemini-netRESI Gemini-Net Web 4.2 is affected by Improper Access Control in authorization logic. An...5.3 Medium
- simple client management system project client management systemSimple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f...9.8 Critical
- resi gemini-netresi-calltrace in RESI Gemini-Net 4.2 is affected by OS Command Injection. It does not properly...9.8 Critical
- simple client management system project client management systemSimple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=user...9.8 Critical
- simple client management system project client management systemSimple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/maintenance...9.8 Critical
- simple client management system project client management systemSimple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice...9.8 Critical
- simple client management system project client management systemSimple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=client...9.8 Critical
- zyxel atp series firmware, usg flex 100(w) firmware, usg flex 200 firmware +19 more +21 moreA OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware...9.8 Critical
- jerryscriptA buffer overflow in ecma_builtin_typedarray_prototype_filter() in JerryScript version fe3a5c0...9.8 Critical
- f-secure safe, mobile security +1 moreMultiple Address Bar Spoofing Vulnerability in F-Secure SAFE Browser for Android4.3 Medium
- f-secure safe, mobile security +1 moreAddress Bar Spoofing Vulnerability in F-Secure SAFE Browser for Android4.3 Medium
- jetbrains ktorSHA1 implementation in JetBrains Ktor Native before 2.0.1 was returning the same value8.7 High
- jetbrains teamcityIn JetBrains TeamCity before 2022.04 potential XSS via Referrer header was possible3.7 Low
- jetbrains teamcityIn JetBrains TeamCity before 2022.04 leak of secrets in TeamCity agent logs was possible4.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2022.04 reflected XSS on the Build Chain Status page was possible4.6 Medium
- facturascripts, neorazorx neorazorx/facturascripts +1 moreReflected Xss using url based payload in neorazorx/facturascripts9.4 Critical
- polonel polonel/trudesk, trudesk project trudesk +1 moreSensitive Data Exposure Due To Insecure Storage Of Profile Image in polonel/trudesk8.2 High
- requarks requarks/wiki, wiki.js +1 moreAuthentication Bypass Using an Alternate Path or Channel in requarks/wiki7.2 High
assimpOSS-FuzzHeap-buffer-overflow in Assimp::ASE::Parser::ParseLV1SoftSkinBlockNo scorejsonOSS-FuzzHeap-buffer-overflow in std::__1::__tree_node_base<void*>*& std::__1::__tree<std::__1::__value_type<std:No score- debian linux, linux kernel, netapp 8300 firmware +10 more +12 moreThe Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows...7.8 High
- apache tomcat, debian linux, oracle hospitality cruise shipboard property management system +2 moreEncryptInterceptor does not provide complete protection on insecure networks7.5 High
- vim, vim vim/vim, apple macos +1 more +3 moreNULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in vim/vim6.6 Medium
- linux kernelA memory leak flaw was found in the Linux kernel in acrn_dev_ioctl in the drivers/virt/acrn/hsm.c...7.1 High
- eventsource, eventsource eventsource/eventsource, debian linux +2 moreImproper Removal of Sensitive Information Before Storage or Transfer in eventsource/eventsource8.1 High
- google chromeUse after free in Web UI Diagnostics in Google Chrome on Chrome OS prior to 101.0.4951.64 allowed...8.8 High
- google chromeUse after free in Sharing in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who...8.8 High
- google chromeUse after free in ANGLE in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to...8.8 High
- google chromeHeap buffer overflow in V8 Internationalization in Google Chrome prior to 101.0.4951.64 allowed a...8.8 High
- google chromeInappropriate implementation in Web Contents in Google Chrome prior to 101.0.4951.64 allowed a...4.3 Medium
- google chromeUse after free in Performance APIs in Google Chrome prior to 101.0.4951.64 allowed a remote...8.8 High
- google chromeUse after free in Permission Prompts in Google Chrome prior to 101.0.4951.64 allowed a remote...8.8 High
- google chromeUse after free in Browser UI in Google Chrome prior to 101.0.4951.64 allowed a remote attacker...8.8 High
- google chromeUse after free in Sharesheet in Google Chrome on Chrome OS prior to 101.0.4951.64 allowed a...8.8 High
- postgresqlA flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when...8.8 High
- linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreImportant: kernel security and bug fix update8.2 High
- litespeedtech lsquicliblsquic/lsquic_qenc_hdl.c in LiteSpeed QUIC (aka LSQUIC) before 3.1.0 mishandles...9.8 Critical
- foxit pdf editor, pdf reader +1 moreFoxit PDF Reader and PDF Editor before 11.2.2 have a Type Confusion issue that causes a crash...7.5 High
- mitel 6865i sip firmware, 6867i sip firmware, 6869i sip firmware +6 more +8 moreMitel 6800 and 6900 Series SIP phone devices through 2022-04-27 have "undocumented functionality....6.8 Medium
- microstrategy enterprise managerMicroStrategy Enterprise Manager 2022 allows authentication bypass by triggering a login failure...9.8 Critical
- hospital management system project management systemHospital Management System in PHP with Source Code (HMS) 1.0 was discovered to contain a SQL...9.8 Critical
- waimairencms project waimairencmsA Remote Code Execution (RCE) vulnerability exists in waimairen 9.1 via wx.php9.8 Critical
- waimairencms project waimairencmsAn authenticated user could execute code via a SQLi vulnerability in waimairenCMS before version...8.8 High
- hospital management system project management systemHospital Management System in PHP with Source Code (HMS) 1.0 was discovered to contain a File...9.8 Critical
- Show moreLoading…