CVEs published in May 2022
2,612 vulnerabilities, 425 critical, 9 exploited.
- merchandise online store project online storeMerchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page...7.2 High
- merchandise online store product online storeMerchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/?p=products&c=.7.2 High
- simple social networking site project social networking siteSourcecodester Simple Social Networking Site v1.0 is vulnerable to file deletion via /sns/classes...6.5 Medium
- simple social networking site project social networking siteSourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin...7.2 High
- simple social networking site project social networking siteSourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/...7.2 High
- simple social networking site project social networking siteSourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/...7.2 High
- air cargo management system project cargo management systemAir Cargo Management System v1.0 is vulnerable to file deletion via /acms/classes/Master.php?f...6.5 Medium
- mitel minet firmwareA vulnerability in Mitel 6900 Series IP (MiNet) phones excluding 6970, versions 1.8 (1.8.0.12)...6.8 Medium
- wavlink wn535g3 firmwareWAVLINK WN535 G3 was discovered to contain a cross-site scripting (XSS) vulnerability via the...6.1 Medium
- netgear ssl312 firmwareNETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL...9.8 Critical
- air cargo management system project cargo management systemAir Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/classes/Master.php?f...9.8 Critical
- air cargo management system project cargo management systemAir Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/admin/cargo_types...7.2 High
- air cargo management system project cargo management systemAir Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/classes/Master.php?f...7.2 High
- air cargo management system project cargo management systemAir Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/admin/cargo_types...7.2 High
- air cargo management system project cargo management systemAir Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/admin/?page=transactions...7.2 High
- microstrategy webA Server-Side Request Forgery (SSRF) vulnerability exists in MicroStrategy Web SDK 11.1 and...8.1 High
- anaconda anaconda3Certain Anaconda3 2021.05 are affected by OS command injection. When a user installs Anaconda, an...8.8 High
- xxyopen novel-plusUnrestricted file upload in /novel-admin/src/main/java/com/java2nb/common/controller...9.8 Critical
- radare radare2, radareorg radareorg/radare2 +1 moreOut-of-bounds Read in radareorg/radare27.9 High
- rubygems rubygems.orgUnauthorized takeover for new versions of some platform-specific gems7.7 High
- b1 eosio batdappboomxEOSIO batdappboomx v327c04cf has an Access-control vulnerability in the `transfer` function of...7.5 High
- hcl software unicaHCL Unica Platform is vulnerable to XML External Entity (XXE) injection7.5 High
- hcl sametimeHCL Sametime is vulnerable to clickjacking4.2 Medium
- hcl sametimeHCL Sametime is vulnerable to an information disclosure7.1 High
- hcl sametimeHCL Sametime is susceptible a file transfer service vulnerability8.2 High
- hcl sametimeHCL Sametime is vulnerable to arbitrary HTTP requests6.8 Medium
- hcl sametimeHCL Sametime is vulnerable to an information disclosure5.3 Medium
- hcl software verse for android, hcltech verse +1 moreAn SSL certificate host verification vulnerability affects HCL Verse for Android6.3 Medium
- microstrategy web sdkCross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows...6.1 Medium
- microstrategy web sdkCross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows...6.1 Medium
- microstrategy web sdkCross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows...6.1 Medium
- microstrategy web sdkCross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows...6.1 Medium
- sysaidSysaid – Sysaid Local File Inclusion (LFI)6.1 Medium
- sysaidSysaid – Sysaid 14.2.0 Reflected Cross-Site Scripting (XSS)5.5 Medium
- sysaidSysaid – Pro Plus Edition, SysAid Help Desk Broken Access Control6.8 Medium
- sysaidSysaid – sysaid Open Redirect4.6 Medium
- sysaidSysaid – Sysaid System Takeover7.0 High
- vmware spring framework, netapp cloud secure agent, oncommand insight +1 more +3 moreAllocation of Resources Without Limits or Throttling in Spring Framework6.5 Medium
- vmware spring framework, netapp active iq unified manager, brocade san navigator +3 more +5 moreDenial of service in Spring Framework5.3 Medium
- zte zxmp m721, zxmp m721 firmware +1 moreZTE's ZXMP M721 product has a permission and access control vulnerability. Since the folder...8.8 High
- check point endpoint security client for windows, checkpoint endpoint security +1 moreCheck Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for...7.8 High
- eipstackgroup opener ethernet/ip, opener project opener +1 moreEIPStackGroup OpENer Ethernet/IP Reachable Assertion7.5 High
- eipstackgroup opener ethernet/ip, opener project opener +1 moreEIPStackGroup OpENer Ethernet/IP Reachable Assertion7.5 High
- eipstackgroup opener ethernet/ip, opener project opener +1 moreEIPStackGroup OpENer Ethernet/IP Out-of-bounds Read7.5 High
- eipstackgroup opener ethernet/ip, opener project opener +1 moreEIPStackGroup OpENer Ethernet/IP Incorrect Conversion between Numeric Types8.2 High
- adobe coldfusionColdFusion Reflected Cross-Site Scripting could lead to Arbitrary Code Execution6.1 Medium
- adobe character animatorAdobe Character Animator SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- microfocus access manager, opentext netiq access manager +1 moreA bug exist in the input parameter of Access Manager that allows supply of invalid character to...6.1 Medium
- f5 njsNginx NJS v0.7.2 was discovered to contain a segmentation violation via njs_lvlhsh_bucket_find at...7.5 High
- moddableModdable commit before 135aa9a4a6a9b49b60aa730ebc3bcc6247d75c45 was discovered to contain an out...7.1 High
- Show moreLoading…