CVEs published in May 2022
2,612 vulnerabilities, 425 critical, 9 exploited.
- connect-multiparty project connect-multipartyConnect-Multiparty allows arbitrary file upload7.8 High
- axiosys bento4Bento4 v1.6.0.0 was discovered to contain a segmentation fault via the component /x86_64...5.5 Medium
- hospital management system project management systemIn the POST request of the appointment.php page of HMS v.0, there are SQL injection...7.5 High
- hospital management system project management systemIn HMS 1.0 when requesting appointment.php through POST, multiple parameters can lead to a SQL...9.8 Critical
- pidgin, debian linux +1 moreAn issue was discovered in Pidgin before 2.14.9. A remote attacker who can spoof DNS responses...5.9 Medium
- konicaminolta bizhub 226i firmware, bizhub 227 firmware, bizhub 246i firmware +42 more +44 moreKonica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. An attacker must...7.4 High
- konicaminolta bizhub 226i firmware, bizhub 227 firmware, bizhub 246i firmware +42 more +44 moreKonica Minolta bizhub MFP devices before 2022-04-14 have an internal Chromium browser that...4.0 Medium
- konicaminolta bizhub 226i firmware, bizhub 227 firmware, bizhub 246i firmware +42 more +44 moreKonica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var...7.5 High
- openmoney api project apiOpenmoney API through 2020-06-29 uses the JavaScript Math.random function, which does not provide...7.5 High
- xpdfreader xpdfxpdf 4.04 allocates excessive memory when presented with crafted input. This can be triggered by ...5.5 Medium
- denx u-boot, fedoraproject fedora +1 morenfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an...9.8 Critical
- janet-lang janetJanet before 1.22.0 mishandles arrays.7.5 High
- janeczku calibre-webSQL injection in calibreweb9.8 Critical
- giteaShell command injection in gitea7.5 High
- terminalfourTerminalfour before 8.3.8 allows XSS, aka RDSM-31817. 8.2.18.2.1 and 8.2.18.5 are also fixed...6.1 Medium
- formidable project formidableFormidable arbitrary file upload9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +8 more +10 moreImproper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local...7.8 High
- vim, vim vim/vim, apple macos +2 moreNULL Pointer Dereference in vim/vim6.6 Medium
- vim, vim vim/vim, apple macos +2 more +4 moreBuffer Over-read in function grab_file_name in vim/vim6.6 Medium
- debian linux, linux kernel, netapp h300e firmware +8 more +10 moreA use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way...7.8 High
- pcre pcre2, fedoraproject fedora, netapp active iq unified manager +9 more +11 moreAn out-of-bounds read vulnerability was discovered in the PCRE2 library in the...9.1 Critical
- pcre pcre2, debian linux, fedoraproject fedora +10 more +12 moreAn out-of-bounds read vulnerability was discovered in the PCRE2 library in the...9.1 Critical
- linux kernel, netapp h300s firmware, h410s firmware +2 more +4 moreInteger Overflow or Wraparound vulnerability in io_uring of Linux Kernel allows local attacker to...7.8 High
- ruifang-tech rebuildA Server-Side Request Forgery (SSRF) in Rebuild v2.8.3 allows attackers to obtain the real IP...7.5 High
- erp-pro project erp-proERP-Pro v3.7.5 was discovered to contain a SQL injection vulnerability via the component /base...9.8 Critical
- fisco-bcosFISCO-BCOS release-3.0.0-rc2 was discovered to contain an issue where a malicious node, via an...7.5 High
- fisco-bcosFISCO-BCOS release-3.0.0-rc2 was discovered to contain an issue where a malicious node can...7.5 High
- hospital management system project management systemHospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- churchcrmA SQL injection vulnerability exists in ChurchCRM version 2.0.0 to 4.4.5 that allows an...8.8 High
- webminWebmin through 1.991, when the Authentic theme is used, allows remote code execution when a user...8.8 High
- plantuml, plantuml plantuml/plantuml, fedoraproject fedora +2 moreURL Restriction Bypass in plantuml/plantuml7.2 High
- openclinicaImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in OpenClinica8.3 High
- openclinicaPath Traversal in OpenClinica6.5 Medium
- moxa sdsPrototype Pollution4.0 Medium
- mozilla convictPrototype Pollution7.5 High
- microsoft workspace-toolsCommand Injection8.1 High
- sonicwall sma1000, sma 6200 firmware, sma 6210 firmware +3 more +5 moreSonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions incorrectly restricts...9.8 Critical
- sonicwall netextender, netextender windows (32 and 64 bit) client +1 moreA buffer overflow vulnerability in the SonicWall SSL-VPN NetExtender Windows Client (32 and 64...7.8 High
- sonicwall sma1000, sma 6200 firmware, sma 6210 firmware +3 more +5 moreSonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions accept a user...6.1 Medium
- sonicwall sma1000, sma 6200 firmware, sma 6210 firmware +3 more +5 moreSonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions uses a shared and...7.5 High
- facturascripts, neorazorx neorazorx/facturascripts +1 moreAccount Takeover in neorazorx/facturascripts9.8 Critical
- ibm websphere application server liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.5 , with the adminCenter-1.0...3.1 Low
- ibm mq for hpe nonstopIBM MQ (IBM MQ for HPE NonStop 8.1.0) can inadvertently disclose sensitive information under...5.1 Medium
- donations project donations, nicdark donations (wordpress plugin) +1 morehttps://patchstack.com/database/vulnerability/nd-donations/wordpress-donations-plugin-1-8-authenticated-stored-cross-site-scripting-xss-vulnerability4.1 Medium
- myscada mypromySCADA myPRO Improper Access Control8.2 High
- myscada mypromySCADA myPRO Unrestricted Upload of File with Dangerous Type7.5 High
- myscada mypromySCADA myPRO Path Traversal7.5 High
- myscada mypromySCADA myPRO Exposure of Information Through Directory Listing7.5 High
- huawei emui, harmonyos, magic ui +2 moreThe DFX module has a UAF vulnerability.Successful exploitation of this vulnerability may affect...7.5 High
- covid 19 travel pass management system project 19 travel pass management systemCovid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/admin/?page...7.2 High
- Show moreLoading…