CVEs published in May 2022
2,612 vulnerabilities, 425 critical, 9 exploited.
- diagrams drawio, jgraph jgraph/drawio +1 moreServer-Side Request Forgery (SSRF) in jgraph/drawio7.5 High
- apache shenyu, apache software foundation shenyu (incubating) +1 moreApache ShenYu (incubating) Regular expression denial of service7.5 High
- htc mail, one, sense +2 moreHTC One/Sense Mail Client certificate validation4.8 Medium
- unspecified wowonderWoWonder Group requests.php access control5.4 Medium
upbOSS-FuzzBad-cast to const upb_tabent' (aka 'const struct _upb_tabent')insertNo score- jenkins blue ocean, jenkins project pipeline scm api for blue ocean plugin +1 moreInsufficiently Protected Credentials in Jenkins Pipeline SCM API for Blue Ocean Plugin6.5 Medium
- needrestart project needrestart, debian linux +1 moreneedrestart 0.8 through 3.5 before 3.6 is prone to local privilege escalation. Regexes to detect...7.8 High
- gimpGIMP 2.10.30 and 2.99.10 are vulnerable to Buffer Overflow. Through a crafted XCF file, the...5.5 Medium
- gxcms project gxcmsGXCMS V1.5 has a file upload vulnerability in the background. The vulnerability is the template...7.2 High
- linuxfoundation runc, fedoraproject fedora +1 moreIncorrect Default Permissions in runc5.9 Medium
- nvidia gpu display driver, virtual gpu +1 moreNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the ECC layer, where...6.8 Medium
- nvidia gpu display driver, virtual gpu +1 moreNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer...7.1 High
- nvidia gpu display driver, virtual gpu +1 moreNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer...7.7 High
- nvidia gpu display driver, virtual gpu +1 moreNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer...8.5 High
- vim, vim vim/vim, apple macos +1 more +3 moreBuffer Over-read in vim/vim6.6 Medium
- canonical ubuntu linux, canonical ltd. ubuntu's gnome-control-center, gnome gnome-remote-desktop +2 moreUbuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by...9.8 Critical
- vim, vim vim/vim, apple macos +2 moreClassic Buffer Overflow in vim/vim6.6 Medium
- vim, vim vim/vim, apple macos +1 more +3 moreHeap-based Buffer Overflow in vim/vim6.6 Medium
- redhat ignition, fedoraproject fedora, redhat enterprise linux +1 more +3 moreIgnition config accessible to unprivileged software on VMware6.5 Medium
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote authenticated information disclosure vulnerability was discovered in Aruba ClearPass...6.5 Medium
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy...7.2 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote authenticated server-side request forgery (ssrf) vulnerability was discovered in Aruba...4.9 Medium
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy...9.1 Critical
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy...9.1 Critical
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy...9.1 Critical
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy...9.1 Critical
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy...9.1 Critical
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy...9.1 Critical
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager...10.0 Critical
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote reflected cross site scripting (xss) vulnerability was discovered in Aruba ClearPass...6.1 Medium
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager...10.0 Critical
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager...10.0 Critical
- allgeier metasonic doc webclientMetasonic Doc WebClient 7.0.14.0 / 7.0.12.0 / 7.0.3.0 is vulnerable to a SQL injection attack in...9.8 Critical
- xarrow, xarrow scada +1 morexArrow SCADA Path Traversal5.6 Medium
- xarrow, xarrow scada +1 morexArrow SCADA Cross-site Scripting6.1 Medium
- xarrow, xarrow scada +1 morexArrow SCADA Cross-site Scripting6.1 Medium
- acronis snap deployLocal privilege escalation due to insecure folder permissions7.8 High
- acronis snap deployLocal privilege escalation due to a DLL hijacking vulnerability7.8 High
- acronis snap deployLocal privilege escalation due to excessive permissions assigned to child processes7.8 High
- weintek cmt-ctrl01, cmt-ctrl01 firmware, cmt-fhd +20 more +22 moreWeintek EasyWeb cMT Code Injection10.0 Critical
- weintek cmt-ctrl01, cmt-ctrl01 firmware, cmt-fhd +20 more +22 moreWeintek EasyWeb cMT Improper Access Control9.8 Critical
- weintek cmt-ctrl01, cmt-ctrl01 firmware, cmt-fhd +20 more +22 moreWeintek EasyWeb cMT Cross-site Scripting9.4 Critical
- crafter software cms, craftercms crafter cms +1 moreImproper Control of Dynamically-Managed Code Resources in Crafter Studio7.6 High
- crafter software cms, craftercms crafter cms +1 moreImproper Output Neutralization for Logs in Crafter Studio4.3 Medium
- crafter software cms, craftercms crafter cms +1 moreImproper Privilege Management in Crafter Studio3.5 Low
- apache tika, oracle primavera unifier +1 moreApache Tika Regular Expression Denial of Service in Standards Extractor5.5 Medium
- apache tika, oracle primavera unifier +1 moreApache Tika BPGParser Memory Usage DoS5.5 Medium
- mersenne prime95Prime95 30.7 build 9 suffers from a Buffer Overflow vulnerability that could lead to Remote Code...9.8 Critical
- sir gnuboardGnuboard 5.55 and 5.56 is vulnerable to Cross Site Scripting (XSS) via bbs/member_confirm.php.6.1 Medium
- ipmatcher project ipmatcher, watsonwebserver project watsonwebserver +1 moreImproper Input Validation in IpMatcher9.8 Critical
- Show moreLoading…