CVEs published in May 2022
2,612 vulnerabilities, 425 critical, 9 exploited.
- apport project apport, canonical ubuntu linux +1 moreis_closing_session() allows users to create arbitrary tcp dbus connections7.1 High
- apport project apport, canonical ubuntu linux +1 moreis_closing_session() allows users to fill up apport.log5.5 Medium
- apport project apport, canonical ubuntu linux +1 more~/.config/apport/settings parsing is vulnerable to "billion laughs" attack5.5 Medium
- canonical apport, ubuntu linux +1 moreApport can be tricked into connecting to arbitrary sockets as the root user7.8 High
- apport, canonical ubuntu linux +1 moreThere is a race condition in the 'replaced executable' detection that, with the correct local...7.8 High
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through 6.1.1.0...6.5 Medium
- ibm open liberty, websphere application server liberty, websphere application server +2 moreIBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.5 and Open Liberty are...5.0 Medium
- ibm datapower gatewayIBM DataPower Gateway 10.0.2.0, 10.0.3.0, 10.0.1.0 through 10.0.1.4, and 2018.4.1.0 through 2018...5.3 Medium
- ibm secure external authentication server, sterling secure proxy +1 moreIBM Sterling Secure Proxy 6.0.3 and IBM Secure External Authentication Server 6.0.3 does not...5.3 Medium
- ibm datapower gatewayIBM DataPower Gateway 10.0.1.0 through 10.0.1.4 and 2018.4.1.0 through 2018.4.1.17 could allow a...5.3 Medium
- wbce cmsWBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS) via \admin\pages\sections_save.php...5.4 Medium
- wbce cmsWBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS) via /admin/users/save.php.5.4 Medium
- ibm spectrum protect operations center, spectrum protect +1 moreIBM Spectrum Protect Operations Center 8.1.12 and 8.1.13 could allow a local attacker to obtain...5.1 Medium
- ibm security identity governance and intelligenceIBM Security Identity Governance and Intelligence 5.2.6 could disclose sensitive information in...5.3 Medium
- skyoftech so listing tabsThe Skyoftech So Listing Tabs module 2.2.0 for OpenCart allows a remote attacker to inject a...9.8 Critical
php72SUSESecurity update for php72No score- flyte console, flyteorg flyteconsole +1 moreServer-Side Request Forgery in FlyteConsole9.1 Critical
- jenkins project storable configs plugin, jenkins storage configs +1 moreCross Site Request Forgery in Jenkins Storable Configs Plugin8.8 High
- jenkins storable configs, jenkins project storable configs plugin +1 moreXML External Entity Reference in Jenkins Storable Configs Plugin8.8 High
- jenkins autocomplete parameter, jenkins project autocomplete parameter plugin +1 moreCross-site Scripting in Jenkins Autocomplete Parameter Plugin5.4 Medium
- jenkins autocomplete parameter, jenkins project autocomplete parameter plugin +1 moreCross-Site Request Forgery in Jenkins Autocomplete Parameter Plugin8.8 High
- jenkins vboxwrapper, jenkins project vboxwrapper plugin +1 moreCross-site Scripting in Jenkins vboxwrapper Plugin5.4 Medium
- jenkins selection tasks, jenkins project selection tasks plugin +1 moreCross site scripting in Jenkins Selection tasks Plugin5.4 Medium
- jenkins random string parameter, jenkins project random string parameter plugin +1 moreCross-site Scripting in Jenkins Random String Parameter Plugin5.4 Medium
- jenkins promoted builds, jenkins project promoted builds (simple) plugin +1 moreStored Cross-site Scripting vulnerabilities in Jenkins promoted Builds (Simple) plugin providing additional parameter types5.4 Medium
- jenkins multiselect parameter, jenkins project multiselect parameter plugin +1 moreCross-site Scripting in Jenkins Multiselect parameter Plugin5.4 Medium
- jenkins jdk parameter, jenkins project jdk parameter plugin +1 moreCross-site Scripting in Jenkins JDK Parameter Plugin5.4 Medium
- jenkins global variable string parameter, jenkins project global variable string parameter plugin +1 moreCross-site Scripting in Jenkins Global Variable String Parameter Plugin5.4 Medium
- jenkins autocomplete parameter, jenkins project autocomplete parameter plugin +1 moreCross-site Scripting in Jenkins Autocomplete Parameter Plugin5.4 Medium
- jenkins application detector, jenkins project application detector plugin +1 moreCross-site Scripting in Jenkins Application Detector Plugin5.4 Medium
- jenkins ssh, jenkins project ssh plugin +1 moreMissing Authorization in Jenkins SSH plugin6.5 Medium
- jenkins ssh, jenkins project ssh plugin +1 moreCross Site Request Forgery in Jenkins SSH Plugin8.8 High
- jenkins ssh, jenkins project ssh plugin +1 moreMissing permission check in Jenkins SSH Plugin4.3 Medium
- jenkins rundeck, jenkins project rundeck plugin +1 moreCross-site Scripting in Jenkins Rundeck Plugin5.4 Medium
- jenkins gitlab, jenkins project gitlab plugin +1 moreMissing permission check in Jenkins GitLab Plugin6.5 Medium
- jenkins blue ocean, jenkins project blue ocean plugin +1 moreMissing permission check in Jenkins Blue Ocean Plugin6.5 Medium
- jenkins blue ocean, jenkins project blue ocean plugin +1 moreCross Site Request Forgery in Jenkins Blue Ocean Plugin6.5 Medium
- jenkins wmi windows agents, jenkins project wmi windows agents plugin +1 moreMissing Authorization in Jenkins WMI Windows Agents plugin8.8 High
- jenkins wmi windows agents, jenkins project wmi windows agents plugin +1 moreBuffer overflow in Jenkins WMI Windows Agents plugin8.8 High
- jenkins repo, jenkins project repo plugin +1 morePath traversal in Jenkins REPO Plugin5.3 Medium
- jenkins mercurial, jenkins project mercurial plugin +1 morePath traversal in Jenkins Mercurial Plugin7.5 High
- jenkins git, jenkins project git plugin +1 morePath traversal in Jenkins Git Mercurial and Repo Plugins7.5 High
- jenkins script security, jenkins project script security plugin +1 moreCSRF vulnerability in Jenkins Script Security Plugin4.3 Medium
- jenkins project pipeline: groovy plugin, jenkins pipeline\ +1 moreSandbox bypass vulnerability through implicitly allowlisted platform Groovy files in Jenkins Pipeline: Groovy Plugin8.5 High
- dlink dir-825 firmwareD-LINK DIR-825 AC1200 R2 is vulnerable to Directory Traversal. An attacker could use the "../../....6.5 Medium
- jirafeauCross-site Scripting in Jirafeau6.1 Medium
- diagrams drawio, jgraph jgraph/drawio +1 moreServer-Side Request Forgery (SSRF) in jgraph/drawio7.5 High
- cmseasycmseasy V7.7.5_20211012 is affected by an arbitrary file read vulnerability. After login, the...6.5 Medium
- cmseasycmseasy V7.7.5_20211012 is affected by an arbitrary file write vulnerability. Through this...8.8 High
- ipplan project ipplanStored cross-site scripting (XSS) in admin/usermanager.php over IPPlan v4.92b allows remote...5.4 Medium
- Show moreLoading…