CVEs published in May 2022
2,612 vulnerabilities, 425 critical, 9 exploited.
- cambium networks cnmaestroCambium Networks cnMaestro SQL Injection7.4 High
- cambium networks cnmaestroCambium Networks cnMaestro OS Command Injection8.2 High
- cambium networks cnmaestroCambium Networks cnMaestro Path Traversal5.7 Medium
- cambium networks cnmaestroCambium Networks cnMaestro SQL Injection5.9 Medium
- cambium networks cnmaestroCambium Networks cnMaestro use of Potentially Dangerous Function7.1 High
- cambium networks cnmaestroCambium Networks cnMaestro OS Command Injection9.8 Critical
- hewlett packard enterprise (hpe) hpe oneview, hp oneview +1 moreA remote server-side request forgery (ssrf) vulnerability was discovered in HPE OneView version(s...9.8 Critical
- hewlett packard enterprise (hpe) hpe oneview, hp oneview +1 moreA remote cross-site scripting (xss) vulnerability was discovered in HPE OneView version(s): Prior...6.1 Medium
- hewlett packard enterprise (hpe) hpe oneview, hp oneview +1 moreA remote bypass security restrictions vulnerability was discovered in HPE OneView version(s):...9.8 Critical
- code snippets extended project snippets extended, alexander stokmann code snippets extended (wordpress plugin) +1 moreWordPress Code Snippets Extended plugin <= 1.4.7 - Cross-Site Request Forgery (CSRF) vulnerability5.4 Medium
- code snippets extended project snippets extended, alexander stokmann code snippets extended (wordpress plugin) +1 moreWordPress Code Snippets Extended plugin <= 1.4.7 - Cross-Site Request Forgery (CSRF) vulnerability leading to Persistent Cross-Site Scripting (XSS)4.7 Medium
- rockwell automation isagraf workbench, connected component workbench, safety instrumented systems workstation +2 moreRockwell Automation ISaGRAF Deserialization of Untrusted Data8.6 High
- solarwinds serv-uDomain Admin Broken Access Control4.3 Medium
- covid 19 travel pass management project 19 travel pass managementIn Covid 19 Travel Pass Management 1.0, the code parameter is vulnerable to SQL injection attacks.9.8 Critical
- oretnom23 toll tax management systemIn Toll Tax Management System 1.0, the id parameter appears to be vulnerable to SQL injection...9.8 Critical
- home clean service system project clean service systemIn Home Clean Service System 1.0, the password parameter is vulnerable to SQL injection attacks.9.8 Critical
- fidelis cybersecurity deception, network +1 morePrivileged Command Injection Vulnerability in Fidelis Network and Deception4.4 Medium
- fidelis cybersecurity deception, network +1 moreLocal Privilege Escalation Vulnerability in Fidelis Network and Deception3.9 Low
- fidelis cybersecurity deception, network +1 moreAuthenticated Privileged Command Injection Vulnerability in Fidelis Network and Deception8.8 High
- fidelis cybersecurity deception, network +1 moreAuthenticated Privileged Command Injection Vulnerability in Fidelis Network and Deception8.8 High
- fidelis cybersecurity deception, network +1 moreAuthenticated Command Injection Vulnerability in Fidelis Network and Deception8.8 High
- fidelis cybersecurity deception, network +1 moreAuthenticated SQL Injection Vulnerability in Fidelis Network and Deception8.8 High
- fidelis cybersecurity deception, network +1 moreAuthenticated Command Injection Vulnerability in Fidelis Network and Deception8.8 High
- ezxml project ezxmlAn issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_decode() performs...6.5 Medium
- fidelis cybersecurity deception, network +1 moreAuthenticated Command Injection Vulnerability in Fidelis Network and Deception8.8 High
- fidelis cybersecurity deception, network +1 moreAuthenticated Command Injection Vulnerability in Fidelis Network and Deception8.8 High
- nvidia virtual gpu, virtual gpu software and nvidia cloud gaming +1 moreNVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (nvidia.ko), where it...4.1 Medium
- nvidia virtual gpu, virtual gpu software and nvidia cloud gaming +1 moreNVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (nvidia.ko), where...5.5 Medium
- nvidia gpu display driverNVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm...5.5 Medium
- nvidia gpu display driverNVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm...5.5 Medium
- nvidia gpu display driver, virtual gpu +1 moreNVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm...5.5 Medium
- nvidia gpu display driverNVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm...5.5 Medium
- nvidia gpu display driver, virtual gpu +1 moreNVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm...6.1 Medium
- nvidia gpu display driver, virtual gpu +1 moreNVIDIA GPU Display Driver for Windows contains a vulnerability in the DirectX11 user mode driver ...8.5 High
- nextcloud talk, kiteworks security-advisories +1 moreExposure of Private Personal Information to an Unauthorized Actor in Nextcloud Talk2.4 Low
- code snippets extended project snippets extended, alexander stokmann code snippets extended (wordpress plugin) +1 moreWordPress Code Snippets Extended plugin <= 1.4.7 - Cross-Site Request Forgery (CSRF) leading to Remote Code Execution (RCE) vulnerability8.8 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote authenticated stored cross-site scripting (xss) vulnerability was discovered in Aruba...5.4 Medium
- canonical apportUsers can consume unlimited disk space in /var/crash7.5 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote authenticated stored cross-site scripting (xss) vulnerability was discovered in Aruba...4.8 Medium
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy...7.2 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote authenticated information disclosure vulnerability was discovered in Aruba ClearPass...7.5 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy...7.2 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote authorization bypass vulnerability was discovered in Aruba ClearPass Policy Manager...8.8 High
- tibco bpm enterprise, tibco software inc. bpm enterprise distribution for tibco silver fabric, tibco bpm enterprise distribution for silver fabric +2 moreTIBCO ActiveMatrix BPM Reflected Cross Site Scripting (XSS) vulnerability8.1 High
- tibco jasperreports server, tibco software inc. jasperreports server - community edition, jasperreports server - developer edition +3 more +5 moreTIBCO JasperReports Server Reflected Cross Site Scripting (XSS) vulnerability7.7 High
- silabs sd3502 firmware, sd3503 firmware, zm5101 firmware +2 more +4 moreDenial of Service (DoS) in the Z-Wave S0 NonceGet protocol specification in Silicon Labs Z-Wave...6.5 Medium
- hashicorp vaultHashiCorp Vault improper configuration of multi factor authentication5.3 Medium
- apport project apport, canonical ubuntu linux +1 moreApport argument parsing mishandles filename splitting on older kernels resulting in argument...5.5 Medium
- apport project apport, canonical ubuntu linux +1 moreApport does not disable python crash handler before entering chroot7.8 High
- apport project apport, canonical ubuntu linux +1 moreis_closing_session() allows users to consume RAM in the Apport process5.5 Medium
- Show moreLoading…