CVEs published in May 2022
2,612 vulnerabilities, 425 critical, 9 exploited.
- lenovo a1 firmware, personal cloud storage a1, personal cloud storage t1 +7 more +9 moreA weak default administrator password for the web interface and serial port was reported in some...8.8 High
- lenovo a1 firmware, personal cloud storage a1, personal cloud storage t1 +7 more +9 moreA weak default password for the serial port was reported in some Lenovo Personal Cloud Storage...6.8 Medium
- lenovo a1 firmware, personal cloud storage a1, personal cloud storage t1 +7 more +9 moreAn information disclosure vulnerability was reported in some Lenovo Personal Cloud Storage...4.3 Medium
- lenovo imcontroller, system interface foundation +1 moreA Time of Check Time of Use (TOCTOU) vulnerability was reported in IMController, a software...7.8 High
- lenovo xclarity controller (xcc), xclarity controller +1 moreA read-only authentication bypass vulnerability was reported in the Third Quarter 2021 release of...4.3 Medium
- lenovo imcontroller, system interface foundation +1 moreA race condition vulnerability was reported in IMController, a software component of Lenovo...7.8 High
- zoom meetings, zoom video communications inc client for meetings for android, client for meetings for ios +3 more +5 moreInsufficient hostname validation during Clusterswitch message in Zoom Client for Meetings5.9 Medium
- belkin n300 firmwareIn Belkin N300 Firmware 1.00.08, the script located at /setting_hidden.asp, which is accessible...9.8 Critical
- diagrams drawio, jgraph jgraph/drawio +1 moreServer-Side Request Forgery (SSRF) in jgraph/drawio7.5 High
- zoom meetings, rooms, zoom video communications inc client for meetings for windows +1 more +3 moreUpdate package downgrade in Zoom Client for Meetings for Windows7.5 High
- zoom meetings, zoom video communications inc client for meetings for android, client for meetings for ios +3 more +5 moreImproperly constrained session cookies in Zoom Client for Meetings5.9 Medium
- zoom meetings, zoom video communications inc client for meetings for android, client for meetings for ios +3 more +5 moreImproper XML Parsing in Zoom Client for Meetings8.1 High
- tenda ax12 firmwareTenda AX12 v22.03.01.21_cn was discovered to contain a stack overflow via the lanIp parameter in ...7.5 High
php7openSUSESecurity update for php7No score- xpdfreader xpdfThere is a Null Pointer Dereference vulnerability in the XFAScanner::scanNode() function in...5.5 Medium
- totolink a3100r firmwareAn access control issue in TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129...5.3 Medium
- totolink a3100r firmwareTOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a...9.8 Critical
- totolink a3100r firmwareTOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a...9.8 Critical
- totolink a3100r firmwareTOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a...7.5 High
- totolink a3100r firmwareTOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a...7.5 High
- totolink a3100r firmwareTOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a...7.5 High
- totolink a3100r firmwareTOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a...7.5 High
- totolink a3100r firmwareTOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a...8.1 High
- totolink a3100r firmwareTOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a...7.5 High
- dlink dir-816l firmwareAn issue in the getcfg.php component of D-Link DIR816L_FW206b01 allows attackers to access the...9.8 Critical
- dlink dir-816l firmwareAn access control issue in D-Link DIR816L_FW206b01 allows unauthenticated attackers to access...7.5 High
- tooljetToolJet - HTML Injection in Invite New User5.4 Medium
- tooljetToolJet - Token Leakage via Referer Header8.8 High
- linux kernel, fedoraproject fedora, netapp h300s firmware +5 more +7 moreA use after free in the Linux kernel File System notify functionality was found in the way user...7.8 High
- diagrams drawio, jgraph jgraph/drawio +1 moreImproper Input Validation in jgraph/drawio8.3 High
- octoprint, octoprint octoprint/octoprint +1 moreCross-site Scripting (XSS) - Generic in octoprint/octoprint7.5 High
- fiberhome hg150-ub firmwareIn FiberHome VDSL2 Modem HG150-Ub_V3.0, a stored cross-site scripting (XSS) vulnerability in...5.4 Medium
- octoprint, octoprint octoprint/octoprint +1 moreCross-site Scripting (XSS) - DOM in octoprint/octoprint7.5 High
- koyo electronics industries co., ltd. screen creator advance2, hmi gc-a2 series, and real time remote monitoring and control tool, koyoele remote gc, gc-a22w-cw firmware +8 more +10 moreScreen Creator Advance2, HMI GC-A2 series, and Real time remote monitoring and control tool...7.0 High
- fujitsu ipcom ex2 dc 3200 firmware, ipcom ex2 dc 3500 firmware, ipcom ex2 in 1100 firmware +44 more +46 moreThe web console of FUJITSU Network IPCOM series (IPCOM EX2 IN(3200, 3500), IPCOM EX2 LB(1100,...9.8 Critical
- meikyo poe boot nino poe8m2 firmware, pose se10-8a7b1 firmware, signage rebooter rpc-m4hsi firmware +13 more +15 moreCross-site scripting vulnerability in Rebooter(WATCH BOOT nino RPC-M2C [End of Sale] all firmware...4.8 Medium
- meikyo poe boot nino poe8m2 firmware, pose se10-8a7b1 firmware, signage rebooter rpc-m4hsi firmware +13 more +15 moreCross-site request forgery (CSRF) vulnerability in Rebooter(WATCH BOOT nino RPC-M2C [End of Sale]...8.8 High
- erudika erudika/para, para +1 moreCross-site Scripting (XSS) - Generic in erudika/para9.4 Critical
- random password generator project password generatorInsecure PRNG use in random_password_generator7.5 High
- gpacGPAC 2.0.0 misuses a certain Unicode utf8_wcslen (renamed gf_utf8_wcslen) function in utils/utf.c...7.1 High
openexrOSS-FuzzHeap-buffer-overflow in generic_unpackNo score- artifex mujs, debian linux, fedoraproject fedora +2 moreIn Artifex MuJS through 1.2.0, jsP_dumpsyntax in jsdump.c has a NULL pointer dereference, as...5.5 Medium
- artifex mujs, debian linux, fedoraproject fedora +2 morecompile in regexp.c in Artifex MuJS through 1.2.0 results in stack consumption because of...5.5 Medium
- busybox, siemens scalance sc622-2c firmware, scalance sc626-2c firmware +4 more +6 moreA use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code...7.8 High
- gpac, gpac gpac/gpac +1 moreUse After Free in gpac/gpac7.3 High
- vim, vim vim/vim +1 moreUncontrolled Recursion in vim/vim5.5 Medium
- linux kernel, netapp h300s firmware, h410c firmware +3 more +5 moreA NULL pointer dereference flaw was found in rxrpc_preparse_s in net/rxrpc/server_key.c in the...7.1 High
- isc bind, bind9, netapp h300s firmware +4 more +6 moreDestroying a TLS session early causes assertion failure7.5 High
- count countly server, countly countly-server +1 morePredictable password reset token may lead to account takeover in countly-server8.1 High
- cambium networks cnmaestroCambium Networks cnMaestro OS Command Injection5.0 Medium
- Show moreLoading…