CVEs published in May 2022
2,612 vulnerabilities, 425 critical, 9 exploited.
- diagrams drawio, jgraph jgraph/drawio +1 moreCross-site Scripting (XSS) - Stored in jgraph/drawio6.3 Medium
- mobotix mxcontrolcenterMobotix Control Center (MxCC) through 2.5.4.5 has Insufficiently Protected Credentials, Storing...8.8 High
- octopus serverWhen generating a user invitation code in Octopus Server, the validity of this code can be set...7.5 High
- arm bifrost gpu kernel driver, midguard gpu kernel driver, valhall gpu kernel driver +2 moreArm Mali GPU Kernel Driver has a use-after-free: Midgard r28p0 through r29p0 before r30p0,...9.8 Critical
- arm valhall gpu kernel driverArm Mali GPU Kernel Driver allows improper GPU operations in Valhall r29p0 through r36p0 before...9.8 Critical
- arm bifrost gpu kernel driver, midgard gpu kernel driver, valhall gpu kernel driver +2 moreArm Mali GPU Kernel Driver (Midgard r4p0 through r31p0, Bifrost r0p0 through r36p0 before r37p0,...9.8 Critical
ghostscriptOSS-FuzzUNKNOWN WRITE in alloc_restore_step_inNo scoreopenscOSS-FuzzStack-buffer-overflow in cardos_list_filesNo scoreopenexrOSS-FuzzHeap-buffer-overflow in uncompress_b44_implNo scoreghostscriptOSS-FuzzHeap-buffer-overflow in read_xrefNo scoreopenjpegOSS-FuzzHeap-buffer-overflow in opj_t1_allocate_buffersNo scoreghostscriptOSS-FuzzUNKNOWN READ in pdfi_free_objectNo score- spring security, vmware spring security, netapp active iq unified manager +1 more +3 moreAuthorization bypass in Spring Security9.8 Critical
- vim, vim vim/vim +1 moreUse After Free in vim/vim6.6 Medium
- vim, vim vim/vim, debian linux +2 moreOut-of-bounds Write in vim/vim7.3 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Print Spooler Elevation of Privilege Vulnerability7.8 High
- cassproject cass, competency and skills system +1 moreMissing Cryptographic Step in cassproject6.3 Medium
- diagrams drawio, jgraph jgraph/drawio +1 moreExposure of Sensitive Information to an Unauthorized Actor in jgraph/drawio8.2 High
- shopify hydrogenPotential cross-site scripting (XSS) vulnerability in Hydrogen6.3 Medium
- acronis cyber protect 15, cyber protect +1 moreHTML injection via report name6.1 Medium
- acronis cyber protect 15, cyber protect +1 moreOpen redirect via user-controlled query parameter6.1 Medium
- acronis cyber protect 15, cyber protect +1 moreCleartext transmission of sensitive information7.5 High
- acronis cyber protect 15, cyber protect +1 moreCleartext transmission of sensitive information7.5 High
- acronis agent, cyber protect 15, cyber protect +2 moreSensitive information disclosure due to insecure folder permissions7.5 High
- ibm datapower gatewayIBM DataPower Gateway 10.0.2.0 through 1.0.3.0, 10.0.1.0 through 10.0.1.5, and 2018.4.1.0 through...4.8 Medium
- tenda tx9 pro firmwareTenda TX9 Pro V22.03.02.10 is vulnerable to Buffer Overflow via the functtion setIPv6Status() in...7.5 High
- codesnippets code snippets, code snippets pro snippets (wordpress plugin) +1 moreWordPress Code Snippets plugin <= 2.14.3 - Reflected Cross-Site Scripting (XSS) vulnerability4.7 Medium
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreIncorrect Calculation in moodle9.8 Critical
- mck smartlock project smartlockDue to the use of an insecure algorithm for rolling codes in MCK Smartlock 1.0, allows attackers...6.8 Medium
drupal/wingsuit_companionPackagistThe Wingsuit module enables site builders to build UI Patterns (and|or) Twig Components with Storybook and use them without any mapping code in Drupal. The module doesn't have an access check for the…No score- blogengine blogengine.netA Cross-Site Request Forgery (CSRF) vulnerability discovered in BlogEngine.Net v3.3.8.0 allows...6.5 Medium
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreSQL injection in moodle9.8 Critical
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreExposure of Sensitive Information in moodle4.3 Medium
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreExternal Control of Assumed-Immutable Web Parameter in moodle5.3 Medium
- tibco businessconnect trading community managementTIBCO BusinessConnect Trading Community Management Cross-Site Request Forgery Vulnerability8.8 High
- tibco businessconnect trading community managementTIBCO BusinessConnect Trading Community Management Reflected Cross Site Scripting Vulnerability6.1 Medium
- tibco businessconnect trading community managementTIBCO BusinessConnect Trading Community Management Stored Cross Site Scripting Vulnerability8.0 High
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreCross-site Scripting in moodle5.4 Medium
- wow-estore popup box, wow-company popup box (wordpress plugin) +1 moreWordPress Popup Box plugin <= 2.1.2 - Authenticated Local File Inclusion (LFI) vulnerability6.8 Medium
- snow license manager, snowsoftware snow license manager +1 moreWindows Unquoted/Trusted Service Paths7.3 High
- mitsubhishielectric melsec iq-fx5u-32mr\/ds firmware, melsec iq-fx5u-32mr\/dss firmware, melsec iq-fx5u-32mr\/es firmware +70 more +72 moreImproper Input Validation vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U-xMy/z(x=32...5.3 Medium
- universis universis-studentsAn information disclosure vulnerability in UniverSIS-Students before v1.5.0 allows attackers to...6.5 Medium
- mitsubhishielectric melsec iq-fx5u-32mr\/ds firmware, melsec iq-fx5u-32mr\/dss firmware, melsec iq-fx5u-32mr\/es firmware +70 more +72 moreImproper Input Validation vulnerability in Mitsubishi Electric MELSEC iQ-F series FX5U-xMy/z(x=32...8.6 High
- debian linux, linux kernel, netapp h300e firmware +7 more +9 moreA flaw in Linux Kernel found in nfcmrvl_nci_unregister_dev() in drivers/nfc/nfcmrvl/main.c can...7.0 High
- inkscapeInkscape Out-of-bounds Write7.8 High
- inkscapeInkscape Access of Uninitialized Pointer3.3 Low
- inkscapeInkscape Out-of-bounds Read3.3 Low
- lenovo smart standby driverA buffer overflow vulnerability in Lenovo Smart Standby Driver prior to version 4.1.50.0 could...5.5 Medium
- lenovo a1 firmware, personal cloud storage a1, personal cloud storage t1 +7 more +9 moreA command injection vulnerability was reported in some Lenovo Personal Cloud Storage devices that...8.0 High
- lenovo a1 firmware, personal cloud storage a1, personal cloud storage t1 +7 more +9 moreA vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an...6.3 Medium
- Show moreLoading…