CVEs published in May 2022
2,612 vulnerabilities, 425 critical, 9 exploited.
- multi-vendor online groceries management system project online groceries management systemMulti-Vendor Online Groceries Management System v1.0 was discovered to contain a blind SQL...9.8 Critical
- openrazer project openrazerA buffer overflow in the razeraccessory driver of OpenRazer v3.3.0 and below allows attackers to...9.8 Critical
- openrazer project openrazerA buffer overflow in the razermouse driver of OpenRazer v3.3.0 and below allows attackers to...9.8 Critical
- openrazer project openrazerA buffer overflow in the razerkbd driver of OpenRazer v3.3.0 and below allows attackers to cause...9.8 Critical
- diagrams drawio, jgraph jgraph/drawio +1 moreServer-Side Request Forgery (SSRF) in jgraph/drawio7.5 High
- goverlan client agent, reach console, reach server +2 moreIn certain Goverlan products, the Windows Firewall is temporarily turned off upon a Goverlan...6.5 Medium
- opcfoundation ua-javaOPC UA Legacy Java Stack 2022-04-01 allows a remote attacker to cause a server to stop processing...7.5 High
- proton project protonProton v0.2.0 allows an attacker to create a malicious link inside a markdown file. When the...5.4 Medium
- cybelesoft thinfinity vncThinfinity VNC v4.0.0.1 contains a Cross-Origin Resource Sharing (CORS) vulnerability which can...8.8 High
- getpopcorntime popcorn time, popcorn time project time +1 morePopcorn Time 0.4.7 has a Stored XSS in the 'Movies API Server(s)' field via the 'settings' page....5.4 Medium
php7openSUSE,php7-testopenSUSE +1 moreSecurity update for php7No score- rtx project rtx, rtxteam rtxteam/rtx +1 moreCross-site Scripting (XSS) - Reflected in rtxteam/rtx6.3 Medium
php7SUSESecurity update for php7No score- polonel polonel/trudesk, trudesk project trudesk +1 moreInteger Overflow or Wraparound in polonel/trudesk8.4 High
- zohocorp manageengine adselfservice plusManageEngine ADSelfService Plus v6.1 allows attackers to perform username enumeration via a...5.3 Medium
- thecus n4800eco firmwareThecus 4800Eco was discovered to contain a command injection vulnerability via the username...9.8 Critical
- orangehrmA stored cross-site scripting (XSS) vulnerability in the addNewPost component of OrangeHRM v4.10...6.3 Medium
- avast premium securityMultiple DLL hijacking vulnerabilities via the components instup.exe and wsc_proxy.exe in Avast...6.5 Medium
- avast premium securityAn arbitrary file write vulnerability in Avast Premium Security before v21.11.2500 (build 21.11...7.1 High
openscOSS-FuzzHeap-buffer-overflow in sc_build_pinNo score- nokogiri, apple macos +1 moreImproper Handling of Unexpected Data Type in Nokogiri8.2 High
- linux kernel, netapp hci baseboard management controller +1 moreImportant: kernel security and bug fix update7.0 High
- oracle e-business suite, user management +1 moreVulnerability in Oracle E-Business Suite (component: Manage Proxies). Supported versions that are...7.5 High
- hcl dominoHCL Domino is affected by an Insufficient Access Control vulnerability8.8 High
- online sports complex booking system project sports complex booking systemOnline Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/classes/Users...6.1 Medium
- online sports complex booking system project sports complex booking systemOnline Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /classes/master.php?f...8.8 High
- online sports complex booking system project sports complex booking systemOnline Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/classes/Users...9.8 Critical
- yaml project yaml, netapp astra trident +1 moregopkg.in/yaml.v3 Denial of Service7.5 High
- openpolicyagent open policy agentOut of bounds memory access in github.com/open-policy-agent/opa7.5 High
- mitsubishi electric cpu module logging configuration tool, cw configurator, data transfer +33 more +35 moreMitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A) - Permission Issues8.3 High
- emerson open enterprise, openenterprise scada server +1 moreEmerson OpenEnterprise - Inadequate Encryption Strength3.8 Low
- bachmann cpc210 firmware, cs200 firmware, mc205 firmware +37 more +39 moreAll Bachmann M1 System Processor Modules - Use of Password Hash with Insufficient Computational Effort7.2 High
- throughtek p2p sdk, kalay p2p software development kit +1 moreThroughTek P2P SDK - Cleartext Transmission of Sensitive Information9.1 Critical
- fieldcomm group hipserver, hart-ip developer kit, fieldcommgroup hart-ip developer kit firmware +2 moreFieldcomm Group HART-IP and hipserver - Stack-based Buffer Overflow9.8 Critical
- gitlabImproper access control in the CI/CD cache mechanism in GitLab CE/EE affecting all versions...7.1 High
- gitlabMissing input masking in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6,...5.4 Medium
- gitlabMissing sanitization of data in Pipeline error messages in GitLab CE/EE affecting all versions...4.3 Medium
- strapiImproper Removal of Sensitive Information Before Storage or Transfer in Strapi7.5 High
- strapiImproper Removal of Sensitive Information Before Storage or Transfer in Strapi8.8 High
- ibm security identity governance and intelligence, security identity manager +1 moreIBM Security Identity Governance and Intelligence 5.2.4, 5.2.5, and 5.2.6 could allow a remote...5.3 Medium
- subconverter project subconverterA remote code execution (RCE) vulnerability in Subconverter v0.7.2 allows attackers to execute...9.8 Critical
- wpopal opal hotel room booking, opal hotel room booking (wordpress plugin) +1 moreWordPress Opal Hotel Room Booking plugin <= 1.2.7 - Stored Cross-Site Scripting (XSS) vulnerability4.1 Medium
- wow-company counter box, counter box (wordpress) +1 moreWordPress Counter Box plugin <= 1.1.1 - Authenticated Local File Inclusion (LFI) vulnerability6.8 Medium
- grandcom dynwebGRANDCOM DynWEB before 4.2 contains a SQL Injection vulnerability in the admin login interface. A...9.8 Critical
- hometory co.,ltd mangboard commerce package, mangboard commerce +1 moreMangboard parameter modulation vulnerability8.0 High
- handysoft groupware, handysoft co.,ltd handy groupware +1 moreHANDY Groupware file download and execute vulnerability7.8 High
- spring security, vmware spring security, netapp active iq unified manager +1 more +3 moreInteger overflow in BCrypt class in Spring Security5.3 Medium
php7openSUSE,apache2-mod_php7openSUSE,php7-embedopenSUSE +3 more +5 moreSecurity update for php7No score- jfrog artifactoryJFrog Artifactory prior to 7.31.10, is vulnerable to Broken Access Control where a Project Admin...6.0 Medium
- shopxoArbitrary file upload in ShopXO7.2 High
- Show moreLoading…