CVEs published in May 2022
2,612 vulnerabilities, 425 critical, 9 exploited.
- mozilla firefox, firefox esr, firefox for android +1 more +3 moreAn attacker could have sent a message to the parent process where the contents were used to...8.8 High
- radare radare2, radareorg radareorg/radare2 +1 moreAccess of Uninitialized Pointer in radareorg/radare27.4 High
- gitblitUnescaped control characters in Gitblit9.8 Critical
- gitblitPath traversal in Gitblit7.5 High
- solanalabs rbpfInteger overflow in solana_rbpf7.5 High
- rulex-rs rulex, pomsky-lang pomsky +1 moreReachable Assertion in rulex6.5 Medium
- rulex-rs rulex, pomsky-lang pomsky +1 moreUncontrolled Recursion in rulex6.5 Medium
- polonel polonel/trudesk, trudesk project trudesk +1 moreUnrestricted Upload of File with Dangerous Type in polonel/trudesk9.0 Critical
- kaidomc-pm-pl regionprotectArgument Injection in RegionProtect7.5 High
jsonOSS-FuzzHeap-use-after-free in std::__1::__tree_node_base<void*>*& std::__1::__tree<std::__1::__value_type<std:No score- pion dtlsImproper Certificate Validation in Pion DTLS5.9 Medium
- beegoAccess control bypass in beego9.8 Critical
- pion dtlsBuffer for inbound DTLS fragments has no limit5.3 Medium
- pion dtlsHeader reconstruction method can be thrown into an infinite loop in Pion DTLS7.5 High
- stripe smokescreenSmokescreen SSRF via deny list bypass (square brackets) in Smokescreen5.3 Medium
- nextauth.js next-authURL Redirection to Untrusted Site ('Open Redirect') in next-auth6.1 Medium
- google tensorflowCode injection in `saved_model_cli` in TensorFlow7.8 High
- google tensorflowIncomplete validation in signal ops leads to crashes in TensorFlow5.5 Medium
- google tensorflowHeap buffer overflow due to incorrect hash function in TensorFlow5.5 Medium
- google tensorflowType confusion leading to `CHECK`-failure based denial of service in TensorFlow5.5 Medium
- google tensorflowSegfault in TensorFlow if `tf.histogram_fixed_width` is called with NaN values5.5 Medium
- google tensorflowCore dump when loading TFLite models with quantization in TensorFlow5.5 Medium
- google tensorflowMissing validation in `QuantizedConv2D` results in undefined behavior in TensorFlow5.5 Medium
- google tensorflowDenial of service in TensorFlow due to lack of validation in `tf.ragged.constant`5.5 Medium
- google tensorflowInteger overflow in `SpaceToBatchND` in TensorFlow5.5 Medium
- google tensorflowMissing validation causes denial of service in TensorFlow via `Conv3DBackpropFilterV2`5.5 Medium
- polonel polonel/trudesk, trudesk project trudesk +1 moreWeak Password Requirements in polonel/trudesk8.4 High
- google tensorflowSegfault and Out-of-bounds Write write due to incomplete validation in TensorFlow7.1 High
- google tensorflowSegfault due to missing support for quantized types in TensorFlow5.5 Medium
- google tensorflowMissing validation results in undefined behavior in `SparseTensorDenseAdd` in TensorFlow5.5 Medium
- google tensorflowUndefined behavior when users supply invalid resource handles in TensorFlow5.5 Medium
- checkmkIn Checkmk before 1.6.0p29, 2.x before 2.0.0p25, and 2.1.x before 2.1.0b10, a site user can...8.2 High
- google tensorflowMissing validation causes denial of service in TensorFlow via `StagePeek`5.5 Medium
- google tensorflowMissing validation causes denial of service in TensorFlow via `UnsortedSegmentJoin`5.5 Medium
- google tensorflowMissing validation causes denial of service in TensorFlow via `Conv3DBackpropFilterV2`5.5 Medium
- google tensorflowMissing validation causes denial of service in TensorFlow via `SparseTensorToCSRSparseMatrix`5.5 Medium
- polonel polonel/trudesk, trudesk project trudesk +1 moreImproper Restriction of Rendered UI Layers or Frames in polonel/trudesk8.4 High
- google tensorflowMissing validation causes denial of service in TensorFlow via `LoadAndRemapMatrix`5.5 Medium
- google tensorflowMissing validation causes denial of service in TensorFlow via `LSTMBlockCell`5.5 Medium
- google tensorflowMissing validation causes `TensorSummaryV2` in TensorFlow to crash5.5 Medium
- google tensorflowMissing validation causes denial of service via `DeleteSessionTensor` in TensorFlow5.5 Medium
- hpe nimbleosA command injection security vulnerability has been identified in HPE Nimble Storage Hybrid Flash...9.8 Critical
- google tensorflowMissing validation causes denial of service via `GetSessionTensor` in TensorFlow5.5 Medium
- tms-outsource wpdatatables, tms-plugins wpdatatables – tables & table charts (wordpress plugin) +1 moreWordPress wpDataTables plugin <= 2.1.27 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities3.4 Low
- kubiq cpt base, remove cpt base (wordpress plugin) +1 moreRemove CPT base <= 5.8 - CSRF leads to CPT base deletion5.4 Medium
- png to jpg project to jpg, kubiq png to jpg (wordpress plugin) +1 moreWordPress PNG to JPG plugin <= 4.0 - Cross-Site Request Forgery (CSRF) leading to Persistent Cross-Site Scripting (XSS) vulnerability4.7 Medium
- muneeb wp slider plugin, wp slider +1 moreWordPress WP Slider Plugin <= 1.4.5 - Cross-Site Scripting (XSS) vulnerability4.1 Medium
- google tensorflowMissing validation crashes `QuantizeAndDequantizeV4Grad` in TensorFlow5.5 Medium
- pagerduty rundeckUse of Hard-coded Cryptographic Key in rundeck/rundeck, rundeckpro/enterprise9.1 Critical
- spiffy plugins calendar, spiffyplugins spiffy calendar +1 moreWordPress Spiffy Calendar plugin <= 4.9.0 - Edit/Delete event via IDOR vulnerability6.3 Medium
- Show moreLoading…