CVEs published in May 2022
2,612 vulnerabilities, 425 critical, 9 exploited.
- bloodshed dev-c\+\+Insecure permissions in the install directories and binaries of Dev-CPP v4.9.9.2 allows attackers...8.8 High
- inoutscripts blockchain altexchanger, blockchain fiatexchanger +1 moreInout Blockchain AltExchanger 1.2.1 and Inout Blockchain FiatExchanger 2.2.1 allow Chart...7.5 High
- inoutscripts blockchain altexchangerInout Blockchain AltExchanger 1.2.1 allows index.php/coins/update_marketboxslider marketcurrency...7.5 High
- inoutscripts blockchain altexchangerInout Blockchain AltExchanger 1.2.1 allows index.php/home/about inoutio_language cookie SQL...7.5 High
- claroty secure remote access (sra) site, secure remote access +1 moreClaroty Secure Remote Access Site - Authentication Bypass Using an Alternate Path or Channel5.5 Medium
- aveva intouch access anywhere, plant scada access anywhere +1 moreAVEVA InTouch Access Anywhere Exposure of Resource to Wrong Sphere7.4 High
- annke n48pbb (nvr), n48pbb firmware +1 moreAnnke Network Video Recorder - Stack-based Buffer Overflow9.4 Critical
- cognex in-sight opc serverCognex In-Sight OPC Server - Deserialization of Untrusted Data8.8 High
- quickheal total securityTOCTOU Vulnerability in Quick Heal Total Security7.9 High
- quickheal total securityDLL Hijacking Vulnerability in Quick Heal Total Security7.9 High
openldapTuxCare,openldap-clientsTuxCare,openldap-develTuxCare +1 more +3 moreUpdate of openldapNo score- simple blog project blogThe Simple Blog plugin in Wondercms 3.4.1 is vulnerable to stored cross-site scripting (XSS)...5.4 Medium
- emcosoftware msi package builder, network inventory, network software scanner +5 more +7 moreCertain EMCO Software products are affected by: CWE-494: Download of Code Without Integrity Check...8.8 High
- rescue dispatch management system project dispatch management systemRescue Dispatch Management System 1.0 is vulnerable to Incorrect Access Control via http:/...8.8 High
- rescue dispatch management system project dispatch management systemRescue Dispatch Management System 1.0 suffers from Stored XSS, leading to admin account takeover...5.4 Medium
- dlink dsl-g2452dg firmwareD-Link DSL-G2452DG HW:T1\\tFW:ME_2.00 was discovered to contain insecure permissions.9.8 Critical
- simple food website project food websiteLumidek Associates Simple Food Website 1.0 is vulnerable to Cross Site Request Forgery (CSRF)...8.8 High
- phpgurukul e-diary management systemDiary Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability...6.1 Medium
- tipaskIn Tipask < 3.5.9, path parameters entered by the user are not validated when downloading...7.7 High
- phpgurukul online birth certificate systemMultiple cross-site scripting (XSS) vulnerabilities in the component /obcs/user/profile.php of...6.1 Medium
- xlightftpd xlight ftpXlight FTP v3.9.3.2 was discovered to contain a stack-based buffer overflow which allows...8.1 High
- cszcmsCSZCMS v1.3.0 allows attackers to execute a Server-Side Request Forgery (SSRF) which can be...7.5 High
- publify publify/publify, publify project publify +1 moreUnrestricted Upload of File with Dangerous Type in publify/publify9.1 Critical
- divvydrive information technologies inc. divvydrive, netdatasoft divvy drive +1 moreCross-Site Scripting Vulnerability in DivvyDrive5.4 Medium
cloud-initAlmaLinuxcloud-init bug fix updateNo score- badminton center management system project center management system, unspecified badminton center management system +1 moreBadminton Center Management System Userlist Module cross site scripting3.5 Low
- phpgurukul zoo management systemZoo Management System Content Module cross site scripting3.5 Low
- collectiveaccess collectiveaccess/providence, providence +1 moreCross-site Scripting (XSS) - Reflected in collectiveaccess/providence5.5 Medium
- gnu libredwgA heap buffer overflow was discovered in copy_bytes in decode_r2007.c in dwgread before 0.12.4...8.8 High
- gnu libredwgA heap buffer overflow was discovered in copy_compressed_bytes in decode_r2007.c in dwgread...8.8 High
- f-secure atlant, elements endpoint protection, endpoint protection products for windows and mac. f-secure linux security (32-bit). f-secure linux security 64. f-secure atlant. withsecure cloud protection for salesforce & withsecure collaboration protection +3 more +5 moreMultiple Denial-of-Service (DoS) Vulnerabilities4.3 Medium
- apache software foundation maven, apache maven shared utils, debian linux +2 moreCommandline class shell injection vulnerabilities9.8 Critical
- curtainCurtain <= 1.0.2 - Admin+ Stored Cross-Site Scripting4.8 Medium
- unknown check & log email, wpchill check \& log email +1 moreCheck & Log email < 1.0.6 - Reflected Cross-Site Scripting6.1 Medium
- 10web sliderby10webSliderby10Web < 1.2.52 - Admin+ Stored Cross-Site Scripting4.8 Medium
- billy bryant tabs, wpshopmart tabs responsive +1 moreTabs Responsive < 2.2.8 - Editor+ Stored Cross-Site Scripting4.8 Medium
- donate extra project extra, unknown donate extra +1 moreDonate Extra <= 2.02 - Reflected Cross-Site Scripting6.1 Medium
- gwyn\'s imagemap selector project imagemap selector, unknown gwyn's imagemap selector +1 moreGwyn's Imagemap Selector <= 0.3.3 - Reflected Cross-Site Scripting6.1 Medium
- duogeek domain replaceDomain Replace <= 1.3.8 - Reflected Cross-Site Scripting6.1 Medium
- turn off all comments project off all comments, unknown turn off all comments +1 moreTurn off all comments <= 1.0 - Reflected Cross-Site Scripting6.1 Medium
- joomunited wp meta seoWP Meta SEO < 4.4.7 - Admin+ Stored Cross-Site Scripting via breadcrumbs4.8 Medium
- labarta wp contacts managerWP Contacts Manager <= 2.2.4 - Unauthenticated SQLi9.8 Critical
- nirweb support, nirwp team nirweb support +1 moreNirweb support < 2.8.2 - Unauthenticated SQLi9.8 Critical
- unknown xml sitemap generator for google, xmlsitemapgenerator xml sitemap generator +1 moreGoogle XML Sitemap Generator < 2.0.4 - Reflected Cross-Site Scripting6.1 Medium
- jfrog artifactoryJFrog Artifactory prior to version 7.28.0 and 6.23.38, is vulnerable to Broken Access Control,...5.3 Medium
- publify publify/publify, publify project publify +1 moreAuthorization Bypass Through User-Controlled Key in publify/publify9.9 Critical
- rengine project rengine, yogeshojha yogeshojha/rengine +1 moreOS Command Injection in yogeshojha/rengine8.3 High
neoncrates.ioUse after free in Neon external buffersNo scoreffmpegMageiaUpdated ffmpeg packages fix security vulnerabilityNo score- mozilla firefox, firefox esr, firefox for android +1 more +3 moreIf an attacker was able to corrupt the methods of an Array object in JavaScript via prototype...8.8 High
- Show moreLoading…