CVEs published in May 2022
2,612 vulnerabilities, 425 critical, 9 exploited.
- apereo opencastLimited Authentication Bypass for Media Files in Opencast5.4 Medium
- radare radare2radareorg radare2 5.5.2 is vulnerable to Buffer Overflow via /libr/core/anal_objc.c mach-o parser.5.5 Medium
- fortinet fortiosAn improper certificate validation vulnerability [CWE-295] in FortiOS 6.0.0 through 6.0.14, 6.2.0...5.4 Medium
- luxsoft luxcalIn LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a POST...9.8 Critical
- luxsoft luxcalIn LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a cookie...9.8 Critical
- azure-rtos usbx, eclipse threadx usbx +1 moreBuffer overflow on HUB descriptor in Azure RTOS USBX7.5 High
- vaadin, vaadin vaadin-grid-flow +1 morePossible information disclosure inside TreeGrid component with default data provider5.7 Medium
- chainsafe lodestarInteger Overflow in Lodestar7.5 High
- jpadilla pyjwt, fedoraproject fedora +1 moreKey confusion through non-blocklisted public key formats in PyJWT7.4 High
- room rent portal site project rent portal siteRoom-rent-portal-site v1.0 is vulnerable to Cross Site Scripting (XSS) via /rrps/classes/Master...6.1 Medium
- room rent portal site project rent portal siteRoom-rent-portal-site v1.0 is vulnerable to SQL Injection via /rrps/classes/Master.php?f...8.8 High
- covid 19 travel pass management system project 19 travel pass management systemCovid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/classes...9.8 Critical
- covid 19 travel pass management system project 19 travel pass management systemCovid-19 Travel Pass Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via ...5.4 Medium
- oretnom23 toll tax management systemToll-tax-management-system v1.0 is vulnerable to Cross Site Scripting (XSS) via /ttms/classes...5.4 Medium
- water billing system project billing systemWater-billing-management-system v1.0 is vulnerable to SQL Injection via /wbms/classes/Master.php...9.8 Critical
- water billing system project billing systemWater-billing-management-system v1.0 is affected by: Cross Site Scripting (XSS) via /wbms/classes...5.4 Medium
- chatbot app with suggestion project app with suggestionChatBot App with Suggestion in PHP/OOP v1.0 is vulnerable to SQL Injection via /simple_chat_bot...8.8 High
- chatbot app with suggestion project app with suggestionChatBot App with Suggestion in PHP/OOP v1.0 is vulnerable to Cross Site Scripting (XSS) via ...5.4 Medium
- automotive shop management system project shop management systemAutomotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master...8.8 High
- automotive shop management system project shop management systemAutomotive Shop Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via /asms...5.4 Medium
- simple social networking site project social networking siteSimple Social Networking Site v1.0 is vulnerable to Cross Site Scripting (XSS) via /sns/classes...5.4 Medium
- sscms siteserver cmsCross site scripting in SiteServer CMS5.4 Medium
- badminton center management system project center management systemBadminton Center Management System 1.0 is vulnerable to SQL Injection via /bcms/classes/Master...9.8 Critical
- badminton center management system project center management systemBadminton Center Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via /bcms...5.4 Medium
- sscms siteserver cmsSQL injection in SiteServer CMS8.8 High
- merchandise online store project online storeMerchandise Online Store 1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master...9.8 Critical
- sscms siteserver cmsSiteServer CMS < V5.1 is affected by an unrestricted upload of a file with dangerous type ...9.8 Critical
- filegator, filegator filegator/filegator +1 morePath Traversal in filegator/filegator5.4 Medium
- filegator, filegator filegator/filegator +1 moreSession Fixation in filegator/filegator4.3 Medium
- tenda ac9 firmwareThere is a buffer overflow vulnerability in the Web server httpd of the router in Tenda router...6.5 Medium
- erudika erudika/para, para +1 moreBusiness Logic Errors in erudika/para9.0 Critical
- golang go, fedoraproject fedora, netapp beegfs csi driver +2 moregolang.org/x/sys/unix has Incorrect privilege reporting in syscall5.3 Medium
- home clean services management system project clean services management system, unspecified home clean services management system +1 moreHome Clean Services Management System cross site scripting2.4 Low
- home clean services management system project clean services management system, unspecified home clean services management system +1 moreHome Clean Services Management System login.php sql injection6.3 Medium
- home clean services management system project clean services management system, unspecified home clean services management system +1 moreHome Clean Services Management System login.php sql injection4.7 Medium
- home clean services management system project clean services management system, unspecified home clean services management system +1 moreHome Clean Services Management System unrestricted upload4.7 Medium
- code-projects student information system, student information system project information system +1 moreStudent Information System Student Roll Module cross site scripting2.4 Low
- zyxel atp series firmware, nap203 firmware, nsg series firmware +67 more +69 moreA argument injection vulnerability in the 'packet-trace' CLI command of Zyxel USG/ZyWALL series...7.8 High
- joinmastodon mastodonapp/models/user.rb in Mastodon before 3.5.0 allows a bypass of e-mail restrictions.5.3 Medium
- zyxel atp series firmware, usg flex series firmware, usg/zywall series firmware +33 more +35 moreA downgrade from two-factor authentication to one-factor authentication vulnerability in the CGI...6.5 Medium
- wangl1989 mysiteformemysiteforme v2.2.1 was discovered to contain a Server-Side Request Forgery.7.5 High
- zyxel atp series firmware, usg flex series firmware, usg/zywall series firmware +33 more +35 moreA cross-site scripting vulnerability was identified in the CGI program of Zyxel USG/ZyWALL series...5.8 Medium
- imgurl project imgurlSQL injection in helloxz/imgurl8.1 High
- totolink a3600r firmwareTotolink A3600R V4.1.2cu.5182_B20201102 was discovered to contain a stacker overflow in the fread...7.5 High
- smarty, debian linux, fedoraproject fedora +2 morePHP Code Injection by malicious block or filename in Smarty8.8 High
- zyxel atp series firmware, nap203 firmware, nsg series firmware +67 more +69 moreMultiple improper input validation flaws were identified in some CLI commands of Zyxel USG/ZyWALL...6.1 Medium
- canonical accountsservice, ubuntu linux, linux +2 moreAccountsservice incorrectly drops privileges5.5 Medium
- xuxueli xxl-jobCross-Site Request Forgery in XXL-Job8.8 High
- simple food website project food websiteIn Simple Food Website 1.0, a moderation can put the Cross Site Scripting Payload in any of the...5.4 Medium
- apachefriends xamppXampp for Windows v8.1.4 and below was discovered to contain insecure permissions for its install...8.8 High
- Show moreLoading…