CVEs published in May 2022
2,612 vulnerabilities, 425 critical, 9 exploited.
- google chromeInappropriate implementation in Extensions in Google Chrome prior to 102.0.5005.61 allowed an...6.5 Medium
- google chromeUse after free in Sharing in Google Chrome on Chrome OS prior to 102.0.5005.61 allowed a remote...8.8 High
- google chromeUse after free in UI Foundations in Google Chrome on Chrome OS prior to 102.0.5005.61 allowed a...8.8 High
- google chromeUse after free in Performance Manager in Google Chrome prior to 102.0.5005.61 allowed a remote...8.8 High
- google chromeOut of bounds read in DevTools in Google Chrome prior to 102.0.5005.61 allowed a remote attacker...6.5 Medium
- google chromeInsufficient policy enforcement in File System API in Google Chrome prior to 102.0.5005.61...8.8 High
- google chromeUse after free in User Education in Google Chrome prior to 102.0.5005.61 allowed an attacker who...8.8 High
- google chromeUse after free in Messaging in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to...8.8 High
- google chromeUse after free in ANGLE in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to...8.8 High
- google chromeUse after free in Indexed DB in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to...9.6 Critical
- vim, vim vim/vim, apple macos +2 more +4 moreOut-of-bounds Read in vim/vim7.8 High
- debian dpkg, linux, netapp ontap select deploy administration utility +2 moredirectory traversal for in-place extracts with untrusted v2 and v3 source packages with debian.tar9.8 Critical
- logrotate project logrotate, fedoraproject fedora +1 moreA vulnerability was found in logrotate in how the state file is created. The state file is used...6.5 Medium
- limesurveyA cross-site scripting (XSS) vulnerability in uploadConfirm.php of LimeSurvey v5.3.9 and below...6.1 Medium
- palletsprojects werkzeugImproper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to...9.8 Critical
- school club application system project club application systemA stored cross-site scripting (XSS) vulnerability in /scas/?page=clubs/application_form&id=7 of...6.1 Medium
- epub2txt2 project epub2txt2epub2txt2 v2.04 was discovered to contain an integer overflow via the function bug in...5.5 Medium
- keking kkfileviewkkFileView v4.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the...6.1 Medium
- ibm aspera faspexIBM Aspera Faspex 4.4.1 and 5.0.0 could allow unauthorized access due to an incorrectly computed...7.5 High
- cdatatec fd702xw-x-r430 firmwareC-DATA FD702XW-X-R430 v2.1.13_X001 was discovered to contain a command injection vulnerability...9.8 Critical
- h project hAn issue in H v1.0 allows attackers to bypass authentication via a session replay attack.9.8 Critical
- cyberlink powerdirectorA vulnerability in CyberLink Power Director v14 allows attackers to escalate privileges via a...7.8 High
- halibut project halibut, fedoraproject fedora +1 moreA use after free in info_width_internal in bk_info.c in Halibut 1.2 allows an attacker to cause a...7.8 High
- red hat undertow, netapp active iq unified manager, oncommand insight +5 more +7 moreundertow Race Condition vulnerability5.9 Medium
- red hat undertow, netapp active iq unified manager, oncommand insight +5 more +7 moreUndertow Uncontrolled Resource Consumption5.9 Medium
- red hat wildfly, redhat jboss enterprise application platform, single sign-on +1 more +3 moreWildfly-Core user account mismanagement7.8 High
- halibut project halibut, fedoraproject fedora +1 moreA double free in cleanup_index in index.c in Halibut 1.2 allows an attacker to cause a denial of...7.8 High
- vmware tools, tools for windows +1 moreVMware Tools for Windows(12.0.0, 11.x.y and 10.x.y) contains an XML External Entity (XXE)...7.1 High
- halibut project halibut, fedoraproject fedora +1 moreA use after free in cleanup_index in index.c in Halibut 1.2 allows an attacker to cause a...7.8 High
- zohocorp manageengine applications managerManageEngine AppManager15 (Build No:15510) allows an authenticated admin user to upload a DLL...7.2 High
- delta electronics diascreenDelta Electronics DIAScreen - Type Confusion, Out-of-bounds Write7.8 High
- delta electronics diascreenDelta Electronics DIAScreen - Type Confusion, Out-of-bounds Write7.8 High
- agg software web server (webserver.dll), aggsoft webserver +1 moreClaroty Secure Remote Access Site - Authentication Bypass Using an Alternate Path or Channel8.2 High
- agg software web server (webserver.dll), aggsoft webserver +1 moreClaroty Secure Remote Access Site - Authentication Bypass Using an Alternate Path or Channel6.5 Medium
- circutor compact dc-s basic, compact dc-s basic firmware +1 moreCircutor COMPACT DC-S BASIC6.8 Medium
- debian linux, oracle vm +1 moreKGDB and KDB allow read and write access to kernel memory, and thus should be restricted during...6.7 Medium
ctxPyPIbackdoor in ctx version 0.1.2-1, 0.1.2-2, 0.1.4, 0.2, 0.2.1, 0.2.2, 0.2.2.1, 0.2.3, 0.2.4, 0.2.5, 0.2.6No scorewebkit2gtkUbuntuwebkit2gtk vulnerabilitiesNo score- ibm iIBM i 7.3, 7.4, and 7.5 is vulnerable to SQL injection. A remote attacker could send specially...6.3 Medium
- ibm power system s922 server, power system s922 firmware +1 moreThe POWER systems FSP is vulnerable to unauthenticated logins through the serial port/TTY...6.8 Medium
- ibm elastic storage system, spectrum scale +1 moreA vulnerability in the Spectrum Scale 5.1 core component and IBM Elastic Storage System 6.1 could...5.7 Medium
- airfield online project online, unspecified airfield online +1 moreAirfield Online MySQL Backup improper authentication3.7 Low
- cardo systems scala rider q3, cardosystems scala rider q3 firmware +1 moreCardo Systems Scala Rider Q3 Cardo-Updater api privileges management8.1 High
- telecommunication software samwin contact center suite, telecomsoftware samwin contact center, samwin agent +2 moreTelecommunication Software SAMwin Contact Center Suite Password SAMwinLIBVB.dll passwordScramble improper authentication6.5 Medium
- telecommunication software samwin contact center suite, telecomsoftware samwin contact center, samwin agent +2 moreTelecommunication Software SAMwin Contact Center Suite Database SAMwinLIBVB.dll getCurrentDBVersion sql injection6.5 Medium
- telecommunication software samwin contact center suite, telecomsoftware samwin contact center, samwin agent +2 moreTelecommunication Software SAMwin Contact Center Suite Credential SAMwinLIBVB.dll getCurrentDBVersion hard-coded credentials6.5 Medium
- javaez project javaezReversible One-Way Hash and Use of a Broken or Risky Cryptographic Algorithm in io.github.javaezlib.JavaEZ7.5 High
- azure-rtos usbx, eclipse threadx usbx +1 morePotential buffer overflow in function DFU upload in Azure RTOS USBX9.8 Critical
- gost-engine engineBuffer Overflow on creating key transport blob in GOST Engine5.9 Medium
- morpheusdata morpheusAn XXE issue was discovered in Morpheus through 5.2.16 and 5.4.x through 5.4.4. A successful...7.5 High
- Show moreLoading…