CVEs published in May 2022
2,612 vulnerabilities, 425 critical, 9 exploited.
- ginadmin project ginadminPath traversal in ginadmin7.5 High
- ginadmin project ginadminArbitrary file read in ginadmin7.5 High
- hcl software bigfix mobile / modern client management, hcltech bigfix mobile, bigfix modern client management +2 moreHCL BigFix Mobile / Modern Client Management is vulnerable to sensitive information exposure6.8 Medium
- hcl software versionvault expressA Security Misconfiguration vulnerability affects HCL VersionVault Express9.1 Critical
- f-secure atlant, all f-secure & withsecure endpoint protection products for windows and mac. f-secure linux security (32-bit). f-secure linux security (64-bit). f-secure atlant. withsecure cloud protection for salesforce & withsecure collaboration protection, cloud protection for salesforce +5 more +7 moreDenial-of-Service (DoS) Vulnerability4.3 Medium
- linux kernel, netapp active iq unified manager, bootstrap os +14 more +16 moreAn issue was discovered in the Linux Kernel from 4.18 to 4.19, an improper update of sock...5.9 Medium
- salesforce tableau server, tableau server +1 moreTableau is aware of a broken access control vulnerability present in Tableau Server affecting...7.2 High
- nokia broadcast message centerNokia Broadcast Message Center through 11.1.0 allows an authenticated user to perform a Boolean...6.5 Medium
- bentley nevada, a baker hughes subsidiary 3500 rack configuration, part no. 129133-01, 3500 system 1 6.x, part no. 3060/00, 3500 system 1, part no. 3071/xx & 3072/xx +6 more +8 moreBaker Hughes Bently Nevada 3500 - Use of Password Hash with Insufficient Computational Effort8.2 High
- lcds laquis scadaLCDS LAquis SCADA - Cross-site Scripting9.3 Critical
- philips interoperability solution xdsPhilips Interoperability Solution XDS - Clear Text Transmission of Sensitive Information3.7 Low
- creativeitem academy lmsAcademy-LMS v4.3 was discovered to contain a stored cross-site scripting (XSS) vulnerability in...4.8 Medium
- f5 njsNginx NJS v0.7.3 was discovered to contain a stack overflow in the function...9.8 Critical
- oretnom23 online food ordering systemAn arbitrary file upload vulnerability in the Select Image function of Online Food Ordering...7.2 High
- oretnom23 online food ordering systemOnline Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- radare radare2radareorg radare2 version 5.5.2 is vulnerable to NULL Pointer Dereference via libr/bin/p...5.5 Medium
- python pillowBuffer over-flow in Pillow9.8 Critical
- hashicorp go-getterHashiCorp go-getter unsafe downloads could lead to asymmetric resource exhaustion8.6 High
- hashicorp go-getterHashiCorp go-getter unsafe downloads could lead to arbitrary host access8.6 High
- hashicorp go-getterHashiCorp go-getter unsafe downloads8.6 High
- hashicorp go-getterHashiCorp go-getter command injection9.8 Critical
- archibus web centralIn Archibus Web Central before 26.2, multiple SQL Injection vulnerabilities occur in dwr/call...9.8 Critical
- libtiff, debian linux, fedoraproject fedora +2 more +4 moreA stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function. This flaw allows...6.1 Medium
- camptocamp camptocamp/terraboard, terraboard +1 moreSQL Injection in camptocamp/terraboard9.6 Critical
- suse rancherRancher: Weave CNI password is not set if RKE template is used with CNI value overridden6.8 Medium
- diagrams drawio, jgraph jgraph/drawio +1 moreExposure of Sensitive Information to an Unauthorized Actor in jgraph/drawio5.3 Medium
sosAlmaLinux,sos-auditAlmaLinux +1 moresos bug fix and enhancement updateNo score- apache archivaApache Archiva Arbitrary user password reset vulnerability6.5 Medium
- zkea zkeacmsCross-site Scripting in ZKEACMS5.4 Medium
ghostscriptOSS-FuzzHeap-buffer-overflow in pdfi_dict_get_no_store_R_innerNo score- google chromeUse after free in UI in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to perform...8.8 High
- sound exchange project exchangeIn SoX 14.4.2, there is an assertion failure in rate_init in rate.c in libsox.a.5.5 Medium
- sound exchange project exchangeIn SoX 14.4.2, there is a floating-point exception in lsx_aiffstartwrite in aiff.c in libsox.a.5.5 Medium
- mariadbMariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress...5.5 Medium
- mariadbMariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress...5.5 Medium
- guzzle, debian linux, drupal +2 moreCross-domain cookie leakage in Guzzle8.0 High
- google chromeHeap buffer overflow in DevTools in Google Chrome prior to 102.0.5005.61 allowed an attacker who...8.8 High
- google chromeInappropriate implementation in PDF in Google Chrome prior to 102.0.5005.61 allowed a remote...4.3 Medium
- google chromeInsufficient policy enforcement in Safe Browsing in Google Chrome on Mac prior to 102.0.5005.61...8.8 High
- google chromeInsufficient policy enforcement in COOP in Google Chrome prior to 102.0.5005.61 allowed a remote...6.5 Medium
- google chromeInsufficient policy enforcement in Extensions API in Google Chrome prior to 102.0.5005.61 allowed...4.3 Medium
- google chromeInsufficient policy enforcement in File System API in Google Chrome prior to 102.0.5005.61...4.3 Medium
- google chromeUse after free in App Service in Google Chrome prior to 102.0.5005.61 allowed an attacker who...8.8 High
- google chromeType Confusion in V8 in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to...6.5 Medium
- google chromeInappropriate implementation in Extensions API in Google Chrome prior to 102.0.5005.61 allowed an...6.5 Medium
- google chromeInsufficient validation of untrusted input in Data Transfer in Google Chrome prior to 102.0.5005...6.5 Medium
- google chromeUse after free in Tablet Mode in Google Chrome on Chrome OS prior to 102.0.5005.61 allowed a...8.8 High
- google chromeUse after free in Bookmarks in Google Chrome prior to 102.0.5005.61 allowed an attacker who...8.8 High
- google chromeUse after free in WebApp Installs in Google Chrome prior to 102.0.5005.61 allowed an attacker who...8.8 High
- google chromeUse after free in Tab Groups in Google Chrome prior to 102.0.5005.61 allowed an attacker who...8.8 High
- Show moreLoading…