CVEs published in May 2022
2,612 vulnerabilities, 425 critical, 9 exploited.
openscOSS-FuzzStack-buffer-overflow in sc_asn1_read_tagNo scorespirv-toolsOSS-FuzzStack-buffer-overflow in spvtools::opt::CompositeInsertToCompositeConstructNo score- gitea, go-gitea go-gitea/gitea +1 moreCross-site Scripting (XSS) - Stored in go-gitea/gitea4.4 Medium
- vim, vim vim/vim, apple macos +1 more +3 moreBuffer Over-read in vim/vim7.8 High
- debian linux, linux kernel, netapp h300s firmware +5 more +7 moreLinux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a...7.8 High
- debian linux, fedoraproject fedora, linux kernel +1 more +3 moreWith shadow paging enabled, the INVPCID instruction results in a call to kvm_mmu_invpcid_gva. If...6.8 Medium
openscOSS-FuzzSegv on unknown address in sc_aux_data_freeNo score- freedesktop freetype demo programsftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based buffer overflow.7.8 High
- online market place site project market place siteAn insecure direct object reference (IDOR) in Online Market Place Site v1.0 allows attackers to...4.3 Medium
- online market place site project market place siteA cross-site scripting (XSS) vulnerability in /omps/seller of Online Market Place Site v1.0...5.4 Medium
- protobufjs project protobufjsPrototype Pollution8.2 High
- unicorn-engine unicorn engineUnicorn Engine v2.0.0-rc7 contains memory leaks caused by an incomplete unicorn engine...7.5 High
- unicorn-engine unicorn engineUnicorn Engine v2.0.0-rc7 and below was discovered to contain a NULL pointer dereference via...7.5 High
- unicorn-engine unicorn engineUnicorn Engine v2.0.0-rc7 and below was discovered to contain a memory leak via the function...7.5 High
- unicorn-engine unicorn engineUnicorn Engine v1.0.3 was discovered to contain a use-after-free vulnerability via the hook...7.8 High
- aceware aceweb online portalACEweb Online Portal 3.5.065 allows unauthenticated SMB hash capture via UNC. By specifying the...7.5 High
- aceware aceweb online portalACEweb Online Portal 3.5.065 was discovered to contain an External Controlled File Path and Name...7.5 High
- aceware aceweb online portalACEweb Online Portal 3.5.065 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- aceware aceweb online portalACEweb Online Portal 3.5.065 was discovered to contain an unrestricted file upload vulnerability...9.8 Critical
- aceware aceweb online portalACEweb Online Portal 3.5.065 was discovered to contain a cross-site scripting (XSS) vulnerability...6.1 Medium
- mv idceSQL injection in Logon Page of IDCE MV's application, version 1.0, allows an attacker to inject...7.5 High
- sscms siteserver cmsCross site scripting in SSCMS6.1 Medium
- solutions-atlantic regulatory reporting systemSolutions Atlantic Regulatory Reporting System (RRS) v500 is vulnerable to an reflected Cross...6.1 Medium
- bonitasoft bonita webBonita Web 2021.2 is affected by a authentication/authorization bypass vulnerability due to an...9.8 Critical
- rack project rack, debian linux +1 moreDenial of Service Vulnerability in Rack Multipart Parsing7.5 High
- rack project rack, debian linux +1 morePossible shell escape sequence injection vulnerability in Rack10.0 Critical
- school dormitory management system project dormitory management systemSchool Dormitory Management System v1.0 is vulnerable to reflected cross-site scripting (XSS) via...6.1 Medium
- hcl software bigfix mobile / modern client management, hcltech bigfix mobile, modern client management +2 moreHCL BigFix Mobile / Modern Client Management is vulnerable to stored cross-site scripting6.6 Medium
- hcl software bigfix mobile / modern client management, hcltech bigfix mobile, modern client management +2 moreHCL BigFix Mobile / Modern Client Management is vulnerable to unauthenticated XML interaction5.3 Medium
- school dormitory management system project dormitory management systemSchool Dormitory Management System 1.0 is vulnerable to SQL Injection via accounts/view_details...9.8 Critical
- school dormitory management system project dormitory management systemSchool Dormitory Management System v1.0 is vulnerable to reflected cross-site scripting (XSS) via...6.1 Medium
- hashicorp nomadPrivilege escalation in Hashicorp Nomad9.8 Critical
- cisco telepresence video communication server, telepresence video communication server (vcs) expressway +1 moreCisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities4.3 Medium
- cisco telepresence video communication server, telepresence video communication server (vcs) expressway +1 moreCisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities4.3 Medium
- cisco enterprise chat and emailCisco Enterprise Chat and Email Stored Cross-Site Scripting Vulnerability5.4 Medium
- cisco stealthwatch enterprise, secure network analytics +1 moreCisco Secure Network Analytics Remote Code Execution Vulnerability5.5 Medium
- cisco ucs directorCisco UCS Director JavaScript Cross-Site Scripting Vulnerability4.8 Medium
- cisco common services platform collector, common services platform collector software +1 moreCisco Common Services Platform Collector Cross-Site Scripting Vulnerabilities6.1 Medium
- cisco common services platform collector, common services platform collector software +1 moreCisco Common Services Platform Collector Cross-Site Scripting Vulnerabilities6.1 Medium
- cisco common services platform collector, common services platform collector software +1 moreCisco Common Services Platform Collector Cross-Site Scripting Vulnerabilities6.1 Medium
- cisco common services platform collector, common services platform collector software +1 moreCisco Common Services Platform Collector Cross-Site Scripting Vulnerabilities6.1 Medium
- cisco common services platform collector, common services platform collector software +1 moreCisco Common Services Platform Collector Cross-Site Scripting Vulnerabilities6.1 Medium
- cisco common services platform collector, common services platform collector software +1 moreCisco Common Services Platform Collector Cross-Site Scripting Vulnerabilities6.1 Medium
- cisco common services platform collector, common services platform collector software +1 moreCisco Common Services Platform Collector Cross-Site Scripting Vulnerabilities6.1 Medium
- cisco common services platform collector, common services platform collector software +1 moreCisco Common Services Platform Collector Cross-Site Scripting Vulnerabilities6.1 Medium
- cisco common services platform collector, common services platform collector software +1 moreCisco Common Services Platform Collector Cross-Site Scripting Vulnerabilities6.1 Medium
- school dormitory management system project dormitory management systemSchool Dormitory Management System 1.0 is vulnerable to SQL Injection via accounts...9.8 Critical
- phpabook project phpabookphpABook 0.9i is vulnerable to SQL Injection due to insufficient sanitization of user-supplied...9.8 Critical
- merchandise online store project online storeMerchandise Online Store v1.0 by oretnom23 has an arbitrary code execution (RCE) vulnerability in...9.8 Critical
- mingsoft mcmsCode injection in MCMS9.8 Critical
- Show moreLoading…