CVEs published in May 2022
2,612 vulnerabilities, 425 critical, 9 exploited.
- knime analytics platformIn KNIME Analytics Platform below 4.6.0, the Windows installer sets improper filesystem permissions.7.8 High
php74SUSESecurity update for php74No score- eufy indoor 2k indoor camera, eufylife solo indoorcam c24 firmware, solo indoorcam p24 firmware +2 moreA Buffer Overflow vulnerability in the RSTP server component of Eufy Indoor 2K Indoor Camera...7.6 High
- polonel polonel/trudesk, trudesk project trudesk +1 moreInteger Overflow or Wraparound in polonel/trudesk7.6 High
- mruby, mruby mruby/mruby +1 moreUse After Free in mruby/mruby5.1 Medium
- polonel polonel/trudesk, trudesk project trudesk +1 moreIncorrect Synchronization in polonel/trudesk9.1 Critical
ndpiOSS-FuzzHeap-buffer-overflow in ndpi_search_http_tcpNo score- freeswitch sofia-sip, debian linux +1 moreHeap-based Buffer Overflow and Out-of-bounds Write in Sofia-SIP9.1 Critical
- freeswitch sofia-sip, debian linux +1 moreOut-of-bounds Read in Sofia-SIP7.5 High
- freeswitch sofia-sip, debian linux +1 moreOut-of-bounds Read in Sofia-SIP7.5 High
- vim, vim vim/vim, apple macos +2 more +4 moreHeap-based Buffer Overflow in vim/vim7.8 High
- debian linux, linux kernel, redhat enterprise linux +1 more +3 moreAn out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. The issue occurs...6.3 Medium
- form form.ioServer-Side Template Injection in formio9.8 Critical
- tiktokThe TikTok application before 23.7.3 for Android allows account takeover. A crafted URL (unvalidated deeplink) can force the com.zhiliaoapp.musically WebView to load an arbitrary website. This may all…8.8 High
- simple real estate pack project real estate pack, unknown simple real estate pack +1 moreSimple Real Estate Pack <= 1.4.8 - Admin+ Stored Cross Site Scripting4.8 Medium
- amazon link project link, unknown amazon link +1 moreAmazon Link <= 3.2.10 - Admin+ Stored Cross-Site Scripting4.8 Medium
- call\&book mobile bar project mobile bar, unknown call&book mobile bar +1 moreCall&Book Mobile Bar <= 1.2.2 - Admin+ Stored Cross Site Scripting4.8 Medium
- birthdays widget project widget, unknown birthdays widget +1 moreBirthdays Widget <= 1.7.18 - Admin+ Stored Cross Site Scripting4.8 Medium
- bulk page creator project page creator, unknown bulk page creator +1 moreBulk Page Creator < 1.1.4 - Arbitrary Page Creation via CSRF8.8 High
- unknown change wp-admin login, wpexperts all in one login +1 moreChange wp-admin Login < 1.1.0 - Unauthenticated Arbitrary Settings Update7.5 High
- unknown external links in new window / new tab, webfactoryltd external links in new window \/ new tab +1 moreExternal Links in New Window / New Tab < 1.43 - Tabnabbing6.5 Medium
- unknown external links in new window / new tab, webfactoryltd external links in new window \/ new tab +1 moreExternal Links in New Window / New Tab < 1.43 - Unauthenticated Stored Cross-Site Scripting6.1 Medium
- spwebguy team membersTeam Members < 5.1.1 - Admin+ Stored Cross-Site Scripting4.8 Medium
- oooorgle quotes llama, quotes llama project llama +1 moreQuotes llama < 1.0.0 - Admin+ Stored Cross-Site Scripting4.8 Medium
- 10web form maker, form maker by 10web – mobile-friendly drag & drop contact form builder +1 moreForm Maker By 10Web < 1.14.12 - Admin+ Stored Cross-Site Scripting4.8 Medium
- room 34 creative services enable svgEnable SVG < 1.4.0 - Author+ Stored Cross Site Scripting via SVG5.4 Medium
- era404 stafflistStaffList < 3.1.5 - Admin+ SQLi9.8 Critical
- justsystems hpb dashboardHPB Dashboard <= 1.3.1 - Admin+ Stored Cross Site Scripting4.8 Medium
- e4jvikwp vikbooking hotel booking engine & pms, vikwp vik booking +1 moreVikBooking < 1.5.9 - Reflected Cross-Site Scripting6.1 Medium
- wpwhitesecurity wp 2fa, melapress wp 2fa – two-factor authentication for wordpress +1 moreWP 2FA < 2.2.1 - Reflected Cross-Site Scripting6.1 Medium
- ays pro poll makerPoll Maker < 4.0.2 - Admin+ Stored Cross-Site Scripting4.8 Medium
- easy faq with expanding text project faq with expanding text, unknown easy faq with expanding text +1 moreEasy FAQ with Expanding Text <= 3.2.8.3.1 - Admin+ Stored Cross-Site Scripting4.8 Medium
- no future posts project future posts, unknown no future posts +1 moreNo Future Posts <= 1.4 - Admin+ Stored Cross-Site Scripting4.8 Medium
- slideshow project slideshowSlideshow <= 2.3.1 - Admin+ Stored Cross-Site Scripting4.8 Medium
- 99webtools imdb info boxIMDB info box <= 2.0 - Admin+ Stored Cross-Site Scripting4.8 Medium
- stillbreathing bannermanBannerMan <= 0.2.4 - Multiple Admin+ Stored Cross-Site Scripting4.8 Medium
- unknown smush – lazy load images, optimize & compress images, wpmudev smush image compression and optimization +1 moreSmush < 3.9.9 - Admin+ Reflected Cross-Site Scripting6.1 Medium
- jivochat, unknown jivochat live chat – wp live chat plugin for wordpress +1 moreJivoChat < 1.3.5.4 - Stored Cross-Site Scripting via CSRF5.4 Medium
- khaledsaikat user meta – user profile builder and user management plugin, user-meta user meta user profile builder and user management +1 moreUser Meta < 2.4.3 - Admin+ Stored Cross-Site Scripting4.8 Medium
spipDebianspip - security updateNo score- apple ipados, macos, safari +3 more +5 moreA memory corruption issue was addressed with improved state management. This issue is fixed in...8.8 High
- apple ipados, itunes, macos +4 more +6 moreA use after free issue was addressed with improved memory management. This issue is fixed in tvOS...8.8 High
- apple ipados, macos, safari +3 more +5 moreA memory corruption issue was addressed with improved state management. This issue is fixed in...8.8 High
- apple ipados, macos, safari +3 more +5 moreA use after free issue was addressed with improved memory management. This issue is fixed in tvOS...8.8 High
- apple ipados, macos, safari +3 more +5 moreA memory corruption issue was addressed with improved state management. This issue is fixed in...8.8 High
- alex content mask, content mask project mask +1 moreContent Mask < 1.8.4.1 - Subscriber+ Arbitrary Options Update4.3 Medium
- bottlepy bottle, debian linux, fedoraproject fedora +2 moreDenial of service in bottle9.8 Critical
- blackrainbow nimbusBlack Rainbow NIMBUS before 3.7.0 allows stored Cross-site Scripting (XSS).6.5 Medium
- jpeg libjpeglibjpeg 1.63 has a heap-based buffer over-read in HierarchicalBitmapRequester::FetchRegion in...6.5 Medium
openscOSS-FuzzStack-use-after-return in test_updateNo score- Show moreLoading…