CVEs published in May 2022
2,612 vulnerabilities, 425 critical, 9 exploited.
- wedding management system project management systemWedding Management System v1.0 is vulnerable to SQL Injection via \admin\client_edit.php.7.2 High
- wedding management system project management systemWedding Management System v1.0 is vulnerable to SQL Injection via admin\client_assign.php.7.2 High
- wedding management system project management systemWedding Management System v1.0 is vulnerable to SQL Injection via \admin\package_edit.php.7.2 High
- wedding management system project management systemWedding Management System v1.0 is vulnerable to SQL Injection via \admin\photos_edit.php.7.2 High
- swftoolsAn issue was discovered in swftools through 20201222. A heap buffer overflow exists in the...7.8 High
- wedding management system project management systemWedding Management System v1.0 is vulnerable to SQL Injection via \admin\users_edit.php.7.2 High
- wedding management system project management systemWedding Management System v1.0 is vulnerable to SQL Injection via \admin\feature_edit.php.7.2 High
- wedding management system project management systemWedding Management System v1.0 is vulnerable to SQL Injection via Wedding-Management...7.2 High
- wedding management system project management systemWedding Management System v1.0 is vulnerable to SQL Injection via /Wedding-Management/admin...7.2 High
- swftoolsAn issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the...5.5 Medium
- wedding management system project management systemWedding Management System v1.0 is vulnerable to SQL Injection via /Wedding-Management/admin...7.2 High
- wedding management system project management systemWedding Management System v1.0 is vulnerable to SQL injection via /Wedding-Management/admin...7.2 High
- wedding management system project management systemWedding Management System v1.0 is vulnerable to SQL Injection via /Wedding-Management/admin...7.2 High
- wedding management system project management systemWedding Management System v1.0 is vulnerable to SQL Injection. via /Wedding-Management/admin...7.2 High
- wedding management system project management systemWedding Management System v1.0 is vulnerable to SQL Injection. via Wedding-Management/admin...7.2 High
- swftoolsAn issue was discovered in swftools through 20201222 through a memory leak in the swftools when...7.8 High
- xwiki, xwiki xwiki-platform +1 moreCross-site Scripting in Filter Stream Converter Application in XWiki Platform7.4 High
- swftoolsAn issue was discovered in swftools through 20201222. A NULL pointer dereference exists in the...5.5 Medium
- ssh.net project ssh.netWeak private key generation in SSH.NET6.5 Medium
- simple bus ticket booking system project bus ticket booking systemSimple Bus Ticket Booking System 1.0 is vulnerable to SQL Injection via /SimpleBusTicket/index.php.9.8 Critical
- swftoolsAn issue was discovered in swftools through 20201222. A heap-buffer-overflow exists in the...7.8 High
- elitecms elite cmselitecms v1.01 is vulnerable to Delete any file via /admin/delete_image.php?file=.6.5 Medium
- elitecms elite cmselitecms 1.0.1 is vulnerable to Arbitrary code execution via admin/manage_uploads.php.9.8 Critical
- elitecms elite cmselitecms 1.01 is vulnerable to SQL Injection via /admin/edit_page.php?page=.9.8 Critical
- elitecms elite cmselitecms v1.01 is vulnerable to SQL Injection via admin/edit_post.php.9.8 Critical
- elitecms elite cmselitecms 1.01 is vulnerable to SQL Injection via /admin/add_post.php.9.8 Critical
- elitecms elite cmselitecms v1.01 is vulnerable to SQL Injection via /admin/add_sidebar.php.9.8 Critical
- nextcloud server, kiteworks security-advisories +1 moreImproper input-size validation on the user new session name in Nextcloud Server4.3 Medium
- fastify github-action-merge-dependabot, github action merge dependabot +1 moreNo verification of commits origin in github-action-merge-dependabot6.5 Medium
- elitecms elite cmselitecms 1.01 is vulnerable to SQL Injection via admin/edit_sidebar.php?page=2&sidebar=9.8 Critical
- elitecms elite cmselitecms 1.01 is vulnerable to SQL Injection via /admin/edit_sidebar.php.9.8 Critical
- ibm business automation workflow, business process manager +1 moreIBM Business Automation Workflow traditional 21.0.1 through 21.0.3, 20.0.0.1 through 20.0.0.2, 19...4.3 Medium
- online ordering system project ordering systemOnline Ordering System By janobe 2.3.2 is vulnerable to SQL Injection via /ordering/admin/orders...9.8 Critical
- online ordering system project ordering systemOnline Ordering System By janobe 2.3.2 has SQL Injection via /ordering/admin/products/index.php...9.8 Critical
- online ordering system project ordering systemOnline Ordering System By janobe 2.3.2 is vulneranle to SQL Injection via /ordering/index.php?q...9.8 Critical
- online ordering system project ordering systemOnline Ordering System v1.0 by oretnom23 has SQL injection via store/orderpage.php.7.2 High
- online ordering system project ordering systemOnline Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/viewreport.php.7.2 High
- online ordering system project ordering systemOnline Ordering System 1.0 by oretnom23 is vulnerable to SQL Injection via admin/vieworders.php.9.8 Critical
- online ordering system project ordering systemOnline Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin...7.2 High
- online ordering system project ordering systemOnline Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin...7.2 High
- online ordering system project ordering systemOnline Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/index.php...9.8 Critical
- online ordering system project ordering systemOnline Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/stockin/loaddata...9.8 Critical
- online ordering system project ordering systemOnline Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/category/index...9.8 Critical
- online ordering system project ordering systemOnline Ordering System 2.3.2 is vulnerable to SQL Injection via /ordering/admin/user/index.php...9.8 Critical
- mend curekitCureKit - Path Traversal in isFileOutsideDir7.5 High
- creatiwity witycmsAn arbitrary file upload in the image upload component of wityCMS v0.6.2 allows attackers to...8.8 High
- apache tikaMissing fix for CVE-2022-30126 in 1.28.25.5 Medium
- librenmsCommand injection in librenms9.8 Critical
- librenmsCross site scripting in librenms6.1 Medium
- flower project flowerFlower OAuth authentication bypass8.6 High
- Show moreLoading…