CVEs published May 12, 2022
159 CVEs were published on May 12, 2022: 18 critical, 33 high. 2 are now in CISA KEV.
- Published
- 159
- Critical
- 18
- High
- 33
- Medium
- 40
- Low
- 2
- Unrated
- 66
- Now in CISA KEV
- 2
- Fix available
- 16
Most affected products
- InHand Networks InRouter302
- 19
- Intel(R) Processors
- 13
- AMD Ryzen™ Series · AMD Athlon™ Series
- 9
- HCL Software Sametime
- 5
- Sysaid
- 5
- EIPStackGroup OpENer EtherNet/IP
- 4
- Intel(R) In-Band Manageability software
- 3
- Intel(R) NUCs
- 3
- JetBrains TeamCity
- 3
- causefx/organizr
- 2
Critical 18
- CVE-2022-26782Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302…InHand Networks InRouter302
- CVE-2022-26781Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302…InHand Networks InRouter302
- CVE-2022-26780Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302…InHand Networks InRouter302
- CVE-2022-26518An OS command injection vulnerability exists in the console infactory_net functionality of InHand Networks InRouter302 V3.5.37.InHand Networks InRouter302
- CVE-2022-26510A firmware update vulnerability exists in the iburn firmware checks functionality of InHand Networks InRouter302 V3.5.37.InHand Networks InRouter302
- CVE-2022-26420An OS command injection vulnerability exists in the console infactory_port functionality of InHand Networks InRouter302 V3.5.37.InHand Networks InRouter302
- CVE-2022-26085An OS command injection vulnerability exists in the httpd wlscan_ASP functionality of InHand Networks InRouter302 V3.5.4.InHand Networks InRouter302
- CVE-2022-26075An OS command injection vulnerability exists in the console infactory_wlan functionality of InHand Networks InRouter302 V3.5.37.InHand Networks InRouter302
- CVE-2022-26042An OS command injection vulnerability exists in the daretools binary functionality of InHand Networks InRouter302 V3.5.4.InHand Networks InRouter302
- CVE-2022-26007An OS command injection vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4.InHand Networks InRouter302
- CVE-2022-26002A stack-based buffer overflow vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4.InHand Networks InRouter302
- CVE-2022-25995A command execution vulnerability exists in the console inhand functionality of InHand Networks InRouter302 V3.5.4.InHand Networks InRouter302
- CVE-2022-21809A file write vulnerability exists in the httpd upload.cgi functionality of InHand Networks InRouter302 V3.5.4.InHand Networks InRouter302
- CVE-2022-1698Allowing long password leads to denial of service in causefx/organizrcausefx/organizr
- CVE-2022-1699Uncontrolled Resource Consumption in causefx/organizrcausefx/organizr
- CVE-2022-29303SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.
- CVE-2022-30525A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Patch 1, USG FLEX 200 fZyxel USG FLEX 100(W) firmware · Zyxel USG FLEX 200 firm… +6
- CVE-2022-1682Reflected Xss using url based payload in neorazorx/facturascriptsneorazorx/facturascripts · facturascripts/facturascripts
High 33
- CVE-2022-29218Unauthorized takeover for new versions of some platform-specific gemsrubygems.org
- CVE-2021-27777HCL Unica Platform is vulnerable to XML External Entity (XXE) injectionHCL Software HCL Unica
- CVE-2021-27772HCL Sametime is vulnerable to an information disclosureHCL Software Sametime
- CVE-2021-27771HCL Sametime is susceptible a file transfer service vulnerabilityHCL Software Sametime
- CVE-2022-22796Sysaid – Sysaid System TakeoverSysaid
- CVE-2022-23742Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low…Check Point Endpoint Security Client for Windows
- CVE-2021-27500EIPStackGroup OpENer Ethernet/IP Reachable AssertionEIPStackGroup OpENer EtherNet/IP
- CVE-2021-27498EIPStackGroup OpENer Ethernet/IP Reachable AssertionEIPStackGroup OpENer EtherNet/IP
- CVE-2021-27482EIPStackGroup OpENer Ethernet/IP Out-of-bounds ReadEIPStackGroup OpENer EtherNet/IP
- CVE-2021-27478EIPStackGroup OpENer Ethernet/IP Incorrect Conversion between Numeric TypesEIPStackGroup OpENer EtherNet/IP
- CVE-2022-28819Adobe Character Animator SVG File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Character Animator
- CVE-2022-25172An information disclosure vulnerability exists in the web interface session cookie functionality of InHand Networks InRouter302 V3.5.4.InHand Networks InRouter302
- CVE-2022-24910A buffer overflow vulnerability exists in the httpd parse_ping_result API functionality of InHand Networks InRouter302 V3.5.4.InHand Networks InRouter302
- CVE-2022-21182A privilege escalation vulnerability exists in the router configuration import functionality of InHand Networks InRouter302 V3.5.4.InHand Networks InRouter302
- CVE-2021-40399An exploitable use-after-free vulnerability exists in WPS Spreadsheets ( ET ) as part of WPS Office, version 11.2.0.10351.WPS Office
- CVE-2021-0188Return of pointer value outside of expected range in the BIOS firmware for some Intel(R) Processors may allow a privileged user to…Intel(R) Processors
- CVE-2021-0159Improper input validation in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially…Intel(R) Processors
- CVE-2021-0189Use of out-of-range pointer offset in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable…Intel(R) Processors
- CVE-2021-33122Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable…Intel(R) Processors
- CVE-2021-0190Uncaught exception in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of…Intel(R) Processors
- CVE-2021-33123Improper access control in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially…Intel(R) Processors
- CVE-2021-0153Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of…Intel(R) Processors
- CVE-2021-0154Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation…Intel(R) Processors
- CVE-2021-0126Improper input validation for the Intel(R) Manageability Commander before version 2.2 may allow an authenticated user to potentially…Intel(R) Manageability Commander
- CVE-2021-26258Improper access control for the Intel(R) Killer(TM) Control Center software before version 2.4.3337.0 may allow an authorized user to…Intel(R) Killer(TM) Control Center software
Show all 33 entriesShow fewer entries
- CVE-2022-22139Uncontrolled search path in the Intel(R) XTU software before version 7.3.0.33 may allow an authenticated user to potentially enable…Intel(R) XTU software
- CVE-2022-21128Insufficient control flow management in the Intel(R) Advisor software before version 7.6.0.37 may allow an authenticated user to…Intel(R) Advisor software
- CVE-2021-0194Improper access control in the Intel(R) In-Band Manageability software before version 2.13.0 may allow a privileged user to potentially…Intel(R) In-Band Manageability software
- CVE-2021-0193Improper authentication in the Intel(R) In-Band Manageability software before version 2.13.0 may allow a privileged user to potentially…Intel(R) In-Band Manageability software
- CVE-2022-29930SHA1 implementation in JetBrains Ktor Native 2.0.0 was returning the same value.JetBrains Ktor
- CVE-2022-1044Sensitive Data Exposure Due To Insecure Storage Of Profile Image in polonel/trudeskpolonel/trudesk
- CVE-2022-1681Authentication Bypass Using an Alternate Path or Channel in requarks/wikirequarks/wiki
- CVE-2022-1650Improper Removal of Sensitive Information Before Storage or Transfer in eventsource/eventsourceeventsource/eventsource · eventsource
Medium, low and unrated 108
- CVE-2022-27134EOSIO batdappboomx v327c04cf has an Access-control vulnerability in the `transfer` function of the smart contract which allows remote…
- CVE-2021-27773HCL Sametime is vulnerable to clickjackingHCL Software Sametime
- CVE-2021-27770HCL Sametime is vulnerable to arbitrary HTTP requestsHCL Software Sametime
- CVE-2021-27769HCL Sametime is vulnerable to an information disclosureHCL Software Sametime
- CVE-2021-27768An SSL certificate host verification vulnerability affects HCL Verse for AndroidHCL Software Verse for Android
- CVE-2020-22985Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute…
- CVE-2020-22986Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute…
- CVE-2020-22987Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute…
- CVE-2020-22984Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute…
- CVE-2022-23166Sysaid – Sysaid Local File Inclusion (LFI)Sysaid
- CVE-2022-23165Sysaid – Sysaid 14.2.0 Reflected Cross-Site Scripting (XSS)Sysaid
- CVE-2022-22798Sysaid – Pro Plus Edition, SysAid Help Desk Broken Access ControlSysaid
- CVE-2022-22797Sysaid – sysaid Open RedirectSysaid
- CVE-2022-22971In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vuSpring Framework · org.springframework:spring-messaging
- CVE-2022-22970In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable tSpring Framework · org.springframework:spring-beans
- CVE-2022-23139ZTE's ZXMP M721 product has a permission and access control vulnerability.ZXMP M721
- CVE-2022-28818ColdFusion Reflected Cross-Site Scripting could lead to Arbitrary Code ExecutionAdobe ColdFusion
- CVE-2021-22531A bug exist in the input parameter of Access Manager that allows supply of invalid character to trigger cross-site scripting vulnerability.NetIQ Access Manager
- CVE-2022-29368Moddable commit before 135aa9a4a6a9b49b60aa730ebc3bcc6247d75c45 was discovered to contain an out-of-bounds read via the function…
- CVE-2022-29369Nginx NJS v0.7.2 was discovered to contain a segmentation violation via njs_lvlhsh_bucket_find at njs_lvlhsh.c.
- CVE-2021-26363A malicious or compromised UApp or ABL could potentially change the value that the ASP uses for its reserved DRAM, to one outside of the…AMD Ryzen™ Series · AMD Athlon™ Series
- CVE-2021-26386A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call to the Stage 2 Bootloader potentially…AMD Ryzen™ Series · AMD Athlon™ Series
- CVE-2021-26317Failure to verify the protocol in SMM may allow an attacker to control the protocol and modify SPI flash resulting in a potential…AMD Ryzen™ Series · AMD Athlon™ Series
- CVE-2021-26368Insufficient check of the process type in Trusted OS (TOS) may allow an attacker with privileges to enable a lesser privileged process to…AMD Ryzen™ Series · AMD Athlon™ Series
- CVE-2021-26361A malicious or compromised User Application (UApp) or AGESA Boot Loader (ABL) could be used by an attacker to exfiltrate arbitrary memory…AMD Ryzen™ Series · AMD Athlon™ Series
Show all 108 entriesShow fewer entries
- CVE-2021-26362A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call which results in mapping sensitive…AMD Ryzen™ Series · AMD Athlon™ Series
- CVE-2021-26351Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA (Direct Memory Access) read/write from/to invalid…AMD Ryzen™ Series · AMD Athlon™ Series
- CVE-2022-29363Phpok v6.1 was discovered to contain a deserialization vulnerability via the update_f() function in login_control.php.
- CVE-2021-26366An attacker, who gained elevated privileges via some other vulnerability, may be able to read data from Boot ROM resulting in a loss of…AMD Ryzen™ Series · AMD Athlon™ Series
- CVE-2021-26369A malicious or compromised UApp or ABL may be used by an attacker to send a malformed system call to the bootloader, resulting in…AMD Ryzen™ Series · AMD Athlon™ Series
- CVE-2022-27172A hard-coded password vulnerability exists in the console infactory functionality of InHand Networks InRouter302 V3.5.37.InHand Networks InRouter302
- CVE-2022-26020An information disclosure vulnerability exists in the router configuration export functionality of InHand Networks InRouter302 V3.5.4.InHand Networks InRouter302
- CVE-2022-21238A cross-site scripting (xss) vulnerability exists in the info.jsp functionality of InHand Networks InRouter302 V3.5.4.InHand Networks InRouter302
- CVE-2022-21147An out of bounds read vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.7.7.ESTsoft Alyac
- CVE-2021-0155Unchecked return value in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information…Intel(R) Processors
- CVE-2021-33103Unintended intermediary in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially…Intel(R) Processors
- CVE-2021-33124Out-of-bounds write in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable…Intel(R) Processors
- CVE-2022-21151Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authenticated user to…Intel(R) Processors
- CVE-2021-33149Observable behavioral discrepancy in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure…Intel(R) Processors
- CVE-2022-0005Sensitive information accessible by physical probing of JTAG interface for some Intel(R) Processors with SGX may allow an unprivileged…Intel(R) Processors with SGX
- CVE-2021-33117Improper access control for some 3rd Generation Intel(R) Xeon(R) Scalable Processors before BIOS version MR7, may allow a local attacker…Intel(R) Xeon(R) Scalable Processors
- CVE-2022-0004Hardware debug modes and processor INIT setting that allow override of locks for some Intel(R) Processors in Intel(R) Boot Guard and…Intel(R) Processors in Intel(R) Boot Guard and Intel(R) TXT
- CVE-2021-33082Sensitive information in resource not removed before reuse in firmware for some Intel(R) SSD and Intel(R) Optane(TM) SSD Products may…Intel(R) SSD and Intel(R) Optane(TM) SSD Products
- CVE-2021-33083Improper authentication in firmware for some Intel(R) SSD, Intel(R) Optane(TM) SSD, Intel(R) Optane(TM) SSD DC and Intel(R) SSD DC…Intel(R) SSD, Intel(R) Optane(TM) SSD, Intel(R) Optane(TM)…
- CVE-2021-33069Improper resource shutdown or release in firmware for some Intel(R) SSD, Intel(R) SSD DC, Intel(R) Optane(TM) SSD and Intel(R) Optane(TM)…Intel(R) SSD, Intel(R) SSD DC, Intel(R) Optane(TM) SSD and…
- CVE-2021-33075Race condition in firmware for some Intel(R) Optane(TM) SSD, Intel(R) Optane(TM) SSD DC and Intel(R) SSD DC Products may allow a…Intel(R) Optane(TM) SSD, Intel(R) Optane(TM) SSD DC and Int…
- CVE-2021-33074Protection mechanism failure in firmware for some Intel(R) SSD, Intel(R) SSD DC and Intel(R) Optane(TM) SSD Products may allow an…Intel(R) SSD, Intel(R) SSD DC and Intel(R) Optane(TM) SSD P…
- CVE-2021-33080Exposure of sensitive system information due to uncleared debug information in firmware for some Intel(R) SSD DC, Intel(R) Optane(TM) SSD…Intel(R) SSD DC, Intel(R) Optane(TM) SSD and Intel(R) Optan…
- CVE-2021-33077Insufficient control flow management in firmware for some Intel(R) SSD, Intel(R) Optane(TM) SSD and Intel(R) SSD DC Products may allow an…Intel(R) SSD, Intel(R) Optane(TM) SSD and Intel(R) SSD DC P…
- CVE-2021-33078Race condition within a thread in firmware for some Intel(R) Optane(TM) SSD and Intel(R) SSD DC Products may allow a privileged user to…Intel(R) Optane(TM) SSD and Intel(R) SSD DC Products
- CVE-2022-21237Improper buffer access in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via…Intel(R) NUCs
- CVE-2022-24297Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege…Intel(R) NUCs
- CVE-2022-24382Improper input validation in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via…Intel(R) NUCs
- CVE-2021-33108Improper input validation in the Intel(R) In-Band Manageability software before version 2.13.0 may allow a privileged user to potentially…Intel(R) In-Band Manageability software
- CVE-2021-33135Uncontrolled resource consumption in the Linux kernel drivers for Intel(R) SGX may allow an authenticated user to potentially enable…Intel(R) SGX
- CVE-2022-21136Improper input validation for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable denial of service via…Intel(R) Xeon(R) Processors
- CVE-2022-21131Improper access control for some Intel(R) Xeon(R) Processors may allow an authenticated user to potentially enable information disclosure…Intel(R) Xeon(R) Processors
- CVE-2021-33130Insecure default variable initialization of Intel(R) RealSense(TM) ID Solution F450 before version 2.6.0.74 may allow an unauthenticated…Intel(R) RealSense(TM) ID Solution F450
- CVE-2022-28920Tieba-Cloud-Sign v4.9 was discovered to contain a cross-site scripting (XSS) vulnerability via the function strip_tags.
- CVE-2022-28919HTMLCreator release_stable_2020-07-29 was discovered to contain a cross-site scripting (XSS) vulnerability via the function…
- CVE-2022-29738Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/admin/?page=transaction/send&id=, id.
- CVE-2022-29739Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/admin/?page=user/manage_user&id=.
- CVE-2022-29306IonizeCMS v1.0.8.1 was discovered to contain a SQL injection vulnerability via the id_page parameter in…
- CVE-2022-29307IonizeCMS v1.0.8.1 was discovered to contain a command injection vulnerability via the function copy_lang_content in…
- CVE-2022-29741Money Transfer Management System 1.0 is vulnerable to SQL Injection via \mtms\classes\Master.php?f=delete_fee.
- CVE-2022-22413IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to SQL injection.IBM Robotic Process Automation
- CVE-2022-29745Money Transfer Management System 1.0 is vulnerable to SQL Injection via \mtms\classes\Master.php?f=delete_transaction.
- CVE-2022-29746Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/classes/Users.php?f=delete.
- CVE-2022-29998Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/clientStatus.php?client_id=.
- CVE-2022-29999Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editClient.php?client_id=.
- CVE-2022-29302SolarView Compact ver.6.00 was discovered to contain a local file disclosure via /html/Solar_Ftp.php.
- CVE-2022-29298SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal.
- CVE-2022-30000Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editPayment.php?recipt_no=.
- CVE-2022-30001Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editAgent.php?agent_id=.
- CVE-2022-30002Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editNominee.php?nominee_id=.
- CVE-2022-29985Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_category.
- CVE-2022-29986Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_facility.
- CVE-2022-29987Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=user/manage_user&id=.
- CVE-2022-29988Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete.
- CVE-2022-29989Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_booking.
- CVE-2022-29990Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/categories/view_category.php?id=.
- CVE-2022-29992Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/categories/manage_category.php?id=.
- CVE-2022-30279An issue was discovered in Stormshield Network Security (SNS) 4.3.x before 4.3.8.
- CVE-2022-29993Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/bookings/view_booking.php?id=.
- CVE-2022-29994Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=facilities/manage_facility&id=.
- CVE-2022-29995Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=clients/manage_client&id=.
- CVE-2022-29747Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/manage_invoice&id= // Leak place ---> id.
- CVE-2022-29748Simple Client Management System 1.0 is vulnerable to SQL Injection via \cms\admin?page=client/manage_client&id=.
- CVE-2022-29749Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_invoice.
- CVE-2022-29750Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_service.
- CVE-2022-29751Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_client.
- CVE-2022-29981Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Users.php?f=delete.
- CVE-2022-29538RESI Gemini-Net Web 4.2 is affected by Improper Access Control in authorization logic.
- CVE-2022-29979Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_designation.
- CVE-2022-29539resi-calltrace in RESI Gemini-Net 4.2 is affected by OS Command Injection.
- CVE-2022-29980Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=user/manage_user&id=.
- CVE-2022-29982Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/maintenance/manage_service.php?id=.
- CVE-2022-29983Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/view_invoice&id=.
- CVE-2022-29984Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=client/view_client&id=.
- CVE-2021-42863A buffer overflow in ecma_builtin_typedarray_prototype_filter() in JerryScript version fe3a5c0 allows an attacker to construct a fake…
- CVE-2022-28873Multiple Address Bar Spoofing Vulnerability in F-Secure SAFE Browser for AndroidF-Secure Mobile Security
- CVE-2022-28872Address Bar Spoofing Vulnerability in F-Secure SAFE Browser for AndroidF-Secure Mobile Security
- CVE-2022-29929In JetBrains TeamCity before 2022.04 potential XSS via Referrer header was possibleJetBrains TeamCity
- CVE-2022-29928In JetBrains TeamCity before 2022.04 leak of secrets in TeamCity agent logs was possibleJetBrains TeamCity
- CVE-2022-29927In JetBrains TeamCity before 2022.04 reflected XSS on the Build Chain Status page was possibleJetBrains TeamCity
- CVE-2022-1674NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in vim/vimvim/vim
- CVE-2022-29885EncryptInterceptor does not provide complete protection on insecure networksApache Software Foundation Apache Tomcat · tomcat +1
- CVE-2022-30594The Linux kernel before 5.17.2 mishandles seccomp permissions.