CVEs published May 7, 2022
4 CVEs were published on May 7, 2022: 0 critical, 1 high.
- Published
- 4
- Critical
- 0
- High
- 1
- Medium
- 1
- Low
- 0
- Unrated
- 2
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- charmbracelet charm · github.com/charmbracelet/charm
- 1
- vim/vim
- 1
High 1
Medium, low and unrated 3
- CVE-2022-30334Brave before 1.34, when a Private Window with Tor Connectivity is used, leaks .onion URLs in Referer and Origin headers.
- CVE-2022-29180Charm vulnerable to server-side request forgery (SSRF)charmbracelet charm · github.com/charmbracelet/charm
- CVE-2022-30330In the KeepKey firmware before 7.3.2,Flaws in the supervisor interface can be exploited to bypass important security restrictions on firmwar