# CVEs published 2022-05-08

5 CVEs were published on May 8, 2022: 0 critical, 0 high. Days are UTC.

- [CVE-2022-28470](https://cve.now/CVE-2022-28470.md): marcador package in PyPI 0.1 through 0.13 included a code-execution backdoor. (no CVSS, marcador)
- [CVE-2018-25033](https://cve.now/CVE-2018-25033.md): ADMesh through 0.98.4 has a heap-based buffer over-read in stl\_update\_connects\_remove\_1 (called from stl\_remove\_degenerate) in connect.c in (no CVSS, admesh)
- [CVE-2022-1619](https://cve.now/CVE-2022-1619.md): Heap-based Buffer Overflow in function cmdline\_erase\_chars in vim/vim (CVSS 6.1, vim/vim)
- [CVE-2022-1620](https://cve.now/CVE-2022-1620.md): NULL Pointer Dereference in function vim\_regexec\_string at regexp.c:2729 in vim/vim (CVSS 6.6, vim/vim)
- [CVE-2022-28463](https://cve.now/CVE-2022-28463.md): ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-05-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.