CVEs published May 11, 2022
174 CVEs were published on May 11, 2022: 2 critical, 42 high.
- Published
- 174
- Critical
- 2
- High
- 42
- Medium
- 41
- Low
- 6
- Unrated
- 83
- Now in CISA KEV
- 0
- Fix available
- 14
Most affected products
- Adobe Acrobat Reader
- 64
- GitLab
- 9
- AMD EPYC™ Processors · AMD Ryzen™ Series +1
- 7
- AMD EPYC™ Processors
- 5
- AMD Processors
- 2
- libtiff
- 2
- Palo Alto Networks Cortex XDR Agent
- 2
- PHOENIX CONTACT RAD-ISM-900-EN-BD/B · PHOENIX CONTACT RA… +1
- 2
- XINJE XD/E Series PLC Program Tool
- 2
- AMD Ryzen 5000 Series
- 1
Critical 2
- CVE-2022-29898Remote Code Execution in all versions of various RAD-ISM-900-EN-* devices by PHOENIX CONTACTPHOENIX CONTACT RAD-ISM-900-EN-BD/B · PHOENIX CONTACT RA… +1
- CVE-2022-29897Remote Code Execution in all versions of various RAD-ISM-900-EN-* devices by PHOENIX CONTACTPHOENIX CONTACT RAD-ISM-900-EN-BD/B · PHOENIX CONTACT RA… +1
High 42
- CVE-2022-28838Adobe Acrobat Pro DC Doc flattenPages Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-28243Adobe Acrobat Reader DC Doc Object Out-Of-Bounds Read Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-28242Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-28241Adobe Acrobat Reader DC Doc Object Out-Of-Bounds Read Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-28240Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-28239Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-28238Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-28237Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-28236Adobe Acrobat Reader DC Annotation Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-28235Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-28234Adobe Acrobat Reader DC Heap Overflow Could Lead to RCEAdobe Acrobat Reader
- CVE-2022-28233Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-28232Adobe Acrobat Reader DC Collab Object Use-After-Free Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-28231Adobe Acrobat Reader DC Doc Object Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-28230Adobe Acrobat Reader DC AcroForm calculateNow Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-27802Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-27801Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-27800Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-27799Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-27798Adobe Acrobat Reader DC zoomType Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-27797Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-27796Adobe Acrobat Reader DC AcroForm isBoxChecked Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-27795Adobe Acrobat Reader DC AcroForm isDefaultChecked Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-27794Adobe Acrobat Reader DC Font Parsing Uninitialized Variable Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-27793Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-27792Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-27791Adobe Acrobat Reader DC Font Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-27790Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-27789Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-27788Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-27787Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-27786Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-27785Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-24104Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-24103Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-24102Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-0024PAN-OS: Improper Neutralization Vulnerability Leads to Unintended Program Execution During Configuration CommitPalo Alto Networks PAN-OS
- CVE-2021-43066A external control of file name or path in Fortinet FortiClientWindows version 7.0.2 and below, version 6.4.6 and below, version 6.2.9 and bFortinet FortiClientWindows
- CVE-2021-34606XINJE XD/E Series PLC Program Tool DLL HijackingXINJE XD/E Series PLC Program Tool
- CVE-2021-34605Xinje XD/E Series PLC Program Tool Zip SlipXINJE XD/E Series PLC Program Tool
- CVE-2021-37851Local Privilege Escalation in ESET product for WindowsESET, spol. s r.o. ESET NOD32 Antivirus · ESET, spol. s… +8
- CVE-2022-26116Multiple improper neutralization of special elements used in SQL commands ('SQL Injection') vulnerability [CWE-89] in FortiNAC version 8.3.7Fortinet FortiNAC
Medium, low and unrated 130
- CVE-2022-30592liblsquic/lsquic_qenc_hdl.c in LiteSpeed QUIC (aka LSQUIC) before 3.1.0 mishandles MAX_TABLE_CAPACITY.
- CVE-2022-30557Foxit PDF Reader and PDF Editor before 11.2.2 have a Type Confusion issue that causes a crash because of Unsigned32 mishandling during JavaS
- CVE-2022-29855Mitel 6800 and 6900 Series SIP phone devices through 2022-04-27 have "undocumented functionality." A vulnerability in Mitel 6800 Series and
- CVE-2022-29596MicroStrategy Enterprise Manager 2022 allows authentication bypass by triggering a login failure and then entering the Uid=/../../../../../.
- CVE-2022-30449Hospital Management System in PHP with Source Code (HMS) 1.0 was discovered to contain a SQL injection vulnerability via the editid paramete
- CVE-2022-30450A Remote Code Execution (RCE) vulnerability exists in waimairen 9.1 via wx.php
- CVE-2022-30451An authenticated user could execute code via a SQLi vulnerability in waimairenCMS before version 9.1.
- CVE-2022-30448Hospital Management System in PHP with Source Code (HMS) 1.0 was discovered to contain a File upload vulnerability in treatmentrecord.php.
- CVE-2022-30063ftcms <=2.1 was discovered to be vulnerable to code execution attacks .
- CVE-2022-30062ftcms <=2.1 was discovered to be vulnerable to Arbitrary File Read via tp.php
- CVE-2022-30060ftcms <=2.1 was discovered to be vulnerable to Arbitrary File Write via admin/controllers/tp.php
- CVE-2022-28837Adobe Acrobat Pro DC Doc buttonSetIcon Use-After-Free Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-28269Adobe Acrobat Reader DC Annotation Use-After-Free Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-30061ftcms <=2.1 was discovered to be vulnerable to directory traversal attacks via the parameter tp.
- CVE-2022-28268Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-28267Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-28266Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-28265Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-29848In Progress Ipswitch WhatsUp Gold 17.0.0 through 21.1.1, and 22.0.0, it is possible for an authenticated user to invoke an API transaction t
- CVE-2022-29847In Progress Ipswitch WhatsUp Gold 21.0.0 through 21.1.1, and 22.0.0, it is possible for an unauthenticated attacker to invoke an API transac
- CVE-2022-29846In Progress Ipswitch WhatsUp Gold 16.1 through 21.1.1, and 22.0.0, it is possible for an unauthenticated attacker to obtain the WhatsUp Gold
- CVE-2022-29845In Progress Ipswitch WhatsUp Gold 21.1.0 through 21.1.1, and 22.0.0, it is possible for an authenticated user to invoke an API transaction t
- CVE-2022-28264Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-30453ShopWind <= 3.4.2 has a RCE vulnerability in Database.php
- CVE-2022-28263Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-28262Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-30452ShopWind <= v3.4.2 has a Sql injection vulnerability in Database.php
- CVE-2022-28261Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-28260Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-30057Shopwind <=v3.4.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability.
- CVE-2022-28259Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-28258Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-28257Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-24584Incorrect access control in Yubico OTP functionality of the YubiKey hardware tokens along with the Yubico OTP validation server.
- CVE-2022-30059Shopwind <=v3.4.2 was discovered to contain a Arbitrary File Delete vulnerability via the neirong parameter at \backend\controllers\DbContro
- CVE-2022-28256Adobe Acrobat Reader DC Annotation Use-After-Free Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-30058Shopwind <=v3.4.2 was discovered to contain a Arbitrary File Download vulnerability via the neirong parameter at \backend\controllers\DbCont
- CVE-2022-28255Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-28254Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-28253Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-28252Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-28251Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-28250Adobe Acrobat Reader DC Annotation Use-After-Free Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-28249Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-28248Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-28247Adobe Acrobat Uninstaller Hard Link Leads To Remote Code ExecutionAdobe Acrobat Reader
- CVE-2022-28246Adobe Acrobat Reader DC Doc Object Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-28245Adobe Acrobat Reader DC Doc Object Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2022-28244Adobe Acrobat Reader DC CSP Bypass Leads To Privilege EscalationAdobe Acrobat Reader
- CVE-2022-30048Mingsoft MCMS 5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/list URI via orderBy parameter.
- CVE-2022-30047Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/listExcludeApp URI via orderBy parameter.
- CVE-2021-42648Cross-site scripting (XSS) vulnerability exists in Coder Code-Server before 3.12.0, allows attackers to execute arbitrary code via crafted Ucode-server
- CVE-2021-28290A cross-site scripting (XSS) vulnerability in Skoruba IdentityServer4.Admin before 2.0.0 via unencoded value passed to the data-secret-value
- CVE-2021-36613Mikrotik RouterOs before stable 6.48.2 suffers from a memory corruption vulnerability in the ptp process.
- CVE-2021-34085Read access violation in the III_dequantize_sample function in mpglibDBL/layer3.c in mp3gain through 1.5.2-r2 allows remote attackers to cau
- CVE-2021-31330A Cross-Site Scripting (XSS) vulnerability exists within Review Board versions 3.0.20 and 4.0 RC1 and earlier.
- CVE-2021-36614Mikrotik RouterOs before stable 6.48.2 suffers from a memory corruption vulnerability in the tr069-client process.
- CVE-2021-33317The TRENDnet TI-PG1284i switch(hw v2.0R) prior to version 2.0.2.S0 suffers from a null pointer dereference vulnerability.
- CVE-2021-33315The TRENDnet TI-PG1284i switch(hw v2.0R) prior to version 2.0.2.S0 suffers from an integer underflow vulnerability.
- CVE-2021-33316The TRENDnet TI-PG1284i switch(hw v2.0R) prior to version 2.0.2.S0 suffers from an integer underflow vulnerability.
- CVE-2022-30040Tenda AX1803 v1.0.0.1_2890 is vulnerable to Buffer Overflow.
- CVE-2022-24101Adobe Acrobat Reader DC Annotation Use-After-Free Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2021-30361The Check Point Gaia Portal's GUI Clients allowed authenticated administrators with permission for the GUI Clients settings to inject a commCheck Point Gaia Portal
- CVE-2021-46744An attacker with access to a malicious hypervisor may be able to infer data values used in a SEV guest on AMD CPUs by monitoring ciphertext AMD Processors
- CVE-2021-26400AMD processors may speculatively re-order load instructions which can result in stale data being observed when multiple processors are operaAMD Processors
- CVE-2022-0027Cortex XSOAR: Incorrect Authorization Vulnerability When Generating ReportsPalo Alto Networks Cortex XSOAR
- CVE-2022-0026Cortex XDR Agent: Unintended Program Execution Leads to Local Privilege Escalation (PE) VulnerabilityPalo Alto Networks Cortex XDR Agent
- CVE-2022-0025Cortex XDR Agent: An Uncontrolled Search Path Element Leads to Local Privilege Escalation (PE) VulnerabilityPalo Alto Networks Cortex XDR Agent
- CVE-2021-26388Improper validation of the BIOS directory may allow for searches to read beyond the directory table copy in RAM, exposing out of bounds memoAMD EPYC™ Processors · AMD Ryzen™ Series +1
- CVE-2021-26376Insufficient checks in System Management Unit (SMU) FeatureConfig may result in reenabling features potentially resulting in denial of resouAMD EPYC™ Processors · AMD Ryzen™ Series +1
- CVE-2021-26373Insufficient bound checks in the System Management Unit (SMU) may result in a system voltage malfunction that could result in denial of resoAMD EPYC™ Processors · AMD Ryzen™ Series +1
- CVE-2021-26348Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory iAMD EPYC™ Processors
- CVE-2021-26364Insufficient bounds checking in an SMU mailbox register could allow an attacker to potentially read outside of the SRAM address range which AMD EPYC™ Processors
- CVE-2021-26349Failure to assign a new report ID to an imported guest may potentially result in an SEV-SNP guest VM being tricked into trusting a dishonestAMD EPYC™ Processors
- CVE-2021-26378Insufficient bound checks in the System Management Unit (SMU) may result in access to an invalid address space that could result in denial oAMD EPYC™ Processors · AMD Ryzen™ Series +1
- CVE-2021-26347Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in tAMD Ryzen 5000 Series
- CVE-2021-26342In SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer (TLB) following a particular sequence of operations that includAMD EPYC™ Processors
- CVE-2021-26375Insufficient General Purpose IO (GPIO) bounds check in System Management Unit (SMU) may result in access/updates from/to invalid address spaAMD EPYC™ Processors · AMD Ryzen™ Series +1
- CVE-2021-26372Insufficient bound checks related to PCIE in the System Management Unit (SMU) may result in access to an invalid address space that could reAMD EPYC™ Processors · AMD Ryzen™ Series +1
- CVE-2021-26339A bug in AMD CPU’s core logic may allow for an attacker, using specific code from an unprivileged VM, to trigger a CPU core hang resulting iAMD EPYC™ Processors · AMD Ryzen™ Series +1
- CVE-2021-26350A TOCTOU race condition in SMU may allow for the caller to obtain and manipulate the address of a message port register which may result in AMD EPYC™ Processors
- CVE-2022-22320IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting.IBM QRadar SIEM
- CVE-2021-39059IBM Jazz Foundation (IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2) is vulnerable to cross-site scripting.IBM Jazz Team Server
- CVE-2021-38969IBM Spectrum Virtualize 8.2, 8.3, and 8.4 could allow an attacker to allow unauthorized access due to the reuse of support generated credentIBM Spectrum Virtualize
- CVE-2021-3611A stack overflow vulnerability was found in the Intel HD Audio device (intel-hda) of QEMU.QEMU
- CVE-2022-22975An issue was discovered in the Pinniped Supervisor with either LADPIdentityProvider or ActiveDirectoryIdentityProvider resources.Pinniped
- CVE-2022-23137ZTE's ZXCDN product has a reflective XSS vulnerability.ZXCDN
- CVE-2022-29616SAP Host Agent, SAP NetWeaver and ABAP Platform allow an attacker to leverage logical errors in memory management to cause a memory corruptiSAP SE SAP NetWeaver and ABAP Platform · SAP SE SAP Host Ag…
- CVE-2022-29613Due to insufficient input validation, SAP Employee Self Service allows an authenticated attacker with user privileges to alter employee numbSAP SE SAP Employee Self Service
- CVE-2022-29611SAP NetWeaver Application Server for ABAP and ABAP Platform do not perform necessary authorization checks for an authenticated user, resultiSAP SE SAP NetWeaver Application Server for ABAP and ABAP P…
- CVE-2022-29610SAP NetWeaver Application Server ABAP allows an authenticated attacker to upload malicious files and delete (theme) data, which could resultSAP SE SAP NetWeaver Application Server ABAP
- CVE-2022-28774Under certain conditions, the SAP Host Agent logfile shows information which would otherwise be restricted.SAP SE SAP Host Agent
- CVE-2022-28214During an update of SAP BusinessObjects Enterprise, Central Management Server (CMS) - versions 420, 430, authentication credentials are beinSAP SE SAP BusinessObjects Enterprise
- CVE-2022-27656The Web administration UI of SAP Web Dispatcher and the Internet Communication Manager (ICM) does not sufficiently encode user-controlled inSAP SE SAP NetWeaver AS for ABAP and Java · SAP SE SAP Web…
- CVE-2022-1124An improper authorization issue has been discovered in GitLab CE/EE affecting all versions prior to 14.8.6, all versions from 14.9.0 prior tGitLab
- CVE-2022-1510An issue has been discovered in GitLab affecting all versions starting from 13.9 before 14.8.6, all versions starting from 14.9 before 14.9.GitLab
- CVE-2022-1460An issue has been discovered in GitLab affecting all versions starting from 9.2 before 14.8.6, all versions starting from 14.9 before 14.9.4GitLab
- CVE-2022-1406Improper input validation in GitLab CE/EE affecting all versions from 8.12 prior to 14.8.6, all versions from 14.9.0 prior to 14.9.4, and 14GitLab
- CVE-2022-1428An issue has been discovered in GitLab affecting all versions before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions staGitLab
- CVE-2022-1426An issue has been discovered in GitLab affecting all versions starting from 12.6 before 14.8.6, all versions starting from 14.9 before 14.9.GitLab
- CVE-2021-43081An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiOS version 7.0.3 and below, 6.4.8 and below, 6Fortinet FortiProxy
- CVE-2022-1352Due to an insecure direct object reference vulnerability in Gitlab EE/CE affecting all versions from 11.0 prior to 14.8.6, 14.9 prior to 14.GitLab
- CVE-2022-1433An issue has been discovered in GitLab affecting all versions starting from 14.4 before 14.8.6, all versions starting from 14.9 before 14.9.GitLab
- CVE-2022-1545It was possible to disclose details of confidential notes created via the API in Gitlab CE/EE affecting all versions from 13.2 prior to 14.8GitLab
- CVE-2021-44167An incorrect permission assignment for critical resource vulnerability [CWE-732] in FortiClient for Linux version 6.0.8 and below, 6.2.9 andFortinet FortiClientLinux
- CVE-2021-42651A Server Side Template Injection (SSTI) vulnerability in Pentest-Collaboration-Framework v1.0.8 allows an authenticated remote attacker to e
- CVE-2022-28078Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the Admin panel via t
- CVE-2022-28077Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the Admin panel via t
- CVE-2022-29932The HTTP Server in PRIMEUR SPAZIO 2.5.1.954 (File Transfer) allows an unauthenticated attacker to obtain sensitive data (related to the cont
- CVE-2022-29978There is a floating point exception error in sixel_encoder_do_resize, encoder.c:633 in libsixel img2sixel 1.8.6.
- CVE-2022-29977There is an assertion failure error in stbi__jpeg_huff_decode, stb_image.h:1894 in libsixel img2sixel 1.8.6.
- CVE-2022-29009Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Cyber Cafe Management System Project v
- CVE-2022-29008An insecure direct object reference (IDOR) vulnerability in the viewid parameter of Bus Pass Management System v1.0 allows attackers to acce
- CVE-2022-29007Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Dairy Farm Shop Management System v1.0
- CVE-2022-29006Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Directory Management System v1.0 allow
- CVE-2022-29728Survey Sparrow Enterprise Survey Software 2022 has a Reflected cross-site scripting (XSS) vulnerability in the test parameter.
- CVE-2022-29656Wedding Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /Wedding-Management/package_d
- CVE-2022-29655An arbitrary file upload vulnerability in the Upload Photos module of Wedding Management System v1.0 allows attackers to execute arbitrary c
- CVE-2022-29318An arbitrary file upload vulnerability in the New Entry module of Car Rental Management System v1.0 allows attackers to execute arbitrary co
- CVE-2022-29316Complete Online Job Search System v1.0 was discovered to contain a SQL injection vulnerability via /eris/index.php?q=result&searchfor=advanc
- CVE-2022-29317Simple Bus Ticket Booking System v1.0 was discovered to contain multiple SQL injection vulnerbilities via the username and password paramete
- CVE-2022-29727Survey Sparrow Enterprise Survey Software 2022 has a Stored cross-site scripting (XSS) vulnerability in the Signup parameter.
- CVE-2022-29976An Authenticated Reflected Cross-site scripting at BCC Parameter was discovered in MDaemon before 22.0.0 .
- CVE-2022-29975An Authenticated Reflected Cross-site scripting at CC Parameter was discovered in MDaemon before 22.0.0 .
- CVE-2020-19228An issue was found in bludit v3.13.0, unsafe implementation of the backup plugin allows attackers to upload arbitrary files.
- CVE-2021-3254Asus DSL-N14U-B1 1.1.2.3_805 allows remote attackers to cause a Denial of Service (DoS) via a TCP SYN scan using nmap.
- CVE-2021-42646XML External Entity (XXE) vulnerability in the file based service provider creation feature of the Management Console in WSO2 API Manager 2.
- CVE-2022-1622LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via alibtiff
- CVE-2022-1623LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:624, allowing attackers to cause a denial-of-service via alibtiff
- CVE-2022-23743Check Point ZoneAlarm before version 15.8.200.19118 allows a local actor to escalate privileges during the upgrade process.ZoneAlarm.