CVEs published May 12, 2022
159 CVEs were published on May 12, 2022: 18 critical, 33 high. 2 are now in CISA KEV.
- Published
- 159
- Critical
- 18
- High
- 33
- Medium
- 40
- Low
- 2
- Unrated
- 66
- Now in CISA KEV
- 2
- Fix available
- 16
Most affected products
- InHand Networks InRouter302
- 19
- Intel(R) Processors
- 13
- AMD Ryzen™ Series · AMD Athlon™ Series
- 9
- HCL Software Sametime
- 5
- Sysaid
- 5
- EIPStackGroup OpENer EtherNet/IP
- 4
- Intel(R) In-Band Manageability software
- 3
- Intel(R) NUCs
- 3
- JetBrains TeamCity
- 3
- causefx/organizr
- 2
Critical 18
- CVE-2022-26782Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.InHand Networks InRouter302
- CVE-2022-26781Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.InHand Networks InRouter302
- CVE-2022-26780Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networks InRouter302 V3.5.InHand Networks InRouter302
- CVE-2022-26518An OS command injection vulnerability exists in the console infactory_net functionality of InHand Networks InRouter302 V3.5.37.InHand Networks InRouter302
- CVE-2022-26510A firmware update vulnerability exists in the iburn firmware checks functionality of InHand Networks InRouter302 V3.5.37.InHand Networks InRouter302
- CVE-2022-26420An OS command injection vulnerability exists in the console infactory_port functionality of InHand Networks InRouter302 V3.5.37.InHand Networks InRouter302
- CVE-2022-26085An OS command injection vulnerability exists in the httpd wlscan_ASP functionality of InHand Networks InRouter302 V3.5.4.InHand Networks InRouter302
- CVE-2022-26075An OS command injection vulnerability exists in the console infactory_wlan functionality of InHand Networks InRouter302 V3.5.37.InHand Networks InRouter302
- CVE-2022-26042An OS command injection vulnerability exists in the daretools binary functionality of InHand Networks InRouter302 V3.5.4.InHand Networks InRouter302
- CVE-2022-26007An OS command injection vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4.InHand Networks InRouter302
- CVE-2022-26002A stack-based buffer overflow vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4.InHand Networks InRouter302
- CVE-2022-25995A command execution vulnerability exists in the console inhand functionality of InHand Networks InRouter302 V3.5.4.InHand Networks InRouter302
- CVE-2022-21809A file write vulnerability exists in the httpd upload.cgi functionality of InHand Networks InRouter302 V3.5.4.InHand Networks InRouter302
- CVE-2022-1698Allowing long password leads to denial of service in causefx/organizrcausefx/organizr
- CVE-2022-1699Uncontrolled Resource Consumption in causefx/organizrcausefx/organizr
- CVE-2022-29303SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.
- CVE-2022-30525A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Patch 1, USG FLEX 200 fZyxel USG FLEX 100(W) firmware · Zyxel USG FLEX 200 firm… +6
- CVE-2022-1682Reflected Xss using url based payload in neorazorx/facturascriptsneorazorx/facturascripts · facturascripts/facturascripts
High 33
- CVE-2022-29218Unauthorized takeover for new versions of some platform-specific gemsrubygems.org
- CVE-2021-27777HCL Unica Platform is vulnerable to XML External Entity (XXE) injectionHCL Software HCL Unica
- CVE-2021-27772HCL Sametime is vulnerable to an information disclosureHCL Software Sametime
- CVE-2021-27771HCL Sametime is susceptible a file transfer service vulnerabilityHCL Software Sametime
- CVE-2022-22796Sysaid – Sysaid System TakeoverSysaid
- CVE-2022-23742Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low priCheck Point Endpoint Security Client for Windows
- CVE-2021-27500EIPStackGroup OpENer Ethernet/IP Reachable AssertionEIPStackGroup OpENer EtherNet/IP
- CVE-2021-27498EIPStackGroup OpENer Ethernet/IP Reachable AssertionEIPStackGroup OpENer EtherNet/IP
- CVE-2021-27482EIPStackGroup OpENer Ethernet/IP Out-of-bounds ReadEIPStackGroup OpENer EtherNet/IP
- CVE-2021-27478EIPStackGroup OpENer Ethernet/IP Incorrect Conversion between Numeric TypesEIPStackGroup OpENer EtherNet/IP
- CVE-2022-28819Adobe Character Animator SVG File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Character Animator
- CVE-2022-25172An information disclosure vulnerability exists in the web interface session cookie functionality of InHand Networks InRouter302 V3.5.4.InHand Networks InRouter302
- CVE-2022-24910A buffer overflow vulnerability exists in the httpd parse_ping_result API functionality of InHand Networks InRouter302 V3.5.4.InHand Networks InRouter302
- CVE-2022-21182A privilege escalation vulnerability exists in the router configuration import functionality of InHand Networks InRouter302 V3.5.4.InHand Networks InRouter302
- CVE-2021-40399An exploitable use-after-free vulnerability exists in WPS Spreadsheets ( ET ) as part of WPS Office, version 11.2.0.10351.WPS Office
- CVE-2021-0188Return of pointer value outside of expected range in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentialIntel(R) Processors
- CVE-2021-0159Improper input validation in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enabIntel(R) Processors
- CVE-2021-0189Use of out-of-range pointer offset in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescaIntel(R) Processors
- CVE-2021-33122Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aesIntel(R) Processors
- CVE-2021-0190Uncaught exception in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilIntel(R) Processors
- CVE-2021-33123Improper access control in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enableIntel(R) Processors
- CVE-2021-0153Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of priviIntel(R) Processors
- CVE-2021-0154Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation ofIntel(R) Processors
- CVE-2021-0126Improper input validation for the Intel(R) Manageability Commander before version 2.2 may allow an authenticated user to potentially enable Intel(R) Manageability Commander
- CVE-2021-26258Improper access control for the Intel(R) Killer(TM) Control Center software before version 2.4.3337.0 may allow an authorized user to potentIntel(R) Killer(TM) Control Center software
- CVE-2022-22139Uncontrolled search path in the Intel(R) XTU software before version 7.3.0.33 may allow an authenticated user to potentially enable escalatiIntel(R) XTU software
- CVE-2022-21128Insufficient control flow management in the Intel(R) Advisor software before version 7.6.0.37 may allow an authenticated user to potentiallyIntel(R) Advisor software
- CVE-2021-0194Improper access control in the Intel(R) In-Band Manageability software before version 2.13.0 may allow a privileged user to potentially enabIntel(R) In-Band Manageability software
- CVE-2021-0193Improper authentication in the Intel(R) In-Band Manageability software before version 2.13.0 may allow a privileged user to potentially enabIntel(R) In-Band Manageability software
- CVE-2022-29930SHA1 implementation in JetBrains Ktor Native 2.0.0 was returning the same value.JetBrains Ktor
- CVE-2022-1044Sensitive Data Exposure Due To Insecure Storage Of Profile Image in polonel/trudeskpolonel/trudesk
- CVE-2022-1681Authentication Bypass Using an Alternate Path or Channel in requarks/wikirequarks/wiki
- CVE-2022-1650Improper Removal of Sensitive Information Before Storage or Transfer in eventsource/eventsourceeventsource/eventsource · eventsource
Medium, low and unrated 108
- CVE-2022-27134EOSIO batdappboomx v327c04cf has an Access-control vulnerability in the `transfer` function of the smart contract which allows remote attack
- CVE-2021-27773HCL Sametime is vulnerable to clickjackingHCL Software Sametime
- CVE-2021-27770HCL Sametime is vulnerable to arbitrary HTTP requestsHCL Software Sametime
- CVE-2021-27769HCL Sametime is vulnerable to an information disclosureHCL Software Sametime
- CVE-2021-27768An SSL certificate host verification vulnerability affects HCL Verse for AndroidHCL Software Verse for Android
- CVE-2020-22985Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbi
- CVE-2020-22986Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbi
- CVE-2020-22987Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbi
- CVE-2020-22984Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbi
- CVE-2022-23166Sysaid – Sysaid Local File Inclusion (LFI)Sysaid
- CVE-2022-23165Sysaid – Sysaid 14.2.0 Reflected Cross-Site Scripting (XSS)Sysaid
- CVE-2022-22798Sysaid – Pro Plus Edition, SysAid Help Desk Broken Access ControlSysaid
- CVE-2022-22797Sysaid – sysaid Open RedirectSysaid
- CVE-2022-22971In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vuSpring Framework · org.springframework:spring-messaging
- CVE-2022-22970In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable tSpring Framework · org.springframework:spring-beans
- CVE-2022-23139ZTE's ZXMP M721 product has a permission and access control vulnerability.ZXMP M721
- CVE-2022-28818ColdFusion Reflected Cross-Site Scripting could lead to Arbitrary Code ExecutionAdobe ColdFusion
- CVE-2021-22531A bug exist in the input parameter of Access Manager that allows supply of invalid character to trigger cross-site scripting vulnerability.NetIQ Access Manager
- CVE-2022-29368Moddable commit before 135aa9a4a6a9b49b60aa730ebc3bcc6247d75c45 was discovered to contain an out-of-bounds read via the function fxUint8Gett
- CVE-2022-29369Nginx NJS v0.7.2 was discovered to contain a segmentation violation via njs_lvlhsh_bucket_find at njs_lvlhsh.c.
- CVE-2021-26363A malicious or compromised UApp or ABL could potentially change the value that the ASP uses for its reserved DRAM, to one outside of the fenAMD Ryzen™ Series · AMD Athlon™ Series
- CVE-2021-26386A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call to the Stage 2 Bootloader potentially leaAMD Ryzen™ Series · AMD Athlon™ Series
- CVE-2021-26317Failure to verify the protocol in SMM may allow an attacker to control the protocol and modify SPI flash resulting in a potential arbitrary AMD Ryzen™ Series · AMD Athlon™ Series
- CVE-2021-26368Insufficient check of the process type in Trusted OS (TOS) may allow an attacker with privileges to enable a lesser privileged process to unAMD Ryzen™ Series · AMD Athlon™ Series
- CVE-2021-26361A malicious or compromised User Application (UApp) or AGESA Boot Loader (ABL) could be used by an attacker to exfiltrate arbitrary memory frAMD Ryzen™ Series · AMD Athlon™ Series
- CVE-2021-26362A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call which results in mapping sensitive SystemAMD Ryzen™ Series · AMD Athlon™ Series
- CVE-2021-26351Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA (Direct Memory Access) read/write from/to invalid DAMD Ryzen™ Series · AMD Athlon™ Series
- CVE-2022-29363Phpok v6.1 was discovered to contain a deserialization vulnerability via the update_f() function in login_control.php.
- CVE-2021-26366An attacker, who gained elevated privileges via some other vulnerability, may be able to read data from Boot ROM resulting in a loss of systAMD Ryzen™ Series · AMD Athlon™ Series
- CVE-2021-26369A malicious or compromised UApp or ABL may be used by an attacker to send a malformed system call to the bootloader, resulting in out-of-bouAMD Ryzen™ Series · AMD Athlon™ Series
- CVE-2022-27172A hard-coded password vulnerability exists in the console infactory functionality of InHand Networks InRouter302 V3.5.37.InHand Networks InRouter302
- CVE-2022-26020An information disclosure vulnerability exists in the router configuration export functionality of InHand Networks InRouter302 V3.5.4.InHand Networks InRouter302
- CVE-2022-21238A cross-site scripting (xss) vulnerability exists in the info.jsp functionality of InHand Networks InRouter302 V3.5.4.InHand Networks InRouter302
- CVE-2022-21147An out of bounds read vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.7.7.ESTsoft Alyac
- CVE-2021-0155Unchecked return value in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclIntel(R) Processors
- CVE-2021-33103Unintended intermediary in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enableIntel(R) Processors
- CVE-2021-33124Out-of-bounds write in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aesIntel(R) Processors
- CVE-2022-21151Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authenticated user to potIntel(R) Processors
- CVE-2021-33149Observable behavioral discrepancy in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via Intel(R) Processors
- CVE-2022-0005Sensitive information accessible by physical probing of JTAG interface for some Intel(R) Processors with SGX may allow an unprivileged user Intel(R) Processors with SGX
- CVE-2021-33117Improper access control for some 3rd Generation Intel(R) Xeon(R) Scalable Processors before BIOS version MR7, may allow a local attacker to Intel(R) Xeon(R) Scalable Processors
- CVE-2022-0004Hardware debug modes and processor INIT setting that allow override of locks for some Intel(R) Processors in Intel(R) Boot Guard and Intel(RIntel(R) Processors in Intel(R) Boot Guard and Intel(R) TXT
- CVE-2021-33082Sensitive information in resource not removed before reuse in firmware for some Intel(R) SSD and Intel(R) Optane(TM) SSD Products may allow Intel(R) SSD and Intel(R) Optane(TM) SSD Products
- CVE-2021-33083Improper authentication in firmware for some Intel(R) SSD, Intel(R) Optane(TM) SSD, Intel(R) Optane(TM) SSD DC and Intel(R) SSD DC Products Intel(R) SSD, Intel(R) Optane(TM) SSD, Intel(R) Optane(TM)…
- CVE-2021-33069Improper resource shutdown or release in firmware for some Intel(R) SSD, Intel(R) SSD DC, Intel(R) Optane(TM) SSD and Intel(R) Optane(TM) SSIntel(R) SSD, Intel(R) SSD DC, Intel(R) Optane(TM) SSD and…
- CVE-2021-33075Race condition in firmware for some Intel(R) Optane(TM) SSD, Intel(R) Optane(TM) SSD DC and Intel(R) SSD DC Products may allow a privileged Intel(R) Optane(TM) SSD, Intel(R) Optane(TM) SSD DC and Int…
- CVE-2021-33074Protection mechanism failure in firmware for some Intel(R) SSD, Intel(R) SSD DC and Intel(R) Optane(TM) SSD Products may allow an unauthentiIntel(R) SSD, Intel(R) SSD DC and Intel(R) Optane(TM) SSD P…
- CVE-2021-33080Exposure of sensitive system information due to uncleared debug information in firmware for some Intel(R) SSD DC, Intel(R) Optane(TM) SSD anIntel(R) SSD DC, Intel(R) Optane(TM) SSD and Intel(R) Optan…
- CVE-2021-33077Insufficient control flow management in firmware for some Intel(R) SSD, Intel(R) Optane(TM) SSD and Intel(R) SSD DC Products may allow an unIntel(R) SSD, Intel(R) Optane(TM) SSD and Intel(R) SSD DC P…
- CVE-2021-33078Race condition within a thread in firmware for some Intel(R) Optane(TM) SSD and Intel(R) SSD DC Products may allow a privileged user to poteIntel(R) Optane(TM) SSD and Intel(R) SSD DC Products
- CVE-2022-21237Improper buffer access in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via locaIntel(R) NUCs
- CVE-2022-24297Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege viIntel(R) NUCs
- CVE-2022-24382Improper input validation in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via lIntel(R) NUCs
- CVE-2021-33108Improper input validation in the Intel(R) In-Band Manageability software before version 2.13.0 may allow a privileged user to potentially enIntel(R) In-Band Manageability software
- CVE-2021-33135Uncontrolled resource consumption in the Linux kernel drivers for Intel(R) SGX may allow an authenticated user to potentially enable denial Intel(R) SGX
- CVE-2022-21136Improper input validation for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable denial of service via localIntel(R) Xeon(R) Processors
- CVE-2022-21131Improper access control for some Intel(R) Xeon(R) Processors may allow an authenticated user to potentially enable information disclosure viIntel(R) Xeon(R) Processors
- CVE-2021-33130Insecure default variable initialization of Intel(R) RealSense(TM) ID Solution F450 before version 2.6.0.74 may allow an unauthenticated useIntel(R) RealSense(TM) ID Solution F450
- CVE-2022-28920Tieba-Cloud-Sign v4.9 was discovered to contain a cross-site scripting (XSS) vulnerability via the function strip_tags.
- CVE-2022-28919HTMLCreator release_stable_2020-07-29 was discovered to contain a cross-site scripting (XSS) vulnerability via the function _generateFilenam
- CVE-2022-29738Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/admin/?page=transaction/send&id=, id.
- CVE-2022-29739Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/admin/?page=user/manage_user&id=.
- CVE-2022-29306IonizeCMS v1.0.8.1 was discovered to contain a SQL injection vulnerability via the id_page parameter in application/models/article_model.php
- CVE-2022-29307IonizeCMS v1.0.8.1 was discovered to contain a command injection vulnerability via the function copy_lang_content in application/models/lang
- CVE-2022-29741Money Transfer Management System 1.0 is vulnerable to SQL Injection via \mtms\classes\Master.php?f=delete_fee.
- CVE-2022-22413IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to SQL injection.IBM Robotic Process Automation
- CVE-2022-29745Money Transfer Management System 1.0 is vulnerable to SQL Injection via \mtms\classes\Master.php?f=delete_transaction.
- CVE-2022-29746Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/classes/Users.php?f=delete.
- CVE-2022-29998Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/clientStatus.php?client_id=.
- CVE-2022-29999Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editClient.php?client_id=.
- CVE-2022-29302SolarView Compact ver.6.00 was discovered to contain a local file disclosure via /html/Solar_Ftp.php.
- CVE-2022-29298SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal.
- CVE-2022-30000Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editPayment.php?recipt_no=.
- CVE-2022-30001Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editAgent.php?agent_id=.
- CVE-2022-30002Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editNominee.php?nominee_id=.
- CVE-2022-29985Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_category.
- CVE-2022-29986Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_facility.
- CVE-2022-29987Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=user/manage_user&id=.
- CVE-2022-29988Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete.
- CVE-2022-29989Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete_booking.
- CVE-2022-29990Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/categories/view_category.php?id=.
- CVE-2022-29992Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/categories/manage_category.php?id=.
- CVE-2022-30279An issue was discovered in Stormshield Network Security (SNS) 4.3.x before 4.3.8.
- CVE-2022-29993Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/bookings/view_booking.php?id=.
- CVE-2022-29994Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=facilities/manage_facility&id=.
- CVE-2022-29995Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=clients/manage_client&id=.
- CVE-2022-29747Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/manage_invoice&id= // Leak place ---> id.
- CVE-2022-29748Simple Client Management System 1.0 is vulnerable to SQL Injection via \cms\admin?page=client/manage_client&id=.
- CVE-2022-29749Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_invoice.
- CVE-2022-29750Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_service.
- CVE-2022-29751Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_client.
- CVE-2022-29981Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Users.php?f=delete.
- CVE-2022-29538RESI Gemini-Net Web 4.2 is affected by Improper Access Control in authorization logic.
- CVE-2022-29979Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_designation.
- CVE-2022-29539resi-calltrace in RESI Gemini-Net 4.2 is affected by OS Command Injection.
- CVE-2022-29980Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=user/manage_user&id=.
- CVE-2022-29982Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/maintenance/manage_service.php?id=.
- CVE-2022-29983Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/view_invoice&id=.
- CVE-2022-29984Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=client/view_client&id=.
- CVE-2021-42863A buffer overflow in ecma_builtin_typedarray_prototype_filter() in JerryScript version fe3a5c0 allows an attacker to construct a fake object
- CVE-2022-28873Multiple Address Bar Spoofing Vulnerability in F-Secure SAFE Browser for AndroidF-Secure Mobile Security
- CVE-2022-28872Address Bar Spoofing Vulnerability in F-Secure SAFE Browser for AndroidF-Secure Mobile Security
- CVE-2022-29929In JetBrains TeamCity before 2022.04 potential XSS via Referrer header was possibleJetBrains TeamCity
- CVE-2022-29928In JetBrains TeamCity before 2022.04 leak of secrets in TeamCity agent logs was possibleJetBrains TeamCity
- CVE-2022-29927In JetBrains TeamCity before 2022.04 reflected XSS on the Build Chain Status page was possibleJetBrains TeamCity
- CVE-2022-1674NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in vim/vimvim/vim
- CVE-2022-29885EncryptInterceptor does not provide complete protection on insecure networksApache Software Foundation Apache Tomcat · tomcat +1
- CVE-2022-30594The Linux kernel before 5.17.2 mishandles seccomp permissions.