# CVEs published 2022-05-15

7 CVEs were published on May 15, 2022: 0 critical, 1 high. Days are UTC.

- [CVE-2022-30049](https://cve.now/CVE-2022-30049.md): A Server-Side Request Forgery (SSRF) in Rebuild v2.8.3 allows attackers to obtain the real IP address and scan Intranet information via the (no CVSS)
- [CVE-2022-28930](https://cve.now/CVE-2022-28930.md): ERP-Pro v3.7.5 was discovered to contain a SQL injection vulnerability via the component /base/SysEveMenuAuthPointMapper.xml.. (no CVSS)
- [CVE-2022-28937](https://cve.now/CVE-2022-28937.md): FISCO-BCOS release-3.0.0-rc2 was discovered to contain an issue where a malicious node, via an invalid proposal with an invalid header, will (no CVSS)
- [CVE-2022-28936](https://cve.now/CVE-2022-28936.md): FISCO-BCOS release-3.0.0-rc2 was discovered to contain an issue where a malicious node can trigger an integer overflow and cause a Denial of (no CVSS)
- [CVE-2022-28929](https://cve.now/CVE-2022-28929.md): Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the delid parameter at viewtreatmentrecord.php. (no CVSS)
- [CVE-2021-41965](https://cve.now/CVE-2021-41965.md): A SQL injection vulnerability exists in ChurchCRM version 2.0.0 to 4.4.5 that allows an authenticated attacker to issue an arbitrary SQL com (no CVSS)
- [CVE-2022-30708](https://cve.now/CVE-2022-30708.md): Webmin through 1.991, when the Authentic theme is used, allows remote code execution when a user has been manually created (i.e., not create (CVSS 8.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-05-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.