# CVEs published 2022-05-20

107 CVEs were published on May 20, 2022: 3 critical, 13 high. Days are UTC.

- [CVE-2022-29189](https://cve.now/CVE-2022-29189.md): Buffer for inbound DTLS fragments has no limit (CVSS 5.3, pion dtls · github.com/pion/dtls +1)
- [CVE-2022-29190](https://cve.now/CVE-2022-29190.md): Header reconstruction method can be thrown into an infinite loop in Pion DTLS (CVSS 7.5, pion dtls · github.com/pion/dtls/v2 +1)
- [CVE-2022-29188](https://cve.now/CVE-2022-29188.md): Smokescreen SSRF via deny list bypass (square brackets) in Smokescreen (CVSS 5.3, stripe smokescreen · github.com/stripe/smokescreen)
- [CVE-2022-29214](https://cve.now/CVE-2022-29214.md): URL Redirection to Untrusted Site ('Open Redirect') in next-auth (CVSS 6.1, nextauthjs next-auth · next-auth)
- [CVE-2022-29216](https://cve.now/CVE-2022-29216.md): Code injection in \`saved\_model\_cli\` in TensorFlow (CVSS 7.8, tensorflow · tensorflow-cpu +1)
- [CVE-2022-29213](https://cve.now/CVE-2022-29213.md): Incomplete validation in signal ops leads to crashes in TensorFlow (CVSS 5.5, tensorflow · tensorflow-cpu +1)
- [CVE-2022-29210](https://cve.now/CVE-2022-29210.md): Heap buffer overflow due to incorrect hash function in TensorFlow (CVSS 5.5, tensorflow · tensorflow-cpu +1)
- [CVE-2022-29209](https://cve.now/CVE-2022-29209.md): Type confusion leading to \`CHECK\`-failure based denial of service in TensorFlow (CVSS 5.5, tensorflow · tensorflow-gpu +1)
- [CVE-2022-29211](https://cve.now/CVE-2022-29211.md): Segfault in TensorFlow if \`tf.histogram\_fixed\_width\` is called with NaN values (CVSS 5.5, tensorflow · tensorflow-cpu +1)
- [CVE-2022-29212](https://cve.now/CVE-2022-29212.md): Core dump when loading TFLite models with quantization in TensorFlow (CVSS 5.5, tensorflow · tensorflow-cpu +1)
- [CVE-2022-29201](https://cve.now/CVE-2022-29201.md): Missing validation in \`QuantizedConv2D\` results in undefined behavior in TensorFlow (CVSS 5.5, tensorflow · tensorflow-gpu +1)
- [CVE-2022-29202](https://cve.now/CVE-2022-29202.md): Denial of service in TensorFlow due to lack of validation in \`tf.ragged.constant\` (CVSS 5.5, tensorflow · tensorflow-cpu +1)
- [CVE-2022-29203](https://cve.now/CVE-2022-29203.md): Integer overflow in \`SpaceToBatchND\` in TensorFlow (CVSS 5.5, tensorflow · tensorflow-cpu +1)
- [CVE-2022-29204](https://cve.now/CVE-2022-29204.md): Missing validation causes denial of service in TensorFlow via \`Conv3DBackpropFilterV2\` (CVSS 5.5, tensorflow · tensorflow-cpu +1)
- [CVE-2022-1775](https://cve.now/CVE-2022-1775.md): Weak Password Requirements in polonel/trudesk (CVSS 8.4, polonel/trudesk)
- [CVE-2022-29208](https://cve.now/CVE-2022-29208.md): Segfault and Out-of-bounds Write write due to incomplete validation in TensorFlow (CVSS 7.1, tensorflow · tensorflow-cpu +1)
- [CVE-2022-29205](https://cve.now/CVE-2022-29205.md): Segfault due to missing support for quantized types in TensorFlow (CVSS 5.5, tensorflow · tensorflow-gpu +1)
- [CVE-2022-29206](https://cve.now/CVE-2022-29206.md): Missing validation results in undefined behavior in \`SparseTensorDenseAdd\` in TensorFlow (CVSS 5.5, tensorflow · tensorflow-cpu +1)
- [CVE-2022-29207](https://cve.now/CVE-2022-29207.md): Undefined behavior when users supply invalid resource handles in TensorFlow (CVSS 5.5, tensorflow · tensorflow-cpu +1)
- [CVE-2022-31258](https://cve.now/CVE-2022-31258.md): In Checkmk before 1.6.0p29, 2.x before 2.0.0p25, and 2.1.x before 2.1.0b10, a site user can escalate to root by editing an OMD hook symlink. (CVSS 8.2)
- [CVE-2022-29195](https://cve.now/CVE-2022-29195.md): Missing validation causes denial of service in TensorFlow via \`StagePeek\` (CVSS 5.5, tensorflow · tensorflow-cpu +1)
- [CVE-2022-29197](https://cve.now/CVE-2022-29197.md): Missing validation causes denial of service in TensorFlow via \`UnsortedSegmentJoin\` (CVSS 5.5, tensorflow · tensorflow-gpu +1)
- [CVE-2022-29196](https://cve.now/CVE-2022-29196.md): Missing validation causes denial of service in TensorFlow via \`Conv3DBackpropFilterV2\` (CVSS 5.5, tensorflow · tensorflow-cpu +1)
- [CVE-2022-29198](https://cve.now/CVE-2022-29198.md): Missing validation causes denial of service in TensorFlow via \`SparseTensorToCSRSparseMatrix\` (CVSS 5.5, tensorflow · tensorflow-cpu +1)
- [CVE-2022-1803](https://cve.now/CVE-2022-1803.md): Improper Restriction of Rendered UI Layers or Frames in polonel/trudesk (CVSS 8.4, polonel/trudesk)
- [CVE-2022-29199](https://cve.now/CVE-2022-29199.md): Missing validation causes denial of service in TensorFlow via \`LoadAndRemapMatrix\` (CVSS 5.5, tensorflow · tensorflow-cpu +1)
- [CVE-2022-29200](https://cve.now/CVE-2022-29200.md): Missing validation causes denial of service in TensorFlow via \`LSTMBlockCell\` (CVSS 5.5, tensorflow · tensorflow-cpu +1)
- [CVE-2022-29193](https://cve.now/CVE-2022-29193.md): Missing validation causes \`TensorSummaryV2\` in TensorFlow to crash (CVSS 5.5, tensorflow · tensorflow-cpu +1)
- [CVE-2022-29194](https://cve.now/CVE-2022-29194.md): Missing validation causes denial of service via \`DeleteSessionTensor\` in TensorFlow (CVSS 5.5, tensorflow · tensorflow-cpu +1)
- [CVE-2022-28618](https://cve.now/CVE-2022-28618.md): A command injection security vulnerability has been identified in HPE Nimble Storage Hybrid Flash Arrays, HPE Nimble Storage All Flash Array (no CVSS, HPE Nimble Storage Hybrid Flash Arrays; Nimble Storage All…)
- [CVE-2022-29191](https://cve.now/CVE-2022-29191.md): Missing validation causes denial of service via \`GetSessionTensor\` in TensorFlow (CVSS 5.5, tensorflow · tensorflow-cpu +1)
- [CVE-2022-29432](https://cve.now/CVE-2022-29432.md): WordPress wpDataTables plugin \<= 2.1.27 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities (CVSS 3.4, TMS-Plugins wpDataTables – Tables & Table Charts)
- [CVE-2022-29431](https://cve.now/CVE-2022-29431.md): Remove CPT base \<= 5.8 - CSRF leads to CPT base deletion (CVSS 5.4, KubiQ Remove CPT base)
- [CVE-2022-29430](https://cve.now/CVE-2022-29430.md): WordPress PNG to JPG plugin \<= 4.0 - Cross-Site Request Forgery (CSRF) leading to Persistent Cross-Site Scripting (XSS) vulnerability (CVSS 4.7, KubiQ PNG to JPG)
- [CVE-2022-29428](https://cve.now/CVE-2022-29428.md): WordPress WP Slider Plugin \<= 1.4.5 - Cross-Site Scripting (XSS) vulnerability (CVSS 4.1, Muneeb WP Slider Plugin)
- [CVE-2022-29192](https://cve.now/CVE-2022-29192.md): Missing validation crashes \`QuantizeAndDequantizeV4Grad\` in TensorFlow (CVSS 5.5, tensorflow · tensorflow-cpu +1)
- [CVE-2022-29186](https://cve.now/CVE-2022-29186.md): Use of Hard-coded Cryptographic Key in rundeck/rundeck, rundeckpro/enterprise (CVSS 9.1, rundeck)
- [CVE-2022-29434](https://cve.now/CVE-2022-29434.md): WordPress Spiffy Calendar plugin \<= 4.9.0 - Edit/Delete event via IDOR vulnerability (CVSS 6.3, Spiffy Plugins Spiffy Calendar)
- [CVE-2022-22972](https://cve.now/CVE-2022-22972.md): VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain (no CVSS, VMware Workspace ONE Access, Identity Manager and vRealize…)
- [CVE-2022-22973](https://cve.now/CVE-2022-22973.md): VMware Workspace ONE Access and Identity Manager contain a privilege escalation vulnerability. (no CVSS, VMware Workspace ONE Access and Identity Manager.)
- [CVE-2022-29447](https://cve.now/CVE-2022-29447.md): WordPress Hover Effects plugin \<= 2.1 - Authenticated Local File Inclusion (LFI) vulnerability (CVSS 6.8, Wow-Company Hover Effects – easily create any hover effect)
- [CVE-2022-29427](https://cve.now/CVE-2022-29427.md): WordPress Disable Right Click For WP plugin \<= 1.1.6 - Cross-Site Request Forgery (CSRF) vulnerability (CVSS 4.3, Aftab Muni Disable Right Click For WP)
- [CVE-2022-24434](https://cve.now/CVE-2022-24434.md): Denial of Service (DoS) (CVSS 7.5, dicer · org.webjars.npm:dicer)
- [CVE-2022-29426](https://cve.now/CVE-2022-29426.md): WordPress Slideshow, Image Slider by 2J plugin \<= 1.3.54 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability (CVSS 5.4, 2J Slideshow Team Slideshow, Image Slider by)
- [CVE-2022-21195](https://cve.now/CVE-2022-21195.md): Regular Expression Denial of Service (ReDoS) (CVSS 5.3, url-regex)
- [CVE-2022-29448](https://cve.now/CVE-2022-29448.md): WordPress Herd Effects plugin \<= 5.2 - Local File Inclusion (LFI) vulnerability (CVSS 6.8, Wow-Company Herd Effects)
- [CVE-2022-29425](https://cve.now/CVE-2022-29425.md): WordPress Checkout Files Upload for WooCommerce plugin \<= 2.1.2 - Cross-Site Scripting (XSS) vulnerability (CVSS 6.1, WP Wham Checkout Files Upload for WooCommerce)
- [CVE-2022-29424](https://cve.now/CVE-2022-29424.md): WordPress Image Hover Effects Ultimate plugin \<= 9.7.1 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability (CVSS 4.8, Biplob Adhikari Image Hover Effects Ultimate)
- [CVE-2021-36833](https://cve.now/CVE-2021-36833.md): WordPress MC4WP plugin \<= 4.8.6 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability (CVSS 4.8, ibericode MC4WP: Mailchimp for WordPress)
- [CVE-2022-29185](https://cve.now/CVE-2022-29185.md): Observable Timing Discrepancy in totp-rs (CVSS 4.2, constantoine totp-rs · totp-rs)
- [CVE-2022-29184](https://cve.now/CVE-2022-29184.md): Command Injection/Argument Injection in GoCD (CVSS 8.8, gocd)
- [CVE-2022-29183](https://cve.now/CVE-2022-29183.md): Reflected XSS in GoCD (CVSS 4.3, gocd)
- [CVE-2022-29182](https://cve.now/CVE-2022-29182.md): DOM-based XSS in GoCD (CVSS 4.3, gocd)
- [CVE-2022-28995](https://cve.now/CVE-2022-28995.md): Rengine v1.0.2 was discovered to contain a remote code execution (RCE) vulnerability via the yaml configuration function. (no CVSS)
- [CVE-2022-29179](https://cve.now/CVE-2022-29179.md): Improper Privilege Management in Cilium (CVSS 7.5, cilium · github.com/cilium/cilium)
- [CVE-2022-28531](https://cve.now/CVE-2022-28531.md): Sourcecodester Covid-19 Directory on Vaccination System1.0 is vulnerable to SQL Injection via the admin/login.php txtusername (aka Username) (no CVSS)
- [CVE-2022-29178](https://cve.now/CVE-2022-29178.md): Incorrect Default Permissions in Cilium (CVSS 8.8, cilium · github.com/cilium/cilium)
- [CVE-2022-28990](https://cve.now/CVE-2022-28990.md): WASM3 v0.5.0 was discovered to contain a heap overflow via the component /wabt/bin/poc.wasm. (no CVSS, pywasm3)
- [CVE-2022-1770](https://cve.now/CVE-2022-1770.md): Improper Privilege Management in polonel/trudesk (CVSS 9.9, polonel/trudesk)
- [CVE-2022-22365](https://cve.now/CVE-2022-22365.md): IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0, with the Ajax Proxy Web Application (AjaxProxy.war) deployed, is vulnerable to spoo (CVSS 5.6, IBM WebSphere Application Server)
- [CVE-2021-39043](https://cve.now/CVE-2021-39043.md): IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to stored cross-site scripting. (CVSS 6.4, IBM Jazz Team Server)
- [CVE-2022-29177](https://cve.now/CVE-2022-29177.md): DoS via malicious p2p message in Go-Ethereum (CVSS 5.9, go-ethereum · github.com/ethereum/go-ethereum)
- [CVE-2022-29170](https://cve.now/CVE-2022-29170.md): Grafana Enterprise datasource network restrictions bypass via HTTP redirects (CVSS 6.6, grafana)
- [CVE-2022-29163](https://cve.now/CVE-2022-29163.md): Bypass of password requirements when sharing a folder via the Circles app in Nextcloud Server (CVSS 3.5, nextcloud security-advisories)
- [CVE-2022-29160](https://cve.now/CVE-2022-29160.md): Sensitive files/data exist after deletion of user account in Nextcloud Android (CVSS 2.8, nextcloud security-advisories)
- [CVE-2022-24906](https://cve.now/CVE-2022-24906.md): Error in deleting deck cards attachment reveals the full application path in Nextcloud Deck (CVSS 3.5, nextcloud security-advisories)
- [CVE-2022-29159](https://cve.now/CVE-2022-29159.md): Possibility for anyone to add a stack with existing tasks on anyone's board in Nextcloud Deck (CVSS 5.0, nextcloud security-advisories)
- [CVE-2021-30028](https://cve.now/CVE-2021-30028.md): SOOTEWAY Wi-Fi Range Extender v1.5 was discovered to use default credentials (the admin password for the admin account) to access the TELNET (no CVSS)
- [CVE-2021-43728](https://cve.now/CVE-2021-43728.md): Pix-Link MiNi Router 28K.MiniRouter.20190211 was discovered to contain a stored cross-site scripting (XSS) vulnerability due to an unsanitiz (no CVSS)
- [CVE-2021-43729](https://cve.now/CVE-2021-43729.md): Pix-Link MiNi Router 28K.MiniRouter.20190211 was discovered to contain a stored cross-site scripting (XSS) vulnerability due to an unsanitiz (no CVSS)
- [CVE-2022-28660](https://cve.now/CVE-2022-28660.md): The querier component in Grafana Enterprise Logs 1.1.x through 1.3.x before 1.4.0 does not require authentication when X-Scope-OrgID is used (no CVSS)
- [CVE-2022-31245](https://cve.now/CVE-2022-31245.md): mailcow before 2022-05d allows a remote authenticated user to inject OS commands and escalate privileges to domain admin via the --debug opt (no CVSS)
- [CVE-2022-29165](https://cve.now/CVE-2022-29165.md): Argo CD will blindly trust JWT claims if anonymous access is enabled (CVSS 10.0, argoproj argo-cd · github.com/argoproj/argo-cd/v2 +1)
- [CVE-2022-24905](https://cve.now/CVE-2022-24905.md): Argo CD login screen allows message spoofing if SSO is enabled (CVSS 4.3, argoproj argo-cd · github.com/argoproj/argo-cd +1)
- [CVE-2022-24904](https://cve.now/CVE-2022-24904.md): Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server (CVSS 4.3, argoproj argo-cd · github.com/argoproj/argo-cd +1)
- [CVE-2022-30886](https://cve.now/CVE-2022-30886.md): School Dormitory Management System v1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /dms/admin/report (no CVSS)
- [CVE-2022-30887](https://cve.now/CVE-2022-30887.md): Pharmacy Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /php\_action/editProd (no CVSS)
- [CVE-2022-30518](https://cve.now/CVE-2022-30518.md): ChatBot Application with a Suggestion Feature 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /simple\_ch (no CVSS)
- [CVE-2022-29320](https://cve.now/CVE-2022-29320.md): MiniTool Partition Wizard v12.0 contains an unquoted service path which allows attackers to escalate privileges to the system level. (no CVSS)
- [CVE-2022-28993](https://cve.now/CVE-2022-28993.md): Multi Store Inventory Management System v1.0 allows attackers to perform an account takeover via a crafted POST request. (no CVSS)
- [CVE-2022-28992](https://cve.now/CVE-2022-28992.md): A Cross-Site Request Forgery (CSRF) in Online Banquet Booking System v1.0 allows attackers to change admin credentials via a crafted POST re (no CVSS)
- [CVE-2022-28991](https://cve.now/CVE-2022-28991.md): Multi Store Inventory Management System v1.0 was discovered to contain an information disclosure vulnerability which allows attackers to acc (no CVSS)
- [CVE-2022-28106](https://cve.now/CVE-2022-28106.md): Online Sports Complex Booking System v1.0 was discovered to allow attackers to take over user accounts via a crafted POST request. (no CVSS)
- [CVE-2022-28105](https://cve.now/CVE-2022-28105.md): Online Sports Complex Booking System v1.0 was discovered to contain a blind SQL injection vulnerability via the id parameter in /scbs/view\_f (no CVSS)
- [CVE-2022-27095](https://cve.now/CVE-2022-27095.md): BattlEye v0.9 contains an unquoted service path which allows attackers to escalate privileges to the system level. (no CVSS)
- [CVE-2022-28104](https://cve.now/CVE-2022-28104.md): Foxit PDF Editor v11.3.1 was discovered to contain an arbitrary file upload vulnerability. (no CVSS)
- [CVE-2022-27094](https://cve.now/CVE-2022-27094.md): Sony PlayMemories Home v6.0 contains an unquoted service path which allows attackers to escalate privileges to the system level. (no CVSS)
- [CVE-2022-26633](https://cve.now/CVE-2022-26633.md): Simple Student Quarterly Result/Grade System v1.0 was discovered to contain a SQL injection vulnerability via /sqgs/Actions.php. (no CVSS)
- [CVE-2022-26634](https://cve.now/CVE-2022-26634.md): HMA VPN v5.3.5913.0 contains an unquoted service path which allows attackers to escalate privileges to the system level. (no CVSS)
- [CVE-2022-26632](https://cve.now/CVE-2022-26632.md): Multi-Vendor Online Groceries Management System v1.0 was discovered to contain a blind SQL injection vulnerability via the id parameter in / (no CVSS)
- [CVE-2022-29022](https://cve.now/CVE-2022-29022.md): A buffer overflow vulnerability exists in the razeraccessory driver of OpenRazer up to version v3.3.0 allows attackers to cause a Denial of (no CVSS)
- [CVE-2022-29023](https://cve.now/CVE-2022-29023.md): A buffer overflow vulnerability exists in the razermouse driver of OpenRazer up to version v3.3.0 allows attackers to cause a Denial of Serv (no CVSS)
- [CVE-2022-29021](https://cve.now/CVE-2022-29021.md): A buffer overflow vulnerability exists in the razerkbd driver of OpenRazer up to version v3.3.0 allows attackers to cause a Denial of Servic (no CVSS)
- [CVE-2022-1784](https://cve.now/CVE-2022-1784.md): Server-Side Request Forgery (SSRF) in jgraph/drawio (CVSS 7.5, jgraph/drawio)
- [CVE-2022-31215](https://cve.now/CVE-2022-31215.md): In certain Goverlan products, the Windows Firewall is temporarily turned off upon a Goverlan agent update operation. (no CVSS)
- [CVE-2022-30551](https://cve.now/CVE-2022-30551.md): OPC UA Legacy Java Stack 2022-04-01 allows a remote attacker to cause a server to stop processing messages by sending crafted messages that (no CVSS)
- [CVE-2022-25224](https://cve.now/CVE-2022-25224.md): Proton v0.2.0 allows an attacker to create a malicious link inside a markdown file. (no CVSS, Proton)
- [CVE-2022-25227](https://cve.now/CVE-2022-25227.md): Thinfinity VNC v4.0.0.1 contains a Cross-Origin Resource Sharing (CORS) vulnerability which can allow an unprivileged remote attacker, if th (no CVSS, Thinfinity VNC)
- [CVE-2022-25229](https://cve.now/CVE-2022-25229.md): Popcorn Time 0.4.7 has a Stored XSS in the 'Movies API Server(s)' field via the 'settings' page. (no CVSS, Popcorn Time)
- [CVE-2022-1806](https://cve.now/CVE-2022-1806.md): Cross-site Scripting (XSS) - Reflected in rtxteam/rtx (CVSS 6.3, rtxteam/rtx)
- [CVE-2022-1754](https://cve.now/CVE-2022-1754.md): Integer Overflow or Wraparound in polonel/trudesk (CVSS 8.4, polonel/trudesk)
- [CVE-2021-34111](https://cve.now/CVE-2021-34111.md): Thecus 4800Eco was discovered to contain a command injection vulnerability via the username parameter in /adm/setmain.php. (no CVSS)
- [CVE-2022-28987](https://cve.now/CVE-2022-28987.md): Zoho ManageEngine ADSelfService Plus before 6202 allows attackers to perform username enumeration via a crafted POST request to /ServletAPI/ (no CVSS)
- [CVE-2022-28985](https://cve.now/CVE-2022-28985.md): A stored cross-site scripting (XSS) vulnerability in the addNewPost component of OrangeHRM v4.10.1 allows attackers to execute arbitrary web (CVSS 6.3)
- [CVE-2022-28965](https://cve.now/CVE-2022-28965.md): Multiple DLL hijacking vulnerabilities via the components instup.exe and wsc\_proxy.exe in Avast Premium Security before v21.11.2500 allows a (no CVSS)
- [CVE-2022-28964](https://cve.now/CVE-2022-28964.md): An arbitrary file write vulnerability in Avast Premium Security before v21.11.2500 (build 21.11.6809.528) allows attackers to cause a Denial (no CVSS)
- [CVE-2022-29181](https://cve.now/CVE-2022-29181.md): Improper Handling of Unexpected Data Type in Nokogiri (CVSS 8.2, sparklemotion nokogiri · nokogiri)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-05-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.