CVEs published May 21, 2022
8 CVEs were published on May 21, 2022: 1 critical, 2 high.
- Published
- 8
- Critical
- 1
- High
- 2
- Medium
- 1
- Low
- 0
- Unrated
- 4
- Now in CISA KEV
- 0
- Fix available
- 7
Most affected products
- com.gitblit:gitblit
- 2
- github.com/beego/beego/v2 · github.com/beego/beego +1
- 1
- kaidomc-pm-pl RegionProtect
- 1
- pion dtls · github.com/pion/dtls +1
- 1
- polonel/trudesk
- 1
- radareorg/radare2
- 1
- solana_rbpf
- 1
Critical 1
High 2
Medium, low and unrated 5
- CVE-2022-31267Gitblit 1.9.2 allows privilege escalation via the Config User Service: a control character can be placed in a profile data field, such as ancom.gitblit:gitblit
- CVE-2022-31268A Path Traversal vulnerability in Gitblit 1.9.3 can lead to reading website files via /resources//../ (e.g., followed by a WEB-INF or META-Icom.gitblit:gitblit
- CVE-2022-31264Solana solana_rbpf before 0.2.29 has an addition integer overflow via invalid ELF program headers.solana_rbpf
- CVE-2022-29222Improper Certificate Validation in Pion DTLSpion dtls · github.com/pion/dtls +1
- CVE-2022-31259The route lookup process in beego before 1.12.9 and 2.x before 2.0.3 allows attackers to bypass access control.github.com/beego/beego/v2 · github.com/beego/beego +1