# CVEs published 2022-05-24

80 CVEs were published on May 24, 2022: 2 critical, 12 high. Days are UTC.

- [CVE-2022-29361](https://cve.now/CVE-2022-29361.md): Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to perform HTTP Request Smuggling using a crafted HT (no CVSS, werkzeug)
- [CVE-2022-29710](https://cve.now/CVE-2022-29710.md): A cross-site scripting (XSS) vulnerability in uploadConfirm.php of LimeSurvey v5.3.9 and below allows attackers to execute arbitrary web scr (no CVSS)
- [CVE-2022-29359](https://cve.now/CVE-2022-29359.md): A stored cross-site scripting (XSS) vulnerability in /scas/?page=clubs/application\_form&id=7 of School Club Application System v0.1 allows a (no CVSS)
- [CVE-2022-29358](https://cve.now/CVE-2022-29358.md): epub2txt2 v2.04 was discovered to contain an integer overflow via the function bug in \_parse\_special\_tag at sxmlc.c. (no CVSS)
- [CVE-2022-29349](https://cve.now/CVE-2022-29349.md): kkFileView v4.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the url parameter at /controller/OnlinePreviewCon (no CVSS)
- [CVE-2022-22497](https://cve.now/CVE-2022-22497.md): IBM Aspera Faspex 4.4.1 and 5.0.0 could allow unauthorized access due to an incorrectly computed security token. (CVSS 7.5, IBM Aspera Faspex)
- [CVE-2022-29337](https://cve.now/CVE-2022-29337.md): C-DATA FD702XW-X-R430 v2.1.13\_X001 was discovered to contain a command injection vulnerability via the va\_cmd parameter in formlanipv6. (no CVSS)
- [CVE-2022-29334](https://cve.now/CVE-2022-29334.md): An issue in H v1.0 allows attackers to bypass authentication via a session replay attack. (no CVSS)
- [CVE-2022-29333](https://cve.now/CVE-2022-29333.md): A vulnerability in CyberLink Power Director v14 allows attackers to escalate privileges via a crafted .exe file. (no CVSS)
- [CVE-2021-42614](https://cve.now/CVE-2021-42614.md): A use after free in info\_width\_internal in bk\_info.c in Halibut 1.2 allows an attacker to cause a segmentation fault or possibly have unspec (no CVSS)
- [CVE-2021-3597](https://cve.now/CVE-2021-3597.md): A flaw was found in undertow. (no CVSS, undertow · io.undertow:undertow-core)
- [CVE-2021-3629](https://cve.now/CVE-2021-3629.md): A flaw was found in Undertow. (no CVSS, undertow · io.undertow:undertow-core)
- [CVE-2021-3717](https://cve.now/CVE-2021-3717.md): A flaw was found in Wildfly. (no CVSS, wildfly · org.wildfly.core:wildfly-core-parent)
- [CVE-2021-42613](https://cve.now/CVE-2021-42613.md): A double free in cleanup\_index in index.c in Halibut 1.2 allows an attacker to cause a denial of service or possibly have other unspecified (no CVSS)
- [CVE-2022-22977](https://cve.now/CVE-2022-22977.md): VMware Tools for Windows(12.0.0, 11.x.y and 10.x.y) contains an XML External Entity (XXE) vulnerability. (CVSS 7.1, VMware Tools for Windows)
- [CVE-2021-42612](https://cve.now/CVE-2021-42612.md): A use after free in cleanup\_index in index.c in Halibut 1.2 allows an attacker to cause a segmentation fault or possibly have other unspecif (no CVSS)
- [CVE-2022-23050](https://cve.now/CVE-2022-23050.md): ManageEngine AppManager15 (Build No:15510) allows an authenticated admin user to upload a DLL file to perform a DLL hijack attack inside the (no CVSS, ManageEngine AppManager15)
- [CVE-2021-32969](https://cve.now/CVE-2021-32969.md): Delta Electronics DIAScreen - Type Confusion, Out-of-bounds Write (CVSS 7.8, Delta Electronics DIAScreen)
- [CVE-2021-32965](https://cve.now/CVE-2021-32965.md): Delta Electronics DIAScreen - Type Confusion, Out-of-bounds Write (CVSS 7.8, Delta Electronics DIAScreen)
- [CVE-2021-32962](https://cve.now/CVE-2021-32962.md): Claroty Secure Remote Access Site - Authentication Bypass Using an Alternate Path or Channel (CVSS 8.2, AGG Software Web Server)
- [CVE-2021-32964](https://cve.now/CVE-2021-32964.md): Claroty Secure Remote Access Site - Authentication Bypass Using an Alternate Path or Channel (CVSS 6.5, AGG Software Web Server)
- [CVE-2022-1669](https://cve.now/CVE-2022-1669.md): Circutor COMPACT DC-S BASIC (CVSS 6.8, CIRCUTOR COMPACT DC-S BASIC)
- [CVE-2022-22495](https://cve.now/CVE-2022-22495.md): IBM i 7.3, 7.4, and 7.5 is vulnerable to SQL injection. (CVSS 6.3, IBM i)
- [CVE-2022-22309](https://cve.now/CVE-2022-22309.md): The POWER systems FSP is vulnerable to unauthenticated logins through the serial port/TTY interface. (CVSS 6.8, IBM Power System S922 Server)
- [CVE-2020-4926](https://cve.now/CVE-2020-4926.md): A vulnerability in the Spectrum Scale 5.1 core component and IBM Elastic Storage System 6.1 could allow unauthorized access to user data or (CVSS 5.7, IBM Spectrum Scale · IBM Elastic Storage System)
- [CVE-2021-4230](https://cve.now/CVE-2021-4230.md): Airfield Online MySQL Backup improper authentication (CVSS 3.7, Airfield Online)
- [CVE-2021-4229](https://cve.now/CVE-2021-4229.md): ua-parser-js Crypto Mining backdoor (CVSS 5.0, ua-parser-js)
- [CVE-2014-125001](https://cve.now/CVE-2014-125001.md): Cardo Systems Scala Rider Q3 Cardo-Updater api privileges management (CVSS 8.1, Cardo Systems Scala Rider Q3)
- [CVE-2013-10004](https://cve.now/CVE-2013-10004.md): Telecommunication Software SAMwin Contact Center Suite Password SAMwinLIBVB.dll passwordScramble improper authentication (CVSS 6.5, Telecommunication Software SAMwin Contact Center Suite)
- [CVE-2013-10003](https://cve.now/CVE-2013-10003.md): Telecommunication Software SAMwin Contact Center Suite Database SAMwinLIBVB.dll getCurrentDBVersion sql injection (CVSS 6.5, Telecommunication Software SAMwin Contact Center Suite)
- [CVE-2013-10002](https://cve.now/CVE-2013-10002.md): Telecommunication Software SAMwin Contact Center Suite Credential SAMwinLIBVB.dll getCurrentDBVersion hard-coded credentials (CVSS 6.5, Telecommunication Software SAMwin Contact Center Suite)
- [CVE-2022-29249](https://cve.now/CVE-2022-29249.md): Reversible One-Way Hash and Use of a Broken or Risky Cryptographic Algorithm in io.github.javaezlib.JavaEZ (CVSS 7.5, JavaEZLib JavaEZ · io.github.javaezlib:JavaEZ)
- [CVE-2022-29246](https://cve.now/CVE-2022-29246.md): Potential buffer overflow in function DFU upload in Azure RTOS USBX (CVSS 9.8, azure-rtos usbx)
- [CVE-2022-29242](https://cve.now/CVE-2022-29242.md): Buffer Overflow on creating key transport blob in GOST Engine (CVSS 5.9, gost-engine engine)
- [CVE-2022-31261](https://cve.now/CVE-2022-31261.md): An XXE issue was discovered in Morpheus through 5.2.16 and 5.4.x through 5.4.4. (no CVSS)
- [CVE-2022-29237](https://cve.now/CVE-2022-29237.md): Limited Authentication Bypass for Media Files in Opencast (CVSS 5.4, opencast · org.opencastproject:opencast-ingest-service-impl)
- [CVE-2021-44975](https://cve.now/CVE-2021-44975.md): radareorg radare2 5.5.2 is vulnerable to Buffer Overflow via /libr/core/anal\_objc.c mach-o parser. (no CVSS)
- [CVE-2022-22306](https://cve.now/CVE-2022-22306.md): An improper certificate validation vulnerability \[CWE-295\] in FortiOS 6.0.0 through 6.0.14, 6.2.0 through 6.2.10, 6.4.0 through 6.4.8, 7.0.0 (CVSS 5.4, Fortinet FortiOS)
- [CVE-2021-45914](https://cve.now/CVE-2021-45914.md): In LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a POST request. (no CVSS)
- [CVE-2021-45915](https://cve.now/CVE-2021-45915.md): In LuxSoft LuxCal Web Calendar before 5.2.0, an unauthenticated attacker can manipulate a cookie value. (no CVSS)
- [CVE-2022-29223](https://cve.now/CVE-2022-29223.md): Buffer overflow on HUB descriptor in Azure RTOS USBX (CVSS 7.5, azure-rtos usbx)
- [CVE-2022-29567](https://cve.now/CVE-2022-29567.md): Possible information disclosure inside TreeGrid component with default data provider (CVSS 5.7, vaadin · vaadin-grid-flow +2)
- [CVE-2022-29219](https://cve.now/CVE-2022-29219.md): Integer Overflow in Lodestar (CVSS 7.5, ChainSafe lodestar · @chainsafe/lodestar)
- [CVE-2022-29217](https://cve.now/CVE-2022-29217.md): Key confusion through non-blocklisted public key formats in PyJWT (CVSS 7.4, jpadilla pyjwt · pyjwt)
- [CVE-2022-30839](https://cve.now/CVE-2022-30839.md): Room-rent-portal-site v1.0 is vulnerable to Cross Site Scripting (XSS) via /rrps/classes/Master.php?f=save\_category, vehicle\_name. (no CVSS)
- [CVE-2022-30843](https://cve.now/CVE-2022-30843.md): Room-rent-portal-site v1.0 is vulnerable to SQL Injection via /rrps/classes/Master.php?f=delete\_category, id. (no CVSS)
- [CVE-2022-30838](https://cve.now/CVE-2022-30838.md): Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/classes/Master.php?f=update\_application\_status (no CVSS)
- [CVE-2022-30842](https://cve.now/CVE-2022-30842.md): Covid-19 Travel Pass Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via /ctpms/classes/Users.php?f=save, firstname. (no CVSS)
- [CVE-2022-30837](https://cve.now/CVE-2022-30837.md): Toll-tax-management-system v1.0 is vulnerable to Cross Site Scripting (XSS) via /ttms/classes/Master.php?f=save\_recipient, vehicle\_name. (no CVSS)
- [CVE-2022-30461](https://cve.now/CVE-2022-30461.md): Water-billing-management-system v1.0 is vulnerable to SQL Injection via /wbms/classes/Master.php?f=delete\_client, id (no CVSS)
- [CVE-2022-30462](https://cve.now/CVE-2022-30462.md): Water-billing-management-system v1.0 is affected by: Cross Site Scripting (XSS) via /wbms/classes/Users.php?f=save, firstname. (no CVSS)
- [CVE-2022-30459](https://cve.now/CVE-2022-30459.md): ChatBot App with Suggestion in PHP/OOP v1.0 is vulnerable to SQL Injection via /simple\_chat\_bot/classes/Master.php?f=delete\_response, id. (no CVSS)
- [CVE-2022-30464](https://cve.now/CVE-2022-30464.md): ChatBot App with Suggestion in PHP/OOP v1.0 is vulnerable to Cross Site Scripting (XSS) via /simple\_chat\_bot/classes/Master.php?f=save\_respo (no CVSS)
- [CVE-2022-30463](https://cve.now/CVE-2022-30463.md): Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete\_product. (no CVSS)
- [CVE-2022-30458](https://cve.now/CVE-2022-30458.md): Automotive Shop Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via /asms/classes/Master.php?f=save\_product, name. (no CVSS)
- [CVE-2022-30460](https://cve.now/CVE-2022-30460.md): Simple Social Networking Site v1.0 is vulnerable to Cross Site Scripting (XSS) via /sns/classes/Users.php?f=save, firstname. (no CVSS)
- [CVE-2021-42656](https://cve.now/CVE-2021-42656.md): SiteServer CMS V6.15.51 is affected by a Cross Site Scripting (XSS) vulnerability. (no CVSS, SSCMS)
- [CVE-2022-30455](https://cve.now/CVE-2022-30455.md): Badminton Center Management System 1.0 is vulnerable to SQL Injection via /bcms/classes/Master.php?f=delete\_court\_rental, id. (no CVSS)
- [CVE-2022-30456](https://cve.now/CVE-2022-30456.md): Badminton Center Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via /bcms/classes/Master.php?f=save\_court\_rental. (no CVSS)
- [CVE-2021-42655](https://cve.now/CVE-2021-42655.md): SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability. (no CVSS, SSCMS)
- [CVE-2022-30454](https://cve.now/CVE-2022-30454.md): Merchandise Online Store 1.0 is vulnerable to SQL Injection via /vloggers\_merch/classes/Master.php?f=delete\_product. (no CVSS)
- [CVE-2021-42654](https://cve.now/CVE-2021-42654.md): SiteServer CMS \< V5.1 is affected by an unrestricted upload of a file with dangerous type (getshell), which could be used to execute arbitra (no CVSS)
- [CVE-2022-1850](https://cve.now/CVE-2022-1850.md): Path Traversal in filegator/filegator (CVSS 5.4, filegator/filegator)
- [CVE-2022-1849](https://cve.now/CVE-2022-1849.md): Session Fixation in filegator/filegator (CVSS 4.3, filegator/filegator)
- [CVE-2021-42659](https://cve.now/CVE-2021-42659.md): There is a buffer overflow vulnerability in the Web server httpd of the router in Tenda router devices such as Tenda AC9 V1.0 V15.03.02.19(6 (no CVSS)
- [CVE-2022-1848](https://cve.now/CVE-2022-1848.md): Business Logic Errors in erudika/para (CVSS 9.0, erudika/para · com.erudika:para-core)
- [CVE-2022-1840](https://cve.now/CVE-2022-1840.md): Home Clean Services Management System cross site scripting (CVSS 2.4, Home Clean Services Management System)
- [CVE-2022-1839](https://cve.now/CVE-2022-1839.md): Home Clean Services Management System login.php sql injection (CVSS 6.3, Home Clean Services Management System)
- [CVE-2022-1838](https://cve.now/CVE-2022-1838.md): Home Clean Services Management System login.php sql injection (CVSS 4.7, Home Clean Services Management System)
- [CVE-2022-1837](https://cve.now/CVE-2022-1837.md): Home Clean Services Management System unrestricted upload (CVSS 4.7, Home Clean Services Management System)
- [CVE-2022-1819](https://cve.now/CVE-2022-1819.md): Student Information System Student Roll Module cross site scripting (CVSS 2.4, Student Information System)
- [CVE-2022-26532](https://cve.now/CVE-2022-26532.md): A argument injection vulnerability in the 'packet-trace' CLI command of Zyxel USG/ZyWALL series firmware versions 4.09 through 4.71, USG FLE (CVSS 7.8, Zyxel USG/ZyWALL series firmware · Zyxel USG FLEX series… +8)
- [CVE-2022-31263](https://cve.now/CVE-2022-31263.md): app/models/user.rb in Mastodon before 3.5.0 allows a bypass of e-mail restrictions. (no CVSS)
- [CVE-2022-0910](https://cve.now/CVE-2022-0910.md): A downgrade from two-factor authentication to one-factor authentication vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware (CVSS 6.5, Zyxel USG/ZyWALL series firmware · Zyxel USG FLEX series… +2)
- [CVE-2022-29309](https://cve.now/CVE-2022-29309.md): mysiteforme v2.2.1 was discovered to contain a Server-Side Request Forgery. (no CVSS)
- [CVE-2022-0734](https://cve.now/CVE-2022-0734.md): A cross-site scripting vulnerability was identified in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.35 through 4.70, USG F (CVSS 5.8, Zyxel USG/ZyWALL series firmware · Zyxel USG FLEX series… +2)
- [CVE-2022-29305](https://cve.now/CVE-2022-29305.md): imgurl v2.31 was discovered to contain a Blind SQL injection vulnerability via /upload/localhost. (no CVSS, helloxz/imgurl)
- [CVE-2022-29377](https://cve.now/CVE-2022-29377.md): Totolink A3600R V4.1.2cu.5182\_B20201102 was discovered to contain a stacker overflow in the fread function at infostat.cgi. (no CVSS)
- [CVE-2022-26531](https://cve.now/CVE-2022-26531.md): Multiple improper input validation flaws were identified in some CLI commands of Zyxel USG/ZyWALL series firmware versions 4.09 through 4.71 (CVSS 6.1, Zyxel USG/ZyWALL series firmware · Zyxel USG FLEX series… +8)
- [CVE-2022-29221](https://cve.now/CVE-2022-29221.md): PHP Code Injection by malicious block or filename in Smarty (CVSS 8.8, smarty-php smarty · smarty/smarty)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-05-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.