Skip to content
OpenAdvisories

Archive

2 May 2022

Vulnerabilities first published on this day (UTC), newest first.

← April 2022 2022 / May /2 June 2022 →
  1. 127
  2. 276
  3. 3109
  4. 480
  5. 5129
  6. 672
  7. 74
  8. 85
  9. 945
  10. 10196
  11. 11176
  12. 12159
  13. 1388
  14. 142
  15. 157
  16. 16101
  17. 17111
  18. 1878
  19. 1940
  20. 20107
  21. 218
  22. 221
  23. 2347
  24. 2481
  25. 2562
  26. 26157
  27. 2760
  28. 28 
  29. 295
  30. 3027
  31. 31115
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.5
    CVE-2021-42528

    XMP-Toolkit Null Pointer Dereference Application denial-of-service

    XMP Toolkit 2021.07 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the cu…

    Adobe XMP Toolkit exempi exempi Debian Ubuntu
  • Medium 5.2
    CVE-2021-41810

    Script injection in M-Files Admin

    Script injection in M-Files Admin versions before 22.2.11051.0, allows executing stored script in admin tool. M-Files Admin tool allows storing configuration data with script which may then get run by another vault administrator. Requires vault admin level au…

    M-Files M-Files Server
  • Medium 6.5
    CVE-2022-29444

    WordPress Breeze plugin <= 2.0.2 - Plugin Settings Change leading to Cross-Site Scripting (XSS) vulnerability

    Plugin Settings Change leading to Cross-Site Scripting (XSS) vulnerability in Cloudways Breeze plugin <= 2.0.2 on WordPress allows users with a subscriber or higher user role to execute any of the wp_ajax_* actions in the class Breeze_Configuration which incl…

    Cloudways Breeze (WordPress plugin) Web / CMS
  • Medium 4.0
    CVE-2022-26326

    Potential open redirection vulnerability in NetIQ Access Manager versions prior to version 5.0.2

    Potential open redirection vulnerability when URL is crafted in specific format in NetIQ Access Manager prior to 5.0.2

    Micro Focus NetIQ Access Manager
  • Medium 5.4
    CVE-2022-23065

    Vendure - XSS via SVG File Upload

    In Vendure versions 0.1.0-alpha.2 to 1.5.1 are affected by Stored XSS vulnerability, where an attacker having catalog permission can upload a SVG file that contains malicious JavaScript into the “Assets” tab. The uploaded file will affect administrators as we…

    vendure-ecommerce vendure
  • Medium 5.4
    CVE-2021-4200

    Write access to the Catalog for any user when restricted-admin role is enabled

    A Improper Privilege Management vulnerability in SUSE Rancher allows write access to the Catalog for any user when restricted-admin role is enabled. This issue affects: SUSE Rancher Rancher versions prior to 2.5.13; Rancher versions prior to 2.6.4.

    SUSE Rancher github.com/rancher/rancher Go