Skip to content
OpenAdvisories

Archive

5 May 2022

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-1388 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 1…

    KEV May 10, 2022
  • Unscored —
    CVE-2022-28080 Public exploit Scanner template EPSS 57%

    Royal Event Management System v1.0 was discovered to contain a SQL injection vulnerability via the todate parameter.

  • Unscored —
    CVE-2022-28079 Public exploit Scanner template EPSS 29%

    College Management System v1.0 was discovered to contain a SQL injection vulnerability via the course_code parameter.

  • Unscored —
    CVE-2021-42183 Public exploit

    MasaCMS 7.2.1 is affected by a path traversal vulnerability in /index.cfm/_api/asset/image/.

  • Unscored —
    CVE-2021-45783 Public exploit

    Bookeen Notea Firmware BK_R_1.0.5_20210608 is affected by a directory traversal vulnerability that allows an attacker t…

  • Critical 9.4
    CVE-2022-1592 Public exploit

    Server-Side Request Forgery in scout in clinical-genomics/scout

    Server-Side Request Forgery in scout in GitHub repository clinical-genomics/scout prior to v4.42. An attacker could make the application perform arbitrary requests to fishing steal cookie, request to private area, or lead to xss...

  • High 8.1
    CVE-2022-24903 Public exploit

    Buffer overflow in TCP syslog server (receiver) components in rsyslog

    Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used. This can result in a segfault or some other malfunction. As of our understanding, this vulnerability…