Archive
5 May 2022
Vulnerabilities first published on this day (UTC), newest first.
7 results · Clear filters · Feed
-
Critical 9.8
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 1…
KEV May 10, 2022 -
Unscored —
Royal Event Management System v1.0 was discovered to contain a SQL injection vulnerability via the todate parameter.
-
Unscored —
College Management System v1.0 was discovered to contain a SQL injection vulnerability via the course_code parameter.
-
Unscored —CVE-2021-42183 Public exploit
MasaCMS 7.2.1 is affected by a path traversal vulnerability in /index.cfm/_api/asset/image/.
-
Unscored —CVE-2021-45783 Public exploit
Bookeen Notea Firmware BK_R_1.0.5_20210608 is affected by a directory traversal vulnerability that allows an attacker t…
-
Critical 9.4CVE-2022-1592 Public exploit
Server-Side Request Forgery in scout in clinical-genomics/scout
Server-Side Request Forgery in scout in GitHub repository clinical-genomics/scout prior to v4.42. An attacker could make the application perform arbitrary requests to fishing steal cookie, request to private area, or lead to xss...
-
High 8.1CVE-2022-24903 Public exploit
Buffer overflow in TCP syslog server (receiver) components in rsyslog
Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used. This can result in a segfault or some other malfunction. As of our understanding, this vulnerability…