Skip to content
OpenAdvisories

Archive

9 May 2022

Vulnerabilities first published on this day (UTC), newest first.

← April 2022 2022 / May /9 June 2022 →
  1. 127
  2. 276
  3. 3109
  4. 480
  5. 5129
  6. 672
  7. 74
  8. 85
  9. 945
  10. 10196
  11. 11176
  12. 12159
  13. 1388
  14. 142
  15. 157
  16. 16101
  17. 17111
  18. 1878
  19. 1940
  20. 20107
  21. 218
  22. 221
  23. 2347
  24. 2481
  25. 2562
  26. 26157
  27. 2760
  28. 28 
  29. 295
  30. 3027
  31. 31115
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Unscored —
    CVE-2022-30524 Public exploit

    There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor mi…

    ipe xpdf Ubuntu Alpine
  • Unscored —
    CVE-2022-27412 Public exploit

    Explore CMS v1.0 was discovered to contain a SQL injection vulnerability via a /page.php?id= request.

  • Unscored —
    CVE-2022-27308 Public exploit

    A stored cross-site scripting (XSS) vulnerability in PHProjekt PhpSimplyGest v1.3.0 allows attackers to execute arbitra…

  • Unscored —
    CVE-2022-1104 Public exploit EPSS 56%

    Popup Maker < 1.16.5 - Admin+ Stored Cross-Site Scripting

    The Popup Maker WordPress plugin before 1.16.5 does not sanitise and escape some of its Popup settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed

    Web / CMS
  • Medium 6.8
    CVE-2022-1631 Public exploit

    Users Account Pre-Takeover or Users Account Takeover. in microweber/microweber

    Users Account Pre-Takeover or Users Account Takeover. in GitHub repository microweber/microweber prior to 1.2.15. Victim Account Take Over. Since, there is no email confirmation, an attacker can easily create an account in the application using the Victim’s E…

    microweber microweber/microweber microweber/microweber Packagist
  • Unscored —
    CVE-2022-30286 Public exploit EPSS 14%

    pyscriptjs (aka PyScript Demonstrator) in PyScript through 2022-05-04 allows a remote user to read Python source code.

  • Critical 9.8
    CVE-2022-30333 Exploited · Ransomware Public exploit EPSS 99%

    RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) …

    unrar-nonfree unrar-nonfree rar libclamunrar Debian Ubuntu
    KEV Aug 9, 2022