12 May 2022

9 results · Clear filters · Feed

• Unscored —
  CVE-2022-27134 Public exploit

  EOSIO batdappboomx v327c04cf has an Access-control vulnerability in the `transfer` function of the smart contract which…

  May 12, 2022
• Medium 6.5
  CVE-2022-22971 Public exploit

  Allocation of Resources Without Limits or Throttling in Spring Framework

  In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack by an authenticated user.

  libspring-java libspring-java jenkins org.springframework:spring-messaging Debian Ubuntu Alpine Maven
  May 12, 2022
• High 7.5
  CVE-2022-22970 Public exploit

  Denial of service in Spring Framework

  In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data binding to set a MultipartFile or javax.servlet.Part to a field in a model object.

  libspring-java libspring-java jenkins org.springframework:spring-beans Debian Ubuntu Alpine Maven
  May 12, 2022
• High 7.8
  CVE-2021-26258 Public exploit

  Improper access control for the Intel(R) Killer(TM) Control Center software before version 2.4.3337.0 may allow an auth…

  May 12, 2022
• Critical 9.8
  CVE-2022-29303 Exploited Public exploit Scanner template EPSS 98%

  SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.

  May 12, 2022

  KEV Jul 13, 2023
• Unscored —
  CVE-2022-29298 Public exploit Scanner template EPSS 47%

  SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal.

  May 12, 2022
• Critical 9.8
  CVE-2022-30525 Exploited Public exploit Scanner template EPSS 100%

  A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pa…

  Zyxel ATP series firmware VPN series Firmware USG FLEX 50(W) firmware Network devices
  May 12, 2022

  KEV May 16, 2022
• High 7.5
  CVE-2022-29885 Public exploit EPSS 73%

  EncryptInterceptor does not provide complete protection on insecure networks

  The documentation of Apache Tomcat 10.1.0-M1 to 10.1.0-M14, 10.0.0-M1 to 10.0.20, 9.0.13 to 9.0.62 and 8.5.38 to 8.5.78 for the EncryptInterceptor incorrectly stated it enabled Tomcat clustering to run over an untrusted network. This was not correct. While th…

  Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat9 Debian Ubuntu Maven
  May 12, 2022
• Unscored —
  CVE-2022-30594 Public exploit

  The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass in…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  May 12, 2022