Skip to content
OpenAdvisories

Archive

13 May 2022

Vulnerabilities first published on this day (UTC), newest first.

← April 2022 2022 / May /13 June 2022 →
  1. 127
  2. 276
  3. 3109
  4. 480
  5. 5129
  6. 672
  7. 74
  8. 85
  9. 945
  10. 10196
  11. 11176
  12. 12159
  13. 1388
  14. 142
  15. 157
  16. 16101
  17. 17111
  18. 1878
  19. 1940
  20. 20107
  21. 218
  22. 221
  23. 2347
  24. 2481
  25. 2562
  26. 26157
  27. 2760
  28. 28 
  29. 295
  30. 3027
  31. 31115
All Critical High Medium Low Exploited only Public exploit

88 results · Feed

  • Unscored —
    CVE-2022-30404

    College Management System v1.0 is vulnerable to SQL Injection via /College_Management_System/admin/display-teacher.php?…

  • Unscored —
    CVE-2022-30381

    Merchandise Online Store v1.0 is vulnerable to file deletion via /vloggers_merch/classes/Master.php?f=delete_img.

  • Unscored —
    CVE-2022-30384

    Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_inventory.

  • Unscored —
    CVE-2022-30385

    Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_order.

  • Medium 5.5
    CVE-2022-28830

    Adobe FrameMaker Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

    Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Ex…

    Adobe FrameMaker
  • High 7.8
    CVE-2022-28829

    Adobe FrameMaker Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

    Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction…

    Adobe FrameMaker
  • Unscored —
    CVE-2022-25591

    BlogEngine.NET v3.3.8.0 was discovered to contain an arbitrary file deletion vulnerability which allows attackers to de…

  • High 7.8
    CVE-2022-28828

    Adobe FrameMaker PDF File Parsing Out-Of-Bounds Write Code Execution Vulnerability

    Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction…

    Adobe FrameMaker
  • High 7.8
    CVE-2022-28827

    Adobe FrameMaker SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

    Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction…

    Adobe FrameMaker
  • High 7.8
    CVE-2022-28826

    Adobe FrameMaker Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

    Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction…

    Adobe FrameMaker
  • High 7.8
    CVE-2022-28825

    Adobe FrameMaker Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

    Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction…

    Adobe FrameMaker
  • High 7.8
    CVE-2022-28824

    Adobe FrameMaker Font Parsing Use-After-Free Remote Code Execution Vulnerability

    Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by a Use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in th…

    Adobe FrameMaker
  • Unscored —
    CVE-2022-30386

    Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_featured.

  • High 7.8
    CVE-2022-28823

    Adobe FrameMaker Font Parsing Use-After-Free Remote Code Execution Vulnerability

    Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by a Use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in th…

    Adobe FrameMaker
  • High 7.8
    CVE-2022-28822

    Adobe FrameMaker Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

    Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction…

    Adobe FrameMaker
  • High 7.8
    CVE-2022-28821

    Adobe FrameMaker Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

    Adobe Framemaker versions 2029u8 (and earlier) and 2020u4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction…

    Adobe FrameMaker
  • Unscored —
    CVE-2022-30387

    Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=pay_order.

  • Unscored —
    CVE-2022-27247

    onlinetolls in cdSoft Onlinetools-Smart Winhotel.MX 2021 allows an attacker to download sensitive information about any…

  • High 8.6
    CVE-2021-22275

    Denial of service vulnerability on Automation Runtime webserver

    Buffer Overflow vulnerability in B&R Automation Runtime webserver allows an unauthenticated network-based attacker to stop the cyclic program on the device and cause a denial of service.

    B&R Automation Runtime webserver
  • Unscored —
    CVE-2022-30391

    Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_category.

  • Unscored —
    CVE-2022-30392

    Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_sub_catego…

  • Unscored —
    CVE-2022-30393

    Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=product/manage_product&id=.

  • Unscored —
    CVE-2022-30395

    Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/classes/Master.php?f=delete_cart.

  • Unscored —
    CVE-2022-30396

    Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=inventory/manage_inventory…

  • Unscored —
    CVE-2022-30398

    Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=orders/view_order&id=.

  • Unscored —
    CVE-2022-30399

    Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=maintenance/manage_categor…

  • Unscored —
    CVE-2022-30400

    Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/orders/view_order.php?view=user&…

  • Unscored —
    CVE-2022-30401

    Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/?p=view_product&id=.

  • Unscored —
    CVE-2022-30402

    Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/admin/?page=maintenance/manage_sub_cat…

  • Unscored —
    CVE-2022-30403

    Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggers_merch/?p=products&c=.

  • Unscored —
    CVE-2022-30375

    Sourcecodester Simple Social Networking Site v1.0 is vulnerable to file deletion via /sns/classes/Master.php?f=delete_i…

  • Unscored —
    CVE-2022-30376

    Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/members/view_member.php…

  • Unscored —
    CVE-2022-30378

    Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/?page=posts/view_post&i…

  • Unscored —
    CVE-2022-30379

    Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/?page=user/manage_user&…

  • Unscored —
    CVE-2022-30367

    Air Cargo Management System v1.0 is vulnerable to file deletion via /acms/classes/Master.php?f=delete_img.

  • Unscored —
    CVE-2022-29854

    A vulnerability in Mitel 6900 Series IP (MiNet) phones excluding 6970, versions 1.8 (1.8.0.12) and earlier, could allow…

  • Unscored —
    CVE-2022-30489 Public exploit Scanner template

    WAVLINK WN535 G3 was discovered to contain a cross-site scripting (XSS) vulnerability via the hostname parameter at /cg…

  • Unscored —
    CVE-2022-29383 Public exploit Scanner template EPSS 49%

    NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via US…

  • Unscored —
    CVE-2022-30370

    Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/classes/Master.php?f=delete_cargo_type.

  • Unscored —
    CVE-2022-30371

    Air Cargo Management System 1.0 is vulnerable to SQL Injection via /acms/admin/cargo_types/view_cargo_type.php?id=.