Skip to content
OpenAdvisories

Archive

27 May 2022

Vulnerabilities first published on this day (UTC), newest first.

← April 2022 2022 / May /27 June 2022 →
  1. 127
  2. 276
  3. 3109
  4. 480
  5. 5129
  6. 672
  7. 74
  8. 85
  9. 945
  10. 10196
  11. 11176
  12. 12159
  13. 1388
  14. 142
  15. 157
  16. 16101
  17. 17111
  18. 1878
  19. 1940
  20. 20107
  21. 218
  22. 221
  23. 2347
  24. 2481
  25. 2562
  26. 26157
  27. 2760
  28. 28 
  29. 295
  30. 3027
  31. 31115
All Critical High Medium Low Exploited only Public exploit

60 results · Feed

  • Critical 9.8
    CVE-2022-30506

    Code injection in MCMS

    An arbitrary file upload vulnerability was discovered in MCMS 5.2.7, allowing an attacker to execute arbitrary code through a crafted ZIP file.

    net.mingsoft:ms-mcms Maven
  • Unscored —
    CVE-2022-30503

    Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_set_number at src/njs_value.h.

  • Unscored —
    CVE-2022-29780

    Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_array_prototype_sort at src/njs…

  • Unscored —
    CVE-2022-29779

    Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_value_own_enumerate at src/njs_…

  • Unscored —
    CVE-2022-30425 EPSS 20%

    Tenda Technology Co.,Ltd HG6 3.3.0-210926 was discovered to contain a command injection vulnerability via the pingAddr …

  • Unscored —
    CVE-2022-29735

    Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 allows attackers to execute arbitrary commands via a cra…

  • Unscored —
    CVE-2022-29734

    A cross-site scripting (XSS) vulnerability in ICT Protege GX/WX v2.08 allows authenticated attackers to execute arbitra…

  • Unscored —
    CVE-2022-29733

    Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to transmit and store sensitive informati…

  • Unscored —
    CVE-2022-29732

    Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 was discovered to contain a cross-site scripting (XSS) v…

  • Unscored —
    CVE-2022-29731

    An access control issue in ICT Protege GX/WX 2.08 allows attackers to leak SHA1 password hashes of other users.

  • Unscored —
    CVE-2022-29730

    USR IOT 4G LTE Industrial Cellular VPN Router v1.0.36 was discovered to contain hard-coded credentials for its highest …

  • Unscored —
    CVE-2022-29729

    Verizon 4G LTE Network Extender GA4.38 - V0.4.038.2131 utilizes a weak default admin password generation algorithm whic…

  • Unscored —
    CVE-2022-30510 Public exploit

    School Dormitory Management System 1.0 is vulnerable to SQL Injection via reports/daily_collection_report.php:59.

  • Low 3.6
    CVE-2022-1908

    Buffer Over-read in bfabiszewski/libmobi

    Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.

    bfabiszewski bfabiszewski/libmobi libmobi libmobi Debian Ubuntu
  • Critical 9.0
    CVE-2022-1909

    Cross-site Scripting (XSS) - Stored in causefx/organizr

    Cross-site Scripting (XSS) - Stored in GitHub repository causefx/organizr prior to 2.1.2200.

    causefx causefx/organizr
  • Low 3.6
    CVE-2022-1907

    Buffer Over-read in bfabiszewski/libmobi

    Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.

    bfabiszewski bfabiszewski/libmobi libmobi libmobi Debian Ubuntu
  • High 7.8
    CVE-2022-1898

    Use After Free in vim/vim

    Use After Free in GitHub repository vim/vim prior to 8.2.

    vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine
  • High 7.8
    CVE-2022-1897

    Out-of-bounds Write in vim/vim

    Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.

    vim vim/vim vim vim Debian Ubuntu
  • Unscored —
    CVE-2022-31783

    Liblouis 3.21.0 has an out-of-bounds write in compileRule in compileTranslationTable.c, as demonstrated by lou_trace.

    liblouis liblouis Debian Ubuntu
  • Unscored —
    CVE-2022-30521 EPSS 15%

    The LAN-side Web-Configuration Interface has Stack-based Buffer Overflow vulnerability in the D-Link Wi-Fi router firmw…