May 2022

11 results · Clear filters · Feed

• Critical 9.8
  CVE-2022-21831 Public exploit

  Possible code injection vulnerability in Rails / Active Storage

  A code injection vulnerability exists in the Active Storage >= v5.2.0 that could allow an attacker to execute code via image_processing arguments.

  rails rails activestorage Debian Ubuntu RubyGems
  May 26, 2022
• Critical 9.8
  CVE-2022-22978 Public exploit EPSS 12%

  Authorization bypass in Spring Security

  In spring security versions prior to 5.4.11+, 5.5.7+ , 5.6.4+ and older unsupported versions, RegexRequestMatcher can easily be misconfigured to be bypassed on some servlet containers. Applications using RegexRequestMatcher with `.` in the regular expression …

  libspring-java org.springframework.security:spring-security-core org.springframework.security:spring-security-web Ubuntu Maven
  May 19, 2022
• Critical 9.8
  CVE-2022-30600 Public exploit

  Incorrect Calculation in moodle

  A flaw was found in moodle where logic used to count failed login attempts could result in the account lockout threshold being bypassed.

  moodle/moodle moodle Web / CMS Ubuntu Packagist
  May 18, 2022
• Critical 9.8
  CVE-2022-29303 Exploited Public exploit Scanner template EPSS 98%

  SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.

  May 12, 2022

  KEV Jul 13, 2023
• Critical 9.8
  CVE-2022-30525 Exploited Public exploit Scanner template EPSS 100%

  A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Pa…

  Zyxel ATP series firmware VPN series Firmware USG FLEX 50(W) firmware Network devices
  May 12, 2022

  KEV May 16, 2022
• Critical 9.8
  CVE-2022-26937 Public exploit EPSS 76%

  Windows Network File System Remote Code Execution Vulnerability

  Windows Network File System Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  May 10, 2022
• Critical 9.8
  CVE-2022-30333 Exploited · Ransomware Public exploit EPSS 99%

  RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) …

  unrar-nonfree unrar-nonfree rar libclamunrar Debian Ubuntu
  May 9, 2022

  KEV Aug 9, 2022
• Critical 9.8
  CVE-2022-1388 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 1…

  F5 BIG-IP Network devices
  May 5, 2022

  KEV May 10, 2022
• Critical 9.4
  CVE-2022-1592 Public exploit

  Server-Side Request Forgery in scout in clinical-genomics/scout

  Server-Side Request Forgery in scout in GitHub repository clinical-genomics/scout prior to v4.42. An attacker could make the application perform arbitrary requests to fishing steal cookie, request to private area, or lead to xss...

  Clinical-Genomics clinical-genomics/scout scout-browser PyPI
  May 5, 2022
• Critical 9.8
  CVE-2022-1292 Public exploit EPSS 83%

  The c_rehash script allows command injection

  The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitra…

  OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux
  May 3, 2022
• Critical 9.8
  CVE-2022-28118 Public exploit

  RCE in SiteServer CMS

  SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in.

  siteserver npm
  May 3, 2022