Skip to content
OpenAdvisories

Archive

May 2022

Vulnerabilities first published in this month (UTC), newest first.

← April 2022 2022 / May June 2022 →
  1. 127
  2. 276
  3. 3109
  4. 480
  5. 5129
  6. 672
  7. 74
  8. 85
  9. 945
  10. 10196
  11. 11176
  12. 12159
  13. 1388
  14. 142
  15. 157
  16. 16101
  17. 17111
  18. 1878
  19. 1940
  20. 20107
  21. 218
  22. 221
  23. 2347
  24. 2481
  25. 2562
  26. 26157
  27. 2760
  28. 28 
  29. 295
  30. 3027
  31. 31115
All Critical High Medium Low Exploited only Public exploit

49 results · Clear filters · Feed

  • Low 2.9
    CVE-2022-24902

    Memory issue in playing videos

    TkVideoplayer is a simple library to play video files in tkinter. Uncontrolled memory consumption in versions of TKVideoplayer prior to 2.0.0 can theoretically lead to performance degradation. There are no known workarounds. This issue has been patched and us…

    PaulleDemon tkVideoPlayer tkvideoplayer PyPI
  • Low 3.1
    CVE-2022-1389

    On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP (fixed in 17.0.0), a cross-site requ…

    F5 BIG-IP Network devices
  • Low 2.7
    CVE-2022-22433

    IBM Robotic Process Automation 21.0.1 and 21.0.2 is vulnerable to External Service Interaction attack, caused by improp…

    IBM Robotic Process Automation
  • Low 2.0
    CVE-2021-39020

    IBM Guardium Data Encryption (GDE) 4.0.0.7 and lower stores sensitive information in URL parameters. This may lead to i…

    IBM Guardium Data Encryption
  • Low 3.5
    CVE-2022-1590

    Bludit New Content Module new-content cross site scripting

    A vulnerability was found in Bludit 3.13.1. It has been declared as problematic. This vulnerability affects the endpoint /admin/new-content of the New Content module. The manipulation of the argument content with the input <script>alert(1)</script> leads to c…

  • Low 3.7
    CVE-2022-1548

    Playbook members are allowed to escalate their membership privileges and perform actions restricted to playbook admins.

    Mattermost Playbooks plugin 1.25 and earlier fails to properly restrict user-level permissions, which allows playbook members to escalate their membership privileges and perform actions restricted to playbook admins.

    Mattermost Mattermost Playbooks
  • Low 3.4
    CVE-2021-36844

    WordPress WP Subscribe plugin <= 1.2.12 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

    Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MyThemeShop WP Subscribe plugin <= 1.2.12 on WordPress.

    mythemeshop WP Subscribe (WordPress plugin) Web / CMS
  • Low 2.9
    CVE-2022-26325

    Cross Site Scripting vulnerability in NetIQ Access Manager versions prior to version 5.0.2

    Reflected Cross Site Scripting (XSS) vulnerability in NetIQ Access Manager prior to 5.0.2

    Micro Focus NetIQ Access Manager
  • Low 3.5
    CVE-2021-29859

    IBM ICP4A - User Management System Component (IBM Cloud Pak for Business Automation V21.0.3 through V21.0.3-IF008, V21.…

    IBM Cloud Pak for Business Automation