Skip to content
OpenAdvisories

Archive

May 2022

Vulnerabilities first published in this month (UTC), newest first.

← April 2022 2022 / May June 2022 →
  1. 127
  2. 276
  3. 3109
  4. 480
  5. 5129
  6. 672
  7. 74
  8. 85
  9. 945
  10. 10196
  11. 11176
  12. 12159
  13. 1388
  14. 142
  15. 157
  16. 16101
  17. 17111
  18. 1878
  19. 1940
  20. 20107
  21. 218
  22. 221
  23. 2347
  24. 2481
  25. 2562
  26. 26157
  27. 2760
  28. 28 
  29. 295
  30. 3027
  31. 31115
All Critical High Medium Low Exploited only Public exploit

483 results · Clear filters · Feed

  • Medium 5.5
    CVE-2022-29200

    Missing validation causes denial of service in TensorFlow via `LSTMBlockCell`

    TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.LSTMBlockCell` does not fully validate the input arguments. This results in a `CHECK`-failure which can be used to …

    TensorFlow TensorFlow tensorflow tensorflow-cpu PyPI
  • Medium 5.5
    CVE-2022-29193

    Missing validation causes `TensorSummaryV2` in TensorFlow to crash

    TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.TensorSummaryV2` does not fully validate the input arguments. This results in a `CHECK`-failure which can be used t…

    TensorFlow TensorFlow tensorflow tensorflow-cpu PyPI
  • Medium 5.5
    CVE-2022-29194

    Missing validation causes denial of service via `DeleteSessionTensor` in TensorFlow

    TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.DeleteSessionTensor` does not fully validate the input arguments. This results in a `CHECK`-failure which can be us…

    TensorFlow TensorFlow tensorflow tensorflow-cpu PyPI
  • Medium 5.5
    CVE-2022-29191

    Missing validation causes denial of service via `GetSessionTensor` in TensorFlow

    TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.GetSessionTensor` does not fully validate the input arguments. This results in a `CHECK`-failure which can be used …

    TensorFlow TensorFlow tensorflow tensorflow-cpu PyPI
  • Medium 5.4
    CVE-2022-29431

    Remove CPT base <= 5.8 - CSRF leads to CPT base deletion

    Cross-Site Request Forgery (CSRF) vulnerability in KubiQ CPT base plugin <= 5.8 at WordPress allows an attacker to delete the CPT base.

    kubiq Remove CPT base (WordPress plugin) Web / CMS
  • Medium 4.7
    CVE-2022-29430

    WordPress PNG to JPG plugin <= 4.0 - Cross-Site Request Forgery (CSRF) leading to Persistent Cross-Site Scripting (XSS) vulnerability

    Cross-Site Scripting (XSS) vulnerability in KubiQ's PNG to JPG plugin <= 4.0 at WordPress via Cross-Site Request Forgery (CSRF). Vulnerable parameter &jpg_quality.

    kubiq PNG to JPG (WordPress plugin) Web / CMS
  • Medium 4.1
    CVE-2022-29428

    WordPress WP Slider Plugin <= 1.4.5 - Cross-Site Scripting (XSS) vulnerability

    Cross-Site Scripting (XSS) vulnerability in Muneeb's WP Slider Plugin <= 1.4.5 at WordPress.

    Muneeb WP Slider Plugin
  • Medium 5.5
    CVE-2022-29192

    Missing validation crashes `QuantizeAndDequantizeV4Grad` in TensorFlow

    TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.QuantizeAndDequantizeV4Grad` does not fully validate the input arguments. This results in a `CHECK`-failure which c…

    TensorFlow TensorFlow tensorflow tensorflow-cpu PyPI
  • Medium 6.3
    CVE-2022-29434

    WordPress Spiffy Calendar plugin <= 4.9.0 - Edit/Delete event via IDOR vulnerability

    Insecure Direct Object References (IDOR) vulnerability in Spiffy Plugins Spiffy Calendar <= 4.9.0 at WordPress allows an attacker to edit or delete events.

    Spiffy Plugins Spiffy Calendar
  • Medium 6.8
    CVE-2022-29447

    WordPress Hover Effects plugin <= 2.1 - Authenticated Local File Inclusion (LFI) vulnerability

    Authenticated (administrator or higher user role) Local File Inclusion (LFI) vulnerability in Wow-Company's Hover Effects plugin <= 2.1 at WordPress.

    Wow-Company Hover Effects – easily create any hover effect (WordPress plugin) Web / CMS
  • Medium 4.3
    CVE-2022-29427

    WordPress Disable Right Click For WP plugin <= 1.1.6 - Cross-Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Aftab Muni's Disable Right Click For WP plugin <= 1.1.6 at WordPress.

    Aftab Muni Disable Right Click For WP (WordPress plugin) Web / CMS
  • Medium 5.4
    CVE-2022-29426

    WordPress Slideshow, Image Slider by 2J plugin <= 1.3.54 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

    Authenticated (contributor or higher user role) Reflected Cross-Site Scripting (XSS) vulnerability in 2J Slideshow Team's Slideshow, Image Slider by 2J plugin <= 1.3.54 at WordPress.

    2J Slideshow Team Slideshow, Image Slider by 2J (WordPress plugin) Web / CMS
  • Medium 5.3
    CVE-2022-21195

    Regular Expression Denial of Service (ReDoS)

    All versions of package url-regex are vulnerable to Regular Expression Denial of Service (ReDoS) which can cause the CPU usage to crash.

    url-regex PyPI
  • Medium 6.8
    CVE-2022-29448

    WordPress Herd Effects plugin <= 5.2 - Local File Inclusion (LFI) vulnerability

    Authenticated (admin or higher user role) Local File Inclusion (LFI) vulnerability in Wow-Company's Herd Effects plugin <= 5.2 at WordPress.

    Wow-Company Herd Effects (WordPress plugin) Web / CMS
  • Medium 6.1
    CVE-2022-29425

    WordPress Checkout Files Upload for WooCommerce plugin <= 2.1.2 - Cross-Site Scripting (XSS) vulnerability

    Cross-Site Scripting (XSS) vulnerability in WP Wham's Checkout Files Upload for WooCommerce plugin <= 2.1.2 at WordPress.

    WP Wham Checkout Files Upload for WooCommerce (WordPress plugin) Web / CMS
  • Medium 4.8
    CVE-2022-29424

    WordPress Image Hover Effects Ultimate plugin <= 9.7.1 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

    Authenticated (admin or higher user role) Reflected Cross-Site Scripting (XSS) vulnerability in Biplob Adhikari's Image Hover Effects Ultimate plugin <= 9.7.1 at WordPress.

    Biplob Adhikari Image Hover Effects Ultimate (WordPress plugin) Web / CMS
  • Medium 4.8
    CVE-2021-36833

    WordPress MC4WP plugin <= 4.8.6 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

    Authenticated (admin or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in ibericode's MC4WP plugin <= 4.8.6 at WordPress.

    ibericode MC4WP: Mailchimp for WordPress Web / CMS
  • Medium 4.2
    CVE-2022-29185

    Observable Timing Discrepancy in totp-rs

    totp-rs is a Rust library that permits the creation of 2FA authentification tokens per time-based one-time password (TOTP). Prior to version 1.1.0, token comparison was not constant time, and could theorically be used to guess value of an TOTP token, and thus…

    constantoine totp-rs totp-rs crates.io
  • Medium 4.3
    CVE-2022-29183

    Reflected XSS in GoCD

    GoCD is a continuous delivery server. GoCD versions 20.2.0 until 21.4.0 are vulnerable to reflected cross-site scripting via abuse of the pipeline comparison function's error handling to render arbitrary HTML into the returned page. This could allow an attack…

    gocd gocd
  • Medium 4.3
    CVE-2022-29182

    DOM-based XSS in GoCD

    GoCD is a continuous delivery server. GoCD versions 19.11.0 through 21.4.0 (inclusive) are vulnerable to a Document Object Model (DOM)-based cross-site scripting attack via a pipeline run's Stage Details > Graphs tab. It is possible for a malicious script on …

    gocd gocd
  • Medium 5.6
    CVE-2022-22365

    IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0, with the Ajax Proxy Web Application (AjaxProxy.war) deployed, …

    IBM WebSphere Application Server
  • Medium 6.4
    CVE-2021-39043

    IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to stored cross-site scripting. This vulnerabi…

    IBM Jazz Team Server
  • Medium 5.9
    CVE-2022-29177

    DoS via malicious p2p message in Go-Ethereum

    Go Ethereum is the official Golang implementation of the Ethereum protocol. Prior to version 1.10.17, a vulnerable node, if configured to use high verbosity logging, can be made to crash when handling specially crafted p2p messages sent from an attacker node.…

    ethereum go-ethereum github.com/ethereum/go-ethereum Go
  • Medium 6.6
    CVE-2022-29170 Public exploit

    Grafana Enterprise datasource network restrictions bypass via HTTP redirects

    Grafana is an open-source platform for monitoring and observability. In Grafana Enterprise, the Request security feature allows list allows to configure Grafana in a way so that the instance doesn’t call or only calls specific hosts. The vulnerability present…

    Grafana Grafana grafana Web / CMS Alpine
  • Medium 5.0
    CVE-2022-29159

    Possibility for anyone to add a stack with existing tasks on anyone's board in Nextcloud Deck

    Nextcloud Deck is a Kanban-style project & personal management tool for Nextcloud. In versions prior to 1.4.8, 1.5.6, and 1.6.1, an authenticated user can move stacks with cards from their own board to a board of another user. The Nextcloud Deck app contains …

    Nextcloud security-advisories
  • Medium 4.3
    CVE-2022-24905

    Argo CD login screen allows message spoofing if SSO is enabled

    Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. A vulnerability was found in Argo CD prior to versions 2.3.4, 2.2.9, and 2.1.15 that allows an attacker to spoof error messages on the login screen when single sign on (SSO) is enabled.…

    argoproj Argo CD github.com/argoproj/argo-cd github.com/argoproj/argo-cd/v2 Go
  • Medium 4.3
    CVE-2022-24904

    Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server

    Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD starting with version 0.7.0 and prior to versions 2.1.15m 2.2.9, and 2.3.4 is vulnerable to a symlink following bug allowing a malicious user with repository write access to lea…

    argoproj Argo CD github.com/argoproj/argo-cd github.com/argoproj/argo-cd/v2 Go
  • Medium 6.3
    CVE-2022-1806

    Cross-site Scripting (XSS) - Reflected in rtxteam/rtx

    Cross-site Scripting (XSS) - Reflected in GitHub repository rtxteam/rtx prior to checkpoint_2022-05-18.

    rtxteam rtxteam/rtx
  • Medium 6.3
    CVE-2022-28985

    A stored cross-site scripting (XSS) vulnerability in the addNewPost component of OrangeHRM v4.10.1 allows attackers to …

  • Medium 5.4
    CVE-2022-1413

    Missing input masking in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6, all versions from 14.9.…

    GitLab GitLab Web / CMS
  • Medium 4.3
    CVE-2022-1416

    Missing sanitization of data in Pipeline error messages in GitLab CE/EE affecting all versions starting from 1.0.2 befo…

    GitLab GitLab Web / CMS
  • Medium 5.3
    CVE-2020-4970

    IBM Security Identity Governance and Intelligence 5.2.4, 5.2.5, and 5.2.6 could allow a remote attacker to obtain sensi…

    IBM Security Identity Governance and Intelligence
  • Medium 4.1
    CVE-2022-29449

    WordPress Opal Hotel Room Booking plugin <= 1.2.7 - Stored Cross-Site Scripting (XSS) vulnerability

    Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Opal Hotel Room Booking plugin <= 1.2.7 at WordPress.

    wpopal Opal Hotel Room Booking (WordPress plugin) Web / CMS
  • Medium 6.8
    CVE-2022-29446

    WordPress Counter Box plugin <= 1.1.1 - Authenticated Local File Inclusion (LFI) vulnerability

    Authenticated (administrator or higher role) Local File Inclusion (LFI) vulnerability in Wow-Company's Counter Box plugin <= 1.1.1 at WordPress.

    Wow-Company Counter Box (WordPress) Web / CMS
  • Medium 5.3
    CVE-2022-22976 Public exploit

    Integer overflow in BCrypt class in Spring Security

    Spring Security versions 5.5.x prior to 5.5.7, 5.6.x prior to 5.6.4, and earlier unsupported versions contain an integer overflow vulnerability. When using the BCrypt class with the maximum work factor (31), the encoder does not perform any salt rounds, due t…

    libspring-java org.springframework.security:spring-security-core Ubuntu Maven
  • Medium 6.0
    CVE-2021-45730

    JFrog Artifactory prior to 7.31.10, is vulnerable to Broken Access Control where a Project Admin is able to create, edi…

    jfrog artifactory
  • Medium 6.3
    CVE-2022-1730

    Cross-site Scripting (XSS) - Stored in jgraph/drawio

    Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 18.0.4.

    jgraph jgraph/drawio
  • Medium 6.6
    CVE-2022-1796

    Use After Free in vim/vim

    Use After Free in GitHub repository vim/vim prior to 8.2.4979.

    vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine
  • Medium 6.3
    CVE-2022-29229

    Missing Cryptographic Step in cassproject

    CaSS is a Competency and Skills System. CaSS Library, (npm:cassproject) has a missing cryptographic step when storing cryptographic keys that can allow a server administrator access to an account’s cryptographic keys. This affects CaSS servers using standalon…

    cassproject CASS cassproject npm
  • Medium 6.3
    CVE-2022-29230

    Potential cross-site scripting (XSS) vulnerability in Hydrogen

    Hydrogen is a React-based framework for building dynamic, Shopify-powered custom storefronts. There is a potential Cross-Site Scripting (XSS) vulnerability where an arbitrary user is able to execute scripts on pages that are built with Hydrogen. This affects …

    Shopify hydrogen @shopify/hydrogen npm