Skip to content
OpenAdvisories

Archive

May 2022

Vulnerabilities first published in this month (UTC), newest first.

← April 2022 2022 / May June 2022 →
  1. 127
  2. 276
  3. 3109
  4. 480
  5. 5129
  6. 672
  7. 74
  8. 85
  9. 945
  10. 10196
  11. 11176
  12. 12159
  13. 1388
  14. 142
  15. 157
  16. 16101
  17. 17111
  18. 1878
  19. 1940
  20. 20107
  21. 218
  22. 221
  23. 2347
  24. 2481
  25. 2562
  26. 26157
  27. 2760
  28. 28 
  29. 295
  30. 3027
  31. 31115
All Critical High Medium Low Exploited only Public exploit

2,175 results · Feed

  • Unscored —
    CVE-2022-29688

    CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /a…

  • Unscored —
    CVE-2022-29687

    CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /a…

  • Unscored —
    CVE-2022-29686

    CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /a…

  • Unscored —
    CVE-2022-29685

    CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /a…

  • Unscored —
    CVE-2022-29684

    CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /a…

  • Unscored —
    CVE-2022-29682

    CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /a…

  • Unscored —
    CVE-2022-29683

    CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /a…

  • Unscored —
    CVE-2022-29681

    CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /a…

  • Unscored —
    CVE-2022-29680

    CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /a…

  • Unscored —
    CVE-2022-29676

    CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.p…

  • Unscored —
    CVE-2022-29670

    CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.p…

  • Unscored —
    CVE-2022-29669

    CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.p…

  • Unscored —
    CVE-2022-29667

    CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via /admin.php/pic/admin/pic/hy.…

  • Unscored —
    CVE-2022-29666

    CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.p…

  • Unscored —
    CVE-2022-29665

    CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.p…

  • Unscored —
    CVE-2022-29664

    CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.p…

  • Unscored —
    CVE-2022-29663

    CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.p…

  • Unscored —
    CVE-2022-29662

    CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.p…

  • Unscored —
    CVE-2022-29661

    CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /a…

  • Unscored —
    CVE-2022-29660 EPSS 12%

    CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.p…

  • Unscored —
    CVE-2022-29721

    74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/jobfairol/res…

  • Unscored —
    CVE-2022-29720

    74cmsSE v3.5.1 was discovered to contain an arbitrary file read vulnerability via the component \index\controller\Downl…

  • Unscored —
    CVE-2021-40317

    Piwigo 11.5.0 is affected by a SQL injection vulnerability via admin.php and the id parameter.

  • Unscored —
    CVE-2021-42860

    A stack buffer overflow exists in Mini-XML v3.2. When inputting an unformed XML string to the mxmlLoadString API, it wi…

  • Unscored —
    CVE-2021-42859

    A memory leak issue was discovered in Mini-XML v3.2 that could cause a denial of service. NOTE: testing reports are inc…

  • Unscored —
    CVE-2021-42692

    There is a stack-overflow vulnerability in tinytoml v0.4 that can cause a crash or DoS.

  • Unscored —
    CVE-2022-1664

    directory traversal for in-place extracts with untrusted v2 and v3 source packages with debian.tar

    Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a …

    Debian dpkg dpkg dpkg Debian Ubuntu Azure Linux Alpine
  • Medium 5.3
    CVE-2021-34360

    CSRF Bypass in Proxy Server

    A cross-site request forgery (CSRF) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versio…

    QNAP Systems Proxy Server
  • Low 3.5
    CVE-2021-4231

    Angular Comment cross site scripting

    A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It has been classified as problematic. Affected is the handling of comments. The manipulation leads to cross site scripting. It is possible to launch the attack remotely but it might require an …

    katib-suggestion-hyperopt katib-earlystopping katib-suggestion-optuna-enas katib-suggestion-skopt-enas Wolfi npm
  • Unscored —
    CVE-2022-1882

    A use-after-free flaw was found in the Linux kernel’s pipes functionality in how a user performs manipulations with the…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  • High 7.1
    CVE-2022-1886

    Heap-based Buffer Overflow in vim/vim

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

    vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine
  • Medium 6.1
    CVE-2022-27777

    XSS Vulnerability in Action View tag helpers

    A XSS Vulnerability in Action View tag helpers >= 5.2.0 and < 5.2.0 which would allow an attacker to inject content if able to control input into specific attributes.

    rails rails redmine actionview Debian Ubuntu RubyGems
  • Unscored —
    CVE-2022-30787

    An integer underflow in fuse_lib_readdir enables arbitrary memory read operations in NTFS-3G through 2021.8.22 when usi…

    ntfs-3g ntfs-3g ntfs-3g ntfs-3g Debian Ubuntu Azure Linux Alpine
  • Unscored —
    CVE-2022-30785

    A file handle created in fuse_lib_opendir, and later used in fuse_lib_readdir, enables arbitrary memory read and write …

    ntfs-3g ntfs-3g ntfs-3g ntfs-3g Debian Ubuntu Azure Linux Alpine
  • Medium 6.7
    CVE-2022-30789

    A crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array in NTFS-3G through 2021.8.22.

    ntfs-3g ntfs-3g ntfs-3g ntfs-3g Debian Ubuntu Azure Linux Alpine
  • Medium 6.7
    CVE-2022-30788

    A crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G through 2021.8.22.

    ntfs-3g ntfs-3g ntfs-3g ntfs-3g Debian Ubuntu Azure Linux Alpine
  • Medium 6.7
    CVE-2022-30786

    A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G through 2021.8.22.

    ntfs-3g ntfs-3g ntfs-3g ntfs-3g Debian Ubuntu Azure Linux Alpine
  • Medium 6.7
    CVE-2022-30784

    A crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value in NTFS-3G through 2021.8.22.

    ntfs-3g ntfs-3g ntfs-3g ntfs-3g Debian Ubuntu Azure Linux Alpine
  • Unscored —
    CVE-2022-30783

    An invalid return code in fuse_kern_mount enables intercepting of libfuse-lite protocol traffic between NTFS-3G and the…

    ntfs-3g ntfs-3g ntfs-3g ntfs-3g Debian Ubuntu Azure Linux Alpine
  • Critical 9.8
    CVE-2022-21831 Public exploit

    Possible code injection vulnerability in Rails / Active Storage

    A code injection vulnerability exists in the Active Storage >= v5.2.0 that could allow an attacker to execute code via image_processing arguments.

    rails rails activestorage Debian Ubuntu RubyGems