İçeriğe atla
Noroxi

Yayın tarihine göre

Mayıs 2022: sömürülen ve yeni ciddi CVE kayıtları

125 kayıt · 9 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 2 / 2

  • CVE-2022-30065
    31İzleyin

    A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern

    YüksekCVSS 7,8İstismar yokEPSS %1

    busybox · busybox18 May 2022

  • CVE-2022-22978
    43Planlayın

    In spring security versions prior to 5.4.11+, 5.5.7+ , 5.6.4+ and older unsupported versions, RegexRequestMatcher can easily be misconfigure

    KritikCVSS 9,8Kavram kanıtıEPSS %12

    vmware · spring security19 May 2022

  • CVE-2022-28927
    49Planlayın

    A remote code execution (RCE) vulnerability in Subconverter v0.7.2 allows attackers to execute arbitrary code via crafted config and url par

    KritikCVSS 9,8İstismar yokEPSS %34

    subconverter project · subconverter19 May 2022

  • CVE-2022-21500
    52Planlayın

    Vulnerability in Oracle E-Business Suite (component: Manage Proxies).

    YüksekCVSS 7,5Kavram kanıtıEPSS %71

    oracle · e-business suite19 May 2022

  • CVE-2022-28987
    24İzleyin

    Zoho ManageEngine ADSelfService Plus before 6202 allows attackers to perform username enumeration via a crafted POST request to /ServletAPI/

    OrtaCVSS 5,3Kavram kanıtıEPSS %10

    zohocorp · manageengine adselfservice plus19 May 2022

  • CVE-2022-30887
    47Planlayın

    Pharmacy Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /php_action/editProd

    KritikCVSS 9,8Kavram kanıtıEPSS %25

    pharmacy management system project · pharmacy management system20 May 2022

  • CVE-2022-28531
    43Planlayın

    Sourcecodester Covid-19 Directory on Vaccination System1.0 is vulnerable to SQL Injection via the admin/login.php txtusername (aka Username)

    KritikCVSS 9,8İstismar yokEPSS %14

    covid-19 directory on vaccination system project · covid-19 directory on vaccination system20 May 2022

  • CVE-2022-22972
    56Planlayın

    VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain

    KritikCVSS 9,8Kavram kanıtıEPSS %56

    vmware · identity manager20 May 2022

  • CVE-2022-31259
    46Planlayın

    The route lookup process in beego before 1.12.9 and 2.x before 2.0.3 allows attackers to bypass access control.

    KritikCVSS 9,8İstismar yokEPSS %22

    beego · beego21 May 2022

  • CVE-2022-31267
    44Planlayın

    Gitblit 1.9.2 allows privilege escalation via the Config User Service: a control character can be placed in a profile data field, such as an

    KritikCVSS 9,8İstismar yokEPSS %17

    gitblit · gitblit21 May 2022

  • CVE-2022-31268
    33İzleyin

    A Path Traversal vulnerability in Gitblit 1.9.3 can lead to reading website files via /resources//../ (e.g., followed by a WEB-INF or META-I

    YüksekCVSS 7,5Kavram kanıtıEPSS %10

    gitblit · gitblit21 May 2022

  • CVE-2022-0781
    43Planlayın

    Nirweb support < 2.8.2 - Unauthenticated SQLi

    KritikCVSS 9,8Kavram kanıtıEPSS %13

    nirweb · nirweb support23 May 2022

  • CVE-2021-32941
    43Planlayın

    Annke Network Video Recorder - Stack-based Buffer Overflow

    KritikCVSS 9,8İstismar yokEPSS %14

    annke · n48pbb firmware23 May 2022

  • CVE-2022-29337
    50Planlayın

    C-DATA FD702XW-X-R430 v2.1.13_X001 was discovered to contain a command injection vulnerability via the va_cmd parameter in formlanipv6.

    KritikCVSS 9,8Kavram kanıtıEPSS %35

    cdatatec · fd702xw-x-r430 firmware24 May 2022

  • CVE-2022-26082
    45Planlayın

    A file write vulnerability exists in the OAS Engine SecureTransferFiles functionality of Open Automation Software OAS Platform V16.00.0112.

    KritikCVSS 9,8İstismar yokEPSS %20

    openautomationsoftware · oas platform25 May 2022

  • CVE-2022-26833
    48Planlayın

    An improper authentication vulnerability exists in the REST API functionality of Open Automation Software OAS Platform V16.00.0121.

    KritikCVSS 9,4Kavram kanıtıEPSS %37

    openautomationsoftware · oas platform25 May 2022

  • CVE-2022-20821
    60Bu hafta

    Cisco IOS XR Software Health Check Open Port Vulnerability

    OrtaCVSS 6,5KEVSilahlaştırılmışEPSS %11

    cisco · ios xr26 May 2022

  • CVE-2022-29660
    43Planlayın

    CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/pic/del.

    KritikCVSS 9,8İstismar yokEPSS %11

    chshcms · cscms music portal system26 May 2022

  • CVE-2022-24422
    57Planlayın

    Dell iDRAC9 versions 5.00.00.00 and later but prior to 5.10.10.00, contain an improper authentication vulnerability.

    KritikCVSS 9,8İstismar yokEPSS %58

    dell · idrac926 May 2022

  • CVE-2022-22616
    40Planlayın

    This issue was addressed with improved checks.

    OrtaCVSS 5,5SilahlaştırılmışEPSS %8

    apple · mac os x26 May 2022

  • CVE-2022-22674
    52Planlayın

    An out-of-bounds read issue existed that led to the disclosure of kernel memory.

    OrtaCVSS 5,5KEVSilahlaştırılmışEPSS %1

    apple · mac os x26 May 2022

  • CVE-2022-22675
    65Bu hafta

    An out-of-bounds write issue was addressed with improved bounds checking.

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %12

    apple · ipados26 May 2022

  • CVE-2022-29632
    44Planlayın

    An arbitrary file upload vulnerability in the component /course/api/upload/pic of Roncoo Education v9.0.0 allows attackers to execute arbitr

    KritikCVSS 9,8İstismar yokEPSS %17

    roncoo · roncoo-education26 May 2022

  • CVE-2022-1556
    45Planlayın

    StaffList < 3.1.5 - Admin+ SQLi

    KritikCVSS 9,8İstismar yokEPSS %20

    era404 · stafflist30 May 2022

  • CVE-2022-31007
    36İzleyin

    Privilege escalation from administrator in eLabFTW

    YüksekCVSS 7,2Kavram kanıtıEPSS %26

    elabftw · elabftw31 May 2022