Skip to content

CyberSecBulletin

CVEs published on May 23, 2022

13 vulnerabilities, ordered with the most urgent first.

9.8 Critical severity
Apache Maven: Improper Encoding or Escaping of Output
CVE-2022-29599May 23, 2022ApacheEPSS 4.42%
9.9 Critical severity
AVEVA InTouch Access Anywhere: Exposure of Resource to Wrong Sphere
CVE-2022-1467May 23, 2022AVEVA
9.8 Critical severity
Nirweb support: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-0781May 23, 2022Nirweb supportEPSS 13.1%
9.8 Critical severity
WP Contacts Manager: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-1014May 23, 2022WP Contacts ManagerEPSS 1.61%
8.8 High severity
Msi Package Builder: Download of Code Without Integrity Check
CVE-2022-28944May 23, 2022EmcosoftwareEPSS 1.6%
8.8 High severity
Dev-c++: Incorrect Default Permissions
CVE-2022-28999May 23, 2022BloodshedEPSS 1.27%
8.8 High severity
Xampp: Incorrect Default Permissions
CVE-2022-29376May 23, 2022ApachefriendsEPSS 1.46%
8.8 High severity
Simple Food Website: Cross-Site Request Forgery
CVE-2022-30014May 23, 2022Simple Food Website Project
8.8 High severity
Xxl-job: Cross-Site Request Forgery
CVE-2022-29002May 23, 2022Xuxueli
7.5 High severity
F-Secure endpoint protection products for…: Out-of-bounds Write
CVE-2022-28874May 23, 2022F-secure
7.3 High severity
Total Security: Uncontrolled Search Path Element
CVE-2022-31467May 23, 2022Quickheal
7.5 High severity
Cszcms: Server-Side Request Forgery
CVE-2022-28997May 23, 2022CszcmsEPSS 2.08%
7.0 High severity
Total Security: Improper Link Resolution Before File Access
CVE-2022-31466May 23, 2022Quickheal