Security Vulnerabilities - CVEs Published In May 2022
A buffer overflow in ecma_builtin_typedarray_prototype_filter() in JerryScript version fe3a5c0 allows an attacker to construct a fake object or a fake arraybuffer with unlimited size.
CVSS Score
9.8
EPSS Score
0.005
Published
2022-05-12
A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing attack with address bar spoofing as the address bar was not correct if navigation fails in a loop.
CVSS Score
4.3
EPSS Score
0.004
Published
2022-05-12
A vulnerability affecting F-Secure SAFE browser was discovered. An attacker can potentially exploit Javascript window.open functionality in SAFE Browser which could lead address bar spoofing attacks.
CVSS Score
4.3
EPSS Score
0.003
Published
2022-05-12
Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository eventsource/eventsource prior to v2.0.2.
CVSS Score
8.1
EPSS Score
0.011
Published
2022-05-12
NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 allows attackers to cause a denial of service (application crash) via a crafted input.
CVSS Score
6.6
EPSS Score
0.001
Published
2022-05-12
In JetBrains TeamCity before 2022.04 reflected XSS on the Build Chain Status page was possible
CVSS Score
4.6
EPSS Score
0.0
Published
2022-05-12
In JetBrains TeamCity before 2022.04 leak of secrets in TeamCity agent logs was possible
CVSS Score
4.4
EPSS Score
0.0
Published
2022-05-12
In JetBrains TeamCity before 2022.04 potential XSS via Referrer header was possible
CVSS Score
3.7
EPSS Score
0.0
Published
2022-05-12
SHA1 implementation in JetBrains Ktor Native 2.0.0 was returning the same value. The issue was fixed in Ktor version 2.0.1.
CVSS Score
8.7
EPSS Score
0.0
Published
2022-05-12
Reflected Xss using url based payload in GitHub repository neorazorx/facturascripts prior to 2022.07. Xss can use to steal user's cookies which lead to Account takeover or do any malicious activity in victim's browser
CVSS Score
9.4
EPSS Score
0.003
Published
2022-05-12