Security Vulnerabilities - CVEs Published In May 2022
A vulnerability has been identified in Simcenter Femap (All versions < V2022.2). The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted .NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15594)
CVSS Score
7.8
EPSS Score
0.004
Published
2022-05-20
Foxit PDF Editor v11.3.1 was discovered to contain an arbitrary file upload vulnerability.
CVSS Score
9.8
EPSS Score
0.006
Published
2022-05-20
Online Sports Complex Booking System v1.0 was discovered to contain a blind SQL injection vulnerability via the id parameter in /scbs/view_facility.php.
CVSS Score
9.8
EPSS Score
0.003
Published
2022-05-20
Online Sports Complex Booking System v1.0 was discovered to allow attackers to take over user accounts via a crafted POST request.
CVSS Score
9.8
EPSS Score
0.003
Published
2022-05-20
Multi Store Inventory Management System v1.0 was discovered to contain an information disclosure vulnerability which allows attackers to access sensitive files.
CVSS Score
7.5
EPSS Score
0.003
Published
2022-05-20
A Cross-Site Request Forgery (CSRF) in Online Banquet Booking System v1.0 allows attackers to change admin credentials via a crafted POST request.
CVSS Score
8.8
EPSS Score
0.002
Published
2022-05-20
Multi Store Inventory Management System v1.0 allows attackers to perform an account takeover via a crafted POST request.
CVSS Score
9.8
EPSS Score
0.003
Published
2022-05-20
A buffer overflow vulnerability exists in the razerkbd driver of OpenRazer up to version v3.3.0 allows attackers to cause a Denial of Service (DoS) and possibly escalate their privileges via a crafted buffer sent to the matrix_custom_frame device.
CVSS Score
9.8
EPSS Score
0.001
Published
2022-05-20
A buffer overflow vulnerability exists in the razeraccessory driver of OpenRazer up to version v3.3.0 allows attackers to cause a Denial of Service (DoS) and possibly escalate their privileges via a crafted buffer sent to the matrix_custom_frame device.
CVSS Score
9.8
EPSS Score
0.001
Published
2022-05-20
A buffer overflow vulnerability exists in the razermouse driver of OpenRazer up to version v3.3.0 allows attackers to cause a Denial of Service (DoS) and possibly escalate their privileges via a crafted buffer sent to the matrix_custom_frame device.
CVSS Score
9.8
EPSS Score
0.001
Published
2022-05-20