CVEs published in May 2023
2,572 vulnerabilities, 261 critical, 9 exploited.
- ibm qradar wincollect agent, qradar wincollect +1 more IBM QRadar WinCollect Agent privilege escalation 8.2 High
- inline google spreadsheet viewer project google spreadsheet viewer, meitar inline google spreadsheet viewer plugin +1 more meitar Inline Google Spreadsheet Viewer Plugin inline-gdocs-viewer.php displayShortcode cross-site request forgery 4.3 Medium
- ibm qradar wincollect agent, qradar wincollect +1 more IBM QRadar WinCollect Agent privilege escalation 7.8 High
- collaboraoffice collabora online, collaboraonline online +1 more Collabora Online has Stored Cross-Site-Scripting vulnerability in admin interface 8.7 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 more Windows Local Security Authority (LSA) Denial of Service Vulnerability 6.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 more Windows Kernel Memory Information Disclosure Vulnerability 5.5 Medium
- microsoft windows 10 version 1809, windows 10 version 20h2, windows 10 version 21h1 +12 more +14 more Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability 7.3 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 more Windows Kerberos Elevation of Privilege Vulnerability 7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +22 more +24 more Windows Print Spooler Elevation of Privilege Vulnerability 7.3 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +24 more +26 more Unified Write Filter Elevation of Privilege Vulnerability 6.7 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 more Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability 8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 more Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability 8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +29 more +31 more Windows Hyper-V Elevation of Privilege Vulnerability 7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 more Win32k Elevation of Privilege Vulnerability 7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 more Windows Digital Media Receiver Elevation of Privilege Vulnerability 7.8 High
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +8 more +10 more HTTP.sys Denial of Service Vulnerability 7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 more Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability 5.9 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +24 more +26 more Windows Digital Media Receiver Elevation of Privilege Vulnerability 7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 more Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability 8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 more Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability 9.8 Critical
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +29 more +31 more Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability 7.8 High
- binary-husky gpt academic gpt_academic's Configuration File vulnerable to File Information Disclosure 6.5 Medium
- pluginsglpi formcreator, teclib-edition form creator +1 more Formcreator vulnerable to stored XSS from ##FULLFORM## 6.1 Medium
- megaease easeprobe EaseProbe vulnerable to SQL injection when using MySQL/PostgreSQL data checking 8.3 High
- deno, deno runtime +1 more Deno missing "--allow-net" permission check for built-in Node modules 8.6 High
- multiversx mx-chain-go mx-chain-go does not treat invalid transaction with wrong username correctly 8.6 High
- oretnom23 lost and found information system SourceCodester Lost and Found Information System access control 6.3 Medium
- oretnom23 lost and found information system SourceCodester Lost and Found Information System Manage User Page cross site scripting 2.4 Low
- contec conprosys hmi system Contec CONPROSYS HMI System (CHS) v3.5.2 Denial of Service 3.7 Low
-
opencvOSS-Fuzz Heap-buffer-overflow in opj_jp2_apply_pclr No score -
fileOSS-Fuzz Use-after-poison in file_is_simh No score - vip video analysis project video analysis, yiwent vip video analysis +1 more yiwent Vip Video Analysis admincore.php cross site scripting 3.5 Low
- vip video analysis project video analysis, yiwent vip video analysis +1 more yiwent Vip Video Analysis title.php server-side request forgery 6.3 Medium
- beipyvideoresolution project beipyvideoresolution BeipyVideoResolution admincore.php cross site scripting 3.5 Low
-
drupal/addtoanyPackagist This module provides social media share & follow buttons. The module doesn't sufficiently restrict AddToAny block settings to users who have permission to administer AddToAny. This allows users with l… No score -
drupal/addtoanyPackagist This module provides social media share & follow buttons. The module doesn't sufficiently check access to a node when retrieving the label of an AddToAny block. This vulnerability is mitigated by the… No score -
drupal/consent_popupPackagist The Consent Popup provides a configurable popup that requires acceptance of a question before the visitor can continue, typically used for age consent. The module doesn't sufficiently sanitizes the te… No score -
drupal/iubenda_integrationPackagist The Iubenda Integration module provides a custom block to provide a link to the Iubenda privacy policy. On this block, a custom prefix and suffix text can be entered. The module does not sufficiently… No score - jetbrains teamcity In JetBrains TeamCity before 2023.05 stored XSS in GitLab Connection page was possible 4.6 Medium
- jetbrains teamcity In JetBrains TeamCity before 2023.05 authentication checks were missing – 2FA was not checked for... 5.3 Medium
- jetbrains teamcity In JetBrains TeamCity before 2023.05 a specific endpoint was vulnerable to brute force attacks 5.3 Medium
- jetbrains teamcity In JetBrains TeamCity before 2023.05 reflected XSS in the Subscriptions page was possible 4.6 Medium
- jetbrains teamcity In JetBrains TeamCity before 2023.05 stored XSS in the NuGet feed page was possible 4.6 Medium
- jetbrains teamcity In JetBrains TeamCity before 2023.05 open redirect during oAuth configuration was possible 4.8 Medium
- jetbrains teamcity In JetBrains TeamCity before 2023.05 parameters of the "password" type from build dependencies... 4.3 Medium
- jetbrains teamcity In JetBrains TeamCity before 2023.05 possible XSS in the Plugin Vendor URL was possible 4.6 Medium
- jetbrains teamcity In JetBrains TeamCity before 2023.05 stored XSS in the Show Connection page was possible 4.6 Medium
- jetbrains teamcity In JetBrains TeamCity before 2023.05 stored XSS in the Commit Status Publisher window was possible 4.6 Medium
- jetbrains teamcity In JetBrains TeamCity before 2023.05 improper permission checks allowed users without appropriate... 4.3 Medium
- jetbrains teamcity In JetBrains TeamCity before 2023.05 bypass of permission checks allowing to perform admin... 9.1 Critical
- Show olderLoading…