CVEs published in May 2023
2,572 vulnerabilities, 261 critical, 9 exploited.
- atlassian confluence server, confluence data center +1 moreAffected versions of Atlassian Confluence Server and Data Center allow anonymous remote attackers...5.3 Medium
- online dj management system project dj management system, sourcecodester online dj management system +1 moreSourceCodester Online DJ Management System GET Parameter view_details.php sql injection6.3 Medium
- apache streampark, apache software foundation streampark (incubating) +1 moreApache StreamPark (incubating): Logic error causing any account reset9.1 Critical
- lenovo baiyingA certificate validation vulnerability exists in the Baiying Android application which could lead...6.2 Medium
- apache streampark, apache software foundation streampark (incubating) +1 moreApache StreamPark (incubating): LDAP Injection Vulnerability5.4 Medium
- lenovo system updateA directory permissions management vulnerability in Lenovo System Update may allow elevation of...7.0 High
- lenovo thinkagile hx1021 firmware, thinkagile hx1320 firmware, thinkagile hx1321 firmware +107 more +109 moreA valid, authenticated XCC user with read only access may gain elevated privileges through a...8.3 High
- lenovo thinkagile hx1021 firmware, thinkagile hx1320 firmware, thinkagile hx1321 firmware +107 more +109 moreA valid, authenticated user may be able to trigger a denial of service of the XCC web user...6.3 Medium
- hewlett packard enterprise (hpe) hpe proliant rl300 gen11, hp integrated lights-out firmware, proliant rl300 firmware +2 moreA potential security vulnerability has been identified in HPE ProLiant RL300 Gen11 Server. The...6.1 Medium
- apache streampark, apache software foundation streampark (incubating) +1 moreApache StreamPark (incubating): Upload any file to any directory9.8 Critical
hdf5OSS-FuzzHeap-buffer-overflow in H5MM_memcpyNo scorewolfsslOSS-FuzzHeap-double-free in wolfCrypt_custom_freeNo scoreflacOSS-FuzzHeap-buffer-overflow in flac__analyze_frameNo score- collectiveidea auditedAudited Log Integrity Errors Due to Race Condition3.1 Low
- lenovo smart clock essential with alexa built in, smart clock essential with alexa built in firmware +1 moreA default password was reported in Lenovo Smart Clock Essential with Alexa Built In that could...8.8 High
mlflowPyPIRemote file access vulnerability in `mlflow server` and `mlflow ui` CLIsNo score- triton project tritonSpigot Command Exploit in Triton7.2 High
- linux kernelUse-after-free in Linux kernel's Performance Events subsystem7.8 High
- linux kernel, netapp hci baseboard management controller +1 moreUse-after-free in Linux kernel's Performance Events subsystem7.8 High
- drupal responsive menusResponsive Menus Configuration Setting responsive_menus.module responsive_menus_admin_form_submit cross site scripting2.4 Low
- ad33lx ip blacklist cloudIP Blacklist Cloud Plugin CSV File Import ip_blacklist_cloud.php valid_js_identifier path traversal6.3 Medium
- archerirm archerArcher Platform 6.8 before 6.12 P6 HF1 (6.12.0.6.1) contains a stored XSS vulnerability. A remote...7.1 High
- dlink dir-890l firmwareD-Link DIR-890L FW1.10 A1 is vulnerable to Authentication bypass.7.5 High
- dlink dir-879 firmwareD-Link DIR-879 v105A1 is vulnerable to Authentication Bypass via phpcgi.7.5 High
- tenda n301 firmwareCleartext Transmission in cookie:ecos_pw: in Tenda N301 v6.0, firmware v12.03.01.06_pt allows an...5.7 Medium
- tenda n301 firmwareCleartext Transmission in set-cookie:ecos_pw: Tenda N301 v6.0, Firmware v12.02.01.61_multi allows...5.7 Medium
- perfree perfreeblogCross Site Scripting (XSS) vulnerability in PerfreeBlog 3.1.2 allows attackers to execute...5.4 Medium
- ipandao editor.mdeditor.md vulnerable to Cross-site Scripting6.1 Medium
- zhenfeng13 my blogCross site scripting (XSS) vulnerability in ZHENFENG13 My-Blog, allows attackers to inject...5.4 Medium
- winterchen my-siteCross Site Scripting (XSS) vulnerability in WinterChenS my-site before commit...5.4 Medium
- qbian61 forum-java project forum-javaCross Site Scripting (XSS) vulnerability in Qbian61 forum-java, allows attackers to inject...6.1 Medium
- zhenfeng13 my blogCross site scripting (XSS) vulnerability in ZHENFENG13 My-Blog, allows attackers to inject...5.4 Medium
- antabot white-jotter project white-jotterFile upload vulnerability in Antabot White-Jotter v0.2.2, allows remote attackers to execute...9.8 Critical
- kaiostech kaiosAn issue was discovered in KaiOS 3.0. The pre-installed Communications application exposes a Web...5.3 Medium
- obsidianAn issue discovered in Obsidian Canvas 1.1.9 allows remote attackers to send desktop...6.5 Medium
- konga project kongaAn issue discovered in Konga 0.14.9 allows remote attackers to manipulate user accounts...6.5 Medium
- arm nn android neural networks driverA possible out-of-bounds read and write (due to an improper length check of shared memory) was...7.8 High
- zyxel nbg-418n v2 firmware, nbg-418n firmware +1 moreA buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14...4.9 Medium
- zyxel nbg-418n v2 firmware, nbg-418n firmware +1 moreA format string vulnerability in a binary of the Zyxel NBG-418N v2 firmware versions prior to V1...6.5 Medium
- zyxel nbg-418n v2 firmware, nbg-418n firmware +1 moreA buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14...7.5 High
- zyxel nbg-418n v2 firmware, nbg-418n firmware +1 moreA cross-site scripting (XSS) vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1...7.5 High
- zyxel nbg6604 firmwareThe post-authentication command injection vulnerability in the Zyxel NBG6604 firmware version V1...8.8 High
- qualcomm 8905 firmware, 8909 firmware, 8917 firmware +163 more +165 moreImproper Release of Memory Before Removing Last Reference (`Memory Leak`) in Graphics8.4 High
- qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +263 more +265 moreIncorrect Type Conversion or Cast in Graphics8.4 High
:unknown:AndroidIn Gs101Pipeline::Update of gs101_displaycolor_pipeline.cc, there is a possible device reboot when watching a video due to improper input validation. This could lead to remote denial of service with n…No score- google androidIn unflattenString8 of Sensor.cpp, there is a possible out of bounds read due to a heap buffer...5.5 Medium
- google androidIn registerReceiverWithFeature of ActivityManagerService.java, there is a possible way for...7.8 High
- google androidIn verifyReplacingVersionCode of InstallPackageHelper.java, there is a possible way to downgrade...6.7 Medium
- google androidIn AnalyzeMfcResp of NxpMfcReader.cc, there is a possible out of bounds read due to a missing...5.5 Medium
- google androidIn several functions of SnoozeHelper.java, there is a possible way to grant notifications access...7.8 High
- Show moreLoading…