CVEs published in May 2023
2,572 vulnerabilities, 261 critical, 9 exploited.
- gitlabA cross-site scripting issue has been discovered in GitLab affecting all versions starting from 5...4.4 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 11.9 before 15.9.6,...5.4 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 10.0 before 12.9.8,...4.3 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions from 8.6 before 15.9.6, all...5.7 Medium
- gitlabAn issue has been discovered in GitLab EE affecting all versions starting from 15.2 before 15.9.6...4.9 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions before 15.9.6, all versions...4.8 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 13.11 before 15.8.5,...6.5 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions before 15.8.5, 15.9.4, 15.10...5.4 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions before 15.9.6, all versions...3.1 Low
- frrouting, debian linux +1 moreAn out-of-bounds read exists in the BGP daemon of FRRouting FRR through 8.4. When sending a...6.5 Medium
- frrouting, debian linux +1 moreAn issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message...6.5 Medium
- frrouting, debian linux +1 moreAn issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message...6.5 Medium
- redox-os redoxredox-os v0.1.0 was discovered to contain a use-after-free bug via the gethostbyaddr() function...7.8 High
- cyberark viewfinityIn CyberArk Viewfinity 5.5.10.95 and 6.x before 6.1.1.220, a low privilege user can escalate to...7.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in PictureInPicture in Google Chrome prior to 113.0.5672.63 allowed...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Prompts in Google Chrome on Android prior to 113.0.5672.63...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in CORS in Google Chrome prior to 113.0.5672.63 allowed a remote...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in PictureInPicture in Google Chrome prior to 113.0.5672.63 allowed...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 113.0.5672...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in OS Inputs in Google Chrome on ChromeOS prior to 113.0.5672.63 allowed a remote...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient validation of untrusted input in Extensions in Google Chrome prior to 113.0.5672.63...7.1 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote...6.5 Medium
- apache couchdb, apache software foundation ibm cloudant, ibm cloudant +2 moreApache CouchDB, IBM Cloudant: Information sharing via couchjs processes4.4 Medium
@mittwald/kubernetesnpm@mittwald/kubernetes's secret contents leaked via debug logging4.4 Medium- pimcorePimcore Path Traversal Vulnerability in AdminBundle/Controller/Reports/CustomReportController.php6.5 Medium
python3-librariesOSS-FuzzHeap-buffer-overflow in tok_get_normal_modeNo score- funadminFunadmin Cx.php tagLoad cross site scripting3.5 Low
- dromara j2eefastDromara J2eeFAST Announcement cross site scripting3.5 Low
- devolutions serverImproper access control in Subscriptions Folder path filter in Devolutions Server 2023.1.1 and...4.9 Medium
- dromara j2eefastDromara J2eeFAST System Message cross site scripting3.5 Low
- getrebuild rebuildRebuild cross-site request forgery4.3 Medium
- iteachyou dreamer cmsDreamer CMS Password Hash Calculation UserController.java updatePwd algorithmic complexity4.3 Medium
installation-images-SMOSUSESecurity update for installation-imagesNo scoreinstallation-images-SMOSUSESecurity update for installation-imagesNo score- rhys wynne wp email captureWordPress WordPress Email Marketing Plugin – WP Email Capture Plugin <= 3.9.3 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- awesomemotive easy digital downloads, easy digital downloads digital downloads +1 moreWordPress Easy Digital Downloads Plugin 3.1-3.1.1.4.1 is vulnerable to Privilege Escalation9.8 Critical
- mattermost, mattermost desktop +1 moreUnrestricted navigation due to unvalidated mattermost server redirection5.4 Medium
- checkmkAutomation user secret logged to Apache access log4.4 Medium
- advancedcustomfields advanced custom fields, unknown advanced custom fields (acf), advanced custom fields (acf) pro +2 moreAdvanced Custom Fields - Contributor+ PHP Object Injection8.8 High
- apache sparkApache Spark: Shell command injection via Spark UI8.8 High
- qualcomm 315 5g iot modem firmware, 8905 firmware, 8909 firmware +187 more +189 moreReachable assertion in Modem7.5 High
- qualcomm aqt1000 firmware, ar8035 firmware, qam8295p firmware +97 more +99 moreBuffer over-read in Trusted Execution Environment7.3 High
- psm plugins supportcandySupportCandy < 3.1.5 - Unauthenticated SQLi9.8 Critical
- edward plainview mycryptocheckoutMyCryptoCheckout < 2.124 - Reflected XSS6.1 Medium
- creativethemes blocksy companionBlocksy Companion < 1.8.82 - Subscriber+ Draft Post Access4.3 Medium
- smtp mailing queue project mailing queue, unknown smtp mailing queue +1 moreWP SMTP Mailing Queue < 2.0.1 - Admin+ Stored XSS4.8 Medium
- unknown wp custom author url, wp custom author url project custom author url +1 moreWP Custom Author URL < 1.0.5 - Admin+ Stored XSS4.8 Medium
- pixelyoursite product catalog feed by pixelyoursite, product catalog feed +1 moreProduct Catalog Feed by PixelYourSite < 2.1.1 - Reflected XSS6.1 Medium
- Show moreLoading…