CVEs published in May 2023
2,572 vulnerabilities, 261 critical, 9 exploited.
- f5 nginx api connectivity manager, nginx instance manager, nginx security monitoring +2 moreNGINX Management Suite vulnerability7.1 High
- f5 nginx api connectivity manager, nginx instance manager, nginx security monitoring +2 more +4 moreNGINX Management Suite vulnerability8.1 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +17 more +19 moreBIG-IP Configuration utility vulnerability4.3 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +17 more +19 moreBIG-IP TMUI XSS vulnerability7.5 High
- sergey panasenko sponsors carousel, sponsors carousel project carousel +1 moreWordPress Sponsors Carousel Plugin <= 4.02 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- f5 big-ip, big-ip spk, big-ip access policy manager +19 more +21 moreBIG-IP TMM SSL vulnerability5.3 Medium
- f5 big-ip edge client, big-ip access policy manager +1 moreBIG-IP Edge Client for Windows and macOS vulnerability7.4 High
- f5 big-ip edge client, big-ip access policy manager +1 moreBIG-IP Edge Client for Windows and Mac OS vulnerability5.9 Medium
- finviz stock market charts from finvizWordPress Stock market charts from finviz Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- dgcult exquisite paypal donation, exquisite paypal donation project paypal donation +1 moreWordPress Exquisite PayPal Donation Plugin <= v2.0.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- dotcamp wp table builder, wp table builder table builder +1 moreWordPress WP Table Builder – WordPress Table Plugin Plugin <= 1.4.6 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
hunspellOSS-FuzzHeap-double-free in HashMgr::~HashMgrNo score- clio grow, cliogrow clio grow +1 moreWordPress Clio Grow Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- i thirteen web solution video gallery, video gallery by total-soft gallery +1 moreWordPress Video Gallery – YouTube Gallery Plugin <= 1.7.6 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- tms-outsource wpdatatablesWordPress wpDataTables Plugin <= 2.1.49 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- metaphor creations dittyWordPress Ditty Plugin <= 3.0.32 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- djangoproject django, fedoraproject fedora +1 moreDjango bypasses validation when using one form field to upload multiple files9.8 Critical
- profilepress membership team profilepressWordPress ProfilePress Plugin <= 4.5.4 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- amazon fire tv stick 3rd gen, insignia tv with fireos, amazon fire os +2 moreImproper JPAKE implementation allows offline PIN brute-forcing due to the initialization of...7.1 High
- themeisle visualizer, visualizer: tables and charts manager for wordpress +1 moreWordPress Visualizer Plugin <= 3.9.4 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- amazon fire tv stick 3rd gen, insignia tv with fireos, amazon fire os +2 moreThe setMediaSource function on the amzn.thin.pl service does not sanitize the "source" parameter...4.3 Medium
- amazon fire tv stick 3rd gen, insignia tv with fireos, amazon fire os +2 moreAn Improper Enforcement of Behavioral Workflow vulnerability in the exchangeDeviceServices...5.4 Medium
- wordpress download manager gutenberg blocks by wordpress download manager, wpdownloadmanager gutenberg blocks for wordpress download manager +1 moreWordPress Gutenberg Blocks by WordPress Download Manager Plugin <= 2.1.8 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- include wp baidu submit, wp baidu submit project baidu submit +1 moreWordPress WP BaiDu Submit Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- olevmedia shortcodesWordPress Olevmedia Shortcodes Plugin <= 1.1.9 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- acronis cyber backup 12.5, cyber protect 15, cyber backup +1 more +3 moreSensitive information disclosure due to improper authentication. The following products are...9.3 Critical
- acronis cyber backup 12.5, cyber protect 15, cyber backup +1 more +3 moreCode execution and sensitive information disclosure due to excessive privileges assigned to...9.3 Critical
- thom stark eyes only: user access shortcode, eyes only user access shortcode project only user access shortcode +1 moreWordPress Eyes Only: User Access Shortcode Plugin <= 1.8.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- tapfiliateWordPress Tapfiliate Plugin <= 3.0.12 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- alex moss firecask like & share button, firecask like \& share button project like \& share button +1 moreWordPress FireCask Like & Share Button Plugin <= 1.1.5 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- wbolt team wp资源下载管理, wp resource download management project resource download management +1 moreWordPress WP资源下载管理 Plugin <= 1.3.9 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- mr.vibe vslider multi image slider for wordpress, vibethemes vslider +1 moreWordPress vSlider Multi Image Slider for WordPress Plugin <= 4.1.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- bon plan gratos sticky ad bar plugin, sticky ad bar project ad bar +1 moreWordPress Sticky Ad Bar Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- wp open social project open social, xiaomac wp open social +1 moreWordPress WP Open Social Plugin <= 5.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- pods framework team – custom content types and fields, podsfoundation pods, sc0ttkclark pods – custom content types and fields +2 moreWordPress Pods Plugin <= 2.9.10.2 is vulnerable to Cross Site Request Forgery (CSRF)7.1 High
- dell alienware command center, alienware command center (awcc) +1 moreAlienware Command Center Application, versions 5.5.43.0 and prior, contain an improper access...6.7 Medium
- tips and tricks hq, ruhul amin category specific rss feed subscriptionWordPress Category Specific RSS feed Subscription Plugin <= v2.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- apple ipados, macos, safari +5 more +7 moreThe issue was addressed with improved memory handling. This issue is fixed in tvOS 17, Safari 17,...8.8 High
- apple ipados, macos, safari +3 more +5 moreA memory corruption issue was addressed with improved state management. This issue is fixed in...8.8 High
- apple ipados, macos, tvos +3 more +5 moreThe issue was addressed with improved memory handling. This issue is fixed in tvOS 16.3, macOS...8.8 High
- apple macos, webkitgtk, wpewebkit wpe webkit +2 moreA logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3....5.3 Medium
- w3 webassemblyAn issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop.5.5 Medium
- douphpA stored cross-site scripting (XSS) vulnerability in DouPHP v1.7 allows attackers to execute...4.8 Medium
- judging management system project management systemJudging Management System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- digitaldruid hoteldruidA Stored Cross Site Scripting (XSS) vulnerability exists in multiple pages of Hotel Druid version...5.4 Medium
- apple ipados, macos, ios and ipados +3 more +5 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in iOS...8.8 High
- rediker adminplusCross Site Scripting (XSS) vulnerability in Rediker Software AdminPlus 6.1.91.00 allows remote...6.1 Medium
- gitlabAn issue has been discovered in GitLab EE affecting all versions starting from 15.10 before 15.10...6.8 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 10.0 before 12.9.8,...6.4 Medium
- gitlabAn issue has been discovered in GitLab EE affecting all versions starting from 14.2 before 15.9.6...6.8 Medium
- Show moreLoading…