CVEs published in May 2023
2,572 vulnerabilities, 261 critical, 9 exploited.
- samsung blockchain keystoreOut-of-bounds Write vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA_ARRAY command in...6.7 Medium
- samsung mobile core service, samsung core services +1 moreImproper access control in Samsung Core Service prior to version 2.1.00.36 allows attacker to...4.0 Medium
- samsung android, samsung mobile devices +1 morePotential buffer overflow vulnerability in mm_Plmncoordination.c in Shannon baseband prior to SMR...5.6 Medium
- samsung android, samsung mobile devices +1 morePotential buffer overflow vulnerability in mm_LteInterRatManagement.c in Shannon baseband prior...5.6 Medium
- samsung android, samsung mobile devices +1 moreImproper input validation vulnerability in FactoryTest application prior to SMR May-2023 Release...5.7 Medium
- samsung android, samsung mobile devices +1 moreImproper input validation vulnerability in mPOS fiserve trustlet prior to SMR May-2023 Release 1...8.2 High
- samsung android, samsung mobile devices +1 moreDouble free validation vulnerability in setPinPadImages in mPOS TUI trustlet prior to SMR May...6.0 Medium
- samsung android, samsung mobile devices +1 moreOut-of-bounds write vulnerability in TA_Communication_mpos_encrypt_pin in mPOS TUI trustlet prior...8.2 High
- samsung android, samsung mobile devices +1 moreImproper input validation vulnerability in setPartnerTAInfo in mPOS TUI trustlet prior to SMR May...6.0 Medium
- samsung android, samsung mobile devices +1 moreUse of externally-controlled format string vulnerability in mPOS TUI trustlet prior to SMR May...4.4 Medium
- samsung android, samsung mobile devices +1 moreActive Debug Code vulnerability in ActivityManagerService prior to SMR May-2023 Release 1 allows...6.1 Medium
- samsung android, samsung mobile devices +1 moreImproper access control vulnerability in Knox Enrollment Service prior to SMR May-2023 Release 1...4.0 Medium
- samsung android, samsung mobile devices +1 morePotential buffer overflow vulnerability in auth api in mm_Authentication.c in Shannon baseband...5.6 Medium
- samsung android, samsung mobile devices +1 moreImproper access control vulnerability in SemShareFileProvider prior to SMR May-2023 Release 1...6.8 Medium
- samsung android, mobile devices, samsung mobile devices +2 moreKernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged...4.4 Medium
- samsung android, samsung mobile devices +1 moreImproper access control vulnerability in ThemeManager prior to SMR May-2023 Release 1 allows...8.5 High
- samsung android, samsung mobile devices +1 moreImproper access control in GearManagerStub prior to SMR May-2023 Release 1 allows a local...4.7 Medium
- samsung android, samsung mobile devices +1 moreHeap out-of-bounds write vulnerability in bootloader prior to SMR May-2023 Release 1 allows a...7.1 High
- samsung android, samsung mobile devices +1 moreImproper access control vulnerablility in Tips prior to SMR May-2023 Release 1 allows local...4.4 Medium
- samsung android, samsung mobile devices +1 moreImproper access control vulnerability in Telephony framework prior to SMR May-2023 Release 1...5.1 Medium
- samsung android, samsung mobile devices +1 moreImproper export of android application components vulnerability in ImagePreviewActivity in Call...5.3 Medium
- samsung android, samsung mobile devices +1 moreImproper export of android application components vulnerability in VideoPreviewActivity in Call...5.3 Medium
- samsung android, samsung mobile devices +1 moreImproper access control vulnerability in AppLock prior to SMR May-2023 Release 1 allows local...5.1 Medium
- cisco small business ip phones, spa112 firmware +1 moreCisco SPA112 2-Port Phone Adapters Remote Command Execution Vulnerability9.8 Critical
- imoIn imo.im 2022.11.1051, a path traversal vulnerability delivered via an unsanitized deeplink can force the application to write a file into the application's data directory. This may allow an attacker…9.8 Critical
- tauriTauri Open Redirect Vulnerability Possibly Exposes IPC to External Sites4.8 Medium
- ghostGhost vulnerable to disclosure of private API fields7.5 High
- socket engine.ioUncaught exception in engine.io6.5 Medium
- linuxfoundation rekorRekor's compressed archives can result in OOM conditions7.5 High
- fortinet fortinac, fortinac-f +1 moreAn improper neutralization of input during web page generation ('Cross-site Scripting')...5.9 Medium
- fortinet fortinac, fortinac-f +1 moreA use of hard-coded credentials vulnerability [CWE-798] in FortiNAC-F version 7.2.0, FortiNAC...6.1 Medium
- fortinet fortinac, fortinac-f +1 moreA weak authentication vulnerability [CWE-1390] in FortiNAC-F version 7.2.0, FortiNAC version 9.4...5.0 Medium
- fortinet fortinacA use of a weak cryptographic algorithm vulnerability [CWE-327] in FortiNAC 9.4.1 and below, 9.2...3.8 Low
- fortinet fortinac, fortinac-f +1 moreA URL redirection to untrusted site ('Open Redirect') vulnerability [CWE-601] in FortiNAC-F...3.9 Low
- fortinet fortinac, fortinac-f +1 moreAn insufficiently protected credentials vulnerability [CWE-522] in FortiNAC-F 7.2.0, FortiNAC 9.4...3.9 Low
- fortinet fortiadcA relative path traversal [CWE-23] in Fortinet FortiADC version 7.2.0 and before 7.1.1 allows a...5.7 Medium
- fortinet fortiadcAn improper neutralization of special elements used in an OS command vulnerability [CWE-78] in...7.6 High
- fortinet fortios, fortiproxy +1 moreA out-of-bounds write in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0...7.1 High
- ibm websphere application serverIBM WebSphere Application Server information disclosure4.8 Medium
- opentsdbCross-site Scripting in OpenTSDB8.2 High
- opentsdbRemote Code Execution in OpenTSDB9.8 Critical
drupal/s3fsPackagistS3 File System (s3fs) provides an additional file system to your Drupal site, which stores files in Amazon's Simple Storage Service (S3) or any other S3-compatible storage service. This module may fai…No score- peepso community by peepso, peepso +1 moreWordPress Community by PeepSo Plugin <= 6.0.2.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- blueglass jobs for wordpressWordPress Jobs for WordPress Plugin <= 2.5.10.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- profilepress membership team profilepressWordPress ProfilePress Plugin <= 4.5.4 is vulnerable to Cross Site Scripting (XSS)7.1 High
- bing site verification plugin using meta tag project site verification plugin using meta tag, himanshu bing site verification plugin using meta tag +1 moreWordPress Bing Site Verification plugin using Meta Tag Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- greentreelabs circles galleryWordPress Circles Gallery Plugin <= 1.0.10 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- f5 big-iq, big-iq centralized management +1 moreBIG-IQ iControl REST Vulnerability5.4 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +17 more +19 moreBIG-IP UDP Profile vulnerability7.5 High
- f5 big-ip, big-ip domain name system +1 moreBIG-IP iQuery mesh vulnerability7.2 High
- Show moreLoading…