CVEs published in May 2023
2,572 vulnerabilities, 261 critical, 9 exploited.
mrubyOSS-FuzzHeap-use-after-free in gc_mark_childrenNo score- ibm 3948-ved firmware, 3957-vec firmware, 3957-ved firmware +1 more +3 moreIBM TS7700 Management Interface command injection8.8 High
- enalean tuleapXSS in the tooltip via an artifact title5.4 Medium
- ibm iIBM i privilege escalation6.4 Medium
- amauri wpmobile.appWordPress WPMobile.App Plugin <= 11.18 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- custom login page project login page, denzel chia | phire design custom login page +1 moreWordPress Custom Login Page Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- simple portfolio gallery project portfolio gallery, tauhidul alam simple portfolio gallery +1 moreWordPress Simple Portfolio Gallery Plugin <= 0.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- essentialplugin hero banner ultimateWordPress Hero Banner Ultimate Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- biplob adhikari accordion – multiple accordion or faqs builder, oxilab accordions +1 moreWordPress Accordions Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- hashgraph guardian, nozomi networks cmc +1 moreAuthenticated SQL Injection on Alerts in Guardian/CMC before 22.5.28.7 High
- carlo gavazzi powersoftCarlo Gavazzi Powersoft prone to Path Traversal7.5 High
- dell ecs, elastic cloud storage +1 moreDELL ECS prior to 3.8.0.2 contains an improper verification of cryptographic signature...5.9 Medium
- gin-gonic gin, github.com/gin-gonic/gin +1 moreImproper input validation in github.com/gin-gonic/gin5.6 Medium
- google chromeInappropriate implementation in Navigation in Google Chrome prior to 113.0.5672.63 allowed a...4.3 Medium
- elastic kibanaKibana version 8.7.0 contains an arbitrary code execution flaw. An attacker with All privileges...8.8 High
- elastic kibanaKibana versions 8.0.0 through 8.7.0 contain an arbitrary code execution flaw. An attacker with...8.8 High
- elastic filebeatFilebeat versions through 7.17.9 and 8.6.2 have a flaw in httpjson input that allows the http...3.3 Low
- illumos illumos-gateillumos illumos-gate before 676abcb has a stack buffer overflow in /dev/net, leading to privilege...7.8 High
- zohocorp manageengine opmanagerZoho ManageEngine OPManager through 126323 allows an authenticated user to achieve remote code...8.8 High
- libreswanpluto in Libreswan before 4.11 allows a denial of service (responder SPI mishandling and daemon...7.5 High
- garo wallbox glb firmware, wallbox gtb firmware, wallbox gtc firmware +2 moreInsecure permissions in the settings page of GARO Wallbox GLB/GTB/GTC before v189 allows...8.1 High
- beetl project beetlServer-side template injection in beetl9.8 Critical
- mailbutler shimoAn issue in the helper tool of Mailbutler GmbH Shimo VPN Client for macOS v5.0.4 allows attackers...9.8 Critical
- prestashop scexportcustomersPrestaShop scexportcustomers <= 3.6.1 is vulnerable to Incorrect Access Control. Due to a lack of...7.5 High
- cltphpCLTPHP <=6.0 is vulnerable to Improper Input Validation.9.8 Critical
- cltphpCLTPHP <=6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via application...9.8 Critical
- newbee-mall project newbee-mallInsecure permissions in the updateUserInfo function of newbee-mall before commit 1f2c2dfy allows...5.4 Medium
- judging management system project management systemJudging Management System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- typechoA stored cross-site scripting (XSS) vulnerability in Typecho v1.2.0 allows attackers to execute...5.4 Medium
- totaljs messengerA stored cross-site scripting (XSS) vulnerability in TotalJS messenger commit b6cf1c9 allows...5.4 Medium
- totaljs messengerA stored cross-site scripting (XSS) vulnerability in TotalJS messenger commit b6cf1c9 allows...5.4 Medium
- totaljs messengerA stored cross-site scripting (XSS) vulnerability in TotalJS messenger commit b6cf1c9 allows...5.4 Medium
- totaljs flowCross-site scripting in TotalJS5.4 Medium
- onosproject onosONOS vulnerable to Cross-site Scripting6.1 Medium
- judging management system project management systemJudging Management System v1.0 by oretnom23 was discovered to vulnerable to SQL injection via ...9.8 Critical
- emqx nanomqIn NanoMQ v0.15.0-0, segment fault with Null Pointer Dereference occurs in the process of...7.5 High
- emqx nanomqIn NanoMQ v0.15.0-0, a Heap overflow occurs in copyn_utf8_str function of mqtt_parser.c7.5 High
- emqx nanomqIn NanoMQ v0.15.0-0, Heap overflow occurs in read_byte function of mqtt_code.c.7.5 High
- churchcrmChirchCRm 4.5.4 endpoint /EditEventTypes.php is vulnerable to Blind SQL Injection (Time-based)...8.8 High
- ejsejs v3.1.9 is vulnerable to server-side template injection. If the ejs file is controllable,...9.8 Critical
- spryker commerce osSQL injection vulnerability inSpryker Commerce OS 0.9 that allows for access to sensitive data...8.8 High
- microbinStored cross site scripting in Microbin5.4 Medium
- genomedics millegpgAn issue was discovered in Genomedics MilleGP5 5.9.2, allows remote attackers to execute...7.8 High
- virtualreception digital reciptieDirectory Traversal vulnerability in virtualreception Digital Receptie version win7sp1_rtm.101119...7.5 High
- geovision gv-edge recording managerAn issue was discovered in GeoVision GV-Edge Recording Manager 2.2.3.0 for windows, which...9.8 Critical
- samsung blockchain keystoreOut-of-bounds Read vulnerability while processing CMD_COLDWALLET_BTC_SET_PRV_UTXO in bc_core...4.4 Medium
- samsung blockchain keystoreOut-of-bounds Read vulnerability while processing BC_TUI_CMD_UPDATE_SCREEN in bc_tui trustlet...4.4 Medium
- samsung blockchain keystoreOut-of-bounds Write vulnerability while processing BC_TUI_CMD_UPDATE_SCREEN in bc_tui trustlet...6.7 Medium
- samsung blockchain keystoreOut-of-bounds Write vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA command in...6.7 Medium
- samsung blockchain keystoreOut-of-bounds Read vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA_ARRAY command in...4.4 Medium
- Show moreLoading…