CVEs published in May 2023
2,572 vulnerabilities, 261 critical, 9 exploited.
- go standard library html/template, golang go +1 moreImproper handling of empty HTML attributes in html/template7.3 High
- go standard library html/template, golang go +1 moreImproper handling of JavaScript whitespace in html/template9.8 Critical
- go standard library html/template, golang go +1 moreImproper sanitization of CSS values in html/template7.3 High
- mutagen, mutagen compose +1 moreMutagen list and monitor operations do not neutralize control characters in text controlled by remote endpoints3.0 Low
- opc foundation ua .net standard, opcfoundation ua-.netstandard, unified architecture .net-standard +2 moreOPC Foundation UA .NET Standard ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability7.5 High
- opcfoundation ua-.netstandardExposure of Sensitive Information in OPC UA .NET Standard Reference Server5.3 Medium
github.com/mutagen-io/mutagenGoUnder-validated ComSpec and cmd.exe resolution in Mutagen projectsNo score- external media without import project media without importExternal Media without Import Plugin external-media-without-import.php print_media_new_panel cross site scripting3.5 Low
- linux kernelAn issue was discovered in the Linux kernel before 6.1.11. In net/netrom/af_netrom.c, there is a...6.7 Medium
- ghostPath Traversal in Ghost7.5 High
- netentsec application security gatewayBeijing Netcon NS-ASG Application Security Gateway v6.3 is vulnerable to SQL Injection via...7.5 High
- netentsec application security gatewayNS-ASG v6.3 was discovered to contain a SQL injection vulnerability via the component /admin...9.8 Critical
- tenda ac18 firmwareTenda AC18 v15.03.05.19(6318_)_cn was discovered to contain a command injection vulnerability via...9.8 Critical
- oretnom23 online food ordering systemAn arbitrary file upload vulnerability in the component /admin/ajax.php?action=save_menu of...9.8 Critical
- sem-cms semcmsSemcms Shop v4.2 was discovered to contain an arbitrary file uplaod vulnerability via the...9.8 Critical
- mitrastar gpt-2741gnac-n2 firmwareMitraStar GPT-2741GNAC-N2 with firmware BR_g5.9_1.11(WVK.0)b32 was discovered to contain a remote...8.8 High
- totolink a7100ru firmwareTOTOLINK A7100RU V7.4cu.2313_B20191024 has a Command Injection vulnerability. An attacker can...9.8 Critical
- totolink a7100ru firmwareTOTOLINK A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection.9.8 Critical
- totolink x5000r firmwareTOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion...9.8 Critical
- s-cmsS-CMS v5.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability...7.2 High
- llvmllvm-project commit a0138390 was discovered to contain a segmentation fault via the component...5.5 Medium
- llvmllvm-project commit a0138390 was discovered to contain a segmentation fault via the component...5.5 Medium
- llvmllvm-project commit a0138390 was discovered to contain a segmentation fault via the component...5.5 Medium
- llvmllvm-project commit a0138390 was discovered to contain an assertion failure at !replacements...5.5 Medium
- llvmllvm-project commit 6c01b5c was discovered to contain a segmentation fault via the component mlir...5.5 Medium
- llvmllvm-project commit bd456297 was discovered to contain a segmentation fault via the component...5.5 Medium
- llvmllvm-project commit fdbc55a5 was discovered to contain a segmentation fault via the component...5.5 Medium
- struktur libheif, fedoraproject fedora +1 morelibheif vulnerable to segmentation fault via floating point exception6.5 Medium
- bumsys project bumsys, unilogies unilogies/bumsys +1 moreExternal Control of File Name or Path in unilogies/bumsys7.2 High
- bumsys project bumsys, unilogies unilogies/bumsys +1 moreCross-site Scripting (XSS) - Stored in unilogies/bumsys4.8 Medium
- bumsys project bumsys, unilogies unilogies/bumsys +1 moreCross-Site Request Forgery (CSRF) in unilogies/bumsys8.8 High
- bumsys project bumsys, unilogies unilogies/bumsys +1 morePHP Remote File Inclusion in unilogies/bumsys7.2 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaq8.2 High
- azuracast, azuracast azuracast/azuracast +1 moreImproper Restriction of Excessive Authentication Attempts in azuracast/azuracast7.3 High
- nilsteampassnet nilsteampassnet/teampass, teampass +1 moreCross-site Scripting (XSS) - Stored in nilsteampassnet/teampass5.4 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq6.1 Medium
- puppet server, perforce puppet enterprise, puppet enterprise +2 moreA Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2...5.3 Medium
- bajorat-media pb seo friendly images, pb seo friendly images seo friendly images +1 moreWordPress PB SEO Friendly Images Plugin <= 4.0.5 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- rextheme cart lift – abandoned cart recovery for woocommerce and edd, cart lift - abandoned cart recovery for woocommerce and edd +1 moreWordPress Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD Plugin <= 3.1.5 is vulnerable to Cross Site Scripting (XSS)7.1 High
- catch themes darcieWordPress Darcie Theme <= 1.1.5 is vulnerable to Cross Site Scripting (XSS)7.1 High
- eirudo simple youtube responsive, simple youtube responsive project youtube responsive +1 moreWordPress Simple YouTube Responsive Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- 9seeds.com cpt – speakers, 9seeds cpt - speakers +1 moreWordPress CPT – Speakers Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- gmo typesquare webfonts for conohaWordPress TypeSquare Webfonts for ConoHa Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- control id rhidControl iD RHiD direct request6.3 Medium
- e-officeWeaver E-Office unrestricted upload7.3 High
- chengdu vec40g, feiyuxing vec40g firmware +1 moreChengdu VEC40G Network Detection os command injection4.7 Medium
- metersphereIDOR vulnerability exists in metersphere6.8 Medium
- nextu next-7004n, ez-net next-7004n firmware +1 moreNEXTU NEXT-7004N POST Request formFilter cross site scripting3.5 Low
- birkir prime, catontechnology caton prime +1 moreCaton Prime Ping command injection8.8 High
- caton ctp relay serverCaton CTP Relay Server API login sql injection7.3 High
- Show moreLoading…