CVEs published in May 2023
2,572 vulnerabilities, 261 critical, 9 exploited.
- monicahq monicaMonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the...8.8 High
- monicahq monicaMonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the...8.8 High
- apple ipados, macos, iphone os +2 moreAn integer overflow was addressed with improved input validation. This issue is fixed in iOS 16.2...8.6 High
- cmsmadesimple cms made simpleSQL Injection vulnerability in CMS Made Simple through 2.2.15 allows remote attackers to execute...8.8 High
- cmsmadesimple cms made simpleFile upload vulnerability in CMS Made Simple through 2.2.15 allows remote authenticated attackers...7.2 High
- mblog project mblogOS Command injection vulnerability in mblog 3.5.0 allows attackers to execute arbitrary code via...7.8 High
- flycms project flycmsCross Site Request Forgery (CSRF) vulnerability in FlyCms 1.0 allows attackers to add arbitrary...8.8 High
- victor cms project cmsSQL Injection vulnerability in victor cms 1.0 allows attackers to execute arbitrary commands via...9.8 Critical
- mingsoft mcmsMCMS vulnerable to arbitrary code execution via crafted thumbnail8.8 High
- beescmsCross Site Request Forgery (CSRF) vulnerability in beescms v4 allows attackers to delete the...6.5 Medium
- typechoOpen redirect vulnerability in typecho 1.1-17.10.30-release via the referer parameter to Login.php.6.1 Medium
- ipandao editor.mdCross Site Scripting (XSS) pandao editor.md 1.5.0 allows attackers to execute arbitrary code via...6.1 Medium
- 5none nonecmsCross-site scripting (XSS) vulnerability in NoneCms 1.3.0 allows remote attackers to inject...6.1 Medium
- mipcmsCross Site Scripting (XSS) vulnerability in MIPCMS 3.6.0 allows attackers to execute arbitrary...4.8 Medium
- clanscripts project clanscriptsCross Site Request Forgery (CSRF) vulnerability in Bluethrust Clan Scripts v4 allows attackers to...8.8 High
- multi language hotel management software project language hotel management software, sourcecodester multi language hotel management software +1 moreSourceCodester Multi Language Hotel Management Software POST Parameter ajax.php cross site scripting3.5 Low
harfbuzzOSS-FuzzUNKNOWN WRITE in bool OT::Layout::Common::Coverage::serialize<hb_map_iter_t<hb_map_iter_t<hb_filtNo scoreharfbuzzOSS-FuzzHeap-buffer-overflow in void sort_r_simple<>No scoreharfbuzzOSS-FuzzUNKNOWN WRITE in bool OT::Layout::Common::CoverageFormat2_4<OT::Layout::MediumTypes>::serialize<hNo scoreharfbuzzOSS-FuzzUNKNOWN WRITE in OT::Layout::GPOS_impl::CursivePosFormat1::subsetNo scorehdf5OSS-FuzzHeap-buffer-overflow in H5MM_memcpyNo score- vk.company mymailThe myMail app through 14.30 for iOS sends cleartext credentials in a situation where STARTTLS is...7.5 High
- sbs20 sbs20/scanservjs, scanservjs project scanservjs +1 moreOS Command Injection in sbs20/scanservjs10.0 Critical
- hu-manity.co cookie notice & compliance for gdpr / ccpa, hu-manity cookie notice \& compliance for gdpr \/ ccpa +1 moreWordPress Cookie Notice & Compliance for GDPR / CCPA Plugin <= 2.4.6 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- jch optimize project optimize, samuel marshall jch optimize +1 moreWordPress JCH Optimize Plugin <= 3.2.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
parcelliteMageiaUpdated parcellite packages fix security vulnerabilityNo scoreharfbuzzOSS-FuzzUNKNOWN WRITE in hb_ot_layout_substitute_startNo scorehdf5OSS-FuzzHeap-buffer-overflow in H5FS__sect_linkNo score- jja8 newbinggogojja8 NewBingGoGo cross site scripting3.5 Low
- jeff starr dashboard widgets suite, plugin-planet dashboard widget suite +1 moreWordPress Dashboard Widgets Suite Plugin <= 3.2.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- alex benfica publish to schedule, publish to schedule project to schedule +1 moreWordPress Publish to Schedule Plugin <= 4.5.4 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- ibm urbancode deployIBM UrbanCode Deploy (UCD) information disclosure5.1 Medium
- ibm business automation workflowIBM Business Automation Workflow cross-site scripting5.4 Medium
- ibm qradar data synchronization app, qradar data synchronization +1 moreIBM QRadar Data Synchronization App information disclosure4.4 Medium
- php-login project php-loginPHP-Login POST Parameter class.loginscript.php checkLogin sql injection7.3 High
- craftcms cms, craft cms +1 moreCraft CMS vulnerable to cross site scripting in RSS feed widget6.1 Medium
- mage mage-aiMage terminal user authentication not working properly5.9 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Security Feature Bypass Vulnerability4.7 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability7.5 High
- vyperlang vyperVyper storage allocator overflow7.5 High
- ibm maximo asset managementIBM Maximo Asset Management cross-site scripting5.4 Medium
- ibm cloud pak system software suite, cloud pak system +1 moreIBM Cloud Pak System Software Suite session fixation4.2 Medium
- ibm mq, mq appliance +1 moreIBM MQ denial of service5.9 Medium
- ibm mq, mq appliance +1 moreIBM MQ denial of service5.5 Medium
- ibm mq, mq appliance +1 moreIBM MQ denial of service5.3 Medium
- ibm elastic storage system, spectrum scale +1 moreIBM Storage Scale denial of service6.2 Medium
- ibm cognos command centerIBM Cognos Command Center information disclosure4.0 Medium
- apache ranger, apache software foundation ranger hive plugin +1 morePermissions problem in the Apache Ranger Hive Plugin8.1 High
- apache rangerApache Ranger: code execution vulnerability in policy expressions8.4 High
- dell command \| monitor, command monitor (dcm) +1 moreDell Command Monitor, versions 10.9 and prior, contains an improper folder permission...7.3 High
- Show moreLoading…