CVEs published in May 2023
2,572 vulnerabilities, 261 critical, 9 exploited.
- apache airflowApache Airflow: Privilege escalation using airflow logs9.8 Critical
- givewpWordPress GiveWP Plugin <= 2.25.1 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- fareharbor, fareharbor for wordpress +1 moreWordPress FareHarbor for WordPress Plugin <= 3.6.6 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- i thirteen web solution easy testimonial slider and formWordPress Easy Testimonial Slider and Form Plugin <= 1.0.15 is vulnerable to Cross Site Scripting (XSS)7.1 High
containerdSUSESecurity update for containerdNo score- apache airflowStored XSS on Apache Airflow5.4 Medium
- apache brpcApache bRPC: ServerOptions.pid_file may cause arbitrary code execution9.8 Critical
- apache log4cxxApache Log4cxx: SQL injection when using ODBC appender8.8 High
- otrsInformation disclouse and DoS via websocket push events7.6 High
- linux kernel, netapp hci baseboard management controller, redhat enterprise linux +1 more +3 moreIn the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch...7.8 High
- cybonet pineapp, pineapp mail secure +1 moreCybonet PineApp Mail Secure RXSS vulnerability6.1 Medium
- easytor, easytor applications applications +1 moreEasyTor Applications – Authorization Bypass8.1 High
- wjj software innokb server, innokb/console, wjjsoft innokb +1 moreWJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - CWE-22: Path Traversal7.5 High
- wjj software innokb server, innokb/console, wjjsoft innokb +1 moreWJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - Reflected cross-site scripting (RXSS)6.1 Medium
- agilepoint nxAgilePoint NX v8.0 SU2.2 & SU2.3 - Path traversal6.5 Medium
- agilepoint nxAgilePoint NX v8.0 SU2.2 & SU2.3 – Arbitrary File Delete8.1 High
- monicahq monicaMonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the...5.4 Medium
- monicahq monicaMonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the...5.4 Medium
- monicahq monicaMonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the...5.4 Medium
- monicahq monicaMonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the...5.4 Medium
- asmbb project asmbbAsmBB v2.9.1 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via...6.1 Medium
- fiio m6 firmwareA buffer overflow in the component /proc/ftxxxx-debug of FiiO M6 Build Number v1.0.4 allows...7.8 High
- crmebCRMEB v4.4 to v4.6 was discovered to contain an arbitrary file upload vulnerability via the...9.8 Critical
- online pizza ordering system project pizza ordering systemSourceCodester Online Pizza Ordering System v1.0 is vulnerable to SQL Injection via the QTY...9.8 Critical
- evilmartians imgproxyimgproxy is vulnerable to Server-Side Request Forgery5.3 Medium
- judging management system project management systemJudging Management System v1.0 is vulnerable to SQL Injection. via /php-jms/review_se_result.php...9.8 Critical
- metersphereMetersphere v1.20.20-lts-79d354a6 is vulnerable to Remote Command Execution. The system command...9.8 Critical
- h3c gr-1200w firmwareH3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function...9.8 Critical
- h3c gr-1200w firmwareH3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function...9.8 Critical
- apple ipados, macos, safari +3 more +5 moreThis issue was addressed with improved state management. This issue is fixed in macOS Ventura 13...9.8 Critical
- apple ipados, macos, ios and ipados +1 more +3 moreA validation issue was addressed with improved input sanitization. This issue is fixed in macOS...5.5 Medium
- apple ipados, ios and ipados, iphone os +2 moreThe issue was addressed with improved checks. This issue is fixed in iOS 16.4 and iPadOS 16.4. An...3.3 Low
- apple macosA permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura...5.5 Medium
- apple macosA privacy issue was addressed by moving sensitive data to a more secure location. This issue is...5.5 Medium
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3. An app...5.5 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreThe issue was addressed with improved authentication. This issue is fixed in macOS Ventura 13.3,...6.5 Medium
- apple ipados, macos, tvos +3 more +5 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3,...7.8 High
- apple macosA denial-of-service issue was addressed with improved memory handling. This issue is fixed in...6.5 Medium
- apple ipados, macos, tvos +3 more +5 moreA logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3,...5.5 Medium
- apple ipados, ios and ipados, iphone os +2 moreAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in...7.8 High
- apple ipados, macos, tvos +3 more +5 moreA use after free issue was addressed with improved memory management. This issue is fixed in...7.8 High
- apple macosA buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS...7.1 High
- apple xcodeThe issue was addressed with improved memory handling. This issue is fixed in Xcode 14.3. An app...8.6 High
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3. An app...6.3 Medium
- apple macos, studio display firmware update, studio display firmware +2 moreA memory corruption issue was addressed with improved state management. This issue is fixed in...7.8 High
- apple ipados, macos, tvos +3 more +5 moreThe issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura...7.5 High
- apple macosA logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3,...5.5 Medium
- apple ipados, macos, watchos +2 more +4 moreMultiple validation issues were addressed with improved input sanitization. This issue is fixed...5.5 Medium
- apple macos, mac os x +1 moreThis issue was addressed by removing the vulnerable code. This issue is fixed in GarageBand for...7.8 High
- apple ipados, ios and ipados, iphone os +2 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 16.4 and iPadOS...7.8 High
- Show moreLoading…