CVEs published in May 2023
2,572 vulnerabilities, 261 critical, 9 exploited.
- libtiff, apple macos +1 moreA vulnerability was found in the libtiff library. This flaw causes a heap buffer overflow issue...5.5 Medium
- cyberghostvpn cyberghostCyberGhostVPN Windows Client before v8.3.10.10015 was discovered to contain a DLL injection...7.8 High
- cesanta mjsAn issue found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the...5.5 Medium
- cesanta mjsBuffer Overflow vulnerability found in Cesanta MJS v.1.26 allows a local attacker to cause a...5.5 Medium
- libtiffBuffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a denial...5.5 Medium
- libmingBuffer Overflow vulnerability found in Libming swftophp v.0.4.8 allows a local attacker to cause...5.5 Medium
- libmingAn issue found in libming swftophp v.0.4.8 allows a local attacker to cause a denial of service...5.5 Medium
- libmingBuffer Overflow vulnerability found in Libming swftophp v.0.4.8 allows a local attacker to cause...5.5 Medium
- fico origination manager decisionMultiple stored cross-site scripting (XSS) vulnerabilities in FICO Origination Manager Decision...5.4 Medium
- fico origination manager decisionA session takeover vulnerability exists in FICO Origination Manager Decision Module 4.8.1 due to...7.5 High
- rocket.chatA vulnerability has been discovered in Rocket.Chat, where messages can be hidden regardless of...5.3 Medium
- rocket.chatA vulnerability has been discovered in Rocket.Chat, where editing messages can change the...5.3 Medium
- rocket.chatA security vulnerability has been discovered in the implementation of 2FA on the rocket.chat...9.8 Critical
- ivanti avalancheAn unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.3...7.2 High
- ivanti avalancheA path traversal vulnerability exists in Avalanche version 6.3.x and below that when exploited...7.5 High
- ivanti avalancheAn authentication bypass vulnerability exists in Avalanche versions 6.3.x and below that could...5.9 Medium
- ivanti avalancheAn improper authentication vulnerability exists in Avalanche Premise versions 6.3.x and below...5.9 Medium
- vim, vim vim/vim +1 moreInteger Overflow or Wraparound in vim/vim7.8 High
- vim, vim vim/vim, fedoraproject fedora +2 moreNULL Pointer Dereference in vim/vim7.8 High
- nilsteampassnet nilsteampassnet/teampass, teampass +1 moreImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nilsteampassnet/teampass7.1 High
- answer, answerdev answerdev/answer +1 moreMissing Authorization in answerdev/answer7.7 High
- esri portal for arcgisBUG-000142922 Incomplete permission changes in specific cases.5.4 Medium
- esri portal for arcgisBUG-000148346 There is a Cross-Site Request Forgery (CSRF) vulnerability in Portal for ArcGIS.8.8 High
- gnu emacs, redhat enterprise linux, enterprise linux eus +2 more +4 moreA flaw was found in the Emacs text editor. Processing a specially crafted org-mode code with the ...7.8 High
- clusterlabs pcs, redhat enterprise linux high availability, enterprise linux high availability eus +2 moreIt was discovered that an update for PCS package in RHBA-2023:2151 erratum released as part of...9.8 Critical
- libssh, fedoraproject fedora, redhat enterprise linux +2 moreA vulnerability was found in libssh, where the authentication check of the connecting client can...6.5 Medium
- redhat enterprise linux, the webkitgtk team webkitgtk, redhat enterprise linux eus +3 more +5 moreA flaw was found in the WebKitGTK package. An improper input validation issue may lead to a use...8.8 High
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreA flaw was found in the networking subsystem of the Linux kernel within the handling of the RPL...7.5 High
- libssh, debian linux, fedoraproject fedora +1 more +3 moreA NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This...6.5 Medium
- shieldstore project shieldstoreA buffer overflow in the component /Enclave.cpp of Electronics and Telecommunications Research...7.5 High
- responsivefilemanagerCross Site Scripting vulnerability found in Trippo ResponsiveFilemanager v.9.14.0 and before...5.4 Medium
- libmingAn issue found in libming v.0.4.8 allows a local attacker to execute arbitrary code via the...7.8 High
- sqlite, siemens ruggedcom crossbow, simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreAn issue found in SQLite SQLite3 v.3.35.4 that allows a remote attacker to cause a denial of...7.5 High
- verydowsCross Site Request Forgery (CSRF) vulnerability found in Verytops Verydows all versions that...8.8 High
- yershop project yershopInsecure Permissons vulnerability found in Shop_CMS YerShop all versions allows a remote attacker...7.1 High
- md project mdCross Site Scripting vulnerability found in Phodal CMD v.1.0 allows a local attacker to execute...6.1 Medium
- sandisk ibi mobile app, ibi web app, western digital my cloud home mobile app +7 more +9 moreDevice API endpoint missing access controls on Western Digital Mobile and Web Apps3.3 Low
- chilidevs return and warranty management system for woocommerce, return and warranty management system for woocommerce project and warranty management system for woocommerce +1 moreWordPress Return and Warranty Management System for WooCommerce Plugin <= 1.2.3 is vulnerable to Cross Site Scripting (XSS)7.1 High
- surbma | gdpr proof cookie consent & notice bar, gdpr proof cookie consent \& notice bar +1 moreWordPress Surbma | GDPR Proof Cookie Consent & Notice Bar Plugin <= 17.5.3 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- nico graff wp simple events, wp simple events project simple events +1 moreWordPress WP Simple Events Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- contiki-ngContiki-NG missing NULL pointer check in IPv6 neighbor discovery7.5 High
- amazon opensearch, embysupport security, amazon opensearch security +2 moreOpenSearch issue with fine-grained access control during extremely rare race conditions4.8 Medium
- openprojectOpenProject user sessions not terminated after activation of 2FA4.8 Medium
- dmtf libspdmDMTF-2023-0001: SPDM mutual authentication bypass9.1 Critical
- effectindex tripreportereffectindex/tripreporter vulnerable to improper password verification on POST `/api/v1/account/login`9.1 Critical
- fluid-cloudnative fluidOn a compromised node, the fluid-csi service account can be used to modify node specs5.8 Medium
- google web stories for wordpress, web stories +1 moreAuth bypass in Web Stories for WordPress plugin4.9 Medium
- ecwid ecommerce shopping cart, lightspeedhq ecwid ecommerce shopping cart +1 moreWordPress Ecwid Shopping Cart Plugin <= 6.11.4 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- seo squirrly plugin by squirrly seo, squirrly seo plugin by squirrly seo +1 moreWordPress SEO Plugin by Squirrly SEO Plugin <= 12.1.20 is vulnerable to Cross Site Scripting (XSS)7.1 High
- macho themes newsmagWordPress Newsmag Theme <= 2.4.4 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- Show moreLoading…