CVEs published in May 2023
2,572 vulnerabilities, 261 critical, 9 exploited.
- dhis2 dhis2-core, dhis 2 +1 moreDHIS2 Core unrestricted session cookies with Personal Access Tokens4.3 Medium
- dhis2 dhis2-core, dhis 2 +1 moreDHIS2 Core vulnerable to Improper Access Control with PATCH requests7.1 High
assimpOSS-FuzzBad-cast to Assimp::BaseImporter from invalid vptrNo scoremrubyOSS-FuzzHeap-use-after-free in mrb_str_hash_mNo score- maradns, debian linux, fedoraproject fedora +2 moreMaraDNS Integer Underflow Vulnerability in DNS Packet Decompression7.5 High
- vapor postgresnio, postgres-nio +1 morePostgresNIO processes unencrypted bytes from man-in-the-middle3.7 Low
- rockwell automation arena simulation, rockwellautomation arena +1 moreRockwell Automation Arena Simulation Software Remote Code Execution Vulnerability7.8 High
- rockwell automation arena simulation, rockwellautomation arena +1 moreRockwell Automation Arena Simulation Software Remote Code Execution Vulnerability7.8 High
- rockwell automation arena simulation, rockwellautomation arena +1 moreRockwell Automation Arena Simulation Software Remote Code Execution Vulnerability7.8 High
- cisco catalyst sd-wan manager, sd-wan vmanage +1 moreA vulnerability in the CLI of Cisco SDWAN vManage Software could allow an authenticated, local attacker to delete arbitrary files. This vulnerability is due to improper filtering of directory traversa…4.4 Medium
- cisco staros, asr 5000 series software, ultra cloud core - user plane function +2 moreA vulnerability in the key-based SSH authentication feature of Cisco StarOS Software could allow an authenticated, remote attacker to elevate privileges on an affected device. This vulnerability is du…8.8 High
- code-projects online reviewer systemSourceCodester Online Reviewer System GET Parameter user-update.php sql injection6.3 Medium
- xwiki, xwiki xwiki-commons +1 moreImproper Neutralization of Invalid Characters in Data Attribute Names in org.xwiki.commons:xwiki-commons-xml9.1 Critical
- sourcecodester billing management system, oretnom23 establishment billing management system +1 moreSourceCodester Billing Management System POST Parameter ajax_service.php sql injection6.3 Medium
- oretnom23 food ordering management systemSourceCodester Food Ordering Management System Registration sql injection7.3 High
ignitionSUSESecurity update for ignitionNo scoreprometheus-ha_cluster_exporterSUSESecurity update for prometheus-ha_cluster_exporterNo scoreruncSUSESecurity update for runcNo scoreprometheus-ha_cluster_exporterSUSESecurity update for prometheus-ha_cluster_exporterNo score- siemens solid edge se2023A vulnerability has been identified in Solid Edge SE2023 (All versions < VX.223.0 Update 3),...7.8 High
- siemens solid edge se2023A vulnerability has been identified in Solid Edge SE2023 (All versions < VX.223.0 Update 3),...3.3 Low
- siemens siveillance video 2020 r2, siveillance video 2020 r3, siveillance video 2021 r1 +6 more +8 moreA vulnerability has been identified in Siveillance Video 2020 R2 (All versions < V20.2...9.9 Critical
- siemens siveillance video 2020 r2, siveillance video 2020 r3, siveillance video 2021 r1 +6 more +8 moreA vulnerability has been identified in Siveillance Video 2020 R2 (All versions < V20.2...9.9 Critical
- siemens simatic cloud connect 7 cc712, simatic cloud connect 7 cc716, 6gk1411-1ac00 firmware +1 more +3 moreA vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1...3.8 Low
- siemens simatic cloud connect 7 cc712, simatic cloud connect 7 cc716, 6gk1411-1ac00 firmware +1 more +3 moreA vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1...5.3 Medium
- siemens simatic cloud connect 7 cc712, simatic cloud connect 7 cc716, 6gk1411-1ac00 firmware +1 more +3 moreA vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1...5.3 Medium
- siemens simatic cloud connect 7 cc712, simatic cloud connect 7 cc716, 6gk1411-1ac00 firmware +1 more +3 moreA vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1...5.9 Medium
- siemens simatic cloud connect 7 cc712, simatic cloud connect 7 cc716, 6gk1411-1ac00 firmware +1 more +3 moreA vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1...6.0 Medium
- siemens simatic cloud connect 7 cc712, simatic cloud connect 7 cc716, 6gk1411-1ac00 firmware +1 more +3 moreA vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1...4.3 Medium
- siemens simatic cloud connect 7 cc712, simatic cloud connect 7 cc716, 6gk1411-1ac00 firmware +1 more +3 moreA vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1...7.2 High
- siemens scalance lpe9403, scalance lpe9403 firmware +1 moreA vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A heap-based...2.7 Low
- siemens scalance lpe9403, scalance lpe9403 firmware +1 moreA vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A path traversal...2.5 Low
- siemens scalance lpe9403, scalance lpe9403 firmware +1 moreA vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The `i2c` mutex...3.3 Low
- siemens scalance lpe9403, scalance lpe9403 firmware +1 moreA vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The web based...9.9 Critical
- pixelgrade pixfieldsWordPress PixFields Plugin <= 0.7.0 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- amin a.rezapour product specifications for woocommerce, product specifications for woocommerce project specifications for woocommerce +1 moreWordPress Product Specifications for Woocommerce Plugin <= 0.6.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- umair saleem woocommerce custom checkout fields editor with drag & drop, woocommerce custom checkout fields editor with drag \& drop project custom checkout fields editor with drag \& drop +1 moreWordPress Woocommerce Custom Checkout Fields Editor With Drag & Drop Plugin <= 0.1 is vulnerable to Cross Site Scripting (XSS)7.1 High
- jazzcash woocommerce jazzcash gateway, jc development team woocommerce jazzcash gateway plugin +1 moreWordPress WooCommerce JazzCash Gateway Plugin Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- sk. abul hasan team member – team with slider, wpmart team member - team with slider +1 moreWordPress Team Member Plugin <= 4.4 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- usb memory direct simple custom author profilesWordPress Simple Custom Author Profiles Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- david voswinkel userlike – wordpress live chat plugin, userlike +1 moreWordPress Userlike – WordPress Live Chat plugin Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- joel james lazy social comments, lazy social comments project social comments +1 moreWordPress Lazy Social Comments Plugin <= 2.0.4 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- disqus conditional load project conditional load, joel james disqus conditional load +1 moreWordPress Disqus Conditional Load Plugin <= 11.0.6 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- gopi ramasamy vertical scroll recent post, vertical scroll recent post project scroll recent post +1 moreWordPress Vertical scroll recent post Plugin <= 14.0 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- kanban for wordpress boards for wordpress, kanbanwp kanban boards for wordpress +1 moreWordPress Kanban Boards for WordPress Plugin <= 2.5.20 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- david gwyer wp content filter, wp content filter - censor all offensive content from your site project content filter - censor all offensive content from your site +1 moreWordPress WP Content Filter – Censor All Offensive Content From Your Site Plugin <= 3.0.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- convertbox auto embed wordpress plugin, auto embed +1 moreWordPress ConvertBox Auto Embed WordPress plugin Plugin <= 1.0.19 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- 8web read more without refreshWordPress Read More Without Refresh Plugin <= 3.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- josh kohlbach wholesale suiteWordPress Wholesale Suite Plugin <= 2.1.5 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- black and white digital ltd treepress – easy family trees & ancestor profiles, blackandwhitedigital treepress +1 moreWordPress TreePress – Easy Family Trees & Ancestor Profiles Plugin <= 2.0.22 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- Show moreLoading…