CVEs published in May 2023
2,572 vulnerabilities, 261 critical, 9 exploited.
- tms appointment and event booking calendar for wordpress - amelia, tms-outsource amelia +1 moreCross-site scripting vulnerability in Appointment and Event Booking Calendar for WordPress -...6.1 Medium
- liquid design ltd. speech balloon, lqd liquid speech balloon +1 moreCross-site request forgery (CSRF) vulnerability in LIQUID SPEECH BALLOON versions prior to 1.2...8.8 High
- sitebridge joruri gwCross-site scripting vulnerability in Joruri Gw Ver 3.2.5 and earlier allows a remote...5.4 Medium
- n8nn8n Information Disclosure vulnerability7.5 High
- n8nn8n Privilege Escalation vulnerability8.8 High
- n8nn8n Directory Traversal vulnerability6.5 Medium
- the ministry of justice shinseiyo sogo softShinseiyo Sogo Soft (7.9A) and earlier improperly restricts XML external entity references (XXE)....7.5 High
- jubei jb inquiry formJB Inquiry form contains an exposure of private personal information to an unauthorized actor...7.5 High
- omron cx-drive, omron corporation cx-drive all models +1 moreHeap-based buffer overflow vulnerability exists in CX-Drive All models V3.01 and earlier. By...7.8 High
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Stored in pimcore/pimcore5.7 Medium
- pimcore pimcore/customer-data-framework, customer management framework +1 moreImproper Neutralization of Formula Elements in a CSV File in pimcore/customer-data-framework5.0 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Generic in pimcore/pimcore6.8 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Reflected in pimcore/pimcore6.8 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - DOM in pimcore/pimcore6.8 Medium
- esri portal for arcgisBUG-000155004 HTML injection issue in Portal for ArcGIS.5.4 Medium
- ipfs boxoBoxo bitswap/server: DOS unbounded persistent memory leak8.2 High
- seiko-sol skybridge basic mb-a130 firmware, skybridge mb-a200 firmware, skyspider mb-r210 firmware +1 more +3 moreUse of weak credentials exists in Seiko Solutions SkyBridge and SkySpider series, which may allow...7.5 High
- seiko solutions inc. skybridge mb-a100/110, seiko-sol skybridge mb-a100 firmware, skybridge mb-a110 firmware +2 moreUse of weak credentials exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier, which...7.5 High
- seiko solutions inc. skybridge mb-a100/110, seiko-sol skybridge mb-a100 firmware, skybridge mb-a110 firmware +2 moreCleartext transmission of sensitive information exists in SkyBridge MB-A100/110 firmware Ver. 4.2...6.5 Medium
- seiko solutions inc. skybridge mb-a100/110, seiko-sol skybridge mb-a100 firmware, skybridge mb-a110 firmware +2 moreCleartext storage of sensitive information exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0...6.5 Medium
- seiko solutions inc. skybridge mb-a100/110, seiko-sol skybridge mb-a100 firmware, skybridge mb-a110 firmware +2 moreMissing authentication for critical function exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0...7.5 High
- seiko-sol skybridge basic mb-a130 firmware, skybridge mb-a200 firmware, seiko solutions inc. skybridge mb-a200 and skybridge basic mb-a130 +2 moreImproper following of a certificate's chain of trust exists in SkyBridge MB-A200 firmware Ver. 01...6.5 Medium
- seiko solutions inc. skybridge mb-a200, seiko-sol skybridge mb-a200 firmware +1 moreImproper access control vulnerability in SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier...7.5 High
- seiko-sol skybridge basic mb-a130 firmware, skybridge mb-a200 firmware, seiko solutions inc. skybridge mb-a200 and skybridge basic mb-a130 +2 moreMissing authentication for critical function exists in Seiko Solutions SkyBridge series, which...8.6 High
- seiko solutions inc. skybridge mb-a100/110, seiko-sol skybridge mb-a100 firmware, skybridge mb-a110 firmware +2 moreImproper privilege management vulnerability in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and...6.5 Medium
- octopus server, octopus deploy tentacle +1 moreIn affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which...5.5 Medium
- webcamserver project webcamserverBuffer Overflow vulnerability found in En3rgy WebcamServer v.0.5.2 allows a remote attacker to...7.5 High
- sandisk ibi, western digital my cloud home and my cloud home duo, westerndigital my cloud home duo firmware +2 more +4 moreBuffer Overflow Vulnerability in Western Digital My Cloud Home and ibi devices1.9 Low
- esri portal for arcgisBUG-000154236 There is a reflected cross-site scripting (XSS) vulnerability in Portal for ArcGIS.6.1 Medium
- amd 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt, ryzen™ 5000 series desktop processors “vermeer” am4, athlon gold 3150g firmware +67 more +69 moreInsufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in...7.5 High
- amd athlon gold 3150g firmware, athlon gold 3150ge firmware, athlon silver 3050ge firmware +60 more +62 moreTime-of-check Time-of-use (TOCTOU) in the BIOS2PSP command may allow an attacker with a malicious...5.9 Medium
- amd 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt, ryzen™ 5000 series desktop processors “vermeer” am4, ryzen 1200 \(af\) firmware +72 more +74 moreInsufficient input validation in ABL may enable a privileged attacker to corrupt ASP memory,...8.8 High
- amd ryzen 3100 firmware, ryzen 3300x firmware, ryzen 3500 firmware +46 more +48 moreInsufficient input validation in ASP may allow an attacker with a compromised SMM to induce out...7.5 High
- amd 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt, ryzen 3945wx firmware, ryzen 3955wx firmware +6 more +8 moreA malicious or compromised UApp or ABL can send a malformed system call to the bootloader, which...9.8 Critical
- amd athlon gold 3150g firmware, athlon gold 3150ge firmware, athlon silver 3050ge firmware +62 more +64 moreImproper syscall input validation in AMD TEE (Trusted Execution Environment) may allow an...6.1 Medium
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors “colfax” +78 more +80 moreInsufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor)...9.1 Critical
- amd 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt, ryzen™ 5000 series desktop processors “vermeer” am4, ryzen 3100 firmware +29 more +31 moreFailure to unmap certain SysHub mappings in error paths of the ASP (AMD Secure Processor)...7.5 High
- amd ryzen™ embedded r1000, ryzen™ embedded r2000, ryzen™ embedded v1000 +66 more +68 moreInsufficient input validation in the ASP (AMD Secure Processor) bootloader may allow an attacker...9.1 Critical
- amd athlon gold 3150g firmware, athlon gold 3150ge firmware, athlon silver 3050ge firmware +73 more +75 moreFailure to validate the length fields of the ASP (AMD Secure Processor) sensor fusion hub headers...9.1 Critical
- amd 3rd gen amd ryzen™ threadripper™ processors “castle peak” hedt, ryzen™ 5000 series desktop processors “vermeer” am4, athlon gold 3150g firmware +67 more +69 moreInsufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in...7.5 High
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors “colfax” +50 more +52 moreInsufficient validation in parsing Owner's Certificate Authority (OCA) certificates in SEV (AMD...7.5 High
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +138 more +140 moreA compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which...5.5 Medium
- amd 3015ce firmware, 3015e firmware, athlon™ 3000 series mobile processors with radeon™ graphics “pollock” +61 more +63 moreCertain size values in firmware binary headers could trigger out of bounds reads during signature...8.2 High
- amd 1st gen amd epyc™ processors, 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors +103 more +105 moreA TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read...7.4 High
- amd 2nd gen amd epyc™ processors, 2nd gen amd ryzen™ threadripper™ processors “colfax”, 3rd gen amd epyc™ processors +167 more +169 moreInsufficient bounds checking in ASP may allow an attacker to issue a system call from a...5.5 Medium
- amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7232p firmware +47 more +49 moreAn attacker with a compromised ASP could possibly send malformed commands to an ASP on another...7.5 High
- amd 1st gen amd epyc™, 2nd gen amd epyc™, 3rd gen amd epyc™ +63 more +65 moreImproper access control settings in ASP Bootloader may allow an attacker to corrupt the return...9.8 Critical
- amd 3rd gen amd epyc™, epyc 72f3 firmware, epyc 7313 firmware +21 more +23 moreInsufficient input validation on the model specific register: VM_HSAVE_PA may potentially lead to...7.5 High
- amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7232p firmware +47 more +49 moreImproper input validation in ABL may enable an attacker with physical access, to perform...6.8 Medium
- amd 2nd gen amd epyc™, 3rd gen amd epyc™, epyc 7232p firmware +47 more +49 moreInsufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to...8.8 High
- Show moreLoading…