CVEs published in May 2023
2,572 vulnerabilities, 261 critical, 9 exploited.
- custom4web affiliate links liteWordPress Affiliate Links Lite Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- muffingroup bethemeWordPress Betheme Theme <= 26.7.5 is vulnerable to Cross Site Scripting (XSS)7.1 High
- garrett grimm simple popup, simple popup project popup +1 moreWordPress Simple Popup Images Plugin <= 1.8.6 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- andrew @ geeenville web design easy sign up, web design easy sign up project design easy sign up +1 moreWordPress Easy Sign Up Plugin <= 3.4.1 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- agent evolution impress listingsWordPress IMPress Listings Plugin <= 2.6.2 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- gopi ramasamy tiny carousel horizontal slider plusWordPress Tiny carousel horizontal slider plus Plugin <= 3.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- enhanced wp contact form project wp contact form, joost de valk enhanced wp contact form +1 moreWordPress Enhanced WP Contact Form Plugin <= 2.2.3 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- premmerce redirect managerWordPress Premmerce Redirect Manager Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- christof servit affiliate-toolkitWordPress affiliate-toolkit – WordPress Affiliate Plugin Plugin <= 3.3.3 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- custom more link complete project more link complete, florin arjocu custom more link complete +1 moreWordPress Custom More Link Complete Plugin <= 1.4.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- amauri wpmobile.app, amauric wpmobile.app — android and ios mobile application, wpmobile.app — android and ios mobile application +2 moreWordPress WPMobile.App Plugin <= 11.20 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- i thirteen web solution full width banner slider wpWordPress Full Width Banner Slider Wp Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)7.1 High
- sourcecodester online tours & travels management system, online tours \& travels management system project tours \& travels management system +1 moreSourceCodester Online Tours & Travels Management System disapprove_delete.php exec sql injection6.3 Medium
- advancedcustomfields advanced custom fields, unknown advanced custom fields pro +1 moreWordPress Advanced Custom Fields / Advanced Custom Fields PRO plugins <= 6.1.5 vulnerable to Cross Site Scripting (XSS)7.1 High
- opencv, opencv wechat qrcode module +1 moreOpenCV wechat_qrcode Module decoded_bit_stream_parser.cpp decodeHanziSegment memory leak5.3 Medium
- opencv, opencv wechat qrcode module +1 moreOpenCV wechat_qrcode Module decoded_bit_stream_parser.cpp decodeByteSegment null pointer dereference5.3 Medium
- m.static project m.staticm.static Directory Traversal vulnerability7.5 High
- qt, redhat enterprise linux +1 moreIn Qt before 5.15.14, 6.0.x through 6.2.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1,...6.5 Medium
- videolan dav1d, fedoraproject fedora +1 moreVideoLAN dav1d before 1.2.0 has a thread_task.c race condition that can lead to an application...5.9 Medium
- veritas infoscale operations managerAn issue was discovered in Veritas InfoScale Operations Manager (VIOM) before 7.4.2.800 and 8.x...7.2 High
- veritas infoscale operations managerAn issue was discovered in Veritas InfoScale Operations Manager (VIOM) before 7.4.2.800 and 8.x...7.2 High
- mozilla firefoxMemory safety bugs present in Firefox 112. Some of these bugs showed evidence of memory...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough,...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreWhen reading a file, an uninitialized value could have been used as read limit. This...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreAn attacker could have positioned a <code>datalist</code> element to obscure the address bar....4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA type checking bug would have led to invalid code being compiled. This vulnerability affects...6.5 Medium
- mozilla firefoxDocuments were incorrectly assuming an ordering of principal objects when ensuring we were...6.5 Medium
- mozilla firefoxA maliciously crafted favicon could have led to an out of memory crash. This vulnerability...7.5 High
- mozilla firefoxService workers could reveal script base URL due to dynamic `import()`. This vulnerability...5.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA missing delay in popup notifications could have made it possible for an attacker to trick a...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreAn out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreIn multiple cases browser prompts could have been obscured by popups controlled by content. These...4.3 Medium
- jerryscriptJerryscript 3.0 (commit 05dbbd1) was discovered to contain a heap-buffer-overflow via the...7.8 High
- jerryscriptJerryscript 3.0 (commit 05dbbd1) was discovered to contain a heap-buffer-overflow via the...7.8 High
- jerryscriptJerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via the component...7.8 High
- jerryscriptJerryscript 3.0.0(commit 1a2c047) was discovered to contain a heap-buffer-overflow via the...7.8 High
- podofo project podofoPodofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo:...8.8 High
- podofo project podofoPodofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo:...8.8 High
- podofo project podofoPodofo v0.10.0 was discovered to contain a heap-use-after-free via the component PoDoFo:...8.8 High
- podofo project podofopodofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo:...6.5 Medium
- podofo project podofopodofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo:...6.5 Medium
- gl-inet gl-a1300 firmware, gl-ap1300 firmware, gl-ap1300lte firmware +29 more +31 moreAn issue was discovered on GL.iNet devices before 3.216. Through the software installation...9.8 Critical
- tenda cp3 firmwareMissing Support for an Integrity Check in Shenzen Tenda Technology IP Camera CP3 V11.10.00...7.5 High
- tenda cp3 firmwareShenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 does not defend against physical...9.8 Critical
- tenda cp3 firmwareShenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 allows unauthenticated remote code...9.8 Critical
- tenda cp3 firmwareShenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard...9.8 Critical
- tenda cp3 firmwareShenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard...7.5 High
- prestashop poststaticfooterPrestashop posstaticfooter <= 1.0.0 is vulnerable to SQL Injection via posstaticfooter:...9.8 Critical
- genesys tftp serverAn issue was found in Genesys CIC Polycom phone provisioning TFTP Server all version allows a...8.8 High
- ne inc. next engine integration plugin (for ec-cube 2.0 series), next-engine next engine integration +1 moreAuthentication bypass vulnerability in NEXT ENGINE Integration Plugin (for EC-CUBE 2.0 series)...5.3 Medium
- Show moreLoading…