CVEs published in May 2023
2,572 vulnerabilities, 261 critical, 9 exploited.
- canon mf1127c firmware, i-sensys lbp621cw firmware, i-sensys lbp623cdw firmware +43 more +45 moreBuffer overflow in CPCA Resource Download process of Office / Small Office Multifunction Printers...9.8 Critical
- phpokPHPOK v6.3 was discovered to contain a remote code execution (RCE) vulnerability.9.8 Critical
- phpokFile Upload vulnerability in PHPOK 5.7.140 allows remote attackers to run arbitrary code and gain...8.8 High
- western digital my cloud os 5, westerndigital my cloud os +1 moreServer Side Request Forgery Vulnerability in Western Digital My Cloud Devices5.1 Medium
ibexa/userPackagistIbexa User Settings are accessible on the front-end for anonymous user5.4 Medium- western digital my cloud os 5, westerndigital my cloud os +1 moreOS Command Injection vulnerability in Western Digital My Cloud devices8.0 High
- western digital my cloud os 5, westerndigital my cloud os +1 moreCommand Injection Vulnerability in Western Digital My Cloud devices9.8 Critical
- pterodactyl wingsWings vulnerable to escape to host from installation container9.1 Critical
- schweitzer engineering laboratories sel-2241 rtac module, sel-3350, sel-3505 +17 more +19 moreImproper Limitation of a Pathname to a Restricted Directory4.1 Medium
- schweitzer engineering laboratories sel-2241 rtac module, sel-3350, sel-3505 +17 more +19 moreImproper Neutralization of Input During Web Page Generation4.3 Medium
- schweitzer engineering laboratories sel-2241 rtac module, sel-3350, sel-3505 +17 more +19 moreImproper Neutralization of Input During Web Page Generation4.3 Medium
- schweitzer engineering laboratories sel-2241 rtac module, sel-3350, sel-3505 +17 more +19 moreImproper Neutralization of Input During Web Page Generation4.3 Medium
- schweitzer engineering laboratories sel-2241 rtac module, sel-3350, sel-3505 +17 more +19 moreImproper Input Validation in Web Interface4.8 Medium
- schweitzer engineering laboratories sel-3350, sel-3532, sel-3555 +7 more +9 moreImproper Input Validation in Web Interface5.9 Medium
- schweitzer engineering laboratories sel-2241 rtac module, sel-3350, sel-3505 +17 more +19 moreImproper Neutralization of Input During Web Page Generation4.3 Medium
- schweitzer engineering laboratories sel-2241 rtac module, sel-3350, sel-3505 +17 more +19 moreImproper Neutralization of Input During Web Page Generation4.3 Medium
- sandisk ibi, western digital my cloud home and my cloud home duo, westerndigital my cloud home duo firmware +2 more +4 moreDenial of Service over OTA mechanism in Western Digital My Cloud Home and ibi devices4.4 Medium
- schweitzer engineering laboratories sel-2241 rtac module, sel-3350, sel-3505 +17 more +19 moreImproper Neutralization of Input During Web Page Generation4.3 Medium
- schweitzer engineering laboratories sel-2241 rtac module, sel-3350, sel-3505 +17 more +19 moreImproper Neutralization of Input During Web Page Generation4.3 Medium
- schweitzer engineering laboratories sel-2241 rtac module, sel-3350, sel-3505 +17 more +19 moreImproper Neutralization of Input During Web Page Generation4.3 Medium
- schweitzer engineering laboratories sel-2241 rtac module, sel-3350, sel-3505 +17 more +19 moreImproper Neutralization of Input During Web Page Generation4.3 Medium
- schweitzer engineering laboratories sel-2241 rtac module, sel-3350, sel-3505 +17 more +19 moreImproper Neutralization of Input During Web Page Generation4.3 Medium
- schweitzer engineering laboratories sel-2241 rtac module, sel-3350, sel-3505 +17 more +19 moreImproper Neutralization of Input During Web Page Generation4.3 Medium
- schweitzer engineering laboratories sel-2241 rtac module, sel-3350, sel-3505 +17 more +19 moreAuthentication Bypass Using an Alternate Path or Channel4.0 Medium
- schweitzer engineering laboratories sel-2241 rtac module, sel-3350, sel-3505 +17 more +19 moreImproper Certificate Validation4.7 Medium
- schweitzer engineering laboratories sel-2241 rtac module, sel-3350, sel-3505 +17 more +19 moreStoring Passwords in a Recoverable Format8.0 High
- schweitzer engineering laboratories sel-2241 rtac module, sel-3350, sel-3505 +17 more +19 moreImproper Input Validation in Web Interface9.1 Critical
- schweitzer engineering laboratories sel-2241 rtac module, sel-3350, sel-3505 +17 more +19 moreImproper Input Validation in Web Interface9.1 Critical
- schweitzer engineering laboratories sel-2241 rtac module, sel-3350, sel-3505 +17 more +19 moreChannel Accessible by Non-Endpoint6.8 Medium
- facebook hhvmHHVM 4.172.0 and all prior versions use TLS 1.0 for secure connections when handling tls:// URLs...9.8 Critical
- in-totoin-toto vulnerable to Configuration Read From Local Directory5.5 Medium
- xwiki rendering, xwiki, xwiki xwiki-rendering +2 moreImproper Neutralization of Script in Attributes in XWiki (X)HTML renderers9.1 Critical
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Local File Disclosure Vulnerability in the PAN-OS Web Interface4.4 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web Interface6.5 Medium
- weston embedded uc-ftpsAn out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality...6.5 Medium
- weston embedded uc-ftpsAn out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality...6.5 Medium
- weston embedded uc-ftpsAn authentication bypass vulnerability exists in the Authentication functionality of Weston...8.6 High
- redhat openstackA flaw was found in OpenStack due to an inconsistency between Cinder and Nova. This issue can be...6.5 Medium
- intel retail edge programImproper input validation in the Intel(R) Retail Edge Mobile Android application before version 3...5.0 Medium
- intel wake up latency tracerUncontrolled search path in the WULT software maintained by Intel(R) before version 1.0.0 (commit...8.8 High
- intel open cache acceleration softwareInsertion of sensitive information into log file in the Open CAS software for Linux maintained by...2.0 Low
- intel setup and configuration softwareIncorrect default permissions in the Intel(R) SCS Add-on software installer for Microsoft SCCM...6.7 Medium
- intel uniteUncontrolled resource consumption in the Intel(R) Unite(R) android application before Release 17...5.0 Medium
- intel uniteImproper access control in the Intel(R) Unite(R) android application before Release 17 may allow...4.4 Medium
- intel dsp builderUncontrolled search path for the DSP Builder software installer before version 22.4 for Intel(R)...6.7 Medium
- intel endpoint management assistant configuration tool, manageability commander +1 moreImproper authorization in Intel(R) EMA Configuration Tool before version 1.0.4 and Intel(R) MC...5.0 Medium
- intel quickassist technology engineImproper buffer restrictions in the Intel(R) QAT Engine for OpenSSL before version 0.6.16 may...7.5 High
- intel quartus primeUncontrolled search path in the Intel(R) Quartus(R) Prime Pro edition software before version 22...6.7 Medium
- intel endpoint management assistantImproper authorization in the Intel(R) EMA software before version 1.9.0.0 may allow an...5.0 Medium
- intel setup and configuration softwareImproper authorization in the Intel(R) SCS software all versions may allow an authenticated user...5.0 Medium
- Show moreLoading…