CVEs published in May 2023
2,572 vulnerabilities, 261 critical, 9 exploited.
- motorola cx2l firmwareMotorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the...8.8 High
- motorola cx2l firmwareMotorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the...8.8 High
- motorola cx2l firmwareMotorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the...8.8 High
- apsystems alternergy power control softwareAltenergy Power Control Software C1.2.5 was discovered to contain a remote code execution (RCE)...7.2 High
- phpgurukul hospital management systemA privilege escalation issue was found in PHP Gurukul Hospital Management System In v.4.0 allows...9.8 Critical
- seqrite end point securityIncorrect access control in Quick Heal Technologies Limited Seqrite Endpoint Security (EPS) all...7.8 High
- gl-inet gl-a1300 firmware, gl-ap1300 firmware, gl-ap1300lte firmware +29 more +31 moreA path traversal issue was discovered on GL.iNet devices before 3.216. Through the file sharing...7.5 High
- gl-inet gl-a1300 firmware, gl-ap1300 firmware, gl-ap1300lte firmware +29 more +31 moreAn issue was discovered on GL.iNet devices before 3.216. The function guci2_get() found in...9.8 Critical
- gl-inet gl-a1300 firmware, gl-ap1300 firmware, gl-ap1300lte firmware +29 more +31 moreAn issue was discovered on GL.iNet devices before 3.216. There is an arbitrary file write in...4.9 Medium
- cassianetworks access controllerCassia Access controller before 2.1.1.2203171453, was discovered to have a unprivileged ...5.3 Medium
- lightbend akka discovery, akka actor +1 moreIn Lightbend Akka before 2.8.1, the async-dns resolver (used by Discovery in DNS mode and...7.5 High
- moveitMoveIT v1.1.11 was discovered to contain a cross-site scripting (XSS) vulenrability via the API...6.1 Medium
- webkul qloappsCross Site Scripting vulnerability found in Webkil QloApps v.1.5.2 allows a remote attacker to...6.1 Medium
- prestashop possearchproductsPrestashop possearchproducts 1.7 is vulnerable to SQL Injection via PosSearch::find().9.8 Critical
- lfprojects mlflowmflow vulnerable to directory traversal7.5 High
- spring-boot-actuator-logview project spring-boot-actuator-logviewspring-boot-actuator-logview 0.2.13 allows Directory Traversal to sibling directories via...5.3 Medium
- medisys weblabMedical Systems Co. Medisys Weblab Products v19.4.03 was discovered to contain a SQL injection...9.8 Critical
- kodcloud kodboxkodbox <= 1.37 is vulnerable to Cross Site Scripting (XSS) via the debug information.6.1 Medium
- adobe substance 3d painter, substance3d - painter +1 moreZDI-CAN-20369: Adobe Substance 3D Painter USD File Parsing Uninitialized Variable Information Disclosure Vulnerability5.5 Medium
- adobe substance 3d painter, substance3d - painter +1 moreZDI-CAN-20360: Adobe Substance 3D Painter USD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe substance 3d painter, substance3d - painter +1 moreZDI-CAN-20365: Adobe Substance 3D Painter USDA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe substance 3d painter, substance3d - painter +1 moreZDI-CAN-20361: Adobe Substance 3D Painter USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe substance 3d painter, substance3d - painter +1 moreZDI-CAN-20359: Adobe Substance 3D Painter USD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe substance 3d painter, substance3d - painter +1 moreZDI-CAN-20364: Adobe Substance 3D Painter USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- adobe substance 3d painter, substance3d - painter +1 moreZDI-CAN-20372: Adobe Substance 3D Painter PLY File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability7.8 High
- adobe substance 3d painter, substance3d - painter +1 moreZDI-CAN-20368: Adobe Substance 3D Painter USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe substance 3d painter, substance3d - painter +1 moreZDI-CAN-20371: Adobe Substance 3D Painter GLTF File Parsing Uninitialized Variable Information Disclosure Vulnerability7.8 High
- adobe substance 3d painter, substance3d - painter +1 moreZDI-CAN-20370: Adobe Substance 3D Painter USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe substance 3d painter, substance3d - painter +1 moreZDI-CAN-20362: Adobe Substance 3D Painter USD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe substance 3d painter, substance3d - painter +1 moreZDI-CAN-20363: Adobe Substance 3D Painter USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- adobe substance 3d painter, substance3d - painter +1 moreZDI-CAN-20366: Adobe Substance 3D Painter USDC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- adobe substance 3d painter, substance3d - painter +1 moreZDI-CAN-20367: Adobe Substance 3D Painter USDC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- ubiquiti inc. unifi osA Cross-site WebSocket Hijacking (CSWSH) vulnerability found in UniFi OS 2.5 and earlier allows a...6.5 Medium
- braveAn omission of security-relevant information vulnerability exists in Brave desktop prior to...4.3 Medium
- rocket.chatA NoSQL injection vulnerability has been identified in the listEmojiCustom method call within...5.3 Medium
- rocket.chatA vulnerability has been discovered in Rocket.Chat where a markdown parsing issue in the "Search...6.1 Medium
- rocket.chatA vulnerability has been identified in Rocket.Chat, where the ACL checks in the Slash Command ...4.3 Medium
- rocket.chatA vulnerability has been identified where a maliciously crafted message containing a specific...7.5 High
- rocket.chatAn improper authorization vulnerability exists in Rocket.Chat <6.0 that could allow a hacker to...6.5 Medium
- fetlife rollout-uiCross Site Scripting (XSS) Vulnerability in Fetlife rollout-ui gem6.1 Medium
- postgresql, fedoraproject fedora, redhat enterprise linux +1 more +3 moreRow security policies disregard user ID changes after inlining; PostgreSQL could permit incorrect...5.4 Medium
- postgresql, fedoraproject fedora, redhat enterprise linux +1 more +3 moreschema_element defeats protective search_path changes; It was found that certain database calls...7.2 High
- canon mf1127c firmware, i-sensys lbp621cw firmware, i-sensys lbp623cdw firmware +43 more +45 moreArbitrary Files can be installed in the Setting Data Import function of Office / Small Office...2.2 Low
- canon mf1127c firmware, i-sensys lbp621cw firmware, i-sensys lbp623cdw firmware +43 more +45 moreImproper Authentication of RemoteUI of Office / Small Office Multifunction Printers and Laser...3.1 Low
- canon mf1127c firmware, i-sensys lbp621cw firmware, i-sensys lbp623cdw firmware +43 more +45 moreUnintentional change of settings during initial registration of system administrators which uses...5.9 Medium
- canon mf1127c firmware, i-sensys lbp621cw firmware, i-sensys lbp623cdw firmware +43 more +45 moreBuffer overflow in IPP sides attribute process of Office / Small Office Multifunction Printers...9.8 Critical
- canon mf1127c firmware, i-sensys lbp621cw firmware, i-sensys lbp623cdw firmware +43 more +45 moreBuffer overflow in IPP number-up attribute process of Office / Small Office Multifunction...9.8 Critical
- canon mf1127c firmware, i-sensys lbp621cw firmware, i-sensys lbp623cdw firmware +43 more +45 moreBuffer overflow in NetBIOS QNAME registering and communication process of Office / Small Office...9.8 Critical
- canon mf1127c firmware, i-sensys lbp621cw firmware, i-sensys lbp623cdw firmware +43 more +45 moreBuffer overflow in mDNS NSEC record registering process of Office / Small Office Multifunction...9.8 Critical
- canon mf1127c firmware, i-sensys lbp621cw firmware, i-sensys lbp623cdw firmware +43 more +45 moreBuffer overflow in the Address Book of Mobile Device function of Office / Small Office...9.8 Critical
- Show moreLoading…