CVEs published in May 2023
2,572 vulnerabilities, 261 critical, 9 exploited.
- xpdfStack overflow in Xpdf 4.04 due to object loop in PDF page label tree2.9 Low
- xpdfDivide-by-zero in Xpdf 4.04 due to bad color space object2.9 Low
- ibm spectrum virtualizeIBM Spectrum Virtualize information disclosure5.9 Medium
- ibm websphere application serverIBM WebSphere Application Server XML external entity injection6.3 Medium
- etcdetcd key name can be accessed via LeaseTimeToLive API3.1 Low
- linuxfoundation vitessVitess VTAdmin users that can create shards can deny access to other functions4.1 Medium
- gin-gonic gin, github.com/gin-gonic/gin +1 moreImproper handling of filenames in Content-Disposition HTTP header in github.com/gin-gonic/gin4.3 Medium
- rockwell automation factorytalk vantagepointA cross site request forgery vulnerability exists in Rockwell Automation's FactoryTalk...7.1 High
- rockwell automation thinmanagerRockwell Automation ThinManager product allows the use of medium strength ciphers. If the...7.5 High
- rockwell automation kinetix 5500 ethernet/ip servo drive, rockwellautomation kinetix 5500 firmware +1 moreRockwell Automation Kinetix 5500 Vulnerable to Open Port Exploitation9.4 Critical
- rockwell automation armorstart st, rockwellautomation armorstart st 281e firmware, armorstart st 284ee firmware +2 moreRockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack4.7 Medium
- rockwell automation armorstart st, rockwellautomation armorstart st 281e firmware, armorstart st 284ee firmware +2 moreRockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack4.7 Medium
- rockwell automation armorstart st, rockwellautomation armorstart st 281e firmware, armorstart st 284ee firmware +2 moreRockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack4.7 Medium
- rockwell automation armorstart st, rockwellautomation armorstart st 281e firmware, armorstart st 284ee firmware +2 moreRockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack4.7 Medium
- rockwell automation armorstart st, rockwellautomation armorstart st 281e firmware, armorstart st 284ee firmware +2 moreRockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack4.7 Medium
- rockwell automation armorstart st, rockwellautomation armorstart st 281e firmware, armorstart st 284ee firmware +2 moreRockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack4.7 Medium
- rockwell automation armorstart st, rockwellautomation armorstart st 281e firmware, armorstart st 284ee firmware +2 moreRockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack5.5 Medium
- rockwell automation armorstart st, rockwellautomation armorstart st 281e firmware, armorstart st 284ee firmware +2 moreRockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack7.0 High
- rockwell automation armorstart st, rockwellautomation armorstart st 281e firmware, armorstart st 284ee firmware +2 moreRockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack7.0 High
- rockwell automation armorstart st, rockwellautomation armorstart st 281e firmware, armorstart st 284ee firmware +2 moreRockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack7.0 High
- pimcore customer management framework, customer-data-framework +1 morePimcore vulnerable to Business Logic Errors in Customer automation rules4.3 Medium
skopeoopenSUSESecurity update for skopeoNo score- oretnom23 online computer and laptop storeSourceCodester Online Computer and Laptop Store Master.php sql injection6.3 Medium
- oretnom23 online computer and laptop storeSourceCodester Online Computer and Laptop Store view_categories.php sql injection6.3 Medium
- rico-macchi wp links page, wp links page project links page +1 moreWordPress WP Links Page Plugin <= 4.9.3 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- oretnom23 online computer and laptop storeSourceCodester Online Computer and Laptop Store view_product.php sql injection6.3 Medium
tcmallocOSS-FuzzHeap-buffer-overflowNo score- oretnom23 online computer and laptop storeSourceCodester Online Computer and Laptop Store products.php sql injection6.3 Medium
- oretnom23 online computer and laptop storeSourceCodester Online Computer and Laptop Store products.php cross site scripting3.5 Low
- oretnom23 ac repair and services systemSourceCodester AC Repair and Services System sql injection6.3 Medium
helmopenSUSESecurity update for helmNo scorebuildahopenSUSESecurity update for buildahNo scorebuildahSUSESecurity update for buildahNo scorecontainer-suseconnectSUSESecurity update for container-suseconnectNo score- mozilla firefox, firefox esr, thunderbird +2 moreProtocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of...7.5 High
golang-github-prometheus-prometheusopenSUSESecurity update for golang-github-prometheus-prometheusNo score- fernando briano useragent-spyWordPress UserAgent-Spy Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- oretnom23 lost and found information systemSourceCodester Lost and Found Information System index.php sql injection6.3 Medium
- oretnom23 lost and found information systemSourceCodester Lost and Found Information System sql injection6.3 Medium
- tenda ac23, ac23 firmware +1 moreTenda AC23 Service Port 7329 ate command injection7.2 High
- weaver e-officeWeaver E-Office uploadify.php unrestricted upload6.3 Medium
- weaver e-officeWeaver E-Office File Upload utility_all.php command injection6.3 Medium
- tp-link archer c7v2, archer c7 firmware +1 moreTP-Link Archer C7v2 GET Request Parameter denial of service4.5 Medium
- usr usr-g806, usr-g806 firmware +1 moreUSR USR-G806 Web Management Page hard-coded password9.8 Critical
- digitalpersona fpsensorDigitalPersona FPSensor DpHost.exe unquoted search path5.3 Medium
- file tracker manager system project tracker manager system, sourcecodester file tracker manager system +1 moreSourceCodester File Tracker Manager System POST Parameter update_password.php sql injection6.3 Medium
- online exam system project exam system, sourcecodester online exam system +1 moreSourceCodester Online Exam System GET Parameter updateCourse.php sql injection6.3 Medium
- online internship management system project internship management system, sourcecodester online internship management system +1 moreSourceCodester Online Internship Management System POST Parameter login.php sql injection7.3 High
- luatex project luatex, miktex, tug tex live +2 moreLuaTeX before 1.17.0 enables the socket library by default.5.5 Medium
- motorola cx2l firmwareMotorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the...8.8 High
- Show moreLoading…