CVEs published in May 2023
2,572 vulnerabilities, 261 critical, 9 exploited.
- jerryscriptJerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the...5.5 Medium
- jerryscriptJerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the vm_loop...5.5 Medium
- jerryscriptJerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the...5.5 Medium
- jerryscriptJerryscript 3.0 (commit 1a2c047) was discovered to contain an Assertion Failure via the...5.5 Medium
- jerryscriptJerryscript 3.0 (commit 1a2c047) was discovered to contain an Assertion Failure via the...5.5 Medium
- jerryscriptJerryscript 3.0 (commit 05dbbd1) was discovered to contain out-of-memory issue in malloc.5.5 Medium
- jerryscriptJerryscript 3.0 *commit 1a2c047) was discovered to contain an Assertion Failure via the component...5.5 Medium
- softexpert excellence suiteSoftExpert (SE) Excellence Suite 2.x versions before 2.1.3 is vulnerable to Local File Inclusion...9.8 Critical
- storage unit rental management system project unit rental management systemFile Upload vulnerability found in Oretnom23 Storage Unit Rental Management System v.1.0 allows a...9.8 Critical
- judging management system project management systemSQL injection vulnerability found in Judging Management System v.1.0 allows a remote attacker to...9.8 Critical
- craftcms craft cmsCraftCMS allows remote attacker to execute arbitrary code via crafted script to Section parameter8.8 High
- companymaps project companymapsCross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker...5.4 Medium
- webroot secureanywhereAn issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before...5.5 Medium
- webroot secureanywhereAn issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before...5.5 Medium
- webroot secureanywhereAn issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before...5.5 Medium
- companymaps project companymapsSQL injection vulnerability found in Maximilian Vogt companymaps (cmaps) v.8.0 allows a remote...9.8 Critical
- companymaps project companymapsCross Site Scripting (XSS) vulnerability in vogtmh cmaps (companymaps) 8.0 allows attackers to...6.1 Medium
- kodcloud kodboxkodbox 1.2.x through 1.3.7 has a Sensitive Information Leakage issue.7.5 High
- extplorereXtplorer 2.1.15 is vulnerable to Insecure Permissions. File upload in file manager allows...8.8 High
- optoma 1080pstxAn authentication bypass in Optoma 1080PSTX C02 allows an attacker to access the administration...9.8 Critical
- lavaliteLavaLite vulnerable to web cache poisoning9.8 Critical
- lavaliteLavaLite CMS vulnerable to host header injection attack6.1 Medium
- linagora linagora/twake, twake +1 moreImproper Restriction of Excessive Authentication Attempts in linagora/twake5.5 Medium
- open-emr openemr, openemr openemr/openemr +1 moreImproper Access Control in openemr/openemr8.8 High
- froxlor, froxlor froxlor/froxlor +1 moreAllocation of Resources Without Limits or Throttling in froxlor/froxlor6.8 Medium
- francoisjacquet francoisjacquet/rosariosis, rosariosis +1 moreStorage of Sensitive Data in a Mechanism without Access Control in francoisjacquet/rosariosis7.5 High
- soft-o free password managerA DLL Hijacking issue discovered in Soft-o Free Password Manager 1.1.20 allows attackers to...7.8 High
- autodesk 3ds max usdA malicious actor may convince a user to open a malicious USD file that may trigger an out-of...7.8 High
- autodesk 3ds max usdA malicious actor may convince a user to open a malicious USD file that may trigger an out-of...7.8 High
- autodesk 3ds max usdA malicious actor may convince a user to open a malicious USD file that may trigger an...7.8 High
- autodesk 3ds max usdA malicious actor may convince a user to open a malicious USD file that may trigger a use-after...7.8 High
- autodesk infraworksA maliciously crafted DLL file can be forced to read beyond allocated boundaries in Autodesk...7.8 High
- synapsoft pdfocusSynapsoft pdfocus 1.17 is vulnerable to local file inclusion and server-side request forgery...6.5 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions before 15.9.8, 15.10.0 before 15.10...6.3 Medium
- vmware aria operations, cloud foundation +1 moreVMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with...6.7 Medium
- vmware cloud foundation, vrealize operations +1 moreVMware Aria Operations contains a Local privilege escalation vulnerability. A malicious actor...6.7 Medium
- vmware cloud foundation, vrealize operations +1 moreVMware Aria Operations contains a deserialization vulnerability. A malicious actor with...7.2 High
- vmware cloud foundation, vrealize operations +1 moreVMware Aria Operations contains a privilege escalation vulnerability. An authenticated malicious...8.8 High
- netapp snapcenterSnapCenter versions 4.7 prior to 4.7P2 and 4.8 prior to 4.8P1 are susceptible to a vulnerability...9.8 Critical
- vinteo video coreVinteo VCC v2.36.4 was discovered to contain a reflected cross-site scripting (XSS) vulnerability...6.1 Medium
- jedox, jedox cloud +1 moreAn Information disclosure vulnerability in /be/rpc.php in Jedox GmbH Jedox 2020.2.5 allow remote,...5.3 Medium
- jedox, jedox cloud +1 moreA Remote Code Execution (RCE) vulnerability in /be/rpc.php in Jedox 2020.2.5 allows remote...7.5 High
- loadbalancer enterprise va maxLoadbalancer.org Enterprise VA MAX through 8.3.8 has an OS Command Injection vulnerability that...8.8 High
- loadbalancer enterprise va maxThe web-services interface of Loadbalancer.org Enterprise VA MAX through 8.3.8 could allow an...8.1 High
- vyperlang vyperVyper vulnerable to incorrect ordering of arguments for kwargs passed to internal calls7.5 High
- vyperlang vyperVyper vulnerable to integer overflow in loop7.5 High
- vyperlang vyperVyper vulnerable to OOB DynArray access when array is on both LHS and RHS of an assignment7.5 High
in-totoPyPIin-toto: PGP trust model not (fully) consideredNo scoregithub.com/ipfs/kuboGogithub.com/ipfs/kubo affected by DOS Bitswap unbounded persistent memory leak5.3 Medium- xpdfStack overflow in Xpdf 4.04 due to object loop in PDF embedded file tree2.9 Low
- Show moreLoading…