CVEs published in May 2023
2,572 vulnerabilities, 261 critical, 9 exploited.
- sourcecodester billing management system, oretnom23 establishment billing management system +1 moreSourceCodester Billing Management System GET Parameter editproduct.php sql injection6.3 Medium
hdf5OSS-FuzzNegative-size-param in H5MM_memcpyNo score- planet, planetlabs planet-client-python +1 morePlanet's secret file is created with excessive permissions5.2 Medium
- clickhouse java librariesClickHouse Client Certificate Password Exposure8.8 High
- anuko time tracker, timetracker +1 moreTime Tracker has Blind SQL Injection Vulnerability in Reports8.8 High
- aiven, aiven aiven-extras +1 moreaiven-extras PostgreSQL Privilege Escalation Through Overloaded Search Path8.8 High
- ibm spectrum protect plus server, spectrum protect +1 moreIBM Spectrum Protect Plus Server information disclosure4.4 Medium
- ibm security verify accessIBM Security Verify Access denial of service6.5 Medium
- google chromeUse after free in ChromeOS Camera in Google Chrome on ChromeOS prior to 113.0.5672.114 allowed a...8.8 High
- google chromeOut of bounds write in ChromeOS Audio Server in Google Chrome on ChromeOS prior to 113.0.5672.114...8.8 High
- tips and tricks hq, ruhul amin category specific rss feed subscriptionWordPress Category Specific RSS feed Subscription Plugin <= v2.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- codesolz easy ad managerWordPress Easy Ad Manager Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- justin saad simple tooltips, simple tooltips project tooltips +1 moreWordPress Simple Tooltips Plugin <= 2.1.4 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- apexchatWordPress ApexChat Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- snaborbital panoramaWordPress Panorama – WordPress Project Management Plugin Plugin <= 1.5 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- buttons x project x, gautam thapar button builder – buttons x +1 moreWordPress Button Builder – Buttons X Plugin <= 0.8.6 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
wiresharkOSS-FuzzUNKNOWN READ in wmem_tree_lookup32_array_leNo score- intel solid state drive toolboxImproper access control in the Intel(R) Solid State Drive Toolbox(TM) before version 3.4.5 may...7.1 High
- intel server board s1200btl firmware, server board s1200btlr firmware, server board s1200btlrm firmware +61 more +63 moreImproper access control in the Intel(R) Server Board S2600WTT belonging to the Intel(R) Server...7.1 High
- intel soc watch, battery life diagnostic tool, oneapi base toolkit +2 moreHeap-based overflow in Intel(R) SoC Watch based software before version 2021.1 may allow a...7.2 High
- intel trace analyzer and collectorUncontrolled search path in the Intel(R) Trace Analyzer and Collector before version 2020 update...6.7 Medium
- intel oneapi ai analytics toolkit, oneapi base toolkit, oneapi dl framework developer toolkit +3 more +5 moreImproper access control for Intel(R) oneAPI Toolkits before version 2021.1 Beta 10 may allow an...6.7 Medium
qemuOSS-FuzzHeap-buffer-overflow in sdhci_writeNo score- eclipse vert.x stomp, vert-x3 vertx-stomp +1 moreVert.x STOMP server process client frames that would not send initially a connect frame6.5 Medium
- wwbn avideoAVideo command injection vulnerability8.8 High
- sdg pnpscadaThe PnPSCADA system, a product of SDG Technologies CC, is afflicted by a critical unauthenticated...9.8 Critical
- sick fx0-gent00000 firmware, fx0-gent00010 firmware, fx0-gent00030 firmware +40 more +42 moreMissing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with...7.5 High
- caton live, catontechnology caton live +1 moreCaton Live Mini_HTTPD ping.cgi command injection6.3 Medium
- cloudflare workerdBuffer under-read in workerd6.5 Medium
- file tracker manager system project tracker manager system, sourcecodester file tracker manager system +1 moreSourceCodester File Tracker Manager System POST Parameter save_user.php cross site scripting3.5 Low
- covid-19 contact tracing system project contact tracing system, sourcecodester covid-19 contact tracing system +1 moreSourceCodester Covid-19 Contact Tracing System manage.php sql injection6.3 Medium
- h3c r160, magic r160 firmware +1 moreH3C R160 aspForm stack-based overflow5.5 Medium
- oretnom23 lost and found information systemSourceCodester Lost and Found Information System GET Parameter view.php sql injection6.3 Medium
- mattermostDB username/password revealed in application logs6.7 Medium
- mattermost, mattermost server +1 morePrivilege escalation to system admin via personal access tokens4.7 Medium
- oretnom23 lost and found information systemSourceCodester Lost and Found Information System Contact Form cross site scripting3.5 Low
- oretnom23 lost and found information systemSourceCodester Lost and Found Information System access control6.3 Medium
- apache openmeetingsApache OpenMeetings: insufficient check of invitation hash5.3 Medium
- apache openmeetingsApache OpenMeetings: allows bypass authentication8.1 High
- apache openmeetingsApache OpenMeetings: allows null-byte Injection7.2 High
- oretnom23 lost and found information systemSourceCodester Lost and Found Information System GET Parameter sql injection6.3 Medium
- wpdeveloper essential addons for elementorWordPress Essential Addons for Elementor Plugin 5.4.0-5.7.1 is vulnerable to Privilege Escalation9.8 Critical
- oretnom23 lost and found information systemSourceCodester Lost and Found Information System GET Parameter manager_category sql injection6.3 Medium
- lost and found information system project and found information system, oretnom23 lost and found information system +1 moreSourceCodester Lost and Found Information System cross site scripting3.5 Low
- ibm api connectIBM API Connect improper access control4.3 Medium
- ibm planning analytics localIBM Planning Analytics Local cross-site scripting6.4 Medium
- ibm cognos analyticsIBM Cognos Analytics cross-site scripting6.1 Medium
- edimax br-6428ns firmwareA Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows...9.8 Critical
- edimax br-6428ns firmwareA Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows...9.8 Critical
- quickjs project quickjsQuickJS commit 2788d71 was discovered to contain a stack-overflow via the component...7.5 High
- Show moreLoading…