CVEs published in May 2023
2,572 vulnerabilities, 261 critical, 9 exploited.
- libreswan, redhat enterprise linux, enterprise linux eus +2 more +4 moreA vulnerability was found in the libreswan library. This security issue occurs when an IKEv1...7.5 High
- oracle mysql, oracle corporation mysql server, netapp oncommand insight +2 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...4.9 Medium
- oracle mysql, oracle corporation mysql server, netapp oncommand insight +2 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...4.9 Medium
- oracle mysql, oracle corporation mysql server, netapp oncommand insight +2 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...4.9 Medium
- moodleMoodle vulnerable to stored Cross-site Scripting5.4 Medium
- greenplum-db gpdb, vmware greenplum database +1 moreArbitrary File Write when Extracting Tarballs in greenplum-db7.4 High
- collabora onlineReflected XSS vulnerability in CollaboraOnline4.3 Medium
- xwiki, xwiki xwiki-platform +1 moreURL Redirection to Untrusted Site in XWiki4.7 Medium
- anuko time tracker, timetracker +1 moreSQL Injection Vulnerability in anuko timetracker8.2 High
- facelessuser pymdown extensions, pymdown-extensions +1 moreArbitrary file inclusion with the pymdowm-snippets extension7.5 High
- patriksimek vm2Sandbox Escape9.8 Critical
- patriksimek vm2Inspect method manipulation in vm25.3 Medium
spamassassinTuxCareUpdate of spamassassinNo scoreradare2OSS-FuzzHeap-use-after-free in get_got_entryNo scoremysql-8.0Ubuntumysql-8.0 regressionNo score- activecampaignActiveCampaign < 8.1.12 - Contributor+ Stored XSS5.4 Medium
- ninjaforms ninja forms, unknown ninja forms contact form +1 moreNinja Forms < 3.6.22 - Reflected XSS6.1 Medium
- themeisle product addons & fields for woocommerce, product addons \& fields for woocommerce +1 moreProduct Addons & Fields for WooCommerce < 32.0.6 - Admin+ Stored Cross-Site Scripting4.8 Medium
- bitapps bit formBit Form < 1.9 - RCE via Unauthenticated Arbitrary File Upload9.8 Critical
- help desk wp project desk wp, unknown help desk wp +1 moreHelp Desk WP <= 1.2.0 - Editor+ Stored XSS5.4 Medium
- unknown clock in portal- staff & attendance management, infigosoftware clock in portal- staff \& attendance management +1 moreClock In Portal <= 2.1 - Staff Deletion via CSRF4.3 Medium
- faaiq pretty url, pretty url project url +1 morePretty Url <= 1.5.4 - Admin+ Stored XSS in plugin settings4.8 Medium
- essekia tablesomeTablesome < 1.0.9 - Reflected XSS6.1 Medium
- pushassist push notifications, team pushassist push notifications for wordpress by pushassist +1 morePushAssist <= 3.0.8 - Reflected Cross-Site Scripting6.1 Medium
- unknown active directory integration / ldap integration, miniorange active directory integration \/ ldap integration +1 moreActive Directory Integration / LDAP Integration < 4.1.1 - Unauthenticated Data Disclosure7.5 High
- f\(x\) toc project toc, unknown f(x) toc +1 moref(x) TOC <= 1.1.0 - Contributor+ Stored XSS5.4 Medium
- rapidexp rapidexpcartRapidExpCart <= 1.0 - Stored XSS via CSRF5.4 Medium
- unknown clock in portal- staff & attendance management, infigosoftware clock in portal- staff \& attendance management +1 moreClock In Portal <= 2.1 - Holidays Deletion via CSRF4.3 Medium
- tagdiv composer, unknown tagdiv composer +1 moretagDiv Composer < 4.0 - Reflected Cross-site Scripting6.1 Medium
- unknown kiwiz invoices certification & pdf system, kiwiz invoices certification \& pdf system project invoices certification \& pdf system +1 moreKIWIZ Invoices Certification & PDF System <= 2.1.3 - Unauthenticated Arbitrary File Download7.5 High
- unknown woocommerce order status change notifier, woocommerce order status change notifier +1 moreWooCommerce Order Status Change Notifier <= 1.1.0 - Subscriber+ Arbitrary Order Status Update6.5 Medium
- bizlibraryBizLibrary <= 1.1 - Admin+ Stored XSS4.8 Medium
- i13websolution thumbnail carousel sliderThumbnail carousel slider < 1.1.10 - Reflected XSS6.1 Medium
- unknown clock in portal- staff & attendance management, infigosoftware clock in portal- staff \& attendance management +1 moreClock In Portal <= 2.1 - Designation Deletion via CSRF4.3 Medium
- codepress visitor statistics, osamaesh wp visitor statistics (real time traffic) +1 moreWP Visitor Statistics (Real Time Traffic) < 6.9 - Unauthenticated SQLi9.8 Critical
- ad inserter inserter, unknown ad inserter +1 moreAd Inserter < 2.7.27 - Admin+ PHP Object Injection7.2 High
- riverside http headersHTTP Headers < 1.18.8 - Admin+ SQL Injection7.2 High
- duplicator ezp maintenance modeWordPress EZP Maintenance Mode Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- messagebird sparkpostWordPress SparkPost Plugin <= 3.2.5 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- ozan canakli white label branding for elementor page builder, white label branding for elementor page builder project label branding for elementor page builder +1 moreWordPress White Label Branding for Elementor Page Builder Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- rvola wp original media pathWordPress WP Original Media Path Plugin <= 2.4.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- sumo social share boostWordPress Social Share Boost Plugin <= 4.4 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- ncrafts formcraftWordPress FormCraft Plugin <= 1.2.6 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- property hive propertyhiveWordPress PropertyHive Plugin <= 1.5.48 is vulnerable to Cross Site Scripting (XSS)7.1 High
- sick ftmg-esd15axx firmware, ftmg-esd20axx firmware, ftmg-esd25axx firmware +11 more +13 moreUncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215,...5.3 Medium
- sick ftmg-esd15axx firmware, ftmg-esd20axx firmware, ftmg-esd25axx firmware +11 more +13 moreCleartext Storage of Sensitive Information in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214,...5.3 Medium
- sick ftmg-esd15axx firmware, ftmg-esd20axx firmware, ftmg-esd25axx firmware +11 more +13 moreUse of Password Hash Instead of Password for Authentication in SICK FTMg AIR FLOW SENSOR with...6.2 Medium
- sick ftmg-esd15axx firmware, ftmg-esd20axx firmware, ftmg-esd25axx firmware +11 more +13 moreObservable Response Discrepancy in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215,...5.3 Medium
- sick ftmg-esd15axx firmware, ftmg-esd20axx firmware, ftmg-esd25axx firmware +11 more +13 moreInclusion of Sensitive Information in Source Code in SICK FTMg AIR FLOW SENSOR with Partnumbers...5.3 Medium
- sick ftmg-esd15axx firmware, ftmg-esd20axx firmware, ftmg-esd25axx firmware +11 more +13 moreUncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215,...7.5 High
- Show moreLoading…