CVEs published in May 2023
2,572 vulnerabilities, 261 critical, 9 exploited.
- plugin waiting, pluginbuilders waiting: one-click countdowns +1 moreWaiting: One-click countdowns <= 0.6.2 - Missing Authorization Checks leading to Authenticated (Subscriber+) Stored Cross-Site Scripting7.4 High
- sysstat project sysstat, debian linux, fedoraproject fedora +2 moresysstat through 12.7.2 allows a multiplication integer overflow in check_overflow in common.c....7.8 High
- linux kernel, redhat enterprise linux +1 moreThe Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/net...6.4 Medium
- opentext documentum content serverOpenText Documentum Content Server before 23.2 has a flaw that allows for privilege escalation...7.8 High
- totolink a3300r firmwareTOTOLINK A3300R v17.0.0cu.557 is vulnerable to Command Injection.9.8 Critical
- redisredis-7.0.10 was discovered to contain a segmentation violation.7.5 High
- zammadAn issue in Zammad v5.4.0 allows attackers to bypass e-mail verification using an arbitrary...6.5 Medium
- perfree perfreeblogAn arbitrary file upload vulnerability in the component /admin/ThemeController.java of...9.8 Critical
- lavaliteLavaLite vulnerable to Cross Site Scripting5.4 Medium
- oretnom23 student study center desk management systemSourcecodester Student Study Center Desk Management System v1.0 admin\reports\index.php#date_from...9.8 Critical
- teslamateAn issue in Teslamate v1.27.1 allows attackers to obtain sensitive information via directly...5.3 Medium
- sofawiki project sofawikiSofaWiki <=3.8.9 is vulnerable to Cross Site Scripting (XSS) via index.php.6.1 Medium
- brother industries, ltd. iprint&scan, brother iprint\&scan +1 moreBrother iPrint&Scan V6.11.2 and earlier contains an improper access control vulnerability. This...3.3 Low
- huggingface huggingface/transformers, transformers +1 moreInsecure Temporary File in huggingface/transformers4.7 Medium
- belkin f7c063 firmwareA stack-based buffer overflow in the ChangeFriendlyName() function of Belkin Smart Outlet V2...9.8 Critical
- cisco 250 series smart switches firmware, 350 series managed switches firmware, 350x series stackable managed switches firmware +236 more +238 moreCisco Small Business Series Switches Buffer Overflow Vulnerabilities8.6 High
- cisco catalyst center, digital network architecture center (dna center) +1 moreCisco DNA Center Software API Vulnerabilities5.4 Medium
- cisco catalyst center, digital network architecture center (dna center) +1 moreCisco DNA Center Software API Vulnerabilities5.4 Medium
- cisco catalyst center, digital network architecture center (dna center) +1 moreCisco DNA Center Software API Vulnerabilities5.4 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine XML External Entity Injection Vulnerabilities4.9 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine XML External Entity Injection Vulnerabilities4.9 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Arbitrary File Delete and File Read Vulnerabilities5.4 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Arbitrary File Delete and File Read Vulnerabilities5.4 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Path Traversal Vulnerabilities6.0 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Path Traversal Vulnerabilities6.0 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Command Injection Vulnerabilities6.5 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Command Injection Vulnerabilities6.5 Medium
- cisco 250 series smart switches firmware, 350 series managed switches firmware, 350x series stackable managed switches firmware +236 more +238 moreCisco Small Business Series Switches Buffer Overflow Vulnerabilities8.6 High
- cisco 250 series smart switches firmware, 350 series managed switches firmware, 350x series stackable managed switches firmware +236 more +238 moreCisco Small Business Series Switches Buffer Overflow Vulnerabilities8.6 High
- cisco 250 series smart switches firmware, 350 series managed switches firmware, 350x series stackable managed switches firmware +236 more +238 moreCisco Small Business Series Switches Buffer Overflow Vulnerabilities8.6 High
- cisco 250 series smart switches firmware, 350 series managed switches firmware, 350x series stackable managed switches firmware +236 more +238 moreCisco Small Business Series Switches Buffer Overflow Vulnerabilities8.6 High
- cisco 250 series smart switches firmware, 350 series managed switches firmware, 350x series stackable managed switches firmware +236 more +238 moreCisco Small Business Series Switches Buffer Overflow Vulnerabilities8.6 High
- cisco 250 series smart switches firmware, 350 series managed switches firmware, 350x series stackable managed switches firmware +236 more +238 moreCisco Small Business Series Switches Buffer Overflow Vulnerabilities8.6 High
- cisco 250 series smart switches firmware, 350 series managed switches firmware, 350x series stackable managed switches firmware +236 more +238 moreCisco Small Business Series Switches Buffer Overflow Vulnerabilities8.6 High
- cisco smart software manager on-premCisco Smart Software Manager On-Prem SQL Injection Vulnerability6.5 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Arbitrary File Delete and File Read Vulnerabilities5.4 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Arbitrary File Download Vulnerabilities4.9 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Arbitrary File Download Vulnerabilities4.9 Medium
- cisco 250 series smart switches firmware, 350 series managed switches firmware, 350x series stackable managed switches firmware +236 more +238 moreCisco Small Business Series Switches Buffer Overflow Vulnerabilities8.6 High
- cisco business 140ac access point firmware, business 141acm firmware, business 142acm firmware +6 more +8 moreCisco Business Wireless Access Points Social Login Guest User Authentication Bypass Vulnerability4.7 Medium
- octopus serverIn affected versions of Octopus Deploy it is possible to discover network details via error message5.3 Medium
- umbraco cmsUmbraco CMS 7.12.4 allows Remote Code Execution by authenticated administrators via msxsl:script...7.2 High
- code-projects simple photo gallery, simple photo gallery project photo gallery +1 morecode-projects Simple Photo Gallery unrestricted upload6.3 Medium
- bus dispatch and information system project dispatch and information system, code-projects bus dispatch and information system +1 morecode-projects Bus Dispatch and Information System adminHome.php sql injection6.3 Medium
- bus dispatch and information system project dispatch and information system, code-projects bus dispatch and information system +1 morecode-projects Bus Dispatch and Information System view_branch.php sql injection6.3 Medium
- bus dispatch and information system project dispatch and information system, code-projects bus dispatch and information system +1 morecode-projects Bus Dispatch and Information System view_admin.php sql injection6.3 Medium
- oretnom23 budget and expense tracker systemSourceCodester Budget and Expense Tracker System GET Parameter manage_budget.php sql injection6.3 Medium
- online exam system project exam system, sourcecodester online exam system +1 moreSourceCodester Online Exam System data sql injection6.3 Medium
- online exam system project exam system, sourcecodester online exam system +1 moreSourceCodester Online Exam System data sql injection6.3 Medium
- oretnom23 service provider management systemSourceCodester Service Provider Management System sql injection6.3 Medium
- Show moreLoading…