CVEs published in May 2023
2,572 vulnerabilities, 261 critical, 9 exploited.
- fastweb fastgate gpon fga2130fwb firmware, fastgate vdsl2 dga4131fwb firmware +1 moreA heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB,...7.5 High
- metabaseMissing SQL permissions check in metabase5.8 Medium
- microsoft azure arc jumpstartAzure Arc Jumpstart Information Disclosure Vulnerability3.3 Low
- facebook hermesA use-after-free related to unsound inference in the bytecode generation when optimizations are...9.8 Critical
- facebook netconsdnetconsd prior to v0.2 was vulnerable to an integer overflow in its parse_packet function. A...9.8 Critical
- facebook hermesA bytecode optimization bug in Hermes prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81...9.8 Critical
- facebook hermesA type confusion bug in TypedArray prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81 could...9.8 Critical
- facebook hermesA use-after-free in BigIntPrimitive addition in Hermes prior to commit...7.5 High
- facebook hermesA null pointer dereference bug in Hermes prior to commit 5cae9f72975cf0e5a62b27fdd8b01f103e198708...7.5 High
- facebook fizzThere is a vulnerability in the fizz library prior to v2023.01.30.00 where a CHECK failure can be...7.5 High
- facebook hermesAn error in Hermes' algorithm for copying objects properties prior to commit...9.8 Critical
- facebook hermesAn error in BigInt conversion to Number in Hermes prior to commit...9.8 Critical
- johnson controls openblue enterprise manager data collectorExposure of Sensitive Information in OpenBlue Enterprise Manager Data Collector5.0 Medium
- johnson controls openblue enterprise manager data collectorImproper Authentication for OpenBlue Enterprise Manager Data Collector10.0 Critical
- silabs.com gecko platform, silabs gecko software development kit +1 moreKey duplication in GSDK5.3 Medium
- silabs.com gecko platform, silabs gecko software development kit +1 moreKey duplication in GSDK5.3 Medium
- silabs.com gecko platform, silabs gecko software development kit +1 moreKey duplication in GSDK5.3 Medium
- silabs.com gecko platform, silabs gecko software development kit +1 moreKey duplication in GSDK3.1 Low
- silabs.com gecko platform, silabs gecko software development kit +1 moreKey duplication in GSDK3.1 Low
- silabs.com gecko platform, silabs gecko software development kit +1 moreKey duplication in GSDK5.3 Medium
- silabs.com gecko platform, silabs gecko software development kit +1 moreKey duplication in GSDK5.3 Medium
- silabs.com gecko platform, silabs gecko software development kit +1 moreKey duplication in GSDK3.1 Low
- sandisk ibi, western digital my cloud home and my cloud home duo, my cloud os 5 +3 more +5 morePath Traversal Vulnerability leading to an arbitrary file read in Western Digital devices5.8 Medium
- sandisk ibi, western digital my cloud home and my cloud home duo, my cloud os 5 +3 more +5 morePath traversal vulnerability leading to an arbitrary file write in Western Digital devices5.8 Medium
- sandisk ibi, western digital my cloud home and my cloud home duo, my cloud os 5 +3 more +5 moreResource Exhaustion Vulnerability in Western Digital devices4.4 Medium
github.com/apple/swift-nioSwiftURLSwiftNIO vulnerable to HTTP request smuggling using malformed Transfer-Encoding header9.8 Critical- ombiArbitrary file read in Ombi4.9 Medium
- cnoa oacnoa OA hard-coded password6.3 Medium
assimpOSS-FuzzHeap-use-after-free in Assimp::FBXExporter::WriteObjectsNo score- totolink n200re, n200re firmware +1 moreTOTOLINK N200RE Telnet Service custom.conf password in configuration file2.3 Low
- gnu cflowGNU cflow parser.c parse_variable_declaration denial of service3.5 Low
- studio wombat shoppable imagesWordPress Shoppable Images Lite Plugin <= 1.2.3 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- mijnpress mass delete unused tagsWordPress Mass Delete Unused Tags Plugin <= 2.0.0 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- mijnpress auto prune postsWordPress Auto Prune Posts Plugin <= 1.8.0 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- berocket brands for woocommerceWordPress Brands for WooCommerce Plugin <= 3.7.0.6 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- acronis cyber infrastructureSensitive information disclosure due to improper authorization. The following products are...5.5 Medium
- monsterinsights, monsterinsights google analytics dashboard +1 moreWordPress Google Analytics by Monster Insights Plugin <= 8.14.0 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- don benjamin wp custom fields searchWordPress WP Custom Fields Search Plugin <= 1.2.34 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- theguidex user ip and locationWordPress User IP and Location Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- acronis cyber protect home officeLocal privilege escalation due to unrestricted loading of unsigned libraries. The following...7.8 High
- custom field suite project field suite, matt gibbs custom field suite +1 moreWordPress Custom Field Suite Plugin <= 2.6.2.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- haoqisir baidu tongji generator, baidu-tongji-generator project baidu-tongji-generator +1 moreWordPress Baidu Tongji generator Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- acronis agent, cyber protect 15, cyber protect +2 moreSensitive information disclosure and manipulation due to improper authorization. The following...5.4 Medium
- acronis agent, cyber protect 15, cyber protect +2 moreSensitive information disclosure due to insecure registry permissions. The following products are...3.8 Low
- acronis agent, cyber protect 15, cyber protect +2 moreSensitive information disclosure and manipulation due to improper certification validation. The...4.2 Medium
- acronis agent, cyber protect 15, cyber protect +2 moreSensitive information disclosure and manipulation due to improper certification validation. The...4.2 Medium
- acronis agent, cyber protect 15, cyber protect +2 moreLocal privilege escalation due to insecure folder permissions. The following products are...7.3 High
- acronis cyber protect 15, cyber protect +1 moreTLS/SSL weak cipher suites enabled. The following products are affected: Acronis Cyber Protect 15...5.3 Medium
- thimpress learnpress, learnpress export import +1 moreWordPress LearnPress Export Import Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)7.1 High
- cms tree page view project tree page view, jon christopher cms tree page view +1 moreWordPress CMS Tree Page View Plugin <= 1.6.7 is vulnerable to Cross Site Scripting (XSS)7.1 High
- Show moreLoading…