CVEs published in May 2023
2,572 vulnerabilities, 261 critical, 9 exploited.
- atif n srs simple hits counter, srs simple hits counter project simple hits counter +1 moreWordPress SRS Simple Hits Counter Plugin <= 1.1.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- jeroen peters name directory, name directory project directory +1 moreWordPress Name Directory Plugin <= 1.27.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- abdul ibad wp tabs slides, wp tabs slides project tabs slides +1 moreWordPress WP Tabs Slides Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- bob goetz wp-topbar, wp topbar project topbar +1 moreWordPress WP TopBar Plugin <= 5.36 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- user meta manager meta manager, user-meta user meta manager +1 moreWordPress User Meta Manager Plugin <= 3.4.9 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- joe dolson my calendar, my calendar project calendar +1 moreWordPress My Calendar Plugin <= 3.4.3 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- abb platform engineering tools, qcs 800xa, qcs ac450 +2 more +4 moreQCS 800xA Vulnerability identified in system log files7.8 High
- moxa mxsecurity, mxsecurity series +1 moreMXsecurity Hardcoded Credential Vulnerability9.8 Critical
- moxa mxsecurity, mxsecurity series +1 moreMXsecurity Command Injection Vulnerability7.2 High
- ibm infosphere information serverIBM InfoSphere Information Server code execution8.8 High
- bitcoin coreBitcoin Core before 24.1, when debug mode is not used, allows attackers to cause a denial of...7.5 High
- kaiostech kaiosAn issue was discovered in KaiOS 3.0 before 3.1. The /system/bin/tctweb_server binary exposes a...9.8 Critical
- kaiostech kaiosAn issue was discovered in KaiOS 3.0 and 3.1. The binary /system/kaios/api-daemon exposes a local...5.3 Medium
- linux kernelAn issue was discovered in the Linux kernel before 6.2.9. A use-after-free flaw was found in...4.7 Medium
- qtAn issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x...5.3 Medium
- nissan sylphy classic 2021 firmwareThe remote keyfob system on Nissan Sylphy Classic 2021 sends the same RF signal for each door...6.5 Medium
- hazelcastHazelcast vulnerable to unmasked password exposure4.3 Medium
- linux kernel, fedora, netapp h300s +9 more +11 moreSession race condition remote code execution vulnerability9.0 Critical
- supremainc biostar 2Suprema BioStar 2 before 2022 Q4, v2.9.1 has Insecure Permissions. A vulnerability in the web...8.8 High
- content management system project management systemIT Sourcecode Content Management System Project In PHP and MySQL With Source Code 1.0.0 is...6.1 Medium
- wekan project wekanWekan v6.84 and earlier is vulnerable to Cross Site Scripting (XSS). An attacker with user...5.4 Medium
- linksys wrt54gl firmwareThere is a command injection vulnerability in the Linksys WRT54GL router with firmware version 4...7.2 High
- wcmsIn Wcms 0.3.2, an attacker can send a crafted request from a vulnerable web application backend...9.8 Critical
- silicon project siliconGitHub repository cu/silicon commit a9ef36 was discovered to contain a reflected cross-site...6.1 Medium
- allwaysyncInsecure Permission vulnerability found in Botkind/Siber Systems SyncApp v.19.0.3.0 allows a...7.8 High
- mybbIn MyBB before 1.8.34, there is XSS in the User CP module via the user email field.6.1 Medium
- gpac, gpac gpac/gpac +1 moreNULL Pointer Dereference in gpac/gpac5.3 Medium
- gpac, gpac gpac/gpac +1 moreDivide By Zero in gpac/gpac6.8 Medium
- gpac, gpac gpac/gpac +1 moreOut-of-bounds Read in gpac/gpac6.1 Medium
- gpac, gpac gpac/gpac +1 moreStack-based Buffer Overflow in gpac/gpac5.5 Medium
- sitecore experience platformDirectory Traversal vulnerability in Sitecore Experience Platform through 10.2 allows remote...7.5 High
- sitecore experience platformDirectory Traversal vulnerability in Site Core Experience Platform 10.2 and earlier allows...6.5 Medium
- eclipse openj9In Eclipse Openj9 before version 0.38.0, in the implementation of the shared cache (which is...7.0 High
binutilsOSS-FuzzHeap-buffer-overflow in bfd_getl32No scoresuricataMageiaUpdated suricata packages fix security vulnerabilityNo score- class scheduling system project scheduling system, sourcecodester class scheduling system +1 moreSourceCodester Class Scheduling System POST Parameter search_teacher_result.php cross site scripting3.5 Low
- quest kace systems deployment applianceThere is an LDAP bind credentials exposure on KACE Systems Deployment and Remote Site appliances...6.5 Medium
- 0kims snarkjsDouble spend in snarkjs7.5 High
- lightbend akka httpWhen Akka HTTP before 10.5.2 accepts file uploads via the FileUploadDirectives.fileUploadAll...4.7 Medium
- linux kernel, netapp h300s firmware, h410s firmware +2 more +4 moreThe Linux kernel 6.3 has a use-after-free in iopt_unmap_iova_range in drivers/iommu/iommufd...4.4 Medium
- hledgerAn issue was discovered in hledger before 1.23. A Stored Cross-Site Scripting (XSS) vulnerability...5.4 Medium
- linux kernelAn issue was discovered in netfilter in the Linux kernel before 5.10. There can be a use-after...6.7 Medium
- bill erickson gallery metabox, gallery metabox project metabox +1 moreWordPress Gallery Metabox Plugin <= 1.5 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- pingonline dyslexiefont freeWordPress Dyslexiefont Free Plugin <= 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- flamescorpion auto affiliate linksWordPress Auto Affiliate Links Plugin <= 6.3 is vulnerable to Broken Access Control5.4 Medium
- jgwhite33 wp airbnb review sliderWordPress WP Airbnb Review Slider Plugin <= 3.2 is vulnerable to Cross Site Request Forgery (CSRF)7.1 High
- robosoft photo gallery, images, slider in rbs image gallery, robogallery +1 moreWordPress Robo Gallery Plugin <= 3.2.11 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- huawei emui, harmonyos +1 moreThe multimedia video module has a vulnerability in data processing.Successful exploitation of...7.5 High
- huawei emui, harmonyos +1 moreThe Settings module has the file privilege escalation vulnerability.Successful exploitation of...7.5 High
- huawei emui, harmonyos +1 moreThe Settings module has the file privilege escalation vulnerability.Successful exploitation of...7.5 High
- Show moreLoading…