CVEs published in May 2023
2,572 vulnerabilities, 261 critical, 9 exploited.
- kiwitcms kiwi, kiwi tcms +1 morekiwitcms vulnerable to stored XSS via unrestricted files upload8.1 High
- snap one ovrc cloud, snapone orvc +1 moreDevices using Snap One OvrC cloud are sent to a web address when...7.1 High
- snap one ovrc cloud, snapone orvc +1 moreSnap One OvrC Pro devices versions 7.2 and prior do not validate firmware...8.6 High
- snap one ovrc cloud, snapone orvc +1 moreSnap One OvrC Pro versions prior to 7.3 use HTTP connections when downloading a...7.5 High
- snap one ovrc cloud, snapone orvc +1 moreSnap One OvrC cloud servers contain a route an attacker can use to bypass requirements and...8.6 High
- snap one ovrc cloud, snapone orvc +1 moreWhen supplied with a random MAC address, Snap One OvrC cloud servers will return...5.3 Medium
- snap one ovrc cloud, snapone orvc +1 moreThe Hub in the Snap One OvrC cloud platform is a device used to centralize and manage nested...8.6 High
- apache inlongApache InLong: Privilege escalation vulnerability for InLong9.8 Critical
- apache inlongApache InLong: Insecurity direct object references cancelling applications7.5 High
- apache inlongApache InLong: Insufficient Session Expiration in InLong9.1 Critical
- apache inlongApache InLong: Insecure direct object references for inlong sources9.1 Critical
- apache inlongApache InLong: Weak Password Implementation in InLong9.8 Critical
python-reportlabMageiaUpdated python-reportlab packages fix security vulnerabilityNo score- apache inlongApache InLong: Users who joined later can see the data of deleted users6.5 Medium
- teltonika rut model routers, teltonika-networks rut200 firmware, rut240 firmware +16 more +18 moreVersions 00.07.00 through 00.07.03 of Teltonika’s RUT router firmware contain an operating...8.0 High
- apache inlongApache InLong: Attackers can change the immutable name and type of cluster7.5 High
- teltonika rut model routers, teltonika-networks rut200 firmware, rut240 firmware +16 more +18 moreVersions 00.07.00 through 00.07.03.4 of Teltonika’s RUT router firmware contain a packet dump...8.0 High
- teltonika remote management systemTeltonika’s Remote Management System versions prior to 4.10.0 have a feature allowing users to...8.8 High
- teltonika remote management systemTeltonika’s Remote Management System versions prior to 4.10.0 contain a cross-site scripting ...7.5 High
- teltonika remote management systemTeltonika’s Remote Management System versions 4.14.0 is vulnerable to an unauthorized attacker...9.0 Critical
- teltonika remote management systemTeltonika’s Remote Management System versions prior to 4.10.0 contain a virtual private network ...5.8 Medium
- teltonika remote management systemTeltonika’s Remote Management System versions prior to 4.10.0 use device serial numbers and MAC...8.1 High
- teltonika remote management systemTeltonika’s Remote Management System versions prior to 4.10.0 contain a function that allows...5.3 Medium
- archivist project archivist, eric teubert archivist – custom archive templates +1 moreWordPress Archivist – Custom Archive Templates Plugin <= 1.7.4 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- inkthemes colorwayWordPress ColorWay Theme <= 4.2.3 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
wiresharkOSS-FuzzHeap-use-after-free in wmem_memdupNo scorefaad2OSS-FuzzGlobal-buffer-overflow in hf_adjustmentNo scorewiresharkOSS-FuzzHeap-use-after-free in fragment_addresses_equalNo score- apache inlongApache InLong: Attackers can change the immutable name and type of nodes7.5 High
- apache inlongApache InLong: IDOR make users can delete others' subscription7.5 High
- schneider electric legacy ion products, powerlogic ion7400, powerlogic ion8650 +8 more +10 moreA CWE-319: Cleartext transmission of sensitive information vulnerability exists that could cause...8.8 High
- apache inlongApache InLong: IDOR make users can bind any cluster7.5 High
- apache inlongApache InLong: JDBC URL bypassing by adding blanks7.5 High
fileTuxCare,file-develTuxCare,file-libsTuxCare +1 more +3 moreUpdate of fileNo score- dell dss 8440 firmware, emc storage nx3240 firmware, emc storage nx3340 firmware +28 more +30 moreDell PowerEdge 14G server BIOS versions prior to 2.18.1 and Dell Precision BIOS versions prior...6.1 Medium
- bumsys project bumsys, unilogies unilogies/bumsys +1 moreSQL Injection in unilogies/bumsys7.2 High
- apache tomcat, debian linux, netapp 7-mode transition tool +2 moreApache Tomcat: Fix for CVE-2023-24998 is incomplete7.5 High
- secondlinethemes auto youtube importerWordPress Auto YouTube Importer Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- asgaros forum, thomas belser asgaros forum +1 moreWordPress Asgaros Forum Plugin <= 2.2.0 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- alejandro quick restaurant reservationsWordPress Quick Restaurant Reservations Plugin <= 1.5.4 is vulnerable to Cross Site Request Forgery (CSRF)5.3 Medium
- webmat flexible elementor panelWordPress Flexible Elementor Panel Plugin <= 2.3.8 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- loginizerWordPress Loginizer Plugin <= 1.7.5 is vulnerable to Cross Site Request Forgery (CSRF)4.7 Medium
- xootix side cart woocommerce (ajax), side cart woocommerce +1 moreWordPress Side Cart Woocommerce (Ajax) Plugin < 2.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
terraform-provider-nullopenSUSESecurity update for terraform-provider-nullNo score- akarmenia crayon syntax highlighter, crayon syntax highlighter project syntax highlighter +1 moreWordPress Crayon Syntax Highlighter Plugin <= 2.8.4 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- stylist project stylist, stylistwp extra block design, style, css for any gutenberg blocks +1 moreWordPress Extra Block Design, Style, CSS for ANY Gutenberg Blocks Plugin <= 0.2.6 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- hover image project image, julian weinert // cs&m hover image +1 moreWordPress Hover Image Plugin <= 1.4.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- nicearma dnui, dnui-delete-not-used-image +1 moreWordPress DNUI Plugin <= 2.8.1 is vulnerable to Cross Site Request Forgery (CSRF)6.3 Medium
- mediamatic media library folders, plugincraft mediamatic – media library folders +1 moreWordPress Mediamatic – Media Library Folders Plugin <= 2.8.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- supsystic coming soon by supsystic, coming soon +1 moreWordPress Coming Soon by Supsystic Plugin <= 1.7.10 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- Show moreLoading…