CVEs published in May 2023
2,572 vulnerabilities, 261 critical, 9 exploited.
- hidekazu ishikawa vk all in one expansion unitCross-site scripting vulnerability in CTA post function of VK All in One Expansion Unit 9.88.1.0...5.4 Medium
- hidekazu ishikawa vk all in one expansion unitCross-site scripting vulnerability in Profile setting function of VK All in One Expansion Unit 9...5.4 Medium
- vektor-inc vk blocks, vektor,inc. vk blocks and vk blocks pro +1 moreCross-site scripting vulnerability in Post function of VK Blocks 1.53.0.1 and earlier and VK...5.4 Medium
- vektor-inc vk blocks, vektor,inc. vk blocks and vk blocks pro +1 moreCross-site scripting vulnerability in Tag edit function of VK Blocks 1.53.0.1 and earlier and VK...5.4 Medium
- stefano lissa newsletterCross-site scripting vulnerability in Newsletter versions prior to 7.6.9 allows a remote...6.1 Medium
- jins inc. meme core, jins meme firmware +1 moreJINS MEME CORE Firmware version 2.2.0 and earlier uses a hard-coded cryptographic key, which may...6.5 Medium
- contec co., ltd. solarview compact, contec sv-cpt-mc310 firmware, sv-cpt-mc310f firmware +2 moreImproper access control vulnerability in the system date/time setting page of SolarView Compact...4.3 Medium
- contec co., ltd. solarview compact, contec sv-cpt-mc310 firmware, sv-cpt-mc310f firmware +2 moreOS command injection vulnerability in the mail setting page of SolarView Compact SV-CPT-MC310...8.8 High
- contec co., ltd. solarview compact, contec sv-cpt-mc310 firmware, sv-cpt-mc310f firmware +2 moreBuffer overflow vulnerability in the multiple setting pages of SolarView Compact SV-CPT-MC310...8.8 High
- contec co., ltd. solarview compact, contec sv-cpt-mc310 firmware, sv-cpt-mc310f firmware +2 moreOS command injection vulnerability in the download page of SolarView Compact SV-CPT-MC310...8.8 High
- contec co., ltd. solarview compact, contec sv-cpt-mc310 firmware, sv-cpt-mc310f firmware +2 moreUse of hard-coded credentials exists in SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10...7.2 High
- microengine mailformMicroEngine Mailform version 1.1.0 to 1.1.8 contains a path traversal vulnerability. If the...9.8 Critical
- microengine mailformUnrestricted upload of file with dangerous type exists in MicroEngine Mailform version 1.1.0 to 1...9.8 Critical
- t&d corporation and espec mic corp. data logger products, especmic rs-12n firmware, rt-12n firmware +8 more +10 moreImproper authentication vulnerability in T&D Corporation and ESPEC MIC CORP. data logger products...9.8 Critical
- t&d corporation and espec mic corp. data logger products, especmic rs-12n firmware, rt-12n firmware +8 more +10 moreCross-site request forgery (CSRF) in T&D Corporation and ESPEC MIC CORP. data logger products...8.8 High
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreOperation restriction bypass vulnerability in MultiReport of Cybozu Garoon 5.15.0 allows a remote...4.3 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreOperation restriction bypass vulnerability in Message and Bulletin of Cybozu Garoon 4.6.0 to 5.9...4.3 Medium
- sitecore experience platformDeserialization of Untrusted Data in Sitecore Experience Platform through 10.2 allows remote...9.8 Critical
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreDenial-of-service (DoS) vulnerability in Message of Cybozu Garoon 4.10.0 to 5.9.2 allows a remote...6.5 Medium
- works mobile japan corp. drive explorer for macos, worksmobile drive explorer +1 moreCode injection vulnerability in Drive Explorer for macOS versions 3.5.4 and earlier allows an...9.8 Critical
- qrio, inc. qrio lock (q-sl2), qrio q-sl2 firmware +1 moreAuthentication bypass vulnerability in Qrio Lock (Q-SL2) firmware version 2.0.9 and earlier...8.8 High
- civicrmStored Cross Site Scripting (XSS) vulnerability in the add contact function CiviCRM 5.59.alpha1,...5.4 Medium
- t&d corporation and espec mic corp. data logger products, especmic rs-12n firmware, rt-12n firmware +8 more +10 moreMissing authentication for critical function exists in T&D Corporation and ESPEC MIC CORP. data...5.3 Medium
- garmin connect-iqThe `Toybox.Ant.BurstPayload.add` API method in CIQ API version 2.2.0 through 4.1.7 suffers from...9.8 Critical
- garmin connect-iqThe GarminOS TVM component in CIQ API version 1.0.0 through 4.1.7 is vulnerable to various buffer...9.8 Critical
- garmin connect-iqThe GarminOS TVM component in CIQ API version 2.1.0 through 4.1.7 allows applications with a...9.1 Critical
- garmin connect-iqThe `Toybox.Ant.GenericChannel.enableEncryption` API method in CIQ API version 3.2.0 through 4.1...9.8 Critical
- garmin connect-iqThe `Toybox.GenericChannel.setDeviceConfig` API method in CIQ API version 1.2.0 through 4.1.7...9.8 Critical
- garmin connect-iqThe `news` MonkeyC operation code in CIQ API version 1.0.0 through 4.1.7 fails to check that...9.8 Critical
- garmin connect-iqThe `Toybox.Cryptography.Cipher.initialize` API method in CIQ API version 3.0.0 through 4.1.7...9.8 Critical
- garmin connect-iqThe permission system implemented and enforced by the GarminOS TVM component in CIQ API version 1...7.5 High
- garmin connect-iqThe `Toybox.Graphics.BufferedBitmap.initialize` API method in CIQ API version 2.3.0 through 4.1.7...9.8 Critical
- t&d corporation and espec mic corp. data logger products, especmic rs-12n firmware, rt-12n firmware +8 more +10 moreClient-side enforcement of server-side security issue exists in T&D Corporation and ESPEC MIC...5.4 Medium
- sudytech webplus proWebPlus Pro v1.4.7.8.4-01 is vulnerable to Incorrect Access Control.9.8 Critical
- dataprobe iboot-pdu4-c20 firmware, iboot-pdu4-n20 firmware, iboot-pdu4a-c10 firmware +20 more +22 moreCVE-2022-466586.5 Medium
- dataprobe iboot-pdu4-c20 firmware, iboot-pdu4-n20 firmware, iboot-pdu4a-c10 firmware +20 more +22 moreCVE-2022-467387.2 High
- dataprobe iboot-pdu4-c20 firmware, iboot-pdu4-n20 firmware, iboot-pdu4a-c10 firmware +20 more +22 moreCVE-2022-473208.1 High
- dataprobe iboot-pdu4-c20 firmware, iboot-pdu4-n20 firmware, iboot-pdu4a-c10 firmware +20 more +22 moreCVE-2022-473118.5 High
- dataprobe iboot-pdu4-c20 firmware, iboot-pdu4-n20 firmware, iboot-pdu4a-c10 firmware +20 more +22 moreCVE-2022-49456.5 Medium
- birddog 4k quad, 4k quad firmware, a300 eyes +5 more +7 moreFiles present on firmware images could allow an attacker to gain unauthorized access as a...8.4 High
- birddog 4k quad, 4k quad firmware, a300 eyes +5 more +7 moreThe affected products have a CSRF vulnerability that could allow an attacker to execute code and...7.7 High
- psf requests, fedoraproject fedora +1 moreUnintended leak of Proxy-Authorization header in requests6.1 Medium
- posthog posthog-jsCross-site scripting in PostHog-js5.4 Medium
- ciliumPotential HTTP policy bypass when using header rules in Cilium2.6 Low
- snap one ovrc cloud, snapone orvc +1 moreIn Snap One OvrC Pro versions prior to 7.2, when logged into the...8.3 High
- snap one ovrc cloud, snapone orvc +1 moreSnap One OvrC Pro versions prior to 7.2 have their own locally...8.3 High
- parse-community parse-server-push-adapter, parseplatform parse server push adapter +1 moreInvalid push request payload crashes Parse Server4.9 Medium
- codeigniter, codeigniter4 +1 moreRemote Code Execution Vulnerability in Validation Placeholders9.8 Critical
- ginuerzh gost, go simple tunnel project simple tunnel +1 moreginuerzh/gost vulnerable to Timing Attack5.9 Medium
- django-sesIncorrect signature verification in django-ses4.6 Medium
- Show moreLoading…