CVEs published in May 2023
2,572 vulnerabilities, 261 critical, 9 exploited.
- alexander lueken podlove subscribe button, podlove subscribe button +1 moreWordPress Podlove Subscribe button Plugin <= 1.3.7 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- eric teubert podlove podcast publisher, podlove podcast publisher +1 moreWordPress Podlove Podcast Publisher Plugin <= 3.8.3 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
python-os-brickUbuntupython-os-brick regressionNo scorenovaUbuntunova regressionNo scorepython-glance-storeUbuntupython-glance-store regressionNo scorecinderUbuntucinder regressionNo scoreels-defineTuxCareUpdate of alt-phpNo scoregeoipupdateopenSUSESecurity update for geoipupdateNo scoreels-defineTuxCareUpdate of alt-phpNo score- dell vxrail hci, vxrail hyperconverged infrastructure +1 moreDell VxRail versions earlier than 7.0.450, contain(s) an OS command injection vulnerability in...4.7 Medium
- dell vxrail hci, vxrail hyperconverged infrastructure +1 moreDell VxRail, versions prior to 7.0.450, contains an OS command injection Vulnerability in...6.7 Medium
- hitachi ops center analyzerReflrected Cross Site Scripting Vulnerability in Hitachi Ops Center Analyzer7.6 High
- eparks fiberlink 210 firmwareAn OS Command Injection vulnerability in Parks Fiberlink 210 firmware version V2.1.14_X000 was...7.2 High
- easyimages2.0 project easyimages2.0EasyImages2.0 ? 2.8.1 is vulnerable to Cross Site Scripting (XSS) via viewlog.php.6.1 Medium
- piwigoPiwigo 13.6.0 is vulnerable to SQL Injection via in the "profile" function.9.8 Critical
- piwigoPiwigo 13.6.0 is vulnerable to SQL Injection via /admin/permalinks.php.9.8 Critical
- piwigoPiwigo 13.6.0 is vulnerable to Cross Site Request Forgery (CSRF) in the "add tags" function.4.3 Medium
- phpgurukul old age home management systemOld Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter.9.8 Critical
- linux kernel, fedora, netapp h300s +8 more +10 moreTree connection race condition remote code execution vulnerability9.8 Critical
- hanwhavision ane-l6012r firmware, ane-l7012r firmware, ano-l6012r firmware +115 more +117 moreHanwha IP Camera ANE-L7012R 1.41.01 is vulnerable to Command Injection due to improper...8.8 High
- hanwhavision ane-l6012r firmware, ane-l7012r firmware, ano-l6012r firmware +115 more +117 moreHanwha IP Camera ANE-L7012R 1.41.01 is vulnerable to Cross Site Scripting (XSS).5.4 Medium
- hanwhavision ane-l6012r firmware, ane-l7012r firmware, ano-l6012r firmware +427 more +429 moreCertain Hanwha products are vulnerable to Denial of Service (DoS). ck vector is: When an empty...5.3 Medium
- wuzhicmsWuzhi CMS v3.1.2 has a storage type XSS vulnerability in the backend of the Five Finger CMS b2b...5.4 Medium
- skyscreamer nevado jmsCommand injection in nevado-jms7.8 High
- dlink dir-300 firmwareD-Link DIR-300 firmware <=REVA1.06 and <=REVB2.06 is vulnerable to File inclusion via /model...9.8 Critical
- agshome smart alarm project smart alarm firmwareWeak security in the transmitter of AGShome Smart Alarm v1.0 allows attackers to gain full access...7.5 High
- mydigoo dg-hamb firmwareWeak security in the transmitter of Digoo DG-HAMB Smart Home Security System v1.0 allows...7.5 High
- blitzwolf bw-is22 firmwareWeak security in the transmitter of Blitzwolf BW-IS22 Smart Home Security Alarm v1.0 allows...7.5 High
- keruistore kerui w18 firmwareWeak Security in the 433MHz keyfob of Kerui W18 Alarm System v1.0 allows attackers to gain full...7.5 High
- oretnom23 employee and visitor gate pass logging systemSourceCodester Employee and Visitor Gate Pass Logging System v1.0 is vulnerable to SQL Injection...9.8 Critical
- wondershare filmoraWondershare Filmora 12 (Build 12.2.1.2088) was discovered to contain an unquoted service path...7.8 High
- linksys e2000 firmwareThere is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0...7.2 High
- linksys e2000 firmwareThere is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0...7.2 High
- alistgo alistAList 3.15.1 is vulnerable to Incorrect Access Control, which can be exploited by attackers to...7.5 High
- eyoucmsA Cross-Site Request Forgery (CSRF) in EyouCMS v1.6.2 allows attackers to execute arbitrary...4.3 Medium
- webassembly binary toolkitAn issue in wasm2c 1.0.32, wasm2wat 1.0.32, wasm-decompile 1.0.32, and wasm-validate 1.0.32...7.5 High
- webassembly binary toolkitWebAssembly wat2wasm v1.0.32 allows attackers to cause a libc++abi.dylib crash by putting '@'...5.5 Medium
- wso2 api managerA reflected cross-site scripting (XSS) vulnerability in /authenticationendpoint/login.do of WSO2...6.1 Medium
- teeworldsA heap use-after-free in the component CDataFileReader::GetItem of teeworlds v0.7.5 allows...5.5 Medium
- teeworldsTeeworlds v0.7.5 was discovered to contain memory leaks.7.5 High
- valvesoftware half-lifeA buffer overflow in the component hl.exe of Valve Half-Life up to 5433873 allows attackers to...7.3 High
- contec solarview compact firmwareSolarView Compact <= 6.0 is vulnerable to Insecure Permissions. Any file on the server can be...9.1 Critical
- cloudexplorer-dev cloudexplorer-dev/cloudexplorer-lite, fit2cloud cloudexplorer lite +1 moreImproper Access Control in cloudexplorer-dev/cloudexplorer-lite8.8 High
- cloudexplorer-dev cloudexplorer-dev/cloudexplorer-lite, fit2cloud cloudexplorer lite +1 moreAuthorization Bypass Through User-Controlled Key in cloudexplorer-dev/cloudexplorer-lite7.2 High
- inc2734 snow monkey forms, snow monkey forms project monkey forms +1 moreDirectory traversal vulnerability in Snow Monkey Forms versions v5.0.6 and earlier allows a...9.8 Critical
- monkey wrench inc. mw wp form, mw wp form project wp form +1 moreUnrestricted upload of file with dangerous type exists in MW WP Form versions v4.4.2 and earlier,...9.8 Critical
- monkey wrench inc. mw wp form, mw wp form project wp form +1 moreDirectory traversal vulnerability in MW WP Form versions v4.4.2 and earlier allows a remote...9.8 Critical
- beekeeper studio, inc. studio, beekeeperstudio beekeeper-studio +1 moreBeekeeper Studio versions prior to 3.9.9 allows a remote authenticated attacker to execute...8.8 High
- inaba denki sangyo co., ltd. wi-fi ap unit, inaba ac-wapu-300-p firmware, ac-wapu-300 firmware +2 more +4 moreWi-Fi AP UNIT AC-WAPU-300 v1.00_B07 and earlier, AC-WAPU-300-P v1.00_B08P and earlier, AC-WAPUM...7.2 High
- icom sr-7100vn firmware, icom incorporated sr-7100vn, icom sr-7100vn\#31 firmware +2 morePrivilege escalation vulnerability in SR-7100VN firmware Ver.1.38(N) and earlier and SR-7100VN ...6.8 Medium
- Show moreLoading…