CVEs published in May 2023
2,572 vulnerabilities, 261 critical, 9 exploited.
- netboxA stored cross-site scripting (XSS) vulnerability in the Create Circuit Types (/circuits/circuit...5.4 Medium
- netboxA stored cross-site scripting (XSS) vulnerability in the Create Rack Roles (/dcim/rack-roles/)...5.4 Medium
- amazon alexaAmazon Alexa software version 8960323972 on Echo Dot 2nd generation and 3rd generation devices...7.6 High
- zyxel atp series firmware, usg flex 50(w) firmware, usg flex series firmware +27 more +29 moreA buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware...9.8 Critical
- zyxel atp series firmware, usg flex 50(w) firmware, usg flex series firmware +27 more +29 moreA buffer overflow vulnerability in the notification function in Zyxel ATP series firmware...9.8 Critical
- wondershare mobiletransInsecure permissions in MobileTrans v4.0.11 allows attackers to escalate privileges to local...7.8 High
- icrealtime icip-p2012t firmwareIC Realtime ICIP-P2012T 2.420 is vulnerable to Incorrect Access Control via unauthenticated port...7.5 High
- mitel mivoice connectA vulnerability in the Connect Mobility Router component of MiVoice Connect versions 9.6.2208.101...7.2 High
- mitel mivoice connectA vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect versions 9.6...8.8 High
- mitel mivoice connectA vulnerability in the Edge Gateway component of Mitel MiVoice Connect versions 19.3 SP2 (22.24...9.8 Critical
- mitel mivoice connectA vulnerability in the Headquarters server component of Mitel MiVoice Connect versions 19.3 SP2 ...9.8 Critical
- sofawiki project sofawikiSofaWiki <= 3.8.9 has a file upload vulnerability that leads to command execution.9.8 Critical
- nilsteampassnet nilsteampassnet/teampass, teampass +1 moreCode Injection in nilsteampassnet/teampass7.1 High
- mitel mivoice connectA vulnerability in the conferencing component of Mitel MiVoice Connect through 19.3 SP2 and 20.x,...7.4 High
- mitel mivoice connectA vulnerability in the conferencing component of Mitel MiVoice Connect through 19.3 SP2 and 20.x,...6.1 Medium
- kubernetes minikube[minikube] ssh server with default password8.4 High
- kubernetes minikube[minikube] Network Port exposure in minikube running on macOS using Docker driver9.8 Critical
- fit2cloud linaJumpserver 2.10.0 <= version <= 2.26.0 contains multiple stored XSS vulnerabilities because of...5.4 Medium
- opentext archive center administrationThe client in OpenText Archive Center Administration through 21.2 allows XXE attacks....7.1 High
- credenceanalytics ideal - wealth and fundsSQL injection in "/Framewrk/Home.jsp" file (POST method) in tCredence Analytics iDEAL Wealth and...6.5 Medium
- kubernetesrunAsNonRoot logic bypass for Windows containers7.8 High
- kubernetes ingress-nginxIngress-nginx `path` sanitization can be bypassed with newline character7.6 High
- granth go pricing - wordpress responsive pricing tables, granthweb go pricing +1 moreGo Pricing - WordPress Responsive Pricing Tables <= 3.3.19 - Improper Authorization to Arbitrary File Upload7.1 High
- granth go pricing - wordpress responsive pricing tables, granthweb go pricing +1 moreGo Pricing - WordPress Responsive Pricing Tables <= 3.3.19 - Missing Authorization to Limited Privilege Granting4.6 Medium
- granth go pricing - wordpress responsive pricing tables, granthweb go pricing +1 moreGo Pricing - WordPress Responsive Pricing Tables <= 3.3.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- hcl domino appdev packHCL Domino AppDev Pack is susceptible to a User Account Enumeration vulnerability5.3 Medium
- sqlite jdbc project jdbc, xerial sqlite-jdbc +1 moreSqlite-jdbc vulnerable to remote code execution when JDBC url is attacker controlled8.8 High
- adam retail automation systems mobilmen terminal software, adampos mobilmen el terminali yazilimi +1 moreSQLi in AdamPOS's Mobilmen Terminal Software9.8 Critical
- socket socket.io-parserInsufficient validation when decoding a Socket.IO packet7.3 High
- ignite realtime openfireOpenfire administration console authentication bypass8.6 High
- finex media competition management systemInformation Disclosure in Finex Media's Competition Management System7.5 High
- finex media competition management systemIDOR in Finex Media's Competition Management System8.8 High
- hypr serverMissing Authentication for critical function vulnerability in HYPR Server allows Authentication...8.5 High
- servicenow, servicenow records +1 moreCross-Site Scripting (XSS) vulnerabilities exist in ServiceNow records allowing an authenticated...4.3 Medium
- about me 3000 widget project me 3000 widget, csaba kissi about me 3000 widget +1 moreWordPress About Me 3000 widget Plugin <= 2.2.6 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- sigmaplugin advanced database cleanerWordPress Advanced Database Cleaner Plugin <= 3.1.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- dogblocker read more excerpt linkWordPress Read More Excerpt Link Plugin <= 1.6 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- dogblocker minify htmlWordPress Minify HTML Plugin <= 2.1.7 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
ntopngOSS-FuzzHeap-buffer-overflow in ICMPinfo::dissectICMPNo scorentopngOSS-FuzzHeap-buffer-overflow in NetworkInterface::dissectPacketNo scorecloud-initUbuntucloud-init regressionNo score- slickremix feed them socialWordPress Feed Them Social Plugin <= 3.0.2 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- ibm powervm hypervisorIBM PowerVM Hypervisor denial of service6.7 Medium
- manoj thulasidas theme tweaker, theme tweaker project tweaker +1 moreWordPress Theme Tweaker Plugin <= 5.20 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- radiustheme the post gridWordPress The Post Grid Plugin <= 5.0.4 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- brainstorm force starter templatesWordPress Starter Templates Plugin <= 3.1.20 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- hm plugin wordpress books galleryWordPress Books Gallery Plugin <= 4.4.8 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- rhys wynne wp email captureWordPress WordPress Email Marketing Plugin – WP Email Capture Plugin <= 3.9.3 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- miniorange wordpress social login and register (discord, google, twitter, linkedin), wordpress social login and register \(discord\, google\, twitter\, linkedin\) +1 moreWordPress WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) Plugin <= 7.5.14 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- e4j s.r.l. vikbooking hotel booking engine & pms, vikwp vikbooking hotel booking engine \& pms +1 moreWordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.5.12 is vulnerable to Cross Site Request Forgery (CSRF)6.3 Medium
- Show moreLoading…