CVEs published in May 2023
2,572 vulnerabilities, 261 critical, 9 exploited.
- kopa theme framework, kopatheme kopa framework +1 moreWordPress Kopa Framework Plugin <= 1.3.5 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- clickfunnelsWordPress clickfunnels Plugin <= 3.1.1 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- glen don l. mongaya drag and drop multiple file upload – contact form 7, codedropz drag and drop multiple file upload - contact form 7 +1 moreWordPress Drag and Drop Multiple File Upload – Contact Form 7 Plugin <= 1.3.6.5 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- booking ultra pro appointments booking calendar plugin, bookingultrapro booking ultra pro appointments booking calendar, deetronix booking ultra pro appointments booking calendar plugin +2 moreWordPress Booking Ultra Pro Plugin <= 1.1.4 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- liferay dxp, portal, digital experience platform +2 moreMissing authorization in Liferay portal5.3 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay portal has unauthorized access to object definition via search2.7 Low
- liferay dxp, portal, digital experience platform +2 moreLiferay portal unauthorized access to objects via OAuth 2 scope2.7 Low
- liferay dxp, portal, digital experience platform +2 moreSQL injection in Liferay Portal6.4 Medium
- liferay dxp, portal, digital experience platform +2 moreCross-site scripting in Liferay Portal4.8 Medium
kubernetes1.18openSUSESecurity update for kubernetes1.18No score- liferay dxp, portal, digital experience platform +2 moreCross-site scripting in Liferay Portal5.4 Medium
- liferay dxp, portal, digital experience platform +2 moreCross-site scripting in Liferay Portal5.4 Medium
- apache rocketmqApache RocketMQ: Possible remote code execution vulnerability when using the update configuration function9.8 Critical
- liferay dxp, portal, digital experience platform +2 moreCross-site scripting in Liferay Portal6.1 Medium
calamares-settings-ubuntuUbuntucalamares-settings-ubuntu vulnerabilityNo scoreca-certificatesUbuntuca-certificates updateNo score- liferay dxp, portal, digital experience platform +2 moreCross-site scripting in Liferay Portal4.8 Medium
- liferay dxp, portal, digital experience platform +2 moreCross-site scripting in Liferay Portal5.4 Medium
- ipekyolu software auto damage tracking software, ipekyolunet software auto damage tracking software +1 moreSQLi in Ipekyolu Software's Auto Damage Tracking Software9.8 Critical
- liferay dxp, portal, digital experience platform +2 moreCross-site scripting in Liferay Portal4.8 Medium
- minova technology etraceSQLi in Minova Technology's eTrace9.8 Critical
- liferay dxp, portal, digital experience platform +2 moreCross-site scripting in Liferay Portal5.4 Medium
- armoli cargo tracking systemIDOR in Armoli Technology's Cargo Tracking System8.8 High
- cityboss e-municipalitySQLi in Cityboss Software's E-municipality9.8 Critical
- sourcecodester theme park ticketing system, theme park ticketing system project park ticketing system +1 moreSourceCodester Theme Park Ticketing System GET Parameter print_ticket.php sql injection6.3 Medium
- online jewelry store project jewelry store, sourcecodester online jewelry store +1 moreSourceCodester Online Jewelry Store POST Parameter customer.php cross site scripting3.5 Low
- simple design daily journal, simpledesign diary with lock\ +1 moreSimple Design Daily Journal SQLite Database cleartext storage in a file or on disk2.3 Low
firefoxUbuntufirefox regressionsNo score- siteserver cms, sscms siteserver cms +1 moreSiteServer CMS search cross site scripting3.5 Low
- bitdefender antivirus plus, internet security, total security +2 moreImproper Quoting Path Issue in Bitdefender Total Security6.7 Medium
- mitsubishi electric corporation melsec iq-f series fx5u-32mr/ds, melsec iq-f series fx5u-32mr/es, melsec iq-f series fx5u-32mt/ds +84 more +86 moreDenial-of-Service and Remote Code Execution Vulnerability in MELSEC Series CPU module10.0 Critical
- briarproject briarThe Introduction Client in Briar through 1.5.3 does not implement out-of-band verification for...7.4 High
- briarproject briarBramble Handshake Protocol (BHP) in Briar before 1.5.3 is not forward secure: eavesdroppers can...5.9 Medium
- briarproject briarBriar before 1.4.22 allows attackers to spoof other users' messages in a blog, forum, or private...6.5 Medium
- briarproject briarBramble Synchronisation Protocol (BSP) in Briar before 1.4.22 allows attackers to cause a denial...7.5 High
- cloudogu scm managerA stored cross-site scripting (XSS) vulnerability in Cloudogu GmbH SCM Manager v1.2 to v1.60...5.4 Medium
- netboxA stored cross-site scripting (XSS) vulnerability in the Create Regions (/dcim/regions/) function...5.4 Medium
- netboxA stored cross-site scripting (XSS) vulnerability in the Create Contacts (/tenancy/contacts/)...5.4 Medium
- netboxA stored cross-site scripting (XSS) vulnerability in the Create Rack (/dcim/rack/) function of...5.4 Medium
- netboxA stored cross-site scripting (XSS) vulnerability in the Create Sites (/dcim/sites/) function of...5.4 Medium
- netboxA vulnerability in Netbox v3.5.1 allows unauthenticated attackers to execute queries against the...9.1 Critical
- netboxA stored cross-site scripting (XSS) vulnerability in the Create Contact Roles (/tenancy/contact...5.4 Medium
- netboxA stored cross-site scripting (XSS) vulnerability in the Create Tenants (/tenancy/tenants/)...5.4 Medium
- netboxA stored cross-site scripting (XSS) vulnerability in the Create Power Panels (/dcim/power-panels/...5.4 Medium
- netboxA stored cross-site scripting (XSS) vulnerability in the Create Site Groups (/dcim/site-groups/)...5.4 Medium
- netboxA stored cross-site scripting (XSS) vulnerability in the Create Provider Accounts (/circuits...5.4 Medium
- netboxA stored cross-site scripting (XSS) vulnerability in the Create Locations (/dcim/locations/)...5.4 Medium
- netboxA stored cross-site scripting (XSS) vulnerability in the Create Contact Groups (/tenancy/contact...5.4 Medium
- netboxA stored cross-site scripting (XSS) vulnerability in the Create Providers (/circuits/providers/)...5.4 Medium
- netboxA stored cross-site scripting (XSS) vulnerability in the Create Tenant Groups (/tenancy/tenant...5.4 Medium
- Show moreLoading…