CVEs published in May 2023
2,572 vulnerabilities, 261 critical, 9 exploited.
- logaster logo generatorWordPress Logaster Logo Generator Plugin <= 1.3 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- german krutov login and registration attempts limit, login and registration attempts limit project and registration attempts limit +1 moreWordPress LOGIN AND REGISTRATION ATTEMPTS LIMIT Plugin <= 2.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- damir calusic wp basic elements, wp basic elements project basic elements +1 moreWordPress WP Basic Elements Plugin <= 5.2.15 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- chronoengine chronoformsWordPress Chronoforms Plugin <= 7.0.9 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- apache jspwikiApache JSPWiki: XSS Injection points in several plugins6.1 Medium
- inspireui mstore api, mstore api – create native android & ios apps on the cloud +1 moreMStore API <= 3.9.2 - Authentication Bypass9.8 Critical
- inspireui mstore api, mstore api – create native android & ios apps on the cloud +1 moreMStore API <= 3.9.0 - Authentication Bypass9.8 Critical
- inspireui mstore api, mstore api – create native android & ios apps on the cloud +1 moreMStore API <= 3.9.1 - Authentication Bypass9.8 Critical
- mipjz project mipjzA stored cross-site scripting (XSS) vulnerability in mipjz v5.0.5 allows attackers to execute...5.4 Medium
- mipjz project mipjzA stored cross-site scripting (XSS) vulnerability in mipjz v5.0.5 allows attackers to execute...5.4 Medium
- thecosy icecmsIceCMS v1.0.0 is vulnerable to Cross Site Scripting (XSS).5.4 Medium
- thecosy icecmsIceCMS v1.0.0 has Insecure Permissions. There is unauthorized access to the API, resulting in the...7.5 High
- storecommander quickaccountingIn the Store Commander scquickaccounting module for PrestaShop through 3.7.3, multiple sensitive...9.8 Critical
- scfixmyprestashop project scfixmyprestashopIn the Store Commander scfixmyprestashop module through 2023-05-09 for PrestaShop, sensitive SQL...9.8 Critical
- storecommander customers exportIn the Store Commander scexportcustomers module for PrestaShop through 3.6.1, sensitive SQL calls...9.8 Critical
- wftpd project wftpdIn WFTPD 3.25, usernames and password hashes are stored in an openly viewable wftpd.ini...7.5 High
- zlmediakitZLMediaKit 4.0 is vulnerable to Directory Traversal.7.5 High
- icrealtime icip-p2012t firmwareIC Realtime ICIP-P2012T 2.420 is vulnerable to Incorrect Access Control via an exposed HTTP...7.5 High
- pimcore pimcore/customer-data-framework, customer management framework +1 moreStoring Passwords in a Recoverable Format in pimcore/customer-data-framework6.7 Medium
- tornadoweb tornadoOpen redirect in Tornado6.1 Medium
- libjpeg-turboA heap-based buffer overflow issue was discovered in libjpeg-turbo in...6.5 Medium
- wacom tablet driver installerWacom Tablet Driver installer prior to 6.4.2-1 (for macOS) contains an improper link resolution...7.8 High
- squarepiginteractive fusioninvoiceStored Cross Site Scripting (XSS) vulnerability in Square Pig FusionInvoice 2023-1.0, allows...6.1 Medium
- libreoffice, debian linux +1 moreRemote documents loaded without prompt via IFrame5.3 Medium
- canonical snapd, ubuntu linux +1 moreUsing the TIOCLINUX ioctl request, a malicious snap could inject contents into the input of the...10.0 Critical
- libreoffice, debian linux +1 moreArray Index UnderFlow in Calc Formula Parsing7.8 High
- granth go pricing - wordpress responsive pricing tables, granthweb go pricing +1 moreGo Pricing - WordPress Responsive Pricing Tables <= 3.3.19 - Authenticated (Subscriber+) PHP Object Injection8.8 High
- hitachi vantara pentaho, vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +2 moreHitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data8.0 High
- hitachi vantara pentaho, vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +2 moreHitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization4.3 Medium
- avast antivirus, escanav escan anti-virus +1 moreeScan Antivirus IoControlCode PROCOBSRVESX.SYS 0x22E008u null pointer dereference5.5 Medium
- avast antivirus, filseclab twister antivirus +1 moreTwister Antivirus IoControlCode filppd.sys 0x804f2140 denial of service5.5 Medium
- barracuda email security gateway, email security gateway 300 firmware, email security gateway 400 firmware +4 more +6 moreRemote Code injection in Barracuda Email Security Gateway9.4 Critical
- avast antivirus, filseclab twister antivirus +1 moreTwister Antivirus IoControlCode filppd.sys 0x80800043 memory corruption5.3 Medium
- electronic flexihubFlexiHub IoControlCode fusbhub.sys 0x220088 null pointer dereference5.5 Medium
- mubarakalmehairbi touiToUI allows user-specific variables to be shared between users9.1 Critical
ca-certificatesUbuntuca-certificates updateNo score- fabulatech usb for remote desktopFabulaTech USB for Remote Desktop IoControlCode 0x220408 null pointer dereference3.3 Low
- entech monitor asset managerEnTech Monitor Asset Manager IoControlCode 0x80002014 denial of service3.3 Low
- goreleaser nfpmnfpm vulnerable to Incorrect Default Permissions7.1 High
- element-hq synapseSynapse Outgoing federation to specific hosts can be disabled by sending malicious invites5.0 Medium
- ckanCKAN remote code execution and private information access via crafted resource ids9.8 Critical
- element-hq synapseSynapse Denial of service due to incorrect application of event authorization rules during state resolution6.5 Medium
- element-hq synapseSynapse does not apply enough checks to servers requesting auth events of events in a room5.0 Medium
- cc custom taxonomy project custom taxonomy, chuyencode cc custom taxonomy +1 moreWordPress CC Custom Taxonomy Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- dev.xiligroup.com - ms xili-tidy-tagsWordPress xili-tidy-tags Plugin <= 1.12.03 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal has Inefficient Regular Expression6.5 Medium
- internet-formation wp-advanced-search, mathieu chartier wordpress wp-advanced-search +1 moreWordPress WP-Advanced-Search Plugin <= 3.3.8 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- moaluko store locator for wordpress with google maps – lotsoflocales, viadat store locator for wordpress with google maps +1 moreWordPress Store Locator Plugin <= 3.98.7 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- liferay dxp, portal, digital experience platform +2 moreInsecure Default Initialization In Liferay Portal5.3 Medium
- weightbasedshipping woocommerce weight based shippingWordPress WooCommerce Weight Based Shipping Plugin <= 5.4.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- Show moreLoading…