CVEs published in May 2023
2,572 vulnerabilities, 261 critical, 9 exploited.
- faronics insightAn issue was discovered in Faronics Insight 10.0.19045 on Windows. By abusing the Insight UDP...7.4 High
- faronics insightAn issue was discovered in Faronics Insight 10.0.19045 on Windows. Every keystroke made by any...3.3 Low
- faronics insightAn issue was discovered in Faronics Insight 10.0.19045 on Windows. Attacker-supplied input is not...6.1 Medium
- faronics insightAn issue was discovered in Faronics Insight 10.0.19045 on Windows. It is possible for an attacker...8.8 High
- faronics insightAn issue was discovered in Faronics Insight 10.0.19045 on Windows. A suitably positioned attacker...7.4 High
- faronics insightAn issue was discovered in Faronics Insight 10.0.19045 on Windows. It is possible for an attacker...9.6 Critical
- faronics insightAn issue was discovered in Faronics Insight 10.0.19045 on Windows. It is possible for a remote...7.3 High
- faronics insightAn issue was discovered in Faronics Insight 10.0.19045 on Windows. The Insight Teacher Console...4.6 Medium
- faronics insightAn issue was discovered in Faronics Insight 10.0.19045 on Windows. The Insight Teacher Console...7.1 High
- zyxel nas326 firmware, nas540 firmware, nas542 firmware +2 moreThe post-authentication command injection vulnerability in the Zyxel NAS326 firmware versions...7.2 High
- openssl, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morePossible DoS translating ASN.1 object identifiers6.5 Medium
- canonical ubuntu linux, canonical ltd. ubuntu-linux +1 moreshiftfs lock unbalance in Ubuntu-specific kernels4.4 Medium
- broadcom symantec siteminder webagentA user can supply malicious HTML and JavaScript code that will be executed in the client browser5.4 Medium
- stormshield endpoint securityStormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control: authenticated...5.5 Medium
- zephyrproject zephyrnet: shell: Improper input validation6.7 Medium
- fox-it fox datadiode firmwareFox-IT DataDiode (aka Fox DataDiode) 3.4.3 suffers from a path traversal vulnerability with...9.8 Critical
- fox-it fox datadiode firmwareFox-IT DataDiode (aka Fox DataDiode) 3.4.3 suffers from a Divide-by-Zero vulnerability in the...7.5 High
- actionlauncher action launcherAn issue was found in Action Launcher v50.5 allows an attacker to escalate privilege via...7.8 High
- actionlauncher action launcherAn issue discovered in Action Launcher for Android v50.5 allows an attacker to cause a denial of...5.5 Medium
- zte axon 40 ultra firmware, blade a31 firmware, blade a31 plus firmware +14 more +16 moreThere is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious...7.1 High
- zte axon 40 ultra firmware, blade a31 firmware, blade a31 plus firmware +14 more +16 moreThere is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious...3.3 Low
- zte axon 40 ultra firmware, blade a31 firmware, blade a31 plus firmware +14 more +16 moreThere is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious...7.1 High
- shopbeat shop beat media player, rockwellautomation studio +1 moreCross Site Request Forgery on Shop Beat Services8.8 High
- shopbeat shop beat media player, rockwellautomation studio +1 moreShop Beat Services Vulnerable To Bypass 2FA via APIs5.4 Medium
- shopbeat shop beat media player, rockwellautomation studio +1 moreShop Beat Services Vulnerable To IDOR9.1 Critical
- shopbeat shop beat media player, rockwellautomation studio +1 moreShop Beat Services Vulnerable To Insecure Permissions9.8 Critical
- shopbeat shop beat media player, rockwellautomation studio +1 moreMultiple Stored Cross-Site Scripting Vulnerabilities on Shop Beat Services5.4 Medium
- rockwellautomation studio, shopbeat shop beat media player +1 moreDirectory Traversal on Shop Beat Services5.3 Medium
- bestwebsoft relevant, relevant plugin +1 moreBestwebsoft Relevant Plugin Thumbnail information disclosure4.3 Medium
- tgstation tgstation-serverInsufficiently Protected ChatBot Credentials in tgstation-server7.7 High
- enalean tuleapTuleap vulnerable toXSS via the triggered job URL of a Jenkins job4.8 Medium
- monitorclick forms ada – form builder, forms ada +1 moreWordPress Forms Ada Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- chris reynolds progress bar, progress bar project bar +1 moreWordPress Progress Bar Plugin <= 2.2.1 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
openexrOSS-FuzzHeap-buffer-overflow in internal_huf_decompressNo scorendpiOSS-FuzzHeap-buffer-overflow in ndpi_check_punycode_stringNo score- faculty evaluation system project evaluation system, sourcecodester faculty evaluation system +1 moreSourceCodester Faculty Evaluation System sql injection4.7 Medium
- mattermostLack of URL normalization allows rendering previews for disallowed domains4.3 Medium
- sourcecodester students online internship timesheet system, students online internship timesheet system project online internship timesheet system +1 moreSourceCodester Students Online Internship Timesheet System GET Parameter rendered_report.php sql injection6.3 Medium
- codeixer product gallery slider for woocommerceWordPress Product Gallery Slider for WooCommerce Plugin <= 2.2.8 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- smash balloon custom twitter feeds (tweets widget), smashballoon custom twitter feeds +1 moreWordPress Custom Twitter Feeds (Tweets Widget) Plugin <= 1.8.4 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- libarchiveLibarchive through 3.6.2 can cause directories to have world-writable permissions. The umask()...3.9 Low
- dolibarr erp\/crmDolibarr vulnerable to remote code execution via uppercase manipulation8.8 High
- djangoblog project djangoblog, liangliangyy liangliangyy/djangoblog +1 moreCross-site Scripting (XSS) - Stored in liangliangyy/djangoblog4.8 Medium
- kiddowareAn issue was discovered in the Kiddoware Kids Place Parental Control application before 3.8.50...6.4 Medium
- open-xchange ox app suiteOX App Suite before backend 7.10.6-rev37 does not enforce 2FA for all endpoints, e.g., reading...4.2 Medium
- open-xchange ox app suiteOX App Suite before backend 7.10.6-rev37 does not check HTTP header lengths when downloading, e.g...4.3 Medium
- open-xchange ox app suiteOX App Suite before backend 7.10.6-rev37 does not check size limits when downloading, e.g.,...6.5 Medium
- open-xchange ox app suiteOX App Suite before frontend 7.10.6-rev24 allows XSS via data to the Tumblr portal widget, such...6.1 Medium
- open-xchange ox app suiteOX App Suite before frontend 7.10.6-rev24 allows XSS via a non-app deeplink such as the jslob API...6.1 Medium
- open-xchange ox app suiteOX App Suite before backend 7.10.6-rev37 allows authenticated users to bypass access controls ...4.3 Medium
- Show moreLoading…