CVEs published in May 2023
2,572 vulnerabilities, 261 critical, 9 exploited.
- add to feedly project to feedly, david merinas add to feedly +1 moreAdd to Feedly <= 1.2.11 - Admin+ Stored XSS4.8 Medium
- themeisle product addons & fields for woocommerce, product addons \& fields for woocommerce +1 moreProduct Addons & Fields for WooCommerce < 32.0.7 - Reflected Cross-Site Scripting6.1 Medium
- apache cassandraApache Cassandra: Privilege escalation when enabling FQL/Audit logs7.8 High
- zulip, zulip server +1 moreCross-site scripting vulnerability in Zulip Server development branch via topic tooltip8.2 High
- mindsporeMindSpore json_helper.cc UpdateArray memory corruption3.5 Low
- embyEmby Server < 4.7.12.0 is vulnerable to a login bypass attack by setting the X-Forwarded-For...9.8 Critical
- emby emby.releases, embysupport security +1 moreEmby Server Proxy Header Spoofing Vulnerability9.1 Critical
- nextcloud calendar, kiteworks security-advisories +1 moreError in calendar when booking an appointment reveals the full path of the website2.6 Low
- cpp-httplib project cpp-httplibVersions of the package yhirose/cpp-httplib before 0.12.4 are vulnerable to CRLF Injection when...7.5 High
- nextcloud contacts, kiteworks security-advisories +1 moreNextcloud Contacts photos only sanitized if mime type is all lower case0.0 None
- tgstation tgstation-serverIncorrectly Specified Chat Message Destinations in tgstation-server and DreamMaker API6.1 Medium
- kanboardClipboard based cross-site scripting (blocked with default CSP) in Kanboard4.4 Medium
- moov signedxmlSignature validation bypass in github.com/moov-io/signedxml9.1 Critical
- imapsync project imapsyncimapsync through 2.229 uses predictable paths under /tmp and /var/tmp in its default mode of...6.5 Medium
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +1 more +3 moreA vulnerability was found in ImageMagick. This security flaw causes a shell command injection...7.8 High
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +1 more +3 moreA vulnerability was found in ImageMagick. This security flaw cause a remote code execution...9.8 Critical
- imagemagick, debian linux, fedoraproject extra packages for enterprise linux +2 more +4 moreA vulnerability was found in ImageMagick. This security flaw ouccers as an undefined behaviors of...5.5 Medium
- macro-video v380 proMacrovideo v380pro v1.4.97 shares the device id and password when sharing the device.7.5 High
- luowiceIncorrect access control in luowice v3.5.18 allows attackers to access cloud source code...7.5 High
- bluecms project bluecmsBlueCMS v1.6 was discovered to contain a SQL injection vulnerability via the keywords parameter...9.8 Critical
- emqx nanomqA memory leak vulnerability exists in NanoMQ 0.17.2. The vulnerability is located in the file...5.5 Medium
- minecraftMinecraft through 1.19 and 1.20 pre-releases before 7 (Java) allow arbitrary file overwrite, and...8.8 High
- avaya ix workforce engagementAvaya IX Workforce Engagement - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')6.1 Medium
- avaya ix workforce engagementAvaya IX Workforce Engagement - CWE-522: Insufficiently Protected Credentials6.5 Medium
- avaya ix workforce engagementAvaya IX Workforce Engagement - User Enumeration - CWE-204: Observable Response Discrepancy5.3 Medium
- rozcom server framework, client +1 moreROZCOM server framework7.5 High
- netskope clientROZCOM client6.2 Medium
- webbax salesboosterPrestashop salesbooster <= 1.10.4 is vulnerable to Incorrect Access Control via modules...7.5 High
- pimcore, pimcore pimcore/pimcore +1 morePath Traversal: '\..\filename' in pimcore/pimcore6.3 Medium
- pimcore, pimcore pimcore/pimcore +1 morePrivilege Defined With Unsafe Actions in pimcore/pimcore6.5 Medium
- bestweather project bestweatherAn issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a persistent...7.1 High
- bestweather project bestweatherAn issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a persistent...7.5 High
- bestweather project bestweatherAn issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a code...7.8 High
- bestweather project bestweatherAn issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause an escalation...9.8 Critical
- amdroidapp alarm clock for heavy sleepersAn issue found in Alarm Clock for Heavy Sleepers v.5.3.2 for Android allows unauthorized apps to...7.5 High
- amdroidapp alarm clock for heavy sleepersAn issue found in Alarm Clock for Heavy Sleepers v.5.3.2 for Android allows unauthorized apps to...9.8 Critical
- wavekeyboard wave animated keyboard emojiAn issue found in Wave Animated Keyboard Emoji v.1.70.7 for Android allows a local attacker to...7.8 High
- wavekeyboard wave animated keyboard emojiAn issue found in Wave Animated Keyboard Emoji v.1.70.7 for Android allows a local attacker to...5.5 Medium
- mwm edjing mixAn issue found in edjing Mix v.7.09.01 for Android allows a local attacker to cause a denial of...5.5 Medium
- mwm edjing mixAn issue found in edjing Mix v.7.09.01 for Android allows unauthorized apps to cause escalation...9.8 Critical
- dualspace lock masterThe Lock Master app 2.2.4 for Android allows unauthorized apps to modify the values in its...7.8 High
- loka soliveSoLive 1.6.14 thru 1.6.20 for Android exists exposed component, the component provides the method...9.8 Critical
- loka soliveSoLive 1.6.14 thru 1.6.20 for Android has an exposed component that provides a method to modify...7.5 High
- applika call blockerThe Call Blocker application 6.6.3 for Android allows attackers to tamper with feature-related...9.8 Critical
- applika call blockerThe Call Blocker application 6.6.3 for Android allows unauthorized applications to use exposed...9.8 Critical
- applika call blockerThe Call Blocker application 6.6.3 for Android incorrectly opens a key component that an attacker...7.5 High
- antfu antfu/utils, utils +1 morePrototype Pollution in antfu/utils5.4 Medium
- openldap, apple macos, netapp active iq unified manager +11 more +13 moreA vulnerability was found in openldap. This security flaw causes a null pointer dereference in...7.5 High
- wireshark, debian linux +1 moreXRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of...5.3 Medium
- faronics insightAn issue was discovered in Faronics Insight 10.0.19045 on Windows. An unauthenticated attacker is...8.8 High
- Show moreLoading…