CVEs published in May 2023
2,572 vulnerabilities, 261 critical, 9 exploited.
- kramerav via go2 firmwareKramerAV VIA GO² < 4.0.1.1326 is vulnerable to Unauthenticated arbitrary file read.7.5 High
- totolink x5000r firmwareTOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contains a command insertion...9.8 Critical
- totolink x5000r firmwareTOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion...9.8 Critical
- totolink x5000r firmwareTOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contains a post-authentication...8.8 High
- actonic inline table editingA stored cross-site scripting (XSS) vulnerability in the Inline Table Editing application before...5.4 Medium
- sailpoint identityiqSailPoint IdentityIQ Unsafe use of Reflection Vulnerability9.0 Critical
- churchcrmA stored Cross-site scripting (XSS) vulnerability in the FundRaiserEditor.php component of...5.4 Medium
- deviniti issue syncAn issue in Deviniti Issue Sync Synchronization v3.5.2 for Jira allows attackers to obtain the...7.5 High
- mkucej mkucej/i-librarian-free, scilico i\, librarian +1 moreCross-site Scripting (XSS) - Stored in mkucej/i-librarian-free4.1 Medium
- mkucej mkucej/i-librarian-free, scilicot i\, librarian +1 moreCross-site Scripting (XSS) - Reflected in mkucej/i-librarian-free9.0 Critical
- webbax myinventoryIncorrect Access Control in the module "My inventory" (myinventory) <= 1.6.6 from Webbax for...7.5 High
- gpac, gpac gpac/gpac +1 moreUnchecked Return Value in gpac/gpac4.4 Medium
- gpac, gpac gpac/gpac +1 moreNULL Pointer Dereference in gpac/gpac5.3 Medium
- nilsteampassnet nilsteampassnet/teampass, teampass +1 moreCross-site Scripting (XSS) - Stored in nilsteampassnet/teampass8.1 High
- linux kernelA known cache speculation vulnerability, known as Branch History Injection (BHI) or Spectre-BHB,...5.5 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaq6.7 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaq6.0 Medium
- story saver for instagram - video downloader project saver for instagram - video downloaderStory Saver for Instragram - Video Downloader 1.0.6 for Android exists exposed component, the...9.8 Critical
- churchcrmA stored Cross-site scripting (XSS) vulnerability in ChurchCRM 4.5.3 allows remote attackers to...5.4 Medium
- stormshield endpoint securityStormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control that allows an...4.3 Medium
- linux kernel, netapp h300s, h410c +3 more +5 moreAn issue was discovered in the Linux kernel before 6.2. The ntfs3 subsystem does not properly...7.1 High
- uniview camera firmwareMultiple models of the Uniview IP Camera (e.g., IPC_G6103 B6103.16.10.B25.201218, IPC_G61, IPC21,...9.8 Critical
- fighting cock information system project cock information systemSQL Injection vulnerability found in Fighting Cock Information System v.1.0 allows a remote...7.5 High
- bestwebsoft twitter, twitter plugin +1 moreBestWebSoft Twitter Plugin Settings Page twitter.php twttr_settings_page cross-site request forgery4.3 Medium
- jstachioJStachio XSS vulnerability: Unescaped single quotes5.4 Medium
- leantimeLeantime Stored Cross-site Scripting Vulnerability8.9 High
- google chromeInappropriate implementation in Extensions API in Google Chrome prior to 114.0.5735.90 allowed an...4.3 Medium
- google chromeInappropriate implementation in Downloads in Google Chrome prior to 114.0.5735.90 allowed an...6.5 Medium
- google chromeInsufficient data validation in Installer in Google Chrome on Windows prior to 114.0.5735.90...7.8 High
- google chromeInappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90...4.3 Medium
- google chromeInappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90...4.3 Medium
- google chromeType Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to...8.8 High
- google chromeType Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to...8.8 High
- google chromeOut of bounds memory access in Mojo in Google Chrome prior to 114.0.5735.90 allowed a remote...8.8 High
- google chromeUse after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to...8.8 High
- google chromeUse after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to...8.8 High
- google chromeUse after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to...8.8 High
- google chromeUse after free in Extensions in Google Chrome prior to 114.0.5735.90 allowed an attacker who...8.8 High
- google chromeOut of bounds write in Swiftshader in Google Chrome prior to 114.0.5735.90 allowed a remote...8.8 High
- ibm gskit, http server +1 moreIBM GSKit information disclosure7.5 High
- xibosignage xibo, xibo-cms +1 moreSensitive Information Disclosure abusing Stack Trace in Xibo CMS4.3 Medium
- xibosignage xibo, xibo-cms +1 moreSensitive Information Disclosure abusing SQL Injection in Xibo CMS display map6.5 Medium
- xibosignage xibo, xibo-cms +1 moreSensitive Information Disclosure abusing SQL Injection in Xibo CMS nameFilter6.5 Medium
- kyvernoKyverno before 1.9.5 Sweet32 Medium Strength Cipher Suites9.3 Critical
- mozilla sccacheLocal Privilege Escalation in sccache7.8 High
- xibosignage xibo, xibo-cms +1 moreSensitive Information Disclosure abusing SQL Injection in Xibo CMS dataset filter6.5 Medium
- xibosignage xibo, xibo-cms +1 moreXibo CMS vulnerable to Remote Code Execution through Zip Slip8.8 High
- metersphereMeterSphere denial of service vulnerability6.5 Medium
- hitachi energy foxman-un, unem +1 moreA vulnerability exists in a FOXMAN-UN and UNEM logging component, it only affects systems that...4.0 Medium
- okfn ckan, ckan ckan-docker-base +1 moreExcessive permissions for ckan user8.8 High
- Show moreLoading…