CVEs published in May 2023
2,572 vulnerabilities, 261 critical, 9 exploited.
- itsourcecode student management systemningzichun Student Management System login.php sql injection7.3 High
- itsourcecode student management systemningzichun Student Management System Password Reset resetPassword.php password recovery6.5 Medium
- asustor admA Directory traversal vulnerability was found on EZ Sync service of ADM8.5 High
- local service search engine management system project service search engine management system, sourcecodester local service search engine management system +1 moreSourceCodester Local Service Search Engine Management System POST Parameter cross site scripting3.5 Low
- code-projects simple chat system, simple chat system project chat system +1 moreSourceCodester Simple Chat System POST Parameter sql injection6.3 Medium
- asustor download centerA Gain Information vulnerability was found on Download Center.8.6 High
- sourcecodester train station ticketing system, train station ticketing system project station ticketing system +1 moreSourceCodester Train Station Ticketing System GET Parameter manage_prices.php sql injection6.3 Medium
- algernon project algernonAlgernon engine and themes vulnerable to Cross-site Scripting5.4 Medium
- dell networker, networker nve +1 moreDell NetWorker 19.6.1.2, contains an OS command injection Vulnerability in the NetWorker client....8.4 High
- favoriteposts favoritesFavorites <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- crmperks crm perks forms, crm perks forms – wordpress form builder, crmperks crm perks forms – wordpress form builder +2 moreCRM Perks Forms <= 1.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting4.4 Medium
- kylephillips nested pagesNested Pages <= 3.2.3 - Missing Authorization to Authenticated (Editor+) Plugin Settings Reset3.8 Low
- trasweb display post meta, term meta, comment meta, and user meta, display post meta\, term meta\, comment meta\, and user meta project post meta\, term meta\, comment meta\, and user meta +1 moreDisplay post meta, term meta, comment meta, and user meta <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- simplr registration form plus\+ project registration form plus\+Simplr Registration Form Plus+ Plugin cross site scripting3.5 Low
- bestwebsoft twitter, twitter plugin +1 moreBestWebSoft Twitter Plugin twitter.php twttr_settings_page cross site scripting2.4 Low
- featherplugins feather login page, custom login page | temporary users | rebrand login | login captcha +1 moreThe Feather Login Page plugin for WordPress is vulnerable to unauthorized access of data due to a...8.1 High
- blog-in-blog project blog-in-blogBlog-in-Blog <= 2.0.0 - Authenticated (Editor+) Local File Inclusion via Shortcode7.2 High
- wordappWordapp <= 1.6.0 - Authorization Bypass through Use of Insufficiently Unique Cryptographic Signature9.8 Critical
- featherplugins feather login page, custom login page | temporary users | rebrand login | login captcha +1 moreThe Feather Login Page plugin for WordPress is vulnerable to unauthorized loss of data due to a...5.4 Medium
- blog-in-blog project blog-in-blogBlog-in-Blog <= 2.0.0 - Authenticated (Editor+) Stored Cross-Site Scripting via Shortcode4.4 Medium
- featherplugins feather login page, custom login page | temporary users | rebrand login | login captcha +1 moreThe Feather Login Page plugin for WordPress is vulnerable to Cross-Site Request Forgery in...8.8 High
sssdDebiansssd - regression updateNo score- bmc patrolAn issue was discovered in BMC Patrol before 22.1.00. The agent's configuration can be remotely...7.5 High
- bmc patrol agent** DISPUTED ** An issue was discovered in BMC Patrol through 23.1.00. The agent's configuration...9.8 Critical
- debian linux, linux kernel, suse linux enterprise +2 moreAn issue was discovered in the Linux kernel before 6.3.3. There is an out-of-bounds read in crc16...5.5 Medium
- dcatadmin dcat adminDcat-Admin vulnerable to Stored Cross-site Scripting5.4 Medium
- dlink dir-846 firmwareD-Link DIR-846 v1.00A52 was discovered to contain a remote command execution (RCE) vulnerability...9.8 Critical
- escanav escan management consoleCross Site Scripting (XSS) in the New Policy form in Microworld Technologies eScan management...6.1 Medium
- escanav escan management consolePrivilege Escalation in the "GetUserCurrentPwd" function in Microworld Technologies eScan...9.8 Critical
- edimax br-6288acl firmwareEDIMAX BR-6288ACL v1.12 was discovered to contain an authenticated remote code execution (RCE)...8.8 High
- mp4v2 project mp4v2mp4v2 v2.1.3 was discovered to contain a memory leak via MP4File::ReadString() at mp4file_io.cpp8.8 High
- h3c magic r300-2100m firmwareH3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the...7.2 High
- h3c magic r300-2100m firmwareH3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the...7.2 High
- h3c magic r300-2100m firmwareH3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the...7.2 High
- h3c magic r300-2100m firmwareH3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the...7.2 High
- h3c magic r300-2100m firmwareH3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the...7.2 High
- h3c magic r300-2100m firmwareH3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the...7.2 High
- h3c magic r300-2100m firmwareH3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the...7.2 High
- h3c magic r300-2100m firmwareH3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the...7.2 High
- h3c magic r300-2100m firmwareH3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the...7.2 High
- h3c magic r300-2100m firmwareH3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the...7.2 High
- h3c magic r300-2100m firmwareH3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the...7.2 High
- h3c magic r300-2100m firmwareH3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the...7.2 High
- h3c magic r300-2100m firmwareH3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the...7.2 High
- h3c magic r300-2100m firmwareH3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the...7.2 High
- h3c magic r300-2100m firmwareH3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the...7.2 High
- h3c magic r300-2100m firmwareH3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the...7.2 High
- h3c magic r300-2100m firmwareH3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the...7.2 High
- kramerav via go2 firmwareKramerAV VIA GO² < 4.0.1.1326 is vulnerable to SQL Injection.9.8 Critical
- kramerav via go2 firmwareKramerAV VIA GO² < 4.0.1.1326 is vulnerable to unauthenticated file upload resulting in Remote...9.8 Critical
- Show moreLoading…