CVE-2023 records published in May 2023

This page lists the 1,956 CVE-2023 records published in May 2023, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists eight of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2023 list filters these records by severity or signal.

Critical
28314.5% of these records
Listed in CISA KEV
80.4% of these records
Reported exploited
50.3% of these records
Detection signal
613.1% of these records
Exploit code
954.9% of these records
Actionable vendor fix
1,32767.8% of these records

Figures as of 2026-10-24 13:46 UTC. Records published in May 2023 have had from about 41 months to about 42 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.

CVE-2023 records published in May 2023, newest first: records 1 to 1,000 of 1,956
CVE Summary CVSS EPSS Published Signals
CVE-2023-34258BMC Patrol missing encryption7.5v3.10.8%2023-05-31
CVE-2023-34257BMC Patrol Agent code execution9.8v3.11.0%2023-05-31
CVE-2023-34256Linux kernel out-of-bounds read5.5v3.10.2%2023-05-31Fix
CVE-2023-34229JetBrains TeamCity cross-site scripting4.6CNA v3.11.0%2023-05-31Fix
CVE-2023-34228JetBrains TeamCity single-factor authentication5.3CNA v3.10.4%2023-05-31Fix
CVE-2023-34227JetBrains TeamCity exposed dangerous method5.3CNA v3.10.5%2023-05-31Fix
CVE-2023-34226JetBrains TeamCity cross-site scripting4.6CNA v3.11.0%2023-05-31Fix
CVE-2023-34225JetBrains TeamCity cross-site scripting4.6CNA v3.160.7%2023-05-31Fix
CVE-2023-34224JetBrains TeamCity open redirect4.8CNA v3.10.3%2023-05-31Fix
CVE-2023-34223JetBrains TeamCity sensitive information in log files4.3CNA v3.11.3%2023-05-31Fix
CVE-2023-34222JetBrains TeamCity cross-site scripting4.6CNA v3.11.0%2023-05-31Fix
CVE-2023-34221JetBrains TeamCity cross-site scripting4.6CNA v3.11.0%2023-05-31Fix
CVE-2023-34220JetBrains TeamCity cross-site scripting4.6CNA v3.161.2%2023-05-31Fix
CVE-2023-34219JetBrains TeamCity improper authorization4.3CNA v3.10.4%2023-05-31Fix
CVE-2023-34218JetBrains TeamCity incorrect authorization9.1CNA v3.10.6%2023-05-31Fix
CVE-2023-34088Collabora Online has stored cross-site-scripting vulnerability in admin interface8.7CNA v3.10.4%2023-05-31Fix
CVE-2023-33979Gpt_academic's Configuration file vulnerable to file information disclosure6.5CNA v3.10.7%2023-05-31Fix
CVE-2023-33971Formcreator vulnerable to stored XSS from ##FULLFORM##6.1CNA v3.10.6%2023-05-31
CVE-2023-33967EaseProbe vulnerable to SQL injection when using MySQL/PostgreSQL data checking8.3CNA v3.10.7%2023-05-31Fix
CVE-2023-33966Deno missing --allow-net permission check for built-in Node modules8.6CNA v3.10.6%2023-05-31Fix
CVE-2023-33964mx-chain-go does not treat invalid transaction with wrong username correctly8.6CNA v3.10.6%2023-05-31Fix
CVE-2023-33736Dcat-Admin vulnerable to stored cross-site scripting5.4v3.10.4%2023-05-31
CVE-2023-33735D-Link DIR-846 remote command execution9.8v3.131.6%2023-05-31
CVE-2023-33732Escanav Escan Management Console New Policy form in Microworld Technologies cross-site scripting6.1v3.10.8%2023-05-31Exploit code
CVE-2023-33730Escanav Escan Management Console privilege escalation9.8NVD v3.11.2%2023-05-31
CVE-2023-33722Edimax BR-6288ACL command injection8.8v3.11.7%2023-05-31
CVE-2023-33718MP4v2 MP4File::ReadString function memory leak8.8v3.10.7%2023-05-31
CVE-2023-33643H3C Magic R300-2100m out-of-bounds write7.2v3.10.9%2023-05-31
CVE-2023-33642H3C Magic R300-2100m out-of-bounds write7.2v3.10.9%2023-05-31
CVE-2023-33641H3C Magic R300-2100m out-of-bounds write7.2v3.10.9%2023-05-31
CVE-2023-33640H3C Magic R300-2100m out-of-bounds write7.2v3.10.9%2023-05-31
CVE-2023-33639H3C Magic R300-2100m out-of-bounds write7.2v3.10.9%2023-05-31
CVE-2023-33638H3C Magic R300-2100m out-of-bounds write7.2v3.10.9%2023-05-31
CVE-2023-33637H3C Magic R300-2100m out-of-bounds write7.2v3.10.9%2023-05-31
CVE-2023-33636H3C Magic R300-2100m out-of-bounds write7.2v3.10.9%2023-05-31
CVE-2023-33635H3C Magic R300-2100m out-of-bounds write7.2v3.10.9%2023-05-31
CVE-2023-33634H3C Magic R300-2100m out-of-bounds write7.2v3.10.9%2023-05-31
CVE-2023-33633H3C Magic R300-2100m out-of-bounds write7.2v3.10.9%2023-05-31
CVE-2023-33632H3C Magic R300-2100m out-of-bounds write7.2v3.10.9%2023-05-31
CVE-2023-33631H3C Magic R300-2100m out-of-bounds write7.2v3.10.9%2023-05-31
CVE-2023-33630H3C Magic R300-2100m out-of-bounds write7.2v3.10.9%2023-05-31
CVE-2023-33629H3C Magic R300-2100m out-of-bounds write7.2v3.14.4%2023-05-31Nuclei
CVE-2023-33628H3C Magic R300-2100m out-of-bounds write7.2v3.10.9%2023-05-31
CVE-2023-33627H3C Magic R300-2100m out-of-bounds write7.2v3.10.9%2023-05-31
CVE-2023-33509Kramerav Via GO2 SQL injection9.8v3.10.8%2023-05-31
CVE-2023-33508Kramerav Via GO2 unrestricted file upload9.8v3.11.4%2023-05-31
CVE-2023-33507Kramerav Via GO2 arbitrary file read7.5v3.10.7%2023-05-31
CVE-2023-33487TOTOLINK X5000R command injection9.8v3.11.4%2023-05-31
CVE-2023-33486TOTOLINK X5000R command injection9.8v3.11.4%2023-05-31
CVE-2023-33485TOTOLINK X5000R out-of-bounds write8.8v3.11.1%2023-05-31
CVE-2023-33287Actonic Inline Table Editing stored cross-site scripting5.4v3.10.5%2023-05-31Fix
CVE-2023-31548ChurchCRM FundRaiserEditor.php component stored cross-site scripting5.4v3.11.2%2023-05-31Nuclei
CVE-2023-30285Deviniti Issue Sync technicalUser endpoint information disclosure7.5v3.10.6%2023-05-31
CVE-2023-30197Webbax Myinventory path traversal7.5v3.10.7%2023-05-31
CVE-2023-29747Story Saver for Instragram - Video Downloader 1.0.6 for Android exists exposed component, the component provides the method to modify the SharedPreference file. The attacker can use the method to modify the data in any SharedPreference file, these data will be loaded into the memory when the applica9.8v3.11.3%2023-05-31
CVE-2023-29745Bestweather origin validation error7.1v3.10.3%2023-05-31
CVE-2023-29742Bestweather code execution7.8v3.10.4%2023-05-31
CVE-2023-28353Faronics Insight unrestricted file upload8.8v3.11.4%2023-05-31
CVE-2023-28352Faronics Insight incorrect authorization7.4v3.10.7%2023-05-31
CVE-2023-28351Faronics Insight sensitive information in log files3.3v3.10.3%2023-05-31
CVE-2023-28350Faronics Insight cross-site scripting6.1v3.11.1%2023-05-31
CVE-2023-28349Faronics Insight origin validation error8.8v3.11.2%2023-05-31
CVE-2023-28348Faronics Insight cleartext transmission of sensitive information7.4v3.10.4%2023-05-31
CVE-2023-28347Faronics Insight cross-site scripting9.6v3.12.8%2023-05-31
CVE-2023-28346Faronics Insight incorrect permission assignment7.3v3.10.9%2023-05-31
CVE-2023-28345Faronics Insight cleartext storage of sensitive information4.6v3.10.3%2023-05-31
CVE-2023-28344Faronics Insight path traversal7.1v3.10.9%2023-05-31
CVE-2023-26842ChurchCRM A stored cross-site scripting5.4v3.11.4%2023-05-31Nuclei
CVE-2023-26278IBM QRadar WinCollect Agent privilege escalation8.2CNA v3.10.2%2023-05-31Fix
CVE-2023-26277IBM QRadar WinCollect Agent privilege escalation7.8CNA v3.10.2%2023-05-31Fix
CVE-2023-26131Algernon engine and themes vulnerable to cross-site scripting6.1v3.10.7%2023-05-31
CVE-2023-25539Dell NetWorker NVE code injection8.4CNA v3.11.5%2023-05-31Fix
CVE-2023-23562Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control that allows an authenticated user can update global parameters.4.3v3.10.4%2023-05-31Fix
CVE-2023-3021Cross-site scripting (XSS) Stored in mkucej/i-librarian-free5.4v3.10.4%2023-05-31Fix
CVE-2023-3020Cross-site scripting (XSS) Reflected in mkucej/i-librarian-free6.1NVD v3.10.6%2023-05-31Fix
CVE-2023-3018SourceCodester Lost and Found Information System access control8.8v3.10.7%2023-05-31
CVE-2023-3017SourceCodester Lost and Found Information System Manage User page cross-site scripting5.4v3.10.5%2023-05-31
CVE-2023-3016yiwent Vip Video Analysis admincore.php cross-site scripting6.1v3.10.5%2023-05-31
CVE-2023-3015yiwent Vip Video Analysis title.php server-side request forgery9.8v3.10.6%2023-05-31
CVE-2023-3014BeipyVideoResolution admincore.php cross-site scripting6.1v3.10.5%2023-05-31
CVE-2023-3013Unchecked return value in gpac/gpac7.1v3.10.3%2023-05-31Fix
CVE-2023-3012Null pointer dereference in gpac/gpac7.8v3.10.4%2023-05-31Fix
CVE-2023-3009Cross-site scripting (XSS) Stored in nilsteampassnet/TeamPass5.4NVD v3.10.7%2023-05-31Exploit codeFix
CVE-2023-3008ningzichun Student Management System login.php SQL injection9.8v3.10.8%2023-05-31
CVE-2023-3007ningzichun Student Management System Password Reset resetPassword.php password recovery9.8v3.11.0%2023-05-31
CVE-2023-3006kernel sensitive information not cleared before reuse5.5NVD v3.10.3%2023-05-31Fix
CVE-2023-3005SourceCodester Local Service Search Engine Management System POST parameter cross-site scripting6.1v3.10.6%2023-05-31
CVE-2023-3004SourceCodester Simple Chat System POST parameter SQL injection9.8v3.10.8%2023-05-31
CVE-2023-3003SourceCodester Train Station Ticketing System GET parameter manage_prices.php SQL injection9.8v3.10.8%2023-05-31
CVE-2023-2999Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ6.1v3.10.5%2023-05-31Fix
CVE-2023-2998Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ6.1v3.10.5%2023-05-31Fix
CVE-2023-2987Wordapp WordPress plugin authorization bypass9.8v3.10.5%2023-05-31Fix
CVE-2023-2909A directory traversal vulnerability was found on EZ Sync service of ADM10.0v3.10.7%2023-05-31Fix
CVE-2023-2836CRM Perks Forms WordPress plugin authenticated (Admin+) stored cross-site scripting4.8v3.10.6%2023-05-31Fix
CVE-2023-2758Contec CONPROSYS HMI System (CHS) denial of service5.3NVD v3.11.0%2023-05-31Fix
CVE-2023-2749A Gain Information vulnerability was found on Download Center7.5v3.10.5%2023-05-31Fix
CVE-2023-2612Canonical Ubuntu shiftfs lock unbalance in Ubuntu-specific kernels4.4CNA v3.10.3%2023-05-31Fix
CVE-2023-2549Feather Login Page WordPress plugin cross-site request forgery8.8v3.10.3%2023-05-31Fix
CVE-2023-2547Custom Login Page WordPress plugin missing authorization5.4v3.10.4%2023-05-31Fix
CVE-2023-2545Feather Login Page WordPress plugin unauthorized access8.8v3.10.7%2023-05-31Fix
CVE-2023-2436Blog-in-Blog WordPress plugin authenticated (Editor+) stored cross-site scripting via shortcode4.8NVD v3.10.5%2023-05-31Fix
CVE-2023-2435Blog-in-Blog WordPress plugin authenticated (Editor+) local file inclusion via shortcode7.2v3.11.1%2023-05-31Fix
CVE-2023-2434Nested Pages WordPress plugin missing authorization to authenticated (Editor+) plugin settings reset3.8v3.10.7%2023-05-31Fix
CVE-2023-2304Favorites WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode5.4v3.10.7%2023-05-31Fix
CVE-2023-1661Display post meta WordPress plugin stored cross-site scripting5.4v3.10.4%2023-05-31Fix
CVE-2023-34205Signature validation bypass in github.com/moov-io/Signedxml9.1v3.10.4%2023-05-30Fix
CVE-2023-34204Imapsync link following6.5v3.10.6%2023-05-30
CVE-2023-34153ImageMagick command injection7.8NVD v3.13.1%2023-05-30Fix
CVE-2023-34152ImageMagick remote code execution9.8NVD v3.18.0%2023-05-30Exploit codeFix
CVE-2023-34151ImageMagick integer overflow5.5NVD v3.11.0%2023-05-30Fix
CVE-2023-33975RIOT-OS vulnerable to out-of-bounds write in _rbuf_add9.8CNA v3.11.5%2023-05-30
CVE-2023-33974RIOT-OS vulnerable to race condition in SFR Timeout7.5CNA v3.10.7%2023-05-30Fix
CVE-2023-33973RIOT-OS vulnerable to null pointer dereference during NHC encoding7.5CNA v3.11.0%2023-05-30Fix
CVE-2023-33962JStachio XSS vulnerability: Unescaped single quotes5.4CNA v3.10.6%2023-05-30Fix
CVE-2023-33961Leantime stored cross-site scripting8.9CNA v3.10.4%2023-05-30Fix
CVE-2023-33955MinIO Console object name display information disclosure4.3CNA v3.10.6%2023-05-30Fix
CVE-2023-33741Macro-video V380 Pro observable discrepancy7.5v3.10.8%2023-05-30
CVE-2023-33740Luowice origin validation error7.5v3.11.2%2023-05-30
CVE-2023-33734Bluecms SQL injection9.8v3.10.8%2023-05-30
CVE-2023-33656emqx nanomq memory leak5.5v3.10.4%2023-05-30
CVE-2023-33245Minecraft link following8.8v3.10.9%2023-05-30Fix
CVE-2023-33234Apache Airflow CNCF Kubernetes Provider: KubernetesPodOperator RCE via connection configuration7.2v3.11.5%2023-05-30Fix
CVE-2023-33198Incorrectly Specified Chat Message Destinations in tgstation-server and DreamMaker API6.1CNA v3.10.6%2023-05-30Fix
CVE-2023-33193Emby Server Proxy header spoofing9.1CNA v3.11.7%2023-05-30NucleiFix
CVE-2023-33191kyverno seccomp control can be circumvented4.6CNA v3.10.5%2023-05-30Fix
CVE-2023-33189pomerium incorrect authorization with specially crafted requests10.0CNA v3.10.9%2023-05-30Fix
CVE-2023-33186Cross-site scripting vulnerability in Zulip Server development branch via topic tooltip8.2CNA v3.10.6%2023-05-30Fix
CVE-2023-33183Error in Calendar when booking an appointment reveals the full path of the website2.6CNA v3.10.4%2023-05-30Fix
CVE-2023-33182Nextcloud Contacts photos only sanitized if mime type is all lower case0.0CNA v3.10.8%2023-05-30Fix
CVE-2023-33181Sensitive information disclosure abusing Stack Trace in Xibo CMS4.3CNA v3.10.5%2023-05-30Fix
CVE-2023-33180Sensitive information disclosure abusing SQL injection in Xibo CMS display map6.5CNA v3.10.6%2023-05-30Fix
CVE-2023-33179Sensitive information disclosure abusing SQL injection in Xibo CMS nameFilter6.5CNA v3.10.6%2023-05-30Fix
CVE-2023-33178Sensitive information disclosure abusing SQL injection in Xibo CMS dataset filter6.5CNA v3.10.6%2023-05-30Fix
CVE-2023-33177Xibo CMS vulnerable to remote code execution through Zip Slip8.8CNA v3.17.0%2023-05-30Exploit codeFix
CVE-2023-33175ToUI allows user-specific variables to be shared between users9.1CNA v3.10.7%2023-05-30Fix
CVE-2023-32699MeterSphere denial of service6.5CNA v3.10.6%2023-05-30Fix
CVE-2023-32698nfpm vulnerable to incorrect default permissions7.1CNA v3.10.4%2023-05-30Fix
CVE-2023-32696Excessive permissions for ckan user8.8CNA v3.10.8%2023-05-30Fix
CVE-2023-32692CodeIgniter4 remote code execution vulnerability in Validation Placeholders9.8CNA v3.11.1%2023-05-30Exploit codeFix
CVE-2023-32691GO Simple Tunnel HTTP header authentication vulnerability5.9CNA v3.10.6%2023-05-30
CVE-2023-32689parse-community parse-server phishing attack vulnerability by uploading malicious HTML file6.3CNA v3.10.6%2023-05-30Fix
CVE-2023-32685Clipboard based cross-site scripting (blocked with default CSP) in Kanboard4.4CNA v3.10.5%2023-05-30Fix
CVE-2023-32684Lima disk image backing file handling vulnerability2.7CNA v3.10.3%2023-05-30Fix
CVE-2023-32448Dell PowerPath Windows cleartext storage of sensitive information5.5CNA v3.10.1%2023-05-30Fix
CVE-2023-32342IBM GSKit information disclosure7.5CNA v3.10.9%2023-05-30Fix
CVE-2023-32218Avaya IX Workforce Engagement URL redirection to untrusted site (open redirect)6.1v3.10.3%2023-05-30
CVE-2023-31187Avaya IX Workforce Engagement insufficiently protected credentials6.5v3.10.5%2023-05-30
CVE-2023-31186Avaya IX Workforce Engagement User Enumeration observable response discrepancy5.3v3.10.5%2023-05-30
CVE-2023-31185ROZCOM server framework information disclosure7.5v3.112.8%2023-05-30
CVE-2023-31184ROZCOM client hard-coded credentials7.8v3.12.2%2023-05-30
CVE-2023-30601Apache Cassandra: Privilege escalation when enabling FQL/Audit logs7.8CNA v3.10.3%2023-05-30Fix
CVE-2023-30196Webbax Salesbooster path traversal7.5v3.10.5%2023-05-30Fix
CVE-2023-29743Bestweather origin validation error7.5v3.10.5%2023-05-30
CVE-2023-29741Bestweather privilege escalation9.8v3.11.2%2023-05-30
CVE-2023-29740Amdroidapp Alarm Clock For Heavy Sleepers denial of service7.5v3.11.2%2023-05-30
CVE-2023-29739Amdroidapp Alarm Clock For Heavy Sleepers privilege escalation9.8v3.11.2%2023-05-30
CVE-2023-29738Wavekeyboard Wave Animated Keyboard Emoji code execution7.8v3.10.9%2023-05-30
CVE-2023-29737Wavekeyboard Wave Animated Keyboard Emoji resource exhaustion5.5v3.10.3%2023-05-30
CVE-2023-29735Mwm Edjing Mix denial of service5.5v3.10.3%2023-05-30
CVE-2023-29734Mwm Edjing Mix improper privilege management9.8v3.10.9%2023-05-30
CVE-2023-29733Dualspace Lock Master incorrect default permissions7.8v3.10.3%2023-05-30
CVE-2023-29732Loka Solive incorrect default permissions9.8v3.10.9%2023-05-30
CVE-2023-29731Loka Solive incorrect default permissions7.5v3.10.8%2023-05-30
CVE-2023-29728Applika Call Blocker origin validation error9.8v3.10.6%2023-05-30
CVE-2023-29727Applika Call Blocker insecure storage of sensitive information9.8v3.11.2%2023-05-30
CVE-2023-29726Applika Call Blocker improper resource release7.5v3.11.2%2023-05-30
CVE-2023-28080Dell PowerPath Windows uncontrolled search path6.7CNA v3.10.2%2023-05-30Fix
CVE-2023-28079Dell PowerPath Windows incorrect default permissions7.0CNA v3.10.1%2023-05-30Fix
CVE-2023-27988Zyxel NAS326 firmware command injection7.2CNA v3.11.4%2023-05-30Fix
CVE-2023-26130yhirose/cpp-httplib CRLF injection8.8v3.11.1%2023-05-30Fix
CVE-2023-24826RIOT-OS RIOT Usage of Uninitialized Timer during forwarding of Fragments with SFR5.9CNA v3.10.8%2023-05-30Fix
CVE-2023-24825RIOT-OS vulnerable to null pointer dereference in gnrc_pktbuf_mark7.5CNA v3.11.0%2023-05-30Fix
CVE-2023-24817RIOT-OS vulnerable to out-of-bounds write in routing with SRH7.5CNA v3.10.6%2023-05-30Fix
CVE-2023-24568Dell NetWorker improper certificate host validation5.0CNA v3.10.2%2023-05-30Fix
CVE-2023-23956Symantec SiteMinder WebAgent cross-site scripting5.4NVD v3.13.1%2023-05-30Exploit codeFix
CVE-2023-23755Joomla! CMS core Bruteforce prevention within the mfa screen7.5v3.10.6%2023-05-30Fix
CVE-2023-23754Joomla! CMS core open redirect and XSS within the mfa select6.1v3.10.4%2023-05-30Fix
CVE-2023-23561Stormshield Endpoint Security origin validation error5.5v3.10.1%2023-05-30Fix
CVE-2023-20884VMware Workspace ONE Access (Access) open redirect6.1CNA v3.10.3%2023-05-30Fix
CVE-2023-2984Path traversal: \..\filename in pimcore/pimcore8.8v3.10.9%2023-05-30Fix
CVE-2023-2983Privilege defined with unsafe actions in pimcore/pimcore8.8v3.10.9%2023-05-30Fix
CVE-2023-2981Abstrium Pydio Cells Chat cross-site scripting5.4v3.10.7%2023-05-30Fix
CVE-2023-2980Abstrium Pydio Cells User Creation resource injection8.8v3.11.1%2023-05-30Fix
CVE-2023-2979Abstrium Pydio Cells User Creation access control8.8v3.10.8%2023-05-30Fix
CVE-2023-2978Abstrium Pydio Cells Change Subscription authorization4.3v3.10.7%2023-05-30Fix
CVE-2023-2973SourceCodester Students Online Internship Timesheet Syste cross-site scripting6.1v3.10.6%2023-05-30
CVE-2023-2972Prototype pollution in antfu/utils9.8v3.11.0%2023-05-30Fix
CVE-2023-2970MindSpore json_helper.cc UpdateArray memory corruption6.5v3.10.9%2023-05-30
CVE-2023-2968Undefined variable usage in npm package proxy leads to remote denial of service7.5NVD v3.11.5%2023-05-30Fix
CVE-2023-2953openldap null pointer dereference7.5NVD v3.12.0%2023-05-30Fix
CVE-2023-2952Wireshark XRA dissector infinite loop5.3CNA v3.11.1%2023-05-30Fix
CVE-2023-2941Google Chrome Extensions API inappropriate implementation4.3v3.10.6%2023-05-30Fix
CVE-2023-2940Google Chrome Downloads inappropriate implementation6.5v3.10.7%2023-05-30Fix
CVE-2023-2939Google Chrome Installer improper input validation7.8v3.10.5%2023-05-30Fix
CVE-2023-2938Google Chrome Picture In Picture inappropriate implementation4.3v3.10.9%2023-05-30Fix
CVE-2023-2937Google Chrome Picture In Picture inappropriate implementation4.3v3.10.9%2023-05-30Fix
CVE-2023-2936Google Chrome V8 type confusion8.8v3.123.0%2023-05-30Fix
CVE-2023-2935Google Chrome V8 type confusion8.8v3.123.9%2023-05-30Fix
CVE-2023-2934Google Chrome Mojo out-of-bounds access8.8v3.11.5%2023-05-30Fix
CVE-2023-2933Google Chrome PDF use-after-free8.8v3.10.9%2023-05-30Fix
CVE-2023-2932Google Chrome PDF use-after-free8.8v3.11.0%2023-05-30Fix
CVE-2023-2931Google Chrome PDF use-after-free8.8v3.10.9%2023-05-30Fix
CVE-2023-2930Google Chrome extensions use-after-free8.8v3.10.8%2023-05-30Fix
CVE-2023-2929Google Chrome Swiftshader out-of-bounds write8.8v3.11.1%2023-05-30Fix
CVE-2023-2650OpenSSL possible DoS translating ASN.1 object identifiers6.5NVD v3.175.4%2023-05-30Fix
CVE-2023-2518Easy Forms for Mailchimp WordPress plugin reflected XSS6.1NVD v3.11.1%2023-05-30NucleiFix
CVE-2023-2470The Add to Feedly WordPress plugin through 1.2.11 does not sanitize and escape its settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.4.8NVD v3.10.5%2023-05-30
CVE-2023-2296Loginizer reflected XSS6.1NVD v3.10.5%2023-05-30Fix
CVE-2023-2288Otter - Gutenberg Blocks WordPress plugin Author+ PHAR deserialization8.8NVD v3.118.0%2023-05-30Fix
CVE-2023-2287Orbit Fox WordPress plugin Author+ server-side request forgery4.3NVD v3.10.6%2023-05-30Fix
CVE-2023-2256Product Addons and Fields for WooCommerce WordPress plugin reflected cross-site scripting6.1NVD v3.11.0%2023-05-30NucleiFix
CVE-2023-2223Login Rebuilder WordPress plugin Admin+ stored XSS4.8NVD v3.10.6%2023-05-30Fix
CVE-2023-2117Image Optimizer by 10web WordPress plugin Admin+ path traversal2.7NVD v3.10.7%2023-05-30Fix
CVE-2023-2113Autoptimize WordPress plugin Admin+ stored cross-site scripting via settings import4.8NVD v3.10.5%2023-05-30Fix
CVE-2023-2111HollerBox WordPress plugin Admin+ SQL injection4.9NVD v3.10.8%2023-05-30Fix
CVE-2023-2023Custom 404 Pro WordPress plugin reflected cross-site scripting6.1NVD v3.11.7%2023-05-30NucleiExploit codeFix
CVE-2023-1938WP Fatest Cache WordPress plugin blind SSRF via CSRF8.8NVD v3.18.5%2023-05-30Fix
CVE-2023-1711Hitachi Energy FOXMAN-UN log injection4.0CNA v3.10.2%2023-05-30Fix
CVE-2023-1524Download Manager WordPress plugin Broken access Controls6.5NVD v3.10.7%2023-05-30Fix
CVE-2023-0779zephyrproject-rtos Zephyr net: Shell: Improper input validation6.7CNA v3.10.5%2023-05-30Fix
CVE-2023-0766Newsletter Popup WordPress plugin Record deletion via CSRF8.8NVD v3.10.4%2023-05-30
CVE-2023-0733Newsletter Popup WordPress plugin unauthenticated stored XSS6.1NVD v3.10.5%2023-05-30
CVE-2023-0443AnyWhere Elementor WordPress plugin Freemius API key disclosure5.3NVD v3.10.6%2023-05-30Fix
CVE-2023-0329Elementor Website Builder WordPress plugin Admin+ SQLi7.2NVD v3.119.7%2023-05-30Fix
CVE-2023-32687Insufficiently Protected ChatBot Credentials in tgstation-server7.7CNA v3.10.6%2023-05-29Fix
CVE-2023-32072Tuleap vulnerable toXSS via the triggered job URL of a Jenkins job4.8CNA v3.10.5%2023-05-29Fix
CVE-2023-31874Yank Note incorrect permission assignment8.8v3.14.9%2023-05-29Exploit code
CVE-2023-30571libarchive race condition5.3v3.10.2%2023-05-29Fix
CVE-2023-30570libreswan denial of service7.5v3.11.2%2023-05-29Fix
CVE-2023-30350FS S3900-24T4S guest account access controls privilege escalation8.8v3.15.3%2023-05-29Exploit code
CVE-2023-30253Dolibarr vulnerable to remote code execution via uppercase manipulation8.8v3.182.1%2023-05-29MetasploitExploit codeFix
CVE-2023-29380Linux Mint Warpinator path traversal7.5v3.11.8%2023-05-29
CVE-2023-28153An issue was discovered in the Kiddoware Kids Place Parental Control application before 3.8.50 for Android. The child can remove all restrictions temporarily without the parents noticing by rebooting into Android Safe Mode and disabling the "Display over other apps" permission.6.4v3.10.5%2023-05-29
CVE-2023-27613Forms Ada WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-05-29
CVE-2023-24605Open-Xchange OX App Suite missing authorization4.2v3.10.4%2023-05-29Fix
CVE-2023-24604Open-Xchange OX App Suite iCal feed header parsing vulnerability4.3v3.10.7%2023-05-29Fix
CVE-2023-24603Open-Xchange OX App Suite iCal feed download vulnerability6.5v3.10.8%2023-05-29Fix
CVE-2023-24602Open-Xchange OX App Suite cross-site scripting6.1v3.10.4%2023-05-29Fix
CVE-2023-24601Open-Xchange OX App Suite cross-site scripting6.1v3.10.4%2023-05-29Fix
CVE-2023-24600Open-Xchange OX App Suite incorrect authorization4.3v3.10.5%2023-05-29Fix
CVE-2023-24599Open-Xchange OX App Suite type confusion4.3v3.10.5%2023-05-29Fix
CVE-2023-24598Open-Xchange OX App Suite observable discrepancy4.3v3.10.5%2023-05-29Fix
CVE-2023-24597Open-Xchange OX App Suite email message printing vulnerability5.3v3.10.5%2023-05-29Fix
CVE-2023-23699Progress Bar WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-05-29Fix
CVE-2023-2962SourceCodester Faculty Evaluation System SQL injection9.8v3.10.7%2023-05-29
CVE-2023-2955SourceCodester Students Online Internship Timesheet System rendered_report.php SQL injection9.8v3.10.8%2023-05-29
CVE-2023-2954Cross-site scripting (XSS) Stored in liangliangyy/DjangoBlog5.4v3.10.4%2023-05-29
CVE-2023-2808Mattermost lack of URL normalization allows rendering previews for disallowed domains4.3CNA v3.10.4%2023-05-29Fix
CVE-2023-33931YouTube Playlist Player WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-28Fix
CVE-2023-33926Easy Google Maps WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-05-28Fix
CVE-2023-33332WooCommerce Product Vendors WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-05-28Fix
CVE-2023-33328MailChimp Subscribe Forms WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-28Fix
CVE-2023-33326EventPrime WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-05-28Fix
CVE-2023-33319WooCommerce Follow-Up Emails WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-05-28Fix
CVE-2023-33316WooCommerce Follow-Up Emails (AutomateWoo) WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-05-28Fix
CVE-2023-33315Smart App Banner WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-28Fix
CVE-2023-33314BEAR WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-28Fix
CVE-2023-33313WIP Custom Login WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-28Fix
CVE-2023-33311Contact Form Entries WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-05-28Fix
CVE-2023-33309Duplicator Pro WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-05-28Fix
CVE-2023-33291Ebankit incorrect default permissions7.4v3.10.9%2023-05-28
CVE-2023-33216WooDiscuz WooCommerce Comments WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-28Fix
CVE-2023-33212JetFormBuilder WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-28Fix
CVE-2023-33211WP-Piwik WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-28Fix
CVE-2023-32958Novelist WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-28Fix
CVE-2023-32800Rank Math SEO PRO WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-05-28Fix
CVE-2023-32763Qt QTextLayout SVG rendering buffer overflow7.5v3.11.3%2023-05-28Fix
CVE-2023-32762Qt HSTS header parsing in Qt Network vulnerability5.3v3.10.9%2023-05-28Fix
CVE-2023-31873Gin arbitrary code execution7.8v3.11.3%2023-05-28Exploit code
CVE-2023-28785Yoast SEO: Local WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-05-28Fix
CVE-2023-2951code-projects Bus Dispatch and Information System delete_bus.php SQL injection9.1v3.10.8%2023-05-28Exploit code
CVE-2023-2950Improper authorization in openemr/openemr8.1v3.10.6%2023-05-28Fix
CVE-2023-2949Cross-site scripting (XSS) Reflected in openemr/openemr6.1NVD v3.11.5%2023-05-28NucleiFix
CVE-2023-2948Cross-site scripting (XSS) Generic in openemr/openemr6.1NVD v3.196.7%2023-05-28NucleiFix
CVE-2023-33195Craft CMS XSS in RSS widget feed5.0CNA v3.10.7%2023-05-27Fix
CVE-2023-33192Improper handling of NTS cookie length that could crash the ntpd-rs server7.5CNA v3.10.7%2023-05-27Fix
CVE-2023-33188federicoiosue Omni-Notes uncontrolled data used in content resolution6.3CNA v3.10.3%2023-05-27Fix
CVE-2023-33184Blind SSRF in the Nextcloud Mail app on avatar endpoint3.5CNA v3.10.5%2023-05-27Fix
CVE-2023-32695Socket.io-Parser insufficient validation when decoding a Socket.IO packet7.3CNA v3.11.1%2023-05-27Fix
CVE-2023-32688parse-community parse-server-push-adapter invalid push request payload crashes Parse Server4.9CNA v3.10.9%2023-05-27Fix
CVE-2023-32686kiwitcms vulnerable to stored XSS via unrestricted files upload8.1CNA v3.10.4%2023-05-27Fix
CVE-2023-32325Cross-site scripting in PostHog-js5.4CNA v3.10.4%2023-05-27Fix
CVE-2023-26129bwm-ng vulnerable to command injection7.8v3.11.0%2023-05-27
CVE-2023-26128keep-module-latest vulnerable to command injection due to missing input sanitization7.8v3.11.2%2023-05-27
CVE-2023-26127n158 OS command injection7.8v3.11.0%2023-05-27
CVE-2023-2947Cross-site scripting (XSS) Stored in openemr/openemr4.8v3.190.4%2023-05-27Fix
CVE-2023-2946Improper access control in openemr/openemr8.1v3.10.5%2023-05-27Fix
CVE-2023-2945Missing authorization in openemr/openemr5.4v3.10.4%2023-05-27Fix
CVE-2023-2944Improper access control in openemr/openemr5.4v3.10.4%2023-05-27Fix
CVE-2023-2943Code injection in openemr/openemr8.8v3.10.6%2023-05-27Fix
CVE-2023-2942Improper input validation in openemr/openemr8.1v3.10.8%2023-05-27Fix
CVE-2023-2928DedeCMS article_allowurl_edit.php code injection8.8v3.151.4%2023-05-27Exploit code
CVE-2023-2927jizhiCMS TemplateController.php index server-side request forgery9.8v3.10.9%2023-05-27
CVE-2023-2926SeaCMS Picture upload member.php denial of service6.5v3.10.9%2023-05-27
CVE-2023-2925Webkul Krayin CRM Edit Person page 2 cross-site scripting5.4v3.10.6%2023-05-27
CVE-2023-2924Supcon SimField reportupload.aspx unrestricted upload9.8v3.124.3%2023-05-27
CVE-2023-2923Tenda AC6 fromDhcpListClient stack-based overflow9.8v3.11.0%2023-05-27
CVE-2023-2922SourceCodester Comment System GET parameter index.php cross-site scripting6.1v3.10.6%2023-05-27
CVE-2023-33780invernyx Smartcars 3 TFDi Design smartCARS stored cross-site scripting5.4v3.10.5%2023-05-26
CVE-2023-33779Privilege escalation in XXL-Job8.8v3.10.9%2023-05-26
CVE-2023-33720MP4v2 resource exhaustion6.5v3.10.6%2023-05-26
CVE-2023-33440Faculty Evaluation System code injection7.2v3.114.5%2023-05-26NucleiExploit code
CVE-2023-33439Faculty Evaluation System SQL injection7.2v3.13.3%2023-05-26Nuclei
CVE-2023-33394SkyCaiji cross-site scripting5.4v3.10.4%2023-05-26
CVE-2023-33255Uthscsa Papaya Viewer cross-site scripting6.1v3.10.9%2023-05-26
CVE-2023-33247Talend DATA Catalog missing authentication7.5v3.10.5%2023-05-26Fix
CVE-2023-33199Malformed proposed intoto entries can cause a panic in Rekor5.3CNA v3.10.7%2023-05-26Fix
CVE-2023-33197Craft CMS stored XSS in indexedVolumes5.5CNA v3.10.7%2023-05-26Fix
CVE-2023-33196Craft CMS stored XSS in review volume5.5CNA v3.10.7%2023-05-26Fix
CVE-2023-33194CraftCMS stored XSS in Quick Post widget error message3.7CNA v3.10.6%2023-05-26Fix
CVE-2023-33187highlight vulnerable to cleartext transmission of sensitive information5.4CNA v3.10.3%2023-05-26Fix
CVE-2023-33185Incorrect signature verification in django-ses4.6CNA v3.10.2%2023-05-26Fix
CVE-2023-32964Better Notifications for WP WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-26Fix
CVE-2023-32681Unintended leak of Proxy-Authorization header in requests6.1CNA v3.13.0%2023-05-26Exploit codeFix
CVE-2023-32676Autolab tar slip in Install Assessment functionality (`GHSL-2023-081`)6.7CNA v3.10.9%2023-05-26Fix
CVE-2023-32323Synapse Outgoing federation to specific hosts can be disabled by sending malicious invites5.0CNA v3.11.0%2023-05-26Fix
CVE-2023-32321CKAN remote code execution and private information access via crafted resource ids9.8CNA v3.11.7%2023-05-26Fix
CVE-2023-32319Basic auth header on WebDAV requests is not brute-force protected in Nextcloud8.1CNA v3.10.7%2023-05-26Fix
CVE-2023-32318Nextcloud security-advisories user session not correctly destroyed on logout7.2CNA v3.10.2%2023-05-26Fix
CVE-2023-32317Autolab tar slip in cheat checker functionality (`GHSL-2023-082`)6.7CNA v3.10.9%2023-05-26Fix
CVE-2023-32316Users can add themselves to any organization in CloudExplorer Lite7.1CNA v3.10.4%2023-05-26Fix
CVE-2023-32315Ignite Realtime Openfire path traversal8.6CNA v3.1100.0%2023-05-26KEVNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2023-32311The CloudExplorer Lite missing permissions check7.1CNA v3.10.4%2023-05-26Fix
CVE-2023-32307sofia-sip STUN packet parsing heap-based buffer overflow7.5CNA v3.11.1%2023-05-26Fix
CVE-2023-31227Huawei HarmonyOS vulnerability of missing API calling verification in the hwPartsDFR module7.5v3.10.4%2023-05-26Fix
CVE-2023-31226Huawei HarmonyOS incorrect authorization7.5v3.10.4%2023-05-26Fix
CVE-2023-31225Huawei HarmonyOS service hijacking vulnerability in the Gallery app3.3v3.10.1%2023-05-26Fix
CVE-2023-31128NextCloud Cookbook's pull-checks.yml workflow is vulnerable to OS command injection8.1CNA v3.13.3%2023-05-26Fix
CVE-2023-30145tuzitio CamaleonCMS server-side template injection in Camaleon CMS9.8NVD v3.146.1%2023-05-26Exploit codeFix
CVE-2023-29098CopySafe Web Protection WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-05-26Fix
CVE-2023-28382Encourage Technologies ESS REC Agent Server Edition series path traversal8.1v3.10.9%2023-05-26Fix
CVE-2023-28322https://github.com/curl/curl An information disclosure3.7NVD v3.12.2%2023-05-26Fix
CVE-2023-28321https://github.com/curl/curl An improper certificate validation5.9v3.11.8%2023-05-26Fix
CVE-2023-28320https://github.com/curl/curl A denial of service5.9v3.12.7%2023-05-26Fix
CVE-2023-28319https://github.com/curl/curl A use-after-free7.5v3.12.5%2023-05-26Fix
CVE-2023-27311Information Disclosure vulnerability in NetApp BlueXP Connector path traversal5.3v3.10.6%2023-05-26Fix
CVE-2023-25976Integration for Contact Form 7 and Zoho CRM, Bigin WordPress plugin cross-site request forgery8.8v3.10.3%2023-05-26Fix
CVE-2023-25971Educare Students and Result Management System WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-26Fix
CVE-2023-25781Upload File Type Settings WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-26
CVE-2023-25470Rus-To-Lat WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-26
CVE-2023-25467Resize at Upload Plus WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-05-26
CVE-2023-25058Schema All In One Schema Rich Snippets WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-26Fix
CVE-2023-25038For the visually impaired WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-26
CVE-2023-25034WP Clean Up WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-26
CVE-2023-25029WP Social Bookmarking Light WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-26
CVE-2023-24008Maspik Spam blacklist WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-26Fix
CVE-2023-24007Admin Block Country WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-26
CVE-2023-23714Uncanny Toolkit for LearnDash WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-26Fix
CVE-2023-22970Usebottles Bottles remote code execution7.8v3.10.5%2023-05-26Fix
CVE-2023-22693WP Google Tag Manager WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-26
CVE-2023-21516Samsung Mobile Galaxy Store cross-site scripting7.5CNA v3.10.5%2023-05-26Fix
CVE-2023-21515Samsung Mobile Galaxy Store improper input validation7.5CNA v3.10.5%2023-05-26Fix
CVE-2023-21514Samsung Mobile Galaxy Store improper input validation7.5CNA v3.10.5%2023-05-26Fix
CVE-2023-20883Spring Boot Welcome page denial of service7.5v3.10.9%2023-05-26Fix
CVE-2023-20882Cloud Foundry Routing release denial of service5.9v3.10.6%2023-05-26Fix
CVE-2023-20868NSX-T cross-site scripting6.1v3.10.5%2023-05-26Fix
CVE-2023-2898kernel null pointer dereference4.7NVD v3.10.2%2023-05-26Fix
CVE-2023-2879Wireshark GDSDB infinite loop6.3CNA v3.11.6%2023-05-26Fix
CVE-2023-2858Wireshark NetScaler file parser crash5.3CNA v3.11.8%2023-05-26Fix
CVE-2023-2857Wireshark BLF file parser crash5.3CNA v3.10.9%2023-05-26Fix
CVE-2023-2856Wireshark out-of-bounds write5.3CNA v3.11.8%2023-05-26Fix
CVE-2023-2855Wireshark Candump log parser crash5.3CNA v3.11.6%2023-05-26Fix
CVE-2023-2854Wireshark BLF file parser crash5.3CNA v3.10.9%2023-05-26Fix
CVE-2023-2825GitLab path traversal10.0CNA v3.171.6%2023-05-26Reported exploitedNucleiMetasploitExploit codeFix
CVE-2023-2817Stored cross-site scripting in Craft CMS5.4NVD v3.10.4%2023-05-26Fix
CVE-2023-2283libssh improper authentication6.5NVD v3.11.1%2023-05-26Fix
CVE-2023-2002kernel execution with unnecessary privileges6.8NVD v3.11.5%2023-05-26Exploit codeFix
CVE-2023-1981avahi dbus interface resource exhaustion5.5NVD v3.10.4%2023-05-26Fix
CVE-2023-1667libssh null pointer dereference6.5NVD v3.11.3%2023-05-26Fix
CVE-2023-1664Keycloak Untrusted Certificate Validation vulnerability6.5v3.10.4%2023-05-26Fix
CVE-2023-0117Huawei HarmonyOS improper authentication5.3v3.10.4%2023-05-26Fix
CVE-2023-0116Huawei HarmonyOS missing authentication7.5v3.10.5%2023-05-26Fix
CVE-2023-33751Mipjz A stored cross-site scripting5.4v3.10.4%2023-05-25
CVE-2023-33750Mipjz A stored cross-site scripting5.4v3.10.4%2023-05-25
CVE-2023-33356Thecosy IceCMS cross-site scripting5.4v3.10.4%2023-05-25
CVE-2023-33355Thecosy IceCMS insecure permissions7.5v3.10.6%2023-05-25
CVE-2023-33280Storecommander Quickaccounting SQL injection9.8v3.10.6%2023-05-25Fix
CVE-2023-33279Scfixmyprestashop SQL injection9.8v3.10.6%2023-05-25
CVE-2023-33278Storecommander Customers Export SQL injection9.8v3.10.6%2023-05-25Fix
CVE-2023-33263Wftpd insufficiently protected credentials7.5v3.10.9%2023-05-25
CVE-2023-32694Non-constant time HMAC comparison in Adyen plugin in Saleor4.8CNA v3.10.3%2023-05-25Fix
CVE-2023-32074Nextcloud user_oidc app is missing brute force protection8.0CNA v3.10.9%2023-05-25Fix
CVE-2023-320670-byte UDP payload DoS in c-ares7.5CNA v3.11.6%2023-05-25Fix
CVE-2023-31861ZLMediaKit path traversal7.5v3.11.1%2023-05-25
CVE-2023-31594Icrealtime Icip-p2012t missing authentication7.5v3.10.8%2023-05-25Exploit code
CVE-2023-31147Insufficient randomness in generation of DNS query IDs in c-ares5.9CNA v3.10.9%2023-05-25Fix
CVE-2023-31130c-ares buffer underwrite in ares_inet_net_pton4.1CNA v3.10.4%2023-05-25Fix
CVE-2023-31124c-ares AutoTools does not set CARES_RANDOM_FILE during cross compilation3.7CNA v3.10.9%2023-05-25Fix
CVE-2023-30851Potential HTTP policy bypass when using header rules in Cilium2.6CNA v3.10.7%2023-05-25Fix
CVE-2023-30615Improper neutralization of script-related HTML tags in a web page (basic XSS) in iris-web6.3CNA v3.10.4%2023-05-25Fix
CVE-2023-30484Enable Accessibility WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-25Fix
CVE-2023-28370Open redirect in Tornado6.1v3.11.1%2023-05-25Fix
CVE-2023-27529Wacom Tablet Driver installer link following7.8v3.10.2%2023-05-25Fix
CVE-2023-26216TIBCO EBX Add-ons arbitrary file write9.1CNA v3.10.8%2023-05-25
CVE-2023-26215TIBCO EBX® Add-ons path traversal7.7CNA v3.10.7%2023-05-25
CVE-2023-25439Squarepiginteractive Fusioninvoice stored cross-site scripting6.1v3.12.2%2023-05-25Exploit code
CVE-2023-22504Atlassian Confluence Server unrestricted file upload4.3CNA v3.00.7%2023-05-25Fix
CVE-2023-2903NFine Rapid Development Platform access control6.5v3.10.7%2023-05-25
CVE-2023-2902NFine Rapid Development Platform access control6.5v3.10.7%2023-05-25
CVE-2023-2901NFine Rapid Development Platform access control6.5v3.10.7%2023-05-25
CVE-2023-2900NFine Rapid Development Platform CheckLogin weak hash7.5v3.10.7%2023-05-25
CVE-2023-2888Phpok unrestricted upload8.8v3.10.7%2023-05-25
CVE-2023-2887User authentication bypass in CBOT's Chatbot9.8v3.10.8%2023-05-25Fix
CVE-2023-2886Cross-Site WebSocket Hijacking in CBOT's Chatbot4.3v3.10.2%2023-05-25Fix
CVE-2023-2885Channel accessible by non-endpoint in CBOT's Chatbot8.1v3.10.3%2023-05-25Fix
CVE-2023-2884CBOT Chatbot insufficient randomness9.8v3.10.7%2023-05-25Fix
CVE-2023-2883IDOR in CBOT's Chatbot8.8CNA v3.10.7%2023-05-25Fix
CVE-2023-2882Privilege escalation in CBOT's Chatbot9.8v3.10.6%2023-05-25Fix
CVE-2023-2881Storing passwords in a recoverable format in pimcore/customer-data-framework4.9v3.10.5%2023-05-25Fix
CVE-2023-2851AGT Tech Ceppatron SQL command improper neutralization9.8v3.10.7%2023-05-25
CVE-2023-2804libjpeg-turbo A heap-based buffer overflow6.5NVD v3.11.2%2023-05-25Fix
CVE-2023-2798Denial of service in HtmlUnit7.5NVD v3.10.9%2023-05-25Fix
CVE-2023-2734MStore API WordPress plugin authentication bypass9.8v3.13.8%2023-05-25NucleiFix
CVE-2023-2733MStore API WordPress plugin authentication bypass9.8v3.11.2%2023-05-25Fix
CVE-2023-2732MStore API WordPress plugin authentication bypass9.8v3.167.5%2023-05-25NucleiExploit codeFix
CVE-2023-2500Go Pricing - WordPress Responsive Pricing Tables plugin PHP object injection8.8v3.10.9%2023-05-25Fix
CVE-2023-2480Elevation of privilege in M-Files Desktop Client7.5CNA v3.10.2%2023-05-25Fix
CVE-2023-2255The Document Foundation LibreOffice remote documents loaded without prompt via IFrame5.3v3.12.2%2023-05-25Exploit codeFix
CVE-2023-0950The Document Foundation LibreOffice Array Index UnderFlow in Calc Formula Parsing7.8v3.10.3%2023-05-25Fix
CVE-2023-0459Copy_from_user Spectre-V1 Gadget in Linux kernel5.5NVD v3.10.6%2023-05-25Fix
CVE-2023-33983Briarproject Briar missing authorization7.4v3.10.6%2023-05-24
CVE-2023-33982Briarproject Briar inadequate encryption strength5.9v3.10.5%2023-05-24Fix
CVE-2023-33981Briarproject Briar improper integrity check validation6.5v3.10.3%2023-05-24Fix
CVE-2023-33980Briarproject Briar denial of service7.5v3.10.9%2023-05-24Fix
CVE-2023-33950Liferay Portal has inefficient regular expression6.5CNA v3.10.9%2023-05-24Fix
CVE-2023-33949Insecure default initialization in Liferay Portal5.3CNA v3.10.8%2023-05-24Fix
CVE-2023-33948Missing authorization in Liferay Portal5.3CNA v3.10.7%2023-05-24Fix
CVE-2023-33947Liferay Portal has unauthorized access to object definition via search2.7CNA v3.10.6%2023-05-24Fix
CVE-2023-33946Liferay Portal unauthorized access to objects via OAuth 2 scope2.7CNA v3.10.6%2023-05-24Fix
CVE-2023-33945SQL injection in Liferay Portal6.4CNA v3.10.5%2023-05-24Fix
CVE-2023-33944Cross-site scripting in Liferay Portal4.8CNA v3.10.5%2023-05-24Fix
CVE-2023-33943Cross-site scripting in Liferay Portal5.4CNA v3.10.4%2023-05-24Fix
CVE-2023-33942Cross-site scripting in Liferay Portal5.4CNA v3.10.5%2023-05-24Fix
CVE-2023-33941Cross-site scripting in Liferay Portal6.1CNA v3.10.5%2023-05-24Fix
CVE-2023-33940Cross-site scripting in Liferay Portal4.8CNA v3.10.5%2023-05-24Fix
CVE-2023-33939Cross-site scripting in Liferay Portal5.4CNA v3.10.5%2023-05-24Fix
CVE-2023-33938Cross-site scripting in Liferay Portal4.8CNA v3.10.5%2023-05-24Fix
CVE-2023-33937Cross-site scripting in Liferay Portal5.4CNA v3.10.4%2023-05-24Fix
CVE-2023-33829Cloudogu Scm Manager Cloudogu GmbH stored cross-site scripting5.4v3.17.3%2023-05-24Exploit code
CVE-2023-33800NetBox Create Regions stored cross-site scripting5.4v3.10.4%2023-05-24
CVE-2023-33799NetBox Create Contacts stored cross-site scripting5.4v3.10.4%2023-05-24
CVE-2023-33798NetBox Create Rack stored cross-site scripting5.4v3.10.4%2023-05-24
CVE-2023-33797NetBox Create Sites stored cross-site scripting5.4v3.10.4%2023-05-24
CVE-2023-33796NetBox GraphQL API vulnerability9.1v3.10.7%2023-05-24
CVE-2023-33795NetBox Create Contact Roles stored cross-site scripting5.4v3.10.4%2023-05-24
CVE-2023-33794NetBox Create Tenants stored cross-site scripting5.4v3.10.4%2023-05-24
CVE-2023-33793NetBox Create Power Panels stored cross-site scripting5.4v3.10.4%2023-05-24
CVE-2023-33792NetBox Create Site Groups stored cross-site scripting5.4v3.10.4%2023-05-24
CVE-2023-33791NetBox Create Provider Accounts stored cross-site scripting5.4v3.10.4%2023-05-24
CVE-2023-33790NetBox Create Locations stored cross-site scripting5.4v3.10.4%2023-05-24
CVE-2023-33789NetBox Create Contact Groups stored cross-site scripting5.4v3.10.4%2023-05-24
CVE-2023-33788NetBox Create Providers stored cross-site scripting5.4v3.10.4%2023-05-24
CVE-2023-33787NetBox Create Tenant Groups stored cross-site scripting5.4v3.10.4%2023-05-24
CVE-2023-33786NetBox Create Circuit Types stored cross-site scripting5.4v3.10.4%2023-05-24
CVE-2023-33785NetBox Create Rack Roles stored cross-site scripting5.4v3.10.4%2023-05-24
CVE-2023-33248Amazon Alexa software version 8960323972 on Echo Dot 2nd generation and 3rd generation devices potentially allows attackers to deliver security-relevant commands via an audio signal between 16 and 22 kHz (often outside the range of human adult hearing). Commands at these frequencies are essentially7.6v3.10.7%2023-05-24
CVE-2023-33246Apache RocketMQ command execution9.8NVD v3.196.6%2023-05-24KEVNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2023-33010Zyxel Multiple Firewalls buffer overflow9.8CNA v3.129.0%2023-05-24KEVFix
CVE-2023-33009Zyxel Multiple Firewalls buffer overflow9.8CNA v3.128.1%2023-05-24KEVFix
CVE-2023-31763Agshome Smart Alarm authentication bypass by replay7.5v3.10.3%2023-05-24
CVE-2023-31762Mydigoo Dg-hamb authentication bypass by replay7.5v3.10.3%2023-05-24
CVE-2023-31761Blitzwolf Bw-is22 authentication bypass by replay7.5v3.10.3%2023-05-24
CVE-2023-31759Keruistore Kerui W18 authentication bypass by replay7.5v3.10.3%2023-05-24
CVE-2023-31748Wondershare Mobiletrans insecure permissions7.8v3.10.8%2023-05-24Exploit code
CVE-2023-31595IC Realtime ICIP-P2012T improper access control7.5v3.10.8%2023-05-24Exploit code
CVE-2023-31460Mitel MiVoice Connect command injection7.2v3.11.7%2023-05-24Fix
CVE-2023-31459Mitel MiVoice Connect weak password recovery8.8v3.10.4%2023-05-24Fix
CVE-2023-31458Mitel MiVoice Connect arbitrary command execution9.8v3.10.9%2023-05-24Fix
CVE-2023-31457Mitel MiVoice Connect improper access control9.8v3.11.0%2023-05-24Fix
CVE-2023-29721Sofawiki unrestricted file upload9.8v3.11.1%2023-05-24
CVE-2023-25599Mitel MiVoice Connect cross-site scripting7.4v3.10.6%2023-05-24Fix
CVE-2023-25598Mitel MiVoice Connect cross-site scripting6.1v3.10.4%2023-05-24Fix
CVE-2023-25028CC Custom Taxonomy WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-24
CVE-2023-2875eScan Antivirus IoControlCode PROCOBSRVESX.SYS 0x22E008u null pointer dereference5.5v3.10.3%2023-05-24
CVE-2023-2874Twister Antivirus IoControlCode filppd.sys 0x804f2140 denial of service5.5v3.10.3%2023-05-24
CVE-2023-2873Twister Antivirus IoControlCode filppd.sys 0x80800043 memory corruption7.8v3.10.4%2023-05-24
CVE-2023-2872FlexiHub IoControlCode fusbhub.sys 0x220088 null pointer dereference5.5v3.10.3%2023-05-24
CVE-2023-2871FabulaTech USB for Remote Desktop IoControlCode 0x220408 null pointer dereference5.5v3.10.4%2023-05-24
CVE-2023-2870EnTech Monitor Asset Manager IoControlCode 0x80002014 denial of service5.5v3.10.3%2023-05-24
CVE-2023-2868Barracuda Networks ESG Appliance improper input validation9.8NVD v3.187.7%2023-05-24KEVMetasploitEmerging ThreatsExploit codeFix
CVE-2023-2865SourceCodester Theme Park Ticketing System GET parameter print_ticket.php SQL injection9.8v3.10.7%2023-05-24
CVE-2023-2864SourceCodester Online Jewelry Store customer.php cross-site scripting6.1v3.10.5%2023-05-24
CVE-2023-2863Simple Design Daily Journal SQLite Database cleartext storage in a file or on disk5.5v3.10.2%2023-05-24
CVE-2023-2862SiteServer CMS search cross-site scripting6.1v3.10.6%2023-05-24
CVE-2023-2859Code injection in nilsteampassnet/TeamPass8.8NVD v3.11.6%2023-05-24Fix
CVE-2023-2750SQLi in Cityboss Software's E-municipality9.8CNA v3.10.6%2023-05-24Fix
CVE-2023-2498Go Pricing - WordPress Responsive Pricing Tables plugin stored cross-site scripting5.4v3.10.4%2023-05-24Fix
CVE-2023-2496Go Pricing file upload capability check improper authorization7.5v3.10.8%2023-05-24Fix
CVE-2023-2494Go Pricing WordPress plugin unauthorized access8.8v3.10.4%2023-05-24Fix
CVE-2023-2065IDOR in Armoli Technology's Cargo Tracking System8.8v3.10.9%2023-05-24Fix
CVE-2023-2064SQLi in Minova Technology's eTrace9.8CNA v3.10.6%2023-05-24Fix
CVE-2023-2045SQLi in Ipekyolu Software's Auto Damage Tracking Software9.8CNA v3.10.6%2023-05-24Fix
CVE-2023-1944Kubernetes minikube SSH server with default password8.4CNA v3.10.2%2023-05-24
CVE-2023-1424Denial of service and remote code execution vulnerability in MELSEC Series CPU module10.0CNA v3.13.4%2023-05-24Fix
CVE-2023-1174Network Port exposure in minikube running on macOS using Docker driver9.8CNA v3.10.8%2023-05-24
CVE-2023-1158Hitachi Vantara Pentaho Business Analytics Server incorrect authorization4.3v3.10.4%2023-05-24Fix
CVE-2023-33617Eparks Fiberlink 210 Firmware OS command injection7.2v3.15.2%2023-05-23Exploit code
CVE-2023-33599Easyimages2.0 cross-site scripting6.1v3.10.4%2023-05-23
CVE-2023-33362Piwigo SQL injection9.8v3.19.1%2023-05-23Exploit code
CVE-2023-33361Piwigo SQL injection9.8v3.10.9%2023-05-23
CVE-2023-33359Piwigo cross-site request forgery4.3v3.10.4%2023-05-23
CVE-2023-33338PHPGurukul Old Age Home Management System SQL injection9.8v3.13.6%2023-05-23Nuclei
CVE-2023-32697Sqlite-jdbc vulnerable to remote code execution when JDBC URL is attacker controlled8.8CNA v3.11.6%2023-05-23Fix
CVE-2023-31996Hanwha Vision Ane-l7012r command injection8.8v3.11.5%2023-05-23Fix
CVE-2023-31995Hanwha Vision Ane-l7012r cross-site scripting5.4v3.10.3%2023-05-23Fix
CVE-2023-31994Hanwha Vision Ane-l7012r denial of service5.3v3.10.6%2023-05-23Fix
CVE-2023-31860WuzhiCMS cross-site scripting5.4v3.10.4%2023-05-23
CVE-2023-31826Skyscreamer Nevado Jms command injection in nevado-jms7.8v3.10.3%2023-05-23Fix
CVE-2023-31814D-Link Dir-300 Firmware incorrectly resolved name or reference9.8v3.10.9%2023-05-23
CVE-2023-31752oretnom23 Employee and Visitor Gate Pass Logging System SQL injection9.8v3.10.8%2023-05-23
CVE-2023-31747Wondershare Filmora unquoted search path7.8v3.11.1%2023-05-23Exploit code
CVE-2023-31741Linksys E2000 There is a command injection7.2v3.12.4%2023-05-23
CVE-2023-31740Linksys E2000 There is a command injection7.2v3.12.4%2023-05-23
CVE-2023-31726AlistGo alist incorrect authorization7.5v3.11.1%2023-05-23Exploit code
CVE-2023-31708EyouCMS A cross-site request forgery4.3v3.10.3%2023-05-23
CVE-2023-31670Webassembly Binary Toolkit denial of service7.5v3.10.8%2023-05-23Fix
CVE-2023-31669Webassembly Binary Toolkit crash5.5v3.10.3%2023-05-23Fix
CVE-2023-31664WSO2 API Manager /authenticationendpoint/login.do reflected cross-site scripting6.1v3.11.2%2023-05-23Exploit codeFix
CVE-2023-31518Teeworlds component CDataFileReader::GetItem use-after-free5.5v3.10.3%2023-05-23
CVE-2023-31517Teeworlds component CConsole::Chain memory leak7.5v3.10.7%2023-05-23
CVE-2023-30469Reflrected cross-site scripting vulnerability in Hitachi Ops Center Analyzer7.6CNA v3.10.4%2023-05-23Fix
CVE-2023-30440IBM PowerVM Hypervisor denial of service6.7CNA v3.10.2%2023-05-23Fix
CVE-2023-30382Valve Software Half-life component hl.exe of Valve buffer overflow7.3v3.10.2%2023-05-23
CVE-2023-29919Contec SolarView Compact incorrect default permissions9.1v3.160.2%2023-05-23Reported exploitedNucleiExploit code
CVE-2023-28413Monkey Wrench Snow Monkey Forms path traversal9.8v3.12.0%2023-05-23Fix
CVE-2023-28409Monkey Wrench MW WP Form unrestricted file upload9.8v3.11.2%2023-05-23Fix
CVE-2023-28408Monkey Wrench MW WP Form path traversal9.8v3.11.8%2023-05-23Fix
CVE-2023-28394Beekeeper Studio OS command injection8.8v3.11.4%2023-05-23Fix
CVE-2023-28392Inaba Denki Sangyo Wi-Fi AP UNIT OS command injection7.2v3.10.9%2023-05-23Fix
CVE-2023-28390ICOM Sr-7100vn Firmware privilege escalation6.8v3.10.3%2023-05-23Fix
CVE-2023-28367Vektor VK All in One Expansion Unit CTA post function cross-site scripting5.4v3.10.6%2023-05-23Fix
CVE-2023-28015HCL Domino AppDev Pack is susceptible to a User Account Enumeration vulnerability5.3CNA v3.10.5%2023-05-23Fix
CVE-2023-27926Vektor VK All in One Expansion Unit Profile setting function cross-site scripting5.4v3.10.6%2023-05-23Fix
CVE-2023-27925Vektor VK Blocks and VK Blocks Pro Post function cross-site scripting5.4v3.10.6%2023-05-23Fix
CVE-2023-27923Vektor VK Blocks and VK Blocks Pro Tag edit function cross-site scripting5.4v3.10.6%2023-05-23Fix
CVE-2023-27922Stefano Lissa & The Newsletter Team Newsletter cross-site scripting6.1v3.11.2%2023-05-23NucleiFix
CVE-2023-27921JINS MEME CORE hard-coded credentials6.5v3.10.3%2023-05-23Fix
CVE-2023-27920Contec SolarView Compact system date/time setting page improper access control4.3v3.11.8%2023-05-23Fix
CVE-2023-27521Contec SolarView Compact mail setting page OS command injection8.8v3.11.9%2023-05-23Fix
CVE-2023-27518Contec SolarView Compact multiple setting pages buffer overflow8.8v3.11.5%2023-05-23Fix
CVE-2023-27514Contec SolarView Compact download page OS command injection8.8v3.11.9%2023-05-23Fix
CVE-2023-27512Contec SolarView Compact hard-coded credentials7.2v3.11.0%2023-05-23Fix
CVE-2023-27507MicroEngine Mailform path traversal9.8v3.11.3%2023-05-23Fix
CVE-2023-27397MicroEngine Mailform unrestricted file upload9.8v3.10.9%2023-05-23Fix
CVE-2023-27388T&D Corporation and ESPEC MIC CORP. data logger products improper authentication9.8v3.11.3%2023-05-23Fix
CVE-2023-27387T&D Corporation and ESPEC MIC CORP. data logger products cross-site request forgery8.8v3.10.4%2023-05-23Fix
CVE-2023-27384Cybozu Garoon incorrect authorization4.3v3.10.5%2023-05-23Fix
CVE-2023-27304Cybozu Garoon missing authorization4.3v3.10.5%2023-05-23Fix
CVE-2023-27068Sitecore Experience Platform deserialization of untrusted data9.8v3.11.7%2023-05-23Fix
CVE-2023-26595Cybozu Garoon message denial of service6.5v3.10.5%2023-05-23Fix
CVE-2023-26014Minify HTML WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-23Fix
CVE-2023-26011Read More Excerpt Link WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-23Fix
CVE-2023-25953WORKS MOBILE Japan Drive Explorer for macOS code injection9.8v3.10.6%2023-05-23Fix
CVE-2023-25946Qrio Lock (Q-SL2) authentication bypass8.8v3.10.4%2023-05-23Fix
CVE-2023-25707VikBooking Hotel Booking Engine and PMS WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-05-23Fix
CVE-2023-25481Podlove Subscribe button WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-05-23Fix
CVE-2023-25474About Me 3000 widget WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-23
CVE-2023-25472Podlove Podcast Publisher WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-23Fix
CVE-2023-25440CiviCRM add contact function stored cross-site scripting5.4v3.12.5%2023-05-23Exploit code
CVE-2023-25056Feed Them Social WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-23Fix
CVE-2023-23724WordPress Email Marketing Plugin WP Email Capture cross-site request forgery (CSRF)8.8v3.10.3%2023-05-23Fix
CVE-2023-23713Theme Tweaker WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-23
CVE-2023-23706WordPress Social Login and Register plugin cross-site request forgery8.8v3.10.3%2023-05-23Fix
CVE-2023-23705Books Gallery WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-23Fix
CVE-2023-23694Dell VxRail HCI OS command injection4.7CNA v3.10.7%2023-05-23Fix
CVE-2023-23693Dell VxRail HCI OS command injection6.7CNA v3.10.4%2023-05-23Fix
CVE-2023-23545T&D Corporation and ESPEC MIC CORP. data logger products missing authentication5.3v3.10.8%2023-05-23Fix
CVE-2023-23306Garmin Connect-iq out-of-bounds write9.8v3.11.2%2023-05-23
CVE-2023-23305Garmin Connect-iq buffer overflow9.8v3.11.3%2023-05-23
CVE-2023-23304Garmin Connect-iq incorrect authorization9.1v3.10.6%2023-05-23
CVE-2023-23303Garmin Connect-iq buffer overflow9.8v3.10.8%2023-05-23
CVE-2023-23302Garmin Connect-iq buffer overflow9.8v3.11.3%2023-05-23
CVE-2023-23301Garmin Connect-iq out-of-bounds read9.8v3.11.1%2023-05-23
CVE-2023-23300Garmin Connect-iq buffer overflow9.8v3.11.3%2023-05-23
CVE-2023-23299Garmin Connect-iq incorrect authorization7.5v3.10.8%2023-05-23
CVE-2023-23298Garmin Connect-iq integer overflow9.8v3.11.5%2023-05-23
CVE-2023-22654T&D Corporation and ESPEC MIC CORP. data logger products cross-site scripting5.4v3.10.5%2023-05-23Fix
CVE-2023-2845Improper access control in CloudExplorer-Dev/CloudExplorer-Lite8.1v3.10.7%2023-05-23Fix
CVE-2023-2844Authorization bypass through user-controlled key in CloudExplorer-Dev/CloudExplorer-Lite4.9NVD v3.10.7%2023-05-23Fix
CVE-2023-2703Information disclosure in Finex Media's Competition Management System7.5v3.10.6%2023-05-23Fix
CVE-2023-2702IDOR in Finex Media's Competition Management System8.8CNA v3.10.7%2023-05-23Fix
CVE-2023-1837HYPR Server missing authentication8.5CNA v3.10.5%2023-05-23Fix
CVE-2023-1508SQLi in AdamPOS's Mobilmen Terminal Software9.8CNA v3.10.6%2023-05-23Fix
CVE-2023-1209ServiceNow Records cross-site scripting4.3CNA v3.10.4%2023-05-23Fix
CVE-2023-33297Bitcoin Core denial of service7.5v3.11.4%2023-05-22Fix
CVE-2023-33294Kaiostech Kaios command injection9.8v3.10.9%2023-05-22
CVE-2023-33293Kaiostech Kaios resource exposure5.3v3.10.6%2023-05-22
CVE-2023-33288Linux kernel use-after-free4.7v3.10.3%2023-05-22Fix
CVE-2023-33285Qt out-of-bounds read5.3v3.10.8%2023-05-22Fix
CVE-2023-33281Nissan Sylphy Classic 2021 authentication bypass by replay6.5v3.10.6%2023-05-22
CVE-2023-33264Hazelcast vulnerable to unmasked password exposure4.3v3.10.7%2023-05-22Fix
CVE-2023-33236MXsecurity hard-coded credential9.8CNA v3.11.0%2023-05-22Fix
CVE-2023-33235MXsecurity command injection7.2CNA v3.11.4%2023-05-22Fix
CVE-2023-32350Teltonika RUT model routers OS command injection8.8v3.11.5%2023-05-22Fix
CVE-2023-32349Teltonika RUT model routers external control of a configuration setting8.8v3.11.1%2023-05-22Fix
CVE-2023-32348Teltonika Remote Management System server-side request forgery5.8v3.10.5%2023-05-22Fix
CVE-2023-32347Teltonika Remote Management System improper authentication9.8v3.10.7%2023-05-22Fix
CVE-2023-32346Teltonika Remote Management System response discrepancy5.3v3.10.5%2023-05-22Fix
CVE-2023-32336IBM InfoSphere Information Server code execution8.8CNA v3.11.4%2023-05-22Fix
CVE-2023-31923supremainc BioStar 2 improper preservation of permissions8.8v3.10.9%2023-05-22
CVE-2023-31816Content Management System cross-site scripting6.1v3.10.5%2023-05-22
CVE-2023-31779WeKan cross-site scripting5.4v3.10.6%2023-05-22Exploit code
CVE-2023-31742Linksys WRT54GL command injection7.2v3.19.1%2023-05-22Exploit code
CVE-2023-31689WCMS unrestricted file upload9.8v3.120.2%2023-05-22
CVE-2023-31584silicon cross-site scripting6.1v3.10.8%2023-05-22Exploit code
CVE-2023-31454Apache InLong: IDOR make users can bind any cluster7.5v3.11.2%2023-05-22Fix
CVE-2023-31453Apache InLong: IDOR make users can delete others' subscription7.5v3.11.2%2023-05-22Fix
CVE-2023-31245Snap One OvrC Cloud open redirect6.1NVD v3.10.4%2023-05-22Fix
CVE-2023-31241Snap One OvrC Cloud unprotected alternate channel10.0v3.10.8%2023-05-22Fix
CVE-2023-31240Snap One OvrC Cloud weak credentials9.8v3.10.5%2023-05-22Fix
CVE-2023-31206Apache InLong: Attackers can change the immutable name and type of nodes7.5v3.11.2%2023-05-22Fix
CVE-2023-31193Snap One OvrC Cloud cleartext transmission of sensitive information7.5v3.10.4%2023-05-22Fix
CVE-2023-31103Apache InLong: Attackers can change the immutable name and type of cluster7.5v3.11.3%2023-05-22Fix
CVE-2023-31101Apache InLong: Users who joined later can see the data of deleted users6.5v3.11.1%2023-05-22Fix
CVE-2023-31098Apache InLong: Weak password Implementation in InLong9.8v3.11.2%2023-05-22Fix
CVE-2023-31066Apache InLong: Insecure direct object references for Inlong sources9.1v3.11.4%2023-05-22Fix
CVE-2023-31065Apache InLong: Insufficient session expiration in InLong9.1v3.11.2%2023-05-22Fix
CVE-2023-31064Apache InLong: Insecurity direct object references cancelling applications7.5v3.11.2%2023-05-22Fix
CVE-2023-31062Apache InLong: Privilege escalation vulnerability for InLong9.8v3.11.3%2023-05-22Fix
CVE-2023-31058Apache InLong: JDBC URL bypassing by adding blanks7.5v3.11.2%2023-05-22Fix
CVE-2023-29838Allwaysync incorrect default permissions7.8v3.10.2%2023-05-22
CVE-2023-28709Apache Tomcat HTTP connector parameter limit denial of service7.5v3.148.2%2023-05-22Fix
CVE-2023-28649Snap One OvrC Cloud device claim requests vulnerability7.5v3.10.5%2023-05-22Fix
CVE-2023-28467mybb cross-site scripting6.1NVD v3.10.5%2023-05-22Fix
CVE-2023-28412Snap One OvrC Cloud response discrepancy5.3v3.10.5%2023-05-22Fix
CVE-2023-28386Snap One OvrC Cloud improper integrity check validation9.8v3.10.4%2023-05-22Fix
CVE-2023-27067Sitecore Experience Platform path traversal7.5v3.11.6%2023-05-22Fix
CVE-2023-27066Sitecore Experience Platform path traversal6.5v3.11.5%2023-05-22Fix
CVE-2023-25537Dell PowerEdge Platform out-of-bounds write6.1CNA v3.10.2%2023-05-22Fix
CVE-2023-25448Archivist Custom Archive Templates WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-05-22Fix
CVE-2023-25447ColorWay WordPress theme cross-site request forgery (CSRF)8.8v3.10.3%2023-05-22
CVE-2023-25183Snap One OvrC Cloud hidden functionality7.2v3.10.6%2023-05-22Fix
CVE-2023-23813My Calendar WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-22Fix
CVE-2023-23797Auto YouTube Importer WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-22Fix
CVE-2023-23712User Meta Manager WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-22
CVE-2023-23680WP TopBar WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-22
CVE-2023-22714Coming Soon by Supsystic WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-22Fix
CVE-2023-22709SRS Simple Hits Counter WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-22Fix
CVE-2023-22692Name Directory WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-22Fix
CVE-2023-22688WP Tabs Slides WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-22
CVE-2023-2840Null pointer dereference in gpac/gpac9.8v3.10.7%2023-05-22Fix
CVE-2023-2839Divide by zero in gpac/gpac7.5v3.10.6%2023-05-22Fix
CVE-2023-2838Out-of-bounds read in gpac/gpac9.1v3.10.7%2023-05-22Fix
CVE-2023-2837Stack-based buffer overflow in gpac/gpac5.5v3.10.4%2023-05-22Fix
CVE-2023-2832SQL injection in unilogies/Bumsys7.2v3.10.9%2023-05-22Fix
CVE-2023-2597Eclipse OpenJ9 buffer overflow7.0CNA v3.10.4%2023-05-22Fix
CVE-2023-2588Teltonika Remote Management System cloud proxy remote code execution8.8v3.11.1%2023-05-22Fix
CVE-2023-2587Teltonika Remote Management System cross-site scripting8.3v3.10.9%2023-05-22Fix
CVE-2023-2586Teltonika Remote Management System improper authentication9.8v3.11.0%2023-05-22Fix
CVE-2023-2505BirdDog STUDIO R3 cross-site request forgery8.8v3.10.3%2023-05-22Fix
CVE-2023-2504BirdDog STUDIO R3 hard-coded credentials9.8v3.10.5%2023-05-22Fix
CVE-2023-33254Quest Kace Systems Deployment Appliance incorrect authorization6.5v3.13.2%2023-05-21
CVE-2023-332520kims Snarkjs missing authorization7.5v3.10.6%2023-05-21Fix
CVE-2023-33251Lightbend Akka HTTP incorrect permission assignment5.5v3.10.2%2023-05-21Fix
CVE-2023-33250Linux kernel use-after-free4.4v3.10.3%2023-05-21Fix
CVE-2023-2826SourceCodester Class Scheduling System POST parameter search_teacher_result.php cross-site scripting5.4v3.10.7%2023-05-21
CVE-2023-33244Obsidian embedded web page vulnerability8.2v3.10.5%2023-05-20Fix
CVE-2023-32700Tug TeX Live command injection7.8v3.10.8%2023-05-20Fix
CVE-2023-32589Dyslexiefont Free WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-20
CVE-2023-24414Robo Gallery WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-20Fix
CVE-2023-23890WP Airbnb Review Slider WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-20Fix
CVE-2023-22689Auto Affiliate Links WordPress plugin broken access control8.8v3.10.3%2023-05-20Fix
CVE-2023-2824SourceCodester Dental Clinic Appointment Reservation System service.php cross-site scripting6.1v3.10.6%2023-05-20
CVE-2023-2823SourceCodester Class Scheduling System GET parameter edit_subject.php SQL injection9.8v3.10.8%2023-05-20
CVE-2023-2822Ellucian Ethos Identity logout cross-site scripting6.1v3.13.3%2023-05-20NucleiExploit code
CVE-2023-2736Groundhogg WordPress plugin cross-site request forgery to privilege escalation8.0v3.10.4%2023-05-20Fix
CVE-2023-2735Groundhogg WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode5.4v3.10.5%2023-05-20Fix
CVE-2023-2717Groundhogg WordPress plugin cross-site request forgery to Disable All Plugins4.3v3.10.3%2023-05-20Fix
CVE-2023-2716Groundhogg WordPress plugin missing authorization to Non-arbitrary file upload5.4v3.10.5%2023-05-20Fix
CVE-2023-2715Groundhogg WordPress plugin unauthorized access4.3v3.10.6%2023-05-20Fix
CVE-2023-2714Groundhogg WordPress plugin missing authorization to update License4.3v3.10.5%2023-05-20Fix
CVE-2023-2713IDOR vulnerability in Rental Module developed by third-party for Ideasoft's E-commerce Platform9.8v3.10.8%2023-05-20Fix
CVE-2023-2712Rental Module unrestricted file upload9.8v3.11.3%2023-05-20Fix
CVE-2023-2276WCFM Membership WordPress plugin insecure direct object reference9.8v3.11.1%2023-05-20Fix
CVE-2023-1696Huawei HarmonyOS data processing vulnerability in the multimedia video module7.5v3.10.4%2023-05-20Fix
CVE-2023-1694Huawei HarmonyOS privilege escalation vulnerability in the settings module7.5v3.10.4%2023-05-20Fix
CVE-2023-1693Huawei HarmonyOS privilege escalation vulnerability in the settings module7.5v3.10.4%2023-05-20Fix
CVE-2023-1692Huawei HarmonyOS vulnerability of no permission verification in the window management module7.5v3.10.4%2023-05-20Fix
CVE-2023-33240Foxit PDF Editor incorrect default permissions7.8v3.10.2%2023-05-19
CVE-2023-32679Remote code execution via unrestricted file extension in Craft CMS7.2CNA v3.11.8%2023-05-19Fix
CVE-2023-32677Users who can send invitations can erroneously add users to streams during invitation in Zulip3.1CNA v3.10.6%2023-05-19Fix
CVE-2023-32675Nonpayable default functions are sometimes payable in vyper3.7CNA v3.10.6%2023-05-19Fix
CVE-2023-31862jizhiCMS cross-site scripting5.4v3.10.3%2023-05-19
CVE-2023-31757DedeCMS cross-site scripting5.4v3.10.4%2023-05-19
CVE-2023-31756TP-Link Archer VR1600V administrative web portal command injection6.7v3.11.8%2023-05-19
CVE-2023-31707SEMCMS SQL injection9.8v3.10.8%2023-05-19
CVE-2023-30775libtiff heap-based buffer overflow5.5NVD v3.10.3%2023-05-19Fix
CVE-2023-30774libtiff heap-based buffer overflow5.5NVD v3.10.5%2023-05-19Fix
CVE-2023-30199Webbax Customexporter path traversal7.5v3.10.7%2023-05-19Fix
CVE-2023-28950IBM MQ information disclosure5.1CNA v3.10.2%2023-05-19Fix
CVE-2023-28623Unauthorized user can register an account in specific configurations in Zulip6.5CNA v3.10.5%2023-05-19Fix
CVE-2023-28529IBM InfoSphere Information Server Web UI stored cross-site scripting5.5CNA v3.10.4%2023-05-19Fix
CVE-2023-28514IBM MQ information disclosure6.2CNA v3.10.2%2023-05-19Fix
CVE-2023-28045Dell CloudIQ Collector missing encryption6.3CNA v3.10.2%2023-05-19Fix
CVE-2023-26818Telegram incorrect authorization5.5v3.10.5%2023-05-19Exploit code
CVE-2023-22878IBM InfoSphere Information Server information disclosure6.2CNA v3.10.1%2023-05-19Fix
CVE-2023-20881Cloud Controller API improper certificate validation8.1v3.10.4%2023-05-19Fix
CVE-2023-2815SourceCodester Online Jewelry Store POST parameter supplier.php SQL injection9.8v3.10.7%2023-05-19
CVE-2023-2814SourceCodester Class Scheduling System POST parameter save_teacher.php cross-site scripting6.1v3.10.6%2023-05-19
CVE-2023-2806Weaver e-cology API RequestInfoByXml XML external entity reference8.8v3.11.0%2023-05-19
CVE-2023-2704BP Social Connect WordPress plugin authentication bypass9.8v3.11.6%2023-05-19Fix
CVE-2023-1996Reflected cross-site scripting vulnerability affecting Release 3DEXPERIENCE R2018x6.1CNA v3.10.4%2023-05-19
CVE-2023-1618Authentication bypass vulnerability in MELSEC WS Series Ethernet interface module7.5CNA v3.11.1%2023-05-19Fix
CVE-2023-33204sysstat integer overflow7.8v3.10.3%2023-05-18Fix
CVE-2023-33203Linux kernel race condition6.4v3.10.4%2023-05-18Fix
CVE-2023-32680Missing SQL permissions check in metabase5.8CNA v3.10.6%2023-05-18Fix
CVE-2023-32515Custom Field Suite WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-18Fix
CVE-2023-32322Arbitrary file read in Ombi4.9CNA v3.12.1%2023-05-18Fix
CVE-2023-32100silabs.com Gecko Platform key duplication in GSDK5.3CNA v3.10.5%2023-05-18Fix
CVE-2023-32099silabs.com Gecko Platform key duplication in GSDK5.3CNA v3.10.5%2023-05-18Fix
CVE-2023-32098silabs.com Gecko Platform key duplication in GSDK5.3CNA v3.10.5%2023-05-18Fix
CVE-2023-32097silabs.com Gecko Platform key duplication in GSDK3.1CNA v3.10.5%2023-05-18Fix
CVE-2023-32096silabs.com Gecko Platform key duplication in GSDK3.1CNA v3.10.5%2023-05-18Fix
CVE-2023-31871OpenText Documentum Content Server incorrect permission assignment7.8v3.10.3%2023-05-18
CVE-2023-31729TOTOLINK A3300R command injection9.8v3.11.4%2023-05-18
CVE-2023-31655redis denial of service7.5v3.11.0%2023-05-18Fix
CVE-2023-31597zammad incorrect authorization6.5v3.10.4%2023-05-18Fix
CVE-2023-31233Baidu Tongji generator WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-18
CVE-2023-30868CMS Tree Page View WordPress plugin cross-site scripting (XSS)6.1NVD v3.14.0%2023-05-18NucleiExploit codeFix
CVE-2023-30780User IP and Location WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-05-18Fix
CVE-2023-30487LearnPress Export Import WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-05-18Fix
CVE-2023-30470Facebook Hermes use-after-free9.8v3.11.2%2023-05-18Fix
CVE-2023-30333PerfreeBlog component /admin/ThemeController.java arbitrary file upload9.8v3.10.9%2023-05-18
CVE-2023-30124LavaLite vulnerable to cross-site scripting5.4v3.10.4%2023-05-18
CVE-2023-29985oretnom23 Student Study Center Desk Management System SQL injection9.8v3.10.9%2023-05-18
CVE-2023-29857Teslamate information disclosure5.3v3.10.5%2023-05-18
CVE-2023-29720Sofawiki cross-site scripting6.1v3.10.4%2023-05-18
CVE-2023-28753Facebook netconsd out-of-bounds write9.8v3.11.9%2023-05-18Exploit codeFix
CVE-2023-28369Brother Industries Brother iPrint&Scan improper access control3.3v3.10.2%2023-05-18Fix
CVE-2023-28081Facebook Hermes use-after-free9.8v3.10.9%2023-05-18Fix
CVE-2023-27430Mass Delete Unused Tags WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-18Fix
CVE-2023-27423Auto Prune Posts WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-18Fix
CVE-2023-27217Belkin F7C063 Firmware stack-based buffer overflow9.8v3.11.0%2023-05-18
CVE-2023-25933Facebook Hermes TypedArray type confusion9.8v3.10.9%2023-05-18Fix
CVE-2023-25698Shoppable Images Lite WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-05-18Fix
CVE-2023-24833Facebook Hermes BigIntPrimitive addition use-after-free7.5v3.10.6%2023-05-18Fix
CVE-2023-24832Facebook Hermes null pointer dereference7.5v3.10.7%2023-05-18Fix
CVE-2023-23999Google Analytics by Monster Insights WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-05-18Fix
CVE-2023-23759Facebook fizz reachable assertion7.5v3.10.7%2023-05-18Fix
CVE-2023-23667Brands for WooCommerce WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-05-18Fix
CVE-2023-23557Facebook Hermes type confusion9.8v3.10.9%2023-05-18Fix
CVE-2023-23556Facebook Hermes out-of-bounds write9.8v3.10.9%2023-05-18Fix
CVE-2023-20189Cisco Small Business Series Switches buffer overflow8.6CNA v3.111.1%2023-05-18Fix
CVE-2023-20184Cisco DNA Center API improper authorization5.4CNA v3.10.5%2023-05-18Fix
CVE-2023-20183Cisco DNA Center API improper authorization5.4CNA v3.10.5%2023-05-18Fix
CVE-2023-20182Cisco DNA Center API improper authorization5.4CNA v3.10.6%2023-05-18Fix
CVE-2023-20174Cisco Identity Services Engine XML external entity injection4.9CNA v3.10.7%2023-05-18Fix
CVE-2023-20173Cisco Identity Services Engine XML external entity injection4.9CNA v3.10.8%2023-05-18Fix
CVE-2023-20172Cisco Identity Services Engine arbitrary file delete and File Read5.4CNA v3.10.4%2023-05-18Fix
CVE-2023-20171Cisco Identity Services Engine arbitrary file delete and File Read5.4CNA v3.10.4%2023-05-18Fix
CVE-2023-20167Cisco Identity Services Engine path traversal6.0CNA v3.10.5%2023-05-18Fix
CVE-2023-20166Cisco Identity Services Engine path traversal6.0CNA v3.10.2%2023-05-18Fix
CVE-2023-20164Cisco Identity Services Engine command injection6.5CNA v3.11.1%2023-05-18Fix
CVE-2023-20163Cisco Identity Services Engine command injection6.5CNA v3.11.1%2023-05-18Fix
CVE-2023-20162Cisco Small Business Series Switches buffer overflow8.6CNA v3.11.2%2023-05-18Fix
CVE-2023-20161Cisco Small Business Series Switches buffer overflow8.6CNA v3.110.3%2023-05-18Fix
CVE-2023-20160Cisco Small Business Series Switches buffer overflow8.6CNA v3.110.3%2023-05-18Fix
CVE-2023-20159Cisco Small Business Series Switches buffer overflow8.6CNA v3.110.3%2023-05-18Fix
CVE-2023-20158Cisco Small Business Series Switches buffer overflow8.6CNA v3.11.2%2023-05-18Fix
CVE-2023-20157Cisco Small Business Series Switches buffer overflow8.6CNA v3.11.2%2023-05-18Fix
CVE-2023-20156Cisco Small Business Series Switches buffer overflow8.6CNA v3.11.2%2023-05-18Fix
CVE-2023-20110Cisco Smart Software Manager On-prem SQL injection6.5CNA v3.11.2%2023-05-18Exploit codeFix
CVE-2023-20106Cisco Identity Services Engine arbitrary file delete and File Read5.4CNA v3.10.4%2023-05-18Fix
CVE-2023-20087Cisco Identity Services Engine arbitrary file download4.9CNA v3.10.8%2023-05-18Fix
CVE-2023-20077Cisco Identity Services Engine arbitrary file download4.9CNA v3.10.8%2023-05-18Fix
CVE-2023-20024Cisco Small Business Series Switches buffer overflow8.6CNA v3.11.3%2023-05-18Fix
CVE-2023-20003Cisco Business Wireless Access Points Social Login Guest User authentication bypass4.7CNA v3.10.3%2023-05-18Fix
CVE-2023-2800Insecure temporary file in huggingface/Transformers4.7v3.10.3%2023-05-18Fix
CVE-2023-2799cnoa OA hard-coded password9.8v3.10.8%2023-05-18
CVE-2023-2790TOTOLINK N200RE Telnet service custom.conf password in configuration file5.5v3.10.3%2023-05-18
CVE-2023-2789GNU cflow parser.c parse_variable_declaration denial of service7.5v3.11.2%2023-05-18
CVE-2023-2782Acronis Cyber Infrastructure improper authorization5.5CNA v3.00.2%2023-05-18Fix
CVE-2023-2757Waiting: One-click countdowns WordPress plugin authorization bypass5.4NVD v3.10.5%2023-05-18
CVE-2023-2481silabs.com Gecko Platform key duplication in GSDK5.3CNA v3.10.5%2023-05-18Fix
CVE-2023-2025Exposure of sensitive information in OpenBlue Enterprise Manager Data Collector5.0CNA v3.10.5%2023-05-18Fix
CVE-2023-2024Improper authentication for OpenBlue Enterprise Manager Data Collector10.0CNA v3.11.1%2023-05-18Fix
CVE-2023-1195Linux kernel use-after-free5.5NVD v3.10.2%2023-05-18Fix
CVE-2023-1132silabs.com Gecko Platform key duplication in GSDK5.3CNA v3.10.5%2023-05-18Fix
CVE-2023-0965silabs.com Gecko Platform key duplication in GSDK3.1CNA v3.10.5%2023-05-18Fix
CVE-2023-32767IP Symcon path traversal7.5v3.11.2%2023-05-17Fix
CVE-2023-31904Savysoda Wifi Hd Wireless Disk Drive path traversal7.5v3.11.3%2023-05-17
CVE-2023-31903Freeguppy Guppy unrestricted file upload9.8v3.12.1%2023-05-17
CVE-2023-31902Mobile Mouse remote code execution9.8v3.18.7%2023-05-17MetasploitExploit code
CVE-2023-31848Davinci server-side request forgery8.8v3.10.6%2023-05-17
CVE-2023-31847Davinci arbitrary file read6.5v3.10.6%2023-05-17
CVE-2023-31725yasm nasm preprocessor use-after-free5.5v3.10.3%2023-05-17
CVE-2023-31724yasm nasm preprocessor vulnerability7.8v3.10.3%2023-05-17
CVE-2023-31723yasm nasm preprocessor vulnerability5.5v3.10.3%2023-05-17
CVE-2023-31722NASM Netwide Assembler There exists a heap-based buffer overflow7.8v3.10.4%2023-05-17Fix
CVE-2023-31703Escanav Escan Management Console edit user form in Microworld Technologies cross-site scripting9.0v3.14.5%2023-05-17Exploit code
CVE-2023-31702Escanav Escan Management Console View User Profile in MicroWorld SQL injection7.2NVD v3.14.3%2023-05-17Exploit code
CVE-2023-31701TP-Link Tl-wpa4530 Kit command injection8.8v3.12.5%2023-05-17
CVE-2023-31700TP-Link Tl-wpa4530 Kit command injection8.8v3.12.5%2023-05-17
CVE-2023-31699ChurchCRM cross-site scripting4.8v3.11.5%2023-05-17Exploit code
CVE-2023-31698Bludit cross-site scripting5.4v3.12.6%2023-05-17Exploit code
CVE-2023-31208Checkmk livestatus command injection in RestAPI8.8v3.11.0%2023-05-17Fix
CVE-2023-31135Dgraph Audit Log Encryption nonce reuse3.3CNA v3.10.2%2023-05-17Fix
CVE-2023-30452Morosystems Easymind cross-site scripting5.4v3.10.3%2023-05-17Fix
CVE-2023-30438IBM PowerVM Hypervisor logical partition isolation vulnerability9.3CNA v3.10.2%2023-05-17Fix
CVE-2023-30191Cdesigner SQL injection9.8v3.10.8%2023-05-17
CVE-2023-29837Exelysis Unified Communications Solution cross-site scripting6.1v3.10.5%2023-05-17
CVE-2023-27233Piwigo SQL injection8.8v3.10.9%2023-05-17
CVE-2023-26044ReactPHP's HTTP server continues parsing unused multipart parts after reaching limits5.3CNA v3.10.7%2023-05-17Fix
CVE-2023-25394Getvideostream Videostream time-of-check time-of-use race condition7.0v3.10.3%2023-05-17
CVE-2023-24805Command injection in cups-filters8.8CNA v3.13.7%2023-05-17Fix
CVE-2023-22348Checkmk reading host_configs does not honour contact groups4.3v3.10.6%2023-05-17Fix
CVE-2023-2780Path traversal: \..\filename in MLflow/MLflow9.8v3.16.3%2023-05-17NucleiFix
CVE-2023-2776code-projects Simple Photo Gallery unrestricted upload9.8v3.10.7%2023-05-17
CVE-2023-2775code-projects Bus Dispatch and Information System adminHome.php SQL injection8.8v3.10.7%2023-05-17
CVE-2023-2774code-projects Bus Dispatch and Information System view_branch.php SQL injection9.8v3.10.7%2023-05-17
CVE-2023-2773code-projects Bus Dispatch and Information System view_admin.php SQL injection8.8v3.10.6%2023-05-17
CVE-2023-2772SourceCodester Budget and Expense Tracker System GET parameter manage_budget.php SQL injection8.8v3.10.7%2023-05-17
CVE-2023-2771SourceCodester Online Exam System data SQL injection8.8v3.10.7%2023-05-17
CVE-2023-2770SourceCodester Online Exam System data SQL injection8.8v3.10.7%2023-05-17
CVE-2023-2769SourceCodester Service Provider Management System SQL injection8.8v3.10.7%2023-05-17
CVE-2023-2768Sucms cross-site scripting5.4v3.10.6%2023-05-17
CVE-2023-2766Weaver OA jx2_config.ini file access7.5v3.154.2%2023-05-17Nuclei
CVE-2023-2765Weaver OA downfile.php absolute path traversal7.5v3.12.2%2023-05-17
CVE-2023-2756SQL injection in pimcore/customer-data-framework7.2v3.10.9%2023-05-17Fix
CVE-2023-2753Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ5.4NVD v3.10.6%2023-05-17Fix
CVE-2023-2752Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ5.4NVD v3.10.5%2023-05-17Fix
CVE-2023-2745WordPress Core directory traversal6.1NVD v3.179.5%2023-05-17Reported exploitedNucleiExploit codeFix
CVE-2023-2731libtiff A null pointer dereference5.5NVD v3.10.4%2023-05-17Fix
CVE-2023-2706OTP Login Woocommerce and Gravity Forms WordPress plugin authentication bypass8.1v3.11.7%2023-05-17Fix
CVE-2023-2679Data leakage in Adobe connector for SPE edition of SLM4.1CNA v3.10.4%2023-05-17Fix
CVE-2023-2608Multiple Page Generator WordPress plugin cross-site request forgery to SQL injection4.3v3.10.4%2023-05-17Fix
CVE-2023-2528Contact Form by Supsystic WordPress plugin cross-site request forgery via AJAX action8.8v3.10.3%2023-05-17Fix
CVE-2023-2509A cross-site scripting(XSS) vulnerability was found on ADM6.1NVD v3.10.3%2023-05-17Fix
CVE-2023-2491emacs command injection7.8NVD v3.10.5%2023-05-17Fix
CVE-2023-2319It was discovered that an update for PCS package in RHBA-2023:2151 erratum released as part of Red Hat Enterprise Linux 9.2 failed to include the fix for the Webpack issue CVE-2023-28154 (for PCS package), which was previously addressed in Red Hat Enterprise Linux 9.1 via erratum RHSA-2023:1591. The9.8v3.11.0%2023-05-17Fix
CVE-2023-2295libreswan pluto IKEv1 daemon resource exhaustion7.5NVD v3.11.6%2023-05-17Fix
CVE-2023-2203WebKitGTK use-after-free8.8NVD v3.10.9%2023-05-17Fix
CVE-2023-1972binutils _bfd_elf_slurp_version_tables in bfd/elf.c heap-based buffer overflow6.5NVD v3.10.9%2023-05-17Fix
CVE-2023-1859kernel A use-after-free4.7NVD v3.10.2%2023-05-17Fix
CVE-2023-1764Canon IJ NW Tool inadequate encryption strength6.5CNA v3.10.2%2023-05-17
CVE-2023-1763Canon IJ Network Tool/Ver.4.7.5 and earlier (supported OS: OS X 10.9.5-macOS 13),IJ Network Tool/Ver.4.7.3 and earlier (supported OS: OS X 10.7.5-OS X 10.8) allows an attacker to acquire sensitive information on the Wi-Fi connection setup of the printer from the software.6.5CNA v3.10.3%2023-05-17
CVE-2023-0864ABB Terra AC wallbox (UL40/80A) cleartext transmission of sensitive information7.1CNA v3.10.2%2023-05-17Fix
CVE-2023-0863Authentication to access the AC wallbox via its Bluetooth Low Energy (BLE) channel can be bypassed8.8CNA v3.10.3%2023-05-17Fix
CVE-2023-33007Jenkins LoadComplete support Plugin cross-site scripting5.4v3.10.5%2023-05-16Fix
CVE-2023-33006Jenkins WSO2 Oauth Plugin cross-site request forgery5.4v3.10.3%2023-05-16Fix
CVE-2023-33005Jenkins WSO2 Oauth Plugin session fixation5.4v3.10.4%2023-05-16Fix
CVE-2023-33004Jenkins Tag Profiler Plugin missing permission check4.3v3.10.4%2023-05-16Fix
CVE-2023-33003Jenkins Tag Profiler Plugin vulnerable to cross-site request forgery4.3v3.10.3%2023-05-16Fix
CVE-2023-33002TestComplete support Plugin vulnerable to stored cross-site scripting5.4v3.12.4%2023-05-16Fix
CVE-2023-33001Jenkins HashiCorp Vault Plugin has improper masking of credentials7.5v3.10.6%2023-05-16Fix
CVE-2023-33000Jenkins NS-ND Integration Performance Publisher Plugin displays credentials without masking7.5v3.10.6%2023-05-16Fix
CVE-2023-32999Jenkins AppSpider Plugin missing permission check4.3v3.10.5%2023-05-16Fix
CVE-2023-32998Jenkins AppSpider Plugin cross-site request forgery8.8v3.10.5%2023-05-16Fix
CVE-2023-32997Jenkins CAS Plugin session fixation8.8v3.10.8%2023-05-16Fix
CVE-2023-32996Jenkins SAML Single Sign On(SSO) Plugin missing permission checks4.3v3.10.4%2023-05-16Fix
CVE-2023-32995Jenkins SAML Single Sign On(SSO) Plugin cross-site request forgery8.8v3.10.5%2023-05-16Fix
CVE-2023-32994Jenkins SAML Single Sign On(SSO) Plugin unconditionally disables SSL/TLS certificate validation3.7v3.10.2%2023-05-16Fix
CVE-2023-32993Jenkins SAML Single Sign On(SSO) Plugin missing hostname validation4.8v3.10.2%2023-05-16Fix
CVE-2023-32992Jenkins SAML Single Sign On(SSO) Plugin missing permission checks8.8v3.10.8%2023-05-16Fix
CVE-2023-32991Jenkins SAML Single Sign On(SSO) Plugin cross-site request forgery8.8v3.10.7%2023-05-16Fix
CVE-2023-32990Jenkins Azure VM Agents Plugin missing permission checks6.5v3.10.6%2023-05-16Fix
CVE-2023-32989Jenkins Azure VM Agents Plugin cross-site request forgery8.8v3.10.5%2023-05-16Fix
CVE-2023-32988Jenkins Azure VM Agents Plugin missing permission checks4.3v3.10.5%2023-05-16Fix
CVE-2023-32987Jenkins Reverse Proxy Auth Plugin cross-site request forgery8.8v3.10.5%2023-05-16Fix
CVE-2023-32986Jenkins File Parameter Plugin arbitrary file write8.8v3.160.7%2023-05-16Fix
CVE-2023-32985Jenkins Sidebar Link Plugin vulnerable to path traversal4.3v3.172.4%2023-05-16Fix
CVE-2023-32984Jenkins TestNG Results Plugin stored cross-site scripting5.4v3.10.5%2023-05-16Fix
CVE-2023-32983Jenkins Ansible Plugin job configuration form does not mask variables5.3v3.10.4%2023-05-16Fix
CVE-2023-32982Jenkins Ansible Plugin stores and displays secrets in plain text4.3v3.10.4%2023-05-16Fix
CVE-2023-32981Jenkins Pipeline Utility Steps Plugin arbitrary file write8.8v3.11.0%2023-05-16Fix
CVE-2023-32980Jenkins Email Extension Plugin cross-site request forgery4.3v3.10.4%2023-05-16Fix
CVE-2023-32979Jenkins Email Extension Plugin missing permission check4.3v3.10.5%2023-05-16Fix
CVE-2023-32978Jenkins LDAP Plugin vulnerable to cross-site request forgery4.3v3.10.3%2023-05-16Fix
CVE-2023-32977Jenkins Pipeline: Job Plugin vulnerable to stored cross-site scripting5.4v3.10.6%2023-05-16Fix
CVE-2023-32956Synology Router Manager (SRM) OS command improper neutralization9.8CNA v3.11.5%2023-05-16Fix
CVE-2023-32955Synology Router Manager (SRM) OS command improper neutralization8.1CNA v3.11.2%2023-05-16Fix
CVE-2023-31890Glazedlists XML deserialization9.8v3.11.0%2023-05-16
CVE-2023-31857oretnom23 Online Computer and Laptop Store unrestricted file upload9.8v3.11.5%2023-05-16
CVE-2023-31856TOTOLINK Cp300+ command injection9.8v3.12.9%2023-05-16
CVE-2023-31679Videogo device ID parameter improper access control7.5v3.10.8%2023-05-16
CVE-2023-31678Videogo device binding improper access control5.3v3.10.6%2023-05-16
CVE-2023-31677Luowice insecure permissions7.5v3.10.8%2023-05-16
CVE-2023-31587Tenda AC5 remote code execution9.8v3.12.0%2023-05-16Fix
CVE-2023-31576s9y Serendipity An arbitrary file upload8.8v3.11.1%2023-05-16
CVE-2023-31572Bludit privilege escalation8.8v3.10.8%2023-05-16
CVE-2023-31544Alkacon OpenCMS alkacon-OpenCMS vulnerable to stored cross-site scripting5.4v3.10.4%2023-05-16Fix
CVE-2023-31519Pharmacy Management System SQL injection9.8v3.10.9%2023-05-16
CVE-2023-30510Authenticated server-side request forgery in Aruba EdgeConnect Enterprise Web Management interface4.1CNA v3.10.6%2023-05-16
CVE-2023-30509Authenticated remote path traversal in Aruba EdgeConnect Enterprise Command Line interface4.9CNA v3.10.6%2023-05-16
CVE-2023-30508Authenticated remote path traversal in Aruba EdgeConnect Enterprise Command Line interface4.9CNA v3.10.6%2023-05-16
CVE-2023-30507Authenticated remote path traversal in Aruba EdgeConnect Enterprise Command Line interface4.9CNA v3.10.6%2023-05-16
CVE-2023-30506Authenticated remote code execution in Aruba EdgeConnect Enterprise Command Line interface7.2CNA v3.11.1%2023-05-16
CVE-2023-30505Authenticated remote code execution in Aruba EdgeConnect Enterprise Command Line interface7.2CNA v3.11.0%2023-05-16
CVE-2023-30504Authenticated remote code execution in Aruba EdgeConnect Enterprise Command Line interface7.2CNA v3.11.0%2023-05-16
CVE-2023-30503Authenticated remote code execution in Aruba EdgeConnect Enterprise Command Line interface7.2CNA v3.11.0%2023-05-16
CVE-2023-30502Authenticated remote code execution in Aruba EdgeConnect Enterprise Command Line interface7.2CNA v3.11.1%2023-05-16
CVE-2023-30501Authenticated remote code execution in Aruba EdgeConnect Enterprise Command Line interface7.2CNA v3.11.0%2023-05-16
CVE-2023-30281Storecommander Scquickaccounting incorrect default permissions6.5NVD v3.10.5%2023-05-16
CVE-2023-30189Posthemes Posstaticblocks SQL injection9.8v3.10.8%2023-05-16
CVE-2023-29961D-Link DIR-605L Firmware out-of-bounds write9.8v3.11.2%2023-05-16
CVE-2023-29927Sage 300 incorrect authorization4.3v3.10.4%2023-05-16
CVE-2023-29439FooGallery WordPress plugin cross-site scripting (XSS)6.1NVD v3.11.7%2023-05-16NucleiExploit codeFix
CVE-2023-28076Dell CloudLink weak cryptographic algorithm5.9CNA v3.10.4%2023-05-16Fix
CVE-2023-27742Idurarapp Idurar SQL injection9.8NVD v3.10.9%2023-05-16
CVE-2023-23727Live Chat by Formilla Real-time Chat and Chatbots WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-16Fix
CVE-2023-23720Verified Reviews (Avis Vérifiés) WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-16Fix
CVE-2023-23709WPJAM Basic WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-05-16Fix
CVE-2023-23703Arconix Shortcodes WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-05-16Fix
CVE-2023-23676File Gallery WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-05-16Fix
CVE-2023-23673I Recommend This WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-16Fix
CVE-2023-23657Mail Subscribe List WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-05-16Fix
CVE-2023-23641Uji Popup WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-05-16
CVE-2023-2740SourceCodester Guest Management System GET parameter dateTest.php cross-site scripting6.1v3.10.5%2023-05-16
CVE-2023-2739Gira HomeServer hslist cross-site scripting6.1v3.10.5%2023-05-16
CVE-2023-2738Tongda OA GatewayController.php actionGetdata unrestricted upload9.8v3.10.9%2023-05-16
CVE-2023-2730Cross-site scripting (XSS) Stored in pimcore/pimcore5.4v3.10.5%2023-05-16Fix
CVE-2023-2726Google Chrome WebApp Installs inappropriate implementation8.8v3.10.7%2023-05-16Fix
CVE-2023-2725Google Chrome Guest view use-after-free8.8v3.124.7%2023-05-16Fix
CVE-2023-2724Google Chrome V8 type confusion8.8v3.129.1%2023-05-16Fix
CVE-2023-2723Google Chrome DevTools use-after-free8.8v3.115.4%2023-05-16Fix
CVE-2023-2722Google Chrome Autofill UI use-after-free8.8v3.10.9%2023-05-16Fix
CVE-2023-2721Google Chrome Navigation use-after-free8.8v3.10.9%2023-05-16Fix
CVE-2023-2710video carousel slider with lightbox WordPress plugin reflected cross-site scripting6.1v3.10.6%2023-05-16Fix
CVE-2023-2708Video Gallery WordPress plugin reflected cross-site scripting6.1v3.10.6%2023-05-16Fix
CVE-2023-2633API keys stored and displayed in plain text by Code Dx Plugin4.3v3.10.4%2023-05-16Fix
CVE-2023-2632API keys stored and displayed in plain text by Code Dx Plugin4.3v3.10.6%2023-05-16Fix
CVE-2023-2631CSRF vulnerability and missing permission checks in Code Dx Plugin4.3v3.10.4%2023-05-16Fix
CVE-2023-2548RegistrationMagic WordPress plugin insecure direct object reference7.2v3.10.7%2023-05-16Fix
CVE-2023-2499RegistrationMagic WordPress plugin authentication bypass9.8v3.11.3%2023-05-16Fix
CVE-2023-2196Missing permission checks in Code Dx Plugin4.3v3.11.0%2023-05-16Fix
CVE-2023-2195CSRF vulnerability and missing permission checks in Code Dx Plugin3.5NVD v3.10.4%2023-05-16Fix
CVE-2023-2161Schneider Electric OPC Factory Server (OFS) XML external entity injection5.0CNA v3.10.2%2023-05-16Fix
CVE-2023-32787OPC Foundation Ua Java Legacy resource exhaustion7.5v3.11.2%2023-05-15Fix
CVE-2023-32784KeePass cleartext transmission of sensitive information7.5NVD v3.14.4%2023-05-15Exploit codeFix
CVE-2023-32758Git-url-parse regular expression denial of service7.5v3.11.0%2023-05-15
CVE-2023-32314patriksimek vm2 sandbox escape9.8CNA v3.18.1%2023-05-15Exploit codeFix
CVE-2023-32313Inspect method manipulation in vm25.3CNA v3.10.8%2023-05-15Fix
CVE-2023-32309facelessuser pymdown-extensions arbitrary file inclusion with the pymdowm-snippets extension7.5CNA v3.11.7%2023-05-15Exploit codeFix
CVE-2023-32308SQL injection vulnerability in anuko timetracker8.2CNA v3.10.7%2023-05-15Fix
CVE-2023-32068URL redirection to untrusted site in XWiki4.7CNA v3.155.1%2023-05-15NucleiFix
CVE-2023-31986Edimax BR-6428NS Edimax Wireless Router N300 firmware command injection9.8v3.18.2%2023-05-15
CVE-2023-31845Faculty Evaluation System SQL injection7.2v3.10.8%2023-05-15
CVE-2023-31844Faculty Evaluation System SQL injection7.2v3.10.8%2023-05-15
CVE-2023-31843Faculty Evaluation System SQL injection7.2v3.10.8%2023-05-15
CVE-2023-31842Faculty Evaluation System SQL injection7.2v3.10.8%2023-05-15
CVE-2023-31631Openlinksw Virtuoso SQL injection7.5v3.10.9%2023-05-15Fix
CVE-2023-31630Openlinksw Virtuoso SQL injection7.5v3.10.9%2023-05-15Fix
CVE-2023-31629Openlinksw Virtuoso SQL injection7.5v3.10.9%2023-05-15Fix
CVE-2023-31628Openlinksw Virtuoso SQL injection7.5v3.10.9%2023-05-15Fix
CVE-2023-31627Openlinksw Virtuoso SQL injection7.5v3.10.9%2023-05-15Fix
CVE-2023-31626Openlinksw Virtuoso SQL injection7.5v3.10.9%2023-05-15Fix
CVE-2023-31625Openlinksw Virtuoso SQL injection7.5v3.10.9%2023-05-15Fix
CVE-2023-31624Openlinksw Virtuoso SQL injection7.5v3.10.9%2023-05-15Fix
CVE-2023-31623Openlinksw Virtuoso SQL injection7.5v3.10.9%2023-05-15Fix
CVE-2023-31622Openlinksw Virtuoso SQL injection7.5v3.10.9%2023-05-15Fix
CVE-2023-31621Openlinksw Virtuoso SQL injection7.5v3.10.9%2023-05-15Fix
CVE-2023-31620Openlinksw Virtuoso SQL injection7.5v3.10.9%2023-05-15Fix
CVE-2023-31619Openlinksw Virtuoso SQL injection7.5v3.10.9%2023-05-15Fix
CVE-2023-31618Openlinksw Virtuoso SQL injection7.5v3.10.9%2023-05-15Fix
CVE-2023-31617Openlinksw Virtuoso SQL injection7.5v3.10.9%2023-05-15Fix
CVE-2023-31616Openlinksw Virtuoso SQL injection7.5v3.10.9%2023-05-15Fix
CVE-2023-31615Openlinksw Virtuoso SQL injection7.5v3.10.9%2023-05-15Fix
CVE-2023-31614Openlinksw Virtuoso SQL injection7.5v3.10.9%2023-05-15Fix
CVE-2023-31613Openlinksw Virtuoso SQL injection7.5v3.10.9%2023-05-15Fix
CVE-2023-31612Openlinksw Virtuoso SQL injection7.5v3.10.9%2023-05-15Fix
CVE-2023-31611Openlinksw Virtuoso SQL injection7.5v3.10.9%2023-05-15Fix
CVE-2023-31610Openlinksw Virtuoso SQL injection7.5v3.10.9%2023-05-15Fix
CVE-2023-31609Openlinksw Virtuoso SQL injection7.5v3.10.9%2023-05-15Fix
CVE-2023-31608Openlinksw Virtuoso SQL injection7.5v3.10.9%2023-05-15Fix
CVE-2023-31607Openlinksw Virtuoso SQL injection7.5v3.10.9%2023-05-15Fix
CVE-2023-31409SICK FTMG-ESD15AXX AIR FLOW SENSOR resource exhaustion5.3CNA v3.11.1%2023-05-15
CVE-2023-31408SICK FTMG-ESD15AXX AIR FLOW SENSOR cleartext storage of sensitive information5.3CNA v3.10.4%2023-05-15
CVE-2023-31145Reflected XSS vulnerability in CollaboraOnline4.3CNA v3.10.4%2023-05-15Fix
CVE-2023-31131Arbitrary file write when Extracting Tarballs in greenplum-db7.4CNA v3.10.7%2023-05-15Fix
CVE-2023-30245Judging Management System SQL injection9.8v3.11.3%2023-05-15
CVE-2023-29862Agasio Camera code injection9.8v3.11.9%2023-05-15
CVE-2023-29861FLIR Dvtel Camera code injection9.8v3.11.8%2023-05-15
CVE-2023-23688Social Share Boost WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-05-15Fix
CVE-2023-23683White Label Branding for Elementor Page Builder WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-15
CVE-2023-23682EZP Maintenance Mode WordPress plugin cross-site scripting (XSS)4.8v3.10.5%2023-05-15
CVE-2023-23674WP Original Media Path WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-15Fix
CVE-2023-23654SparkPost WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-15Fix
CVE-2023-23450SICK FTMg air flow sensor REST interface vulnerability6.2CNA v3.10.7%2023-05-15
CVE-2023-23449SICK FTMG-ESD15AXX AIR FLOW SENSOR response discrepancy5.3CNA v3.10.8%2023-05-15
CVE-2023-23448SICK FTMG-ESD15AXX AIR FLOW SENSOR sensitive information in source code5.3CNA v3.10.8%2023-05-15
CVE-2023-23447SICK FTMG-ESD15AXX AIR FLOW SENSOR resource exhaustion7.5CNA v3.11.1%2023-05-15Fix
CVE-2023-23446SICK FTMG-ESD15AXX AIR FLOW SENSOR improper access control7.5CNA v3.10.9%2023-05-15Fix
CVE-2023-23445SICK FTMG-ESD15AXX AIR FLOW SENSOR improper access control7.5CNA v3.10.7%2023-05-15
CVE-2023-22717FormCraft WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-05-15Fix
CVE-2023-22706PropertyHive WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-05-15Fix
CVE-2023-22703WCP Contact Form WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-05-15
CVE-2023-22690Ebook Store WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-15Fix
CVE-2023-22684Subscribers Free Web Push Notifications WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-15Fix
CVE-2023-22318Tribe29 Checkmk Appliance denial of service against webconf7.5v3.10.5%2023-05-15Fix
CVE-2023-21118Android Sensor.cpp out-of-bounds read5.5v3.10.2%2023-05-15Exploit codeFix
CVE-2023-21117Android ActivityManagerService.java privilege escalation7.8v3.10.1%2023-05-15Fix
CVE-2023-21116Android InstallPackageHelper.java privilege escalation6.7v3.10.1%2023-05-15Fix
CVE-2023-21112Android NxpMfcReader.cc out-of-bounds read5.5v3.10.1%2023-05-15Fix
CVE-2023-21111Android PhoneAccountRegistrar.java denial of service5.5v3.10.1%2023-05-15Fix
CVE-2023-21110Android SnoozeHelper.java privilege escalation7.8v3.10.1%2023-05-15Fix
CVE-2023-21109Android AccessibilityService privilege escalation7.8v3.10.1%2023-05-15Exploit codeFix
CVE-2023-21107Android incorrect default permissions7.8v3.10.1%2023-05-15Fix
CVE-2023-21106Android adreno_gpu.c memory corruption7.8v3.10.1%2023-05-15Fix
CVE-2023-21104Android incorrect default permissions5.5v3.10.1%2023-05-15Fix
CVE-2023-21103Android information disclosure through error messages5.5v3.10.1%2023-05-15Fix