CVE-2023 records published in May 2023
This page lists the 1,956 CVE-2023 records published in May 2023, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists eight of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2023 list filters these records by severity or signal.
- Critical
- 28314.5% of these records
- Listed in CISA KEV
- 80.4% of these records
- Reported exploited
- 50.3% of these records
- Detection signal
- 613.1% of these records
- Exploit code
- 954.9% of these records
- Actionable vendor fix
- 1,32767.8% of these records
Figures as of 2026-10-24 13:46 UTC. Records published in May 2023 have had from about 41 months to about 42 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2023-34258 | BMC Patrol missing encryption | 7.5v3.1 | 0.8% | 2023-05-31 | |
| CVE-2023-34257 | BMC Patrol Agent code execution | 9.8v3.1 | 1.0% | 2023-05-31 | |
| CVE-2023-34256 | Linux kernel out-of-bounds read | 5.5v3.1 | 0.2% | 2023-05-31 | Fix |
| CVE-2023-34229 | JetBrains TeamCity cross-site scripting | 4.6CNA v3.1 | 1.0% | 2023-05-31 | Fix |
| CVE-2023-34228 | JetBrains TeamCity single-factor authentication | 5.3CNA v3.1 | 0.4% | 2023-05-31 | Fix |
| CVE-2023-34227 | JetBrains TeamCity exposed dangerous method | 5.3CNA v3.1 | 0.5% | 2023-05-31 | Fix |
| CVE-2023-34226 | JetBrains TeamCity cross-site scripting | 4.6CNA v3.1 | 1.0% | 2023-05-31 | Fix |
| CVE-2023-34225 | JetBrains TeamCity cross-site scripting | 4.6CNA v3.1 | 60.7% | 2023-05-31 | Fix |
| CVE-2023-34224 | JetBrains TeamCity open redirect | 4.8CNA v3.1 | 0.3% | 2023-05-31 | Fix |
| CVE-2023-34223 | JetBrains TeamCity sensitive information in log files | 4.3CNA v3.1 | 1.3% | 2023-05-31 | Fix |
| CVE-2023-34222 | JetBrains TeamCity cross-site scripting | 4.6CNA v3.1 | 1.0% | 2023-05-31 | Fix |
| CVE-2023-34221 | JetBrains TeamCity cross-site scripting | 4.6CNA v3.1 | 1.0% | 2023-05-31 | Fix |
| CVE-2023-34220 | JetBrains TeamCity cross-site scripting | 4.6CNA v3.1 | 61.2% | 2023-05-31 | Fix |
| CVE-2023-34219 | JetBrains TeamCity improper authorization | 4.3CNA v3.1 | 0.4% | 2023-05-31 | Fix |
| CVE-2023-34218 | JetBrains TeamCity incorrect authorization | 9.1CNA v3.1 | 0.6% | 2023-05-31 | Fix |
| CVE-2023-34088 | Collabora Online has stored cross-site-scripting vulnerability in admin interface | 8.7CNA v3.1 | 0.4% | 2023-05-31 | Fix |
| CVE-2023-33979 | Gpt_academic's Configuration file vulnerable to file information disclosure | 6.5CNA v3.1 | 0.7% | 2023-05-31 | Fix |
| CVE-2023-33971 | Formcreator vulnerable to stored XSS from ##FULLFORM## | 6.1CNA v3.1 | 0.6% | 2023-05-31 | |
| CVE-2023-33967 | EaseProbe vulnerable to SQL injection when using MySQL/PostgreSQL data checking | 8.3CNA v3.1 | 0.7% | 2023-05-31 | Fix |
| CVE-2023-33966 | Deno missing --allow-net permission check for built-in Node modules | 8.6CNA v3.1 | 0.6% | 2023-05-31 | Fix |
| CVE-2023-33964 | mx-chain-go does not treat invalid transaction with wrong username correctly | 8.6CNA v3.1 | 0.6% | 2023-05-31 | Fix |
| CVE-2023-33736 | Dcat-Admin vulnerable to stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-05-31 | |
| CVE-2023-33735 | D-Link DIR-846 remote command execution | 9.8v3.1 | 31.6% | 2023-05-31 | |
| CVE-2023-33732 | Escanav Escan Management Console New Policy form in Microworld Technologies cross-site scripting | 6.1v3.1 | 0.8% | 2023-05-31 | Exploit code |
| CVE-2023-33730 | Escanav Escan Management Console privilege escalation | 9.8NVD v3.1 | 1.2% | 2023-05-31 | |
| CVE-2023-33722 | Edimax BR-6288ACL command injection | 8.8v3.1 | 1.7% | 2023-05-31 | |
| CVE-2023-33718 | MP4v2 MP4File::ReadString function memory leak | 8.8v3.1 | 0.7% | 2023-05-31 | |
| CVE-2023-33643 | H3C Magic R300-2100m out-of-bounds write | 7.2v3.1 | 0.9% | 2023-05-31 | |
| CVE-2023-33642 | H3C Magic R300-2100m out-of-bounds write | 7.2v3.1 | 0.9% | 2023-05-31 | |
| CVE-2023-33641 | H3C Magic R300-2100m out-of-bounds write | 7.2v3.1 | 0.9% | 2023-05-31 | |
| CVE-2023-33640 | H3C Magic R300-2100m out-of-bounds write | 7.2v3.1 | 0.9% | 2023-05-31 | |
| CVE-2023-33639 | H3C Magic R300-2100m out-of-bounds write | 7.2v3.1 | 0.9% | 2023-05-31 | |
| CVE-2023-33638 | H3C Magic R300-2100m out-of-bounds write | 7.2v3.1 | 0.9% | 2023-05-31 | |
| CVE-2023-33637 | H3C Magic R300-2100m out-of-bounds write | 7.2v3.1 | 0.9% | 2023-05-31 | |
| CVE-2023-33636 | H3C Magic R300-2100m out-of-bounds write | 7.2v3.1 | 0.9% | 2023-05-31 | |
| CVE-2023-33635 | H3C Magic R300-2100m out-of-bounds write | 7.2v3.1 | 0.9% | 2023-05-31 | |
| CVE-2023-33634 | H3C Magic R300-2100m out-of-bounds write | 7.2v3.1 | 0.9% | 2023-05-31 | |
| CVE-2023-33633 | H3C Magic R300-2100m out-of-bounds write | 7.2v3.1 | 0.9% | 2023-05-31 | |
| CVE-2023-33632 | H3C Magic R300-2100m out-of-bounds write | 7.2v3.1 | 0.9% | 2023-05-31 | |
| CVE-2023-33631 | H3C Magic R300-2100m out-of-bounds write | 7.2v3.1 | 0.9% | 2023-05-31 | |
| CVE-2023-33630 | H3C Magic R300-2100m out-of-bounds write | 7.2v3.1 | 0.9% | 2023-05-31 | |
| CVE-2023-33629 | H3C Magic R300-2100m out-of-bounds write | 7.2v3.1 | 4.4% | 2023-05-31 | Nuclei |
| CVE-2023-33628 | H3C Magic R300-2100m out-of-bounds write | 7.2v3.1 | 0.9% | 2023-05-31 | |
| CVE-2023-33627 | H3C Magic R300-2100m out-of-bounds write | 7.2v3.1 | 0.9% | 2023-05-31 | |
| CVE-2023-33509 | Kramerav Via GO2 SQL injection | 9.8v3.1 | 0.8% | 2023-05-31 | |
| CVE-2023-33508 | Kramerav Via GO2 unrestricted file upload | 9.8v3.1 | 1.4% | 2023-05-31 | |
| CVE-2023-33507 | Kramerav Via GO2 arbitrary file read | 7.5v3.1 | 0.7% | 2023-05-31 | |
| CVE-2023-33487 | TOTOLINK X5000R command injection | 9.8v3.1 | 1.4% | 2023-05-31 | |
| CVE-2023-33486 | TOTOLINK X5000R command injection | 9.8v3.1 | 1.4% | 2023-05-31 | |
| CVE-2023-33485 | TOTOLINK X5000R out-of-bounds write | 8.8v3.1 | 1.1% | 2023-05-31 | |
| CVE-2023-33287 | Actonic Inline Table Editing stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-05-31 | Fix |
| CVE-2023-31548 | ChurchCRM FundRaiserEditor.php component stored cross-site scripting | 5.4v3.1 | 1.2% | 2023-05-31 | Nuclei |
| CVE-2023-30285 | Deviniti Issue Sync technicalUser endpoint information disclosure | 7.5v3.1 | 0.6% | 2023-05-31 | |
| CVE-2023-30197 | Webbax Myinventory path traversal | 7.5v3.1 | 0.7% | 2023-05-31 | |
| CVE-2023-29747 | Story Saver for Instragram - Video Downloader 1.0.6 for Android exists exposed component, the component provides the method to modify the SharedPreference file. The attacker can use the method to modify the data in any SharedPreference file, these data will be loaded into the memory when the applica | 9.8v3.1 | 1.3% | 2023-05-31 | |
| CVE-2023-29745 | Bestweather origin validation error | 7.1v3.1 | 0.3% | 2023-05-31 | |
| CVE-2023-29742 | Bestweather code execution | 7.8v3.1 | 0.4% | 2023-05-31 | |
| CVE-2023-28353 | Faronics Insight unrestricted file upload | 8.8v3.1 | 1.4% | 2023-05-31 | |
| CVE-2023-28352 | Faronics Insight incorrect authorization | 7.4v3.1 | 0.7% | 2023-05-31 | |
| CVE-2023-28351 | Faronics Insight sensitive information in log files | 3.3v3.1 | 0.3% | 2023-05-31 | |
| CVE-2023-28350 | Faronics Insight cross-site scripting | 6.1v3.1 | 1.1% | 2023-05-31 | |
| CVE-2023-28349 | Faronics Insight origin validation error | 8.8v3.1 | 1.2% | 2023-05-31 | |
| CVE-2023-28348 | Faronics Insight cleartext transmission of sensitive information | 7.4v3.1 | 0.4% | 2023-05-31 | |
| CVE-2023-28347 | Faronics Insight cross-site scripting | 9.6v3.1 | 2.8% | 2023-05-31 | |
| CVE-2023-28346 | Faronics Insight incorrect permission assignment | 7.3v3.1 | 0.9% | 2023-05-31 | |
| CVE-2023-28345 | Faronics Insight cleartext storage of sensitive information | 4.6v3.1 | 0.3% | 2023-05-31 | |
| CVE-2023-28344 | Faronics Insight path traversal | 7.1v3.1 | 0.9% | 2023-05-31 | |
| CVE-2023-26842 | ChurchCRM A stored cross-site scripting | 5.4v3.1 | 1.4% | 2023-05-31 | Nuclei |
| CVE-2023-26278 | IBM QRadar WinCollect Agent privilege escalation | 8.2CNA v3.1 | 0.2% | 2023-05-31 | Fix |
| CVE-2023-26277 | IBM QRadar WinCollect Agent privilege escalation | 7.8CNA v3.1 | 0.2% | 2023-05-31 | Fix |
| CVE-2023-26131 | Algernon engine and themes vulnerable to cross-site scripting | 6.1v3.1 | 0.7% | 2023-05-31 | |
| CVE-2023-25539 | Dell NetWorker NVE code injection | 8.4CNA v3.1 | 1.5% | 2023-05-31 | Fix |
| CVE-2023-23562 | Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control that allows an authenticated user can update global parameters. | 4.3v3.1 | 0.4% | 2023-05-31 | Fix |
| CVE-2023-3021 | Cross-site scripting (XSS) Stored in mkucej/i-librarian-free | 5.4v3.1 | 0.4% | 2023-05-31 | Fix |
| CVE-2023-3020 | Cross-site scripting (XSS) Reflected in mkucej/i-librarian-free | 6.1NVD v3.1 | 0.6% | 2023-05-31 | Fix |
| CVE-2023-3018 | SourceCodester Lost and Found Information System access control | 8.8v3.1 | 0.7% | 2023-05-31 | |
| CVE-2023-3017 | SourceCodester Lost and Found Information System Manage User page cross-site scripting | 5.4v3.1 | 0.5% | 2023-05-31 | |
| CVE-2023-3016 | yiwent Vip Video Analysis admincore.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-05-31 | |
| CVE-2023-3015 | yiwent Vip Video Analysis title.php server-side request forgery | 9.8v3.1 | 0.6% | 2023-05-31 | |
| CVE-2023-3014 | BeipyVideoResolution admincore.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-05-31 | |
| CVE-2023-3013 | Unchecked return value in gpac/gpac | 7.1v3.1 | 0.3% | 2023-05-31 | Fix |
| CVE-2023-3012 | Null pointer dereference in gpac/gpac | 7.8v3.1 | 0.4% | 2023-05-31 | Fix |
| CVE-2023-3009 | Cross-site scripting (XSS) Stored in nilsteampassnet/TeamPass | 5.4NVD v3.1 | 0.7% | 2023-05-31 | Exploit codeFix |
| CVE-2023-3008 | ningzichun Student Management System login.php SQL injection | 9.8v3.1 | 0.8% | 2023-05-31 | |
| CVE-2023-3007 | ningzichun Student Management System Password Reset resetPassword.php password recovery | 9.8v3.1 | 1.0% | 2023-05-31 | |
| CVE-2023-3006 | kernel sensitive information not cleared before reuse | 5.5NVD v3.1 | 0.3% | 2023-05-31 | Fix |
| CVE-2023-3005 | SourceCodester Local Service Search Engine Management System POST parameter cross-site scripting | 6.1v3.1 | 0.6% | 2023-05-31 | |
| CVE-2023-3004 | SourceCodester Simple Chat System POST parameter SQL injection | 9.8v3.1 | 0.8% | 2023-05-31 | |
| CVE-2023-3003 | SourceCodester Train Station Ticketing System GET parameter manage_prices.php SQL injection | 9.8v3.1 | 0.8% | 2023-05-31 | |
| CVE-2023-2999 | Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ | 6.1v3.1 | 0.5% | 2023-05-31 | Fix |
| CVE-2023-2998 | Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ | 6.1v3.1 | 0.5% | 2023-05-31 | Fix |
| CVE-2023-2987 | Wordapp WordPress plugin authorization bypass | 9.8v3.1 | 0.5% | 2023-05-31 | Fix |
| CVE-2023-2909 | A directory traversal vulnerability was found on EZ Sync service of ADM | 10.0v3.1 | 0.7% | 2023-05-31 | Fix |
| CVE-2023-2836 | CRM Perks Forms WordPress plugin authenticated (Admin+) stored cross-site scripting | 4.8v3.1 | 0.6% | 2023-05-31 | Fix |
| CVE-2023-2758 | Contec CONPROSYS HMI System (CHS) denial of service | 5.3NVD v3.1 | 1.0% | 2023-05-31 | Fix |
| CVE-2023-2749 | A Gain Information vulnerability was found on Download Center | 7.5v3.1 | 0.5% | 2023-05-31 | Fix |
| CVE-2023-2612 | Canonical Ubuntu shiftfs lock unbalance in Ubuntu-specific kernels | 4.4CNA v3.1 | 0.3% | 2023-05-31 | Fix |
| CVE-2023-2549 | Feather Login Page WordPress plugin cross-site request forgery | 8.8v3.1 | 0.3% | 2023-05-31 | Fix |
| CVE-2023-2547 | Custom Login Page WordPress plugin missing authorization | 5.4v3.1 | 0.4% | 2023-05-31 | Fix |
| CVE-2023-2545 | Feather Login Page WordPress plugin unauthorized access | 8.8v3.1 | 0.7% | 2023-05-31 | Fix |
| CVE-2023-2436 | Blog-in-Blog WordPress plugin authenticated (Editor+) stored cross-site scripting via shortcode | 4.8NVD v3.1 | 0.5% | 2023-05-31 | Fix |
| CVE-2023-2435 | Blog-in-Blog WordPress plugin authenticated (Editor+) local file inclusion via shortcode | 7.2v3.1 | 1.1% | 2023-05-31 | Fix |
| CVE-2023-2434 | Nested Pages WordPress plugin missing authorization to authenticated (Editor+) plugin settings reset | 3.8v3.1 | 0.7% | 2023-05-31 | Fix |
| CVE-2023-2304 | Favorites WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode | 5.4v3.1 | 0.7% | 2023-05-31 | Fix |
| CVE-2023-1661 | Display post meta WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-05-31 | Fix |
| CVE-2023-34205 | Signature validation bypass in github.com/moov-io/Signedxml | 9.1v3.1 | 0.4% | 2023-05-30 | Fix |
| CVE-2023-34204 | Imapsync link following | 6.5v3.1 | 0.6% | 2023-05-30 | |
| CVE-2023-34153 | ImageMagick command injection | 7.8NVD v3.1 | 3.1% | 2023-05-30 | Fix |
| CVE-2023-34152 | ImageMagick remote code execution | 9.8NVD v3.1 | 8.0% | 2023-05-30 | Exploit codeFix |
| CVE-2023-34151 | ImageMagick integer overflow | 5.5NVD v3.1 | 1.0% | 2023-05-30 | Fix |
| CVE-2023-33975 | RIOT-OS vulnerable to out-of-bounds write in _rbuf_add | 9.8CNA v3.1 | 1.5% | 2023-05-30 | |
| CVE-2023-33974 | RIOT-OS vulnerable to race condition in SFR Timeout | 7.5CNA v3.1 | 0.7% | 2023-05-30 | Fix |
| CVE-2023-33973 | RIOT-OS vulnerable to null pointer dereference during NHC encoding | 7.5CNA v3.1 | 1.0% | 2023-05-30 | Fix |
| CVE-2023-33962 | JStachio XSS vulnerability: Unescaped single quotes | 5.4CNA v3.1 | 0.6% | 2023-05-30 | Fix |
| CVE-2023-33961 | Leantime stored cross-site scripting | 8.9CNA v3.1 | 0.4% | 2023-05-30 | Fix |
| CVE-2023-33955 | MinIO Console object name display information disclosure | 4.3CNA v3.1 | 0.6% | 2023-05-30 | Fix |
| CVE-2023-33741 | Macro-video V380 Pro observable discrepancy | 7.5v3.1 | 0.8% | 2023-05-30 | |
| CVE-2023-33740 | Luowice origin validation error | 7.5v3.1 | 1.2% | 2023-05-30 | |
| CVE-2023-33734 | Bluecms SQL injection | 9.8v3.1 | 0.8% | 2023-05-30 | |
| CVE-2023-33656 | emqx nanomq memory leak | 5.5v3.1 | 0.4% | 2023-05-30 | |
| CVE-2023-33245 | Minecraft link following | 8.8v3.1 | 0.9% | 2023-05-30 | Fix |
| CVE-2023-33234 | Apache Airflow CNCF Kubernetes Provider: KubernetesPodOperator RCE via connection configuration | 7.2v3.1 | 1.5% | 2023-05-30 | Fix |
| CVE-2023-33198 | Incorrectly Specified Chat Message Destinations in tgstation-server and DreamMaker API | 6.1CNA v3.1 | 0.6% | 2023-05-30 | Fix |
| CVE-2023-33193 | Emby Server Proxy header spoofing | 9.1CNA v3.1 | 1.7% | 2023-05-30 | NucleiFix |
| CVE-2023-33191 | kyverno seccomp control can be circumvented | 4.6CNA v3.1 | 0.5% | 2023-05-30 | Fix |
| CVE-2023-33189 | pomerium incorrect authorization with specially crafted requests | 10.0CNA v3.1 | 0.9% | 2023-05-30 | Fix |
| CVE-2023-33186 | Cross-site scripting vulnerability in Zulip Server development branch via topic tooltip | 8.2CNA v3.1 | 0.6% | 2023-05-30 | Fix |
| CVE-2023-33183 | Error in Calendar when booking an appointment reveals the full path of the website | 2.6CNA v3.1 | 0.4% | 2023-05-30 | Fix |
| CVE-2023-33182 | Nextcloud Contacts photos only sanitized if mime type is all lower case | 0.0CNA v3.1 | 0.8% | 2023-05-30 | Fix |
| CVE-2023-33181 | Sensitive information disclosure abusing Stack Trace in Xibo CMS | 4.3CNA v3.1 | 0.5% | 2023-05-30 | Fix |
| CVE-2023-33180 | Sensitive information disclosure abusing SQL injection in Xibo CMS display map | 6.5CNA v3.1 | 0.6% | 2023-05-30 | Fix |
| CVE-2023-33179 | Sensitive information disclosure abusing SQL injection in Xibo CMS nameFilter | 6.5CNA v3.1 | 0.6% | 2023-05-30 | Fix |
| CVE-2023-33178 | Sensitive information disclosure abusing SQL injection in Xibo CMS dataset filter | 6.5CNA v3.1 | 0.6% | 2023-05-30 | Fix |
| CVE-2023-33177 | Xibo CMS vulnerable to remote code execution through Zip Slip | 8.8CNA v3.1 | 7.0% | 2023-05-30 | Exploit codeFix |
| CVE-2023-33175 | ToUI allows user-specific variables to be shared between users | 9.1CNA v3.1 | 0.7% | 2023-05-30 | Fix |
| CVE-2023-32699 | MeterSphere denial of service | 6.5CNA v3.1 | 0.6% | 2023-05-30 | Fix |
| CVE-2023-32698 | nfpm vulnerable to incorrect default permissions | 7.1CNA v3.1 | 0.4% | 2023-05-30 | Fix |
| CVE-2023-32696 | Excessive permissions for ckan user | 8.8CNA v3.1 | 0.8% | 2023-05-30 | Fix |
| CVE-2023-32692 | CodeIgniter4 remote code execution vulnerability in Validation Placeholders | 9.8CNA v3.1 | 1.1% | 2023-05-30 | Exploit codeFix |
| CVE-2023-32691 | GO Simple Tunnel HTTP header authentication vulnerability | 5.9CNA v3.1 | 0.6% | 2023-05-30 | |
| CVE-2023-32689 | parse-community parse-server phishing attack vulnerability by uploading malicious HTML file | 6.3CNA v3.1 | 0.6% | 2023-05-30 | Fix |
| CVE-2023-32685 | Clipboard based cross-site scripting (blocked with default CSP) in Kanboard | 4.4CNA v3.1 | 0.5% | 2023-05-30 | Fix |
| CVE-2023-32684 | Lima disk image backing file handling vulnerability | 2.7CNA v3.1 | 0.3% | 2023-05-30 | Fix |
| CVE-2023-32448 | Dell PowerPath Windows cleartext storage of sensitive information | 5.5CNA v3.1 | 0.1% | 2023-05-30 | Fix |
| CVE-2023-32342 | IBM GSKit information disclosure | 7.5CNA v3.1 | 0.9% | 2023-05-30 | Fix |
| CVE-2023-32218 | Avaya IX Workforce Engagement URL redirection to untrusted site (open redirect) | 6.1v3.1 | 0.3% | 2023-05-30 | |
| CVE-2023-31187 | Avaya IX Workforce Engagement insufficiently protected credentials | 6.5v3.1 | 0.5% | 2023-05-30 | |
| CVE-2023-31186 | Avaya IX Workforce Engagement User Enumeration observable response discrepancy | 5.3v3.1 | 0.5% | 2023-05-30 | |
| CVE-2023-31185 | ROZCOM server framework information disclosure | 7.5v3.1 | 12.8% | 2023-05-30 | |
| CVE-2023-31184 | ROZCOM client hard-coded credentials | 7.8v3.1 | 2.2% | 2023-05-30 | |
| CVE-2023-30601 | Apache Cassandra: Privilege escalation when enabling FQL/Audit logs | 7.8CNA v3.1 | 0.3% | 2023-05-30 | Fix |
| CVE-2023-30196 | Webbax Salesbooster path traversal | 7.5v3.1 | 0.5% | 2023-05-30 | Fix |
| CVE-2023-29743 | Bestweather origin validation error | 7.5v3.1 | 0.5% | 2023-05-30 | |
| CVE-2023-29741 | Bestweather privilege escalation | 9.8v3.1 | 1.2% | 2023-05-30 | |
| CVE-2023-29740 | Amdroidapp Alarm Clock For Heavy Sleepers denial of service | 7.5v3.1 | 1.2% | 2023-05-30 | |
| CVE-2023-29739 | Amdroidapp Alarm Clock For Heavy Sleepers privilege escalation | 9.8v3.1 | 1.2% | 2023-05-30 | |
| CVE-2023-29738 | Wavekeyboard Wave Animated Keyboard Emoji code execution | 7.8v3.1 | 0.9% | 2023-05-30 | |
| CVE-2023-29737 | Wavekeyboard Wave Animated Keyboard Emoji resource exhaustion | 5.5v3.1 | 0.3% | 2023-05-30 | |
| CVE-2023-29735 | Mwm Edjing Mix denial of service | 5.5v3.1 | 0.3% | 2023-05-30 | |
| CVE-2023-29734 | Mwm Edjing Mix improper privilege management | 9.8v3.1 | 0.9% | 2023-05-30 | |
| CVE-2023-29733 | Dualspace Lock Master incorrect default permissions | 7.8v3.1 | 0.3% | 2023-05-30 | |
| CVE-2023-29732 | Loka Solive incorrect default permissions | 9.8v3.1 | 0.9% | 2023-05-30 | |
| CVE-2023-29731 | Loka Solive incorrect default permissions | 7.5v3.1 | 0.8% | 2023-05-30 | |
| CVE-2023-29728 | Applika Call Blocker origin validation error | 9.8v3.1 | 0.6% | 2023-05-30 | |
| CVE-2023-29727 | Applika Call Blocker insecure storage of sensitive information | 9.8v3.1 | 1.2% | 2023-05-30 | |
| CVE-2023-29726 | Applika Call Blocker improper resource release | 7.5v3.1 | 1.2% | 2023-05-30 | |
| CVE-2023-28080 | Dell PowerPath Windows uncontrolled search path | 6.7CNA v3.1 | 0.2% | 2023-05-30 | Fix |
| CVE-2023-28079 | Dell PowerPath Windows incorrect default permissions | 7.0CNA v3.1 | 0.1% | 2023-05-30 | Fix |
| CVE-2023-27988 | Zyxel NAS326 firmware command injection | 7.2CNA v3.1 | 1.4% | 2023-05-30 | Fix |
| CVE-2023-26130 | yhirose/cpp-httplib CRLF injection | 8.8v3.1 | 1.1% | 2023-05-30 | Fix |
| CVE-2023-24826 | RIOT-OS RIOT Usage of Uninitialized Timer during forwarding of Fragments with SFR | 5.9CNA v3.1 | 0.8% | 2023-05-30 | Fix |
| CVE-2023-24825 | RIOT-OS vulnerable to null pointer dereference in gnrc_pktbuf_mark | 7.5CNA v3.1 | 1.0% | 2023-05-30 | Fix |
| CVE-2023-24817 | RIOT-OS vulnerable to out-of-bounds write in routing with SRH | 7.5CNA v3.1 | 0.6% | 2023-05-30 | Fix |
| CVE-2023-24568 | Dell NetWorker improper certificate host validation | 5.0CNA v3.1 | 0.2% | 2023-05-30 | Fix |
| CVE-2023-23956 | Symantec SiteMinder WebAgent cross-site scripting | 5.4NVD v3.1 | 3.1% | 2023-05-30 | Exploit codeFix |
| CVE-2023-23755 | Joomla! CMS core Bruteforce prevention within the mfa screen | 7.5v3.1 | 0.6% | 2023-05-30 | Fix |
| CVE-2023-23754 | Joomla! CMS core open redirect and XSS within the mfa select | 6.1v3.1 | 0.4% | 2023-05-30 | Fix |
| CVE-2023-23561 | Stormshield Endpoint Security origin validation error | 5.5v3.1 | 0.1% | 2023-05-30 | Fix |
| CVE-2023-20884 | VMware Workspace ONE Access (Access) open redirect | 6.1CNA v3.1 | 0.3% | 2023-05-30 | Fix |
| CVE-2023-2984 | Path traversal: \..\filename in pimcore/pimcore | 8.8v3.1 | 0.9% | 2023-05-30 | Fix |
| CVE-2023-2983 | Privilege defined with unsafe actions in pimcore/pimcore | 8.8v3.1 | 0.9% | 2023-05-30 | Fix |
| CVE-2023-2981 | Abstrium Pydio Cells Chat cross-site scripting | 5.4v3.1 | 0.7% | 2023-05-30 | Fix |
| CVE-2023-2980 | Abstrium Pydio Cells User Creation resource injection | 8.8v3.1 | 1.1% | 2023-05-30 | Fix |
| CVE-2023-2979 | Abstrium Pydio Cells User Creation access control | 8.8v3.1 | 0.8% | 2023-05-30 | Fix |
| CVE-2023-2978 | Abstrium Pydio Cells Change Subscription authorization | 4.3v3.1 | 0.7% | 2023-05-30 | Fix |
| CVE-2023-2973 | SourceCodester Students Online Internship Timesheet Syste cross-site scripting | 6.1v3.1 | 0.6% | 2023-05-30 | |
| CVE-2023-2972 | Prototype pollution in antfu/utils | 9.8v3.1 | 1.0% | 2023-05-30 | Fix |
| CVE-2023-2970 | MindSpore json_helper.cc UpdateArray memory corruption | 6.5v3.1 | 0.9% | 2023-05-30 | |
| CVE-2023-2968 | Undefined variable usage in npm package proxy leads to remote denial of service | 7.5NVD v3.1 | 1.5% | 2023-05-30 | Fix |
| CVE-2023-2953 | openldap null pointer dereference | 7.5NVD v3.1 | 2.0% | 2023-05-30 | Fix |
| CVE-2023-2952 | Wireshark XRA dissector infinite loop | 5.3CNA v3.1 | 1.1% | 2023-05-30 | Fix |
| CVE-2023-2941 | Google Chrome Extensions API inappropriate implementation | 4.3v3.1 | 0.6% | 2023-05-30 | Fix |
| CVE-2023-2940 | Google Chrome Downloads inappropriate implementation | 6.5v3.1 | 0.7% | 2023-05-30 | Fix |
| CVE-2023-2939 | Google Chrome Installer improper input validation | 7.8v3.1 | 0.5% | 2023-05-30 | Fix |
| CVE-2023-2938 | Google Chrome Picture In Picture inappropriate implementation | 4.3v3.1 | 0.9% | 2023-05-30 | Fix |
| CVE-2023-2937 | Google Chrome Picture In Picture inappropriate implementation | 4.3v3.1 | 0.9% | 2023-05-30 | Fix |
| CVE-2023-2936 | Google Chrome V8 type confusion | 8.8v3.1 | 23.0% | 2023-05-30 | Fix |
| CVE-2023-2935 | Google Chrome V8 type confusion | 8.8v3.1 | 23.9% | 2023-05-30 | Fix |
| CVE-2023-2934 | Google Chrome Mojo out-of-bounds access | 8.8v3.1 | 1.5% | 2023-05-30 | Fix |
| CVE-2023-2933 | Google Chrome PDF use-after-free | 8.8v3.1 | 0.9% | 2023-05-30 | Fix |
| CVE-2023-2932 | Google Chrome PDF use-after-free | 8.8v3.1 | 1.0% | 2023-05-30 | Fix |
| CVE-2023-2931 | Google Chrome PDF use-after-free | 8.8v3.1 | 0.9% | 2023-05-30 | Fix |
| CVE-2023-2930 | Google Chrome extensions use-after-free | 8.8v3.1 | 0.8% | 2023-05-30 | Fix |
| CVE-2023-2929 | Google Chrome Swiftshader out-of-bounds write | 8.8v3.1 | 1.1% | 2023-05-30 | Fix |
| CVE-2023-2650 | OpenSSL possible DoS translating ASN.1 object identifiers | 6.5NVD v3.1 | 75.4% | 2023-05-30 | Fix |
| CVE-2023-2518 | Easy Forms for Mailchimp WordPress plugin reflected XSS | 6.1NVD v3.1 | 1.1% | 2023-05-30 | NucleiFix |
| CVE-2023-2470 | The Add to Feedly WordPress plugin through 1.2.11 does not sanitize and escape its settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed. | 4.8NVD v3.1 | 0.5% | 2023-05-30 | |
| CVE-2023-2296 | Loginizer reflected XSS | 6.1NVD v3.1 | 0.5% | 2023-05-30 | Fix |
| CVE-2023-2288 | Otter - Gutenberg Blocks WordPress plugin Author+ PHAR deserialization | 8.8NVD v3.1 | 18.0% | 2023-05-30 | Fix |
| CVE-2023-2287 | Orbit Fox WordPress plugin Author+ server-side request forgery | 4.3NVD v3.1 | 0.6% | 2023-05-30 | Fix |
| CVE-2023-2256 | Product Addons and Fields for WooCommerce WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.0% | 2023-05-30 | NucleiFix |
| CVE-2023-2223 | Login Rebuilder WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.6% | 2023-05-30 | Fix |
| CVE-2023-2117 | Image Optimizer by 10web WordPress plugin Admin+ path traversal | 2.7NVD v3.1 | 0.7% | 2023-05-30 | Fix |
| CVE-2023-2113 | Autoptimize WordPress plugin Admin+ stored cross-site scripting via settings import | 4.8NVD v3.1 | 0.5% | 2023-05-30 | Fix |
| CVE-2023-2111 | HollerBox WordPress plugin Admin+ SQL injection | 4.9NVD v3.1 | 0.8% | 2023-05-30 | Fix |
| CVE-2023-2023 | Custom 404 Pro WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.7% | 2023-05-30 | NucleiExploit codeFix |
| CVE-2023-1938 | WP Fatest Cache WordPress plugin blind SSRF via CSRF | 8.8NVD v3.1 | 8.5% | 2023-05-30 | Fix |
| CVE-2023-1711 | Hitachi Energy FOXMAN-UN log injection | 4.0CNA v3.1 | 0.2% | 2023-05-30 | Fix |
| CVE-2023-1524 | Download Manager WordPress plugin Broken access Controls | 6.5NVD v3.1 | 0.7% | 2023-05-30 | Fix |
| CVE-2023-0779 | zephyrproject-rtos Zephyr net: Shell: Improper input validation | 6.7CNA v3.1 | 0.5% | 2023-05-30 | Fix |
| CVE-2023-0766 | Newsletter Popup WordPress plugin Record deletion via CSRF | 8.8NVD v3.1 | 0.4% | 2023-05-30 | |
| CVE-2023-0733 | Newsletter Popup WordPress plugin unauthenticated stored XSS | 6.1NVD v3.1 | 0.5% | 2023-05-30 | |
| CVE-2023-0443 | AnyWhere Elementor WordPress plugin Freemius API key disclosure | 5.3NVD v3.1 | 0.6% | 2023-05-30 | Fix |
| CVE-2023-0329 | Elementor Website Builder WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 19.7% | 2023-05-30 | Fix |
| CVE-2023-32687 | Insufficiently Protected ChatBot Credentials in tgstation-server | 7.7CNA v3.1 | 0.6% | 2023-05-29 | Fix |
| CVE-2023-32072 | Tuleap vulnerable toXSS via the triggered job URL of a Jenkins job | 4.8CNA v3.1 | 0.5% | 2023-05-29 | Fix |
| CVE-2023-31874 | Yank Note incorrect permission assignment | 8.8v3.1 | 4.9% | 2023-05-29 | Exploit code |
| CVE-2023-30571 | libarchive race condition | 5.3v3.1 | 0.2% | 2023-05-29 | Fix |
| CVE-2023-30570 | libreswan denial of service | 7.5v3.1 | 1.2% | 2023-05-29 | Fix |
| CVE-2023-30350 | FS S3900-24T4S guest account access controls privilege escalation | 8.8v3.1 | 5.3% | 2023-05-29 | Exploit code |
| CVE-2023-30253 | Dolibarr vulnerable to remote code execution via uppercase manipulation | 8.8v3.1 | 82.1% | 2023-05-29 | MetasploitExploit codeFix |
| CVE-2023-29380 | Linux Mint Warpinator path traversal | 7.5v3.1 | 1.8% | 2023-05-29 | |
| CVE-2023-28153 | An issue was discovered in the Kiddoware Kids Place Parental Control application before 3.8.50 for Android. The child can remove all restrictions temporarily without the parents noticing by rebooting into Android Safe Mode and disabling the "Display over other apps" permission. | 6.4v3.1 | 0.5% | 2023-05-29 | |
| CVE-2023-27613 | Forms Ada WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-05-29 | |
| CVE-2023-24605 | Open-Xchange OX App Suite missing authorization | 4.2v3.1 | 0.4% | 2023-05-29 | Fix |
| CVE-2023-24604 | Open-Xchange OX App Suite iCal feed header parsing vulnerability | 4.3v3.1 | 0.7% | 2023-05-29 | Fix |
| CVE-2023-24603 | Open-Xchange OX App Suite iCal feed download vulnerability | 6.5v3.1 | 0.8% | 2023-05-29 | Fix |
| CVE-2023-24602 | Open-Xchange OX App Suite cross-site scripting | 6.1v3.1 | 0.4% | 2023-05-29 | Fix |
| CVE-2023-24601 | Open-Xchange OX App Suite cross-site scripting | 6.1v3.1 | 0.4% | 2023-05-29 | Fix |
| CVE-2023-24600 | Open-Xchange OX App Suite incorrect authorization | 4.3v3.1 | 0.5% | 2023-05-29 | Fix |
| CVE-2023-24599 | Open-Xchange OX App Suite type confusion | 4.3v3.1 | 0.5% | 2023-05-29 | Fix |
| CVE-2023-24598 | Open-Xchange OX App Suite observable discrepancy | 4.3v3.1 | 0.5% | 2023-05-29 | Fix |
| CVE-2023-24597 | Open-Xchange OX App Suite email message printing vulnerability | 5.3v3.1 | 0.5% | 2023-05-29 | Fix |
| CVE-2023-23699 | Progress Bar WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-05-29 | Fix |
| CVE-2023-2962 | SourceCodester Faculty Evaluation System SQL injection | 9.8v3.1 | 0.7% | 2023-05-29 | |
| CVE-2023-2955 | SourceCodester Students Online Internship Timesheet System rendered_report.php SQL injection | 9.8v3.1 | 0.8% | 2023-05-29 | |
| CVE-2023-2954 | Cross-site scripting (XSS) Stored in liangliangyy/DjangoBlog | 5.4v3.1 | 0.4% | 2023-05-29 | |
| CVE-2023-2808 | Mattermost lack of URL normalization allows rendering previews for disallowed domains | 4.3CNA v3.1 | 0.4% | 2023-05-29 | Fix |
| CVE-2023-33931 | YouTube Playlist Player WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-28 | Fix |
| CVE-2023-33926 | Easy Google Maps WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-05-28 | Fix |
| CVE-2023-33332 | WooCommerce Product Vendors WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-05-28 | Fix |
| CVE-2023-33328 | MailChimp Subscribe Forms WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-05-28 | Fix |
| CVE-2023-33326 | EventPrime WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-05-28 | Fix |
| CVE-2023-33319 | WooCommerce Follow-Up Emails WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-05-28 | Fix |
| CVE-2023-33316 | WooCommerce Follow-Up Emails (AutomateWoo) WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-05-28 | Fix |
| CVE-2023-33315 | Smart App Banner WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-28 | Fix |
| CVE-2023-33314 | BEAR WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-28 | Fix |
| CVE-2023-33313 | WIP Custom Login WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-28 | Fix |
| CVE-2023-33311 | Contact Form Entries WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-05-28 | Fix |
| CVE-2023-33309 | Duplicator Pro WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-05-28 | Fix |
| CVE-2023-33291 | Ebankit incorrect default permissions | 7.4v3.1 | 0.9% | 2023-05-28 | |
| CVE-2023-33216 | WooDiscuz WooCommerce Comments WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-05-28 | Fix |
| CVE-2023-33212 | JetFormBuilder WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-28 | Fix |
| CVE-2023-33211 | WP-Piwik WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-05-28 | Fix |
| CVE-2023-32958 | Novelist WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-05-28 | Fix |
| CVE-2023-32800 | Rank Math SEO PRO WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-05-28 | Fix |
| CVE-2023-32763 | Qt QTextLayout SVG rendering buffer overflow | 7.5v3.1 | 1.3% | 2023-05-28 | Fix |
| CVE-2023-32762 | Qt HSTS header parsing in Qt Network vulnerability | 5.3v3.1 | 0.9% | 2023-05-28 | Fix |
| CVE-2023-31873 | Gin arbitrary code execution | 7.8v3.1 | 1.3% | 2023-05-28 | Exploit code |
| CVE-2023-28785 | Yoast SEO: Local WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-05-28 | Fix |
| CVE-2023-2951 | code-projects Bus Dispatch and Information System delete_bus.php SQL injection | 9.1v3.1 | 0.8% | 2023-05-28 | Exploit code |
| CVE-2023-2950 | Improper authorization in openemr/openemr | 8.1v3.1 | 0.6% | 2023-05-28 | Fix |
| CVE-2023-2949 | Cross-site scripting (XSS) Reflected in openemr/openemr | 6.1NVD v3.1 | 1.5% | 2023-05-28 | NucleiFix |
| CVE-2023-2948 | Cross-site scripting (XSS) Generic in openemr/openemr | 6.1NVD v3.1 | 96.7% | 2023-05-28 | NucleiFix |
| CVE-2023-33195 | Craft CMS XSS in RSS widget feed | 5.0CNA v3.1 | 0.7% | 2023-05-27 | Fix |
| CVE-2023-33192 | Improper handling of NTS cookie length that could crash the ntpd-rs server | 7.5CNA v3.1 | 0.7% | 2023-05-27 | Fix |
| CVE-2023-33188 | federicoiosue Omni-Notes uncontrolled data used in content resolution | 6.3CNA v3.1 | 0.3% | 2023-05-27 | Fix |
| CVE-2023-33184 | Blind SSRF in the Nextcloud Mail app on avatar endpoint | 3.5CNA v3.1 | 0.5% | 2023-05-27 | Fix |
| CVE-2023-32695 | Socket.io-Parser insufficient validation when decoding a Socket.IO packet | 7.3CNA v3.1 | 1.1% | 2023-05-27 | Fix |
| CVE-2023-32688 | parse-community parse-server-push-adapter invalid push request payload crashes Parse Server | 4.9CNA v3.1 | 0.9% | 2023-05-27 | Fix |
| CVE-2023-32686 | kiwitcms vulnerable to stored XSS via unrestricted files upload | 8.1CNA v3.1 | 0.4% | 2023-05-27 | Fix |
| CVE-2023-32325 | Cross-site scripting in PostHog-js | 5.4CNA v3.1 | 0.4% | 2023-05-27 | Fix |
| CVE-2023-26129 | bwm-ng vulnerable to command injection | 7.8v3.1 | 1.0% | 2023-05-27 | |
| CVE-2023-26128 | keep-module-latest vulnerable to command injection due to missing input sanitization | 7.8v3.1 | 1.2% | 2023-05-27 | |
| CVE-2023-26127 | n158 OS command injection | 7.8v3.1 | 1.0% | 2023-05-27 | |
| CVE-2023-2947 | Cross-site scripting (XSS) Stored in openemr/openemr | 4.8v3.1 | 90.4% | 2023-05-27 | Fix |
| CVE-2023-2946 | Improper access control in openemr/openemr | 8.1v3.1 | 0.5% | 2023-05-27 | Fix |
| CVE-2023-2945 | Missing authorization in openemr/openemr | 5.4v3.1 | 0.4% | 2023-05-27 | Fix |
| CVE-2023-2944 | Improper access control in openemr/openemr | 5.4v3.1 | 0.4% | 2023-05-27 | Fix |
| CVE-2023-2943 | Code injection in openemr/openemr | 8.8v3.1 | 0.6% | 2023-05-27 | Fix |
| CVE-2023-2942 | Improper input validation in openemr/openemr | 8.1v3.1 | 0.8% | 2023-05-27 | Fix |
| CVE-2023-2928 | DedeCMS article_allowurl_edit.php code injection | 8.8v3.1 | 51.4% | 2023-05-27 | Exploit code |
| CVE-2023-2927 | jizhiCMS TemplateController.php index server-side request forgery | 9.8v3.1 | 0.9% | 2023-05-27 | |
| CVE-2023-2926 | SeaCMS Picture upload member.php denial of service | 6.5v3.1 | 0.9% | 2023-05-27 | |
| CVE-2023-2925 | Webkul Krayin CRM Edit Person page 2 cross-site scripting | 5.4v3.1 | 0.6% | 2023-05-27 | |
| CVE-2023-2924 | Supcon SimField reportupload.aspx unrestricted upload | 9.8v3.1 | 24.3% | 2023-05-27 | |
| CVE-2023-2923 | Tenda AC6 fromDhcpListClient stack-based overflow | 9.8v3.1 | 1.0% | 2023-05-27 | |
| CVE-2023-2922 | SourceCodester Comment System GET parameter index.php cross-site scripting | 6.1v3.1 | 0.6% | 2023-05-27 | |
| CVE-2023-33780 | invernyx Smartcars 3 TFDi Design smartCARS stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-05-26 | |
| CVE-2023-33779 | Privilege escalation in XXL-Job | 8.8v3.1 | 0.9% | 2023-05-26 | |
| CVE-2023-33720 | MP4v2 resource exhaustion | 6.5v3.1 | 0.6% | 2023-05-26 | |
| CVE-2023-33440 | Faculty Evaluation System code injection | 7.2v3.1 | 14.5% | 2023-05-26 | NucleiExploit code |
| CVE-2023-33439 | Faculty Evaluation System SQL injection | 7.2v3.1 | 3.3% | 2023-05-26 | Nuclei |
| CVE-2023-33394 | SkyCaiji cross-site scripting | 5.4v3.1 | 0.4% | 2023-05-26 | |
| CVE-2023-33255 | Uthscsa Papaya Viewer cross-site scripting | 6.1v3.1 | 0.9% | 2023-05-26 | |
| CVE-2023-33247 | Talend DATA Catalog missing authentication | 7.5v3.1 | 0.5% | 2023-05-26 | Fix |
| CVE-2023-33199 | Malformed proposed intoto entries can cause a panic in Rekor | 5.3CNA v3.1 | 0.7% | 2023-05-26 | Fix |
| CVE-2023-33197 | Craft CMS stored XSS in indexedVolumes | 5.5CNA v3.1 | 0.7% | 2023-05-26 | Fix |
| CVE-2023-33196 | Craft CMS stored XSS in review volume | 5.5CNA v3.1 | 0.7% | 2023-05-26 | Fix |
| CVE-2023-33194 | CraftCMS stored XSS in Quick Post widget error message | 3.7CNA v3.1 | 0.6% | 2023-05-26 | Fix |
| CVE-2023-33187 | highlight vulnerable to cleartext transmission of sensitive information | 5.4CNA v3.1 | 0.3% | 2023-05-26 | Fix |
| CVE-2023-33185 | Incorrect signature verification in django-ses | 4.6CNA v3.1 | 0.2% | 2023-05-26 | Fix |
| CVE-2023-32964 | Better Notifications for WP WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-26 | Fix |
| CVE-2023-32681 | Unintended leak of Proxy-Authorization header in requests | 6.1CNA v3.1 | 3.0% | 2023-05-26 | Exploit codeFix |
| CVE-2023-32676 | Autolab tar slip in Install Assessment functionality (`GHSL-2023-081`) | 6.7CNA v3.1 | 0.9% | 2023-05-26 | Fix |
| CVE-2023-32323 | Synapse Outgoing federation to specific hosts can be disabled by sending malicious invites | 5.0CNA v3.1 | 1.0% | 2023-05-26 | Fix |
| CVE-2023-32321 | CKAN remote code execution and private information access via crafted resource ids | 9.8CNA v3.1 | 1.7% | 2023-05-26 | Fix |
| CVE-2023-32319 | Basic auth header on WebDAV requests is not brute-force protected in Nextcloud | 8.1CNA v3.1 | 0.7% | 2023-05-26 | Fix |
| CVE-2023-32318 | Nextcloud security-advisories user session not correctly destroyed on logout | 7.2CNA v3.1 | 0.2% | 2023-05-26 | Fix |
| CVE-2023-32317 | Autolab tar slip in cheat checker functionality (`GHSL-2023-082`) | 6.7CNA v3.1 | 0.9% | 2023-05-26 | Fix |
| CVE-2023-32316 | Users can add themselves to any organization in CloudExplorer Lite | 7.1CNA v3.1 | 0.4% | 2023-05-26 | Fix |
| CVE-2023-32315 | Ignite Realtime Openfire path traversal | 8.6CNA v3.1 | 100.0% | 2023-05-26 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2023-32311 | The CloudExplorer Lite missing permissions check | 7.1CNA v3.1 | 0.4% | 2023-05-26 | Fix |
| CVE-2023-32307 | sofia-sip STUN packet parsing heap-based buffer overflow | 7.5CNA v3.1 | 1.1% | 2023-05-26 | Fix |
| CVE-2023-31227 | Huawei HarmonyOS vulnerability of missing API calling verification in the hwPartsDFR module | 7.5v3.1 | 0.4% | 2023-05-26 | Fix |
| CVE-2023-31226 | Huawei HarmonyOS incorrect authorization | 7.5v3.1 | 0.4% | 2023-05-26 | Fix |
| CVE-2023-31225 | Huawei HarmonyOS service hijacking vulnerability in the Gallery app | 3.3v3.1 | 0.1% | 2023-05-26 | Fix |
| CVE-2023-31128 | NextCloud Cookbook's pull-checks.yml workflow is vulnerable to OS command injection | 8.1CNA v3.1 | 3.3% | 2023-05-26 | Fix |
| CVE-2023-30145 | tuzitio CamaleonCMS server-side template injection in Camaleon CMS | 9.8NVD v3.1 | 46.1% | 2023-05-26 | Exploit codeFix |
| CVE-2023-29098 | CopySafe Web Protection WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-05-26 | Fix |
| CVE-2023-28382 | Encourage Technologies ESS REC Agent Server Edition series path traversal | 8.1v3.1 | 0.9% | 2023-05-26 | Fix |
| CVE-2023-28322 | https://github.com/curl/curl An information disclosure | 3.7NVD v3.1 | 2.2% | 2023-05-26 | Fix |
| CVE-2023-28321 | https://github.com/curl/curl An improper certificate validation | 5.9v3.1 | 1.8% | 2023-05-26 | Fix |
| CVE-2023-28320 | https://github.com/curl/curl A denial of service | 5.9v3.1 | 2.7% | 2023-05-26 | Fix |
| CVE-2023-28319 | https://github.com/curl/curl A use-after-free | 7.5v3.1 | 2.5% | 2023-05-26 | Fix |
| CVE-2023-27311 | Information Disclosure vulnerability in NetApp BlueXP Connector path traversal | 5.3v3.1 | 0.6% | 2023-05-26 | Fix |
| CVE-2023-25976 | Integration for Contact Form 7 and Zoho CRM, Bigin WordPress plugin cross-site request forgery | 8.8v3.1 | 0.3% | 2023-05-26 | Fix |
| CVE-2023-25971 | Educare Students and Result Management System WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-26 | Fix |
| CVE-2023-25781 | Upload File Type Settings WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-05-26 | |
| CVE-2023-25470 | Rus-To-Lat WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-26 | |
| CVE-2023-25467 | Resize at Upload Plus WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-05-26 | |
| CVE-2023-25058 | Schema All In One Schema Rich Snippets WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-26 | Fix |
| CVE-2023-25038 | For the visually impaired WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-26 | |
| CVE-2023-25034 | WP Clean Up WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-26 | |
| CVE-2023-25029 | WP Social Bookmarking Light WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-26 | |
| CVE-2023-24008 | Maspik Spam blacklist WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-26 | Fix |
| CVE-2023-24007 | Admin Block Country WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-26 | |
| CVE-2023-23714 | Uncanny Toolkit for LearnDash WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-26 | Fix |
| CVE-2023-22970 | Usebottles Bottles remote code execution | 7.8v3.1 | 0.5% | 2023-05-26 | Fix |
| CVE-2023-22693 | WP Google Tag Manager WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-26 | |
| CVE-2023-21516 | Samsung Mobile Galaxy Store cross-site scripting | 7.5CNA v3.1 | 0.5% | 2023-05-26 | Fix |
| CVE-2023-21515 | Samsung Mobile Galaxy Store improper input validation | 7.5CNA v3.1 | 0.5% | 2023-05-26 | Fix |
| CVE-2023-21514 | Samsung Mobile Galaxy Store improper input validation | 7.5CNA v3.1 | 0.5% | 2023-05-26 | Fix |
| CVE-2023-20883 | Spring Boot Welcome page denial of service | 7.5v3.1 | 0.9% | 2023-05-26 | Fix |
| CVE-2023-20882 | Cloud Foundry Routing release denial of service | 5.9v3.1 | 0.6% | 2023-05-26 | Fix |
| CVE-2023-20868 | NSX-T cross-site scripting | 6.1v3.1 | 0.5% | 2023-05-26 | Fix |
| CVE-2023-2898 | kernel null pointer dereference | 4.7NVD v3.1 | 0.2% | 2023-05-26 | Fix |
| CVE-2023-2879 | Wireshark GDSDB infinite loop | 6.3CNA v3.1 | 1.6% | 2023-05-26 | Fix |
| CVE-2023-2858 | Wireshark NetScaler file parser crash | 5.3CNA v3.1 | 1.8% | 2023-05-26 | Fix |
| CVE-2023-2857 | Wireshark BLF file parser crash | 5.3CNA v3.1 | 0.9% | 2023-05-26 | Fix |
| CVE-2023-2856 | Wireshark out-of-bounds write | 5.3CNA v3.1 | 1.8% | 2023-05-26 | Fix |
| CVE-2023-2855 | Wireshark Candump log parser crash | 5.3CNA v3.1 | 1.6% | 2023-05-26 | Fix |
| CVE-2023-2854 | Wireshark BLF file parser crash | 5.3CNA v3.1 | 0.9% | 2023-05-26 | Fix |
| CVE-2023-2825 | GitLab path traversal | 10.0CNA v3.1 | 71.6% | 2023-05-26 | Reported exploitedNucleiMetasploitExploit codeFix |
| CVE-2023-2817 | Stored cross-site scripting in Craft CMS | 5.4NVD v3.1 | 0.4% | 2023-05-26 | Fix |
| CVE-2023-2283 | libssh improper authentication | 6.5NVD v3.1 | 1.1% | 2023-05-26 | Fix |
| CVE-2023-2002 | kernel execution with unnecessary privileges | 6.8NVD v3.1 | 1.5% | 2023-05-26 | Exploit codeFix |
| CVE-2023-1981 | avahi dbus interface resource exhaustion | 5.5NVD v3.1 | 0.4% | 2023-05-26 | Fix |
| CVE-2023-1667 | libssh null pointer dereference | 6.5NVD v3.1 | 1.3% | 2023-05-26 | Fix |
| CVE-2023-1664 | Keycloak Untrusted Certificate Validation vulnerability | 6.5v3.1 | 0.4% | 2023-05-26 | Fix |
| CVE-2023-0117 | Huawei HarmonyOS improper authentication | 5.3v3.1 | 0.4% | 2023-05-26 | Fix |
| CVE-2023-0116 | Huawei HarmonyOS missing authentication | 7.5v3.1 | 0.5% | 2023-05-26 | Fix |
| CVE-2023-33751 | Mipjz A stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-05-25 | |
| CVE-2023-33750 | Mipjz A stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-05-25 | |
| CVE-2023-33356 | Thecosy IceCMS cross-site scripting | 5.4v3.1 | 0.4% | 2023-05-25 | |
| CVE-2023-33355 | Thecosy IceCMS insecure permissions | 7.5v3.1 | 0.6% | 2023-05-25 | |
| CVE-2023-33280 | Storecommander Quickaccounting SQL injection | 9.8v3.1 | 0.6% | 2023-05-25 | Fix |
| CVE-2023-33279 | Scfixmyprestashop SQL injection | 9.8v3.1 | 0.6% | 2023-05-25 | |
| CVE-2023-33278 | Storecommander Customers Export SQL injection | 9.8v3.1 | 0.6% | 2023-05-25 | Fix |
| CVE-2023-33263 | Wftpd insufficiently protected credentials | 7.5v3.1 | 0.9% | 2023-05-25 | |
| CVE-2023-32694 | Non-constant time HMAC comparison in Adyen plugin in Saleor | 4.8CNA v3.1 | 0.3% | 2023-05-25 | Fix |
| CVE-2023-32074 | Nextcloud user_oidc app is missing brute force protection | 8.0CNA v3.1 | 0.9% | 2023-05-25 | Fix |
| CVE-2023-32067 | 0-byte UDP payload DoS in c-ares | 7.5CNA v3.1 | 1.6% | 2023-05-25 | Fix |
| CVE-2023-31861 | ZLMediaKit path traversal | 7.5v3.1 | 1.1% | 2023-05-25 | |
| CVE-2023-31594 | Icrealtime Icip-p2012t missing authentication | 7.5v3.1 | 0.8% | 2023-05-25 | Exploit code |
| CVE-2023-31147 | Insufficient randomness in generation of DNS query IDs in c-ares | 5.9CNA v3.1 | 0.9% | 2023-05-25 | Fix |
| CVE-2023-31130 | c-ares buffer underwrite in ares_inet_net_pton | 4.1CNA v3.1 | 0.4% | 2023-05-25 | Fix |
| CVE-2023-31124 | c-ares AutoTools does not set CARES_RANDOM_FILE during cross compilation | 3.7CNA v3.1 | 0.9% | 2023-05-25 | Fix |
| CVE-2023-30851 | Potential HTTP policy bypass when using header rules in Cilium | 2.6CNA v3.1 | 0.7% | 2023-05-25 | Fix |
| CVE-2023-30615 | Improper neutralization of script-related HTML tags in a web page (basic XSS) in iris-web | 6.3CNA v3.1 | 0.4% | 2023-05-25 | Fix |
| CVE-2023-30484 | Enable Accessibility WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-25 | Fix |
| CVE-2023-28370 | Open redirect in Tornado | 6.1v3.1 | 1.1% | 2023-05-25 | Fix |
| CVE-2023-27529 | Wacom Tablet Driver installer link following | 7.8v3.1 | 0.2% | 2023-05-25 | Fix |
| CVE-2023-26216 | TIBCO EBX Add-ons arbitrary file write | 9.1CNA v3.1 | 0.8% | 2023-05-25 | |
| CVE-2023-26215 | TIBCO EBX® Add-ons path traversal | 7.7CNA v3.1 | 0.7% | 2023-05-25 | |
| CVE-2023-25439 | Squarepiginteractive Fusioninvoice stored cross-site scripting | 6.1v3.1 | 2.2% | 2023-05-25 | Exploit code |
| CVE-2023-22504 | Atlassian Confluence Server unrestricted file upload | 4.3CNA v3.0 | 0.7% | 2023-05-25 | Fix |
| CVE-2023-2903 | NFine Rapid Development Platform access control | 6.5v3.1 | 0.7% | 2023-05-25 | |
| CVE-2023-2902 | NFine Rapid Development Platform access control | 6.5v3.1 | 0.7% | 2023-05-25 | |
| CVE-2023-2901 | NFine Rapid Development Platform access control | 6.5v3.1 | 0.7% | 2023-05-25 | |
| CVE-2023-2900 | NFine Rapid Development Platform CheckLogin weak hash | 7.5v3.1 | 0.7% | 2023-05-25 | |
| CVE-2023-2888 | Phpok unrestricted upload | 8.8v3.1 | 0.7% | 2023-05-25 | |
| CVE-2023-2887 | User authentication bypass in CBOT's Chatbot | 9.8v3.1 | 0.8% | 2023-05-25 | Fix |
| CVE-2023-2886 | Cross-Site WebSocket Hijacking in CBOT's Chatbot | 4.3v3.1 | 0.2% | 2023-05-25 | Fix |
| CVE-2023-2885 | Channel accessible by non-endpoint in CBOT's Chatbot | 8.1v3.1 | 0.3% | 2023-05-25 | Fix |
| CVE-2023-2884 | CBOT Chatbot insufficient randomness | 9.8v3.1 | 0.7% | 2023-05-25 | Fix |
| CVE-2023-2883 | IDOR in CBOT's Chatbot | 8.8CNA v3.1 | 0.7% | 2023-05-25 | Fix |
| CVE-2023-2882 | Privilege escalation in CBOT's Chatbot | 9.8v3.1 | 0.6% | 2023-05-25 | Fix |
| CVE-2023-2881 | Storing passwords in a recoverable format in pimcore/customer-data-framework | 4.9v3.1 | 0.5% | 2023-05-25 | Fix |
| CVE-2023-2851 | AGT Tech Ceppatron SQL command improper neutralization | 9.8v3.1 | 0.7% | 2023-05-25 | |
| CVE-2023-2804 | libjpeg-turbo A heap-based buffer overflow | 6.5NVD v3.1 | 1.2% | 2023-05-25 | Fix |
| CVE-2023-2798 | Denial of service in HtmlUnit | 7.5NVD v3.1 | 0.9% | 2023-05-25 | Fix |
| CVE-2023-2734 | MStore API WordPress plugin authentication bypass | 9.8v3.1 | 3.8% | 2023-05-25 | NucleiFix |
| CVE-2023-2733 | MStore API WordPress plugin authentication bypass | 9.8v3.1 | 1.2% | 2023-05-25 | Fix |
| CVE-2023-2732 | MStore API WordPress plugin authentication bypass | 9.8v3.1 | 67.5% | 2023-05-25 | NucleiExploit codeFix |
| CVE-2023-2500 | Go Pricing - WordPress Responsive Pricing Tables plugin PHP object injection | 8.8v3.1 | 0.9% | 2023-05-25 | Fix |
| CVE-2023-2480 | Elevation of privilege in M-Files Desktop Client | 7.5CNA v3.1 | 0.2% | 2023-05-25 | Fix |
| CVE-2023-2255 | The Document Foundation LibreOffice remote documents loaded without prompt via IFrame | 5.3v3.1 | 2.2% | 2023-05-25 | Exploit codeFix |
| CVE-2023-0950 | The Document Foundation LibreOffice Array Index UnderFlow in Calc Formula Parsing | 7.8v3.1 | 0.3% | 2023-05-25 | Fix |
| CVE-2023-0459 | Copy_from_user Spectre-V1 Gadget in Linux kernel | 5.5NVD v3.1 | 0.6% | 2023-05-25 | Fix |
| CVE-2023-33983 | Briarproject Briar missing authorization | 7.4v3.1 | 0.6% | 2023-05-24 | |
| CVE-2023-33982 | Briarproject Briar inadequate encryption strength | 5.9v3.1 | 0.5% | 2023-05-24 | Fix |
| CVE-2023-33981 | Briarproject Briar improper integrity check validation | 6.5v3.1 | 0.3% | 2023-05-24 | Fix |
| CVE-2023-33980 | Briarproject Briar denial of service | 7.5v3.1 | 0.9% | 2023-05-24 | Fix |
| CVE-2023-33950 | Liferay Portal has inefficient regular expression | 6.5CNA v3.1 | 0.9% | 2023-05-24 | Fix |
| CVE-2023-33949 | Insecure default initialization in Liferay Portal | 5.3CNA v3.1 | 0.8% | 2023-05-24 | Fix |
| CVE-2023-33948 | Missing authorization in Liferay Portal | 5.3CNA v3.1 | 0.7% | 2023-05-24 | Fix |
| CVE-2023-33947 | Liferay Portal has unauthorized access to object definition via search | 2.7CNA v3.1 | 0.6% | 2023-05-24 | Fix |
| CVE-2023-33946 | Liferay Portal unauthorized access to objects via OAuth 2 scope | 2.7CNA v3.1 | 0.6% | 2023-05-24 | Fix |
| CVE-2023-33945 | SQL injection in Liferay Portal | 6.4CNA v3.1 | 0.5% | 2023-05-24 | Fix |
| CVE-2023-33944 | Cross-site scripting in Liferay Portal | 4.8CNA v3.1 | 0.5% | 2023-05-24 | Fix |
| CVE-2023-33943 | Cross-site scripting in Liferay Portal | 5.4CNA v3.1 | 0.4% | 2023-05-24 | Fix |
| CVE-2023-33942 | Cross-site scripting in Liferay Portal | 5.4CNA v3.1 | 0.5% | 2023-05-24 | Fix |
| CVE-2023-33941 | Cross-site scripting in Liferay Portal | 6.1CNA v3.1 | 0.5% | 2023-05-24 | Fix |
| CVE-2023-33940 | Cross-site scripting in Liferay Portal | 4.8CNA v3.1 | 0.5% | 2023-05-24 | Fix |
| CVE-2023-33939 | Cross-site scripting in Liferay Portal | 5.4CNA v3.1 | 0.5% | 2023-05-24 | Fix |
| CVE-2023-33938 | Cross-site scripting in Liferay Portal | 4.8CNA v3.1 | 0.5% | 2023-05-24 | Fix |
| CVE-2023-33937 | Cross-site scripting in Liferay Portal | 5.4CNA v3.1 | 0.4% | 2023-05-24 | Fix |
| CVE-2023-33829 | Cloudogu Scm Manager Cloudogu GmbH stored cross-site scripting | 5.4v3.1 | 7.3% | 2023-05-24 | Exploit code |
| CVE-2023-33800 | NetBox Create Regions stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-05-24 | |
| CVE-2023-33799 | NetBox Create Contacts stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-05-24 | |
| CVE-2023-33798 | NetBox Create Rack stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-05-24 | |
| CVE-2023-33797 | NetBox Create Sites stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-05-24 | |
| CVE-2023-33796 | NetBox GraphQL API vulnerability | 9.1v3.1 | 0.7% | 2023-05-24 | |
| CVE-2023-33795 | NetBox Create Contact Roles stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-05-24 | |
| CVE-2023-33794 | NetBox Create Tenants stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-05-24 | |
| CVE-2023-33793 | NetBox Create Power Panels stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-05-24 | |
| CVE-2023-33792 | NetBox Create Site Groups stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-05-24 | |
| CVE-2023-33791 | NetBox Create Provider Accounts stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-05-24 | |
| CVE-2023-33790 | NetBox Create Locations stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-05-24 | |
| CVE-2023-33789 | NetBox Create Contact Groups stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-05-24 | |
| CVE-2023-33788 | NetBox Create Providers stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-05-24 | |
| CVE-2023-33787 | NetBox Create Tenant Groups stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-05-24 | |
| CVE-2023-33786 | NetBox Create Circuit Types stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-05-24 | |
| CVE-2023-33785 | NetBox Create Rack Roles stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-05-24 | |
| CVE-2023-33248 | Amazon Alexa software version 8960323972 on Echo Dot 2nd generation and 3rd generation devices potentially allows attackers to deliver security-relevant commands via an audio signal between 16 and 22 kHz (often outside the range of human adult hearing). Commands at these frequencies are essentially | 7.6v3.1 | 0.7% | 2023-05-24 | |
| CVE-2023-33246 | Apache RocketMQ command execution | 9.8NVD v3.1 | 96.6% | 2023-05-24 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2023-33010 | Zyxel Multiple Firewalls buffer overflow | 9.8CNA v3.1 | 29.0% | 2023-05-24 | KEVFix |
| CVE-2023-33009 | Zyxel Multiple Firewalls buffer overflow | 9.8CNA v3.1 | 28.1% | 2023-05-24 | KEVFix |
| CVE-2023-31763 | Agshome Smart Alarm authentication bypass by replay | 7.5v3.1 | 0.3% | 2023-05-24 | |
| CVE-2023-31762 | Mydigoo Dg-hamb authentication bypass by replay | 7.5v3.1 | 0.3% | 2023-05-24 | |
| CVE-2023-31761 | Blitzwolf Bw-is22 authentication bypass by replay | 7.5v3.1 | 0.3% | 2023-05-24 | |
| CVE-2023-31759 | Keruistore Kerui W18 authentication bypass by replay | 7.5v3.1 | 0.3% | 2023-05-24 | |
| CVE-2023-31748 | Wondershare Mobiletrans insecure permissions | 7.8v3.1 | 0.8% | 2023-05-24 | Exploit code |
| CVE-2023-31595 | IC Realtime ICIP-P2012T improper access control | 7.5v3.1 | 0.8% | 2023-05-24 | Exploit code |
| CVE-2023-31460 | Mitel MiVoice Connect command injection | 7.2v3.1 | 1.7% | 2023-05-24 | Fix |
| CVE-2023-31459 | Mitel MiVoice Connect weak password recovery | 8.8v3.1 | 0.4% | 2023-05-24 | Fix |
| CVE-2023-31458 | Mitel MiVoice Connect arbitrary command execution | 9.8v3.1 | 0.9% | 2023-05-24 | Fix |
| CVE-2023-31457 | Mitel MiVoice Connect improper access control | 9.8v3.1 | 1.0% | 2023-05-24 | Fix |
| CVE-2023-29721 | Sofawiki unrestricted file upload | 9.8v3.1 | 1.1% | 2023-05-24 | |
| CVE-2023-25599 | Mitel MiVoice Connect cross-site scripting | 7.4v3.1 | 0.6% | 2023-05-24 | Fix |
| CVE-2023-25598 | Mitel MiVoice Connect cross-site scripting | 6.1v3.1 | 0.4% | 2023-05-24 | Fix |
| CVE-2023-25028 | CC Custom Taxonomy WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-05-24 | |
| CVE-2023-2875 | eScan Antivirus IoControlCode PROCOBSRVESX.SYS 0x22E008u null pointer dereference | 5.5v3.1 | 0.3% | 2023-05-24 | |
| CVE-2023-2874 | Twister Antivirus IoControlCode filppd.sys 0x804f2140 denial of service | 5.5v3.1 | 0.3% | 2023-05-24 | |
| CVE-2023-2873 | Twister Antivirus IoControlCode filppd.sys 0x80800043 memory corruption | 7.8v3.1 | 0.4% | 2023-05-24 | |
| CVE-2023-2872 | FlexiHub IoControlCode fusbhub.sys 0x220088 null pointer dereference | 5.5v3.1 | 0.3% | 2023-05-24 | |
| CVE-2023-2871 | FabulaTech USB for Remote Desktop IoControlCode 0x220408 null pointer dereference | 5.5v3.1 | 0.4% | 2023-05-24 | |
| CVE-2023-2870 | EnTech Monitor Asset Manager IoControlCode 0x80002014 denial of service | 5.5v3.1 | 0.3% | 2023-05-24 | |
| CVE-2023-2868 | Barracuda Networks ESG Appliance improper input validation | 9.8NVD v3.1 | 87.7% | 2023-05-24 | KEVMetasploitEmerging ThreatsExploit codeFix |
| CVE-2023-2865 | SourceCodester Theme Park Ticketing System GET parameter print_ticket.php SQL injection | 9.8v3.1 | 0.7% | 2023-05-24 | |
| CVE-2023-2864 | SourceCodester Online Jewelry Store customer.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-05-24 | |
| CVE-2023-2863 | Simple Design Daily Journal SQLite Database cleartext storage in a file or on disk | 5.5v3.1 | 0.2% | 2023-05-24 | |
| CVE-2023-2862 | SiteServer CMS search cross-site scripting | 6.1v3.1 | 0.6% | 2023-05-24 | |
| CVE-2023-2859 | Code injection in nilsteampassnet/TeamPass | 8.8NVD v3.1 | 1.6% | 2023-05-24 | Fix |
| CVE-2023-2750 | SQLi in Cityboss Software's E-municipality | 9.8CNA v3.1 | 0.6% | 2023-05-24 | Fix |
| CVE-2023-2498 | Go Pricing - WordPress Responsive Pricing Tables plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-05-24 | Fix |
| CVE-2023-2496 | Go Pricing file upload capability check improper authorization | 7.5v3.1 | 0.8% | 2023-05-24 | Fix |
| CVE-2023-2494 | Go Pricing WordPress plugin unauthorized access | 8.8v3.1 | 0.4% | 2023-05-24 | Fix |
| CVE-2023-2065 | IDOR in Armoli Technology's Cargo Tracking System | 8.8v3.1 | 0.9% | 2023-05-24 | Fix |
| CVE-2023-2064 | SQLi in Minova Technology's eTrace | 9.8CNA v3.1 | 0.6% | 2023-05-24 | Fix |
| CVE-2023-2045 | SQLi in Ipekyolu Software's Auto Damage Tracking Software | 9.8CNA v3.1 | 0.6% | 2023-05-24 | Fix |
| CVE-2023-1944 | Kubernetes minikube SSH server with default password | 8.4CNA v3.1 | 0.2% | 2023-05-24 | |
| CVE-2023-1424 | Denial of service and remote code execution vulnerability in MELSEC Series CPU module | 10.0CNA v3.1 | 3.4% | 2023-05-24 | Fix |
| CVE-2023-1174 | Network Port exposure in minikube running on macOS using Docker driver | 9.8CNA v3.1 | 0.8% | 2023-05-24 | |
| CVE-2023-1158 | Hitachi Vantara Pentaho Business Analytics Server incorrect authorization | 4.3v3.1 | 0.4% | 2023-05-24 | Fix |
| CVE-2023-33617 | Eparks Fiberlink 210 Firmware OS command injection | 7.2v3.1 | 5.2% | 2023-05-23 | Exploit code |
| CVE-2023-33599 | Easyimages2.0 cross-site scripting | 6.1v3.1 | 0.4% | 2023-05-23 | |
| CVE-2023-33362 | Piwigo SQL injection | 9.8v3.1 | 9.1% | 2023-05-23 | Exploit code |
| CVE-2023-33361 | Piwigo SQL injection | 9.8v3.1 | 0.9% | 2023-05-23 | |
| CVE-2023-33359 | Piwigo cross-site request forgery | 4.3v3.1 | 0.4% | 2023-05-23 | |
| CVE-2023-33338 | PHPGurukul Old Age Home Management System SQL injection | 9.8v3.1 | 3.6% | 2023-05-23 | Nuclei |
| CVE-2023-32697 | Sqlite-jdbc vulnerable to remote code execution when JDBC URL is attacker controlled | 8.8CNA v3.1 | 1.6% | 2023-05-23 | Fix |
| CVE-2023-31996 | Hanwha Vision Ane-l7012r command injection | 8.8v3.1 | 1.5% | 2023-05-23 | Fix |
| CVE-2023-31995 | Hanwha Vision Ane-l7012r cross-site scripting | 5.4v3.1 | 0.3% | 2023-05-23 | Fix |
| CVE-2023-31994 | Hanwha Vision Ane-l7012r denial of service | 5.3v3.1 | 0.6% | 2023-05-23 | Fix |
| CVE-2023-31860 | WuzhiCMS cross-site scripting | 5.4v3.1 | 0.4% | 2023-05-23 | |
| CVE-2023-31826 | Skyscreamer Nevado Jms command injection in nevado-jms | 7.8v3.1 | 0.3% | 2023-05-23 | Fix |
| CVE-2023-31814 | D-Link Dir-300 Firmware incorrectly resolved name or reference | 9.8v3.1 | 0.9% | 2023-05-23 | |
| CVE-2023-31752 | oretnom23 Employee and Visitor Gate Pass Logging System SQL injection | 9.8v3.1 | 0.8% | 2023-05-23 | |
| CVE-2023-31747 | Wondershare Filmora unquoted search path | 7.8v3.1 | 1.1% | 2023-05-23 | Exploit code |
| CVE-2023-31741 | Linksys E2000 There is a command injection | 7.2v3.1 | 2.4% | 2023-05-23 | |
| CVE-2023-31740 | Linksys E2000 There is a command injection | 7.2v3.1 | 2.4% | 2023-05-23 | |
| CVE-2023-31726 | AlistGo alist incorrect authorization | 7.5v3.1 | 1.1% | 2023-05-23 | Exploit code |
| CVE-2023-31708 | EyouCMS A cross-site request forgery | 4.3v3.1 | 0.3% | 2023-05-23 | |
| CVE-2023-31670 | Webassembly Binary Toolkit denial of service | 7.5v3.1 | 0.8% | 2023-05-23 | Fix |
| CVE-2023-31669 | Webassembly Binary Toolkit crash | 5.5v3.1 | 0.3% | 2023-05-23 | Fix |
| CVE-2023-31664 | WSO2 API Manager /authenticationendpoint/login.do reflected cross-site scripting | 6.1v3.1 | 1.2% | 2023-05-23 | Exploit codeFix |
| CVE-2023-31518 | Teeworlds component CDataFileReader::GetItem use-after-free | 5.5v3.1 | 0.3% | 2023-05-23 | |
| CVE-2023-31517 | Teeworlds component CConsole::Chain memory leak | 7.5v3.1 | 0.7% | 2023-05-23 | |
| CVE-2023-30469 | Reflrected cross-site scripting vulnerability in Hitachi Ops Center Analyzer | 7.6CNA v3.1 | 0.4% | 2023-05-23 | Fix |
| CVE-2023-30440 | IBM PowerVM Hypervisor denial of service | 6.7CNA v3.1 | 0.2% | 2023-05-23 | Fix |
| CVE-2023-30382 | Valve Software Half-life component hl.exe of Valve buffer overflow | 7.3v3.1 | 0.2% | 2023-05-23 | |
| CVE-2023-29919 | Contec SolarView Compact incorrect default permissions | 9.1v3.1 | 60.2% | 2023-05-23 | Reported exploitedNucleiExploit code |
| CVE-2023-28413 | Monkey Wrench Snow Monkey Forms path traversal | 9.8v3.1 | 2.0% | 2023-05-23 | Fix |
| CVE-2023-28409 | Monkey Wrench MW WP Form unrestricted file upload | 9.8v3.1 | 1.2% | 2023-05-23 | Fix |
| CVE-2023-28408 | Monkey Wrench MW WP Form path traversal | 9.8v3.1 | 1.8% | 2023-05-23 | Fix |
| CVE-2023-28394 | Beekeeper Studio OS command injection | 8.8v3.1 | 1.4% | 2023-05-23 | Fix |
| CVE-2023-28392 | Inaba Denki Sangyo Wi-Fi AP UNIT OS command injection | 7.2v3.1 | 0.9% | 2023-05-23 | Fix |
| CVE-2023-28390 | ICOM Sr-7100vn Firmware privilege escalation | 6.8v3.1 | 0.3% | 2023-05-23 | Fix |
| CVE-2023-28367 | Vektor VK All in One Expansion Unit CTA post function cross-site scripting | 5.4v3.1 | 0.6% | 2023-05-23 | Fix |
| CVE-2023-28015 | HCL Domino AppDev Pack is susceptible to a User Account Enumeration vulnerability | 5.3CNA v3.1 | 0.5% | 2023-05-23 | Fix |
| CVE-2023-27926 | Vektor VK All in One Expansion Unit Profile setting function cross-site scripting | 5.4v3.1 | 0.6% | 2023-05-23 | Fix |
| CVE-2023-27925 | Vektor VK Blocks and VK Blocks Pro Post function cross-site scripting | 5.4v3.1 | 0.6% | 2023-05-23 | Fix |
| CVE-2023-27923 | Vektor VK Blocks and VK Blocks Pro Tag edit function cross-site scripting | 5.4v3.1 | 0.6% | 2023-05-23 | Fix |
| CVE-2023-27922 | Stefano Lissa & The Newsletter Team Newsletter cross-site scripting | 6.1v3.1 | 1.2% | 2023-05-23 | NucleiFix |
| CVE-2023-27921 | JINS MEME CORE hard-coded credentials | 6.5v3.1 | 0.3% | 2023-05-23 | Fix |
| CVE-2023-27920 | Contec SolarView Compact system date/time setting page improper access control | 4.3v3.1 | 1.8% | 2023-05-23 | Fix |
| CVE-2023-27521 | Contec SolarView Compact mail setting page OS command injection | 8.8v3.1 | 1.9% | 2023-05-23 | Fix |
| CVE-2023-27518 | Contec SolarView Compact multiple setting pages buffer overflow | 8.8v3.1 | 1.5% | 2023-05-23 | Fix |
| CVE-2023-27514 | Contec SolarView Compact download page OS command injection | 8.8v3.1 | 1.9% | 2023-05-23 | Fix |
| CVE-2023-27512 | Contec SolarView Compact hard-coded credentials | 7.2v3.1 | 1.0% | 2023-05-23 | Fix |
| CVE-2023-27507 | MicroEngine Mailform path traversal | 9.8v3.1 | 1.3% | 2023-05-23 | Fix |
| CVE-2023-27397 | MicroEngine Mailform unrestricted file upload | 9.8v3.1 | 0.9% | 2023-05-23 | Fix |
| CVE-2023-27388 | T&D Corporation and ESPEC MIC CORP. data logger products improper authentication | 9.8v3.1 | 1.3% | 2023-05-23 | Fix |
| CVE-2023-27387 | T&D Corporation and ESPEC MIC CORP. data logger products cross-site request forgery | 8.8v3.1 | 0.4% | 2023-05-23 | Fix |
| CVE-2023-27384 | Cybozu Garoon incorrect authorization | 4.3v3.1 | 0.5% | 2023-05-23 | Fix |
| CVE-2023-27304 | Cybozu Garoon missing authorization | 4.3v3.1 | 0.5% | 2023-05-23 | Fix |
| CVE-2023-27068 | Sitecore Experience Platform deserialization of untrusted data | 9.8v3.1 | 1.7% | 2023-05-23 | Fix |
| CVE-2023-26595 | Cybozu Garoon message denial of service | 6.5v3.1 | 0.5% | 2023-05-23 | Fix |
| CVE-2023-26014 | Minify HTML WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-23 | Fix |
| CVE-2023-26011 | Read More Excerpt Link WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-23 | Fix |
| CVE-2023-25953 | WORKS MOBILE Japan Drive Explorer for macOS code injection | 9.8v3.1 | 0.6% | 2023-05-23 | Fix |
| CVE-2023-25946 | Qrio Lock (Q-SL2) authentication bypass | 8.8v3.1 | 0.4% | 2023-05-23 | Fix |
| CVE-2023-25707 | VikBooking Hotel Booking Engine and PMS WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-05-23 | Fix |
| CVE-2023-25481 | Podlove Subscribe button WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-05-23 | Fix |
| CVE-2023-25474 | About Me 3000 widget WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-23 | |
| CVE-2023-25472 | Podlove Podcast Publisher WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-23 | Fix |
| CVE-2023-25440 | CiviCRM add contact function stored cross-site scripting | 5.4v3.1 | 2.5% | 2023-05-23 | Exploit code |
| CVE-2023-25056 | Feed Them Social WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-23 | Fix |
| CVE-2023-23724 | WordPress Email Marketing Plugin WP Email Capture cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-23 | Fix |
| CVE-2023-23713 | Theme Tweaker WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-23 | |
| CVE-2023-23706 | WordPress Social Login and Register plugin cross-site request forgery | 8.8v3.1 | 0.3% | 2023-05-23 | Fix |
| CVE-2023-23705 | Books Gallery WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-23 | Fix |
| CVE-2023-23694 | Dell VxRail HCI OS command injection | 4.7CNA v3.1 | 0.7% | 2023-05-23 | Fix |
| CVE-2023-23693 | Dell VxRail HCI OS command injection | 6.7CNA v3.1 | 0.4% | 2023-05-23 | Fix |
| CVE-2023-23545 | T&D Corporation and ESPEC MIC CORP. data logger products missing authentication | 5.3v3.1 | 0.8% | 2023-05-23 | Fix |
| CVE-2023-23306 | Garmin Connect-iq out-of-bounds write | 9.8v3.1 | 1.2% | 2023-05-23 | |
| CVE-2023-23305 | Garmin Connect-iq buffer overflow | 9.8v3.1 | 1.3% | 2023-05-23 | |
| CVE-2023-23304 | Garmin Connect-iq incorrect authorization | 9.1v3.1 | 0.6% | 2023-05-23 | |
| CVE-2023-23303 | Garmin Connect-iq buffer overflow | 9.8v3.1 | 0.8% | 2023-05-23 | |
| CVE-2023-23302 | Garmin Connect-iq buffer overflow | 9.8v3.1 | 1.3% | 2023-05-23 | |
| CVE-2023-23301 | Garmin Connect-iq out-of-bounds read | 9.8v3.1 | 1.1% | 2023-05-23 | |
| CVE-2023-23300 | Garmin Connect-iq buffer overflow | 9.8v3.1 | 1.3% | 2023-05-23 | |
| CVE-2023-23299 | Garmin Connect-iq incorrect authorization | 7.5v3.1 | 0.8% | 2023-05-23 | |
| CVE-2023-23298 | Garmin Connect-iq integer overflow | 9.8v3.1 | 1.5% | 2023-05-23 | |
| CVE-2023-22654 | T&D Corporation and ESPEC MIC CORP. data logger products cross-site scripting | 5.4v3.1 | 0.5% | 2023-05-23 | Fix |
| CVE-2023-2845 | Improper access control in CloudExplorer-Dev/CloudExplorer-Lite | 8.1v3.1 | 0.7% | 2023-05-23 | Fix |
| CVE-2023-2844 | Authorization bypass through user-controlled key in CloudExplorer-Dev/CloudExplorer-Lite | 4.9NVD v3.1 | 0.7% | 2023-05-23 | Fix |
| CVE-2023-2703 | Information disclosure in Finex Media's Competition Management System | 7.5v3.1 | 0.6% | 2023-05-23 | Fix |
| CVE-2023-2702 | IDOR in Finex Media's Competition Management System | 8.8CNA v3.1 | 0.7% | 2023-05-23 | Fix |
| CVE-2023-1837 | HYPR Server missing authentication | 8.5CNA v3.1 | 0.5% | 2023-05-23 | Fix |
| CVE-2023-1508 | SQLi in AdamPOS's Mobilmen Terminal Software | 9.8CNA v3.1 | 0.6% | 2023-05-23 | Fix |
| CVE-2023-1209 | ServiceNow Records cross-site scripting | 4.3CNA v3.1 | 0.4% | 2023-05-23 | Fix |
| CVE-2023-33297 | Bitcoin Core denial of service | 7.5v3.1 | 1.4% | 2023-05-22 | Fix |
| CVE-2023-33294 | Kaiostech Kaios command injection | 9.8v3.1 | 0.9% | 2023-05-22 | |
| CVE-2023-33293 | Kaiostech Kaios resource exposure | 5.3v3.1 | 0.6% | 2023-05-22 | |
| CVE-2023-33288 | Linux kernel use-after-free | 4.7v3.1 | 0.3% | 2023-05-22 | Fix |
| CVE-2023-33285 | Qt out-of-bounds read | 5.3v3.1 | 0.8% | 2023-05-22 | Fix |
| CVE-2023-33281 | Nissan Sylphy Classic 2021 authentication bypass by replay | 6.5v3.1 | 0.6% | 2023-05-22 | |
| CVE-2023-33264 | Hazelcast vulnerable to unmasked password exposure | 4.3v3.1 | 0.7% | 2023-05-22 | Fix |
| CVE-2023-33236 | MXsecurity hard-coded credential | 9.8CNA v3.1 | 1.0% | 2023-05-22 | Fix |
| CVE-2023-33235 | MXsecurity command injection | 7.2CNA v3.1 | 1.4% | 2023-05-22 | Fix |
| CVE-2023-32350 | Teltonika RUT model routers OS command injection | 8.8v3.1 | 1.5% | 2023-05-22 | Fix |
| CVE-2023-32349 | Teltonika RUT model routers external control of a configuration setting | 8.8v3.1 | 1.1% | 2023-05-22 | Fix |
| CVE-2023-32348 | Teltonika Remote Management System server-side request forgery | 5.8v3.1 | 0.5% | 2023-05-22 | Fix |
| CVE-2023-32347 | Teltonika Remote Management System improper authentication | 9.8v3.1 | 0.7% | 2023-05-22 | Fix |
| CVE-2023-32346 | Teltonika Remote Management System response discrepancy | 5.3v3.1 | 0.5% | 2023-05-22 | Fix |
| CVE-2023-32336 | IBM InfoSphere Information Server code execution | 8.8CNA v3.1 | 1.4% | 2023-05-22 | Fix |
| CVE-2023-31923 | supremainc BioStar 2 improper preservation of permissions | 8.8v3.1 | 0.9% | 2023-05-22 | |
| CVE-2023-31816 | Content Management System cross-site scripting | 6.1v3.1 | 0.5% | 2023-05-22 | |
| CVE-2023-31779 | WeKan cross-site scripting | 5.4v3.1 | 0.6% | 2023-05-22 | Exploit code |
| CVE-2023-31742 | Linksys WRT54GL command injection | 7.2v3.1 | 9.1% | 2023-05-22 | Exploit code |
| CVE-2023-31689 | WCMS unrestricted file upload | 9.8v3.1 | 20.2% | 2023-05-22 | |
| CVE-2023-31584 | silicon cross-site scripting | 6.1v3.1 | 0.8% | 2023-05-22 | Exploit code |
| CVE-2023-31454 | Apache InLong: IDOR make users can bind any cluster | 7.5v3.1 | 1.2% | 2023-05-22 | Fix |
| CVE-2023-31453 | Apache InLong: IDOR make users can delete others' subscription | 7.5v3.1 | 1.2% | 2023-05-22 | Fix |
| CVE-2023-31245 | Snap One OvrC Cloud open redirect | 6.1NVD v3.1 | 0.4% | 2023-05-22 | Fix |
| CVE-2023-31241 | Snap One OvrC Cloud unprotected alternate channel | 10.0v3.1 | 0.8% | 2023-05-22 | Fix |
| CVE-2023-31240 | Snap One OvrC Cloud weak credentials | 9.8v3.1 | 0.5% | 2023-05-22 | Fix |
| CVE-2023-31206 | Apache InLong: Attackers can change the immutable name and type of nodes | 7.5v3.1 | 1.2% | 2023-05-22 | Fix |
| CVE-2023-31193 | Snap One OvrC Cloud cleartext transmission of sensitive information | 7.5v3.1 | 0.4% | 2023-05-22 | Fix |
| CVE-2023-31103 | Apache InLong: Attackers can change the immutable name and type of cluster | 7.5v3.1 | 1.3% | 2023-05-22 | Fix |
| CVE-2023-31101 | Apache InLong: Users who joined later can see the data of deleted users | 6.5v3.1 | 1.1% | 2023-05-22 | Fix |
| CVE-2023-31098 | Apache InLong: Weak password Implementation in InLong | 9.8v3.1 | 1.2% | 2023-05-22 | Fix |
| CVE-2023-31066 | Apache InLong: Insecure direct object references for Inlong sources | 9.1v3.1 | 1.4% | 2023-05-22 | Fix |
| CVE-2023-31065 | Apache InLong: Insufficient session expiration in InLong | 9.1v3.1 | 1.2% | 2023-05-22 | Fix |
| CVE-2023-31064 | Apache InLong: Insecurity direct object references cancelling applications | 7.5v3.1 | 1.2% | 2023-05-22 | Fix |
| CVE-2023-31062 | Apache InLong: Privilege escalation vulnerability for InLong | 9.8v3.1 | 1.3% | 2023-05-22 | Fix |
| CVE-2023-31058 | Apache InLong: JDBC URL bypassing by adding blanks | 7.5v3.1 | 1.2% | 2023-05-22 | Fix |
| CVE-2023-29838 | Allwaysync incorrect default permissions | 7.8v3.1 | 0.2% | 2023-05-22 | |
| CVE-2023-28709 | Apache Tomcat HTTP connector parameter limit denial of service | 7.5v3.1 | 48.2% | 2023-05-22 | Fix |
| CVE-2023-28649 | Snap One OvrC Cloud device claim requests vulnerability | 7.5v3.1 | 0.5% | 2023-05-22 | Fix |
| CVE-2023-28467 | mybb cross-site scripting | 6.1NVD v3.1 | 0.5% | 2023-05-22 | Fix |
| CVE-2023-28412 | Snap One OvrC Cloud response discrepancy | 5.3v3.1 | 0.5% | 2023-05-22 | Fix |
| CVE-2023-28386 | Snap One OvrC Cloud improper integrity check validation | 9.8v3.1 | 0.4% | 2023-05-22 | Fix |
| CVE-2023-27067 | Sitecore Experience Platform path traversal | 7.5v3.1 | 1.6% | 2023-05-22 | Fix |
| CVE-2023-27066 | Sitecore Experience Platform path traversal | 6.5v3.1 | 1.5% | 2023-05-22 | Fix |
| CVE-2023-25537 | Dell PowerEdge Platform out-of-bounds write | 6.1CNA v3.1 | 0.2% | 2023-05-22 | Fix |
| CVE-2023-25448 | Archivist Custom Archive Templates WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-05-22 | Fix |
| CVE-2023-25447 | ColorWay WordPress theme cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-22 | |
| CVE-2023-25183 | Snap One OvrC Cloud hidden functionality | 7.2v3.1 | 0.6% | 2023-05-22 | Fix |
| CVE-2023-23813 | My Calendar WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-22 | Fix |
| CVE-2023-23797 | Auto YouTube Importer WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-22 | Fix |
| CVE-2023-23712 | User Meta Manager WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-22 | |
| CVE-2023-23680 | WP TopBar WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-22 | |
| CVE-2023-22714 | Coming Soon by Supsystic WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-22 | Fix |
| CVE-2023-22709 | SRS Simple Hits Counter WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-22 | Fix |
| CVE-2023-22692 | Name Directory WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-22 | Fix |
| CVE-2023-22688 | WP Tabs Slides WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-22 | |
| CVE-2023-2840 | Null pointer dereference in gpac/gpac | 9.8v3.1 | 0.7% | 2023-05-22 | Fix |
| CVE-2023-2839 | Divide by zero in gpac/gpac | 7.5v3.1 | 0.6% | 2023-05-22 | Fix |
| CVE-2023-2838 | Out-of-bounds read in gpac/gpac | 9.1v3.1 | 0.7% | 2023-05-22 | Fix |
| CVE-2023-2837 | Stack-based buffer overflow in gpac/gpac | 5.5v3.1 | 0.4% | 2023-05-22 | Fix |
| CVE-2023-2832 | SQL injection in unilogies/Bumsys | 7.2v3.1 | 0.9% | 2023-05-22 | Fix |
| CVE-2023-2597 | Eclipse OpenJ9 buffer overflow | 7.0CNA v3.1 | 0.4% | 2023-05-22 | Fix |
| CVE-2023-2588 | Teltonika Remote Management System cloud proxy remote code execution | 8.8v3.1 | 1.1% | 2023-05-22 | Fix |
| CVE-2023-2587 | Teltonika Remote Management System cross-site scripting | 8.3v3.1 | 0.9% | 2023-05-22 | Fix |
| CVE-2023-2586 | Teltonika Remote Management System improper authentication | 9.8v3.1 | 1.0% | 2023-05-22 | Fix |
| CVE-2023-2505 | BirdDog STUDIO R3 cross-site request forgery | 8.8v3.1 | 0.3% | 2023-05-22 | Fix |
| CVE-2023-2504 | BirdDog STUDIO R3 hard-coded credentials | 9.8v3.1 | 0.5% | 2023-05-22 | Fix |
| CVE-2023-33254 | Quest Kace Systems Deployment Appliance incorrect authorization | 6.5v3.1 | 3.2% | 2023-05-21 | |
| CVE-2023-33252 | 0kims Snarkjs missing authorization | 7.5v3.1 | 0.6% | 2023-05-21 | Fix |
| CVE-2023-33251 | Lightbend Akka HTTP incorrect permission assignment | 5.5v3.1 | 0.2% | 2023-05-21 | Fix |
| CVE-2023-33250 | Linux kernel use-after-free | 4.4v3.1 | 0.3% | 2023-05-21 | Fix |
| CVE-2023-2826 | SourceCodester Class Scheduling System POST parameter search_teacher_result.php cross-site scripting | 5.4v3.1 | 0.7% | 2023-05-21 | |
| CVE-2023-33244 | Obsidian embedded web page vulnerability | 8.2v3.1 | 0.5% | 2023-05-20 | Fix |
| CVE-2023-32700 | Tug TeX Live command injection | 7.8v3.1 | 0.8% | 2023-05-20 | Fix |
| CVE-2023-32589 | Dyslexiefont Free WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-20 | |
| CVE-2023-24414 | Robo Gallery WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-20 | Fix |
| CVE-2023-23890 | WP Airbnb Review Slider WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-20 | Fix |
| CVE-2023-22689 | Auto Affiliate Links WordPress plugin broken access control | 8.8v3.1 | 0.3% | 2023-05-20 | Fix |
| CVE-2023-2824 | SourceCodester Dental Clinic Appointment Reservation System service.php cross-site scripting | 6.1v3.1 | 0.6% | 2023-05-20 | |
| CVE-2023-2823 | SourceCodester Class Scheduling System GET parameter edit_subject.php SQL injection | 9.8v3.1 | 0.8% | 2023-05-20 | |
| CVE-2023-2822 | Ellucian Ethos Identity logout cross-site scripting | 6.1v3.1 | 3.3% | 2023-05-20 | NucleiExploit code |
| CVE-2023-2736 | Groundhogg WordPress plugin cross-site request forgery to privilege escalation | 8.0v3.1 | 0.4% | 2023-05-20 | Fix |
| CVE-2023-2735 | Groundhogg WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode | 5.4v3.1 | 0.5% | 2023-05-20 | Fix |
| CVE-2023-2717 | Groundhogg WordPress plugin cross-site request forgery to Disable All Plugins | 4.3v3.1 | 0.3% | 2023-05-20 | Fix |
| CVE-2023-2716 | Groundhogg WordPress plugin missing authorization to Non-arbitrary file upload | 5.4v3.1 | 0.5% | 2023-05-20 | Fix |
| CVE-2023-2715 | Groundhogg WordPress plugin unauthorized access | 4.3v3.1 | 0.6% | 2023-05-20 | Fix |
| CVE-2023-2714 | Groundhogg WordPress plugin missing authorization to update License | 4.3v3.1 | 0.5% | 2023-05-20 | Fix |
| CVE-2023-2713 | IDOR vulnerability in Rental Module developed by third-party for Ideasoft's E-commerce Platform | 9.8v3.1 | 0.8% | 2023-05-20 | Fix |
| CVE-2023-2712 | Rental Module unrestricted file upload | 9.8v3.1 | 1.3% | 2023-05-20 | Fix |
| CVE-2023-2276 | WCFM Membership WordPress plugin insecure direct object reference | 9.8v3.1 | 1.1% | 2023-05-20 | Fix |
| CVE-2023-1696 | Huawei HarmonyOS data processing vulnerability in the multimedia video module | 7.5v3.1 | 0.4% | 2023-05-20 | Fix |
| CVE-2023-1694 | Huawei HarmonyOS privilege escalation vulnerability in the settings module | 7.5v3.1 | 0.4% | 2023-05-20 | Fix |
| CVE-2023-1693 | Huawei HarmonyOS privilege escalation vulnerability in the settings module | 7.5v3.1 | 0.4% | 2023-05-20 | Fix |
| CVE-2023-1692 | Huawei HarmonyOS vulnerability of no permission verification in the window management module | 7.5v3.1 | 0.4% | 2023-05-20 | Fix |
| CVE-2023-33240 | Foxit PDF Editor incorrect default permissions | 7.8v3.1 | 0.2% | 2023-05-19 | |
| CVE-2023-32679 | Remote code execution via unrestricted file extension in Craft CMS | 7.2CNA v3.1 | 1.8% | 2023-05-19 | Fix |
| CVE-2023-32677 | Users who can send invitations can erroneously add users to streams during invitation in Zulip | 3.1CNA v3.1 | 0.6% | 2023-05-19 | Fix |
| CVE-2023-32675 | Nonpayable default functions are sometimes payable in vyper | 3.7CNA v3.1 | 0.6% | 2023-05-19 | Fix |
| CVE-2023-31862 | jizhiCMS cross-site scripting | 5.4v3.1 | 0.3% | 2023-05-19 | |
| CVE-2023-31757 | DedeCMS cross-site scripting | 5.4v3.1 | 0.4% | 2023-05-19 | |
| CVE-2023-31756 | TP-Link Archer VR1600V administrative web portal command injection | 6.7v3.1 | 1.8% | 2023-05-19 | |
| CVE-2023-31707 | SEMCMS SQL injection | 9.8v3.1 | 0.8% | 2023-05-19 | |
| CVE-2023-30775 | libtiff heap-based buffer overflow | 5.5NVD v3.1 | 0.3% | 2023-05-19 | Fix |
| CVE-2023-30774 | libtiff heap-based buffer overflow | 5.5NVD v3.1 | 0.5% | 2023-05-19 | Fix |
| CVE-2023-30199 | Webbax Customexporter path traversal | 7.5v3.1 | 0.7% | 2023-05-19 | Fix |
| CVE-2023-28950 | IBM MQ information disclosure | 5.1CNA v3.1 | 0.2% | 2023-05-19 | Fix |
| CVE-2023-28623 | Unauthorized user can register an account in specific configurations in Zulip | 6.5CNA v3.1 | 0.5% | 2023-05-19 | Fix |
| CVE-2023-28529 | IBM InfoSphere Information Server Web UI stored cross-site scripting | 5.5CNA v3.1 | 0.4% | 2023-05-19 | Fix |
| CVE-2023-28514 | IBM MQ information disclosure | 6.2CNA v3.1 | 0.2% | 2023-05-19 | Fix |
| CVE-2023-28045 | Dell CloudIQ Collector missing encryption | 6.3CNA v3.1 | 0.2% | 2023-05-19 | Fix |
| CVE-2023-26818 | Telegram incorrect authorization | 5.5v3.1 | 0.5% | 2023-05-19 | Exploit code |
| CVE-2023-22878 | IBM InfoSphere Information Server information disclosure | 6.2CNA v3.1 | 0.1% | 2023-05-19 | Fix |
| CVE-2023-20881 | Cloud Controller API improper certificate validation | 8.1v3.1 | 0.4% | 2023-05-19 | Fix |
| CVE-2023-2815 | SourceCodester Online Jewelry Store POST parameter supplier.php SQL injection | 9.8v3.1 | 0.7% | 2023-05-19 | |
| CVE-2023-2814 | SourceCodester Class Scheduling System POST parameter save_teacher.php cross-site scripting | 6.1v3.1 | 0.6% | 2023-05-19 | |
| CVE-2023-2806 | Weaver e-cology API RequestInfoByXml XML external entity reference | 8.8v3.1 | 1.0% | 2023-05-19 | |
| CVE-2023-2704 | BP Social Connect WordPress plugin authentication bypass | 9.8v3.1 | 1.6% | 2023-05-19 | Fix |
| CVE-2023-1996 | Reflected cross-site scripting vulnerability affecting Release 3DEXPERIENCE R2018x | 6.1CNA v3.1 | 0.4% | 2023-05-19 | |
| CVE-2023-1618 | Authentication bypass vulnerability in MELSEC WS Series Ethernet interface module | 7.5CNA v3.1 | 1.1% | 2023-05-19 | Fix |
| CVE-2023-33204 | sysstat integer overflow | 7.8v3.1 | 0.3% | 2023-05-18 | Fix |
| CVE-2023-33203 | Linux kernel race condition | 6.4v3.1 | 0.4% | 2023-05-18 | Fix |
| CVE-2023-32680 | Missing SQL permissions check in metabase | 5.8CNA v3.1 | 0.6% | 2023-05-18 | Fix |
| CVE-2023-32515 | Custom Field Suite WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-05-18 | Fix |
| CVE-2023-32322 | Arbitrary file read in Ombi | 4.9CNA v3.1 | 2.1% | 2023-05-18 | Fix |
| CVE-2023-32100 | silabs.com Gecko Platform key duplication in GSDK | 5.3CNA v3.1 | 0.5% | 2023-05-18 | Fix |
| CVE-2023-32099 | silabs.com Gecko Platform key duplication in GSDK | 5.3CNA v3.1 | 0.5% | 2023-05-18 | Fix |
| CVE-2023-32098 | silabs.com Gecko Platform key duplication in GSDK | 5.3CNA v3.1 | 0.5% | 2023-05-18 | Fix |
| CVE-2023-32097 | silabs.com Gecko Platform key duplication in GSDK | 3.1CNA v3.1 | 0.5% | 2023-05-18 | Fix |
| CVE-2023-32096 | silabs.com Gecko Platform key duplication in GSDK | 3.1CNA v3.1 | 0.5% | 2023-05-18 | Fix |
| CVE-2023-31871 | OpenText Documentum Content Server incorrect permission assignment | 7.8v3.1 | 0.3% | 2023-05-18 | |
| CVE-2023-31729 | TOTOLINK A3300R command injection | 9.8v3.1 | 1.4% | 2023-05-18 | |
| CVE-2023-31655 | redis denial of service | 7.5v3.1 | 1.0% | 2023-05-18 | Fix |
| CVE-2023-31597 | zammad incorrect authorization | 6.5v3.1 | 0.4% | 2023-05-18 | Fix |
| CVE-2023-31233 | Baidu Tongji generator WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-05-18 | |
| CVE-2023-30868 | CMS Tree Page View WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 4.0% | 2023-05-18 | NucleiExploit codeFix |
| CVE-2023-30780 | User IP and Location WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-05-18 | Fix |
| CVE-2023-30487 | LearnPress Export Import WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-05-18 | Fix |
| CVE-2023-30470 | Facebook Hermes use-after-free | 9.8v3.1 | 1.2% | 2023-05-18 | Fix |
| CVE-2023-30333 | PerfreeBlog component /admin/ThemeController.java arbitrary file upload | 9.8v3.1 | 0.9% | 2023-05-18 | |
| CVE-2023-30124 | LavaLite vulnerable to cross-site scripting | 5.4v3.1 | 0.4% | 2023-05-18 | |
| CVE-2023-29985 | oretnom23 Student Study Center Desk Management System SQL injection | 9.8v3.1 | 0.9% | 2023-05-18 | |
| CVE-2023-29857 | Teslamate information disclosure | 5.3v3.1 | 0.5% | 2023-05-18 | |
| CVE-2023-29720 | Sofawiki cross-site scripting | 6.1v3.1 | 0.4% | 2023-05-18 | |
| CVE-2023-28753 | Facebook netconsd out-of-bounds write | 9.8v3.1 | 1.9% | 2023-05-18 | Exploit codeFix |
| CVE-2023-28369 | Brother Industries Brother iPrint&Scan improper access control | 3.3v3.1 | 0.2% | 2023-05-18 | Fix |
| CVE-2023-28081 | Facebook Hermes use-after-free | 9.8v3.1 | 0.9% | 2023-05-18 | Fix |
| CVE-2023-27430 | Mass Delete Unused Tags WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-18 | Fix |
| CVE-2023-27423 | Auto Prune Posts WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-18 | Fix |
| CVE-2023-27217 | Belkin F7C063 Firmware stack-based buffer overflow | 9.8v3.1 | 1.0% | 2023-05-18 | |
| CVE-2023-25933 | Facebook Hermes TypedArray type confusion | 9.8v3.1 | 0.9% | 2023-05-18 | Fix |
| CVE-2023-25698 | Shoppable Images Lite WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-05-18 | Fix |
| CVE-2023-24833 | Facebook Hermes BigIntPrimitive addition use-after-free | 7.5v3.1 | 0.6% | 2023-05-18 | Fix |
| CVE-2023-24832 | Facebook Hermes null pointer dereference | 7.5v3.1 | 0.7% | 2023-05-18 | Fix |
| CVE-2023-23999 | Google Analytics by Monster Insights WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-05-18 | Fix |
| CVE-2023-23759 | Facebook fizz reachable assertion | 7.5v3.1 | 0.7% | 2023-05-18 | Fix |
| CVE-2023-23667 | Brands for WooCommerce WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-05-18 | Fix |
| CVE-2023-23557 | Facebook Hermes type confusion | 9.8v3.1 | 0.9% | 2023-05-18 | Fix |
| CVE-2023-23556 | Facebook Hermes out-of-bounds write | 9.8v3.1 | 0.9% | 2023-05-18 | Fix |
| CVE-2023-20189 | Cisco Small Business Series Switches buffer overflow | 8.6CNA v3.1 | 11.1% | 2023-05-18 | Fix |
| CVE-2023-20184 | Cisco DNA Center API improper authorization | 5.4CNA v3.1 | 0.5% | 2023-05-18 | Fix |
| CVE-2023-20183 | Cisco DNA Center API improper authorization | 5.4CNA v3.1 | 0.5% | 2023-05-18 | Fix |
| CVE-2023-20182 | Cisco DNA Center API improper authorization | 5.4CNA v3.1 | 0.6% | 2023-05-18 | Fix |
| CVE-2023-20174 | Cisco Identity Services Engine XML external entity injection | 4.9CNA v3.1 | 0.7% | 2023-05-18 | Fix |
| CVE-2023-20173 | Cisco Identity Services Engine XML external entity injection | 4.9CNA v3.1 | 0.8% | 2023-05-18 | Fix |
| CVE-2023-20172 | Cisco Identity Services Engine arbitrary file delete and File Read | 5.4CNA v3.1 | 0.4% | 2023-05-18 | Fix |
| CVE-2023-20171 | Cisco Identity Services Engine arbitrary file delete and File Read | 5.4CNA v3.1 | 0.4% | 2023-05-18 | Fix |
| CVE-2023-20167 | Cisco Identity Services Engine path traversal | 6.0CNA v3.1 | 0.5% | 2023-05-18 | Fix |
| CVE-2023-20166 | Cisco Identity Services Engine path traversal | 6.0CNA v3.1 | 0.2% | 2023-05-18 | Fix |
| CVE-2023-20164 | Cisco Identity Services Engine command injection | 6.5CNA v3.1 | 1.1% | 2023-05-18 | Fix |
| CVE-2023-20163 | Cisco Identity Services Engine command injection | 6.5CNA v3.1 | 1.1% | 2023-05-18 | Fix |
| CVE-2023-20162 | Cisco Small Business Series Switches buffer overflow | 8.6CNA v3.1 | 1.2% | 2023-05-18 | Fix |
| CVE-2023-20161 | Cisco Small Business Series Switches buffer overflow | 8.6CNA v3.1 | 10.3% | 2023-05-18 | Fix |
| CVE-2023-20160 | Cisco Small Business Series Switches buffer overflow | 8.6CNA v3.1 | 10.3% | 2023-05-18 | Fix |
| CVE-2023-20159 | Cisco Small Business Series Switches buffer overflow | 8.6CNA v3.1 | 10.3% | 2023-05-18 | Fix |
| CVE-2023-20158 | Cisco Small Business Series Switches buffer overflow | 8.6CNA v3.1 | 1.2% | 2023-05-18 | Fix |
| CVE-2023-20157 | Cisco Small Business Series Switches buffer overflow | 8.6CNA v3.1 | 1.2% | 2023-05-18 | Fix |
| CVE-2023-20156 | Cisco Small Business Series Switches buffer overflow | 8.6CNA v3.1 | 1.2% | 2023-05-18 | Fix |
| CVE-2023-20110 | Cisco Smart Software Manager On-prem SQL injection | 6.5CNA v3.1 | 1.2% | 2023-05-18 | Exploit codeFix |
| CVE-2023-20106 | Cisco Identity Services Engine arbitrary file delete and File Read | 5.4CNA v3.1 | 0.4% | 2023-05-18 | Fix |
| CVE-2023-20087 | Cisco Identity Services Engine arbitrary file download | 4.9CNA v3.1 | 0.8% | 2023-05-18 | Fix |
| CVE-2023-20077 | Cisco Identity Services Engine arbitrary file download | 4.9CNA v3.1 | 0.8% | 2023-05-18 | Fix |
| CVE-2023-20024 | Cisco Small Business Series Switches buffer overflow | 8.6CNA v3.1 | 1.3% | 2023-05-18 | Fix |
| CVE-2023-20003 | Cisco Business Wireless Access Points Social Login Guest User authentication bypass | 4.7CNA v3.1 | 0.3% | 2023-05-18 | Fix |
| CVE-2023-2800 | Insecure temporary file in huggingface/Transformers | 4.7v3.1 | 0.3% | 2023-05-18 | Fix |
| CVE-2023-2799 | cnoa OA hard-coded password | 9.8v3.1 | 0.8% | 2023-05-18 | |
| CVE-2023-2790 | TOTOLINK N200RE Telnet service custom.conf password in configuration file | 5.5v3.1 | 0.3% | 2023-05-18 | |
| CVE-2023-2789 | GNU cflow parser.c parse_variable_declaration denial of service | 7.5v3.1 | 1.2% | 2023-05-18 | |
| CVE-2023-2782 | Acronis Cyber Infrastructure improper authorization | 5.5CNA v3.0 | 0.2% | 2023-05-18 | Fix |
| CVE-2023-2757 | Waiting: One-click countdowns WordPress plugin authorization bypass | 5.4NVD v3.1 | 0.5% | 2023-05-18 | |
| CVE-2023-2481 | silabs.com Gecko Platform key duplication in GSDK | 5.3CNA v3.1 | 0.5% | 2023-05-18 | Fix |
| CVE-2023-2025 | Exposure of sensitive information in OpenBlue Enterprise Manager Data Collector | 5.0CNA v3.1 | 0.5% | 2023-05-18 | Fix |
| CVE-2023-2024 | Improper authentication for OpenBlue Enterprise Manager Data Collector | 10.0CNA v3.1 | 1.1% | 2023-05-18 | Fix |
| CVE-2023-1195 | Linux kernel use-after-free | 5.5NVD v3.1 | 0.2% | 2023-05-18 | Fix |
| CVE-2023-1132 | silabs.com Gecko Platform key duplication in GSDK | 5.3CNA v3.1 | 0.5% | 2023-05-18 | Fix |
| CVE-2023-0965 | silabs.com Gecko Platform key duplication in GSDK | 3.1CNA v3.1 | 0.5% | 2023-05-18 | Fix |
| CVE-2023-32767 | IP Symcon path traversal | 7.5v3.1 | 1.2% | 2023-05-17 | Fix |
| CVE-2023-31904 | Savysoda Wifi Hd Wireless Disk Drive path traversal | 7.5v3.1 | 1.3% | 2023-05-17 | |
| CVE-2023-31903 | Freeguppy Guppy unrestricted file upload | 9.8v3.1 | 2.1% | 2023-05-17 | |
| CVE-2023-31902 | Mobile Mouse remote code execution | 9.8v3.1 | 8.7% | 2023-05-17 | MetasploitExploit code |
| CVE-2023-31848 | Davinci server-side request forgery | 8.8v3.1 | 0.6% | 2023-05-17 | |
| CVE-2023-31847 | Davinci arbitrary file read | 6.5v3.1 | 0.6% | 2023-05-17 | |
| CVE-2023-31725 | yasm nasm preprocessor use-after-free | 5.5v3.1 | 0.3% | 2023-05-17 | |
| CVE-2023-31724 | yasm nasm preprocessor vulnerability | 7.8v3.1 | 0.3% | 2023-05-17 | |
| CVE-2023-31723 | yasm nasm preprocessor vulnerability | 5.5v3.1 | 0.3% | 2023-05-17 | |
| CVE-2023-31722 | NASM Netwide Assembler There exists a heap-based buffer overflow | 7.8v3.1 | 0.4% | 2023-05-17 | Fix |
| CVE-2023-31703 | Escanav Escan Management Console edit user form in Microworld Technologies cross-site scripting | 9.0v3.1 | 4.5% | 2023-05-17 | Exploit code |
| CVE-2023-31702 | Escanav Escan Management Console View User Profile in MicroWorld SQL injection | 7.2NVD v3.1 | 4.3% | 2023-05-17 | Exploit code |
| CVE-2023-31701 | TP-Link Tl-wpa4530 Kit command injection | 8.8v3.1 | 2.5% | 2023-05-17 | |
| CVE-2023-31700 | TP-Link Tl-wpa4530 Kit command injection | 8.8v3.1 | 2.5% | 2023-05-17 | |
| CVE-2023-31699 | ChurchCRM cross-site scripting | 4.8v3.1 | 1.5% | 2023-05-17 | Exploit code |
| CVE-2023-31698 | Bludit cross-site scripting | 5.4v3.1 | 2.6% | 2023-05-17 | Exploit code |
| CVE-2023-31208 | Checkmk livestatus command injection in RestAPI | 8.8v3.1 | 1.0% | 2023-05-17 | Fix |
| CVE-2023-31135 | Dgraph Audit Log Encryption nonce reuse | 3.3CNA v3.1 | 0.2% | 2023-05-17 | Fix |
| CVE-2023-30452 | Morosystems Easymind cross-site scripting | 5.4v3.1 | 0.3% | 2023-05-17 | Fix |
| CVE-2023-30438 | IBM PowerVM Hypervisor logical partition isolation vulnerability | 9.3CNA v3.1 | 0.2% | 2023-05-17 | Fix |
| CVE-2023-30191 | Cdesigner SQL injection | 9.8v3.1 | 0.8% | 2023-05-17 | |
| CVE-2023-29837 | Exelysis Unified Communications Solution cross-site scripting | 6.1v3.1 | 0.5% | 2023-05-17 | |
| CVE-2023-27233 | Piwigo SQL injection | 8.8v3.1 | 0.9% | 2023-05-17 | |
| CVE-2023-26044 | ReactPHP's HTTP server continues parsing unused multipart parts after reaching limits | 5.3CNA v3.1 | 0.7% | 2023-05-17 | Fix |
| CVE-2023-25394 | Getvideostream Videostream time-of-check time-of-use race condition | 7.0v3.1 | 0.3% | 2023-05-17 | |
| CVE-2023-24805 | Command injection in cups-filters | 8.8CNA v3.1 | 3.7% | 2023-05-17 | Fix |
| CVE-2023-22348 | Checkmk reading host_configs does not honour contact groups | 4.3v3.1 | 0.6% | 2023-05-17 | Fix |
| CVE-2023-2780 | Path traversal: \..\filename in MLflow/MLflow | 9.8v3.1 | 6.3% | 2023-05-17 | NucleiFix |
| CVE-2023-2776 | code-projects Simple Photo Gallery unrestricted upload | 9.8v3.1 | 0.7% | 2023-05-17 | |
| CVE-2023-2775 | code-projects Bus Dispatch and Information System adminHome.php SQL injection | 8.8v3.1 | 0.7% | 2023-05-17 | |
| CVE-2023-2774 | code-projects Bus Dispatch and Information System view_branch.php SQL injection | 9.8v3.1 | 0.7% | 2023-05-17 | |
| CVE-2023-2773 | code-projects Bus Dispatch and Information System view_admin.php SQL injection | 8.8v3.1 | 0.6% | 2023-05-17 | |
| CVE-2023-2772 | SourceCodester Budget and Expense Tracker System GET parameter manage_budget.php SQL injection | 8.8v3.1 | 0.7% | 2023-05-17 | |
| CVE-2023-2771 | SourceCodester Online Exam System data SQL injection | 8.8v3.1 | 0.7% | 2023-05-17 | |
| CVE-2023-2770 | SourceCodester Online Exam System data SQL injection | 8.8v3.1 | 0.7% | 2023-05-17 | |
| CVE-2023-2769 | SourceCodester Service Provider Management System SQL injection | 8.8v3.1 | 0.7% | 2023-05-17 | |
| CVE-2023-2768 | Sucms cross-site scripting | 5.4v3.1 | 0.6% | 2023-05-17 | |
| CVE-2023-2766 | Weaver OA jx2_config.ini file access | 7.5v3.1 | 54.2% | 2023-05-17 | Nuclei |
| CVE-2023-2765 | Weaver OA downfile.php absolute path traversal | 7.5v3.1 | 2.2% | 2023-05-17 | |
| CVE-2023-2756 | SQL injection in pimcore/customer-data-framework | 7.2v3.1 | 0.9% | 2023-05-17 | Fix |
| CVE-2023-2753 | Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ | 5.4NVD v3.1 | 0.6% | 2023-05-17 | Fix |
| CVE-2023-2752 | Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ | 5.4NVD v3.1 | 0.5% | 2023-05-17 | Fix |
| CVE-2023-2745 | WordPress Core directory traversal | 6.1NVD v3.1 | 79.5% | 2023-05-17 | Reported exploitedNucleiExploit codeFix |
| CVE-2023-2731 | libtiff A null pointer dereference | 5.5NVD v3.1 | 0.4% | 2023-05-17 | Fix |
| CVE-2023-2706 | OTP Login Woocommerce and Gravity Forms WordPress plugin authentication bypass | 8.1v3.1 | 1.7% | 2023-05-17 | Fix |
| CVE-2023-2679 | Data leakage in Adobe connector for SPE edition of SLM | 4.1CNA v3.1 | 0.4% | 2023-05-17 | Fix |
| CVE-2023-2608 | Multiple Page Generator WordPress plugin cross-site request forgery to SQL injection | 4.3v3.1 | 0.4% | 2023-05-17 | Fix |
| CVE-2023-2528 | Contact Form by Supsystic WordPress plugin cross-site request forgery via AJAX action | 8.8v3.1 | 0.3% | 2023-05-17 | Fix |
| CVE-2023-2509 | A cross-site scripting(XSS) vulnerability was found on ADM | 6.1NVD v3.1 | 0.3% | 2023-05-17 | Fix |
| CVE-2023-2491 | emacs command injection | 7.8NVD v3.1 | 0.5% | 2023-05-17 | Fix |
| CVE-2023-2319 | It was discovered that an update for PCS package in RHBA-2023:2151 erratum released as part of Red Hat Enterprise Linux 9.2 failed to include the fix for the Webpack issue CVE-2023-28154 (for PCS package), which was previously addressed in Red Hat Enterprise Linux 9.1 via erratum RHSA-2023:1591. The | 9.8v3.1 | 1.0% | 2023-05-17 | Fix |
| CVE-2023-2295 | libreswan pluto IKEv1 daemon resource exhaustion | 7.5NVD v3.1 | 1.6% | 2023-05-17 | Fix |
| CVE-2023-2203 | WebKitGTK use-after-free | 8.8NVD v3.1 | 0.9% | 2023-05-17 | Fix |
| CVE-2023-1972 | binutils _bfd_elf_slurp_version_tables in bfd/elf.c heap-based buffer overflow | 6.5NVD v3.1 | 0.9% | 2023-05-17 | Fix |
| CVE-2023-1859 | kernel A use-after-free | 4.7NVD v3.1 | 0.2% | 2023-05-17 | Fix |
| CVE-2023-1764 | Canon IJ NW Tool inadequate encryption strength | 6.5CNA v3.1 | 0.2% | 2023-05-17 | |
| CVE-2023-1763 | Canon IJ Network Tool/Ver.4.7.5 and earlier (supported OS: OS X 10.9.5-macOS 13),IJ Network Tool/Ver.4.7.3 and earlier (supported OS: OS X 10.7.5-OS X 10.8) allows an attacker to acquire sensitive information on the Wi-Fi connection setup of the printer from the software. | 6.5CNA v3.1 | 0.3% | 2023-05-17 | |
| CVE-2023-0864 | ABB Terra AC wallbox (UL40/80A) cleartext transmission of sensitive information | 7.1CNA v3.1 | 0.2% | 2023-05-17 | Fix |
| CVE-2023-0863 | Authentication to access the AC wallbox via its Bluetooth Low Energy (BLE) channel can be bypassed | 8.8CNA v3.1 | 0.3% | 2023-05-17 | Fix |
| CVE-2023-33007 | Jenkins LoadComplete support Plugin cross-site scripting | 5.4v3.1 | 0.5% | 2023-05-16 | Fix |
| CVE-2023-33006 | Jenkins WSO2 Oauth Plugin cross-site request forgery | 5.4v3.1 | 0.3% | 2023-05-16 | Fix |
| CVE-2023-33005 | Jenkins WSO2 Oauth Plugin session fixation | 5.4v3.1 | 0.4% | 2023-05-16 | Fix |
| CVE-2023-33004 | Jenkins Tag Profiler Plugin missing permission check | 4.3v3.1 | 0.4% | 2023-05-16 | Fix |
| CVE-2023-33003 | Jenkins Tag Profiler Plugin vulnerable to cross-site request forgery | 4.3v3.1 | 0.3% | 2023-05-16 | Fix |
| CVE-2023-33002 | TestComplete support Plugin vulnerable to stored cross-site scripting | 5.4v3.1 | 2.4% | 2023-05-16 | Fix |
| CVE-2023-33001 | Jenkins HashiCorp Vault Plugin has improper masking of credentials | 7.5v3.1 | 0.6% | 2023-05-16 | Fix |
| CVE-2023-33000 | Jenkins NS-ND Integration Performance Publisher Plugin displays credentials without masking | 7.5v3.1 | 0.6% | 2023-05-16 | Fix |
| CVE-2023-32999 | Jenkins AppSpider Plugin missing permission check | 4.3v3.1 | 0.5% | 2023-05-16 | Fix |
| CVE-2023-32998 | Jenkins AppSpider Plugin cross-site request forgery | 8.8v3.1 | 0.5% | 2023-05-16 | Fix |
| CVE-2023-32997 | Jenkins CAS Plugin session fixation | 8.8v3.1 | 0.8% | 2023-05-16 | Fix |
| CVE-2023-32996 | Jenkins SAML Single Sign On(SSO) Plugin missing permission checks | 4.3v3.1 | 0.4% | 2023-05-16 | Fix |
| CVE-2023-32995 | Jenkins SAML Single Sign On(SSO) Plugin cross-site request forgery | 8.8v3.1 | 0.5% | 2023-05-16 | Fix |
| CVE-2023-32994 | Jenkins SAML Single Sign On(SSO) Plugin unconditionally disables SSL/TLS certificate validation | 3.7v3.1 | 0.2% | 2023-05-16 | Fix |
| CVE-2023-32993 | Jenkins SAML Single Sign On(SSO) Plugin missing hostname validation | 4.8v3.1 | 0.2% | 2023-05-16 | Fix |
| CVE-2023-32992 | Jenkins SAML Single Sign On(SSO) Plugin missing permission checks | 8.8v3.1 | 0.8% | 2023-05-16 | Fix |
| CVE-2023-32991 | Jenkins SAML Single Sign On(SSO) Plugin cross-site request forgery | 8.8v3.1 | 0.7% | 2023-05-16 | Fix |
| CVE-2023-32990 | Jenkins Azure VM Agents Plugin missing permission checks | 6.5v3.1 | 0.6% | 2023-05-16 | Fix |
| CVE-2023-32989 | Jenkins Azure VM Agents Plugin cross-site request forgery | 8.8v3.1 | 0.5% | 2023-05-16 | Fix |
| CVE-2023-32988 | Jenkins Azure VM Agents Plugin missing permission checks | 4.3v3.1 | 0.5% | 2023-05-16 | Fix |
| CVE-2023-32987 | Jenkins Reverse Proxy Auth Plugin cross-site request forgery | 8.8v3.1 | 0.5% | 2023-05-16 | Fix |
| CVE-2023-32986 | Jenkins File Parameter Plugin arbitrary file write | 8.8v3.1 | 60.7% | 2023-05-16 | Fix |
| CVE-2023-32985 | Jenkins Sidebar Link Plugin vulnerable to path traversal | 4.3v3.1 | 72.4% | 2023-05-16 | Fix |
| CVE-2023-32984 | Jenkins TestNG Results Plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-05-16 | Fix |
| CVE-2023-32983 | Jenkins Ansible Plugin job configuration form does not mask variables | 5.3v3.1 | 0.4% | 2023-05-16 | Fix |
| CVE-2023-32982 | Jenkins Ansible Plugin stores and displays secrets in plain text | 4.3v3.1 | 0.4% | 2023-05-16 | Fix |
| CVE-2023-32981 | Jenkins Pipeline Utility Steps Plugin arbitrary file write | 8.8v3.1 | 1.0% | 2023-05-16 | Fix |
| CVE-2023-32980 | Jenkins Email Extension Plugin cross-site request forgery | 4.3v3.1 | 0.4% | 2023-05-16 | Fix |
| CVE-2023-32979 | Jenkins Email Extension Plugin missing permission check | 4.3v3.1 | 0.5% | 2023-05-16 | Fix |
| CVE-2023-32978 | Jenkins LDAP Plugin vulnerable to cross-site request forgery | 4.3v3.1 | 0.3% | 2023-05-16 | Fix |
| CVE-2023-32977 | Jenkins Pipeline: Job Plugin vulnerable to stored cross-site scripting | 5.4v3.1 | 0.6% | 2023-05-16 | Fix |
| CVE-2023-32956 | Synology Router Manager (SRM) OS command improper neutralization | 9.8CNA v3.1 | 1.5% | 2023-05-16 | Fix |
| CVE-2023-32955 | Synology Router Manager (SRM) OS command improper neutralization | 8.1CNA v3.1 | 1.2% | 2023-05-16 | Fix |
| CVE-2023-31890 | Glazedlists XML deserialization | 9.8v3.1 | 1.0% | 2023-05-16 | |
| CVE-2023-31857 | oretnom23 Online Computer and Laptop Store unrestricted file upload | 9.8v3.1 | 1.5% | 2023-05-16 | |
| CVE-2023-31856 | TOTOLINK Cp300+ command injection | 9.8v3.1 | 2.9% | 2023-05-16 | |
| CVE-2023-31679 | Videogo device ID parameter improper access control | 7.5v3.1 | 0.8% | 2023-05-16 | |
| CVE-2023-31678 | Videogo device binding improper access control | 5.3v3.1 | 0.6% | 2023-05-16 | |
| CVE-2023-31677 | Luowice insecure permissions | 7.5v3.1 | 0.8% | 2023-05-16 | |
| CVE-2023-31587 | Tenda AC5 remote code execution | 9.8v3.1 | 2.0% | 2023-05-16 | Fix |
| CVE-2023-31576 | s9y Serendipity An arbitrary file upload | 8.8v3.1 | 1.1% | 2023-05-16 | |
| CVE-2023-31572 | Bludit privilege escalation | 8.8v3.1 | 0.8% | 2023-05-16 | |
| CVE-2023-31544 | Alkacon OpenCMS alkacon-OpenCMS vulnerable to stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-05-16 | Fix |
| CVE-2023-31519 | Pharmacy Management System SQL injection | 9.8v3.1 | 0.9% | 2023-05-16 | |
| CVE-2023-30510 | Authenticated server-side request forgery in Aruba EdgeConnect Enterprise Web Management interface | 4.1CNA v3.1 | 0.6% | 2023-05-16 | |
| CVE-2023-30509 | Authenticated remote path traversal in Aruba EdgeConnect Enterprise Command Line interface | 4.9CNA v3.1 | 0.6% | 2023-05-16 | |
| CVE-2023-30508 | Authenticated remote path traversal in Aruba EdgeConnect Enterprise Command Line interface | 4.9CNA v3.1 | 0.6% | 2023-05-16 | |
| CVE-2023-30507 | Authenticated remote path traversal in Aruba EdgeConnect Enterprise Command Line interface | 4.9CNA v3.1 | 0.6% | 2023-05-16 | |
| CVE-2023-30506 | Authenticated remote code execution in Aruba EdgeConnect Enterprise Command Line interface | 7.2CNA v3.1 | 1.1% | 2023-05-16 | |
| CVE-2023-30505 | Authenticated remote code execution in Aruba EdgeConnect Enterprise Command Line interface | 7.2CNA v3.1 | 1.0% | 2023-05-16 | |
| CVE-2023-30504 | Authenticated remote code execution in Aruba EdgeConnect Enterprise Command Line interface | 7.2CNA v3.1 | 1.0% | 2023-05-16 | |
| CVE-2023-30503 | Authenticated remote code execution in Aruba EdgeConnect Enterprise Command Line interface | 7.2CNA v3.1 | 1.0% | 2023-05-16 | |
| CVE-2023-30502 | Authenticated remote code execution in Aruba EdgeConnect Enterprise Command Line interface | 7.2CNA v3.1 | 1.1% | 2023-05-16 | |
| CVE-2023-30501 | Authenticated remote code execution in Aruba EdgeConnect Enterprise Command Line interface | 7.2CNA v3.1 | 1.0% | 2023-05-16 | |
| CVE-2023-30281 | Storecommander Scquickaccounting incorrect default permissions | 6.5NVD v3.1 | 0.5% | 2023-05-16 | |
| CVE-2023-30189 | Posthemes Posstaticblocks SQL injection | 9.8v3.1 | 0.8% | 2023-05-16 | |
| CVE-2023-29961 | D-Link DIR-605L Firmware out-of-bounds write | 9.8v3.1 | 1.2% | 2023-05-16 | |
| CVE-2023-29927 | Sage 300 incorrect authorization | 4.3v3.1 | 0.4% | 2023-05-16 | |
| CVE-2023-29439 | FooGallery WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 1.7% | 2023-05-16 | NucleiExploit codeFix |
| CVE-2023-28076 | Dell CloudLink weak cryptographic algorithm | 5.9CNA v3.1 | 0.4% | 2023-05-16 | Fix |
| CVE-2023-27742 | Idurarapp Idurar SQL injection | 9.8NVD v3.1 | 0.9% | 2023-05-16 | |
| CVE-2023-23727 | Live Chat by Formilla Real-time Chat and Chatbots WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-05-16 | Fix |
| CVE-2023-23720 | Verified Reviews (Avis Vérifiés) WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-05-16 | Fix |
| CVE-2023-23709 | WPJAM Basic WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-05-16 | Fix |
| CVE-2023-23703 | Arconix Shortcodes WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-05-16 | Fix |
| CVE-2023-23676 | File Gallery WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-05-16 | Fix |
| CVE-2023-23673 | I Recommend This WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-05-16 | Fix |
| CVE-2023-23657 | Mail Subscribe List WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-05-16 | Fix |
| CVE-2023-23641 | Uji Popup WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-05-16 | |
| CVE-2023-2740 | SourceCodester Guest Management System GET parameter dateTest.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-05-16 | |
| CVE-2023-2739 | Gira HomeServer hslist cross-site scripting | 6.1v3.1 | 0.5% | 2023-05-16 | |
| CVE-2023-2738 | Tongda OA GatewayController.php actionGetdata unrestricted upload | 9.8v3.1 | 0.9% | 2023-05-16 | |
| CVE-2023-2730 | Cross-site scripting (XSS) Stored in pimcore/pimcore | 5.4v3.1 | 0.5% | 2023-05-16 | Fix |
| CVE-2023-2726 | Google Chrome WebApp Installs inappropriate implementation | 8.8v3.1 | 0.7% | 2023-05-16 | Fix |
| CVE-2023-2725 | Google Chrome Guest view use-after-free | 8.8v3.1 | 24.7% | 2023-05-16 | Fix |
| CVE-2023-2724 | Google Chrome V8 type confusion | 8.8v3.1 | 29.1% | 2023-05-16 | Fix |
| CVE-2023-2723 | Google Chrome DevTools use-after-free | 8.8v3.1 | 15.4% | 2023-05-16 | Fix |
| CVE-2023-2722 | Google Chrome Autofill UI use-after-free | 8.8v3.1 | 0.9% | 2023-05-16 | Fix |
| CVE-2023-2721 | Google Chrome Navigation use-after-free | 8.8v3.1 | 0.9% | 2023-05-16 | Fix |
| CVE-2023-2710 | video carousel slider with lightbox WordPress plugin reflected cross-site scripting | 6.1v3.1 | 0.6% | 2023-05-16 | Fix |
| CVE-2023-2708 | Video Gallery WordPress plugin reflected cross-site scripting | 6.1v3.1 | 0.6% | 2023-05-16 | Fix |
| CVE-2023-2633 | API keys stored and displayed in plain text by Code Dx Plugin | 4.3v3.1 | 0.4% | 2023-05-16 | Fix |
| CVE-2023-2632 | API keys stored and displayed in plain text by Code Dx Plugin | 4.3v3.1 | 0.6% | 2023-05-16 | Fix |
| CVE-2023-2631 | CSRF vulnerability and missing permission checks in Code Dx Plugin | 4.3v3.1 | 0.4% | 2023-05-16 | Fix |
| CVE-2023-2548 | RegistrationMagic WordPress plugin insecure direct object reference | 7.2v3.1 | 0.7% | 2023-05-16 | Fix |
| CVE-2023-2499 | RegistrationMagic WordPress plugin authentication bypass | 9.8v3.1 | 1.3% | 2023-05-16 | Fix |
| CVE-2023-2196 | Missing permission checks in Code Dx Plugin | 4.3v3.1 | 1.0% | 2023-05-16 | Fix |
| CVE-2023-2195 | CSRF vulnerability and missing permission checks in Code Dx Plugin | 3.5NVD v3.1 | 0.4% | 2023-05-16 | Fix |
| CVE-2023-2161 | Schneider Electric OPC Factory Server (OFS) XML external entity injection | 5.0CNA v3.1 | 0.2% | 2023-05-16 | Fix |
| CVE-2023-32787 | OPC Foundation Ua Java Legacy resource exhaustion | 7.5v3.1 | 1.2% | 2023-05-15 | Fix |
| CVE-2023-32784 | KeePass cleartext transmission of sensitive information | 7.5NVD v3.1 | 4.4% | 2023-05-15 | Exploit codeFix |
| CVE-2023-32758 | Git-url-parse regular expression denial of service | 7.5v3.1 | 1.0% | 2023-05-15 | |
| CVE-2023-32314 | patriksimek vm2 sandbox escape | 9.8CNA v3.1 | 8.1% | 2023-05-15 | Exploit codeFix |
| CVE-2023-32313 | Inspect method manipulation in vm2 | 5.3CNA v3.1 | 0.8% | 2023-05-15 | Fix |
| CVE-2023-32309 | facelessuser pymdown-extensions arbitrary file inclusion with the pymdowm-snippets extension | 7.5CNA v3.1 | 1.7% | 2023-05-15 | Exploit codeFix |
| CVE-2023-32308 | SQL injection vulnerability in anuko timetracker | 8.2CNA v3.1 | 0.7% | 2023-05-15 | Fix |
| CVE-2023-32068 | URL redirection to untrusted site in XWiki | 4.7CNA v3.1 | 55.1% | 2023-05-15 | NucleiFix |
| CVE-2023-31986 | Edimax BR-6428NS Edimax Wireless Router N300 firmware command injection | 9.8v3.1 | 8.2% | 2023-05-15 | |
| CVE-2023-31845 | Faculty Evaluation System SQL injection | 7.2v3.1 | 0.8% | 2023-05-15 | |
| CVE-2023-31844 | Faculty Evaluation System SQL injection | 7.2v3.1 | 0.8% | 2023-05-15 | |
| CVE-2023-31843 | Faculty Evaluation System SQL injection | 7.2v3.1 | 0.8% | 2023-05-15 | |
| CVE-2023-31842 | Faculty Evaluation System SQL injection | 7.2v3.1 | 0.8% | 2023-05-15 | |
| CVE-2023-31631 | Openlinksw Virtuoso SQL injection | 7.5v3.1 | 0.9% | 2023-05-15 | Fix |
| CVE-2023-31630 | Openlinksw Virtuoso SQL injection | 7.5v3.1 | 0.9% | 2023-05-15 | Fix |
| CVE-2023-31629 | Openlinksw Virtuoso SQL injection | 7.5v3.1 | 0.9% | 2023-05-15 | Fix |
| CVE-2023-31628 | Openlinksw Virtuoso SQL injection | 7.5v3.1 | 0.9% | 2023-05-15 | Fix |
| CVE-2023-31627 | Openlinksw Virtuoso SQL injection | 7.5v3.1 | 0.9% | 2023-05-15 | Fix |
| CVE-2023-31626 | Openlinksw Virtuoso SQL injection | 7.5v3.1 | 0.9% | 2023-05-15 | Fix |
| CVE-2023-31625 | Openlinksw Virtuoso SQL injection | 7.5v3.1 | 0.9% | 2023-05-15 | Fix |
| CVE-2023-31624 | Openlinksw Virtuoso SQL injection | 7.5v3.1 | 0.9% | 2023-05-15 | Fix |
| CVE-2023-31623 | Openlinksw Virtuoso SQL injection | 7.5v3.1 | 0.9% | 2023-05-15 | Fix |
| CVE-2023-31622 | Openlinksw Virtuoso SQL injection | 7.5v3.1 | 0.9% | 2023-05-15 | Fix |
| CVE-2023-31621 | Openlinksw Virtuoso SQL injection | 7.5v3.1 | 0.9% | 2023-05-15 | Fix |
| CVE-2023-31620 | Openlinksw Virtuoso SQL injection | 7.5v3.1 | 0.9% | 2023-05-15 | Fix |
| CVE-2023-31619 | Openlinksw Virtuoso SQL injection | 7.5v3.1 | 0.9% | 2023-05-15 | Fix |
| CVE-2023-31618 | Openlinksw Virtuoso SQL injection | 7.5v3.1 | 0.9% | 2023-05-15 | Fix |
| CVE-2023-31617 | Openlinksw Virtuoso SQL injection | 7.5v3.1 | 0.9% | 2023-05-15 | Fix |
| CVE-2023-31616 | Openlinksw Virtuoso SQL injection | 7.5v3.1 | 0.9% | 2023-05-15 | Fix |
| CVE-2023-31615 | Openlinksw Virtuoso SQL injection | 7.5v3.1 | 0.9% | 2023-05-15 | Fix |
| CVE-2023-31614 | Openlinksw Virtuoso SQL injection | 7.5v3.1 | 0.9% | 2023-05-15 | Fix |
| CVE-2023-31613 | Openlinksw Virtuoso SQL injection | 7.5v3.1 | 0.9% | 2023-05-15 | Fix |
| CVE-2023-31612 | Openlinksw Virtuoso SQL injection | 7.5v3.1 | 0.9% | 2023-05-15 | Fix |
| CVE-2023-31611 | Openlinksw Virtuoso SQL injection | 7.5v3.1 | 0.9% | 2023-05-15 | Fix |
| CVE-2023-31610 | Openlinksw Virtuoso SQL injection | 7.5v3.1 | 0.9% | 2023-05-15 | Fix |
| CVE-2023-31609 | Openlinksw Virtuoso SQL injection | 7.5v3.1 | 0.9% | 2023-05-15 | Fix |
| CVE-2023-31608 | Openlinksw Virtuoso SQL injection | 7.5v3.1 | 0.9% | 2023-05-15 | Fix |
| CVE-2023-31607 | Openlinksw Virtuoso SQL injection | 7.5v3.1 | 0.9% | 2023-05-15 | Fix |
| CVE-2023-31409 | SICK FTMG-ESD15AXX AIR FLOW SENSOR resource exhaustion | 5.3CNA v3.1 | 1.1% | 2023-05-15 | |
| CVE-2023-31408 | SICK FTMG-ESD15AXX AIR FLOW SENSOR cleartext storage of sensitive information | 5.3CNA v3.1 | 0.4% | 2023-05-15 | |
| CVE-2023-31145 | Reflected XSS vulnerability in CollaboraOnline | 4.3CNA v3.1 | 0.4% | 2023-05-15 | Fix |
| CVE-2023-31131 | Arbitrary file write when Extracting Tarballs in greenplum-db | 7.4CNA v3.1 | 0.7% | 2023-05-15 | Fix |
| CVE-2023-30245 | Judging Management System SQL injection | 9.8v3.1 | 1.3% | 2023-05-15 | |
| CVE-2023-29862 | Agasio Camera code injection | 9.8v3.1 | 1.9% | 2023-05-15 | |
| CVE-2023-29861 | FLIR Dvtel Camera code injection | 9.8v3.1 | 1.8% | 2023-05-15 | |
| CVE-2023-23688 | Social Share Boost WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-05-15 | Fix |
| CVE-2023-23683 | White Label Branding for Elementor Page Builder WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-05-15 | |
| CVE-2023-23682 | EZP Maintenance Mode WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.5% | 2023-05-15 | |
| CVE-2023-23674 | WP Original Media Path WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-05-15 | Fix |
| CVE-2023-23654 | SparkPost WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-05-15 | Fix |
| CVE-2023-23450 | SICK FTMg air flow sensor REST interface vulnerability | 6.2CNA v3.1 | 0.7% | 2023-05-15 | |
| CVE-2023-23449 | SICK FTMG-ESD15AXX AIR FLOW SENSOR response discrepancy | 5.3CNA v3.1 | 0.8% | 2023-05-15 | |
| CVE-2023-23448 | SICK FTMG-ESD15AXX AIR FLOW SENSOR sensitive information in source code | 5.3CNA v3.1 | 0.8% | 2023-05-15 | |
| CVE-2023-23447 | SICK FTMG-ESD15AXX AIR FLOW SENSOR resource exhaustion | 7.5CNA v3.1 | 1.1% | 2023-05-15 | Fix |
| CVE-2023-23446 | SICK FTMG-ESD15AXX AIR FLOW SENSOR improper access control | 7.5CNA v3.1 | 0.9% | 2023-05-15 | Fix |
| CVE-2023-23445 | SICK FTMG-ESD15AXX AIR FLOW SENSOR improper access control | 7.5CNA v3.1 | 0.7% | 2023-05-15 | |
| CVE-2023-22717 | FormCraft WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-05-15 | Fix |
| CVE-2023-22706 | PropertyHive WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-05-15 | Fix |
| CVE-2023-22703 | WCP Contact Form WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-05-15 | |
| CVE-2023-22690 | Ebook Store WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-05-15 | Fix |
| CVE-2023-22684 | Subscribers Free Web Push Notifications WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-05-15 | Fix |
| CVE-2023-22318 | Tribe29 Checkmk Appliance denial of service against webconf | 7.5v3.1 | 0.5% | 2023-05-15 | Fix |
| CVE-2023-21118 | Android Sensor.cpp out-of-bounds read | 5.5v3.1 | 0.2% | 2023-05-15 | Exploit codeFix |
| CVE-2023-21117 | Android ActivityManagerService.java privilege escalation | 7.8v3.1 | 0.1% | 2023-05-15 | Fix |
| CVE-2023-21116 | Android InstallPackageHelper.java privilege escalation | 6.7v3.1 | 0.1% | 2023-05-15 | Fix |
| CVE-2023-21112 | Android NxpMfcReader.cc out-of-bounds read | 5.5v3.1 | 0.1% | 2023-05-15 | Fix |
| CVE-2023-21111 | Android PhoneAccountRegistrar.java denial of service | 5.5v3.1 | 0.1% | 2023-05-15 | Fix |
| CVE-2023-21110 | Android SnoozeHelper.java privilege escalation | 7.8v3.1 | 0.1% | 2023-05-15 | Fix |
| CVE-2023-21109 | Android AccessibilityService privilege escalation | 7.8v3.1 | 0.1% | 2023-05-15 | Exploit codeFix |
| CVE-2023-21107 | Android incorrect default permissions | 7.8v3.1 | 0.1% | 2023-05-15 | Fix |
| CVE-2023-21106 | Android adreno_gpu.c memory corruption | 7.8v3.1 | 0.1% | 2023-05-15 | Fix |
| CVE-2023-21104 | Android incorrect default permissions | 5.5v3.1 | 0.1% | 2023-05-15 | Fix |
| CVE-2023-21103 | Android information disclosure through error messages | 5.5v3.1 | 0.1% | 2023-05-15 | Fix |