CVE-2023 list

CVE-2023 records published in May 2023

Page two of two: records 1,001 to 1,956 of the 1,956 published in May 2023, newest first. The first page carries the figures for May 2023.

CVE-2023 records published in May 2023, newest first: records 1,001 to 1,956 of 1,956
CVE Summary CVSS EPSS Published Signals
CVE-2023-21102Android efi-rt-wrapper.S privilege escalation7.8v3.10.2%2023-05-15Fix
CVE-2023-20930Android ShortcutPackage.java denial of service5.5v3.10.1%2023-05-15Fix
CVE-2023-20914Android AdminRestrictedPermissionsUtils.java information disclosure5.5v3.10.1%2023-05-15Fix
CVE-2023-20726MediaTek chipsets improper access control in mnld3.3v3.10.1%2023-05-15Fix
CVE-2023-20722MediaTek chipsets improper input validation in m4u6.7v3.10.1%2023-05-15Fix
CVE-2023-20721MediaTek chipsets improper input validation in isp6.7NVD v3.10.1%2023-05-15Fix
CVE-2023-20720MediaTek chipsets improper input validation in pqframework6.7v3.10.1%2023-05-15Fix
CVE-2023-20719MediaTek chipsets improper input validation in pqframework4.4v3.10.1%2023-05-15Fix
CVE-2023-20718MediaTek chipsets improper input validation in vcu6.7v3.10.1%2023-05-15Fix
CVE-2023-20717MediaTek chipsets exposure of sensitive information to an unauthorized actor in vcu4.1v3.10.1%2023-05-15Fix
CVE-2023-20711MediaTek chipsets improper input validation in keyinstall4.4v3.10.1%2023-05-15Fix
CVE-2023-20710MediaTek chipsets improper input validation in keyinstall4.4v3.10.1%2023-05-15Fix
CVE-2023-20709MediaTek chipsets improper input validation in keyinstall4.4v3.10.1%2023-05-15Fix
CVE-2023-20708MediaTek chipsets improper input validation in keyinstall6.7v3.10.1%2023-05-15Fix
CVE-2023-20707MediaTek chipsets improper input validation in ril6.7v3.10.1%2023-05-15Fix
CVE-2023-20706MediaTek chipsets improper input validation in apu5.5v3.10.1%2023-05-15Fix
CVE-2023-20705MediaTek chipsets improper input validation in apu5.5v3.10.1%2023-05-15Fix
CVE-2023-20704MediaTek chipsets improper input validation in apu5.5v3.10.1%2023-05-15Fix
CVE-2023-20703MediaTek chipsets improper input validation in apu5.5v3.10.1%2023-05-15Fix
CVE-2023-20701MediaTek chipsets out-of-bounds write in widevine6.7v3.10.1%2023-05-15Fix
CVE-2023-20700MediaTek chipsets out-of-bounds write in widevine6.7v3.10.1%2023-05-15Fix
CVE-2023-20699MediaTek chipsets improper input validation in adsp6.7v3.10.1%2023-05-15Fix
CVE-2023-20698MediaTek chipsets improper input validation in keyinstall4.4v3.10.1%2023-05-15Fix
CVE-2023-20697MediaTek chipsets improper input validation in keyinstall4.4v3.10.1%2023-05-15Fix
CVE-2023-20696MediaTek chipsets improper input validation in preloader6.7v3.10.1%2023-05-15Exploit codeFix
CVE-2023-20695MediaTek chipsets improper input validation in preloader6.7v3.10.1%2023-05-15Fix
CVE-2023-20694MediaTek chipsets improper input validation in preloader6.7v3.10.1%2023-05-15Fix
CVE-2023-20673MediaTek chipsets incorrect comparison in vcu6.7v3.10.1%2023-05-15Fix
CVE-2023-2700Red Hat libvirt SR-IOV PCI device capability query memory leak5.5v3.10.3%2023-05-15Fix
CVE-2023-2180KIWIZ Invoices Certification and PDF System WordPress plugin unauthenticated arbitrary file download7.5NVD v3.10.9%2023-05-15
CVE-2023-2179WooCommerce Order Status Change Notifier WordPress plugin Subscriber+ arbitrary order Status update6.5NVD v3.10.3%2023-05-15
CVE-2023-2124Linux kernel An out-of-bounds access7.8NVD v3.10.5%2023-05-15Fix
CVE-2023-2009Pretty Url WordPress plugin Admin+ stored XSS in plugin settings4.8NVD v3.10.8%2023-05-15NucleiFix
CVE-2023-1915Thumbnail carousel slider WordPress plugin reflected XSS6.1NVD v3.10.5%2023-05-15Fix
CVE-2023-1890Tablesome WordPress plugin reflected XSS6.1NVD v3.11.1%2023-05-15NucleiFix
CVE-2023-1839Product Addons and Fields for WooCommerce WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.5%2023-05-15Fix
CVE-2023-1835Ninja Forms WordPress plugin reflected XSS6.1NVD v3.10.9%2023-05-15NucleiFix
CVE-2023-1729LibRaw raw2image_ex function buffer overflow6.5NVD v3.11.3%2023-05-15Fix
CVE-2023-1698WAGO: WBM command injection in multiple products9.8CNA v3.182.0%2023-05-15NucleiExploit codeFix
CVE-2023-1596tagDiv Composer WordPress plugin reflected cross-site scripting6.1NVD v3.10.5%2023-05-15Fix
CVE-2023-1549Ad Inserter WordPress plugin Admin+ PHP object injection7.2NVD v3.116.9%2023-05-15Fix
CVE-2023-1207HTTP Headers WordPress plugin Admin+ SQL injection7.2NVD v3.10.9%2023-05-15Fix
CVE-2023-1019Help Desk WP WordPress plugin Editor+ stored XSS5.4NVD v3.10.5%2023-05-15
CVE-2023-0892BizLibrary WordPress plugin Admin+ stored XSS4.8NVD v3.10.5%2023-05-15
CVE-2023-0812Active Directory Integration / LDAP Integration WordPress plugin unauthenticated data disclosure7.5NVD v3.10.8%2023-05-15Fix
CVE-2023-0763Clock In Portal WordPress plugin Holidays deletion via CSRF4.3NVD v3.10.3%2023-05-15
CVE-2023-0762Clock In Portal WordPress plugin Designation deletion via CSRF4.3NVD v3.10.3%2023-05-15
CVE-2023-0761Clock In Portal WordPress plugin Staff deletion via CSRF4.3NVD v3.10.3%2023-05-15
CVE-2023-0644PushAssist WordPress plugin reflected cross-site scripting6.1NVD v3.10.5%2023-05-15
CVE-2023-0600WP Visitor Statistics (Real Time Traffic) WordPress plugin unauthenticated SQLi9.8NVD v3.14.2%2023-05-15NucleiFix
CVE-2023-0520RapidExpCart WordPress plugin stored XSS via CSRF5.4NVD v3.10.2%2023-05-15
CVE-2023-0490f(x) TOC WordPress plugin Contributor+ stored XSS5.4NVD v3.10.5%2023-05-15
CVE-2023-0233ActiveCampaign WordPress plugin Contributor+ stored XSS5.4NVD v3.10.5%2023-05-15Fix
CVE-2023-2699SourceCodester Lost and Found Information System GET parameter SQL injection9.8v3.10.8%2023-05-14
CVE-2023-2698SourceCodester Lost and Found Information System GET parameter SQL injection9.8v3.10.8%2023-05-14
CVE-2023-2697SourceCodester Online Exam System POST parameter data SQL injection9.8v3.10.8%2023-05-14
CVE-2023-2696SourceCodester Online Exam System POST parameter data SQL injection9.8v3.10.8%2023-05-14
CVE-2023-2695SourceCodester Online Exam System POST parameter data SQL injection9.8v3.10.8%2023-05-14
CVE-2023-2694SourceCodester Online Exam System POST parameter data SQL injection9.8v3.10.8%2023-05-14
CVE-2023-2693SourceCodester Online Exam System POST parameter data SQL injection9.8v3.10.8%2023-05-14
CVE-2023-2692SourceCodester ICT Laboratory Management System GET parameter room_info.php cross-site scripting6.1v3.10.6%2023-05-14
CVE-2023-2691SourceCodester Personnel Property Equipment System POST parameter add_item.php cross-site scripting5.4v3.10.6%2023-05-14
CVE-2023-2690SourceCodester Personnel Property Equipment System returned_reuse_form.php SQL injection8.8v3.10.8%2023-05-14
CVE-2023-2689SourceCodester Billing Management System GET parameter editproduct.php SQL injection8.8v3.10.8%2023-05-14
CVE-2023-32306anuko timetracker Time Tracker has blind SQL injection vulnerability in Reports8.8CNA v3.10.7%2023-05-12Fix
CVE-2023-32305aiven-extras PostgreSQL privilege escalation through Overloaded Search Path8.8CNA v3.10.7%2023-05-12Fix
CVE-2023-32303Planet's secret file is created with excessive permissions5.2CNA v3.10.3%2023-05-12Fix
CVE-2023-32243Essential Addons for Elementor WordPress plugin WPDeveloper improper authentication9.8NVD v3.175.5%2023-05-12NucleiEmerging ThreatsExploit codeFix
CVE-2023-32081Eclipse Vert.x STOMP authentication handler improper authentication6.5CNA v3.10.5%2023-05-12Fix
CVE-2023-32073AVideo command injection8.8CNA v3.16.5%2023-05-12Exploit code
CVE-2023-31985Edimax BR-6428NS Edimax Wireless Router N300 firmware command injection9.8v3.18.1%2023-05-12
CVE-2023-31983Edimax BR-6428NS Edimax Wireless Router N300 firmware command injection9.8v3.124.9%2023-05-12Emerging Threats
CVE-2023-31922QuickJS out-of-bounds write7.5v3.10.7%2023-05-12
CVE-2023-31921JerryScript reachable assertion5.5v3.10.3%2023-05-12
CVE-2023-31920JerryScript reachable assertion5.5v3.10.3%2023-05-12
CVE-2023-31919JerryScript reachable assertion5.5v3.10.3%2023-05-12
CVE-2023-31918JerryScript reachable assertion5.5v3.10.3%2023-05-12
CVE-2023-31916JerryScript reachable assertion5.5v3.10.3%2023-05-12
CVE-2023-31914JerryScript resource exhaustion5.5v3.10.3%2023-05-12
CVE-2023-31913JerryScript reachable assertion5.5v3.10.3%2023-05-12
CVE-2023-31199Intel(R) Solid State Drive Toolbox(TM) improper access control7.1CNA v3.10.2%2023-05-12Fix
CVE-2023-31197Intel(R) Trace Analyzer and Collector uncontrolled search path6.7CNA v3.10.2%2023-05-12Fix
CVE-2023-30768Improper access control in the Intel(R) Server Board S2600WTT belonging to the Intel(R) Server Board S2600WT Family with the BIOS version 0016 may allow a privileged user to potentially enable escalation of privilege via local access.7.1CNA v3.10.2%2023-05-12Fix
CVE-2023-30763Intel(R) SoC Watch based software heap-based buffer overflow7.2CNA v3.10.2%2023-05-12Fix
CVE-2023-30330Softexpert Excellence Suite untrusted search path9.8v3.15.9%2023-05-12Exploit code
CVE-2023-30247Storage Unit Rental Management System Oretnom23 file upload9.8v3.11.5%2023-05-12
CVE-2023-30246Judging Management System SQL injection9.8v3.11.3%2023-05-12
CVE-2023-30192PrestaShop Possearchproducts SQL injection9.8v3.12.7%2023-05-12Nuclei
CVE-2023-30130CraftCMS allows remote attacker to execute arbitrary code via crafted script to Section parameter8.8v3.11.4%2023-05-12
CVE-2023-29983Companymaps Maximilian Vogt cmaps v.8.0 cross-site scripting5.4v3.15.1%2023-05-12Exploit code
CVE-2023-29820Webroot Secure Anywhere files accessible to external parties5.5v3.10.2%2023-05-12
CVE-2023-29819Webroot Secure Anywhere improper privilege management5.5v3.10.2%2023-05-12
CVE-2023-29818Webroot Secure Anywhere incorrect authorization5.5v3.10.2%2023-05-12
CVE-2023-29809Companymaps Maximilian Vogt SQL injection9.8v3.110.5%2023-05-12Exploit code
CVE-2023-29808Companymaps vogtmh cmaps cross-site scripting6.1v3.11.4%2023-05-12Exploit code
CVE-2023-29790kodcloud kodbox untrusted search path7.5v3.10.6%2023-05-12
CVE-2023-29657eXtplorer unrestricted file upload8.8v3.11.1%2023-05-12
CVE-2023-29246Apache OpenMeetings: Allows null-byte injection7.2v3.11.5%2023-05-12Fix
CVE-2023-29242Intel(R) oneAPI Toolkits improper access control6.7CNA v3.10.1%2023-05-12Fix
CVE-2023-29032Apache OpenMeetings: Allows bypass authentication8.1v3.11.1%2023-05-12Fix
CVE-2023-28936Apache OpenMeetings: Insufficient check of invitation hash5.3v3.11.2%2023-05-12Fix
CVE-2023-28522IBM API Connect improper access control4.3CNA v3.10.5%2023-05-12Fix
CVE-2023-28520IBM Planning Analytics Local cross-site scripting6.4CNA v3.10.4%2023-05-12Fix
CVE-2023-28414ApexChat WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-12Fix
CVE-2023-27863IBM Spectrum Protect Plus Server information disclosure4.4CNA v3.10.6%2023-05-12Fix
CVE-2023-27823Optoma 1080pstx An authentication bypass9.8v3.153.3%2023-05-12Exploit code
CVE-2023-27238LavaLite vulnerable to web cache poisoning9.8v3.10.9%2023-05-12
CVE-2023-27237LavaLite CMS vulnerable to host header injection attack6.1v3.10.6%2023-05-12
CVE-2023-25958Simple Tooltips WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-12
CVE-2023-25927IBM Security Verify Access denial of service6.5CNA v3.11.5%2023-05-12Fix
CVE-2023-25460Easy Ad Manager WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-12
CVE-2023-25428Soft-o Free Password Manager DLL hijacking7.8v3.10.5%2023-05-12
CVE-2023-25009Autodesk 3ds Max USD Plugin out-of-bounds write7.8v3.10.2%2023-05-12Fix
CVE-2023-25008Autodesk 3ds Max USD Plugin out-of-bounds read7.8v3.10.2%2023-05-12Fix
CVE-2023-25007Autodesk 3ds Max USD Plugin uninitialized pointer access7.8v3.10.2%2023-05-12Fix
CVE-2023-25006Autodesk 3ds Max USD Plugin use-after-free7.8v3.10.2%2023-05-12Fix
CVE-2023-25005Autodesk InfraWorks uncontrolled search path7.8v3.10.2%2023-05-12Fix
CVE-2023-23867Button Builder Buttons X WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-05-12
CVE-2023-23810Panorama WordPress Project Management plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-12Fix
CVE-2023-23444SICK UE410-EN3 FLEXI ETHERNET GATEW missing authentication7.5CNA v3.11.2%2023-05-12
CVE-2023-23169Synapsoft Pdfocus path traversal6.5v3.11.0%2023-05-12Exploit code
CVE-2023-22685Category Specific RSS feed Subscription WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-12Fix
CVE-2023-20880VMware Aria Operations incorrect authorization6.7v3.10.2%2023-05-12Fix
CVE-2023-20879VMware Aria Operations local privilege escalation6.7v3.10.2%2023-05-12Fix
CVE-2023-20878VMware Aria Operations deserialization of untrusted data7.2v3.11.0%2023-05-12Fix
CVE-2023-20877VMware Aria Operations incorrect authorization8.8v3.10.7%2023-05-12Fix
CVE-2023-2682Caton Live Mini_HTTPD ping.cgi command injection9.8NVD v3.11.9%2023-05-12
CVE-2023-2678SourceCodester File Tracker Manager System POST parameter save_user.php cross-site scripting5.4v3.10.6%2023-05-12
CVE-2023-2677SourceCodester Covid-19 Contact Tracing System manage.php SQL injection8.8v3.10.8%2023-05-12
CVE-2023-2676H3C R160 aspForm stack-based overflow9.8v3.11.0%2023-05-12
CVE-2023-2674Improper access control in openemr/openemr4.3NVD v3.10.6%2023-05-12Fix
CVE-2023-2672SourceCodester Lost and Found Information System GET parameter view.php SQL injection9.8v3.10.8%2023-05-12
CVE-2023-2671SourceCodester Lost and Found Information System Contact form cross-site scripting6.1v3.10.6%2023-05-12
CVE-2023-2670SourceCodester Lost and Found Information System access control8.8v3.10.8%2023-05-12
CVE-2023-2669SourceCodester Lost and Found Information System GET parameter SQL injection9.8v3.10.8%2023-05-12
CVE-2023-2668SourceCodester Lost and Found Information System GET parameter manager_category SQL injection9.8v3.10.8%2023-05-12
CVE-2023-2667SourceCodester Lost and Found Information System cross-site scripting6.1v3.10.7%2023-05-12
CVE-2023-2666Allocation of resources without limits or throttling in froxlor/froxlor7.5v3.10.7%2023-05-12Fix
CVE-2023-2665Storage of sensitive data in a mechanism without access control in francoisjacquet/RosarioSIS7.5v3.10.6%2023-05-12Fix
CVE-2023-2515Mattermost privilege escalation to system admin via personal access tokens4.7CNA v3.10.5%2023-05-12Fix
CVE-2023-2514Mattermost DB username/password revealed in application logs6.7CNA v3.10.5%2023-05-12
CVE-2023-2512Buffer under-read in workerd6.5CNA v3.10.6%2023-05-12Fix
CVE-2023-2458Google Chrome ChromeOS Camera use-after-free8.8v3.10.5%2023-05-12Fix
CVE-2023-2457Google Chrome ChromeOS Audio Server out-of-bounds write8.8v3.10.4%2023-05-12Fix
CVE-2023-2181GitLab merge request review vulnerability6.3CNA v3.10.7%2023-05-12Fix
CVE-2023-2088OpenStack expected behavior violation6.5NVD v3.11.2%2023-05-12Fix
CVE-2023-1934SDG Technologies PnPSCADA SQL injection7.5NVD v3.18.1%2023-05-12Exploit codeFix
CVE-2023-1096SnapCenter missing authentication9.8v3.11.0%2023-05-12Fix
CVE-2023-32668LuaTeX socket library vulnerability5.5v3.10.4%2023-05-11Fix
CVE-2023-32082Etcd key name can be accessed via LeaseTimeToLive API3.1CNA v3.10.7%2023-05-11Fix
CVE-2023-32075Pimcore Customer Management Framework Conditions tab improper input validation4.3CNA v3.10.8%2023-05-11Fix
CVE-2023-32059Vyper vulnerable to incorrect ordering of arguments for kwargs passed to internal calls7.5CNA v3.10.7%2023-05-11Fix
CVE-2023-32058Vyper vulnerable to integer overflow in loop7.5CNA v3.10.9%2023-05-11Fix
CVE-2023-31531Motorola CX2L command injection8.8v3.12.2%2023-05-11
CVE-2023-31530Motorola CX2L command injection8.8v3.12.4%2023-05-11
CVE-2023-31529Motorola CX2L command injection8.8v3.12.2%2023-05-11
CVE-2023-31528Motorola CX2L command injection8.8v3.12.2%2023-05-11
CVE-2023-31502Apsystems Ecu-c insufficient verification of data authenticity7.2v3.10.7%2023-05-11
CVE-2023-31498PHPGurukul Hospital Management System privilege escalation9.8v3.12.1%2023-05-11
CVE-2023-31497Seqrite Endpoint Security privilege escalation7.8v3.10.5%2023-05-11Exploit code
CVE-2023-31477GL.iNet Gl-a1300 path traversal7.5v3.10.9%2023-05-11
CVE-2023-31475GL.iNet Gl-a1300 buffer overflow9.8v3.113.7%2023-05-11
CVE-2023-31473GL.iNet Gl-a1300 command injection4.9v3.13.9%2023-05-11
CVE-2023-31445Cassia Networks Access Controller incorrect permission assignment5.3NVD v3.11.1%2023-05-11
CVE-2023-31442Lightbend Akka async-dns resolver vulnerability7.5v3.10.6%2023-05-11Fix
CVE-2023-31146Vyper vulnerable to OOB DynArray access when array is on both LHS and RHS of an assignment7.5CNA v3.11.2%2023-05-11Fix
CVE-2023-30394MOVEit cross-site scripting6.1v3.10.6%2023-05-11
CVE-2023-30256Webkul QloApps Webkil cross-site scripting6.1NVD v3.19.1%2023-05-11NucleiExploit code
CVE-2023-30172LF Projects MLflow mflow vulnerable to directory traversal7.5v3.11.0%2023-05-11Fix
CVE-2023-29986spring-boot-actuator-logview path traversal5.3v3.10.7%2023-05-11
CVE-2023-29863Medisys Weblab SQL injection9.8v3.10.9%2023-05-11
CVE-2023-29791kodcloud kodbox cross-site scripting6.1v3.10.4%2023-05-11
CVE-2023-29400Improper handling of empty HTML attributes in html/template7.3v3.11.0%2023-05-11Fix
CVE-2023-29286Adobe Substance 3D Painter USD File Parsing uninitialized variable information disclosure5.5CNA v3.10.3%2023-05-11Fix
CVE-2023-29285Adobe Substance 3D Painter USD File Parsing out-of-bounds write remote code execution7.8CNA v3.10.3%2023-05-11Fix
CVE-2023-29284Adobe Substance 3D Painter USDA File Parsing stack-based buffer overflow remote code execution7.8CNA v3.10.4%2023-05-11Fix
CVE-2023-29283Adobe Substance 3D Painter USD File Parsing heap-based buffer overflow remote code execution7.8CNA v3.10.4%2023-05-11Fix
CVE-2023-29282Adobe Substance 3D Painter USD File Parsing out-of-bounds write remote code execution7.8CNA v3.10.3%2023-05-11Fix
CVE-2023-29281Adobe Substance 3D Painter USD File Parsing out-of-bounds read remote code execution7.8CNA v3.10.3%2023-05-11Fix
CVE-2023-29280Adobe Substance 3D Painter PLY File Parsing out-of-bounds read information disclosure7.8CNA v3.10.3%2023-05-11Fix
CVE-2023-29279Adobe Substance 3D Painter USD File Parsing out-of-bounds read information disclosure5.5CNA v3.10.3%2023-05-11Fix
CVE-2023-29278Adobe Substance 3D Painter GLTF File Parsing uninitialized variable information disclosure7.8CNA v3.10.3%2023-05-11Fix
CVE-2023-29277Adobe Substance 3D Painter USD File Parsing out-of-bounds read information disclosure5.5CNA v3.10.3%2023-05-11Fix
CVE-2023-29276Adobe Substance 3D Painter USD File Parsing out-of-bounds write remote code execution7.8CNA v3.10.3%2023-05-11Fix
CVE-2023-29275Adobe Substance 3D Painter USD File Parsing out-of-bounds read remote code execution7.8CNA v3.10.3%2023-05-11Fix
CVE-2023-29274Adobe Substance 3D Painter USDC File Parsing out-of-bounds read remote code execution7.8CNA v3.10.3%2023-05-11Fix
CVE-2023-29273Adobe Substance 3D Painter USDC File Parsing out-of-bounds read remote code execution7.8CNA v3.10.3%2023-05-11Fix
CVE-2023-29195Vitess VTAdmin users that can create shards can deny access to other functions4.1CNA v3.11.0%2023-05-11Fix
CVE-2023-29031Rockwell Automation ArmorStart ST vulnerable to cross-site scripting Attack7.0CNA v3.10.5%2023-05-11Fix
CVE-2023-29030Rockwell Automation ArmorStart ST vulnerable to cross-site scripting Attack7.0CNA v3.10.5%2023-05-11Fix
CVE-2023-29029Rockwell Automation ArmorStart ST vulnerable to cross-site scripting Attack4.7CNA v3.10.6%2023-05-11Fix
CVE-2023-29028Rockwell Automation ArmorStart ST vulnerable to cross-site scripting Attack4.7CNA v3.10.6%2023-05-11Fix
CVE-2023-29027Rockwell Automation ArmorStart ST vulnerable to cross-site scripting Attack4.7CNA v3.10.6%2023-05-11Fix
CVE-2023-29026Rockwell Automation ArmorStart ST vulnerable to cross-site scripting Attack4.7CNA v3.10.6%2023-05-11Fix
CVE-2023-29025Rockwell Automation ArmorStart ST vulnerable to cross-site scripting Attack4.7CNA v3.10.6%2023-05-11Fix
CVE-2023-29024Rockwell Automation ArmorStart ST vulnerable to cross-site scripting Attack5.5CNA v3.10.6%2023-05-11Fix
CVE-2023-29023Rockwell Automation ArmorStart ST vulnerable to cross-site scripting Attack7.0CNA v3.10.5%2023-05-11Fix
CVE-2023-29022Rockwell Automation ArmorStart ST vulnerable to cross-site scripting Attack4.7CNA v3.10.6%2023-05-11Fix
CVE-2023-28361UniFi OS cross-site request forgery6.5v3.10.3%2023-05-11Fix
CVE-2023-28360Brave download safety check vulnerability4.3v3.10.8%2023-05-11
CVE-2023-28359Rocket.Chat SQL injection5.3v3.10.6%2023-05-11
CVE-2023-28358Rocket.Chat cross-site scripting6.1v3.10.4%2023-05-11
CVE-2023-28357Rocket.Chat information disclosure4.3v3.10.4%2023-05-11
CVE-2023-28356Rocket.Chat resource exhaustion7.5v3.10.7%2023-05-11
CVE-2023-28325Rocket.Chat An improper authorization6.5v3.10.4%2023-05-11
CVE-2023-27870IBM Spectrum Virtualize information disclosure5.9CNA v3.10.7%2023-05-11Fix
CVE-2023-27554IBM WebSphere Application Server XML external entity injection6.3CNA v3.10.9%2023-05-11Fix
CVE-2023-25309Cross-site scripting (XSS) vulnerability in Fetlife Rollout-ui gem6.1v3.10.5%2023-05-11Fix
CVE-2023-24540Improper handling of JavaScript whitespace in html/template9.8v3.11.6%2023-05-11Fix
CVE-2023-24539Improper sanitization of CSS values in html/template7.3v3.11.0%2023-05-11Fix
CVE-2023-22720WP Links Page WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-05-11Fix
CVE-2023-2664Stack overflow in Xpdf due to object loop in PDF embedded file tree2.9CNA v3.10.3%2023-05-11Fix
CVE-2023-2663Stack overflow in Xpdf due to object loop in PDF page label tree2.9CNA v3.10.5%2023-05-11Fix
CVE-2023-2662Divide-by-zero in Xpdf due to bad color space object2.9CNA v3.10.3%2023-05-11Fix
CVE-2023-2661SourceCodester Online Computer and Laptop Store Master.php SQL injection9.8v3.10.8%2023-05-11
CVE-2023-2660SourceCodester Online Computer and Laptop Store view_categories.php SQL injection9.8NVD v3.10.8%2023-05-11
CVE-2023-2659SourceCodester Online Computer and Laptop Store view_product.php SQL injection9.8v3.10.8%2023-05-11
CVE-2023-2658SourceCodester Online Computer and Laptop Store products.php SQL injection9.8v3.10.9%2023-05-11
CVE-2023-2657SourceCodester Online Computer and Laptop Store products.php cross-site scripting6.1v3.10.7%2023-05-11
CVE-2023-2656SourceCodester AC Repair and Services System SQL injection9.8v3.10.9%2023-05-11
CVE-2023-2653SourceCodester Lost and Found Information System index.php SQL injection9.8v3.10.7%2023-05-11
CVE-2023-2652SourceCodester Lost and Found Information System SQL injection9.8v3.10.7%2023-05-11
CVE-2023-2649Tenda AC23 Service Port 7329 ate command injection8.8v3.19.7%2023-05-11
CVE-2023-2648Weaver E-Office uploadify.php unrestricted upload9.8v3.128.5%2023-05-11Nuclei
CVE-2023-2647Weaver E-Office file upload utility_all.php command injection8.8v3.17.0%2023-05-11
CVE-2023-2646TP-Link Archer C7v2 GET request parameter denial of service6.5NVD v3.10.3%2023-05-11
CVE-2023-2645USR USR-G806 web management page hard-coded password9.8v3.13.2%2023-05-11
CVE-2023-2644DigitalPersona FPSensor DpHost.exe unquoted search path7.8v3.10.2%2023-05-11
CVE-2023-2643SourceCodester File Tracker Manager System POST parameter update_password.php SQL injection9.8v3.10.7%2023-05-11
CVE-2023-2642SourceCodester Online Exam System GET parameter updateCourse.php SQL injection9.8v3.10.7%2023-05-11
CVE-2023-2641SourceCodester Online Internship Management System POST parameter login.php SQL injection9.8v3.10.8%2023-05-11
CVE-2023-2490UserAgent-Spy WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-11
CVE-2023-2444Rockwell Automation FactoryTalk Vantagepoint Rockwell Automation's cross-site request forgery7.1CNA v3.10.4%2023-05-11Fix
CVE-2023-2443Rockwell Automation ThinManager inadequate encryption strength7.5CNA v3.10.7%2023-05-11Fix
CVE-2023-1834Rockwell Automation Kinetix 5500 vulnerable to Open Port Exploitation9.4CNA v3.11.3%2023-05-11Fix
CVE-2023-0859Canon Office/Small Office Multifunction Printers and Laser Printers improper index validation2.2CNA v3.10.5%2023-05-11
CVE-2023-0858Canon Office/Small Office Multifunction Printers and Laser Printers improper authentication3.1CNA v3.10.6%2023-05-11
CVE-2023-0857Canon Office/Small Office Multifunction Printers and Laser Printers incorrect user management5.9CNA v3.10.6%2023-05-11
CVE-2023-0856Canon Office/Small Office Multifunction Printers and Laser Printers buffer overflow9.8CNA v3.11.1%2023-05-11
CVE-2023-0855Canon Office/Small Office Multifunction Printers and Laser Printers buffer overflow9.8CNA v3.11.1%2023-05-11
CVE-2023-0854Canon Office/Small Office Multifunction Printers and Laser Printers buffer overflow9.8CNA v3.11.2%2023-05-11
CVE-2023-0853Canon Office/Small Office Multifunction Printers and Laser Printers buffer overflow9.8CNA v3.11.2%2023-05-11
CVE-2023-0852Canon Office/Small Office Multifunction Printers and Laser Printers buffer overflow9.8CNA v3.11.1%2023-05-11
CVE-2023-0851Canon Office/Small Office Multifunction Printers and Laser Printers buffer overflow9.8CNA v3.11.1%2023-05-11
CVE-2023-32573Qt divide by zero6.5v3.10.9%2023-05-10Fix
CVE-2023-32570VideoLAN dav1d race condition5.9v3.10.7%2023-05-10Fix
CVE-2023-32569Veritas Infoscale Operations Manager SQL injection9.8v3.10.6%2023-05-10Fix
CVE-2023-32568Veritas Infoscale Operations Manager OS command injection7.2v3.10.7%2023-05-10Fix
CVE-2023-32080Wings vulnerable to escape to host from installation container9.1CNA v3.10.9%2023-05-10Fix
CVE-2023-32076in-toto vulnerable to Configuration Read from Local Directory5.5CNA v3.10.2%2023-05-10Fix
CVE-2023-32070Improper neutralization of script in attributes in XWiki (X)HTML renderers9.1CNA v3.10.7%2023-05-10Fix
CVE-2023-31910JerryScript out-of-bounds write7.8v3.10.3%2023-05-10
CVE-2023-31908JerryScript out-of-bounds write7.8v3.10.3%2023-05-10
CVE-2023-31907JerryScript out-of-bounds write7.8v3.10.3%2023-05-10
CVE-2023-31906JerryScript out-of-bounds write7.8v3.10.3%2023-05-10
CVE-2023-31568podofo out-of-bounds write8.8v3.10.8%2023-05-10
CVE-2023-31567podofo out-of-bounds write8.8v3.10.7%2023-05-10Fix
CVE-2023-31566podofo use-after-free8.8v3.10.7%2023-05-10Fix
CVE-2023-31556podofo out-of-bounds write6.5NVD v3.10.7%2023-05-10
CVE-2023-31555podofo PdfObject delayed loading vulnerability6.5v3.10.6%2023-05-10
CVE-2023-31471An issue was discovered on GL.iNet devices before 3.216. Through the software installation feature, it is possible to install arbitrary software, such as a reverse shell, because the restrictions on the available package list are limited to client-side verification. It is possible to install softwar9.8v3.11.1%2023-05-10
CVE-2023-31166Schweitzer Engineering Laboratories RTAC web interface path traversal4.1CNA v3.10.6%2023-05-10Fix
CVE-2023-31165Schweitzer Engineering Laboratories RTAC web interface cross-site scripting4.3CNA v3.10.4%2023-05-10Fix
CVE-2023-31164Schweitzer Engineering Laboratories RTAC web interface cross-site scripting4.3CNA v3.10.4%2023-05-10Fix
CVE-2023-31163Schweitzer Engineering Laboratories RTAC web interface cross-site scripting4.3CNA v3.10.4%2023-05-10Fix
CVE-2023-31162Schweitzer Engineering Laboratories SEL-3505 improper input validation in Web interface4.8CNA v3.10.5%2023-05-10Fix
CVE-2023-31161Schweitzer Engineering Laboratories SEL-3532 improper input validation in Web interface5.9CNA v3.10.5%2023-05-10Fix
CVE-2023-31160Schweitzer Engineering Laboratories RTAC web interface cross-site scripting4.3CNA v3.10.4%2023-05-10Fix
CVE-2023-31159Schweitzer Engineering Laboratories RTAC web interface cross-site scripting4.3CNA v3.10.4%2023-05-10Fix
CVE-2023-31158Schweitzer Engineering Laboratories RTAC web interface cross-site scripting4.3CNA v3.10.4%2023-05-10Fix
CVE-2023-31157Schweitzer Engineering Laboratories RTAC web interface cross-site scripting4.3CNA v3.10.4%2023-05-10Fix
CVE-2023-31156Schweitzer Engineering Laboratories RTAC web interface cross-site scripting4.3CNA v3.10.4%2023-05-10Fix
CVE-2023-31155Schweitzer Engineering Laboratories RTAC web interface cross-site scripting4.3CNA v3.10.4%2023-05-10Fix
CVE-2023-31154Schweitzer Engineering Laboratories RTAC web interface cross-site scripting4.3CNA v3.10.4%2023-05-10Fix
CVE-2023-31153Schweitzer Engineering Laboratories RTAC web interface cross-site scripting4.3CNA v3.10.4%2023-05-10Fix
CVE-2023-31152Schweitzer Engineering Laboratories SEL-3505 authentication bypass4.0CNA v3.10.4%2023-05-10Fix
CVE-2023-31151Schweitzer Engineering Laboratories SEL-3505 improper certificate validation4.7CNA v3.10.2%2023-05-10Fix
CVE-2023-31150Schweitzer Engineering Laboratories SEL-3505 storing passwords in a recoverable format8.0CNA v3.10.5%2023-05-10Fix
CVE-2023-31149Schweitzer Engineering Laboratories SEL-3505 improper input validation in Web interface9.1CNA v3.11.1%2023-05-10Fix
CVE-2023-31148Schweitzer Engineering Laboratories SEL-3505 improper input validation in Web interface9.1CNA v3.11.1%2023-05-10Fix
CVE-2023-30777WP Engine Advanced Custom Fields reflected cross-site scripting6.1NVD v3.137.9%2023-05-10NucleiExploit codeFix
CVE-2023-30746Booqable Rental WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-10Fix
CVE-2023-30356Tenda CP3 improper integrity check validation7.5v3.10.3%2023-05-10
CVE-2023-30354Tenda CP3 cleartext transmission of sensitive information9.8v3.10.4%2023-05-10
CVE-2023-30353Tenda CP3 command injection9.8v3.11.2%2023-05-10
CVE-2023-30352Tenda CP3 hard-coded credentials9.8v3.10.7%2023-05-10
CVE-2023-30351Tenda CP3 inadequate encryption strength7.5v3.10.2%2023-05-10
CVE-2023-30194PrestaShop Poststaticfooter SQL injection9.8v3.132.4%2023-05-10Nuclei
CVE-2023-29930Genesys TFTP Server unrestricted file upload8.8v3.12.0%2023-05-10Exploit code
CVE-2023-29101Betheme WordPress theme cross-site scripting (XSS)6.1NVD v3.10.4%2023-05-10Fix
CVE-2023-28932WPMobile.App WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-10Fix
CVE-2023-28411Intel(R) Server Board BMC firmware some double free6.3CNA v3.10.2%2023-05-10Fix
CVE-2023-28410Intel(R) i915 Graphics drivers memory corruption8.8CNA v3.10.3%2023-05-10Fix
CVE-2023-27919NEXT ENGINE Integration Plugin authentication bypass5.3v3.10.7%2023-05-10
CVE-2023-27918TMS Appointment and Event Booking Calendar for WordPress cross-site scripting6.1v3.10.5%2023-05-10Fix
CVE-2023-27889LIQUID DESIGN LIQUID SPEECH BALLOON cross-site request forgery8.8v3.10.5%2023-05-10Fix
CVE-2023-27888SiteBridge Joruri Gw cross-site scripting5.4v3.10.5%2023-05-10Fix
CVE-2023-27564n8n information disclosure7.5v3.11.2%2023-05-10Exploit codeFix
CVE-2023-27563n8n privilege escalation8.8v3.11.2%2023-05-10Fix
CVE-2023-27562n8n directory traversal6.5v3.12.3%2023-05-10Fix
CVE-2023-27527The Ministry of Justice Shinseiyo Sogo Soft XML external entity injection7.5v3.10.3%2023-05-10Fix
CVE-2023-27510Jubei JB Inquiry form personal information exposure7.5v3.10.7%2023-05-10Fix
CVE-2023-27455Maui Marketing Update Image Tag Alt Attribute reflected cross-site scripting6.1NVD v3.10.4%2023-05-10Fix
CVE-2023-27419Viable blog WordPress theme cross-site scripting (XSS)6.1NVD v3.10.4%2023-05-10
CVE-2023-27386Intel(R) Pathfinder for RISC-V software some uncontrolled search path6.7CNA v3.10.2%2023-05-10Fix
CVE-2023-27385OMRON CX-Drive All models heap-based buffer overflow7.8v3.10.2%2023-05-10Fix
CVE-2023-27382Intel(R) NUC P14E Laptop Element software Audio service for some incorrect default permissions6.7CNA v3.10.1%2023-05-10Fix
CVE-2023-27298WULT software maintained by Intel(R) uncontrolled search path8.8CNA v3.10.7%2023-05-10Fix
CVE-2023-26126m.static directory traversal5.3NVD v3.11.0%2023-05-10
CVE-2023-25833Bug-000155004 HTML injection issue in Portal for ArcGIS5.4CNA v3.10.4%2023-05-10Fix
CVE-2023-25776Intel(R) Server Board BMC firmware some improper input validation6.3CNA v3.10.2%2023-05-10Fix
CVE-2023-25772Intel(R) Retail Edge Mobile Android application improper input validation5.0CNA v3.10.2%2023-05-10Fix
CVE-2023-25771Intel(R) NUC BIOS firmware improper access control5.8CNA v3.10.1%2023-05-10Fix
CVE-2023-25568Boxo bitswap/server: DOS unbounded persistent memory leak8.2CNA v3.10.9%2023-05-10Fix
CVE-2023-25545Intel(R) Server Board BMC firmware privilege escalation8.2CNA v3.10.2%2023-05-10Fix
CVE-2023-25184Seiko Solutions SkyBridge MB-A200 weak credentials7.5v3.11.0%2023-05-10Fix
CVE-2023-25179Intel(R) Unite(R) android application resource exhaustion5.0CNA v3.10.2%2023-05-10Fix
CVE-2023-25175Intel(R) Server Board BMC firmware some improper input validation6.1CNA v3.10.2%2023-05-10Fix
CVE-2023-25072Seiko Solutions SkyBridge MB-A100/110 weak credentials7.5v3.10.8%2023-05-10Fix
CVE-2023-25070Seiko Solutions SkyBridge MB-A100/110 cleartext transmission of sensitive information6.5v3.10.5%2023-05-10Fix
CVE-2023-24586Seiko Solutions SkyBridge MB-A100/110 cleartext storage of sensitive information6.5v3.10.6%2023-05-10Fix
CVE-2023-24475Intel(R) Server Board BMC firmware some out-of-bounds read6.0CNA v3.10.2%2023-05-10Fix
CVE-2023-24418Tiny carousel horizontal slider plus WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-10
CVE-2023-24406Simple Popup Images WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-10
CVE-2023-24392Full Width Banner Slider Wp WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-05-10Fix
CVE-2023-23910Intel(R) Trace Analyzer and Collector software out-of-bounds write3.9CNA v3.10.2%2023-05-10Fix
CVE-2023-23909Intel(R) Trace Analyzer and Collector software out-of-bounds read2.8CNA v3.10.2%2023-05-10Fix
CVE-2023-23906Seiko Solutions SkyBridge MB-A100/110 missing authentication7.5v3.11.3%2023-05-10Fix
CVE-2023-23901Seiko Solutions SkyBridge MB-A200 and SkyBridge BASIC MB-A130 improper certificate validation6.5v3.10.5%2023-05-10Fix
CVE-2023-23873BBSpoiler WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-05-10Fix
CVE-2023-23812Enhanced WP Contact Form WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-10Fix
CVE-2023-23794Semalt Blocker WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-10
CVE-2023-23789Premmerce Redirect Manager WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-10Fix
CVE-2023-23788Custom More Link Complete WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-10
CVE-2023-23786affiliate-toolkit WordPress Affiliate plugin cross-site scripting (XSS)5.4v3.10.4%2023-05-10Fix
CVE-2023-23701Easy Sign Up WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-05-10
CVE-2023-23580Intel(R) Trace Analyzer and Collector software stack-based buffer overflow4.8CNA v3.10.2%2023-05-10Fix
CVE-2023-23578Seiko-sol Skybridge Mb-a200 Firmware improper access control7.5v3.12.0%2023-05-10Fix
CVE-2023-23573Intel(R) Unite(R) android application improper access control4.4CNA v3.10.2%2023-05-10Fix
CVE-2023-23569Intel(R) Trace Analyzer and Collector software stack-based buffer overflow7.8CNA v3.10.2%2023-05-10Fix
CVE-2023-22711IMPress Listings WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-05-10
CVE-2023-22696Affiliate Links Lite WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-05-10Fix
CVE-2023-22661Intel(R) Server Board BMC firmware some buffer overflow8.2CNA v3.10.2%2023-05-10Fix
CVE-2023-22447Open CAS software sensitive information in log files2.0CNA v3.10.2%2023-05-10Fix
CVE-2023-22443Intel(R) Server Board BMC firmware some integer overflow6.0CNA v3.10.2%2023-05-10Fix
CVE-2023-22442Intel(R) Server Board BMC firmware some out-of-bounds write7.9CNA v3.10.2%2023-05-10Fix
CVE-2023-22441Seiko Solutions SkyBridge MB-A200 and SkyBridge BASIC MB-A130 missing authentication8.6v3.11.0%2023-05-10Fix
CVE-2023-22440Intel(R) SCS Add-on software installer for Microsoft SCCM incorrect default permissions6.7CNA v3.10.1%2023-05-10Fix
CVE-2023-22379Intel(R) Server Board BMC firmware some improper input validation6.7CNA v3.10.2%2023-05-10Fix
CVE-2023-22361Seiko Solutions SkyBridge MB-A100/110 improper privilege management6.5v3.135.9%2023-05-10Fix
CVE-2023-22355Intel(R) oneAPI Toolkit and component software installers some uncontrolled search path6.7CNA v3.10.2%2023-05-10Fix
CVE-2023-22312Intel(R) NUC BIOS firmware improper access control7.2CNA v3.10.2%2023-05-10Fix
CVE-2023-22297Intel(R) Server Board BMC firmware some out-of-bounds access8.2CNA v3.10.2%2023-05-10Fix
CVE-2023-2630Cross-site scripting (XSS) Stored in pimcore/pimcore4.8v3.10.6%2023-05-10Fix
CVE-2023-2629Improper neutralization of formula elements in a CSV file in pimcore/customer-data-framework7.8v3.10.4%2023-05-10Fix
CVE-2023-2619SourceCodester Online Tours and Travels Management System disapprove_delete.php exec SQL injection9.8v3.10.7%2023-05-10
CVE-2023-2618OpenCV wechat_qrcode Module decoded_bit_stream_parser.cpp decodeHanziSegment memory leak7.5v3.11.3%2023-05-10Fix
CVE-2023-2617OpenCV wechat_qrcode Module decoded_bit_stream_parser.cpp decodeByteSegment null pointer dereference7.5v3.11.4%2023-05-10Fix
CVE-2023-2616Cross-site scripting (XSS) Generic in pimcore/pimcore5.4v3.10.5%2023-05-10Fix
CVE-2023-2615Cross-site scripting (XSS) Reflected in pimcore/pimcore5.4v3.10.5%2023-05-10Fix
CVE-2023-2614Cross-site scripting (XSS) DOM in pimcore/pimcore5.4v3.10.5%2023-05-10Fix
CVE-2023-2310Schweitzer Engineering Laboratories SEL-3505 channel accessible by non-endpoint6.8CNA v3.10.5%2023-05-10Fix
CVE-2023-1732Improper random reading in CIRCL5.3CNA v3.10.4%2023-05-10Fix
CVE-2023-0008PAN-OS: Local File Disclosure vulnerability in the PAN-OS Web interface4.4CNA v3.10.5%2023-05-10Fix
CVE-2023-0007PAN-OS: Stored cross-site scripting (XSS) vulnerability in the Panorama Web interface6.5CNA v3.10.4%2023-05-10Fix
CVE-2023-32113Information disclosure vulnerability in SAP GUI for Windows7.5CNA v3.10.5%2023-05-09Fix
CVE-2023-32112Missing authorization Check in Vendor Master Hierarchy2.8CNA v3.10.1%2023-05-09Fix
CVE-2023-32111Memory corruption vulnerability in SAP PowerDesigner (Proxy)7.5CNA v3.10.6%2023-05-09Fix
CVE-2023-32071XWiki Platform vulnerable to RXSS via editor parameter importinline template9.1CNA v3.170.4%2023-05-09Fix
CVE-2023-32069XWiki Platform privilege escalation (PR)/RCE from account through class sheet10.0CNA v3.10.8%2023-05-09Fix
CVE-2023-32066anuko timetracker time Tracker has stored XSS vulnerability in Week view plugin5.4CNA v3.10.4%2023-05-09Fix
CVE-2023-32060DHIS2 Core tracked entity instance API improper access control6.5CNA v3.10.5%2023-05-09Fix
CVE-2023-31982irontec sngrep out-of-bounds write7.8v3.10.3%2023-05-09Fix
CVE-2023-31981irontec sngrep out-of-bounds write7.8v3.10.3%2023-05-09Fix
CVE-2023-31979Fossies catdoc buffer overflow7.8v3.10.3%2023-05-09
CVE-2023-31976Libming out-of-bounds write8.8v3.10.7%2023-05-09
CVE-2023-31975Yasm intnum library memory leak3.3v3.10.5%2023-05-09Fix
CVE-2023-31974Tortall Yasm use-after-free5.5v3.10.3%2023-05-09
CVE-2023-31973Tortall Yasm memory leak5.5NVD v3.10.3%2023-05-09
CVE-2023-31972Tortall Yasm use-after-free5.5v3.10.3%2023-05-09
CVE-2023-31807chamilo-lms cross-site scripting5.4v3.10.4%2023-05-09Fix
CVE-2023-31806chamilo-lms cross-site scripting5.4v3.10.4%2023-05-09Fix
CVE-2023-31805chamilo-lms cross-site scripting4.8v3.10.4%2023-05-09Fix
CVE-2023-31804chamilo-lms cross-site scripting5.4v3.10.4%2023-05-09Fix
CVE-2023-31803chamilo-lms cross-site scripting4.8v3.10.4%2023-05-09Fix
CVE-2023-31802chamilo-lms cross-site scripting5.4v3.10.4%2023-05-09Fix
CVE-2023-31801chamilo-lms cross-site scripting6.1v3.10.4%2023-05-09Fix
CVE-2023-31800chamilo-lms cross-site scripting5.4v3.10.4%2023-05-09Fix
CVE-2023-31799chamilo-lms cross-site scripting4.8v3.10.4%2023-05-09Fix
CVE-2023-31490FRRouting denial of service7.5v3.12.2%2023-05-09Fix
CVE-2023-31489FRRouting denial of service5.5v3.11.0%2023-05-09Fix
CVE-2023-31478GL.iNet devices API endpoint information disclosure7.5v3.129.7%2023-05-09Nuclei
CVE-2023-31476GL.iNet Gl-mv1000 command injection7.5v3.10.8%2023-05-09
CVE-2023-31474An issue was discovered on GL.iNet devices before 3.216. Through the software installation feature, it is possible to inject arbitrary parameters in a request to cause opkg to obtain a list of files in a specific directory, by using the regex feature in a package name.7.5v3.10.8%2023-05-09
CVE-2023-31472GL.iNet Gl-a1300 resource exhaustion7.5v3.119.9%2023-05-09
CVE-2023-31407Cross-site scripting (XSS) vulnerability in SAP Business Planning and Consolidation5.4CNA v3.10.3%2023-05-09Fix
CVE-2023-31406Cross-site scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform6.1CNA v3.10.5%2023-05-09Fix
CVE-2023-31404Information disclosure in SAP BusinessObjects Business Intelligence Platform5.0CNA v3.10.5%2023-05-09Fix
CVE-2023-31144Craft CMS vulnerable to cross-site scripting in RSS feed widget6.1CNA v3.10.4%2023-05-09Fix
CVE-2023-31143Mage terminal user authentication not working properly5.9CNA v3.10.7%2023-05-09Fix
CVE-2023-31139DHIS2 Core unrestricted session cookies with Personal Access Tokens4.3CNA v3.10.6%2023-05-09Fix
CVE-2023-31138DHIS2 Core vulnerable to improper access control with PATCH requests7.1CNA v3.10.6%2023-05-09Fix
CVE-2023-31137MaraDNS integer underflow vulnerability in DNS Packet Decompression7.5CNA v3.11.1%2023-05-09Fix
CVE-2023-31136vapor postgres-nio PostgresNIO processes unencrypted bytes from man-in-the-middle3.7CNA v3.10.5%2023-05-09Fix
CVE-2023-31134Tauri open redirect vulnerability Possibly exposes IPC to External Sites4.8CNA v3.10.5%2023-05-09Fix
CVE-2023-31126XWiki HTML sanitizer cross-site scripting9.1CNA v3.10.8%2023-05-09Fix
CVE-2023-30986Siemens Solid Edge SE2023 memory corruption7.8CNA v3.10.2%2023-05-09Fix
CVE-2023-30985Siemens Solid Edge SE2023 out-of-bounds read3.3CNA v3.10.2%2023-05-09Fix
CVE-2023-30899Siemens Siveillance Video 2020 R2 deserialization of untrusted data9.9CNA v3.11.1%2023-05-09Fix
CVE-2023-30898Siemens Siveillance Video 2020 R2 deserialization of untrusted data9.9CNA v3.11.1%2023-05-09Fix
CVE-2023-30744Improper access control during application start-up in SAP AS NetWeaver JAVA8.2CNA v3.10.6%2023-05-09Fix
CVE-2023-30743Improper neutralization of Input in SAPUI57.1CNA v3.10.4%2023-05-09Fix
CVE-2023-30742Cross-site scripting (XSS) vulnerability in SAP CRM (WebClient UI)6.1CNA v3.10.4%2023-05-09Fix
CVE-2023-30741Cross-site scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform6.1CNA v3.10.4%2023-05-09Fix
CVE-2023-30740Information disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform6.3CNA v3.10.5%2023-05-09Fix
CVE-2023-30237Cyberghostvpn Cyberghost uncontrolled search path7.8v3.10.4%2023-05-09
CVE-2023-30088Cesanta mJS denial of service5.5v3.10.3%2023-05-09
CVE-2023-30087Cesanta mJS buffer overflow5.5v3.10.3%2023-05-09
CVE-2023-30086libtiff buffer overflow5.5v3.10.3%2023-05-09Fix
CVE-2023-30085Libming buffer overflow5.5v3.10.2%2023-05-09
CVE-2023-30084Libming out-of-bounds read5.5v3.10.2%2023-05-09
CVE-2023-30083Libming buffer overflow5.5v3.10.2%2023-05-09
CVE-2023-30057Fico Origination Manager Decision stored cross-site scripting5.4v3.10.5%2023-05-09
CVE-2023-30056Fico Origination Manager Decision takeover7.5v3.10.7%2023-05-09
CVE-2023-29462Rockwell Automation Arena Simulation software remote code execution7.8CNA v3.10.9%2023-05-09Fix
CVE-2023-29461Rockwell Automation Arena Simulation software remote code execution7.8CNA v3.10.9%2023-05-09Fix
CVE-2023-29460Rockwell Automation Arena Simulation software remote code execution7.8CNA v3.10.9%2023-05-09Fix
CVE-2023-29343Microsoft SysInternals Sysmon for Windows elevation of privilege7.8CNA v3.11.7%2023-05-09Exploit codeFix
CVE-2023-29341Microsoft AV1 Video Extension remote code execution7.8CNA v3.10.7%2023-05-09Fix
CVE-2023-29340Microsoft AV1 Video Extension remote code execution7.8CNA v3.10.7%2023-05-09Fix
CVE-2023-29338Microsoft Visual Studio Code spoofing6.6CNA v3.10.9%2023-05-09Fix
CVE-2023-29336Microsoft Win32K privilege escalation7.8CNA v3.141.2%2023-05-09KEVExploit codeFix
CVE-2023-29335Microsoft Word security feature bypass7.5CNA v3.11.2%2023-05-09Fix
CVE-2023-29333Microsoft Access denial of service3.3CNA v3.10.6%2023-05-09Fix
CVE-2023-29325Microsoft Windows OLE remote code execution8.1CNA v3.183.9%2023-05-09Fix
CVE-2023-29324Microsoft Windows MSHTML Platform security feature bypass6.5CNA v3.12.9%2023-05-09Exploit codeFix
CVE-2023-29188Cross-site scripting (XSS) vulnerability in SAP CRM WebClient UI5.4CNA v3.10.4%2023-05-09Fix
CVE-2023-29128Siemens SIMATIC Cloud Connect 7 CC712 path traversal3.8CNA v3.10.7%2023-05-09Fix
CVE-2023-29107Siemens SIMATIC Cloud Connect 7 CC712 files accessible to external parties5.3CNA v3.10.6%2023-05-09Fix
CVE-2023-29106Siemens SIMATIC Cloud Connect 7 CC712 information disclosure5.3CNA v3.10.7%2023-05-09Fix
CVE-2023-29105Siemens SIMATIC Cloud Connect 7 CC712 denial of service5.9CNA v3.10.6%2023-05-09Fix
CVE-2023-29104Siemens SIMATIC Cloud Connect 7 CC712 path traversal6.0CNA v3.10.7%2023-05-09Fix
CVE-2023-29103Siemens SIMATIC Cloud Connect 7 CC712 hard-coded password4.3CNA v3.10.4%2023-05-09Fix
CVE-2023-29092Samsung Exynos 1080 incorrect permission assignment7.8v3.10.2%2023-05-09Fix
CVE-2023-28832Siemens SIMATIC Cloud Connect 7 CC712 command injection7.2CNA v3.11.5%2023-05-09Fix
CVE-2023-28764Information disclosure vulnerability in SAP BusinessObjects Platform3.7CNA v3.10.5%2023-05-09Fix
CVE-2023-28762Information disclosure in SAP BusinessObjects Intelligence Platform9.1CNA v3.10.7%2023-05-09Fix
CVE-2023-28318Rocket.Chat improper authorization5.3v3.10.3%2023-05-09
CVE-2023-28317Rocket.Chat improper authorization5.3v3.10.2%2023-05-09
CVE-2023-28316Rocket.Chat session fixation9.8v3.10.7%2023-05-09
CVE-2023-28290Microsoft Remote Desktop App for Windows information disclosure5.3CNA v3.11.2%2023-05-09Fix
CVE-2023-28283Microsoft Windows Lightweight Directory Access Protocol (LDAP) remote code execution8.1CNA v3.11.0%2023-05-09Fix
CVE-2023-28251Microsoft Windows Driver Revocation List security feature bypass5.5CNA v3.10.5%2023-05-09Fix
CVE-2023-28128Avalanche unrestricted file upload7.2v3.184.7%2023-05-09MetasploitExploit codeFix
CVE-2023-28127Avalanche path traversal7.5v3.158.6%2023-05-09Fix
CVE-2023-28126Avalanche authentication bypass5.9v3.166.7%2023-05-09Fix
CVE-2023-28125Avalanche improper authentication5.9v3.12.3%2023-05-09Fix
CVE-2023-27410Siemens SCALANCE LPE9403 heap-based buffer overflow2.7CNA v3.10.6%2023-05-09Fix
CVE-2023-27409Siemens SCALANCE LPE9403 path traversal2.5CNA v3.10.2%2023-05-09Fix
CVE-2023-27408Siemens SCALANCE LPE9403 insecure temporary file3.3CNA v3.10.2%2023-05-09Fix
CVE-2023-27407Siemens SCALANCE LPE9403 command injection9.9CNA v3.11.3%2023-05-09Fix
CVE-2023-25834Esri Portal for ArcGIS bug-000142922 Incomplete permission changes in specific cases5.4CNA v3.10.3%2023-05-09Fix
CVE-2023-25832Bug-000148346 There is a cross-site request forgery (CSRF) vulnerability in Portal for ArcGIS8.8CNA v3.10.3%2023-05-09Fix
CVE-2023-25831Bug-000154236 There is a reflected cross-site scripting (XSS) vulnerability in Portal for ArcGIS6.1CNA v3.10.5%2023-05-09Fix
CVE-2023-25830Bug-000154662 reflected XSS vulnerability in Portal for ArcGIS6.1CNA v3.10.5%2023-05-09Fix
CVE-2023-25829Bug-000155001 unvalidated redirect in Portal for ArcGIS6.1CNA v3.10.5%2023-05-09Fix
CVE-2023-24955Microsoft SharePoint Server code injection7.2CNA v3.185.0%2023-05-09KEVMetasploitEmerging ThreatsExploit codeKCVFix
CVE-2023-24954Microsoft SharePoint server information disclosure6.5CNA v3.11.8%2023-05-09Fix
CVE-2023-24953Microsoft Excel remote code execution7.8CNA v3.10.7%2023-05-09Fix
CVE-2023-24950Microsoft SharePoint server spoofing6.5CNA v3.167.5%2023-05-09Fix
CVE-2023-24949Microsoft Windows Kernel elevation of privilege7.8CNA v3.124.6%2023-05-09Fix
CVE-2023-24948Microsoft Windows Bluetooth driver elevation of privilege7.4CNA v3.11.0%2023-05-09Fix
CVE-2023-24947Microsoft Windows Bluetooth driver remote code execution8.8CNA v3.10.7%2023-05-09Fix
CVE-2023-24946Microsoft Windows Backup service elevation of privilege7.8CNA v3.10.4%2023-05-09Fix
CVE-2023-24945Microsoft Windows iSCSI Target service information disclosure5.5CNA v3.10.6%2023-05-09Fix
CVE-2023-24944Microsoft Windows Bluetooth driver information disclosure6.5CNA v3.10.7%2023-05-09Fix
CVE-2023-24943Microsoft Windows Pragmatic General Multicast (PGM) remote code execution9.8CNA v3.14.7%2023-05-09Fix
CVE-2023-24942Microsoft Windows Remote Procedure Call Runtime denial of service7.5CNA v3.11.9%2023-05-09Fix
CVE-2023-24941Microsoft Windows Network File System remote code execution9.8CNA v3.194.7%2023-05-09Fix
CVE-2023-24940Microsoft Windows Pragmatic General Multicast (PGM) denial of service7.5CNA v3.15.2%2023-05-09Fix
CVE-2023-24939Microsoft Windows server for NFS denial of service7.5CNA v3.14.7%2023-05-09Fix
CVE-2023-24932Microsoft Windows secure Boot security feature bypass6.7CNA v3.110.6%2023-05-09Reported exploitedExploit codeKCVFix
CVE-2023-24905Microsoft Windows remote Desktop client remote code execution7.8CNA v3.10.7%2023-05-09Fix
CVE-2023-24904Microsoft Windows Installer elevation of privilege7.1CNA v3.10.6%2023-05-09Fix
CVE-2023-24903Microsoft Windows Secure Socket Tunneling Protocol (SSTP) remote code execution8.1CNA v3.10.9%2023-05-09Fix
CVE-2023-24902Microsoft Windows win32k elevation of privilege7.8CNA v3.15.1%2023-05-09Fix
CVE-2023-24901Microsoft Windows NFS Portmapper information disclosure7.5CNA v3.11.6%2023-05-09Fix
CVE-2023-24900Microsoft Windows NTLM Security Support Provider information disclosure5.9CNA v3.11.2%2023-05-09Fix
CVE-2023-24899Microsoft Windows Graphics component elevation of privilege7.0CNA v3.10.3%2023-05-09Fix
CVE-2023-24898Microsoft Windows SMB denial of service7.5CNA v3.12.1%2023-05-09Fix
CVE-2023-24372Simple Custom Author Profiles WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-09
CVE-2023-23884Kanban Boards for WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-09
CVE-2023-23883WP Content Filter Censor All Offensive Content From Your Site WordPress plugin cross-site scripting4.8v3.10.4%2023-05-09Fix
CVE-2023-23863TreePress Easy Family Trees and Ancestor Profiles WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-09Fix
CVE-2023-23862Vertical scroll recent post WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-05-09
CVE-2023-23793Read More Without Refresh WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-09Fix
CVE-2023-23734Userlike WordPress Live Chat plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-09Fix
CVE-2023-23733Lazy Social Comments WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-09Fix
CVE-2023-23732Disqus Conditional Load WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-09Fix
CVE-2023-23664ConvertBox Auto Embed WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-05-09Fix
CVE-2023-23647Team Member WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-05-09Fix
CVE-2023-20524AMD 2nd Gen AMD EPYC™ out-of-bounds write7.5v3.10.5%2023-05-09Fix
CVE-2023-20520AMD 1st Gen AMD EPYC™ ASP Bootloader improper access control9.8v3.10.8%2023-05-09Fix
CVE-2023-20098Cisco SD-WAN vManage path traversal4.4CNA v3.10.5%2023-05-09Fix
CVE-2023-20046Cisco ASR 5000 Series Software authentication bypass8.8CNA v3.10.9%2023-05-09Fix
CVE-2023-2610Integer overflow or wraparound in Vim/Vim7.8v3.10.5%2023-05-09Fix
CVE-2023-2609Null pointer dereference in Vim/Vim5.5NVD v3.10.5%2023-05-09Fix
CVE-2023-2596SourceCodester Online Reviewer System GET parameter user-update.php SQL injection9.8v3.10.8%2023-05-09
CVE-2023-2595SourceCodester Billing Management System POST parameter ajax_service.php SQL injection9.8v3.10.8%2023-05-09
CVE-2023-2594SourceCodester Food Ordering Management System Registration SQL injection9.8v3.11.0%2023-05-09Exploit code
CVE-2023-2591Improper neutralization of input during web page generation in nilsteampassnet/TeamPass5.4NVD v3.10.6%2023-05-09Fix
CVE-2023-2590Missing authorization in answerdev/Answer3.5NVD v3.10.5%2023-05-09Fix
CVE-2023-2156Linux kernel (RPL protocol) reachable assertion7.5NVD v3.16.1%2023-05-09Fix
CVE-2023-32233Linux kernel use-after-free7.8NVD v3.113.4%2023-05-08Reported exploitedExploit codeFix
CVE-2023-31183Cybonet PineApp Mail Secure RXSS vulnerability6.1v3.10.4%2023-05-08Fix
CVE-2023-31182EasyTor Applications authorization bypass9.8v3.10.6%2023-05-08
CVE-2023-31181WJJ Software InnoKB Server, InnoKB/Console path traversal7.5v3.10.7%2023-05-08Fix
CVE-2023-31180WJJ Software InnoKB Server, InnoKB/Console reflected cross-site scripting (RXSS)6.1v3.10.4%2023-05-08Fix
CVE-2023-31179AgilePoint NX SU2.2 and SU2.3 path traversal7.5v3.10.7%2023-05-08Fix
CVE-2023-31178AgilePoint NX SU2.2 and SU2.3 arbitrary file delete9.1v3.10.6%2023-05-08Fix
CVE-2023-31141OpenSearch issue with fine-grained access control during extremely rare race conditions4.8CNA v3.10.5%2023-05-08Fix
CVE-2023-31140OpenProject user sessions not terminated after activation of 2FA4.8CNA v3.10.9%2023-05-08Fix
CVE-2023-31133Ghost vulnerable to disclosure of private API fields7.5CNA v3.145.7%2023-05-08Fix
CVE-2023-31129Contiki-NG missing null pointer check in IPv6 neighbor discovery7.5CNA v3.10.6%2023-05-08Fix
CVE-2023-31127DMTF libspdm DMTF-2023-0001: SPDM mutual authentication bypass9.1CNA v3.10.9%2023-05-08Fix
CVE-2023-31125Uncaught exception in engine.io6.5CNA v3.11.3%2023-05-08Fix
CVE-2023-31123effectindex tripreporter login endpoint improper authentication9.1CNA v3.10.6%2023-05-08Fix
CVE-2023-31039Apache bRPC: ServerOptions.pid_file may cause arbitrary code execution9.8v3.11.5%2023-05-08Fix
CVE-2023-31038Apache LOG4CXX: SQL injection when using ODBC appender8.8v3.11.6%2023-05-08Fix
CVE-2023-30860WWBN AVideo meeting scheduler stored cross-site scripting8.0CNA v3.10.7%2023-05-08Fix
CVE-2023-30855Pimcore path traversal vulnerability in AdminBundle/Controller/Reports/CustomReportController.php6.5CNA v3.10.8%2023-05-08Fix
CVE-2023-30844Mutagen list and monitor commands escape sequence injection3.0CNA v3.10.7%2023-05-08Fix
CVE-2023-30840Fluid CSI node plugin service account privilege escalation5.8CNA v3.10.2%2023-05-08Fix
CVE-2023-30837Vyper storage allocator overflow7.5CNA v3.10.7%2023-05-08Fix
CVE-2023-30790MonicaHQ cross-site scripting5.4v3.10.6%2023-05-08
CVE-2023-30789MonicaHQ cross-site scripting5.4v3.10.7%2023-05-08
CVE-2023-30788MonicaHQ cross-site scripting5.4v3.10.6%2023-05-08
CVE-2023-30787MonicaHQ cross-site scripting5.4v3.10.6%2023-05-08
CVE-2023-30551Rekor's compressed archives can result in OOM conditions7.5CNA v3.11.1%2023-05-08Fix
CVE-2023-30334Asmbb cross-site scripting6.1v3.10.6%2023-05-08Fix
CVE-2023-30257Fiio M6 component /proc/ftxxxx-debug buffer overflow7.8v3.10.4%2023-05-08
CVE-2023-30185CRMEB unrestricted file upload9.8v3.11.1%2023-05-08Exploit code
CVE-2023-30092Online Pizza Ordering System SQL injection9.8v3.11.0%2023-05-08Exploit code
CVE-2023-30019imgproxy is vulnerable to server-side request forgery5.3v3.12.2%2023-05-08NucleiFix
CVE-2023-30018Judging Management System SQL injection9.8v3.10.8%2023-05-08
CVE-2023-29944metersphere OS command injection9.8v3.12.1%2023-05-08
CVE-2023-29696H3C GR-1200W out-of-bounds write9.8v3.10.9%2023-05-08
CVE-2023-29693H3C GR-1200W out-of-bounds write9.8v3.10.9%2023-05-08
CVE-2023-29247Stored XSS on Apache Airflow5.4v3.11.9%2023-05-08Fix
CVE-2023-28493Newsmag WordPress theme cross-site scripting (XSS)5.4v3.10.4%2023-05-08
CVE-2023-28201Apple macOS race condition9.8v3.11.2%2023-05-08Fix
CVE-2023-28200Apple macOS observable discrepancy5.5v3.10.3%2023-05-08Fix
CVE-2023-28194The issue was addressed with improved checks. This issue is fixed in iOS 16.4 and iPadOS 16.4. An app may be able to unexpectedly create a bookmark on the Home Screen.3.3v3.10.2%2023-05-08Fix
CVE-2023-28192Apple macOS incorrect default permissions5.5v3.10.2%2023-05-08Fix
CVE-2023-28190Apple macOS information disclosure5.5v3.10.2%2023-05-08Fix
CVE-2023-28189Apple macOS information disclosure5.5v3.10.2%2023-05-08Fix
CVE-2023-28182Apple macOS improper authentication6.5v3.10.7%2023-05-08Fix
CVE-2023-28181Apple macOS arbitrary code execution7.8v3.10.2%2023-05-08Fix
CVE-2023-28180Apple macOS denial of service6.5v3.10.9%2023-05-08Fix
CVE-2023-28178Apple macOS logic flaw5.5v3.10.2%2023-05-08Fix
CVE-2023-28169Easy Event calendar WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-08
CVE-2023-27970Apple iOS and iPadOS out-of-bounds write7.8v3.10.2%2023-05-08Fix
CVE-2023-27969Apple macOS use-after-free7.8v3.10.2%2023-05-08Fix
CVE-2023-27968Apple macOS buffer overflow7.1v3.10.3%2023-05-08Fix
CVE-2023-27967Apple Xcode arbitrary code execution8.6v3.10.2%2023-05-08Fix
CVE-2023-27966Apple macOS sandbox escape6.3v3.10.2%2023-05-08Fix
CVE-2023-27965Apple macOS out-of-bounds write7.8v3.10.3%2023-05-08Fix
CVE-2023-27963Apple macOS missing authorization7.5v3.10.8%2023-05-08Fix
CVE-2023-27962Apple macOS origin validation error5.5v3.10.2%2023-05-08Fix
CVE-2023-27961Apple macOS improper quantity validation5.5v3.10.2%2023-05-08Fix
CVE-2023-27960Apple macOS privilege escalation7.8v3.10.2%2023-05-08Fix
CVE-2023-27959Apple iOS and iPadOS out-of-bounds write7.8v3.10.2%2023-05-08Fix
CVE-2023-27958Apple macOS resource exhaustion9.1v3.11.6%2023-05-08Fix
CVE-2023-27957Apple macOS buffer overflow7.8v3.10.2%2023-05-08Fix
CVE-2023-27956Apple macOS buffer overflow5.5v3.10.2%2023-05-08Fix
CVE-2023-27955Apple macOS buffer overflow5.5v3.10.2%2023-05-08Fix
CVE-2023-27954Apple macOS incorrect authorization6.5v3.10.9%2023-05-08Fix
CVE-2023-27953Apple macOS out-of-bounds write9.8v3.11.6%2023-05-08Fix
CVE-2023-27952Apple macOS race condition4.7v3.10.2%2023-05-08Fix
CVE-2023-27951Apple macOS incorrect authorization5.5v3.10.2%2023-05-08Fix
CVE-2023-27949Apple macOS out-of-bounds read7.8v3.10.3%2023-05-08Fix
CVE-2023-27946Apple macOS out-of-bounds read7.8v3.10.3%2023-05-08Fix
CVE-2023-27945Apple macOS out-of-bounds read6.3v3.10.2%2023-05-08Fix
CVE-2023-27944Apple macOS origin validation error8.6v3.10.2%2023-05-08Fix
CVE-2023-27943Apple iOS and iPadOS quarantine flag check vulnerability5.5v3.10.3%2023-05-08Fix
CVE-2023-27942Apple macOS insecure storage of sensitive information5.5v3.10.2%2023-05-08Fix
CVE-2023-27941Apple macOS improper quantity validation5.5v3.10.3%2023-05-08Fix
CVE-2023-27938Apple macOS out-of-bounds read7.8v3.10.3%2023-05-08Fix
CVE-2023-27937Apple macOS integer overflow7.8v3.10.3%2023-05-08Fix
CVE-2023-27936Apple macOS out-of-bounds write7.8v3.10.3%2023-05-08Fix
CVE-2023-27935Apple macOS buffer overflow8.8v3.11.7%2023-05-08Fix
CVE-2023-27934Apple macOS buffer overflow8.8v3.11.8%2023-05-08Fix
CVE-2023-27933Apple macOS out-of-bounds write6.7v3.10.3%2023-05-08Fix
CVE-2023-27932Apple macOS origin validation error5.5v3.10.2%2023-05-08Fix
CVE-2023-27931Apple macOS observable discrepancy5.5v3.10.2%2023-05-08Fix
CVE-2023-27929Apple macOS out-of-bounds read5.5v3.10.2%2023-05-08Fix
CVE-2023-27928Apple iOS and iPadOS system log entries vulnerability3.3v3.10.2%2023-05-08Fix
CVE-2023-25754Apache Airflow: Privilege escalation using Airflow logs9.8v3.12.3%2023-05-08Fix
CVE-2023-25452CMS Press WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-08
CVE-2023-25052Yandex.News Feed by Teplitsa WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-08
CVE-2023-25021FareHarbor for WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-08Fix
CVE-2023-24507AgilePoint NX SU2.2 and SU2.3 insecure file upload9.8v3.10.7%2023-05-08Fix
CVE-2023-24506Milesight NCR/Camera insufficiently protected credentials7.5v3.10.6%2023-05-08
CVE-2023-24505Milesight NCR/Camera exposure of sensitive information7.5v3.10.5%2023-05-08
CVE-2023-24408Ecwid Shopping Cart WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-05-08Fix
CVE-2023-24376WP Simple Events WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-08
CVE-2023-23894Surbma GDPR Proof Cookie Consent and Notice Bar WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-05-08Fix
CVE-2023-23668GiveWP WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-05-08Fix
CVE-2023-23543Apple macOS camera access state vulnerability3.6v3.10.2%2023-05-08Fix
CVE-2023-23542Apple macOS insecure storage of sensitive information5.5v3.10.3%2023-05-08Fix
CVE-2023-23541Apple iOS and iPadOS insecure storage of sensitive information3.3v3.10.2%2023-05-08Fix
CVE-2023-23540Apple macOS arbitrary code execution7.8v3.10.3%2023-05-08Fix
CVE-2023-23538Apple macOS incorrect authorization5.5v3.10.2%2023-05-08Fix
CVE-2023-23537Apple macOS information disclosure5.5v3.10.2%2023-05-08Fix
CVE-2023-23536Apple macOS arbitrary code execution7.8v3.10.3%2023-05-08Fix
CVE-2023-23535Apple macOS buffer overflow5.5v3.10.2%2023-05-08Fix
CVE-2023-23534Apple macOS image processing information disclosure5.5v3.10.3%2023-05-08Fix
CVE-2023-23533Apple macOS logic flaw5.5v3.10.3%2023-05-08Fix
CVE-2023-23532Apple macOS sandbox escape8.8v3.10.3%2023-05-08Fix
CVE-2023-23528Apple tvOS out-of-bounds read6.5v3.10.3%2023-05-08Fix
CVE-2023-23527The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. A user may gain access to protected parts of the file system.5.5v3.10.3%2023-05-08Fix
CVE-2023-23526Apple macOS Gatekeeper vulnerability9.8v3.10.7%2023-05-08Fix
CVE-2023-23525Apple macOS privilege escalation7.8v3.10.3%2023-05-08Fix
CVE-2023-23523Apple macOS logic flaw3.3v3.10.2%2023-05-08Fix
CVE-2023-23494Apple iOS and iPadOS buffer overflow5.3v3.10.6%2023-05-08Fix
CVE-2023-22813Device API endpoint missing access controls on Western Digital Mobile and Web Apps3.3CNA v3.10.5%2023-05-08Fix
CVE-2023-22791Aruba InstantOS and ArubaOS 10 sensitive information disclosure5.4CNA v3.10.2%2023-05-08Fix
CVE-2023-22790Authenticated remote command execution in Aruba InstantOS or ArubaOS 10 Command Line interface7.2CNA v3.11.6%2023-05-08Fix
CVE-2023-22789Authenticated remote command execution in Aruba InstantOS or ArubaOS 10 Command Line interface7.2CNA v3.11.6%2023-05-08Fix
CVE-2023-22788Authenticated remote command execution in Aruba InstantOS or ArubaOS 10 Command Line interface7.2CNA v3.11.6%2023-05-08Fix
CVE-2023-22787Unauthenticated denial of service in Aruba InstantOS or ArubaOS 10 Service Accessed7.5CNA v3.10.8%2023-05-08Fix
CVE-2023-22786HPE Aruba Access Points running InstantOS and ArubaOS 10 buffer overflow9.8CNA v3.12.1%2023-05-08Fix
CVE-2023-22785HPE Aruba Access Points running InstantOS and ArubaOS 10 buffer overflow9.8CNA v3.12.1%2023-05-08Fix
CVE-2023-22784HPE Aruba Access Points running InstantOS and ArubaOS 10 buffer overflow9.8CNA v3.12.1%2023-05-08Fix
CVE-2023-22783HPE Aruba Access Points running InstantOS and ArubaOS 10 buffer overflow9.8CNA v3.12.1%2023-05-08Fix
CVE-2023-22782HPE Aruba Access Points running InstantOS and ArubaOS 10 buffer overflow9.8CNA v3.12.1%2023-05-08Fix
CVE-2023-22781HPE Aruba Access Points running InstantOS and ArubaOS 10 buffer overflow9.8CNA v3.12.1%2023-05-08Fix
CVE-2023-22780HPE Aruba Access Points running InstantOS and ArubaOS 10 buffer overflow9.8CNA v3.12.1%2023-05-08Fix
CVE-2023-22779HPE Aruba Access Points running InstantOS and ArubaOS 10 buffer overflow9.8CNA v3.12.1%2023-05-08Fix
CVE-2023-22710chilidevs Return and Warranty Management System for WooCommerce cross-site scripting6.1NVD v3.10.4%2023-05-08
CVE-2023-21404Axis Communications AXIS OS hard-coded cryptographic key5.3v3.10.3%2023-05-08Fix
CVE-2023-2583Code injection in jsreport/jsreport10.0v3.11.1%2023-05-08Fix
CVE-2023-2582Strikingly A prototype pollution6.1NVD v3.10.6%2023-05-08
CVE-2023-2575Advantech EKI-1524 authenticated buffer overflow8.8NVD v3.115.5%2023-05-08Fix
CVE-2023-2574Advantech EKI-1524 authenticated command injection8.8NVD v3.14.8%2023-05-08Fix
CVE-2023-2573Advantech EKI-1524 authenticated command injection8.8NVD v3.14.8%2023-05-08Fix
CVE-2023-2566Cross-site scripting (XSS) Stored in openemr/openemr4.8NVD v3.10.5%2023-05-08Fix
CVE-2023-2534OTRS information disclouse and DoS via websocket push events7.6CNA v3.10.5%2023-05-08Fix
CVE-2023-2513Linux kernel ext4 filesystem use-after-free6.7NVD v3.10.2%2023-05-08Fix
CVE-2023-2478GitLab incorrect permission assignment9.6CNA v3.15.0%2023-05-08Fix
CVE-2023-2114NEX-Forms WordPress plugin Admin+ SQL injection7.2NVD v3.144.6%2023-05-08Fix
CVE-2023-1979Google Auth bypass in Web Stories for WordPress plugin4.9CNA v3.10.4%2023-05-08Fix
CVE-2023-1905WP Popups WordPress plugin Contributor+ stored XSS5.4NVD v3.10.4%2023-05-08Fix
CVE-2023-1806WP Inventory Manager WordPress plugin reflected XSS6.1NVD v3.10.5%2023-05-08Fix
CVE-2023-1660ChatBot WordPress plugin unauthenticated stored XSS6.1NVD v3.10.3%2023-05-08Fix
CVE-2023-1651ChatBot WordPress plugin Subscriber+ OpenAI settings update to stored XSS5.4NVD v3.10.2%2023-05-08Fix
CVE-2023-1650ChatBot WordPress plugin unauthenticated PHP object injection9.8NVD v3.134.4%2023-05-08Fix
CVE-2023-1649ChatBot WordPress plugin Admin+ stored XSS4.8NVD v3.10.4%2023-05-08Fix
CVE-2023-1408Video List Manager WordPress plugin Admin+ SQL injection7.2NVD v3.13.2%2023-05-08Nuclei
CVE-2023-1347Customizer Export/Import WordPress plugin Admin+ PHP object injection7.2NVD v3.116.0%2023-05-08Fix
CVE-2023-1094MonicaHQ cross-site scripting8.8v3.11.2%2023-05-08
CVE-2023-1031MonicaHQ cross-site scripting8.8v3.11.4%2023-05-08
CVE-2023-1011ChatBot WordPress plugin stored XSS via CSRF6.1NVD v3.10.2%2023-05-08Fix
CVE-2023-0948Japanized For WooCommerce WordPress plugin reflected XSS6.1NVD v3.10.9%2023-05-08NucleiFix
CVE-2023-0894Pickup Delivery Dine-in date time WordPress plugin Admin+ stored XSS4.8NVD v3.10.4%2023-05-08
CVE-2023-0768Avirato hotels online booking engine WordPress plugin Subscriber+ SQLi8.8NVD v3.10.9%2023-05-08
CVE-2023-0603Sloth Logo Customizer WordPress plugin stored XSS via CSRF8.8NVD v3.113.9%2023-05-08
CVE-2023-0544WP Login Box WordPress plugin Admin+ stored XSS4.8NVD v3.10.4%2023-05-08
CVE-2023-0542Custom Post Type List Shortcode WordPress plugin Contributor+ stored XSS5.4NVD v3.10.4%2023-05-08
CVE-2023-0537Product Slider For WooCommerce Lite WordPress plugin Contributor+ stored XSS5.4NVD v3.10.5%2023-05-08
CVE-2023-0536Wp-D3 WordPress plugin Contributor+ stored XSS5.4NVD v3.10.4%2023-05-08
CVE-2023-0526Post Shortcode WordPress plugin Contributor+ stored cross-site scripting5.4NVD v3.10.4%2023-05-08
CVE-2023-0522Enable/Disable Auto Login when Register WordPress plugin settings update via CSRF6.5NVD v3.10.3%2023-05-08
CVE-2023-0514Membership Database WordPress plugin reflected XSS6.1NVD v3.10.9%2023-05-08Nuclei
CVE-2023-0421Cloud Manager WordPress plugin reflected XSS6.1NVD v3.10.5%2023-05-08
CVE-2023-0280Ultimate Carousel For Elementor WordPress plugin Contributor+ stored XSS5.4NVD v3.10.4%2023-05-08
CVE-2023-0268Mega Addons For WPBakery Page Builder WordPress plugin Contributor+ stored XSS5.4NVD v3.10.4%2023-05-08Fix
CVE-2023-0267Ultimate Carousel For WPBakery Page Builder WordPress plugin Contributor+ stored XSS5.4NVD v3.10.4%2023-05-08
CVE-2023-32290Vk.company Mymail missing encryption7.5v3.10.4%2023-05-07Fix
CVE-2023-31047Django bypasses validation when using one form field to upload multiple files9.8v3.11.4%2023-05-07Fix
CVE-2023-24400Cookie Notice and Compliance for GDPR / CCPA WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-05-07Fix
CVE-2023-2565SourceCodester Multi Language Hotel Management Software POST parameter ajax.php cross-site scripting6.1v3.10.5%2023-05-07
CVE-2023-2564OS command injection in sbs20/Scanservjs10.0v3.140.5%2023-05-07Fix
CVE-2023-26519Publish to Schedule WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-06Fix
CVE-2023-26517Dashboard Widgets Suite WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-06Fix
CVE-2023-25491JCH Optimize WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-06Fix
CVE-2023-24957IBM Business Automation Workflow cross-site scripting5.4CNA v3.10.4%2023-05-06Fix
CVE-2023-2560jja8 NewBingGoGo cross-site scripting6.1v3.10.5%2023-05-06
CVE-2023-32269Linux kernel use-after-free6.7v3.10.3%2023-05-05Fix
CVE-2023-32235Path traversal in Ghost7.5v3.139.1%2023-05-05NucleiExploit codeFix
CVE-2023-30434IBM Storage Scale denial of service6.2CNA v3.10.2%2023-05-05Fix
CVE-2023-30243Netentsec Application Security Gateway SQL injection7.5v3.10.6%2023-05-05
CVE-2023-30242Netentsec Application Security Gateway SQL injection9.8v3.10.6%2023-05-05
CVE-2023-30135Tenda AC18 command injection9.8v3.12.4%2023-05-05
CVE-2023-30122oretnom23 Online Food Ordering System arbitrary file upload9.8v3.11.0%2023-05-05
CVE-2023-30090SEMCMS unrestricted file upload9.8v3.10.8%2023-05-05
CVE-2023-30065MitraStar Gpt-2741gnac-n2 remote code execution8.8v3.11.3%2023-05-05
CVE-2023-30054TOTOLINK A7100RU OS command injection9.8v3.12.1%2023-05-05
CVE-2023-30053TOTOLINK A7100RU OS command injection9.8v3.12.1%2023-05-05
CVE-2023-30013TOTOLINK X5000R OS command injection9.8v3.125.9%2023-05-05NucleiMetasploitEmerging ThreatsExploit code
CVE-2023-29963S-CMS code injection7.2v3.11.6%2023-05-05
CVE-2023-29942Llvm out-of-bounds read5.5v3.10.2%2023-05-05Fix
CVE-2023-29941Llvm out-of-bounds read5.5v3.10.2%2023-05-05Fix
CVE-2023-29939Llvm out-of-bounds read5.5v3.10.2%2023-05-05Fix
CVE-2023-29935Llvm reachable assertion5.5v3.10.2%2023-05-05Fix
CVE-2023-29934Llvm out-of-bounds read5.5v3.10.2%2023-05-05Fix
CVE-2023-29933Llvm out-of-bounds read5.5v3.10.2%2023-05-05Fix
CVE-2023-29932Llvm buffer overflow5.5v3.10.2%2023-05-05Fix
CVE-2023-29659libheif vulnerable to segmentation fault via floating point exception6.5v3.10.9%2023-05-05Fix
CVE-2023-29354Microsoft Edge (Chromium-based) security feature bypass4.7CNA v3.11.4%2023-05-05Fix
CVE-2023-29350Microsoft Edge (Chromium-based) elevation of privilege7.5CNA v3.12.6%2023-05-05Fix
CVE-2023-28068Dell Command Monitor (DCM) incorrect permission assignment7.3CNA v3.10.2%2023-05-05Fix
CVE-2023-26285IBM MQ denial of service5.9CNA v3.10.9%2023-05-05Fix
CVE-2023-22874IBM MQ denial of service5.5CNA v3.10.2%2023-05-05Fix
CVE-2023-2554External control of file name or path in unilogies/Bumsys7.2v3.129.1%2023-05-05Fix
CVE-2023-2553Cross-site scripting (XSS) Stored in unilogies/Bumsys5.4v3.10.4%2023-05-05Fix
CVE-2023-2552Cross-site request forgery (CSRF) in unilogies/Bumsys8.8v3.10.4%2023-05-05Fix
CVE-2023-2551PHP remote file inclusion in unilogies/Bumsys8.8v3.11.9%2023-05-05Fix
CVE-2023-2550Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ4.8NVD v3.10.5%2023-05-05Fix
CVE-2023-2531Improper restriction of excessive authentication attempts in AzuraCast/AzuraCast9.8v3.10.8%2023-05-05Fix
CVE-2023-2516Cross-site scripting (XSS) Stored in nilsteampassnet/TeamPass5.4NVD v3.10.6%2023-05-05Fix
CVE-2023-2427Cross-site scripting (XSS) Reflected in thorsten/phpMyFAQ4.8v3.10.5%2023-05-05Fix
CVE-2023-31415Elastic Kibana code injection8.8NVD v3.11.0%2023-05-04Fix
CVE-2023-31414Elastic Kibana code injection8.8v3.10.6%2023-05-04Fix
CVE-2023-31413Elastic Filebeat information disclosure3.3NVD v3.10.2%2023-05-04Fix
CVE-2023-31284illumos-gate out-of-bounds write7.8v3.10.3%2023-05-04
CVE-2023-31099Zoho ManageEngine OpManager remote code execution8.8v3.181.6%2023-05-04Emerging ThreatsFix
CVE-2023-30619Enalean tuleap XSS in the tooltip via an artifact title5.4CNA v3.10.5%2023-05-04Fix
CVE-2023-30550IDOR vulnerability exists in metersphere6.8CNA v3.10.7%2023-05-04Fix
CVE-2023-30399GARO Wallbox Glb settings page insecure permissions8.1v3.10.9%2023-05-04
CVE-2023-30331Server-side template injection in beetl9.8v3.10.9%2023-05-04
CVE-2023-30328Mailbutler Shimo improper authentication9.8v3.11.1%2023-05-04
CVE-2023-30282PrestaShop Scexportcustomers information disclosure7.5v3.10.6%2023-05-04
CVE-2023-30268CLTPHP path traversal9.8v3.10.8%2023-05-04
CVE-2023-30264CLTPHP unrestricted file upload9.8v3.10.7%2023-05-04
CVE-2023-30216newbee-mall updateUserInfo function insecure permissions5.4v3.10.3%2023-05-04
CVE-2023-30203Judging Management System SQL injection9.8v3.10.8%2023-05-04
CVE-2023-30184Typecho A stored cross-site scripting5.4v3.10.4%2023-05-04
CVE-2023-30097Total.js Messenger stored cross-site scripting5.4v3.10.7%2023-05-04
CVE-2023-30096Total.js Messenger stored cross-site scripting5.4v3.10.7%2023-05-04
CVE-2023-30095Total.js Messenger stored cross-site scripting5.4v3.10.7%2023-05-04
CVE-2023-30094Total.js Flow cross-site scripting in TotalJS5.4v3.10.7%2023-05-04Fix
CVE-2023-30093ONOS vulnerable to cross-site scripting6.1v3.10.5%2023-05-04
CVE-2023-30077Judging Management System SQL injection9.8v3.10.8%2023-05-04
CVE-2023-29996emqx nanomq null pointer dereference7.5v3.10.8%2023-05-04
CVE-2023-29995emqx nanomq out-of-bounds write7.5v3.10.7%2023-05-04
CVE-2023-29994emqx nanomq out-of-bounds write7.5v3.10.7%2023-05-04
CVE-2023-29842ChurchCRM SQL injection8.8v3.11.3%2023-05-04
CVE-2023-29827Ejs server-side template injection9.8v3.15.6%2023-05-04Nuclei
CVE-2023-27568Spryker Commerce OS SQL injection8.8v3.11.2%2023-05-04
CVE-2023-27075Stored cross-site scripting in Microbin5.4v3.10.4%2023-05-04Fix
CVE-2023-26125Improper input validation in github.com/Gin-gonic/Gin7.3v3.10.9%2023-05-04Fix
CVE-2023-26016Simple Portfolio Gallery WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-04
CVE-2023-26012Custom Login Page WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-04
CVE-2023-26010WPMobile.App WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-04Fix
CVE-2023-25982Simple YouTube Responsive WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-05-04Fix
CVE-2023-25977CPT Speakers WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-04
CVE-2023-25962Accordions WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-04Fix
CVE-2023-25961Darcie WordPress theme cross-site scripting (XSS)6.1NVD v3.10.4%2023-05-04Fix
CVE-2023-25934Dell ECS improper signature verification5.9CNA v3.10.3%2023-05-04Fix
CVE-2023-25458TypeSquare Webfonts for ConoHa WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-04Fix
CVE-2023-25438Genomedics Millegpg incorrect permission assignment7.8v3.12.1%2023-05-04Exploit code
CVE-2023-25289Virtualreception Digital Reciptie path traversal7.5v3.17.7%2023-05-04Exploit code
CVE-2023-24958IBM TS7700 management interface command injection8.8CNA v3.11.1%2023-05-04Fix
CVE-2023-23470IBM i privilege escalation6.4CNA v3.10.5%2023-05-04Fix
CVE-2023-23059GeoVision GV-Edge Recording Manager incorrect default permissions9.8v3.11.2%2023-05-04
CVE-2023-22651Rancher Webhook is misconfigured during upgrade process9.9CNA v3.10.8%2023-05-04Fix
CVE-2023-21511Samsung Mobile Samsung Blockchain Keystore out-of-bounds read4.4CNA v3.10.2%2023-05-04Fix
CVE-2023-21510Samsung Mobile Samsung Blockchain Keystore out-of-bounds read4.4CNA v3.10.2%2023-05-04Fix
CVE-2023-21509Samsung Mobile Samsung Blockchain Keystore out-of-bounds write6.7CNA v3.10.2%2023-05-04Fix
CVE-2023-21508Samsung Mobile Samsung Blockchain Keystore out-of-bounds write6.7CNA v3.10.2%2023-05-04Fix
CVE-2023-21507Samsung Mobile Samsung Blockchain Keystore out-of-bounds read4.4CNA v3.10.2%2023-05-04Fix
CVE-2023-21506Samsung Mobile Samsung Blockchain Keystore out-of-bounds write6.7CNA v3.10.2%2023-05-04Fix
CVE-2023-21505Samsung Mobile Samsung Core Service improper access control4.0CNA v3.10.3%2023-05-04Fix
CVE-2023-21504Samsung Mobile Devices mm_Plmncoordination.c in Shannon baseband buffer overflow5.6CNA v3.10.6%2023-05-04Fix
CVE-2023-21503Samsung Mobile Devices buffer overflow5.6CNA v3.10.6%2023-05-04Fix
CVE-2023-21502Samsung Mobile Devices FactoryTest application improper input validation5.7CNA v3.10.2%2023-05-04Fix
CVE-2023-21501Samsung Mobile Devices mPOS fiserve trustlet improper input validation8.2CNA v3.10.2%2023-05-04Fix
CVE-2023-21500Samsung Mobile Devices setPinPadImages in mPOS TUI trustlet double free6.0CNA v3.10.2%2023-05-04Fix
CVE-2023-21499Samsung Mobile Devices out-of-bounds write8.2CNA v3.10.2%2023-05-04Fix
CVE-2023-21498Samsung Mobile Devices setPartnerTAInfo in mPOS TUI trustlet improper input validation6.0CNA v3.10.2%2023-05-04Fix
CVE-2023-21497Samsung Mobile Devices mPOS TUI trustlet format string4.4CNA v3.10.2%2023-05-04Fix
CVE-2023-21496Samsung Mobile Devices ActivityManagerService active debug code6.1CNA v3.10.2%2023-05-04Fix
CVE-2023-21495Samsung Mobile Devices Knox Enrollment service improper access control4.0CNA v3.10.2%2023-05-04Fix
CVE-2023-21494Samsung Mobile Devices Potential buffer overflow5.6CNA v3.10.7%2023-05-04Fix
CVE-2023-21493Samsung Mobile Devices SemShareFileProvider improper access control6.8CNA v3.10.2%2023-05-04Fix
CVE-2023-21492Samsung Mobile Devices insertion of sensitive information into log file4.4CNA v3.12.6%2023-05-04KEVFix
CVE-2023-21491Samsung Mobile Devices ThemeManager improper access control8.5CNA v3.10.2%2023-05-04Fix
CVE-2023-21490Samsung Mobile Devices GearManagerStub improper access control4.7CNA v3.10.1%2023-05-04Fix
CVE-2023-21489Samsung Mobile Devices bootloader out-of-bounds write7.1CNA v3.10.3%2023-05-04Fix
CVE-2023-21488Samsung Mobile Devices Tips improper access control4.4CNA v3.10.1%2023-05-04Fix
CVE-2023-21487Samsung Mobile Devices Telephony framework improper access control5.1CNA v3.10.1%2023-05-04Fix
CVE-2023-21486Samsung Mobile Devices improper export of Android application components5.3CNA v3.10.3%2023-05-04Fix
CVE-2023-21485Samsung Mobile Devices improper export of Android application components5.3CNA v3.10.3%2023-05-04Fix
CVE-2023-21484Samsung Mobile Devices AppLock improper access control5.1CNA v3.10.1%2023-05-04Fix
CVE-2023-20126Cisco SPA112 2-Port Phone Adapters remote command execution9.8CNA v3.136.7%2023-05-04Exploit code
CVE-2023-2524Control iD RHiD forced browsing9.8v3.10.4%2023-05-04
CVE-2023-2523Weaver E-Office unrestricted upload9.8v3.132.9%2023-05-04Exploit code
CVE-2023-2522Chengdu VEC40G Network Detection os command injection7.2v3.133.7%2023-05-04
CVE-2023-2521NEXTU NEXT-7004N POST request formFilter cross-site scripting6.1NVD v3.10.3%2023-05-04
CVE-2023-2520Caton Prime Ping command injection9.8v3.12.6%2023-05-04
CVE-2023-2519Caton CTP Relay Server API login SQL injection9.8v3.10.6%2023-05-04
CVE-2023-1894Puppet Server A regular expression denial of service5.3v3.10.4%2023-05-04Fix
CVE-2023-30300W3 Webassembly infinite loop5.5v3.10.3%2023-05-03Fix
CVE-2023-30205DouPHP A stored cross-site scripting4.8v3.10.3%2023-05-03
CVE-2023-30204Judging Management System SQL injection9.8v3.10.6%2023-05-03
CVE-2023-29839digitaldruid HotelDruid stored cross-site scripting5.4v3.10.7%2023-05-03Exploit codeFix
CVE-2023-29240F5 BIG-IQ iControl REST API incorrect authorization5.4CNA v3.10.4%2023-05-03Fix
CVE-2023-29163F5 BIG-IP UDP profile memory leak7.5CNA v3.10.6%2023-05-03Fix
CVE-2023-28742F5 BIG-IP OS command injection7.2CNA v3.11.5%2023-05-03Fix
CVE-2023-28724F5 NGINX Management Suite default file permissions incorrect default permissions7.1CNA v3.10.2%2023-05-03Fix
CVE-2023-28656F5 NGINX Management Suite insecure direct object reference8.1CNA v3.10.5%2023-05-03Fix
CVE-2023-28406F5 BIG-IP undisclosed page of the path traversal4.3CNA v3.11.2%2023-05-03Fix
CVE-2023-28070Dell Alienware Command Center (AWCC) improper access control6.7CNA v3.10.1%2023-05-03Fix
CVE-2023-27999Fortinet FortiADC OS command injection7.6CNA v3.10.5%2023-05-03Fix
CVE-2023-27993Fortinet FortiADC relative path traversal5.7CNA v3.10.2%2023-05-03Fix
CVE-2023-27378F5 BIG-IP undisclosed pages of the reflected cross-site scripting7.5CNA v3.10.4%2023-05-03Fix
CVE-2023-26203Fortinet FortiNAC hard-coded credentials6.1CNA v3.10.2%2023-05-03Fix
CVE-2023-26017Jobs for WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-03Fix
CVE-2023-25979Video Gallery YouTube Gallery WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-03Fix
CVE-2023-25967Community by PeepSo WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-03Fix
CVE-2023-25827Cross-site scripting in OpenTSDB6.1NVD v3.10.9%2023-05-03Emerging Threats
CVE-2023-25826Remote code execution in OpenTSDB9.8v3.142.8%2023-05-03NucleiMetasploitEmerging ThreatsExploit code
CVE-2023-25798Olevmedia Shortcodes WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-05-03
CVE-2023-25797vSlider Multi Image Slider for WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-03
CVE-2023-25796WP BaiDu Submit WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-03
CVE-2023-25792WP Open Social WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-03
CVE-2023-25789Tapfiliate WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-03Fix
CVE-2023-25787WP资源下载管理 WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-03
CVE-2023-25786Eyes Only: User Access Shortcode WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-03
CVE-2023-25784Sticky Ad Bar WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-03
CVE-2023-25783FireCask Like and Share Button WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-03Fix
CVE-2023-24744Rediker Adminplus Rediker software cross-site scripting6.1v3.10.5%2023-05-03
CVE-2023-24594F5 BIG-IP TMM SSL profile resource exhaustion5.3CNA v3.10.6%2023-05-03Fix
CVE-2023-24461BIG-IP Edge Client for Windows and macOS vulnerability7.4CNA v3.10.3%2023-05-03Fix
CVE-2023-23881Circles Gallery WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-03
CVE-2023-23876wpDataTables WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-05-03Fix
CVE-2023-23875Bing Site Verification plugin using Meta Tag WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-03
CVE-2023-23874Ditty WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-05-03Fix
CVE-2023-23830ProfilePress WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-05-03Fix
CVE-2023-23820ProfilePress WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-05-03Fix
CVE-2023-23809Stock market charts from finviz WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-03Fix
CVE-2023-23808Sponsors Carousel WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-03
CVE-2023-23790Pods WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-03Fix
CVE-2023-23785Exquisite PayPal Donation WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-03
CVE-2023-23708Visualizer WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-05-03Fix
CVE-2023-22713Gutenberg Blocks by WordPress Download Manager plugin cross-site scripting (XSS)5.4v3.10.4%2023-05-03Fix
CVE-2023-22691Category Specific RSS feed Subscription WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-05-03Fix
CVE-2023-22683Clio Grow WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-05-03Fix
CVE-2023-22640Fortinet FortiOS A out-of-bounds write7.1CNA v3.10.9%2023-05-03Fix
CVE-2023-22637Fortinet FortiNAC cross-site scripting5.9CNA v3.10.6%2023-05-03Fix
CVE-2023-22372BIG-IP Edge Client for Windows and Mac OS vulnerability5.9CNA v3.10.2%2023-05-03Fix
CVE-2023-2468Google Chrome PictureInPicture inappropriate implementation4.3v3.10.8%2023-05-03Fix
CVE-2023-2467Google Chrome Prompts inappropriate implementation4.3v3.10.8%2023-05-03Fix
CVE-2023-2466Google Chrome Prompts inappropriate implementation4.3v3.10.8%2023-05-03Fix
CVE-2023-2465Google Chrome CORS inappropriate implementation4.3v3.11.0%2023-05-03Fix
CVE-2023-2464Google Chrome PictureInPicture inappropriate implementation4.3v3.10.6%2023-05-03Fix
CVE-2023-2463Google Chrome Full Screen Mode inappropriate implementation4.3v3.10.9%2023-05-03Fix
CVE-2023-2462Google Chrome Prompts inappropriate implementation4.3v3.10.8%2023-05-03Fix
CVE-2023-2461Google Chrome OS Inputs use-after-free8.8v3.10.8%2023-05-03Fix
CVE-2023-2460Google Chrome Extensions file access checks security feature bypass7.1v3.10.7%2023-05-03Fix
CVE-2023-2459Google Chrome Prompts inappropriate implementation6.5v3.11.0%2023-05-03Fix
CVE-2023-2182GitLab privilege escalation6.8CNA v3.11.0%2023-05-03Fix
CVE-2023-2069GitLab resource exposure6.4CNA v3.10.8%2023-05-03Fix
CVE-2023-1965GitLab cross-site request forgery6.8CNA v3.10.4%2023-05-03Fix
CVE-2023-1836GitLab cross-site scripting4.4CNA v3.10.8%2023-05-03Fix
CVE-2023-1385Amazon Fire TV Stick 3rd gen insufficient randomness8.8NVD v3.10.3%2023-05-03
CVE-2023-1384Amazon Fire TV Stick 3rd gen cross-site scripting6.1NVD v3.10.4%2023-05-03
CVE-2023-1383AmazonFire TV Stick 3rd gen Fire TV Stick 3rd gen An improper workflow enforcement4.3NVD v3.10.3%2023-05-03
CVE-2023-1265GitLab session fixation5.4CNA v3.10.8%2023-05-03Fix
CVE-2023-1204GitLab improper signature verification4.3v3.10.5%2023-05-03Fix
CVE-2023-1178GitLab code injection5.7CNA v3.10.9%2023-05-03Fix
CVE-2023-0805GitLab missing authorization4.9CNA v3.10.8%2023-05-03Fix
CVE-2023-0756GitLab arbitrary code execution4.8CNA v3.11.0%2023-05-03Fix
CVE-2023-0485GitLab resource exposure6.5CNA v3.11.0%2023-05-03Fix
CVE-2023-0155GitLab open redirect5.4CNA v3.10.8%2023-05-03Fix
CVE-2023-32007Apache Spark: Shell command injection via Spark UI8.8v3.175.8%2023-05-02Emerging ThreatsFix
CVE-2023-31435Evasys incorrect authorization8.1v3.10.7%2023-05-02Exploit code
CVE-2023-31434Evasys cross-site scripting5.4v3.10.5%2023-05-02Exploit code
CVE-2023-31433Evasys Logbuch SQL injection8.8NVD v3.10.9%2023-05-02
CVE-2023-31207Tribe29 Checkmk automation user secret logged to Apache access log5.5v3.10.2%2023-05-02Fix
CVE-2023-30944Moodle: Minor SQL injection risk in external wiki method for listing pages7.3NVD v3.11.1%2023-05-02Fix
CVE-2023-30943Moodle: Tinymce loaders susceptible to arbitrary folder creation5.3NVD v3.16.6%2023-05-02NucleiExploit codeFix
CVE-2023-30869Easy Digital Downloads WordPress plugin improper authentication9.8v3.13.1%2023-05-02NucleiFix
CVE-2023-30861Pallets Flask session cookie handling information disclosure7.5CNA v3.11.3%2023-05-02Exploit codeFix
CVE-2023-30403Aigital Wireless-n Repeater Mini Router insufficient session expiration7.5v3.113.8%2023-05-02
CVE-2023-29918RosarioSIS vulnerable to CSV injection5.4v3.12.2%2023-05-02Exploit code
CVE-2023-29868zammad origin validation error6.5v3.11.0%2023-05-02Fix
CVE-2023-29867zammad origin validation error6.5v3.10.5%2023-05-02Fix
CVE-2023-29856D-Link DIR-868L buffer overflow9.8v3.10.9%2023-05-02Fix
CVE-2023-29778GL.iNet GL-MT3000 OS command injection9.8v3.115.9%2023-05-02
CVE-2023-29772ASUS Rt-ac51u cross-site scripting5.2v3.111.2%2023-05-02
CVE-2023-27892Shapeshift Keepkey buffer overflow5.7v3.10.5%2023-05-02
CVE-2023-26546Echa.europa IUCLID code injection8.8v3.11.4%2023-05-02Fix
CVE-2023-26268Apache CouchDB, IBM Cloudant: Information sharing via couchjs processes4.4CNA v3.11.4%2023-05-02Fix
CVE-2023-26089Echa.europa IUCLID hard-coded credentials9.8v3.11.1%2023-05-02Fix
CVE-2023-23723WordPress Email Marketing Plugin WP Email Capture cross-site scripting (XSS)4.8v3.10.4%2023-05-02Fix
CVE-2023-21666Qualcomm Snapdragon memory corruption8.4CNA v3.10.2%2023-05-02Fix
CVE-2023-21665Qualcomm Snapdragon incorrect type conversion or cast in Graphics8.4CNA v3.10.2%2023-05-02Fix
CVE-2023-21642Qualcomm Snapdragon improper access control in HAB Memory Management8.4CNA v3.10.1%2023-05-02Fix
CVE-2023-2479OS command injection in appium/Appium-desktop9.8v3.122.0%2023-05-02NucleiFix
CVE-2023-2477Funadmin Cx.php tagLoad cross-site scripting6.1v3.10.5%2023-05-02
CVE-2023-2476Dromara J2eeFAST Announcement cross-site scripting5.4v3.10.5%2023-05-02
CVE-2023-2475Dromara J2eeFAST System message cross-site scripting5.4v3.10.5%2023-05-02
CVE-2023-2474Rebuild cross-site request forgery4.3v3.10.4%2023-05-02
CVE-2023-2473Dreamer CMS Password Hash Calculation UserController.java updatePwd algorithmic complexity7.5NVD v3.10.9%2023-05-02
CVE-2023-2445Devolutions Server Subscriptions Folder path filter improper access control4.9v3.11.0%2023-05-02Fix
CVE-2023-2247Octopus Deploy Octopus Server variable preview function vulnerability5.3v3.10.5%2023-05-02Fix
CVE-2023-2000Unrestricted navigation due to unvalidated Mattermost server redirection5.4CNA v3.10.4%2023-05-02
CVE-2023-1911Blocksy Companion WordPress plugin Subscriber+ Draft post access4.3NVD v3.10.6%2023-05-02Fix
CVE-2023-1861The Limit Login Attempts WordPress plugin through 1.7.2 does not sanitize and escape usernames when outputting them back in the logs dashboard, which could allow any authenticated users, such as subscriber to perform Stored Cross-Site Scripting attacks5.4NVD v3.128.8%2023-05-02Emerging ThreatsFix
CVE-2023-1809Download Manager Pro WordPress plugin unauthenticated sensitive information disclosure7.5NVD v3.10.7%2023-05-02Fix
CVE-2023-1805Product Catalog Feed by PixelYourSite WordPress plugin reflected XSS6.1NVD v3.10.5%2023-05-02Fix
CVE-2023-1804Product Catalog Feed by PixelYourSite WordPress plugin reflected XSS6.1NVD v3.10.5%2023-05-02Fix
CVE-2023-1730SupportCandy WordPress plugin unauthenticated SQLi9.8NVD v3.140.6%2023-05-02NucleiFix
CVE-2023-1669SEOPress WordPress plugin Admin+ PHP object injection7.2NVD v3.117.7%2023-05-02Fix
CVE-2023-1614WP Custom Author URL WordPress plugin Admin+ stored XSS4.8NVD v3.10.5%2023-05-02Fix
CVE-2023-1554Quick Paypal Payments WordPress plugin Admin+ stored XSS4.8NVD v3.10.5%2023-05-02Fix
CVE-2023-1546MyCryptoCheckout WordPress plugin reflected XSS6.1NVD v3.10.9%2023-05-02NucleiFix
CVE-2023-1525Site Reviews WordPress plugin Admin+ stored XSS4.8NVD v3.10.5%2023-05-02Fix
CVE-2023-1196Advanced Custom Fields Contributor+ PHP object injection8.8NVD v3.11.1%2023-05-02Fix
CVE-2023-1125Wpruby Ruby Help Desk ticket update insecure direct object reference6.5NVD v3.10.6%2023-05-02Fix
CVE-2023-1090WP SMTP Mailing Queue WordPress plugin Admin+ stored XSS4.8NVD v3.10.5%2023-05-02Fix
CVE-2023-1021Amr Ical Events Lists WordPress plugin Admin+ stored XSS4.8NVD v3.10.4%2023-05-02
CVE-2023-0924Zyrex Popup WordPress plugin Admin+ arbitrary file upload7.2NVD v3.11.0%2023-05-02Fix
CVE-2023-0891Stagtools WordPress plugin Contributor+ stored XSS5.4NVD v3.10.4%2023-05-02Fix
CVE-2023-30859Spigot Command Exploit in Triton7.2CNA v3.11.1%2023-05-01Fix
CVE-2023-30639Archerirm Archer cross-site scripting5.4NVD v3.10.3%2023-05-01Fix
CVE-2023-30063D-Link DIR-890L improper authentication7.5v3.11.1%2023-05-01
CVE-2023-30061D-Link Dir-879 improper authentication7.5v3.11.1%2023-05-01
CVE-2023-29681Tenda N301 cookie:ecos_pw: cleartext transmission of sensitive information5.7v3.10.4%2023-05-01
CVE-2023-29680Tenda N301 set-cookie:ecos_pw: cleartext transmission of sensitive information5.7v3.10.4%2023-05-01
CVE-2023-29643PerfreeBlog cross-site scripting5.4v3.10.5%2023-05-01
CVE-2023-29641Editor.md vulnerable to cross-site scripting6.1v3.10.4%2023-05-01
CVE-2023-29639zhenfeng13 My-Blog cross-site scripting5.4v3.10.4%2023-05-01
CVE-2023-29638Winterchen my-site cross-site scripting5.4v3.10.4%2023-05-01
CVE-2023-29637Qbian61 Forum-java cross-site scripting6.1v3.10.4%2023-05-01
CVE-2023-29636zhenfeng13 My-Blog cross-site scripting5.4v3.10.4%2023-05-01
CVE-2023-29635Antabot White-jotter file upload9.8v3.11.1%2023-05-01
CVE-2023-28092A potential security vulnerability has been identified in HPE ProLiant RL300 Gen11 Server. The vulnerability could result in the system being vulnerable to exploits by attackers with physical access inside the server chassis.6.1CNA v3.10.2%2023-05-01Fix
CVE-2023-27108KaiOS Communications app call log activity vulnerability5.3v3.10.6%2023-05-01
CVE-2023-27035Obsidian incorrect default permissions7.5v3.11.8%2023-05-01Exploit codeFix
CVE-2023-26987An issue discovered in Konga 0.14.9 allows remote attackers to manipulate user accounts regardless of privilege via crafted POST request.6.5v3.11.1%2023-05-01
CVE-2023-25492Lenovo XClarity Controller format string6.3CNA v3.10.5%2023-05-01Fix
CVE-2023-22924Zyxel NBG-418N v2 firmware buffer overflow4.9CNA v3.10.8%2023-05-01Fix
CVE-2023-22923Zyxel NBG-418N v2 firmware binary of the Zyxel format string6.5CNA v3.10.8%2023-05-01Fix
CVE-2023-22922Zyxel NBG-418N v2 firmware buffer overflow7.5CNA v3.10.9%2023-05-01Fix
CVE-2023-22921Zyxel NBG-418N v2 firmware cross-site scripting7.5CNA v3.10.5%2023-05-01Fix
CVE-2023-22919Zyxel NBG6604 firmware command injection8.8CNA v3.11.6%2023-05-01Fix
CVE-2023-22503Atlassian Confluence Server information disclosure5.3CNA v3.00.8%2023-05-01Fix
CVE-2023-2451SourceCodester Online DJ Management System GET parameter view_details.php SQL injection9.8v3.10.7%2023-05-01
CVE-2023-2236Linux kernel A use-after-free7.8NVD v3.10.4%2023-05-01Fix
CVE-2023-2235Linux kernel A use-after-free7.8NVD v3.10.3%2023-05-01Fix
CVE-2023-2197HashiCorp Vault Enterprise inadequate encryption strength2.5CNA v3.10.1%2023-05-01Fix
CVE-2023-0896Lenovo Smart Clock Essential with Alexa Built In default credentials8.8CNA v3.10.4%2023-05-01Fix
CVE-2023-0683Lenovo XClarity Controller privilege escalation8.3CNA v3.10.6%2023-05-01Fix