CVEs published May 5, 2023
41 CVEs were published on May 5, 2023: 7 critical, 13 high.
- Published
- 41
- Critical
- 7
- High
- 13
- Medium
- 20
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 15
Most affected products
- unilogies/bumsys
- 4
- IBM MQ
- 3
- Microsoft Edge
- 2
- thorsten/phpmyfaq
- 2
- Apache Software Foundation Apache Ranger · org.apache.range…
- 1
- Apache Software Foundation Apache Ranger Hive Plugin · org.…
- 1
- azuracast/azuracast
- 1
- Dell Command Monitor
- 1
- External Media without Import Plugin
- 1
- ghost
- 1
Critical 7
- CVE-2023-30013TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setting/setTracerouteCfg.
- CVE-2023-30053TOTOLINK A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection.
- CVE-2023-30054TOTOLINK A7100RU V7.4cu.2313_B20191024 has a Command Injection vulnerability.
- CVE-2023-30090Semcms Shop v4.2 was discovered to contain an arbitrary file uplaod vulnerability via the component SEMCMS_Upfile.php.
- CVE-2023-30122An arbitrary file upload vulnerability in the component /admin/ajax.php?action=save_menu of Online Food Ordering System v2.0 allows attacker
- CVE-2023-30135Tenda AC18 v15.03.05.19(6318_)_cn was discovered to contain a command injection vulnerability via the deviceName parameter in the setUsbUnlo
- CVE-2023-30242NS-ASG v6.3 was discovered to contain a SQL injection vulnerability via the component /admin/add_ikev2.php.
High 13
- CVE-2023-29350Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityMicrosoft Edge
- CVE-2021-40331Permissions problem in the Apache Ranger Hive PluginApache Software Foundation Apache Ranger Hive Plugin · org.…
- CVE-2022-45048Apache Ranger: code execution vulnerability in policy expressionsApache Software Foundation Apache Ranger · org.apache.range…
- CVE-2023-28068 Dell Command Monitor, versions 10.9 and prior, contains an improper folder permission vulnerability.Dell Command Monitor
- CVE-2023-2531Improper Restriction of Excessive Authentication Attempts in azuracast/azuracastazuracast/azuracast
- CVE-2023-2550Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
- CVE-2023-2551PHP Remote File Inclusion in unilogies/bumsysunilogies/bumsys
- CVE-2023-2552Cross-Site Request Forgery (CSRF) in unilogies/bumsysunilogies/bumsys
- CVE-2023-2554External Control of File Name or Path in unilogies/bumsysunilogies/bumsys
- CVE-2023-29963S-CMS v5.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the component /admin/ajax.php.
- CVE-2023-30065MitraStar GPT-2741GNAC-N2 with firmware BR_g5.9_1.11(WVK.0)b32 was discovered to contain a remote code execution (RCE) vulnerability in the
- CVE-2023-30243Beijing Netcon NS-ASG Application Security Gateway v6.3 is vulnerable to SQL Injection via TunnelId that allows access to sensitive informat
- CVE-2023-32235Ghost before 5.42.1 allows remote attackers to read arbitrary files within the active theme's folder via /assets/built%2F..%2F..%2F/ directoghost
Medium, low and unrated 21
- CVE-2023-29354Microsoft Edge (Chromium-based) Security Feature Bypass VulnerabilityMicrosoft Edge
- CVE-2022-43866IBM Maximo Asset Management cross-site scriptingIBM Maximo Asset Management
- CVE-2020-4914IBM Cloud Pak System Software Suite session fixationIBM Cloud Pak System Software Suite
- CVE-2023-26285IBM MQ denial of serviceIBM MQ
- CVE-2023-22874IBM MQ denial of serviceIBM MQ
- CVE-2022-43919IBM MQ denial of serviceIBM MQ
- CVE-2023-30434IBM Storage Scale denial of serviceIBM Elastic Storage System · IBM Spectrum Scale
- CVE-2022-38707IBM Cognos Command Center information disclosureIBM Cognos Command Center
- CVE-2017-20183External Media without Import Plugin external-media-without-import.php print_media_new_panel cross site scriptingExternal Media without Import Plugin
- CVE-2023-2427Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaqthorsten/phpmyfaq
- CVE-2023-2516Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampassnilsteampassnet/teampass
- CVE-2023-2553Cross-site Scripting (XSS) - Stored in unilogies/bumsysunilogies/bumsys
- CVE-2023-29659A Segmentation fault caused by a floating point exception exists in libheif 1.15.1 using crafted heif images via the heif::Fraction::round()github.com/strukturag/libheif
- CVE-2023-29932llvm-project commit fdbc55a5 was discovered to contain a segmentation fault via the component mlir::IROperand<mlir::OpOperand.
- CVE-2023-29933llvm-project commit bd456297 was discovered to contain a segmentation fault via the component mlir::Block::getArgument.
- CVE-2023-29934llvm-project commit 6c01b5c was discovered to contain a segmentation fault via the component mlir::Type::getDialect().
- CVE-2023-29935llvm-project commit a0138390 was discovered to contain an assertion failure at !replacements.count(op) && "operation was already replaced.
- CVE-2023-29939llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::spirv::TargetEnv::TargetEnv(mlir::spirv:
- CVE-2023-29941llvm-project commit a0138390 was discovered to contain a segmentation fault via the component matchAndRewriteSortOp<mlir::sparse_tensor::Sor
- CVE-2023-29942llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::Type::isa<mlir::LLVM::LLVMVoidType.
- CVE-2023-32269An issue was discovered in the Linux kernel before 6.1.11.