CVEs published May 9, 2023
252 CVEs were published on May 9, 2023: 15 critical, 90 high. 2 are now in CISA KEV.
- Published
- 252
- Critical
- 15
- High
- 90
- Medium
- 129
- Low
- 13
- Unrated
- 5
- Now in CISA KEV
- 2
- Fix available
- 52
Most affected products
- Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- 66
- Microsoft Windows
- 20
- Siemens SIMATIC Cloud Connect 7 CC712 · Siemens SIMATIC Clo…
- 7
- 2nd Gen AMD EPYC™ · 3rd Gen AMD EPYC™
- 6
- Esri Portal for ArcGIS
- 5
- Avalanche
- 4
- SAP_SE SAP BusinessObjects Business Intelligence Platform
- 4
- Siemens SCALANCE LPE9403
- 4
- dhis2-core
- 3
- Microsoft SharePoint Enterprise Server · Microsoft SharePoi…
- 3
Critical 15
- CVE-2021-46760A malicious or compromised UApp or ABL can send a malformed system call to the bootloader, which may result in an out-of-bounds memory acces3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” H…
- CVE-2021-46756Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge”… +16
- CVE-2021-46753Failure to validate the length fields of the ASP (AMD Secure Processor) sensor fusion hub headers may allow an attacker with a malicious UapAMD Ryzen™ 2000 series Desktop Processors “Raven Ridge”… +8
- CVE-2023-20520Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a stack-based buffer overrun 1st Gen AMD EPYC™ · 2nd Gen AMD EPYC™ +1
- CVE-2021-26379Insufficient input validation of mailbox data in the SMU may allow an attacker to coerce the SMU to corrupt SMRAM, potentially leading to a 2nd Gen AMD EPYC™ · 3rd Gen AMD EPYC™
- CVE-2023-24943Windows Pragmatic General Multicast (PGM) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-24941Windows Network File System Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2023-32071XWiki Platform vulnerable to RXSS via editor parameter - importinline templatexwiki-platform · org.xwiki.platform:xwiki-platform-distribu…
- CVE-2023-32069XWiki Platform privilege escalation (PR)/RCE from account through class sheetxwiki-platform · org.xwiki.platform:xwiki-platform-test-ui
- CVE-2023-31126Improper Neutralization of Invalid Characters in Data Attribute Names in org.xwiki.commons:xwiki-commons-xmlxwiki-commons · org.xwiki.commons:xwiki-commons-xml
- CVE-2023-30899A vulnerability has been identified in Siveillance Video 2020 R2 (All versions < V20.2 HotfixRev14), Siveillance Video 2020 R3 (All versionsSiemens Siveillance Video 2020 R2 · Siemens Siveillance… +6
- CVE-2023-30898A vulnerability has been identified in Siveillance Video 2020 R2 (All versions < V20.2 HotfixRev14), Siveillance Video 2020 R3 (All versionsSiemens Siveillance Video 2020 R2 · Siemens Siveillance… +6
- CVE-2023-27407A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1).Siemens SCALANCE LPE9403
- CVE-2023-28762Information Disclosure in SAP BusinessObjects Intelligence PlatformSAP_SE SAP BusinessObjects Intelligence Platform
- CVE-2023-28316A security vulnerability has been discovered in the implementation of 2FA on the rocket.chat platform, where other active sessions are not iRocket.Chat
High 90
- CVE-2021-46794Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management Interface) mailbox AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge”… +12
- CVE-2021-46773Insufficient input validation in ABL may enable a privileged attacker to corrupt ASP memory, potentially resulting in a loss of integrity orAMD Ryzen™ 2000 series Desktop Processors “Raven Ridge”… +10
- CVE-2021-46765Insufficient input validation in ASP may allow an attacker with a compromised SMM to induce out-of-bounds memory reads within the ASP, potenAMD Ryzen™ 5000 Series Desktop processor with Radeon™ Gr… +3
- CVE-2021-46755Failure to unmap certain SysHub mappings in error paths of the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicious AMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4… +7
- CVE-2021-46749Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management Interface) mailbox AMD Ryzen™ 2000 Series Desktop Processors “Pinnacle Rid… +12
- CVE-2021-26406Insufficient validation in parsing Owner's Certificate Authority (OCA) certificates in SEV (AMD Secure Encrypted Virtualization) and SEV-ES AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge”… +11
- CVE-2021-26365Certain size values in firmware binary headers could trigger out of bounds reads during signature validation, leading to denial of service oAMD Ryzen™ 2000 series Desktop Processors “Raven Ridge”… +8
- CVE-2021-26356A TOCTOU in ASP bootloader may allow an attacker to tamper with the SPI ROM following data read to memory potentially resulting in S3 data cAMD Ryzen™ 3000 Series Desktop Processors “Matisse” AM4… +6
- CVE-2023-20524An attacker with a compromised ASP could possibly send malformed commands to an ASP on another CPU, resulting in an out of bounds write, pot2nd Gen AMD EPYC™ · 3rd Gen AMD EPYC™
- CVE-2022-23818Insufficient input validation on the model specific register: VM_HSAVE_PA may potentially lead to loss of SEV-SNP guest memory integrity.3rd Gen AMD EPYC™
- CVE-2021-46769Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to execute arbitrary DMA copies, which can lead 2nd Gen AMD EPYC™ · 3rd Gen AMD EPYC™
- CVE-2021-46764Improper validation of DRAM addresses in SMU may allow an attacker to overwrite sensitive memory locations within the ASP potentially result2nd Gen AMD EPYC™ · 3rd Gen AMD EPYC™
- CVE-2021-46763Insufficient input validation in the SMU may enable a privileged attacker to write beyond the intended bounds of a shared memory buffer pote2nd Gen AMD EPYC™ · 3rd Gen AMD EPYC™
- CVE-2021-26397Insufficient address validation, may allow an attacker with a compromised ABL and UApp to corrupt sensitive memory locations potentially res3rd Gen AMD EPYC™
- CVE-2023-29325Windows OLE Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-24904Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows Server 2008 Service Pack · Microsoft W… +1
- CVE-2023-29343SysInternals Sysmon for Windows Elevation of Privilege VulnerabilityMicrosoft Windows Sysmon
- CVE-2023-29341AV1 Video Extension Remote Code Execution VulnerabilityMicrosoft AV1 Video Extension
- CVE-2023-29340AV1 Video Extension Remote Code Execution VulnerabilityMicrosoft AV1 Video Extension
- CVE-2023-29336Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-29335Microsoft Word Security Feature Bypass VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2023-24955Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2023-24953Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2023-24949Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-24948Windows Bluetooth Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-24947Windows Bluetooth Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-24946Windows Backup Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-24905Remote Desktop Client Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-24903Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-24942Remote Procedure Call Runtime Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-24902Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-24901Windows NFS Portmapper Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-24940Windows Pragmatic General Multicast (PGM) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-24939Server for NFS Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-24899Windows Graphics Component Elevation of Privilege VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2023-24898Windows SMB Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2023-28283Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-31138DHIS2 Core vulnerable to Improper Access Control with PATCH requestsdhis2-core
- CVE-2023-31137MaraDNS Integer Underflow Vulnerability in DNS Packet Decompressionsamboy MaraDNS
- CVE-2023-29462Rockwell Automation Arena Simulation Software Remote Code Execution VulnerabilityRockwell Automation Arena Simulation
- CVE-2023-29461Rockwell Automation Arena Simulation Software Remote Code Execution VulnerabilityRockwell Automation Arena Simulation
- CVE-2023-29460Rockwell Automation Arena Simulation Software Remote Code Execution VulnerabilityRockwell Automation Arena Simulation
- CVE-2023-20046A vulnerability in the key-based SSH authentication feature of Cisco StarOS Software could allow an authenticated, remote attacker to elevatCisco ASR 5000 Series Software · Cisco Ultra Cloud Core - U…
- CVE-2023-2594SourceCodester Food Ordering Management System Registration sql injectionSourceCodester Food Ordering Management System
- CVE-2023-30986A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), Solid Edge SE2023 (All versions < V223.0 Update 2Siemens Solid Edge SE2023
- CVE-2023-28832A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versiSiemens SIMATIC Cloud Connect 7 CC712 · Siemens SIMATIC Clo…
- CVE-2022-46858WordPress Product Specifications for Woocommerce Plugin <= 0.6.0 is vulnerable to Cross Site Scripting (XSS)Amin A.Rezapour Product Specifications for Woocommerce
- CVE-2022-46864WordPress Woocommerce Custom Checkout Fields Editor With Drag & Drop Plugin <= 0.1 is vulnerable to Cross Site Scripting (XSS)Umair Saleem Woocommerce Custom Checkout Fields Editor With…
- CVE-2022-46822WordPress WooCommerce JazzCash Gateway Plugin Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)JC Development Team WooCommerce JazzCash Gateway Plugin
- CVE-2023-32113Information Disclosure vulnerability in SAP GUI for WindowsSAP_SE SAP GUI for Windows
- CVE-2023-32111Memory Corruption vulnerability in SAP PowerDesigner (Proxy)SAP_SE SAP PowerDesigner
- CVE-2023-30744Improper access control during application start-up in SAP AS NetWeaver JAVA.SAP_SE SAP AS NetWeaver JAVA
- CVE-2023-30743Improper Neutralization of Input in SAPUI5SAP_SE SAPUI5
- CVE-2022-44433In phoneEx service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48388In powerEx service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48384In srtd service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48383.In srtd service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48369In audio service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48368In audio service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48250In audio service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48249In audio service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48248In audio service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48247In audio service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48246In audio service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48245In audio service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48244In audio service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48243In audio service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2020-23362Insecure Permissons vulnerability found in Shop_CMS YerShop all versions allows a remote attacker to escalate privileges via the cover_id pa
- CVE-2020-23363Cross Site Request Forgery (CSRF) vulnerability found in Verytops Verydows all versions that allows an attacker to execute arbitrary code vi
- CVE-2021-31239An issue found in SQLite SQLite3 v.3.35.4 that allows a remote attacker to cause a denial of service via the appendvfs.c function.sqlite
- CVE-2021-31240An issue found in libming v.0.4.8 allows a local attacker to execute arbitrary code via the parseSWF_IMPORTASSETS function in the parser.c f
- CVE-2021-44283A buffer overflow in the component /Enclave.cpp of Electronics and Telecommunications Research Institute ShieldStore commit 58d455617f99705f
- CVE-2023-25832BUG-000148346 There is a Cross-Site Request Forgery (CSRF) vulnerability in Portal for ArcGIS.Esri Portal for ArcGIS
- CVE-2023-2590Missing Authorization in answerdev/answeranswerdev/answer · github.com/answerdev/answer
- CVE-2023-2591Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nilsteampassnet/teampassnilsteampassnet/teampass
- CVE-2023-2609NULL Pointer Dereference in vim/vimvim/vim
- CVE-2023-2610Integer Overflow or Wraparound in vim/vimvim/vim
- CVE-2023-28127A path traversal vulnerability exists in Avalanche version 6.3.x and below that when exploited could result in possible information disclosuAvalanche
- CVE-2023-28128An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker tAvalanche
- CVE-2023-30056A session takeover vulnerability exists in FICO Origination Manager Decision Module 4.8.1 due to insufficient protection of the JSESSIONID c
- CVE-2023-30237CyberGhostVPN Windows Client before v8.3.10.10015 was discovered to contain a DLL injection vulnerability via the component Dashboard.exe.
- CVE-2023-31472An issue was discovered on GL.iNet devices before 3.216.
- CVE-2023-31474An issue was discovered on GL.iNet devices before 3.216.
- CVE-2023-31476An issue was discovered on GL.iNet devices running firmware before 3.216.
- CVE-2023-31478An issue was discovered on GL.iNet devices before 3.216.
- CVE-2023-31973yasm v1.3.0 was discovered to contain a use after free via the function expand_mmac_params at /nasm/nasm-pp.c.
- CVE-2023-31976libming v0.4.8 was discovered to contain a stack buffer overflow via the function makeswf_preprocess at /util/makeswf_utils.c.
- CVE-2023-31979Catdoc v0.95 was discovered to contain a global buffer overflow via the function process_file at /src/reader.c.
- CVE-2023-31981Sngrep v1.6.0 was discovered to contain a stack buffer overflow via the function packet_set_payload at /src/packet.c.
- CVE-2023-31982Sngrep v1.6.0 was discovered to contain a heap buffer overflow via the function capture_packet_reasm_ip at /src/capture.c.
Medium, low and unrated 147
- CVE-2022-36330Buffer Overflow Vulnerability in Western Digital My Cloud Home and ibi devicesWestern Digital My Cloud Home and My Cloud Home Duo · SanDi…
- CVE-2023-25831BUG-000154236 There is a reflected cross-site scripting (XSS) vulnerability in Portal for ArcGIS.Esri Portal for ArcGIS
- CVE-2021-46792Time-of-check Time-of-use (TOCTOU) in the BIOS2PSP command may allow an attacker with a malicious BIOS to create a race condition causing thAMD Ryzen™ 2000 series Desktop Processors “Raven Ridge”… +6
- CVE-2021-46759Improper syscall input validation in AMD TEE (Trusted Execution Environment) may allow an attacker with physical access and control of a UapAMD Ryzen™ 2000 series Desktop Processors “Raven Ridge”… +7
- CVE-2021-46754Insufficient input validation in the ASP (AMD Secure Processor) bootloader may allow an attacker with a compromised Uapp or ABL to coerce thAMD Ryzen™ 2000 series Desktop Processors “Raven Ridge”… +10
- CVE-2021-26371A compromised or malicious ABL or UApp could send a SHA256 system call to the bootloader, which may result in exposure of ASP memory to userAMD Ryzen™ 2000 series Desktop Processors “Raven Ridge”… +11
- CVE-2021-26354Insufficient bounds checking in ASP may allow an attacker to issue a system call from a compromised ABL which may cause arbitrary memory valAMD Ryzen™ 2000 series Desktop Processors “Raven Ridge”… +16
- CVE-2021-46775Improper input validation in ABL may enable an attacker with physical access, to perform arbitrary memory overwrites, potentially leading to2nd Gen AMD EPYC™ · 3rd Gen AMD EPYC™
- CVE-2021-46762Insufficient input validation in the SMU may allow an attacker to corrupt SMU SRAM potentially leading to a loss of integrity or denial of s2nd Gen AMD EPYC™ · 3rd Gen AMD EPYC™ +1
- CVE-2023-29333Microsoft Access Denial of Service VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise
- CVE-2023-28290Microsoft Remote Desktop app for Windows Information Disclosure VulnerabilityMicrosoft Remote Desktop
- CVE-2023-28251Windows Driver Revocation List Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2023-24932Secure Boot Security Feature Bypass VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2023-29338Visual Studio Code Spoofing VulnerabilityMicrosoft Visual Studio Code
- CVE-2023-29324Windows MSHTML Platform Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2023-24954Microsoft SharePoint Server Information Disclosure VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2023-24950Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2023-24945Windows iSCSI Target Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-24944Windows Bluetooth Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-24900Windows NTLM Security Support Provider Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-25830BUG-000154662 Reflected XSS vulnerability in Portal for ArcGISEsri Portal for ArcGIS
- CVE-2023-25829BUG-000155001 - Unvalidated redirect in Portal for ArcGIS.Esri Portal for ArcGIS
- CVE-2023-32066Time Tracker has Stored XSS vulnerability in Week View pluginanuko timetracker
- CVE-2023-31144Craft CMS vulnerable to cross site scripting in RSS feed widgetcraftcms cms · craftcms/cms
- CVE-2023-31143Mage terminal user authentication not working properlymage-ai
- CVE-2023-32060DHIS2 Core Improper Access Control with Category Option Combination sharing in /api/trackedEntityInstance and /api/eventsdhis2-core
- CVE-2023-31139DHIS2 Core unrestricted session cookies with Personal Access Tokensdhis2-core
- CVE-2023-31136PostgresNIO processes unencrypted bytes from man-in-the-middlevapor postgres-nio
- CVE-2023-20098A vulnerability in the CLI of Cisco SDWAN vManage Software could allow an authenticated, local attacker to delete arbitrary files.Cisco SD-WAN vManage
- CVE-2023-31134Tauri Open Redirect Vulnerability Possibly Exposes IPC to External Sitestauri-apps tauri · tauri
- CVE-2023-2596SourceCodester Online Reviewer System GET Parameter user-update.php sql injectionSourceCodester Online Reviewer System
- CVE-2023-2595SourceCodester Billing Management System POST Parameter ajax_service.php sql injectionSourceCodester Billing Management System
- CVE-2023-30985A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), Solid Edge SE2023 (All versions < V223.0 Update 2Siemens Solid Edge SE2023
- CVE-2023-29128A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versiSiemens SIMATIC Cloud Connect 7 CC712 · Siemens SIMATIC Clo…
- CVE-2023-29107A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versiSiemens SIMATIC Cloud Connect 7 CC712 · Siemens SIMATIC Clo…
- CVE-2023-29106A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versiSiemens SIMATIC Cloud Connect 7 CC712 · Siemens SIMATIC Clo…
- CVE-2023-29105A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC712 (All versiSiemens SIMATIC Cloud Connect 7 CC712 · Siemens SIMATIC Clo…
- CVE-2023-29104A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versiSiemens SIMATIC Cloud Connect 7 CC712 · Siemens SIMATIC Clo…
- CVE-2023-29103A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC712 (All versiSiemens SIMATIC Cloud Connect 7 CC712 · Siemens SIMATIC Clo…
- CVE-2023-27410A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1).Siemens SCALANCE LPE9403
- CVE-2023-27409A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1).Siemens SCALANCE LPE9403
- CVE-2023-27408A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1).Siemens SCALANCE LPE9403
- CVE-2022-46844WordPress PixFields Plugin <= 0.7.0 is vulnerable to Cross Site Scripting (XSS)PixelGrade PixFields
- CVE-2023-23647WordPress Team Member Plugin <= 4.4 is vulnerable to Cross Site Scripting (XSS)Sk. Abul Hasan Team Member – Team with Slider
- CVE-2023-24372WordPress Simple Custom Author Profiles Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)USB Memory Direct Simple Custom Author Profiles
- CVE-2023-23734WordPress Userlike – WordPress Live Chat plugin Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)David Voswinkel Userlike – WordPress Live Chat plugin
- CVE-2023-23733WordPress Lazy Social Comments Plugin <= 2.0.4 is vulnerable to Cross Site Scripting (XSS)Joel James Lazy Social Comments
- CVE-2023-23732WordPress Disqus Conditional Load Plugin <= 11.0.6 is vulnerable to Cross Site Scripting (XSS)Joel James Disqus Conditional Load
- CVE-2023-23862WordPress Vertical scroll recent post Plugin <= 14.0 is vulnerable to Cross Site Scripting (XSS)Gopi Ramasamy Vertical scroll recent post
- CVE-2023-23884WordPress Kanban Boards for WordPress Plugin <= 2.5.20 is vulnerable to Cross Site Scripting (XSS)Kanban for WordPress Kanban Boards for WordPress
- CVE-2023-23883WordPress WP Content Filter – Censor All Offensive Content From Your Site Plugin <= 3.0.1 is vulnerable to Cross Site Scripting (XSS)David Gwyer WP Content Filter
- CVE-2023-23664WordPress ConvertBox Auto Embed WordPress plugin Plugin <= 1.0.19 is vulnerable to Cross Site Scripting (XSS)ConvertBox Auto Embed WordPress plugin
- CVE-2023-23793WordPress Read More Without Refresh Plugin <= 3.1 is vulnerable to Cross Site Scripting (XSS)Eightweb Interactive Read More Without Refresh
- CVE-2022-41640WordPress Wholesale Suite Plugin <= 2.1.5 is vulnerable to Cross Site Scripting (XSS)Rymera Web Wholesale Suite
- CVE-2023-23863WordPress TreePress – Easy Family Trees & Ancestor Profiles Plugin <= 2.0.22 is vulnerable to Cross Site Scripting (XSS)Black and White Digital TreePress – Easy Family Trees & Anc…
- CVE-2022-4537Hide My WP Ghost – Security Plugin <= 5.0.18 - IP Address Spoofing to Protection Mechanism Bypassjohndarrel WP Ghost (Hide My WP Ghost) – Security & Firewall
- CVE-2023-32112Missing Authorization Check in Vendor Master HierarchySAP_SE Vendor Master Hierarchy
- CVE-2023-31407Cross-Site Scripting (XSS) vulnerability in SAP Business Planning and ConsolidationSAP_SE SAP Business Planning and Consolidation
- CVE-2023-31406Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence PlatformSAP_SE SAP BusinessObjects Business Intelligence Platform
- CVE-2023-31404Information Disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Service)SAP_SE SAP BusinessObjects Business Intelligence Platform
- CVE-2023-30742Cross-Site Scripting (XSS) vulnerability in SAP CRM (WebClient UI)SAP_SE SAP CRM
- CVE-2023-30741Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence PlatformSAP_SE SAP BusinessObjects Business Intelligence Platform
- CVE-2023-30740Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence PlatformSAP_SE SAP BusinessObjects Business Intelligence Platform
- CVE-2022-44419In modem, there is a possible missing verification of NAS Security Mode Command Replay Attacks in LTE.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-44420In modem, there is a possible missing verification of HashMME value in Security Mode Command.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47485In modem control device, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47334In phasecheck server, there is a possible out of bounds read due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48389In modem control device, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39089In mlog service, there is a possible out of bounds read due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-38685In bluetooth service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48387the apipe driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48386the apipe driver, there is a possible use after free due to a logic error.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48385In cp_dump driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48382In log service, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48381In modem control device, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48380In modem control device, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47340In h265 codec firmware, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48379In dialer service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48378In engineermode service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48377In dialer service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48376In dialer service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48375In contacts service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48374In tee service, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48373In tee service, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48372In bootcp service, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48371In dialer service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48370In dialer service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48242In telephony service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48241In telephony service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48240In camera driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48239In camera driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48238In Image filter, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48237In Image filter, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48236In MP3 encoder, there is a possible out of bounds read due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48235In MP3 encoder, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47499In soter service, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47498In soter service, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47497In soter service, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47496In soter service, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47495In soter service, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47494In soter service, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47491In soter service, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47489In soter service, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48231In soter service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47493In soter service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47492In soter service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47490In soter service, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47488In spipe drive, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47487In thermal service, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47486In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47470In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47469In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48234In FM service , there is a possible missing params check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48233In FM service , there is a possible missing params check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-48232In FM service , there is a possible missing params check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2023-29188Cross-Site Scripting (XSS) vulnerability in SAP CRM WebClient UISAP_SE SAP CRM WebClient UI
- CVE-2023-28764Information Disclosure vulnerability in SAP BusinessObjects PlatformSAP_SE SAP BusinessObjects Platform
- CVE-2020-18280Cross Site Scripting vulnerability found in Phodal CMD v.1.0 allows a local attacker to execute arbitrary code via the EMBED SRC function.
- CVE-2021-31711Cross Site Scripting vulnerability found in Trippo ResponsiveFilemanager v.9.14.0 and before allows a remote attacker to execute arbitrary c
- CVE-2023-2156A flaw was found in the networking subsystem of the Linux kernel within the handling of the RPL protocol.Linux kernel
- CVE-2023-25834BUG-000142922 Incomplete permission changes in specific cases.Esri Portal for ArcGIS
- CVE-2023-28125An improper authentication vulnerability exists in Avalanche Premise versions 6.3.x and below that could allow an attacker to gain access toAvalanche
- CVE-2023-28126An authentication bypass vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to gain access by exploitinAvalanche
- CVE-2023-28317A vulnerability has been discovered in Rocket.Chat, where editing messages can change the original timestamp, causing the UI to display messRocket.Chat
- CVE-2023-28318A vulnerability has been discovered in Rocket.Chat, where messages can be hidden regardless of the Message_KeepHistory or Message_ShowDeleteRocket.Chat
- CVE-2023-29092An issue was discovered in Exynos Mobile Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, and Exynos 1080.
- CVE-2023-30057Multiple stored cross-site scripting (XSS) vulnerabilities in FICO Origination Manager Decision Module 4.8.1 allow attackers to execute arbi
- CVE-2023-30083Buffer Overflow vulnerability found in Libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the newVar_N in uti
- CVE-2023-30084An issue found in libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the stackVal function in util/decompile.
- CVE-2023-30085Buffer Overflow vulnerability found in Libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the cws2fws functio
- CVE-2023-30086Buffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a denial of service via the tiffcp function in tiffc
- CVE-2023-30087Buffer Overflow vulnerability found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjs_mk_string functio
- CVE-2023-30088An issue found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjs_execute function in mjs.c.
- CVE-2023-31489An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_capability_llgr() function.
- CVE-2023-31490An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_attr_psid_sub() function.
- CVE-2023-31799Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the system annnounce
- CVE-2023-31800Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the forum title para
- CVE-2023-31801Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the skills wheel par
- CVE-2023-31802Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the skype and linedi
- CVE-2023-31803Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the resource sequenc
- CVE-2023-31804Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via the course category
- CVE-2023-31805Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local authenticated attacker to execute arbitrary code via the ho
- CVE-2023-31806Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via a crafted payload to
- CVE-2023-31807Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via a crafted payload to
- CVE-2023-31972yasm v1.3.0 was discovered to contain a use after free via the function pp_getline at /nasm/nasm-pp.c.
- CVE-2023-31974yasm v1.3.0 was discovered to contain a use after free via the function error at /nasm/nasm-pp.c.
- CVE-2023-31975yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c.