CVEs published May 10, 2023
209 CVEs were published on May 10, 2023: 11 critical, 56 high.
- Published
- 209
- Critical
- 11
- High
- 56
- Medium
- 131
- Low
- 11
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 44
Most affected products
- Schweitzer Engineering Laboratories SEL-3505 · Schweitze… +8
- 19
- Intel(R) Server Board BMC firmware
- 10
- Intel(R) DCM software
- 6
- Intel(R) NUC Pro Software Suite
- 5
- Intel(R) Trace Analyzer and Collector software
- 5
- Seiko Solutions SkyBridge MB-A100/110
- 5
- Intel(R) NUC BIOS firmware
- 4
- Intel(R) QAT drivers for Windows
- 4
- Intel(R) VROC software
- 4
- pimcore/pimcore
- 4
Critical 11
- CVE-2022-29842Command Injection Vulnerability in Western Digital My Cloud devicesWestern Digital My Cloud OS
- CVE-2023-32080Wings vulnerable to escape to host from installation containerpterodactyl wings · github.com/pterodactyl/wings
- CVE-2023-31149Improper Input Validation in Web InterfaceSchweitzer Engineering Laboratories SEL-3505 · Schweitze… +8
- CVE-2023-31148Improper Input Validation in Web InterfaceSchweitzer Engineering Laboratories SEL-3505 · Schweitze… +8
- CVE-2022-36937HHVM 4.172.0 and all prior versions use TLS 1.0 for secure connections when handling tls:// URLs in the stream extension.Facebook HHVM
- CVE-2023-32070Improper Neutralization of Script in Attributes in XWiki (X)HTML renderersxwiki-rendering · org.xwiki.rendering:xwiki-rendering-sy… +6
- CVE-2023-30194Prestashop posstaticfooter <= 1.0.0 is vulnerable to SQL Injection via posstaticfooter::getPosCurrentHook().
- CVE-2023-30352Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard-coded default password for the RTSP feed.
- CVE-2023-30353Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 allows unauthenticated remote code execution via an XML document.
- CVE-2023-30354Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 does not defend against physical access to U-Boot via the UART: the Wi-Fi passwo
- CVE-2023-31471An issue was discovered on GL.iNet devices before 3.216.
High 56
- CVE-2022-29841OS Command Injection vulnerability in Western Digital My Cloud devicesWestern Digital My Cloud OS
- CVE-2023-31150Storing Passwords in a Recoverable FormatSchweitzer Engineering Laboratories SEL-3505 · Schweitze… +8
- CVE-2022-41985An authentication bypass vulnerability exists in the Authentication functionality of Weston Embedded uC-FTPs v 1.98.00.Weston Embedded uC-FTPs
- CVE-2023-27298Uncontrolled search path in the WULT software maintained by Intel(R) before version 1.0.0 (commit id 592300b) may allow an unauthenticated uWULT software maintained by Intel
- CVE-2022-43507Improper buffer restrictions in the Intel(R) QAT Engine for OpenSSL before version 0.6.16 may allow a privileged user to potentially enable Intel(R) QAT Engine for OpenSSL
- CVE-2022-41699Incorrect permission assignment for critical resource in some Intel(R) QAT drivers for Windows before version 1.9.0 may allow an authenticatIntel(R) QAT drivers for Windows
- CVE-2022-33894Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of Intel(R) Processors
- CVE-2022-44619Insecure storage of sensitive information in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enaIntel(R) DCM software
- CVE-2022-42465Improper access control in kernel mode driver for the Intel(R) OFU software before version 14.1.30 may allow a privileged user to potentiallIntel(R) OFU software
- CVE-2022-41784Improper access control in kernel mode driver for the Intel(R) OFU software before version 14.1.30 may allow an authenticated user to potentIntel(R) OFU software
- CVE-2022-40207Improper access control in the Intel(R) SUR software before version 2.4.8989 may allow an authenticated user to potentially enable escalatioIntel(R) SUR software
- CVE-2023-22442Out of bounds write in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of priviIntel(R) Server Board BMC firmware
- CVE-2023-25545Improper buffer restrictions in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalationIntel(R) Server Board BMC firmware
- CVE-2023-22297Access of memory location after end of buffer in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to Intel(R) Server Board BMC firmware
- CVE-2023-22661Buffer overflow in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilegeIntel(R) Server Board BMC firmware
- CVE-2022-41690Improper access control in the Intel(R) Retail Edge Mobile iOS application before version 3.4.7 may allow an authenticated user to potentialIntel(R) Retail Edge Mobile iOS application
- CVE-2022-21804Out-of-bounds write in software for the Intel QAT Driver for Windows before version 1.9.0-0008 may allow an authenticated user to potentiallIntel QAT Driver for Windows
- CVE-2022-29919Use after free in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalation of pIntel(R) VROC software
- CVE-2022-32766Improper input validation for some Intel(R) BIOS firmware may allow a privileged user to potentially enable escalation of privilege via locaIntel(R) BIOS firmware
- CVE-2023-22312Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via loIntel(R) NUC BIOS firmware
- CVE-2022-28699Improper input validation for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via Intel(R) NUC BIOS firmware
- CVE-2022-34147Improper input validation in BIOS firmware for some Intel(R) NUC 9 Extreme Laptop Kits, Intel(R) NUC Performance Kits, Intel(R) NUC PerformaIntel(R) NUC 9 Extreme Laptop Kits, Intel(R) NUC Performanc…
- CVE-2022-36339Improper input validation in firmware for Intel(R) NUC 8 Compute Element, Intel(R) NUC 11 Compute Element, Intel(R) NUC 12 Compute Element mIntel(R) NUC 8 Compute Element, Intel(R) NUC 11 Compute Ele…
- CVE-2023-23569Stack-based buffer overflow for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an Intel(R) Trace Analyzer and Collector software
- CVE-2023-28410Improper restriction of operations within the bounds of a memory buffer in some Intel(R) i915 Graphics drivers for linux before kernel versiIntel(R) i915 Graphics drivers for linux
- CVE-2022-47590WordPress Maintenance Switch Plugin <= 1.5.2 is vulnerable to Cross Site Scripting (XSS)Fugu Maintenance Switch
- CVE-2022-47600WordPress Mass Email To users Plugin <= 1.1.4 is vulnerable to Cross Site Scripting (XSS)I Thirteen Web Solution Mass Email To users
- CVE-2022-47441WordPress Charitable Plugin <= 1.7.0.10 is vulnerable to Cross Site Scripting (XSS)Charitable Donations & Fundraising Team Donation Forms by C…
- CVE-2023-27455WordPress Update Image Tag Alt Attribute Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS)Maui Marketing Update Image Tag Alt Attribute
- CVE-2023-27419WordPress Viable blog Theme <= 1.1.4 is vulnerable to Cross Site Scripting (XSS)Everest themes Viable Blog
- CVE-2023-29101WordPress Betheme Theme <= 26.7.5 is vulnerable to Cross Site Scripting (XSS)Muffingroup Betheme
- CVE-2023-24392WordPress Full Width Banner Slider Wp Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)I Thirteen Web Solution Full Width Banner Slider Wp
- CVE-2023-30777WordPress Advanced Custom Fields / Advanced Custom Fields PRO plugins <= 6.1.5 vulnerable to Cross Site Scripting (XSS)WP Engine Advanced Custom Fields Pro · WP Engine Advanced C…
- CVE-2023-26126All versions of the package m.static are vulnerable to Directory Traversal due to improper input sanitization of the path being requested vim.static
- CVE-2021-45345Buffer Overflow vulnerability found in En3rgy WebcamServer v.0.5.2 allows a remote attacker to cause a denial of service via the WebcamServe
- CVE-2023-22441Missing authentication for critical function exists in Seiko Solutions SkyBridge series, which may allow a remote attacker to obtain or alteSeiko Solutions SkyBridge MB-A200 and SkyBridge BASIC MB-A1…
- CVE-2023-23578Improper access control vulnerability in SkyBridge MB-A200 firmware Ver.Seiko Solutions SkyBridge MB-A200
- CVE-2023-23906Missing authentication for critical function exists in SkyBridge MB-A100/110 firmware Ver.Seiko Solutions SkyBridge MB-A100/110
- CVE-2023-25568Boxo bitswap/server: DOS unbounded persistent memory leakipfs boxo · github.com/ipfs/go-bitswap +1
- CVE-2023-27385Heap-based buffer overflow vulnerability exists in CX-Drive All models all versions.OMRON CX-Drive All models
- CVE-2023-27563The n8n package 0.218.0 for Node.js allows Escalation of Privileges.n8n
- CVE-2023-27564The n8n package 0.218.0 for Node.js allows Information Disclosure.n8n
- CVE-2023-27889Cross-site request forgery (CSRF) vulnerability in LIQUID SPEECH BALLOON versions prior to 1.2 allows a remote unauthenticated attacker to hLIQUID DESIGN LIQUID SPEECH BALLOON
- CVE-2023-29930An issue was found in Genesys CIC Polycom phone provisioning TFTP Server all version allows a remote attacker to execute arbitrary code via
- CVE-2023-30351Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard-coded default password for root which is stored
- CVE-2023-30356Missing Support for an Integrity Check in Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 allows attackers to update the device
- CVE-2023-31556podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfDictionary::findKeyParent.
- CVE-2023-31566Podofo v0.10.0 was discovered to contain a heap-use-after-free via the component PoDoFo::PdfEncrypt::IsMetadataEncrypted().
- CVE-2023-31567Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptAESV3::PdfEncryptAESV3.
- CVE-2023-31568Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptRC4::PdfEncryptRC4.
- CVE-2023-31906Jerryscript 3.0.0(commit 1a2c047) was discovered to contain a heap-buffer-overflow via the component lexer_compare_identifier_to_chars at /j
- CVE-2023-31907Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via the component scanner_literal_is_created at /jerry-core/parser/js/js-
- CVE-2023-31908Jerryscript 3.0 (commit 05dbbd1) was discovered to contain a heap-buffer-overflow via the component ecma_builtin_typedarray_prototype_sort.
- CVE-2023-31910Jerryscript 3.0 (commit 05dbbd1) was discovered to contain a heap-buffer-overflow via the component parser_parse_function_statement at /jerr
- CVE-2023-32568An issue was discovered in Veritas InfoScale Operations Manager (VIOM) before 7.4.2.800 and 8.x before 8.0.410.
- CVE-2023-32569An issue was discovered in Veritas InfoScale Operations Manager (VIOM) before 7.4.2.800 and 8.x before 8.0.410.
Medium, low and unrated 142
- CVE-2022-29840Server Side Request Forgery Vulnerability in Western Digital My Cloud DevicesWestern Digital My Cloud OS
- CVE-2023-31166Improper Limitation of a Pathname to a Restricted DirectorySchweitzer Engineering Laboratories SEL-3505 · Schweitze… +8
- CVE-2023-31165Improper Neutralization of Input During Web Page GenerationSchweitzer Engineering Laboratories SEL-3505 · Schweitze… +8
- CVE-2023-31164Improper Neutralization of Input During Web Page GenerationSchweitzer Engineering Laboratories SEL-3505 · Schweitze… +8
- CVE-2023-31163Improper Neutralization of Input During Web Page GenerationSchweitzer Engineering Laboratories SEL-3505 · Schweitze… +8
- CVE-2023-31162Improper Input Validation in Web InterfaceSchweitzer Engineering Laboratories SEL-3505 · Schweitze… +8
- CVE-2023-31161Improper Input Validation in Web InterfaceSchweitzer Engineering Laboratories SEL-3532 · Schweitze… +3
- CVE-2023-31160Improper Neutralization of Input During Web Page GenerationSchweitzer Engineering Laboratories SEL-3505 · Schweitze… +8
- CVE-2022-36329Denial of Service over OTA mechanism in Western Digital My Cloud Home and ibi devicesWestern Digital My Cloud Home and My Cloud Home Duo · SanDi…
- CVE-2023-31159Improper Neutralization of Input During Web Page GenerationSchweitzer Engineering Laboratories SEL-3505 · Schweitze… +8
- CVE-2023-31158Improper Neutralization of Input During Web Page GenerationSchweitzer Engineering Laboratories SEL-3505 · Schweitze… +8
- CVE-2023-31157Improper Neutralization of Input During Web Page GenerationSchweitzer Engineering Laboratories SEL-3505 · Schweitze… +8
- CVE-2023-31156Improper Neutralization of Input During Web Page GenerationSchweitzer Engineering Laboratories SEL-3505 · Schweitze… +8
- CVE-2023-31155Improper Neutralization of Input During Web Page GenerationSchweitzer Engineering Laboratories SEL-3505 · Schweitze… +8
- CVE-2023-31154Improper Neutralization of Input During Web Page GenerationSchweitzer Engineering Laboratories SEL-3505 · Schweitze… +8
- CVE-2023-31153Improper Neutralization of Input During Web Page GenerationSchweitzer Engineering Laboratories SEL-3505 · Schweitze… +8
- CVE-2023-31152Authentication Bypass Using an Alternate Path or ChannelSchweitzer Engineering Laboratories SEL-3505 · Schweitze… +8
- CVE-2023-31151Improper Certificate ValidationSchweitzer Engineering Laboratories SEL-3505 · Schweitze… +8
- CVE-2023-2310Channel Accessible by Non-EndpointSchweitzer Engineering Laboratories SEL-3505 · Schweitze… +8
- CVE-2023-32076in-toto vulnerable to Configuration Read From Local Directoryin-toto
- CVE-2023-0008PAN-OS: Local File Disclosure Vulnerability in the PAN-OS Web InterfacePalo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1
- CVE-2023-0007PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web InterfacePalo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1
- CVE-2022-46378An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00.Weston Embedded uC-FTPs
- CVE-2022-46377An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00.Weston Embedded uC-FTPs
- CVE-2023-25772Improper input validation in the Intel(R) Retail Edge Mobile Android application before version 3.0.301126-RELEASE may allow an authenticateIntel(R) Retail Edge Mobile Android application
- CVE-2023-22440Incorrect default permissions in the Intel(R) SCS Add-on software installer for Microsoft SCCM all versions may allow an authenticated user Intel(R) SCS Add-on software installer for Microsoft SCCM
- CVE-2023-22447Insertion of sensitive information into log file in the Open CAS software for Linux maintained by Intel before version 22.6.2 may allow a prOpen CAS software for Linux maintained by Intel
- CVE-2023-23573Improper access control in the Intel(R) Unite(R) android application before Release 17 may allow a privileged user to potentially enable infIntel(R) Unite(R) android application
- CVE-2023-25179Uncontrolled resource consumption in the Intel(R) Unite(R) android application before Release 17 may allow an authenticated user to potentiaIntel(R) Unite(R) android application
- CVE-2022-43474Uncontrolled search path for the DSP Builder software installer before version 22.4 for Intel(R) FPGAs Pro Edition may allow an authenticateDSP Builder software installer for Intel(R) FPGAs Pro Editi…
- CVE-2022-41610Improper authorization in Intel(R) EMA Configuration Tool before version 1.0.4 and Intel(R) MC before version 2.4 software may allow an authIntel(R) EMA Configuration Tool
- CVE-2022-41693Uncontrolled search path in the Intel(R) Quartus(R) Prime Pro edition software before version 22.3 may allow an authenticated user to potentIntel(R) Quartus(R) Prime Pro edition software
- CVE-2022-45128Improper authorization in the Intel(R) EMA software before version 1.9.0.0 may allow an authenticated user to potentially enable denial of sIntel(R) EMA software
- CVE-2022-43465Improper authorization in the Intel(R) SCS software all versions may allow an authenticated user to potentially enable denial of service viaIntel(R) SCS software
- CVE-2022-27180Uncontrolled search path in the Intel(R) MacCPUID software before version 3.2 may allow an authenticated user to potentially enable escalatiIntel(R) MacCPUID software
- CVE-2022-33963Incorrect default permissions in the software installer for Intel(R) Unite(R) Client software for Windows before version 4.2.34870 may allowsoftware installer for Intel(R) Unite(R) Client software fo…
- CVE-2022-38101Uncontrolled search path in some Intel(R) NUC Chaco Canyon BIOS update software before version iFlashV Windows 5.13.00.2105 may allow an autIntel(R) NUC Chaco Canyon BIOS update software
- CVE-2022-41769Improper access control in the Intel(R) Connect M Android application before version 1.82 may allow an authenticated user to potentially enaIntel(R) Connect M Android application
- CVE-2022-41801Uncontrolled resource consumption in the Intel(R) Connect M Android application before version 1.82 may allow an authenticated user to potenIntel(R) Connect M Android application
- CVE-2022-41621Improper access control in some Intel(R) QAT drivers for Windows before version 1.9.0 may allow an authenticated user to potentially enable Intel(R) QAT drivers for Windows
- CVE-2022-41771Incorrect permission assignment for critical resource in some Intel(R) QAT drivers for Windows before version 1.9.0 may allow an authenticatIntel(R) QAT drivers for Windows
- CVE-2022-40972Improper access control in some Intel(R) QAT drivers for Windows before version 1.9.0 may allow an authenticated user to potentially enable Intel(R) QAT drivers for Windows
- CVE-2022-32576Uncontrolled search path in the Intel(R) Unite(R) Plugin SDK before version 4.2 may allow an authenticated user to potentially enable escalaIntel(R) Unite(R) Plugin SDK
- CVE-2022-38087Exposure of resource to wrong sphere in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable informaIntel(R) Processors
- CVE-2023-22355Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.0.251 may allow an authenticatIntel(R) oneAPI Toolkit and component software installers
- CVE-2022-44610Improper authentication in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of Intel(R) DCM software
- CVE-2022-41979Protection mechanism failure in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enable escalatioIntel(R) DCM software
- CVE-2022-43475Insecure storage of sensitive information in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enaIntel(R) DCM software
- CVE-2022-41998Uncontrolled search path in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enable escalation ofIntel(R) DCM software
- CVE-2022-40685Insufficiently protected credentials in the Intel(R) DCM software before version 5.0.1 may allow an authenticated user to potentially enableIntel(R) DCM software
- CVE-2022-40210Exposure of data element to wrong session in the Intel DCM software before version 5.0.1 may allow an authenticated user to potentially enabIntel DCM software
- CVE-2023-22443Integer overflow in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable denial of service via Intel(R) Server Board BMC firmware
- CVE-2023-24475Out of bounds read in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosuIntel(R) Server Board BMC firmware
- CVE-2023-25175Improper input validation in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information dIntel(R) Server Board BMC firmware
- CVE-2023-28411Double free in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via Intel(R) Server Board BMC firmware
- CVE-2023-25776Improper input validation in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information dIntel(R) Server Board BMC firmware
- CVE-2023-22379Improper input validation in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information dIntel(R) Server Board BMC firmware
- CVE-2022-38787Improper input validation in firmware for some Intel(R) FPGA products before version 2.7.0 Hotfix may allow an authenticated user to potentiIntel(R) FPGA products
- CVE-2022-38103Insecure inherited permissions in the Intel(R) NUC Software Studio Service installer before version 1.17.38.0 may allow an authenticated useIntel(R) NUC Software Studio Service installer
- CVE-2022-46279Improper access control in the Intel(R) Retail Edge android application before version 3.0.301126-RELEASE may allow an authenticated user toIntel(R) Retail Edge android application
- CVE-2022-32578Improper access control for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enableIntel(R) NUC Pro Software Suite
- CVE-2022-34855Path traversal for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalatiIntel(R) NUC Pro Software Suite
- CVE-2022-34848Uncontrolled search path for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enablIntel(R) NUC Pro Software Suite
- CVE-2022-36391Incorrect default permissions for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially Intel(R) NUC Pro Software Suite
- CVE-2022-46656Insecure inherited permissions for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentiallyIntel(R) NUC Pro Software Suite
- CVE-2022-21162Uncontrolled search path for the Intel(R) HDMI Firmware Update tool for NUC before version 1.79.1.1 may allow an authenticated user to potenIntel(R) HDMI Firmware Update tool for NUC
- CVE-2022-40971Incorrect default permissions for the Intel(R) HDMI Firmware Update Tool for NUC before version 1.79.1.1 may allow an authenticated user to Intel(R) HDMI Firmware Update Tool for NUC
- CVE-2022-41808Improper buffer restriction in software for the Intel QAT Driver for Linux before version 1.7.l.4.12 may allow an authenticated user to poteIntel QAT Driver for Linux
- CVE-2022-21239Out-of-bounds read in software for the Intel QAT Driver for Windows before version 1.9.0-0008 may allow an authenticated user to potentiallyIntel QAT Driver for Windows
- CVE-2022-40974Incomplete cleanup in the Intel(R) IPP Cryptography software before version 2021.6 may allow a privileged user to potentially enable informaIntel(R) IPP Cryptography software
- CVE-2022-41646Insufficient control flow management in the Intel(R) IPP Cryptography software before version 2021.6 may allow an unauthenticated user to poIntel(R) IPP Cryptography software
- CVE-2022-37409Insufficient control flow management for the Intel(R) IPP Cryptography software before version 2021.6 may allow an authenticated user to potIntel(R) IPP Cryptography software
- CVE-2022-25976Improper input validation in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable deniIntel(R) VROC software
- CVE-2022-29508Null pointer dereference in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalIntel(R) VROC software
- CVE-2022-30338Incorrect default permissions in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable Intel(R) VROC software
- CVE-2022-32577Improper input validation in BIOS Firmware for some Intel(R) NUC Kits before version PY0081 may allow a privileged user to potentially enablIntel(R) NUC Kits
- CVE-2022-31477Improper initialization for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via locIntel(R) NUC BIOS firmware
- CVE-2022-32582Improper access control in firmware for some Intel(R) NUC Boards, Intel(R) NUC 11 Performance Kit, Intel(R) NUC 11 Performance Mini PC, InteIntel(R) NUC Boards, Intel(R) NUC 11 Performance Kit, Intel…
- CVE-2023-25771Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of service via local acIntel(R) NUC BIOS firmware
- CVE-2022-37327Improper input validation in BIOS firmware for Intel(R) NUC, Intel(R) NUC Performance Kit, Intel(R) NUC Performance Mini PC, Intel(R) NUC 8 Intel(R) NUC, Intel(R) NUC Performance Kit, Intel(R) NUC Pe…
- CVE-2023-27386Uncontrolled search path in some Intel(R) Pathfinder for RISC-V software may allow an authenticated user to potentially enable escalation ofIntel(R) Pathfinder for RISC-V software
- CVE-2023-23909Out-of-bounds read for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticIntel(R) Trace Analyzer and Collector software
- CVE-2022-42878Null pointer dereference for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an autIntel(R) Trace Analyzer and Collector software
- CVE-2023-23910Out-of-bounds write for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authentiIntel(R) Trace Analyzer and Collector software
- CVE-2023-23580Stack-based buffer overflow for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an Intel(R) Trace Analyzer and Collector software
- CVE-2022-46645Uncontrolled resource consumption in the Intel(R) Smart Campus Android application before version 9.9 may allow an authenticated user to potIntel(R) Smart Campus Android application
- CVE-2023-27382Incorrect default permissions in the Audio Service for some Intel(R) NUC P14E Laptop Element software for Windows 10 before version 1.0.0.15Intel(R) NUC P14E Laptop Element software for Windows
- CVE-2022-41628Uncontrolled search path element in the HotKey Services for some Intel(R) NUC P14E Laptop Element software for Windows 10 before version 1.1Intel(R) NUC P14E Laptop Element software for Windows
- CVE-2022-41687Insecure inherited permissions in the HotKey Services for some Intel(R) NUC P14E Laptop Element software for Windows 10 before version 1.1.4Intel(R) NUC P14E Laptop Element software for Windows
- CVE-2022-41658Insecure inherited permissions in the Intel(R) VTune(TM) Profiler software before version 2023.0 may allow an authenticated user to potentiaIntel(R) VTune(TM) Profiler software
- CVE-2022-41982Uncontrolled search path element in the Intel(R) VTune(TM) Profiler software before version 2023.0 may allow an authenticated user to potentIntel(R) VTune(TM) Profiler software
- CVE-2023-1732Improper random reading in CIRCLCloudflare CIRCL · github.com/cloudflare/circl
- CVE-2022-45846WordPress Image Map Pro Plugin < 5.6.9 is vulnerable to Cross Site Request Forgery (CSRF)Nickys Image Map Pro for WordPress - Interactive SVG Image…
- CVE-2022-47587WordPress WP Search Analytics Plugin <= 1.4.5 is vulnerable to Cross Site Scripting (XSS)Cornel Raiu WP Search Analytics
- CVE-2022-47606WordPress WP-CORS Plugin <= 0.2.1 is vulnerable to Cross Site Scripting (XSS)Tim Stephenson WP-CORS
- CVE-2022-27856WordPress Export All URLs Plugin <= 4.1 is vulnerable to Cross Site Scripting (XSS)Atlas Gondal Export All URLs
- CVE-2022-47423WordPress WP-dTree Plugin <= 4.4.5 is vulnerable to Cross Site Scripting (XSS)Ulf Benjaminsson WP-dTree
- CVE-2022-47436WordPress Yatra Plugin <= 2.1.14 is vulnerable to Cross Site Scripting (XSS)MantraBrain Yatra
- CVE-2022-47137WordPress Ninja Tables Plugin <= 4.3.4 is vulnerable to Cross Site Scripting (XSS)WPManageNinja Ninja Tables
- CVE-2022-46861WordPress Login Page Styler Plugin <= 6.2 is vulnerable to Cross Site Scripting (XSS)Zia Imtiaz Custom Login Page Styler for WordPress
- CVE-2022-46817WordPress Flyzoo Chat Plugin <= 2.3.3 is vulnerable to Cross Site Scripting (XSS)Flyzoo Chat
- CVE-2022-46819WordPress Continuous announcement scroller Plugin <= 13.0 is vulnerable to Cross Site Scripting (XSS)Gopi Ramasamy Continuous announcement scroller
- CVE-2022-33961WordPress YellowPencil Visual CSS Style Editor Plugin <= 7.5.8 is vulnerable to Cross Site Scripting (XSS)WaspThemes Visual CSS Style Editor
- CVE-2022-32970WordPress Themify Portfolio Post Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS)Themify Portfolio Post
- CVE-2023-23794WordPress Semalt Blocker Plugin <= 1.1.3 is vulnerable to Cross Site Scripting (XSS)Alex Moss Semalt Blocker
- CVE-2023-23873WordPress BBSpoiler Plugin <= 2.01 is vulnerable to Cross Site Scripting (XSS)Flector BBSpoiler
- CVE-2023-30746WordPress Booqable Rental Plugin Plugin <= 2.4.15 is vulnerable to Cross Site Scripting (XSS)Booqable Rental Software Booqable Rental Plugin
- CVE-2023-22696WordPress Affiliate Links Lite Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)Custom4Web Affiliate Links Lite
- CVE-2023-24406WordPress Simple Popup Images Plugin <= 1.8.6 is vulnerable to Cross Site Scripting (XSS)Muneeb ur Rehman Simple PopUp
- CVE-2023-23701WordPress Easy Sign Up Plugin <= 3.4.1 is vulnerable to Cross Site Scripting (XSS)Andrew @ Geeenville Web Design Easy Sign Up
- CVE-2023-22711WordPress IMPress Listings Plugin <= 2.6.2 is vulnerable to Cross Site Scripting (XSS)Agent Evolution IMPress Listings
- CVE-2023-24418WordPress Tiny carousel horizontal slider plus Plugin <= 3.2 is vulnerable to Cross Site Scripting (XSS)Gopi Ramasamy Tiny carousel horizontal slider plus
- CVE-2023-23812WordPress Enhanced WP Contact Form Plugin <= 2.2.3 is vulnerable to Cross Site Scripting (XSS)Joost de Valk Enhanced WP Contact Form
- CVE-2023-23789WordPress Premmerce Redirect Manager Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)Premmerce Redirect Manager
- CVE-2023-23786WordPress affiliate-toolkit – WordPress Affiliate Plugin Plugin <= 3.3.3 is vulnerable to Cross Site Scripting (XSS)Christof Servit affiliate-toolkit
- CVE-2023-23788WordPress Custom More Link Complete Plugin <= 1.4.1 is vulnerable to Cross Site Scripting (XSS)Florin Arjocu Custom More Link Complete
- CVE-2023-28932WordPress WPMobile.App Plugin <= 11.20 is vulnerable to Cross Site Scripting (XSS)WPMobile.App — Android and iOS Mobile Application
- CVE-2023-2619SourceCodester Online Tours & Travels Management System disapprove_delete.php exec sql injectionSourceCodester Online Tours & Travels Management System
- CVE-2023-2618OpenCV wechat_qrcode Module decoded_bit_stream_parser.cpp decodeHanziSegment memory leakOpenCV wechat_qrcode Module
- CVE-2023-2617OpenCV wechat_qrcode Module decoded_bit_stream_parser.cpp decodeByteSegment null pointer dereferenceOpenCV wechat_qrcode Module
- CVE-2022-4008In affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which results in Denial of ServiceOctopus Deploy Octopus Tentacle
- CVE-2023-22361Improper privilege management vulnerability in SkyBridge MB-A100/110 firmware Ver.Seiko Solutions SkyBridge MB-A100/110
- CVE-2023-23901Improper following of a certificate's chain of trust exists in SkyBridge MB-A200 firmware Ver.Seiko Solutions SkyBridge MB-A200 and SkyBridge BASIC MB-A1…
- CVE-2023-24586Cleartext storage of sensitive information exists in SkyBridge MB-A100/110 firmware Ver.Seiko Solutions SkyBridge MB-A100/110
- CVE-2023-25070Cleartext transmission of sensitive information exists in SkyBridge MB-A100/110 firmware Ver.Seiko Solutions SkyBridge MB-A100/110
- CVE-2023-25072Use of weak credentials exists in SkyBridge MB-A100/110 firmware Ver.Seiko Solutions SkyBridge MB-A100/110
- CVE-2023-25184Use of weak credentials exists in Seiko Solutions SkyBridge and SkySpider series, which may allow a remote unauthenticated attacker to decrySeiko Solutions SkyBridge MB-A200, SkyBridge BASIC MB-A130,…
- CVE-2023-25833BUG-000155004 HTML injection issue in Portal for ArcGIS.Esri Portal for ArcGIS
- CVE-2023-2614Cross-site Scripting (XSS) - DOM in pimcore/pimcorepimcore/pimcore
- CVE-2023-2615Cross-site Scripting (XSS) - Reflected in pimcore/pimcorepimcore/pimcore
- CVE-2023-2616Cross-site Scripting (XSS) - Generic in pimcore/pimcorepimcore/pimcore
- CVE-2023-2629Improper Neutralization of Formula Elements in a CSV File in pimcore/customer-data-frameworkpimcore/customer-data-framework · pimcore/customer-manageme…
- CVE-2023-2630Cross-site Scripting (XSS) - Stored in pimcore/pimcorepimcore/pimcore
- CVE-2023-27510JB Inquiry form contains an exposure of private personal information to an unauthorized actor vulnerability, which may allow a remote unauthJubei JB Inquiry form
- CVE-2023-27527Shinseiyo Sogo Soft (7.9A) and earlier improperly restricts XML external entity references (XXE).The Ministry of Justice Shinseiyo Sogo Soft
- CVE-2023-27562The n8n package 0.218.0 for Node.js allows Directory Traversal.n8n
- CVE-2023-27888Cross-site scripting vulnerability in Joruri Gw Ver 3.2.5 and earlier allows a remote authenticated attacker to inject an arbitrary script vSiteBridge Joruri Gw
- CVE-2023-27918Cross-site scripting vulnerability in Appointment and Event Booking Calendar for WordPress - Amelia versions prior to 1.0.76 allows a remoteTMS Appointment and Event Booking Calendar for WordPress -…
- CVE-2023-27919Authentication bypass vulnerability in NEXT ENGINE Integration Plugin (for EC-CUBE 2.0 series) all versions allows a remote unauthenticated NEXT ENGINE Integration Plugin
- CVE-2023-31555podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfObject::DelayedLoad.
- CVE-2023-32570VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that can lead to an application crash, related to dav1d_decode_frame_exit.
- CVE-2023-32573In Qt before 5.15.14, 6.0.x through 6.2.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1, QtSvg QSvgFont m_unitsPerEm initialization is