# CVEs published 2023-05-10

209 CVEs were published on May 10, 2023: 11 critical, 56 high. Days are UTC.

- [CVE-2022-29840](https://cve.now/CVE-2022-29840.md): Server Side Request Forgery Vulnerability in Western Digital My Cloud Devices (CVSS 5.1, Western Digital My Cloud OS)
- [CVE-2022-29841](https://cve.now/CVE-2022-29841.md): OS Command Injection vulnerability in Western Digital My Cloud devices (CVSS 8.0, Western Digital My Cloud OS)
- [CVE-2022-29842](https://cve.now/CVE-2022-29842.md): Command Injection Vulnerability in Western Digital My Cloud devices (CVSS 9.8, Western Digital My Cloud OS)
- [CVE-2023-32080](https://cve.now/CVE-2023-32080.md): Wings vulnerable to escape to host from installation container (CVSS 9.1, pterodactyl wings · github.com/pterodactyl/wings)
- [CVE-2023-31166](https://cve.now/CVE-2023-31166.md): Improper Limitation of a Pathname to a Restricted Directory (CVSS 4.1, Schweitzer Engineering Laboratories SEL-3505 · Schweitze… +8)
- [CVE-2023-31165](https://cve.now/CVE-2023-31165.md): Improper Neutralization of Input During Web Page Generation (CVSS 4.3, Schweitzer Engineering Laboratories SEL-3505 · Schweitze… +8)
- [CVE-2023-31164](https://cve.now/CVE-2023-31164.md): Improper Neutralization of Input During Web Page Generation (CVSS 4.3, Schweitzer Engineering Laboratories SEL-3505 · Schweitze… +8)
- [CVE-2023-31163](https://cve.now/CVE-2023-31163.md): Improper Neutralization of Input During Web Page Generation (CVSS 4.3, Schweitzer Engineering Laboratories SEL-3505 · Schweitze… +8)
- [CVE-2023-31162](https://cve.now/CVE-2023-31162.md): Improper Input Validation in Web Interface (CVSS 4.8, Schweitzer Engineering Laboratories SEL-3505 · Schweitze… +8)
- [CVE-2023-31161](https://cve.now/CVE-2023-31161.md): Improper Input Validation in Web Interface (CVSS 5.9, Schweitzer Engineering Laboratories SEL-3532 · Schweitze… +3)
- [CVE-2023-31160](https://cve.now/CVE-2023-31160.md): Improper Neutralization of Input During Web Page Generation (CVSS 4.3, Schweitzer Engineering Laboratories SEL-3505 · Schweitze… +8)
- [CVE-2022-36329](https://cve.now/CVE-2022-36329.md): Denial of Service over OTA mechanism in Western Digital My Cloud Home and ibi devices (CVSS 4.4, Western Digital My Cloud Home and My Cloud Home Duo · SanDi…)
- [CVE-2023-31159](https://cve.now/CVE-2023-31159.md): Improper Neutralization of Input During Web Page Generation (CVSS 4.3, Schweitzer Engineering Laboratories SEL-3505 · Schweitze… +8)
- [CVE-2023-31158](https://cve.now/CVE-2023-31158.md): Improper Neutralization of Input During Web Page Generation (CVSS 4.3, Schweitzer Engineering Laboratories SEL-3505 · Schweitze… +8)
- [CVE-2023-31157](https://cve.now/CVE-2023-31157.md): Improper Neutralization of Input During Web Page Generation (CVSS 4.3, Schweitzer Engineering Laboratories SEL-3505 · Schweitze… +8)
- [CVE-2023-31156](https://cve.now/CVE-2023-31156.md): Improper Neutralization of Input During Web Page Generation (CVSS 4.3, Schweitzer Engineering Laboratories SEL-3505 · Schweitze… +8)
- [CVE-2023-31155](https://cve.now/CVE-2023-31155.md): Improper Neutralization of Input During Web Page Generation (CVSS 4.3, Schweitzer Engineering Laboratories SEL-3505 · Schweitze… +8)
- [CVE-2023-31154](https://cve.now/CVE-2023-31154.md): Improper Neutralization of Input During Web Page Generation (CVSS 4.3, Schweitzer Engineering Laboratories SEL-3505 · Schweitze… +8)
- [CVE-2023-31153](https://cve.now/CVE-2023-31153.md): Improper Neutralization of Input During Web Page Generation (CVSS 4.3, Schweitzer Engineering Laboratories SEL-3505 · Schweitze… +8)
- [CVE-2023-31152](https://cve.now/CVE-2023-31152.md): Authentication Bypass Using an Alternate Path or Channel (CVSS 4.0, Schweitzer Engineering Laboratories SEL-3505 · Schweitze… +8)
- [CVE-2023-31151](https://cve.now/CVE-2023-31151.md): Improper Certificate Validation (CVSS 4.7, Schweitzer Engineering Laboratories SEL-3505 · Schweitze… +8)
- [CVE-2023-31150](https://cve.now/CVE-2023-31150.md): Storing Passwords in a Recoverable Format (CVSS 8.0, Schweitzer Engineering Laboratories SEL-3505 · Schweitze… +8)
- [CVE-2023-31149](https://cve.now/CVE-2023-31149.md): Improper Input Validation in Web Interface (CVSS 9.1, Schweitzer Engineering Laboratories SEL-3505 · Schweitze… +8)
- [CVE-2023-31148](https://cve.now/CVE-2023-31148.md): Improper Input Validation in Web Interface (CVSS 9.1, Schweitzer Engineering Laboratories SEL-3505 · Schweitze… +8)
- [CVE-2023-2310](https://cve.now/CVE-2023-2310.md): Channel Accessible by Non-Endpoint (CVSS 6.8, Schweitzer Engineering Laboratories SEL-3505 · Schweitze… +8)
- [CVE-2022-36937](https://cve.now/CVE-2022-36937.md): HHVM 4.172.0 and all prior versions use TLS 1.0 for secure connections when handling tls:// URLs in the stream extension. (CVSS 9.8, Facebook HHVM)
- [CVE-2023-32076](https://cve.now/CVE-2023-32076.md): in-toto vulnerable to Configuration Read From Local Directory (CVSS 5.5, in-toto)
- [CVE-2023-32070](https://cve.now/CVE-2023-32070.md): Improper Neutralization of Script in Attributes in XWiki (X)HTML renderers (CVSS 9.1, xwiki-rendering · org.xwiki.rendering:xwiki-rendering-sy… +6)
- [CVE-2023-0008](https://cve.now/CVE-2023-0008.md): PAN-OS: Local File Disclosure Vulnerability in the PAN-OS Web Interface (CVSS 4.4, Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1)
- [CVE-2023-0007](https://cve.now/CVE-2023-0007.md): PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web Interface (CVSS 6.5, Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1)
- [CVE-2022-41985](https://cve.now/CVE-2022-41985.md): An authentication bypass vulnerability exists in the Authentication functionality of Weston Embedded uC-FTPs v 1.98.00. (CVSS 8.6, Weston Embedded uC-FTPs)
- [CVE-2022-46378](https://cve.now/CVE-2022-46378.md): An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. (CVSS 6.5, Weston Embedded uC-FTPs)
- [CVE-2022-46377](https://cve.now/CVE-2022-46377.md): An out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. (CVSS 6.5, Weston Embedded uC-FTPs)
- [CVE-2023-25772](https://cve.now/CVE-2023-25772.md): Improper input validation in the Intel(R) Retail Edge Mobile Android application before version 3.0.301126-RELEASE may allow an authenticate (CVSS 5.0, Intel(R) Retail Edge Mobile Android application)
- [CVE-2023-27298](https://cve.now/CVE-2023-27298.md): Uncontrolled search path in the WULT software maintained by Intel(R) before version 1.0.0 (commit id 592300b) may allow an unauthenticated u (CVSS 8.8, WULT software maintained by Intel)
- [CVE-2023-22440](https://cve.now/CVE-2023-22440.md): Incorrect default permissions in the Intel(R) SCS Add-on software installer for Microsoft SCCM all versions may allow an authenticated user (CVSS 6.7, Intel(R) SCS Add-on software installer for Microsoft SCCM)
- [CVE-2023-22447](https://cve.now/CVE-2023-22447.md): Insertion of sensitive information into log file in the Open CAS software for Linux maintained by Intel before version 22.6.2 may allow a pr (CVSS 2.0, Open CAS software for Linux maintained by Intel)
- [CVE-2023-23573](https://cve.now/CVE-2023-23573.md): Improper access control in the Intel(R) Unite(R) android application before Release 17 may allow a privileged user to potentially enable inf (CVSS 4.4, Intel(R) Unite(R) android application)
- [CVE-2023-25179](https://cve.now/CVE-2023-25179.md): Uncontrolled resource consumption in the Intel(R) Unite(R) android application before Release 17 may allow an authenticated user to potentia (CVSS 5.0, Intel(R) Unite(R) android application)
- [CVE-2022-43474](https://cve.now/CVE-2022-43474.md): Uncontrolled search path for the DSP Builder software installer before version 22.4 for Intel(R) FPGAs Pro Edition may allow an authenticate (CVSS 6.7, DSP Builder software installer for Intel(R) FPGAs Pro Editi…)
- [CVE-2022-41610](https://cve.now/CVE-2022-41610.md): Improper authorization in Intel(R) EMA Configuration Tool before version 1.0.4 and Intel(R) MC before version 2.4 software may allow an auth (CVSS 5.0, Intel(R) EMA Configuration Tool)
- [CVE-2022-41693](https://cve.now/CVE-2022-41693.md): Uncontrolled search path in the Intel(R) Quartus(R) Prime Pro edition software before version 22.3 may allow an authenticated user to potent (CVSS 6.7, Intel(R) Quartus(R) Prime Pro edition software)
- [CVE-2022-43507](https://cve.now/CVE-2022-43507.md): Improper buffer restrictions in the Intel(R) QAT Engine for OpenSSL before version 0.6.16 may allow a privileged user to potentially enable (CVSS 7.5, Intel(R) QAT Engine for OpenSSL)
- [CVE-2022-45128](https://cve.now/CVE-2022-45128.md): Improper authorization in the Intel(R) EMA software before version 1.9.0.0 may allow an authenticated user to potentially enable denial of s (CVSS 5.0, Intel(R) EMA software)
- [CVE-2022-43465](https://cve.now/CVE-2022-43465.md): Improper authorization in the Intel(R) SCS software all versions may allow an authenticated user to potentially enable denial of service via (CVSS 5.0, Intel(R) SCS software)
- [CVE-2022-27180](https://cve.now/CVE-2022-27180.md): Uncontrolled search path in the Intel(R) MacCPUID software before version 3.2 may allow an authenticated user to potentially enable escalati (CVSS 4.2, Intel(R) MacCPUID software)
- [CVE-2022-33963](https://cve.now/CVE-2022-33963.md): Incorrect default permissions in the software installer for Intel(R) Unite(R) Client software for Windows before version 4.2.34870 may allow (CVSS 6.7, software installer for Intel(R) Unite(R) Client software fo…)
- [CVE-2022-38101](https://cve.now/CVE-2022-38101.md): Uncontrolled search path in some Intel(R) NUC Chaco Canyon BIOS update software before version iFlashV Windows 5.13.00.2105 may allow an aut (CVSS 6.7, Intel(R) NUC Chaco Canyon BIOS update software)
- [CVE-2022-41769](https://cve.now/CVE-2022-41769.md): Improper access control in the Intel(R) Connect M Android application before version 1.82 may allow an authenticated user to potentially ena (CVSS 4.8, Intel(R) Connect M Android application)
- [CVE-2022-41801](https://cve.now/CVE-2022-41801.md): Uncontrolled resource consumption in the Intel(R) Connect M Android application before version 1.82 may allow an authenticated user to poten (CVSS 5.0, Intel(R) Connect M Android application)
- [CVE-2022-41621](https://cve.now/CVE-2022-41621.md): Improper access control in some Intel(R) QAT drivers for Windows before version 1.9.0 may allow an authenticated user to potentially enable (CVSS 3.3, Intel(R) QAT drivers for Windows)
- [CVE-2022-41771](https://cve.now/CVE-2022-41771.md): Incorrect permission assignment for critical resource in some Intel(R) QAT drivers for Windows before version 1.9.0 may allow an authenticat (CVSS 6.5, Intel(R) QAT drivers for Windows)
- [CVE-2022-40972](https://cve.now/CVE-2022-40972.md): Improper access control in some Intel(R) QAT drivers for Windows before version 1.9.0 may allow an authenticated user to potentially enable (CVSS 6.7, Intel(R) QAT drivers for Windows)
- [CVE-2022-41699](https://cve.now/CVE-2022-41699.md): Incorrect permission assignment for critical resource in some Intel(R) QAT drivers for Windows before version 1.9.0 may allow an authenticat (CVSS 8.2, Intel(R) QAT drivers for Windows)
- [CVE-2022-32576](https://cve.now/CVE-2022-32576.md): Uncontrolled search path in the Intel(R) Unite(R) Plugin SDK before version 4.2 may allow an authenticated user to potentially enable escala (CVSS 6.7, Intel(R) Unite(R) Plugin SDK)
- [CVE-2022-38087](https://cve.now/CVE-2022-38087.md): Exposure of resource to wrong sphere in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable informa (CVSS 4.1, Intel(R) Processors)
- [CVE-2022-33894](https://cve.now/CVE-2022-33894.md): Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of (CVSS 7.5, Intel(R) Processors)
- [CVE-2023-22355](https://cve.now/CVE-2023-22355.md): Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.0.251 may allow an authenticat (CVSS 6.7, Intel(R) oneAPI Toolkit and component software installers)
- [CVE-2022-44610](https://cve.now/CVE-2022-44610.md): Improper authentication in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of (CVSS 5.4, Intel(R) DCM software)
- [CVE-2022-41979](https://cve.now/CVE-2022-41979.md): Protection mechanism failure in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enable escalatio (CVSS 5.4, Intel(R) DCM software)
- [CVE-2022-43475](https://cve.now/CVE-2022-43475.md): Insecure storage of sensitive information in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially ena (CVSS 6.0, Intel(R) DCM software)
- [CVE-2022-41998](https://cve.now/CVE-2022-41998.md): Uncontrolled search path in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of (CVSS 6.7, Intel(R) DCM software)
- [CVE-2022-44619](https://cve.now/CVE-2022-44619.md): Insecure storage of sensitive information in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially ena (CVSS 8.2, Intel(R) DCM software)
- [CVE-2022-42465](https://cve.now/CVE-2022-42465.md): Improper access control in kernel mode driver for the Intel(R) OFU software before version 14.1.30 may allow a privileged user to potentiall (CVSS 7.2, Intel(R) OFU software)
- [CVE-2022-41784](https://cve.now/CVE-2022-41784.md): Improper access control in kernel mode driver for the Intel(R) OFU software before version 14.1.30 may allow an authenticated user to potent (CVSS 8.8, Intel(R) OFU software)
- [CVE-2022-40207](https://cve.now/CVE-2022-40207.md): Improper access control in the Intel(R) SUR software before version 2.4.8989 may allow an authenticated user to potentially enable escalatio (CVSS 8.2, Intel(R) SUR software)
- [CVE-2022-40685](https://cve.now/CVE-2022-40685.md): Insufficiently protected credentials in the Intel(R) DCM software before version 5.0.1 may allow an authenticated user to potentially enable (CVSS 6.5, Intel(R) DCM software)
- [CVE-2022-40210](https://cve.now/CVE-2022-40210.md): Exposure of data element to wrong session in the Intel DCM software before version 5.0.1 may allow an authenticated user to potentially enab (CVSS 6.8, Intel DCM software)
- [CVE-2023-22443](https://cve.now/CVE-2023-22443.md): Integer overflow in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable denial of service via (CVSS 6.0, Intel(R) Server Board BMC firmware)
- [CVE-2023-24475](https://cve.now/CVE-2023-24475.md): Out of bounds read in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosu (CVSS 6.0, Intel(R) Server Board BMC firmware)
- [CVE-2023-25175](https://cve.now/CVE-2023-25175.md): Improper input validation in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information d (CVSS 6.1, Intel(R) Server Board BMC firmware)
- [CVE-2023-28411](https://cve.now/CVE-2023-28411.md): Double free in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via (CVSS 6.3, Intel(R) Server Board BMC firmware)
- [CVE-2023-25776](https://cve.now/CVE-2023-25776.md): Improper input validation in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information d (CVSS 6.3, Intel(R) Server Board BMC firmware)
- [CVE-2023-22379](https://cve.now/CVE-2023-22379.md): Improper input validation in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information d (CVSS 6.7, Intel(R) Server Board BMC firmware)
- [CVE-2023-22442](https://cve.now/CVE-2023-22442.md): Out of bounds write in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privi (CVSS 7.9, Intel(R) Server Board BMC firmware)
- [CVE-2023-25545](https://cve.now/CVE-2023-25545.md): Improper buffer restrictions in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation (CVSS 8.2, Intel(R) Server Board BMC firmware)
- [CVE-2023-22297](https://cve.now/CVE-2023-22297.md): Access of memory location after end of buffer in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to (CVSS 8.2, Intel(R) Server Board BMC firmware)
- [CVE-2023-22661](https://cve.now/CVE-2023-22661.md): Buffer overflow in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege (CVSS 8.2, Intel(R) Server Board BMC firmware)
- [CVE-2022-38787](https://cve.now/CVE-2022-38787.md): Improper input validation in firmware for some Intel(R) FPGA products before version 2.7.0 Hotfix may allow an authenticated user to potenti (CVSS 5.7, Intel(R) FPGA products)
- [CVE-2022-38103](https://cve.now/CVE-2022-38103.md): Insecure inherited permissions in the Intel(R) NUC Software Studio Service installer before version 1.17.38.0 may allow an authenticated use (CVSS 6.7, Intel(R) NUC Software Studio Service installer)
- [CVE-2022-46279](https://cve.now/CVE-2022-46279.md): Improper access control in the Intel(R) Retail Edge android application before version 3.0.301126-RELEASE may allow an authenticated user to (CVSS 5.0, Intel(R) Retail Edge android application)
- [CVE-2022-41690](https://cve.now/CVE-2022-41690.md): Improper access control in the Intel(R) Retail Edge Mobile iOS application before version 3.4.7 may allow an authenticated user to potential (CVSS 7.1, Intel(R) Retail Edge Mobile iOS application)
- [CVE-2022-32578](https://cve.now/CVE-2022-32578.md): Improper access control for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable (CVSS 6.7, Intel(R) NUC Pro Software Suite)
- [CVE-2022-34855](https://cve.now/CVE-2022-34855.md): Path traversal for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalati (CVSS 6.7, Intel(R) NUC Pro Software Suite)
- [CVE-2022-34848](https://cve.now/CVE-2022-34848.md): Uncontrolled search path for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enabl (CVSS 6.7, Intel(R) NUC Pro Software Suite)
- [CVE-2022-36391](https://cve.now/CVE-2022-36391.md): Incorrect default permissions for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially (CVSS 6.7, Intel(R) NUC Pro Software Suite)
- [CVE-2022-46656](https://cve.now/CVE-2022-46656.md): Insecure inherited permissions for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially (CVSS 6.7, Intel(R) NUC Pro Software Suite)
- [CVE-2022-21162](https://cve.now/CVE-2022-21162.md): Uncontrolled search path for the Intel(R) HDMI Firmware Update tool for NUC before version 1.79.1.1 may allow an authenticated user to poten (CVSS 6.7, Intel(R) HDMI Firmware Update tool for NUC)
- [CVE-2022-40971](https://cve.now/CVE-2022-40971.md): Incorrect default permissions for the Intel(R) HDMI Firmware Update Tool for NUC before version 1.79.1.1 may allow an authenticated user to (CVSS 6.7, Intel(R) HDMI Firmware Update Tool for NUC)
- [CVE-2022-41808](https://cve.now/CVE-2022-41808.md): Improper buffer restriction in software for the Intel QAT Driver for Linux before version 1.7.l.4.12 may allow an authenticated user to pote (CVSS 3.3, Intel QAT Driver for Linux)
- [CVE-2022-21239](https://cve.now/CVE-2022-21239.md): Out-of-bounds read in software for the Intel QAT Driver for Windows before version 1.9.0-0008 may allow an authenticated user to potentially (CVSS 5.6, Intel QAT Driver for Windows)
- [CVE-2022-21804](https://cve.now/CVE-2022-21804.md): Out-of-bounds write in software for the Intel QAT Driver for Windows before version 1.9.0-0008 may allow an authenticated user to potentiall (CVSS 8.4, Intel QAT Driver for Windows)
- [CVE-2022-40974](https://cve.now/CVE-2022-40974.md): Incomplete cleanup in the Intel(R) IPP Cryptography software before version 2021.6 may allow a privileged user to potentially enable informa (CVSS 1.8, Intel(R) IPP Cryptography software)
- [CVE-2022-41646](https://cve.now/CVE-2022-41646.md): Insufficient control flow management in the Intel(R) IPP Cryptography software before version 2021.6 may allow an unauthenticated user to po (CVSS 4.7, Intel(R) IPP Cryptography software)
- [CVE-2022-37409](https://cve.now/CVE-2022-37409.md): Insufficient control flow management for the Intel(R) IPP Cryptography software before version 2021.6 may allow an authenticated user to pot (CVSS 4.7, Intel(R) IPP Cryptography software)
- [CVE-2022-25976](https://cve.now/CVE-2022-25976.md): Improper input validation in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable deni (CVSS 5.5, Intel(R) VROC software)
- [CVE-2022-29508](https://cve.now/CVE-2022-29508.md): Null pointer dereference in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escal (CVSS 6.3, Intel(R) VROC software)
- [CVE-2022-30338](https://cve.now/CVE-2022-30338.md): Incorrect default permissions in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable (CVSS 6.7, Intel(R) VROC software)
- [CVE-2022-29919](https://cve.now/CVE-2022-29919.md): Use after free in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalation of p (CVSS 7.8, Intel(R) VROC software)
- [CVE-2022-32577](https://cve.now/CVE-2022-32577.md): Improper input validation in BIOS Firmware for some Intel(R) NUC Kits before version PY0081 may allow a privileged user to potentially enabl (CVSS 3.4, Intel(R) NUC Kits)
- [CVE-2022-31477](https://cve.now/CVE-2022-31477.md): Improper initialization for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via loc (CVSS 4.0, Intel(R) NUC BIOS firmware)
- [CVE-2022-32582](https://cve.now/CVE-2022-32582.md): Improper access control in firmware for some Intel(R) NUC Boards, Intel(R) NUC 11 Performance Kit, Intel(R) NUC 11 Performance Mini PC, Inte (CVSS 5.3, Intel(R) NUC Boards, Intel(R) NUC 11 Performance Kit, Intel…)
- [CVE-2023-25771](https://cve.now/CVE-2023-25771.md): Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of service via local ac (CVSS 5.8, Intel(R) NUC BIOS firmware)
- [CVE-2022-37327](https://cve.now/CVE-2022-37327.md): Improper input validation in BIOS firmware for Intel(R) NUC, Intel(R) NUC Performance Kit, Intel(R) NUC Performance Mini PC, Intel(R) NUC 8 (CVSS 6.1, Intel(R) NUC, Intel(R) NUC Performance Kit, Intel(R) NUC Pe…)
- [CVE-2022-32766](https://cve.now/CVE-2022-32766.md): Improper input validation for some Intel(R) BIOS firmware may allow a privileged user to potentially enable escalation of privilege via loca (CVSS 7.2, Intel(R) BIOS firmware)
- [CVE-2023-22312](https://cve.now/CVE-2023-22312.md): Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via lo (CVSS 7.2, Intel(R) NUC BIOS firmware)
- [CVE-2022-28699](https://cve.now/CVE-2022-28699.md): Improper input validation for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via (CVSS 7.5, Intel(R) NUC BIOS firmware)
- [CVE-2022-34147](https://cve.now/CVE-2022-34147.md): Improper input validation in BIOS firmware for some Intel(R) NUC 9 Extreme Laptop Kits, Intel(R) NUC Performance Kits, Intel(R) NUC Performa (CVSS 7.5, Intel(R) NUC 9 Extreme Laptop Kits, Intel(R) NUC Performanc…)
- [CVE-2022-36339](https://cve.now/CVE-2022-36339.md): Improper input validation in firmware for Intel(R) NUC 8 Compute Element, Intel(R) NUC 11 Compute Element, Intel(R) NUC 12 Compute Element m (CVSS 7.5, Intel(R) NUC 8 Compute Element, Intel(R) NUC 11 Compute Ele…)
- [CVE-2023-27386](https://cve.now/CVE-2023-27386.md): Uncontrolled search path in some Intel(R) Pathfinder for RISC-V software may allow an authenticated user to potentially enable escalation of (CVSS 6.7, Intel(R) Pathfinder for RISC-V software)
- [CVE-2023-23909](https://cve.now/CVE-2023-23909.md): Out-of-bounds read for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authentic (CVSS 2.8, Intel(R) Trace Analyzer and Collector software)
- [CVE-2022-42878](https://cve.now/CVE-2022-42878.md): Null pointer dereference for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an aut (CVSS 2.8, Intel(R) Trace Analyzer and Collector software)
- [CVE-2023-23910](https://cve.now/CVE-2023-23910.md): Out-of-bounds write for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenti (CVSS 3.9, Intel(R) Trace Analyzer and Collector software)
- [CVE-2023-23580](https://cve.now/CVE-2023-23580.md): Stack-based buffer overflow for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an (CVSS 4.8, Intel(R) Trace Analyzer and Collector software)
- [CVE-2023-23569](https://cve.now/CVE-2023-23569.md): Stack-based buffer overflow for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an (CVSS 7.8, Intel(R) Trace Analyzer and Collector software)
- [CVE-2022-46645](https://cve.now/CVE-2022-46645.md): Uncontrolled resource consumption in the Intel(R) Smart Campus Android application before version 9.9 may allow an authenticated user to pot (CVSS 5.0, Intel(R) Smart Campus Android application)
- [CVE-2023-27382](https://cve.now/CVE-2023-27382.md): Incorrect default permissions in the Audio Service for some Intel(R) NUC P14E Laptop Element software for Windows 10 before version 1.0.0.15 (CVSS 6.7, Intel(R) NUC P14E Laptop Element software for Windows)
- [CVE-2022-41628](https://cve.now/CVE-2022-41628.md): Uncontrolled search path element in the HotKey Services for some Intel(R) NUC P14E Laptop Element software for Windows 10 before version 1.1 (CVSS 6.7, Intel(R) NUC P14E Laptop Element software for Windows)
- [CVE-2022-41687](https://cve.now/CVE-2022-41687.md): Insecure inherited permissions in the HotKey Services for some Intel(R) NUC P14E Laptop Element software for Windows 10 before version 1.1.4 (CVSS 6.7, Intel(R) NUC P14E Laptop Element software for Windows)
- [CVE-2022-41658](https://cve.now/CVE-2022-41658.md): Insecure inherited permissions in the Intel(R) VTune(TM) Profiler software before version 2023.0 may allow an authenticated user to potentia (CVSS 6.7, Intel(R) VTune(TM) Profiler software)
- [CVE-2022-41982](https://cve.now/CVE-2022-41982.md): Uncontrolled search path element in the Intel(R) VTune(TM) Profiler software before version 2023.0 may allow an authenticated user to potent (CVSS 6.7, Intel(R) VTune(TM) Profiler software)
- [CVE-2023-28410](https://cve.now/CVE-2023-28410.md): Improper restriction of operations within the bounds of a memory buffer in some Intel(R) i915 Graphics drivers for linux before kernel versi (CVSS 8.8, Intel(R) i915 Graphics drivers for linux)
- [CVE-2023-1732](https://cve.now/CVE-2023-1732.md): Improper random reading in CIRCL (CVSS 5.3, Cloudflare CIRCL · github.com/cloudflare/circl)
- [CVE-2022-45846](https://cve.now/CVE-2022-45846.md): WordPress Image Map Pro Plugin \< 5.6.9 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Nickys Image Map Pro for WordPress - Interactive SVG Image…)
- [CVE-2022-47587](https://cve.now/CVE-2022-47587.md): WordPress WP Search Analytics Plugin \<= 1.4.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Cornel Raiu WP Search Analytics)
- [CVE-2022-47590](https://cve.now/CVE-2022-47590.md): WordPress Maintenance Switch Plugin \<= 1.5.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Fugu Maintenance Switch)
- [CVE-2022-47600](https://cve.now/CVE-2022-47600.md): WordPress Mass Email To users Plugin \<= 1.1.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, I Thirteen Web Solution Mass Email To users)
- [CVE-2022-47606](https://cve.now/CVE-2022-47606.md): WordPress WP-CORS Plugin \<= 0.2.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Tim Stephenson WP-CORS)
- [CVE-2022-27856](https://cve.now/CVE-2022-27856.md): WordPress Export All URLs Plugin \<= 4.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 3.4, Atlas Gondal Export All URLs)
- [CVE-2022-47423](https://cve.now/CVE-2022-47423.md): WordPress WP-dTree Plugin \<= 4.4.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Ulf Benjaminsson WP-dTree)
- [CVE-2022-47436](https://cve.now/CVE-2022-47436.md): WordPress Yatra Plugin \<= 2.1.14 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, MantraBrain Yatra)
- [CVE-2022-47441](https://cve.now/CVE-2022-47441.md): WordPress Charitable Plugin \<= 1.7.0.10 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Charitable Donations & Fundraising Team Donation Forms by C…)
- [CVE-2022-47137](https://cve.now/CVE-2022-47137.md): WordPress Ninja Tables Plugin \<= 4.3.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, WPManageNinja Ninja Tables)
- [CVE-2022-46861](https://cve.now/CVE-2022-46861.md): WordPress Login Page Styler Plugin \<= 6.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Zia Imtiaz Custom Login Page Styler for WordPress)
- [CVE-2022-46817](https://cve.now/CVE-2022-46817.md): WordPress Flyzoo Chat Plugin \<= 2.3.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Flyzoo Chat)
- [CVE-2022-46819](https://cve.now/CVE-2022-46819.md): WordPress Continuous announcement scroller Plugin \<= 13.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Gopi Ramasamy Continuous announcement scroller)
- [CVE-2022-33961](https://cve.now/CVE-2022-33961.md): WordPress YellowPencil Visual CSS Style Editor Plugin \<= 7.5.8 is vulnerable to Cross Site Scripting (XSS) (CVSS 4.0, WaspThemes Visual CSS Style Editor)
- [CVE-2022-32970](https://cve.now/CVE-2022-32970.md): WordPress Themify Portfolio Post Plugin \<= 1.2.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 4.1, Themify Portfolio Post)
- [CVE-2023-27455](https://cve.now/CVE-2023-27455.md): WordPress Update Image Tag Alt Attribute Plugin \<= 2.4.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Maui Marketing Update Image Tag Alt Attribute)
- [CVE-2023-23794](https://cve.now/CVE-2023-23794.md): WordPress Semalt Blocker Plugin \<= 1.1.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Alex Moss Semalt Blocker)
- [CVE-2023-23873](https://cve.now/CVE-2023-23873.md): WordPress BBSpoiler Plugin \<= 2.01 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Flector BBSpoiler)
- [CVE-2023-27419](https://cve.now/CVE-2023-27419.md): WordPress Viable blog Theme \<= 1.1.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Everest themes Viable Blog)
- [CVE-2023-30746](https://cve.now/CVE-2023-30746.md): WordPress Booqable Rental Plugin Plugin \<= 2.4.15 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Booqable Rental Software Booqable Rental Plugin)
- [CVE-2023-22696](https://cve.now/CVE-2023-22696.md): WordPress Affiliate Links Lite Plugin \<= 2.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Custom4Web Affiliate Links Lite)
- [CVE-2023-29101](https://cve.now/CVE-2023-29101.md): WordPress Betheme Theme \<= 26.7.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Muffingroup Betheme)
- [CVE-2023-24406](https://cve.now/CVE-2023-24406.md): WordPress Simple Popup Images Plugin \<= 1.8.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Muneeb ur Rehman Simple PopUp)
- [CVE-2023-23701](https://cve.now/CVE-2023-23701.md): WordPress Easy Sign Up Plugin \<= 3.4.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Andrew @ Geeenville Web Design Easy Sign Up)
- [CVE-2023-22711](https://cve.now/CVE-2023-22711.md): WordPress IMPress Listings Plugin \<= 2.6.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Agent Evolution IMPress Listings)
- [CVE-2023-24418](https://cve.now/CVE-2023-24418.md): WordPress Tiny carousel horizontal slider plus Plugin \<= 3.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Gopi Ramasamy Tiny carousel horizontal slider plus)
- [CVE-2023-23812](https://cve.now/CVE-2023-23812.md): WordPress Enhanced WP Contact Form Plugin \<= 2.2.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Joost de Valk Enhanced WP Contact Form)
- [CVE-2023-23789](https://cve.now/CVE-2023-23789.md): WordPress Premmerce Redirect Manager Plugin \<= 1.0.9 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Premmerce Redirect Manager)
- [CVE-2023-23786](https://cve.now/CVE-2023-23786.md): WordPress affiliate-toolkit – WordPress Affiliate Plugin Plugin \<= 3.3.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Christof Servit affiliate-toolkit)
- [CVE-2023-23788](https://cve.now/CVE-2023-23788.md): WordPress Custom More Link Complete Plugin \<= 1.4.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Florin Arjocu Custom More Link Complete)
- [CVE-2023-28932](https://cve.now/CVE-2023-28932.md): WordPress WPMobile.App Plugin \<= 11.20 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, WPMobile.App — Android and iOS Mobile Application)
- [CVE-2023-24392](https://cve.now/CVE-2023-24392.md): WordPress Full Width Banner Slider Wp Plugin \<= 1.1.7 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, I Thirteen Web Solution Full Width Banner Slider Wp)
- [CVE-2023-2619](https://cve.now/CVE-2023-2619.md): SourceCodester Online Tours & Travels Management System disapprove\_delete.php exec sql injection (CVSS 6.3, SourceCodester Online Tours & Travels Management System)
- [CVE-2023-30777](https://cve.now/CVE-2023-30777.md): WordPress Advanced Custom Fields / Advanced Custom Fields PRO plugins \<= 6.1.5 vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, WP Engine Advanced Custom Fields Pro · WP Engine Advanced C…)
- [CVE-2023-2618](https://cve.now/CVE-2023-2618.md): OpenCV wechat\_qrcode Module decoded\_bit\_stream\_parser.cpp decodeHanziSegment memory leak (CVSS 5.3, OpenCV wechat\_qrcode Module)
- [CVE-2023-2617](https://cve.now/CVE-2023-2617.md): OpenCV wechat\_qrcode Module decoded\_bit\_stream\_parser.cpp decodeByteSegment null pointer dereference (CVSS 5.3, OpenCV wechat\_qrcode Module)
- [CVE-2023-26126](https://cve.now/CVE-2023-26126.md): All versions of the package m.static are vulnerable to Directory Traversal due to improper input sanitization of the path being requested vi (CVSS 7.5, m.static)
- [CVE-2021-45345](https://cve.now/CVE-2021-45345.md): Buffer Overflow vulnerability found in En3rgy WebcamServer v.0.5.2 allows a remote attacker to cause a denial of service via the WebcamServe (CVSS 7.5)
- [CVE-2022-4008](https://cve.now/CVE-2022-4008.md): In affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which results in Denial of Service (CVSS 5.5, Octopus Deploy Octopus Tentacle)
- [CVE-2023-22361](https://cve.now/CVE-2023-22361.md): Improper privilege management vulnerability in SkyBridge MB-A100/110 firmware Ver. (CVSS 4.3, Seiko Solutions SkyBridge MB-A100/110)
- [CVE-2023-22441](https://cve.now/CVE-2023-22441.md): Missing authentication for critical function exists in Seiko Solutions SkyBridge series, which may allow a remote attacker to obtain or alte (CVSS 8.6, Seiko Solutions SkyBridge MB-A200 and SkyBridge BASIC MB-A1…)
- [CVE-2023-23578](https://cve.now/CVE-2023-23578.md): Improper access control vulnerability in SkyBridge MB-A200 firmware Ver. (CVSS 7.5, Seiko Solutions SkyBridge MB-A200)
- [CVE-2023-23901](https://cve.now/CVE-2023-23901.md): Improper following of a certificate's chain of trust exists in SkyBridge MB-A200 firmware Ver. (CVSS 4.8, Seiko Solutions SkyBridge MB-A200 and SkyBridge BASIC MB-A1…)
- [CVE-2023-23906](https://cve.now/CVE-2023-23906.md): Missing authentication for critical function exists in SkyBridge MB-A100/110 firmware Ver. (CVSS 7.5, Seiko Solutions SkyBridge MB-A100/110)
- [CVE-2023-24586](https://cve.now/CVE-2023-24586.md): Cleartext storage of sensitive information exists in SkyBridge MB-A100/110 firmware Ver. (CVSS 3.1, Seiko Solutions SkyBridge MB-A100/110)
- [CVE-2023-25070](https://cve.now/CVE-2023-25070.md): Cleartext transmission of sensitive information exists in SkyBridge MB-A100/110 firmware Ver. (CVSS 4.8, Seiko Solutions SkyBridge MB-A100/110)
- [CVE-2023-25072](https://cve.now/CVE-2023-25072.md): Use of weak credentials exists in SkyBridge MB-A100/110 firmware Ver. (CVSS 6.5, Seiko Solutions SkyBridge MB-A100/110)
- [CVE-2023-25184](https://cve.now/CVE-2023-25184.md): Use of weak credentials exists in Seiko Solutions SkyBridge and SkySpider series, which may allow a remote unauthenticated attacker to decry (CVSS 5.3, Seiko Solutions SkyBridge MB-A200, SkyBridge BASIC MB-A130,…)
- [CVE-2023-25568](https://cve.now/CVE-2023-25568.md): Boxo bitswap/server: DOS unbounded persistent memory leak (CVSS 8.2, ipfs boxo · github.com/ipfs/go-bitswap +1)
- [CVE-2023-25833](https://cve.now/CVE-2023-25833.md): BUG-000155004 HTML injection issue in Portal for ArcGIS. (CVSS 5.4, Esri Portal for ArcGIS)
- [CVE-2023-2614](https://cve.now/CVE-2023-2614.md): Cross-site Scripting (XSS) - DOM in pimcore/pimcore (CVSS 6.8, pimcore/pimcore)
- [CVE-2023-2615](https://cve.now/CVE-2023-2615.md): Cross-site Scripting (XSS) - Reflected in pimcore/pimcore (CVSS 6.8, pimcore/pimcore)
- [CVE-2023-2616](https://cve.now/CVE-2023-2616.md): Cross-site Scripting (XSS) - Generic in pimcore/pimcore (CVSS 6.8, pimcore/pimcore)
- [CVE-2023-2629](https://cve.now/CVE-2023-2629.md): Improper Neutralization of Formula Elements in a CSV File in pimcore/customer-data-framework (CVSS 5.0, pimcore/customer-data-framework · pimcore/customer-manageme…)
- [CVE-2023-2630](https://cve.now/CVE-2023-2630.md): Cross-site Scripting (XSS) - Stored in pimcore/pimcore (CVSS 5.7, pimcore/pimcore)
- [CVE-2023-27385](https://cve.now/CVE-2023-27385.md): Heap-based buffer overflow vulnerability exists in CX-Drive All models all versions. (CVSS 7.8, OMRON CX-Drive All models)
- [CVE-2023-27510](https://cve.now/CVE-2023-27510.md): JB Inquiry form contains an exposure of private personal information to an unauthorized actor vulnerability, which may allow a remote unauth (CVSS 5.3, Jubei JB Inquiry form)
- [CVE-2023-27527](https://cve.now/CVE-2023-27527.md): Shinseiyo Sogo Soft (7.9A) and earlier improperly restricts XML external entity references (XXE). (CVSS 2.5, The Ministry of Justice Shinseiyo Sogo Soft)
- [CVE-2023-27562](https://cve.now/CVE-2023-27562.md): The n8n package 0.218.0 for Node.js allows Directory Traversal. (CVSS 6.5, n8n)
- [CVE-2023-27563](https://cve.now/CVE-2023-27563.md): The n8n package 0.218.0 for Node.js allows Escalation of Privileges. (CVSS 8.8, n8n)
- [CVE-2023-27564](https://cve.now/CVE-2023-27564.md): The n8n package 0.218.0 for Node.js allows Information Disclosure. (CVSS 7.5, n8n)
- [CVE-2023-27888](https://cve.now/CVE-2023-27888.md): Cross-site scripting vulnerability in Joruri Gw Ver 3.2.5 and earlier allows a remote authenticated attacker to inject an arbitrary script v (CVSS 5.4, SiteBridge Joruri Gw)
- [CVE-2023-27889](https://cve.now/CVE-2023-27889.md): Cross-site request forgery (CSRF) vulnerability in LIQUID SPEECH BALLOON versions prior to 1.2 allows a remote unauthenticated attacker to h (CVSS 8.8, LIQUID DESIGN LIQUID SPEECH BALLOON)
- [CVE-2023-27918](https://cve.now/CVE-2023-27918.md): Cross-site scripting vulnerability in Appointment and Event Booking Calendar for WordPress - Amelia versions prior to 1.0.76 allows a remote (CVSS 6.1, TMS Appointment and Event Booking Calendar for WordPress -…)
- [CVE-2023-27919](https://cve.now/CVE-2023-27919.md): Authentication bypass vulnerability in NEXT ENGINE Integration Plugin (for EC-CUBE 2.0 series) all versions allows a remote unauthenticated (CVSS 5.3, NEXT ENGINE Integration Plugin)
- [CVE-2023-29930](https://cve.now/CVE-2023-29930.md): An issue was found in Genesys CIC Polycom phone provisioning TFTP Server all version allows a remote attacker to execute arbitrary code via (CVSS 8.8)
- [CVE-2023-30194](https://cve.now/CVE-2023-30194.md): Prestashop posstaticfooter \<= 1.0.0 is vulnerable to SQL Injection via posstaticfooter::getPosCurrentHook(). (CVSS 9.8)
- [CVE-2023-30351](https://cve.now/CVE-2023-30351.md): Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard-coded default password for root which is stored (CVSS 7.5)
- [CVE-2023-30352](https://cve.now/CVE-2023-30352.md): Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard-coded default password for the RTSP feed. (CVSS 9.8)
- [CVE-2023-30353](https://cve.now/CVE-2023-30353.md): Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 allows unauthenticated remote code execution via an XML document. (CVSS 9.8)
- [CVE-2023-30354](https://cve.now/CVE-2023-30354.md): Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 does not defend against physical access to U-Boot via the UART: the Wi-Fi passwo (CVSS 9.8)
- [CVE-2023-30356](https://cve.now/CVE-2023-30356.md): Missing Support for an Integrity Check in Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 allows attackers to update the device (CVSS 7.5)
- [CVE-2023-31471](https://cve.now/CVE-2023-31471.md): An issue was discovered on GL.iNet devices before 3.216. (CVSS 9.8)
- [CVE-2023-31555](https://cve.now/CVE-2023-31555.md): podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfObject::DelayedLoad. (CVSS 6.5)
- [CVE-2023-31556](https://cve.now/CVE-2023-31556.md): podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfDictionary::findKeyParent. (CVSS 8.8)
- [CVE-2023-31566](https://cve.now/CVE-2023-31566.md): Podofo v0.10.0 was discovered to contain a heap-use-after-free via the component PoDoFo::PdfEncrypt::IsMetadataEncrypted(). (CVSS 8.8)
- [CVE-2023-31567](https://cve.now/CVE-2023-31567.md): Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptAESV3::PdfEncryptAESV3. (CVSS 8.8)
- [CVE-2023-31568](https://cve.now/CVE-2023-31568.md): Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptRC4::PdfEncryptRC4. (CVSS 8.8)
- [CVE-2023-31906](https://cve.now/CVE-2023-31906.md): Jerryscript 3.0.0(commit 1a2c047) was discovered to contain a heap-buffer-overflow via the component lexer\_compare\_identifier\_to\_chars at /j (CVSS 7.8)
- [CVE-2023-31907](https://cve.now/CVE-2023-31907.md): Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via the component scanner\_literal\_is\_created at /jerry-core/parser/js/js- (CVSS 7.8)
- [CVE-2023-31908](https://cve.now/CVE-2023-31908.md): Jerryscript 3.0 (commit 05dbbd1) was discovered to contain a heap-buffer-overflow via the component ecma\_builtin\_typedarray\_prototype\_sort. (CVSS 7.8)
- [CVE-2023-31910](https://cve.now/CVE-2023-31910.md): Jerryscript 3.0 (commit 05dbbd1) was discovered to contain a heap-buffer-overflow via the component parser\_parse\_function\_statement at /jerr (CVSS 7.8)
- [CVE-2023-32568](https://cve.now/CVE-2023-32568.md): An issue was discovered in Veritas InfoScale Operations Manager (VIOM) before 7.4.2.800 and 8.x before 8.0.410. (CVSS 7.2)
- [CVE-2023-32569](https://cve.now/CVE-2023-32569.md): An issue was discovered in Veritas InfoScale Operations Manager (VIOM) before 7.4.2.800 and 8.x before 8.0.410. (CVSS 7.2)
- [CVE-2023-32570](https://cve.now/CVE-2023-32570.md): VideoLAN dav1d before 1.2.0 has a thread\_task.c race condition that can lead to an application crash, related to dav1d\_decode\_frame\_exit. (CVSS 5.9)
- [CVE-2023-32573](https://cve.now/CVE-2023-32573.md): In Qt before 5.15.14, 6.0.x through 6.2.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1, QtSvg QSvgFont m\_unitsPerEm initialization is (CVSS 6.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-05-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.