# CVEs published 2023-05-26 88 CVEs were published on May 26, 2023: 7 critical, 29 high. 1 is now in CISA KEV. Days are UTC. - [CVE-2023-32325](https://cve.now/CVE-2023-32325.md): Cross-site scripting in PostHog-js (CVSS 5.4, posthog-js) - [CVE-2023-32321](https://cve.now/CVE-2023-32321.md): CKAN remote code execution and private information access via crafted resource ids (CVSS 9.8, ckan) - [CVE-2023-33199](https://cve.now/CVE-2023-33199.md): malformed proposed intoto v0.0.2 entries can cause a panic in Rekor (CVSS 5.3, sigstore rekor · github.com/sigstore/rekor) - [CVE-2023-32319](https://cve.now/CVE-2023-32319.md): Basic auth header on WebDAV requests is not brute-force protected in Nextcloud (CVSS 8.1, nextcloud security-advisories) - [CVE-2023-32676](https://cve.now/CVE-2023-32676.md): Autolab tar slip in Install Assessment functionality (\`GHSL-2023-081\`) (CVSS 6.7, Autolab) - [CVE-2023-32317](https://cve.now/CVE-2023-32317.md): Autolab tar slip in cheat checker functionality (\`GHSL-2023-082\`) (CVSS 6.7, Autolab) - [CVE-2023-32316](https://cve.now/CVE-2023-32316.md): Users can add themselves to any organization in CloudExplorer Lite (CVSS 7.1, CloudExplorer-Dev CloudExplorer-Lite) - [CVE-2023-32315](https://cve.now/CVE-2023-32315.md): Openfire administration console authentication bypass (CVSS 8.6, KEV, igniterealtime Openfire · org.igniterealtime.openfire:xmpps…) - [CVE-2023-32311](https://cve.now/CVE-2023-32311.md): The CloudExplorer Lite missing permissions check (CVSS 7.1, CloudExplorer-Dev CloudExplorer-Lite) - [CVE-2023-32307](https://cve.now/CVE-2023-32307.md): heap-over-flow and integer-overflow in sofia-sip (CVSS 7.5, freeswitch sofia-sip) - [CVE-2023-31128](https://cve.now/CVE-2023-31128.md): NextCloud Cookbook's pull-checks.yml workflow is vulnerable to OS Command Injection (CVSS 8.1, nextcloud cookbook) - [CVE-2023-33194](https://cve.now/CVE-2023-33194.md): CraftCMS stored XSS in Quick Post widget error message (CVSS 3.7, craftcms cms · craftcms/cms) - [CVE-2023-33196](https://cve.now/CVE-2023-33196.md): Craft CMS stored XSS in review volume (CVSS 5.5, craftcms cms · craftcms/cms) - [CVE-2023-33187](https://cve.now/CVE-2023-33187.md): highlight vulnerable to cleartext transmission of sensitive information (CVSS 5.4, highlight · highlight.run) - [CVE-2023-33185](https://cve.now/CVE-2023-33185.md): Incorrect signature verification in django-ses (CVSS 4.6, django-ses) - [CVE-2023-33197](https://cve.now/CVE-2023-33197.md): Craft CMS stored XSS in indexedVolumes (CVSS 5.5, craftcms cms · craftcms/cms) - [CVE-2023-32318](https://cve.now/CVE-2023-32318.md): User session not correctly destroyed on logout (CVSS 7.2, nextcloud security-advisories) - [CVE-2023-32681](https://cve.now/CVE-2023-32681.md): Unintended leak of Proxy-Authorization header in requests (CVSS 6.1, psf requests · requests) - [CVE-2023-32964](https://cve.now/CVE-2023-32964.md): WordPress Better Notifications for WP Plugin \<= 1.9.2 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Made with Fuel Better Notifications for WP) - [CVE-2023-29098](https://cve.now/CVE-2023-29098.md): WordPress CopySafe Web Protection Plugin \<= 3.13 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, ArtistScope CopySafe Web Protection) - [CVE-2023-25058](https://cve.now/CVE-2023-25058.md): WordPress Schema – All In One Schema Rich Snippets Plugin \<= 1.6.5 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Brainstorm Force Schema – All In One Schema Rich Snippets) - [CVE-2023-25034](https://cve.now/CVE-2023-25034.md): WordPress WP Clean Up Plugin \<= 1.2.3 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, BoLiQuan WP Clean Up) - [CVE-2023-25467](https://cve.now/CVE-2023-25467.md): WordPress Resize at Upload Plus Plugin \<= 1.3 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Daniel Mores, A. Huizinga Resize at Upload Plus) - [CVE-2023-25470](https://cve.now/CVE-2023-25470.md): WordPress Rus-To-Lat Plugin \<= 0.3 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Anton Skorobogatov Rus-To-Lat) - [CVE-2023-25029](https://cve.now/CVE-2023-25029.md): WordPress WP Social Bookmarking Light Plugin \<= 2.0.7 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, utahta WP Social Bookmarking Light) - [CVE-2022-39374](https://cve.now/CVE-2022-39374.md): Synapse Denial of service due to incorrect application of event authorization rules during state resolution (CVSS 6.5, matrix-org synapse · matrix-synapse) - [CVE-2022-39335](https://cve.now/CVE-2022-39335.md): Synapse does not apply enough checks to servers requesting auth events of events in a room (CVSS 5.0, matrix-org synapse · matrix-synapse) - [CVE-2023-32323](https://cve.now/CVE-2023-32323.md): Synapse Outgoing federation to specific hosts can be disabled by sending malicious invites (CVSS 5.0, matrix-org synapse · matrix-synapse) - [CVE-2023-24008](https://cve.now/CVE-2023-24008.md): WordPress Maspik – Spam blacklist Plugin \<= 0.7.8 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, yonifre Maspik – Spam Blacklist) - [CVE-2023-22693](https://cve.now/CVE-2023-22693.md): WordPress WP Google Tag Manager Plugin \<= 1.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, conlabzgmbh WP Google Tag Manager) - [CVE-2023-25038](https://cve.now/CVE-2023-25038.md): WordPress For the visually impaired Plugin \<= 0.58 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, 984.ru For the visually impaired) - [CVE-2023-24007](https://cve.now/CVE-2023-24007.md): WordPress Admin Block Country Plugin \<= 7.1.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, TheOnlineHero - Tom Skroza Admin Block Country) - [CVE-2023-25781](https://cve.now/CVE-2023-25781.md): WordPress Upload File Type Settings Plugin Plugin \<= 1.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Sebastian Krysmanski Upload File Type Settings Plugin) - [CVE-2023-25976](https://cve.now/CVE-2023-25976.md): WordPress Integration for Contact Form 7 and Zoho CRM, Bigin Plugin \<= 1.2.2 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, CRM Perks Integration for Contact Form 7 and Zoho CRM, Bigin) - [CVE-2023-25971](https://cve.now/CVE-2023-25971.md): WordPress Educare – Students & Result Management System Plugin \<= 1.4.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, FixBD Educare) - [CVE-2023-23714](https://cve.now/CVE-2023-23714.md): WordPress Uncanny Toolkit for LearnDash Plugin \<= 3.6.4.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Uncanny Owl Uncanny Toolkit for LearnDash) - [CVE-2021-46881](https://cve.now/CVE-2021-46881.md): The video framework has memory overwriting caused by addition overflow. (CVSS 7.5, Huawei HarmonyOS · Huawei EMUI) - [CVE-2021-46882](https://cve.now/CVE-2021-46882.md): The video framework has memory overwriting caused by addition overflow. (CVSS 7.5, Huawei HarmonyOS · Huawei EMUI) - [CVE-2021-46883](https://cve.now/CVE-2021-46883.md): The video framework has memory overwriting caused by addition overflow. (CVSS 7.5, Huawei HarmonyOS · Huawei EMUI) - [CVE-2021-46884](https://cve.now/CVE-2021-46884.md): The video framework has memory overwriting caused by addition overflow. (CVSS 7.5, Huawei HarmonyOS · Huawei EMUI) - [CVE-2021-46885](https://cve.now/CVE-2021-46885.md): The video framework has memory overwriting caused by addition overflow. (CVSS 7.5, Huawei HarmonyOS · Huawei EMUI) - [CVE-2021-46886](https://cve.now/CVE-2021-46886.md): The video framework has memory overwriting caused by addition overflow. (CVSS 7.5, Huawei HarmonyOS · Huawei EMUI) - [CVE-2021-46887](https://cve.now/CVE-2021-46887.md): Lack of length check vulnerability in the HW\_KEYMASTER module. (CVSS 9.8, Huawei EMUI) - [CVE-2022-46945](https://cve.now/CVE-2022-46945.md): Nagvis before 1.9.34 was discovered to contain an arbitrary file read vulnerability via the component /core/classes/NagVisHoverUrl.php. (CVSS 9.1) - [CVE-2022-48478](https://cve.now/CVE-2022-48478.md): The facial recognition TA of some products lacks memory length verification. (CVSS 9.8, Huawei HarmonyOS) - [CVE-2022-48479](https://cve.now/CVE-2022-48479.md): The facial recognition TA of some products has the out-of-bounds memory read vulnerability. (CVSS 9.8, Huawei HarmonyOS) - [CVE-2022-48480](https://cve.now/CVE-2022-48480.md): Integer overflow vulnerability in some phones. (CVSS 7.5, Huawei EMUI) - [CVE-2023-0116](https://cve.now/CVE-2023-0116.md): The reminder module lacks an authentication mechanism for broadcasts received. (CVSS 7.5, Huawei HarmonyOS · Huawei EMUI) - [CVE-2023-0117](https://cve.now/CVE-2023-0117.md): The online authentication provided by the hwKitAssistant lacks strict identity verification of applications. (CVSS 5.3, Huawei HarmonyOS · Huawei EMUI) - [CVE-2023-1664](https://cve.now/CVE-2023-1664.md): A flaw was found in Keycloak. (CVSS 6.5, Keycloak · org.keycloak:keycloak-core) - [CVE-2023-1667](https://cve.now/CVE-2023-1667.md): A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. (no CVSS, libssh) - [CVE-2023-1981](https://cve.now/CVE-2023-1981.md): A vulnerability was found in the avahi library. (CVSS 5.5, avahi) - [CVE-2023-2002](https://cve.now/CVE-2023-2002.md): A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hci\_sock.c in the Linux Kerne (no CVSS, Kernel) - [CVE-2023-20868](https://cve.now/CVE-2023-20868.md): NSX-T contains a reflected cross-site scripting vulnerability due to a lack of input validation. (CVSS 6.1, NSX-T) - [CVE-2023-20882](https://cve.now/CVE-2023-20882.md): In Cloud foundry routing release versions from 0.262.0 and prior to 0.266.0,a bug in the gorouter process can lead to a denial of service of (CVSS 5.9, Cloud Foundry Routing release) - [CVE-2023-20883](https://cve.now/CVE-2023-20883.md): In Spring Boot versions 3.0.0 - 3.0.6, 2.7.0 - 2.7.11, 2.6.0 - 2.6.14, 2.5.0 - 2.5.14 and older unsupported versions, there is potential for (CVSS 7.5, Spring Boot · org.springframework.boot:spring-boot-autoconf…) - [CVE-2023-21514](https://cve.now/CVE-2023-21514.md): Improper scheme validation from InstantPlay Deeplink in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API to (CVSS 7.5, Samsung Mobile Galaxy Store) - [CVE-2023-21515](https://cve.now/CVE-2023-21515.md): InstantPlay which included vulnerable script which could execute javascript in Galaxy Store prior to version 4.5.49.8 allows attackers to ex (CVSS 7.5, Samsung Mobile Galaxy Store) - [CVE-2023-21516](https://cve.now/CVE-2023-21516.md): XSS vulnerability from InstantPlay in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API to install APK from (CVSS 7.5, Samsung Mobile Galaxy Store) - [CVE-2023-2283](https://cve.now/CVE-2023-2283.md): A vulnerability was found in libssh, where the authentication check of the connecting client can be bypassed in the\`pki\_verify\_data\_signatur (no CVSS, libssh) - [CVE-2023-22970](https://cve.now/CVE-2023-22970.md): Bottles before 51.0 mishandles YAML load, which allows remote code execution via a crafted file. (CVSS 7.8) - [CVE-2023-27311](https://cve.now/CVE-2023-27311.md): NetApp Blue XP Connector versions prior to 3.9.25 expose information via a directory listing. (CVSS 5.3, Information Disclosure Vulnerability in NetApp BlueXP Conne…) - [CVE-2023-2817](https://cve.now/CVE-2023-2817.md): A post-authentication stored cross-site scripting vulnerability exists in Craft CMS versions \<= 4.4.11. (CVSS 5.4, Craft CMS · craftcms/cms) - [CVE-2023-2825](https://cve.now/CVE-2023-2825.md): An issue has been discovered in GitLab CE/EE affecting only version 16.0.0. (CVSS 10.0, GitLab) - [CVE-2023-28319](https://cve.now/CVE-2023-28319.md): A use after free vulnerability exists in curl \