Skip to content
OpenAdvisories

Archive

3 May 2023

Vulnerabilities first published on this day (UTC), newest first.

← April 2023 2023 / May /3 June 2023 →
  1. 139
  2. 281
  3. 378
  4. 487
  5. 542
  6. 69
  7. 74
  8. 8185
  9. 9252
  10. 10210
  11. 11101
  12. 1290
  13. 13 
  14. 1411
  15. 15147
  16. 1695
  17. 1757
  18. 1891
  19. 1927
  20. 2023
  21. 217
  22. 2284
  23. 2399
  24. 2486
  25. 2578
  26. 2688
  27. 2724
  28. 2834
  29. 2934
  30. 30151
  31. 31120
All Critical High Medium Low Exploited only Public exploit

78 results · Feed

  • Medium 5.4
    CVE-2023-1383

    An Improper Enforcement of Behavioral Workflow vulnerability in the exchangeDeviceServices function on the amzn.dmgr se…

    Insignia AmazonFire TV Stick 3rd gen TV with FireOS Fire TV Stick 3rd gen
  • Medium 6.5
    CVE-2023-22713

    WordPress Gutenberg Blocks by WordPress Download Manager Plugin <= 2.1.8 is vulnerable to Cross Site Scripting (XSS)

    Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in WordPress Download Manager Gutenberg Blocks by WordPress Download Manager plugin <= 2.1.8 versions.

    WordPress Download Manager Gutenberg Blocks by WordPress Download Manager Web / CMS
  • Medium 5.9
    CVE-2023-25796

    WordPress WP BaiDu Submit Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Include WP BaiDu Submit plugin <= 1.2.1 versions.

    Include WP BaiDu Submit
  • Medium 6.5
    CVE-2023-25798

    WordPress Olevmedia Shortcodes Plugin <= 1.1.9 is vulnerable to Cross Site Scripting (XSS)

    Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Olevmedia Olevmedia Shortcodes plugin <= 1.1.9 versions.

    Olevmedia Olevmedia Shortcodes
  • Critical 9.3
    CVE-2022-30995 Public exploit

    Sensitive information disclosure due to improper authentication. The following products are affected: Acronis Cyber Pro…

    Acronis Acronis Cyber Protect 15 Acronis Cyber Backup 12.5
  • Critical 9.3
    CVE-2022-3405 Public exploit

    Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The followin…

    Acronis Acronis Cyber Protect 15 Acronis Cyber Backup 12.5
  • Medium 5.9
    CVE-2023-25786

    WordPress Eyes Only: User Access Shortcode Plugin <= 1.8.2 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Thom Stark Eyes Only: User Access Shortcode plugin <= 1.8.2 versions.

    Thom Stark Eyes Only: User Access Shortcode
  • Medium 5.9
    CVE-2023-25789

    WordPress Tapfiliate Plugin <= 3.0.12 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Tapfiliate plugin <= 3.0.12 versions.

    tapfiliate Tapfiliate
  • Medium 5.9
    CVE-2023-25783

    WordPress FireCask Like & Share Button Plugin <= 1.1.5 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Alex Moss FireCask Like & Share Button plugin <= 1.1.5 versions.

    Alex Moss FireCask Like & Share Button
  • Medium 5.9
    CVE-2023-25787

    WordPress WP资源下载管理 Plugin <= 1.3.9 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Wbolt team WP资源下载管理 plugin <= 1.3.9 versions.

    Wbolt team WP资源下载管理
  • Medium 5.9
    CVE-2023-25797

    WordPress vSlider Multi Image Slider for WordPress Plugin <= 4.1.2 is vulnerable to Cross Site Scripting (XSS)

    Auth. Stored Cross-Site Scripting (XSS) vulnerability in Mr.Vibe vSlider Multi Image Slider for WordPress plugin <= 4.1.2 versions.

    Mr.Vibe vSlider Multi Image Slider for WordPress Web / CMS
  • Medium 5.9
    CVE-2023-25784

    WordPress Sticky Ad Bar Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Bon Plan Gratos Sticky Ad Bar plugin <= 1.3.1 versions.

    Bon Plan Gratos Sticky Ad Bar Plugin
  • Medium 5.9
    CVE-2023-25792

    WordPress WP Open Social Plugin <= 5.0 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in XiaoMac WP Open Social plugin <= 5.0 versions.

    XiaoMac WP Open Social
  • High 7.1
    CVE-2023-23790

    WordPress Pods Plugin <= 2.9.10.2 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Pods Framework Team Pods – Custom Content Types and Fields plugin <= 2.9.10.2 versions.

    Pods Framework Team Pods – Custom Content Types and Fields
  • Medium 6.7
    CVE-2023-28070

    Alienware Command Center Application, versions 5.5.43.0 and prior, contain an improper access control vulnerability. A …

    Dell Alienware Command Center (AWCC
  • Medium 4.3
    CVE-2023-22691

    WordPress Category Specific RSS feed Subscription Plugin <= v2.1 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin <= v2.1 versions.

    Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription
  • High 7.8
    CVE-2020-22429

    redox-os v0.1.0 was discovered to contain a use-after-free bug via the gethostbyaddr() function at /src/header/netdb/mo…

  • Medium 4.8
    CVE-2023-0756

    An issue has been discovered in GitLab affecting all versions before 15.9.6, all versions starting from 15.10 before 15…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 4.9
    CVE-2023-0805

    An issue has been discovered in GitLab EE affecting all versions starting from 15.2 before 15.9.6, all versions startin…

    GitLab GitLab Web / CMS
  • Medium 6.5
    CVE-2023-0485

    An issue has been discovered in GitLab affecting all versions starting from 13.11 before 15.8.5, all versions starting …

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 5.4
    CVE-2023-0155

    An issue has been discovered in GitLab CE/EE affecting all versions before 15.8.5, 15.9.4, 15.10.1. Open redirects was …

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 5.4
    CVE-2023-1265

    An issue has been discovered in GitLab affecting all versions starting from 11.9 before 15.9.6, all versions starting f…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 4.4
    CVE-2023-1836

    A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 5.1 before 15.9.6, all …

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 4.3
    CVE-2023-1204

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.1 before 15.10.8, all versions sta…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 5.7
    CVE-2023-1178

    An issue has been discovered in GitLab CE/EE affecting all versions from 8.6 before 15.9.6, all versions starting from …

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 6.8
    CVE-2023-1965

    An issue has been discovered in GitLab EE affecting all versions starting from 14.2 before 15.9.6, all versions startin…

    GitLab GitLab Web / CMS
  • Medium 5.4
    CVE-2023-29839 Public exploit

    A Stored Cross Site Scripting (XSS) vulnerability exists in multiple pages of Hotel Druid version 3.0.4, which allows a…

    hoteldruid hoteldruid Debian Ubuntu
  • Medium 6.1
    CVE-2023-24744

    Cross Site Scripting (XSS) vulnerability in Rediker Software AdminPlus 6.1.91.00 allows remote attackers to run arbitra…

  • Medium 6.8
    CVE-2023-2182

    An issue has been discovered in GitLab EE affecting all versions starting from 15.10 before 15.10.5, all versions start…

    GitLab GitLab Web / CMS
  • Medium 6.4
    CVE-2023-2069

    An issue has been discovered in GitLab affecting all versions starting from 10.0 before 12.9.8, all versions starting f…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Critical 9.8
    CVE-2023-30204

    Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the judge_id parameter at /p…

  • Medium 4.8
    CVE-2023-30205

    A stored cross-site scripting (XSS) vulnerability in DouPHP v1.7 allows attackers to execute arbitrary web scripts or H…

  • Medium 5.5
    CVE-2023-30300

    An issue in the component hang.wasm of WebAssembly 1.0 causes an infinite loop.

    wabt wabt Debian Ubuntu
  • Low 3.1
    CVE-2022-4376

    An issue has been discovered in GitLab affecting all versions before 15.9.6, all versions starting from 15.10 before 15…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 6.5
    CVE-2022-40302

    An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0…

    frr Debian
  • Unscored —
    CVE-2022-40318

    An issue was discovered in bgpd in FRRouting (FRR) through 8.4. By crafting a BGP OPEN message with an option of type 0…

    frr Debian
  • Unscored —
    CVE-2022-43681

    An out-of-bounds read exists in the BGP daemon of FRRouting FRR through 8.4. When sending a malformed BGP OPEN message …

    frr Debian
  • High 7.8
    CVE-2017-11197 Public exploit

    In CyberArk Viewfinity 5.5.10.95 and 6.x before 6.1.1.220, a low privilege user can escalate to an administrative user …