Skip to content
OpenAdvisories

Archive

5 May 2023

Vulnerabilities first published on this day (UTC), newest first.

← April 2023 2023 / May /5 June 2023 →
  1. 139
  2. 281
  3. 378
  4. 487
  5. 542
  6. 69
  7. 74
  8. 8185
  9. 9252
  10. 10210
  11. 11101
  12. 1290
  13. 13 
  14. 1411
  15. 15147
  16. 1695
  17. 1757
  18. 1891
  19. 1927
  20. 2023
  21. 217
  22. 2284
  23. 2399
  24. 2486
  25. 2578
  26. 2688
  27. 2724
  28. 2834
  29. 2934
  30. 30151
  31. 31120
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • High 7.5
    CVE-2023-29350

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Microsoft Microsoft Edge (Chromium-based) Browsers
  • High 8.1
    CVE-2021-40331

    Permissions problem in the Apache Ranger Hive Plugin

    An Incorrect Permission Assignment for Critical Resource vulnerability was found in the Apache Ranger Hive Plugin. Any user with SELECT privilege on a database can alter the ownership of the table in Hive when Apache Ranger Hive Plugin is enabled This issue a…

    Apache Software Foundation Apache Ranger Hive Plugin org.apache.ranger:ranger-hive-plugin Maven
  • High 8.4
    CVE-2022-45048

    Apache Ranger: code execution vulnerability in policy expressions

    Authenticated users with appropriate privileges can create policies having expressions that can exploit code execution vulnerability. This issue affects Apache Ranger: 2.3.0. Users are recommended to update to version 2.4.0.

    Apache Software Foundation Apache Ranger org.apache.ranger:ranger Maven
  • High 7.3
    CVE-2023-28068

    Dell Command Monitor, versions 10.9 and prior, contains an improper folder permission vulnerability. A local authentica…

    Dell Dell Command Monitor (DCM)
  • High 7.5
    CVE-2023-32235 Public exploit Scanner template EPSS 39%

    Path Traversal in Ghost

    Ghost before 5.42.1 allows remote attackers to read arbitrary files within the active theme's folder via /assets/built%2F..%2F..%2F/ directory traversal. This occurs in frontend/web/middleware/static-theme.js.

    ghost npm
  • High 7.2
    CVE-2023-29963

    S-CMS v5.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the component /admi…

  • High 7.2
    CVE-2023-2551

    PHP Remote File Inclusion in unilogies/bumsys

    PHP Remote File Inclusion in GitHub repository unilogies/bumsys prior to 2.1.1.

    unilogies unilogies/bumsys
  • High 8.8
    CVE-2023-2552

    Cross-Site Request Forgery (CSRF) in unilogies/bumsys

    Cross-Site Request Forgery (CSRF) in GitHub repository unilogies/bumsys prior to 2.1.1.

    unilogies unilogies/bumsys
  • High 7.3
    CVE-2023-2531

    Improper Restriction of Excessive Authentication Attempts in azuracast/azuracast

    Improper Restriction of Excessive Authentication Attempts in GitHub repository azuracast/azuracast prior to 0.18.3.

    AzuraCast azuracast/azuracast azuracast/azuracast Packagist
  • High 8.2
    CVE-2023-2550

    Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

    Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.13.

    thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  • High 7.2
    CVE-2023-2554 EPSS 29%

    External Control of File Name or Path in unilogies/bumsys

    External Control of File Name or Path in GitHub repository unilogies/bumsys prior to 2.2.0.

    unilogies unilogies/bumsys
  • High 7.5
    CVE-2023-30243

    Beijing Netcon NS-ASG Application Security Gateway v6.3 is vulnerable to SQL Injection via TunnelId that allows access …

  • High 8.8
    CVE-2023-30065

    MitraStar GPT-2741GNAC-N2 with firmware BR_g5.9_1.11(WVK.0)b32 was discovered to contain a remote code execution (RCE) …