Archive
8 May 2023
Vulnerabilities first published on this day (UTC), newest first.
185 results · Feed
-
High 8.8
Cross Site Request Forgery (CSRF) vulnerability in FlyCms 1.0 allows attackers to add arbitrary administrator accounts …
-
Medium 6.1
Cross Site Scripting (XSS) pandao editor.md 1.5.0 allows attackers to execute arbitrary code via crafted linked url val…
-
Critical 9.8
SQL Injection vulnerability in victor cms 1.0 allows attackers to execute arbitrary commands via the post parameter to …
-
Medium 6.1
Open redirect vulnerability in typecho 1.1-17.10.30-release via the referer parameter to Login.php.
-
Medium 6.5
Cross Site Request Forgery (CSRF) vulnerability in beescms v4 allows attackers to delete the administrator account via …
-
High 8.8
MCMS vulnerable to arbitrary code execution via crafted thumbnail
File upload vulnerability in MCMS 5.0 allows attackers to execute arbitrary code via a crafted thumbnail. A different vulnerability than CVE-2022-31943.
-
Medium 5.5
A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, iOS 15.7.…
-
Medium 5.5
A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3, macOS Monterey 1…
-
Medium 5.5
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS B…
-
Low 3.3
The issue was addressed with improved checks. This issue is fixed in iOS 16.4 and iPadOS 16.4. An app may be able to un…
-
Medium 5.5
A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16…
-
Medium 6.5
A denial-of-service issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. A use…
-
Critical 9.8
This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16…
-
High 7.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 1…
-
Medium 5.5
A privacy issue was addressed by moving sensitive data to a more secure location. This issue is fixed in macOS Ventura …
-
Medium 6.5
The issue was addressed with improved authentication. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16…
-
High 8.0
MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in…
-
High 8.8
MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in…
-
High 7.8
In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused…
-
Critical 9.8
Metersphere v1.20.20-lts-79d354a6 is vulnerable to Remote Command Execution. The system command reverse-shell can be ex…
-
Critical 9.8
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function version_set.
-
Critical 9.8
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function set_tftp_upgrad.
-
High 8.1
AgilePoint NX v8.0 SU2.2 & SU2.3 – Arbitrary File Delete
AgilePoint NX v8.0 SU2.2 & SU2.3 – Arbitrary File Delete Vulnerability allows arbitrary file deletion, by an unspecified request.
-
Medium 6.1
Cybonet PineApp Mail Secure RXSS vulnerability
Cybonet PineApp Mail Secure A reflected cross-site scripting (XSS) vulnerability was identified in the product, using an unspecified endpoint.
-
Medium 6.1
WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - Reflected cross-site scripting (RXSS)
WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - Reflected cross-site scripting (RXSS) through an unspecified request.
-
Medium 6.5
AgilePoint NX v8.0 SU2.2 & SU2.3 - Path traversal
AgilePoint NX v8.0 SU2.2 & SU2.3 - Path traversal - Vulnerability allows path traversal and downloading files from the server, by an unspecified request.
-
High 7.5
WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - CWE-22: Path Traversal
WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - CWE-22: Path Traversal
-
High 8.1
EasyTor Applications – Authorization Bypass
EasyTor Applications – Authorization Bypass - EasyTor Applications may allow authorization bypass via unspecified method.
-
Medium 5.3
Milesight NCR/Camera CWE-200: Exposure of Sensitive Information
Milesight NCR/camera version 71.8.0.6-r5 discloses sensitive information through an unspecified request.
-
High 7.5
Milesight NCR/Camera CWE-522: Insufficiently Protected Credentials
Milesight NCR/camera version 71.8.0.6-r5 exposes credentials through an unspecified request.
-
High 8.8
AgilePoint NX v8.0 SU2.2 & SU2.3 – Insecure File Upload
AgilePoint NX v8.0 SU2.2 & SU2.3 – Insecure File Upload - Vulnerability allows insecure file upload, by an unspecified request.
-
Medium 5.5
A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, mac…
-
High 7.1
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app …
-
Medium 5.5
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 1…
-
Critical 9.1
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4…
-
Medium 5.5
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.…
-
High 7.8
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, i…
-
Medium 5.5
This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16…
-
High 7.8
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in GarageBand for macOS 1…
-
High 8.6
This issue was addressed with a new entitlement. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macO…