Skip to content
OpenAdvisories

Archive

22 May 2023

Vulnerabilities first published on this day (UTC), newest first.

← April 2023 2023 / May /22 June 2023 →
  1. 139
  2. 281
  3. 378
  4. 487
  5. 542
  6. 69
  7. 74
  8. 8185
  9. 9252
  10. 10210
  11. 11101
  12. 1290
  13. 13 
  14. 1411
  15. 15147
  16. 1695
  17. 1757
  18. 1891
  19. 1927
  20. 2023
  21. 217
  22. 2284
  23. 2399
  24. 2486
  25. 2578
  26. 2688
  27. 2724
  28. 2834
  29. 2934
  30. 30151
  31. 31120
All Critical High Medium Low Exploited only Public exploit

84 results · Feed

  • Medium 5.4
    CVE-2023-23797

    WordPress Auto YouTube Importer Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in SecondLineThemes Auto YouTube Importer plugin <= 1.0.3 versions.

    SecondLineThemes Auto YouTube Importer
  • Medium 5.4
    CVE-2022-41608

    WordPress Asgaros Forum Plugin <= 2.2.0 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Thomas Belser Asgaros Forum plugin <= 2.2.0 versions.

    Thomas Belser Asgaros Forum
  • Medium 5.3
    CVE-2022-44739

    WordPress Quick Restaurant Reservations Plugin <= 1.5.4 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in ThingsForRestaurants Quick Restaurant Reservations plugin <= 1.5.4 versions.

    ThingsForRestaurants Quick Restaurant Reservations
  • Medium 4.3
    CVE-2022-45076

    WordPress Flexible Elementor Panel Plugin <= 2.3.8 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in WebMat Flexible Elementor Panel plugin <= 2.3.8 versions.

    WebMat Flexible Elementor Panel
  • Medium 4.7
    CVE-2022-45079

    WordPress Loginizer Plugin <= 1.7.5 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Softaculous Loginizer plugin <= 1.7.5 versions.

    Softaculous Loginizer
  • Medium 4.3
    CVE-2022-45376

    WordPress Side Cart Woocommerce (Ajax) Plugin < 2.1 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in XootiX Side Cart Woocommerce (Ajax) < 2.1 versions.

    xootix Side Cart Woocommerce (Ajax) Web / CMS
  • Medium 5.4
    CVE-2022-47167

    WordPress Crayon Syntax Highlighter Plugin <= 2.8.4 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Aram Kocharyan Crayon Syntax Highlighter plugin <= 2.8.4 versions.

    Aram Kocharyan Crayon Syntax Highlighter
  • Medium 5.4
    CVE-2022-47183

    WordPress Extra Block Design, Style, CSS for ANY Gutenberg Blocks Plugin <= 0.2.6 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in StylistWP Extra Block Design, Style, CSS for ANY Gutenberg Blocks plugin <= 0.2.6 versions.

    StylistWP Extra Block Design, Style, CSS for ANY Gutenberg Blocks
  • Medium 4.3
    CVE-2022-47611

    WordPress Hover Image Plugin <= 1.4.1 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Julian Weinert // cs&m Hover Image plugin <= 1.4.1 versions.

    Julian Weinert // cs&m Hover Image
  • Medium 6.3
    CVE-2022-47609

    WordPress DNUI Plugin <= 2.8.1 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Nicearma DNUI plugin <= 2.8.1 versions.

    Nicearma DNUI
  • Medium 4.3
    CVE-2022-47142

    WordPress Mediamatic – Media Library Folders Plugin <= 2.8.1 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Plugincraft Mediamatic – Media Library Folders plugin <= 2.8.1 versions.

    Plugincraft Mediamatic – Media Library Folders
  • Medium 4.3
    CVE-2023-22714

    WordPress Coming Soon by Supsystic Plugin <= 1.7.10 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Coming Soon by Supsystic plugin <= 1.7.10 versions.

    supsystic Coming Soon by Supsystic
  • Medium 4.3
    CVE-2023-22709

    WordPress SRS Simple Hits Counter Plugin <= 1.1.0 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Atif N SRS Simple Hits Counter plugin <= 1.1.0 versions.

    Atif N SRS Simple Hits Counter
  • Medium 4.3
    CVE-2023-22692

    WordPress Name Directory Plugin <= 1.27.1 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Jeroen Peters Name Directory plugin <= 1.27.1 versions.

    Jeroen Peters Name Directory
  • Medium 4.3
    CVE-2023-22688

    WordPress WP Tabs Slides Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Abdul Ibad WP Tabs Slides plugin <= 2.0.3 versions.

    Abdul Ibad WP Tabs Slides
  • Medium 5.4
    CVE-2023-23680

    WordPress WP TopBar Plugin <= 5.36 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Bob Goetz WP-TopBar plugin <= 5.36 versions.

    Bob Goetz WP-TopBar
  • Medium 5.4
    CVE-2023-23712

    WordPress User Meta Manager Plugin <= 3.4.9 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in User Meta Manager plugin <= 3.4.9 versions.

    User Meta Manager User Meta Manager
  • Medium 5.4
    CVE-2023-23813

    WordPress My Calendar Plugin <= 3.4.3 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Joseph C Dolson My Calendar plugin <= 3.4.3 versions.

    Joseph C Dolson My Calendar
  • High 7.8
    CVE-2022-0010

    QCS 800xA Vulnerability identified in system log files

    Insertion of Sensitive Information into Log File vulnerability in ABB QCS 800xA, ABB QCS AC450, ABB Platform Engineering Tools. An attacker, who already has local access to the QCS nodes, could successfully obtain the password for a system user account. Using…

    ABB QCS 800xA Platform Engineering Tools QCS AC450 ICS / OT
  • Critical 9.8
    CVE-2023-33236

    MXsecurity Hardcoded Credential Vulnerability

    MXsecurity version 1.0 is vulnearble to hardcoded credential vulnerability. This vulnerability has been reported that can be exploited to craft arbitrary JWT tokens and subsequently bypass authentication for web-based APIs.

    Moxa MXsecurity Series ICS / OT
  • High 7.2
    CVE-2023-33235

    MXsecurity Command Injection Vulnerability

    MXsecurity version 1.0 is vulnearble to command injection vulnerability. This vulnerability has been reported in the SSH CLI program, which can be exploited by attackers who have gained authorization privileges. The attackers can break out of the restricted s…

    Moxa MXsecurity Series ICS / OT
  • High 8.8
    CVE-2023-32336

    IBM InfoSphere Information Server code execution

    IBM InfoSphere Information Server 11.7 is affected by a remote code execution vulnerability due to insecure deserialization in an RMI service. IBM X-Force ID: 255285.

    IBM InfoSphere Information Server
  • High 7.5
    CVE-2023-33297

    Bitcoin Core before 24.1, when debug mode is not used, allows attackers to cause a denial of service (e.g., CPU consump…

  • Unscored —
    CVE-2023-33293

    An issue was discovered in KaiOS 3.0 and 3.1. The binary /system/kaios/api-daemon exposes a local web server on *.local…

  • Unscored —
    CVE-2023-33281

    The remote keyfob system on Nissan Sylphy Classic 2021 sends the same RF signal for each door-open request, which allow…

  • Medium 5.3
    CVE-2023-33285

    An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup ha…

    qtbase-opensource-src qtbase-opensource-src qt6-base qt6-base Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2023-33294

    An issue was discovered in KaiOS 3.0 before 3.1. The /system/bin/tctweb_server binary exposes a local web server that r…

  • Medium 4.3
    CVE-2023-33264

    Hazelcast vulnerable to unmasked password exposure

    In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets.

    com.hazelcast:hazelcast Maven
  • Medium 4.7
    CVE-2023-33288

    An issue was discovered in the Linux kernel before 6.2.9. A use-after-free was found in bq24190_remove in drivers/power…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2023-28467 Public exploit

    In MyBB before 1.8.34, there is XSS in the User CP module via the user email field.

  • Unscored —
    CVE-2023-29838

    Insecure Permission vulnerability found in Botkind/Siber Systems SyncApp v.19.0.3.0 allows a local attacker toe escalat…

  • Critical 9.8
    CVE-2023-31689 EPSS 20%

    In Wcms 0.3.2, an attacker can send a crafted request from a vulnerable web application backend server /wcms/wex/html.p…

  • Medium 6.5
    CVE-2023-31816

    IT Sourcecode Content Management System Project In PHP and MySQL With Source Code 1.0.0 is vulnerable to Cross Site Scr…

  • Medium 5.4
    CVE-2023-31779 Public exploit

    Wekan v6.84 and earlier is vulnerable to Cross Site Scripting (XSS). An attacker with user privilege on kanban board ca…

  • Medium 6.1
    CVE-2023-31584 Public exploit

    GitHub repository cu/silicon commit a9ef36 was discovered to contain a reflected cross-site scripting (XSS) vulnerabili…

  • High 7.2
    CVE-2023-31742 Public exploit

    There is a command injection vulnerability in the Linksys WRT54GL router with firmware version 4.30.18.006. If an attac…

  • Unscored —
    CVE-2023-31923

    Suprema BioStar 2 before 2022 Q4, v2.9.1 has Insecure Permissions. A vulnerability in the web application allows an aut…

  • High 7.5
    CVE-2023-27067

    Directory Traversal vulnerability in Sitecore Experience Platform through 10.2 allows remote attackers to download arbi…

  • Medium 6.5
    CVE-2023-27066

    Directory Traversal vulnerability in Site Core Experience Platform 10.2 and earlier allows authenticated remote attacke…

  • High 7.0
    CVE-2023-2597

    In Eclipse Openj9 before version 0.38.0, in the implementation of the shared cache (which is enabled by default in Open…

    Eclipse Foundation Eclipse OpenJ9