Archive
May 2023
Vulnerabilities first published in this month (UTC), newest first.
49 results · Clear filters · Feed
-
High 8.1CVE-2023-3009 Public exploit
Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9.
-
High 8.8CVE-2023-33177 Public exploit
Xibo CMS vulnerable to Remote Code Execution through Zip Slip
Xibo is a content management system (CMS). A path traversal vulnerability exists in the Xibo CMS whereby a specially crafted zip file can be uploaded to the CMS via the layout import function by an authenticated user which would allow creation of files outsid…
-
High 8.8
Dolibarr vulnerable to remote code execution via uppercase manipulation
Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: <?PHP instead of <?php in injected data.
-
High 7.5CVE-2021-27825 Public exploit
A directory traversal vulnerability on Mercury MAC1200R devices allows attackers to read arbitrary files via a web-stat…
-
High 7.8CVE-2023-31873 Public exploit
Gin 0.7.4 allows execution of arbitrary code when a crafted file is opened, e.g., via require('child_process').
-
High 8.8CVE-2023-31874 Public exploit
Yank Note (YN) 3.52.1 allows execution of arbitrary code when a crafted file is opened, e.g., via nodeRequire('child_pr…
-
High 8.8CVE-2023-30350 Public exploit
FS S3900-24T4S devices allow authenticated attackers with guest access to escalate their privileges and reset the admin…
-
High 8.6
Openfire administration console authentication bypass
Openfire is an XMPP server licensed under the Open Source Apache License. Openfire's administrative console, a web-based application, was found to be vulnerable to a path traversal attack via the setup environment. This permitted an unauthenticated user to us…
KEV Aug 24, 2023 -
High 7.1CVE-2023-32311 Public exploit
The CloudExplorer Lite missing permissions check
CloudExplorer Lite is an open source cloud management platform. In CloudExplorer Lite prior to version 1.1.0 users organization/workspace permissions are not properly checked. This allows users to add themselves to any organization. This vulnerability has bee…
-
High 7.2
Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via /eval/ajax.php?action=save_…
-
High 7.5CVE-2023-31594 Public exploit
IC Realtime ICIP-P2012T 2.420 is vulnerable to Incorrect Access Control via an exposed HTTP channel using VLC network.
-
High 7.5CVE-2023-31595 Public exploit
IC Realtime ICIP-P2012T 2.420 is vulnerable to Incorrect Access Control via unauthenticated port access.
-
High 7.8CVE-2023-31748 Public exploit
Insecure permissions in MobileTrans v4.0.11 allows attackers to escalate privileges to local admin via replacing the ex…
-
High 7.1CVE-2023-2859 Public exploit
Code Injection in nilsteampassnet/teampass
Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.9.
-
High 8.8CVE-2023-32697 Public exploit
Sqlite-jdbc vulnerable to remote code execution when JDBC url is attacker controlled
SQLite JDBC is a library for accessing and creating SQLite database files in Java. Sqlite-jdbc addresses a remote code execution vulnerability via JDBC URL. This issue impacting versions 3.6.14.1 through 3.41.2.1 and has been fixed in version 3.41.2.2.
-
High 7.2CVE-2023-33617 Public exploit
An OS Command Injection vulnerability in Parks Fiberlink 210 firmware version V2.1.14_X000 was found via the /boaform/a…
-
High 7.8CVE-2023-31747 Public exploit
Wondershare Filmora 12 (Build 12.2.1.2088) was discovered to contain an unquoted service path vulnerability via the com…
-
High 7.2CVE-2023-31742 Public exploit
There is a command injection vulnerability in the Linksys WRT54GL router with firmware version 4.30.18.006. If an attac…
-
High 7.5CVE-2022-30114 Public exploit
A heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB, firmware version 18.3.n.0…
-
High 7.1
WordPress CMS Tree Page View Plugin <= 1.6.7 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Jon Christopher CMS Tree Page View plugin <= 1.6.7 versions.
-
High 7.2CVE-2019-25137 Public exploit
Umbraco CMS 4.11.8 through 7.15.10, and 7.12.4, allows Remote Code Execution by authenticated administrators via msxsl:…
-
High 7.2CVE-2023-31702 Public exploit
SQL injection in the View User Profile in MicroWorld eScan Management Console 14.0.1400.2281 allows remote attacker to …
-
High 7.1
WordPress FooGallery Plugin <= 2.2.35 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in FooPlugins FooGallery plugin <= 2.2.35 versions.
-
High 7.5CVE-2023-32309 Public exploit
Arbitrary file inclusion with the pymdowm-snippets extension
PyMdown Extensions is a set of extensions for the `Python-Markdown` markdown project. In affected versions an arbitrary file read is possible when using include file syntax. By using the syntax `--8<--"/etc/passwd"` or `--8<--"/proc/self/environ"` the content…
-
High 7.5CVE-2023-32784 Public exploit
In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a wor…
-
High 7.8CVE-2023-21109 Public exploit
In multiple places of AccessibilityService, there is a possible way to hide the app from the user due to a logic error …
-
High 8.8CVE-2023-32073 Public exploit
AVideo command injection vulnerability
WWBN AVideo is an open source video platform. In versions 12.4 and prior, a command injection vulnerability exists at `plugin/CloneSite/cloneClient.json.php` which allows Remote Code Execution if you CloneSite Plugin. This is a bypass to the fix for CVE-2023-…
-
High 7.5CVE-2022-47879 Public exploit
A Remote Code Execution (RCE) vulnerability in /be/rpc.php in Jedox 2020.2.5 allows remote authenticated users to load …
-
High 7.8CVE-2023-31497 Public exploit
Incorrect access control in Quick Heal Technologies Limited Seqrite Endpoint Security (EPS) all versions prior to v8.0 …
-
High 7.1
WordPress Advanced Custom Fields / Advanced Custom Fields PRO plugins <= 6.1.5 vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP Engine Advanced Custom Fields Pro, WP Engine Advanced Custom Fields plugins <= 6.1.5 versions.
-
High 8.8CVE-2023-29930 Public exploit
An issue was found in Genesys CIC Polycom phone provisioning TFTP Server all version allows a remote attacker to execut…
-
High 7.5CVE-2023-27564 Public exploit
n8n Information Disclosure vulnerability
The n8n package 0.218.0 for Node.js allows Information Disclosure.
-
High 7.8CVE-2023-29343 Public exploit
SysInternals Sysmon for Windows Elevation of Privilege Vulnerability
SysInternals Sysmon for Windows Elevation of Privilege Vulnerability
-
High 7.8
Win32k Elevation of Privilege Vulnerability
Win32k Elevation of Privilege Vulnerability
KEV May 9, 2023 -
High 7.2
Microsoft SharePoint Server Remote Code Execution Vulnerability
Microsoft SharePoint Server Remote Code Execution Vulnerability
KEV Mar 26, 2024 -
High 7.3CVE-2023-2594 Public exploit
SourceCodester Food Ordering Management System Registration sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the component Registration. The manipulation of the argument username leads to sql injection. It is possible…
-
High 7.2
An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.3.x and below that coul…
-
High 7.1CVE-2023-2591 Public exploit
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nilsteampassnet/teampass
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitHub repository nilsteampassnet/teampass prior to 3.0.7.
-
High 7.2
NEX-Forms < 8.4 - Admin+ SQL Injection
The NEX-Forms WordPress plugin before 8.4 does not properly escape the `table` parameter, which is populated with user input, before concatenating it to an SQL query.
-
High 7.8
In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused…