Skip to content
OpenAdvisories

Archive

May 2023

Vulnerabilities first published in this month (UTC), newest first.

← April 2023 2023 / May June 2023 →
  1. 139
  2. 281
  3. 378
  4. 487
  5. 542
  6. 69
  7. 74
  8. 8185
  9. 9252
  10. 10210
  11. 11101
  12. 1290
  13. 13 
  14. 1411
  15. 15147
  16. 1695
  17. 1757
  18. 1891
  19. 1927
  20. 2023
  21. 217
  22. 2284
  23. 2399
  24. 2486
  25. 2578
  26. 2688
  27. 2724
  28. 2834
  29. 2934
  30. 30151
  31. 31120
All Critical High Medium Low Exploited only Public exploit

1,208 results · Clear filters · Feed

  • Medium 6.5
    CVE-2023-31101

    Apache InLong: Users who joined later can see the data of deleted users

    Insecure Default Initialization of Resource Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.5.0 through 1.6.0. Users registered in InLong who joined later can see deleted users' data. Users are advised to upg…

    Apache Software Foundation Apache InLong org.apache.inlong:manager-pojo org.apache.inlong:manager-service Maven
  • Medium 5.8
    CVE-2023-32348

    Teltonika’s Remote Management System versions prior to 4.10.0 contain a virtual private network (VPN) hub feature for c…

    Teltonika Remote Management System
  • Medium 5.3
    CVE-2023-32346

    Teltonika’s Remote Management System versions prior to 4.10.0 contain a function that allows users to claim their devic…

    Teltonika Remote Management System
  • Medium 5.4
    CVE-2023-25448

    WordPress Archivist – Custom Archive Templates Plugin <= 1.7.4 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Eric Teubert Archivist – Custom Archive Templates plugin <= 1.7.4 versions.

    Eric Teubert Archivist – Custom Archive Templates
  • Medium 4.3
    CVE-2023-25447

    WordPress ColorWay Theme <= 4.2.3 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Inkthemescom ColorWay theme <= 4.2.3 versions.

    inkthemescom ColorWay
  • Medium 6.1
    CVE-2023-25537

    Dell PowerEdge 14G server BIOS versions prior to 2.18.1 and Dell Precision BIOS versions prior to 2.18.2, contain an Ou…

    Dell PowerEdge Platform
  • Medium 5.4
    CVE-2023-23797

    WordPress Auto YouTube Importer Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in SecondLineThemes Auto YouTube Importer plugin <= 1.0.3 versions.

    SecondLineThemes Auto YouTube Importer
  • Medium 5.4
    CVE-2022-41608

    WordPress Asgaros Forum Plugin <= 2.2.0 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Thomas Belser Asgaros Forum plugin <= 2.2.0 versions.

    Thomas Belser Asgaros Forum
  • Medium 5.3
    CVE-2022-44739

    WordPress Quick Restaurant Reservations Plugin <= 1.5.4 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in ThingsForRestaurants Quick Restaurant Reservations plugin <= 1.5.4 versions.

    ThingsForRestaurants Quick Restaurant Reservations
  • Medium 4.3
    CVE-2022-45076

    WordPress Flexible Elementor Panel Plugin <= 2.3.8 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in WebMat Flexible Elementor Panel plugin <= 2.3.8 versions.

    WebMat Flexible Elementor Panel
  • Medium 4.7
    CVE-2022-45079

    WordPress Loginizer Plugin <= 1.7.5 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Softaculous Loginizer plugin <= 1.7.5 versions.

    Softaculous Loginizer
  • Medium 4.3
    CVE-2022-45376

    WordPress Side Cart Woocommerce (Ajax) Plugin < 2.1 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in XootiX Side Cart Woocommerce (Ajax) < 2.1 versions.

    xootix Side Cart Woocommerce (Ajax) Web / CMS
  • Medium 5.4
    CVE-2022-47167

    WordPress Crayon Syntax Highlighter Plugin <= 2.8.4 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Aram Kocharyan Crayon Syntax Highlighter plugin <= 2.8.4 versions.

    Aram Kocharyan Crayon Syntax Highlighter
  • Medium 5.4
    CVE-2022-47183

    WordPress Extra Block Design, Style, CSS for ANY Gutenberg Blocks Plugin <= 0.2.6 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in StylistWP Extra Block Design, Style, CSS for ANY Gutenberg Blocks plugin <= 0.2.6 versions.

    StylistWP Extra Block Design, Style, CSS for ANY Gutenberg Blocks
  • Medium 4.3
    CVE-2022-47611

    WordPress Hover Image Plugin <= 1.4.1 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Julian Weinert // cs&m Hover Image plugin <= 1.4.1 versions.

    Julian Weinert // cs&m Hover Image
  • Medium 6.3
    CVE-2022-47609

    WordPress DNUI Plugin <= 2.8.1 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Nicearma DNUI plugin <= 2.8.1 versions.

    Nicearma DNUI
  • Medium 4.3
    CVE-2022-47142

    WordPress Mediamatic – Media Library Folders Plugin <= 2.8.1 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Plugincraft Mediamatic – Media Library Folders plugin <= 2.8.1 versions.

    Plugincraft Mediamatic – Media Library Folders
  • Medium 4.3
    CVE-2023-22714

    WordPress Coming Soon by Supsystic Plugin <= 1.7.10 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Coming Soon by Supsystic plugin <= 1.7.10 versions.

    supsystic Coming Soon by Supsystic
  • Medium 4.3
    CVE-2023-22709

    WordPress SRS Simple Hits Counter Plugin <= 1.1.0 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Atif N SRS Simple Hits Counter plugin <= 1.1.0 versions.

    Atif N SRS Simple Hits Counter
  • Medium 4.3
    CVE-2023-22692

    WordPress Name Directory Plugin <= 1.27.1 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Jeroen Peters Name Directory plugin <= 1.27.1 versions.

    Jeroen Peters Name Directory
  • Medium 4.3
    CVE-2023-22688

    WordPress WP Tabs Slides Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Abdul Ibad WP Tabs Slides plugin <= 2.0.3 versions.

    Abdul Ibad WP Tabs Slides
  • Medium 5.4
    CVE-2023-23680

    WordPress WP TopBar Plugin <= 5.36 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Bob Goetz WP-TopBar plugin <= 5.36 versions.

    Bob Goetz WP-TopBar
  • Medium 5.4
    CVE-2023-23712

    WordPress User Meta Manager Plugin <= 3.4.9 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in User Meta Manager plugin <= 3.4.9 versions.

    User Meta Manager User Meta Manager
  • Medium 5.4
    CVE-2023-23813

    WordPress My Calendar Plugin <= 3.4.3 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Joseph C Dolson My Calendar plugin <= 3.4.3 versions.

    Joseph C Dolson My Calendar
  • Medium 5.3
    CVE-2023-33285

    An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup ha…

    qtbase-opensource-src qtbase-opensource-src qt6-base qt6-base Debian Ubuntu Azure Linux
  • Medium 4.3
    CVE-2023-33264

    Hazelcast vulnerable to unmasked password exposure

    In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, configuration routines don't mask passwords in the member configuration properly. This allows Hazelcast Management Center users to view some of the secrets.

    com.hazelcast:hazelcast Maven
  • Medium 4.7
    CVE-2023-33288

    An issue was discovered in the Linux kernel before 6.2.9. A use-after-free was found in bq24190_remove in drivers/power…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  • Medium 6.5
    CVE-2023-31816

    IT Sourcecode Content Management System Project In PHP and MySQL With Source Code 1.0.0 is vulnerable to Cross Site Scr…

  • Medium 5.4
    CVE-2023-31779 Public exploit

    Wekan v6.84 and earlier is vulnerable to Cross Site Scripting (XSS). An attacker with user privilege on kanban board ca…

  • Medium 6.1
    CVE-2023-31584 Public exploit

    GitHub repository cu/silicon commit a9ef36 was discovered to contain a reflected cross-site scripting (XSS) vulnerabili…

  • Medium 6.5
    CVE-2023-27066

    Directory Traversal vulnerability in Site Core Experience Platform 10.2 and earlier allows authenticated remote attacke…

  • Medium 5.5
    CVE-2023-2837

    Stack-based Buffer Overflow in gpac/gpac

    Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2.

    gpac gpac/gpac gpac gpac Debian Ubuntu
  • Medium 5.3
    CVE-2023-2840

    NULL Pointer Dereference in gpac/gpac

    NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.2.2.

    gpac gpac/gpac gpac gpac Debian Ubuntu
  • Medium 6.1
    CVE-2023-2838

    Out-of-bounds Read in gpac/gpac

    Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2.

    gpac gpac/gpac gpac gpac Debian Ubuntu
  • Medium 6.8
    CVE-2023-2839

    Divide By Zero in gpac/gpac

    Divide By Zero in GitHub repository gpac/gpac prior to 2.2.2.

    gpac gpac/gpac gpac gpac Debian Ubuntu
  • Medium 6.7
    CVE-2020-36694

    An issue was discovered in netfilter in the Linux kernel before 5.10. There can be a use-after-free in the packet proce…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Medium 6.5
    CVE-2023-33254

    There is an LDAP bind credentials exposure on KACE Systems Deployment and Remote Site appliances 9.0.146. The captured …

  • Medium 4.7
    CVE-2023-33251

    When Akka HTTP before 10.5.2 accepts file uploads via the FileUploadDirectives.fileUploadAll directive, the temporary f…

  • Medium 4.4
    CVE-2023-33250

    The Linux kernel 6.3 has a use-after-free in iopt_unmap_iova_range in drivers/iommu/iommufd/io_pagetable.c.

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Medium 4.3
    CVE-2022-47134

    WordPress Gallery Metabox Plugin <= 1.5 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Bill Erickson Gallery Metabox plugin <= 1.5 versions.

    Bill Erickson Gallery Metabox