Yayın tarihine göre
Mayıs 2023: sömürülen ve yeni ciddi CVE kayıtları
109 kayıt · 8 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 1 / 2
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
33İzleyin | CVE-2023-1669İstismar yok | SEOPress < 6.5.0.3 - Admin+ PHP Object Injectionseopress · seopress · CWE-502 | Yüksek7,2 | — | %17,6 | 2 May 2023 |
51Planlayın | CVE-2023-1730Kavram kanıtı | SupportCandy < 3.1.5 - Unauthenticated SQLisupportcandy · supportcandy · CWE-89 | Kritik9,8 | — | %40,5 | 2 May 2023 |
30İzleyin | CVE-2023-1861İstismar yok | Limit Login Attempts < 1.7.2 - Subscriber+ Stored XSSlimit login attempts project · limit login attempts · CWE-79 | Orta5,4 | — | %28,7 | 2 May 2023 |
58Planlayın | CVE-2023-32007İstismar yok | Apache Spark: Shell command injection via Spark UIapache · spark · CWE-77 | Yüksek8,8 | — | %75,9 | 2 May 2023 |
23İzleyin | CVE-2023-29772İstismar yok | A Cross-site scripting (XSS) vulnerability in the System Log/General Log page of the administrator web UI in ASUS RT-AC51U wireless router fasus · rt-ac51u firmware · CWE-79 | Orta5,2 | — | %11,2 | 2 May 2023 |
46Planlayın | CVE-2023-2479Kavram kanıtı | OS Command Injection in appium/appium-desktopappium · appium-desktop · CWE-78 | Kritik9,8 | — | %22,0 | 2 May 2023 |
32İzleyin | CVE-2022-47874Kavram kanıtı | Improper Access Control in /tc/rpc in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to view details of database connections vijedox · cloud · CWE-863 | Orta6,5 | — | %21,1 | 2 May 2023 |
38İzleyin | CVE-2022-47875Kavram kanıtı | A Directory Traversal vulnerability in /be/erpc.php in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to execute arbitrary codejedox · cloud · CWE-22 | Yüksek8,8 | — | %10,1 | 2 May 2023 |
46Planlayın | CVE-2022-47878Kavram kanıtı | Incorrect input validation for the default-storage-path in the settings page in Jedox 2020.2.5 allows remote, authenticated users to specifyjedox · jedox · CWE-434 | Yüksek8,8 | — | %35,7 | 2 May 2023 |
44Planlayın | CVE-2023-29778İstismar yok | GL.iNET MT3000 4.1.0 Release 2 is vulnerable to OS Command Injection via /usr/lib/oui-httpd/rpc/logread.gl-inet · gl-mt3000 firmware · CWE-78 | Kritik9,8 | — | %16,0 | 2 May 2023 |
34İzleyin | CVE-2023-30403İstismar yok | An issue in the time-based authentication mechanism of Aigital Aigital Wireless-N Repeater Mini_Router v0.131229 allows attackers to bypass aigital · wireless-n repeater mini router firmware · CWE-613 | Yüksek7,5 | — | %13,8 | 2 May 2023 |
60Bu hafta | CVE-2022-30995Silahlaştırılmış | Sensitive information disclosure due to improper authentication.acronis · cyber backup · CWE-287 | Yüksek7,5 | — | %3,2 | 3 May 2023 |
40Planlayın | CVE-2022-3405Silahlaştırılmış | Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent.acronis · cyber backup · CWE-269 | Yüksek8,8 | — | %5,3 | 3 May 2023 |
23İzleyin | CVE-2023-22372İstismar yok | BIG-IP Edge Client for Windows and Mac OS vulnerabilityf5 · big-ip access policy manager · CWE-924 | Orta5,9 | — | %0,2 | 3 May 2023 |
60Bu hafta | CVE-2023-25826Silahlaştırılmış | Remote Code Execution in OpenTSDBopentsdb · opentsdb · CWE-78 | Kritik9,8 | — | %43,0 | 3 May 2023 |
59Planlayın | CVE-2023-31099İstismar yok | Zoho ManageEngine OPManager through 126323 allows an authenticated user to achieve remote code execution via probe servers.zohocorp · manageengine opmanager | Yüksek8,8 | — | %81,5 | 3 May 2023 |
14İzleyin | CVE-2023-2521İstismar yok | NEXTU NEXT-7004N POST Request formFilter cross site scriptingez-net · next-7004n firmware · CWE-79 | Düşük3,5 | — | %0,3 | 4 May 2023 |
38İzleyin | CVE-2023-2522İstismar yok | Chengdu VEC40G Network Detection os command injectionfeiyuxing · vec40g firmware · CWE-78 | Yüksek7,2 | — | %33,7 | 4 May 2023 |
49Planlayın | CVE-2023-2523Kavram kanıtı | Weaver E-Office unrestricted uploade-office · e-office · CWE-434 | Kritik9,8 | — | %32,8 | 4 May 2023 |
50Planlayın | CVE-2023-20126Kavram kanıtı | Cisco SPA112 2-Port Phone Adapters Remote Command Execution Vulnerabilitycisco · spa112 firmware · CWE-306 | Kritik9,8 | — | %36,6 | 4 May 2023 |
48Planlayın | CVE-2023-21492Silahlaştırılmış | Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.samsung · android · CWE-532 | Orta4,4 | KEV | %2,5 | 4 May 2023 |
42Planlayın | CVE-2023-32235Kavram kanıtı | Ghost before 5.42.1 allows remote attackers to read arbitrary files within the active theme's folder via /assets/built%2F..%2F..%2F/ directoghost · ghost · CWE-22 | Yüksek7,5 | — | %39,0 | 5 May 2023 |
60Bu hafta | CVE-2023-30013Silahlaştırılmış | TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setting/setTracerouteCfg.totolink · x5000r firmware · CWE-78 | Kritik9,8 | — | %25,8 | 5 May 2023 |
37İzleyin | CVE-2023-2554İstismar yok | External Control of File Name or Path in unilogies/bumsysbumsys project · bumsys · CWE-73 | Yüksek7,2 | — | %29,1 | 5 May 2023 |
52Planlayın | CVE-2023-2564İstismar yok | OS Command Injection in sbs20/scanservjsscanservjs project · scanservjs · CWE-78 | Kritik10,0 | — | %40,5 | 7 May 2023 |
40Planlayın | CVE-2023-2575İstismar yok | Authenticated Buffer Overflowadvantech · eki-1521 firmware · CWE-121 | Yüksek8,8 | — | %15,4 | 8 May 2023 |
39İzleyin | CVE-2023-0603İstismar yok | Sloth Logo Customizer <= 2.0.2 - Stored XSS via CSRFsloth logo customizer project · sloth logo customizer · CWE-79 | Yüksek8,8 | — | %13,8 | 8 May 2023 |
33İzleyin | CVE-2023-1347İstismar yok | Customizer Export/Import < 0.9.6 - Admin+ PHP Object Injectionfastlinemedia · customizer export\/import · CWE-502 | Yüksek7,2 | — | %16,0 | 8 May 2023 |
49Planlayın | CVE-2023-1650İstismar yok | ChatBot < 4.4.7 - Unauthenticated PHP Object Injectionquantumcloud · wpbot · CWE-502 | Kritik9,8 | — | %34,3 | 8 May 2023 |
41Planlayın | CVE-2023-2114Kavram kanıtı | NEX-Forms < 8.4 - Admin+ SQL Injectionbasixonline · nex-forms · CWE-89 | Yüksek7,2 | — | %44,6 | 8 May 2023 |
44Planlayın | CVE-2023-31133İstismar yok | Ghost vulnerable to disclosure of private API fieldsghost · ghost · CWE-200 | Yüksek7,5 | — | %45,7 | 8 May 2023 |
35İzleyin | CVE-2023-32233Kavram kanıtı | In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrarylinux · linux kernel · CWE-416 | Yüksek7,8 | — | %13,4 | 8 May 2023 |
57Planlayın | CVE-2023-32071İstismar yok | XWiki Platform vulnerable to RXSS via editor parameter - importinline templatexwiki · xwiki · CWE-79 | Kritik9,0 | — | %70,3 | 9 May 2023 |
35İzleyin | CVE-2023-20046İstismar yok | A vulnerability in the key-based SSH authentication feature of Cisco StarOS Software could allow an authenticated, remote attacker to elevatcisco · staros · CWE-289 | Yüksek8,8 | — | %0,8 | 9 May 2023 |
29İzleyin | CVE-2023-24932Kavram kanıtı | Secure Boot Security Feature Bypass Vulnerabilitymicrosoft · windows 10 1507 · CWE-863 | Orta6,7 | — | %10,5 | 9 May 2023 |
67Bu hafta | CVE-2023-24941İstismar yok | Windows Network File System Remote Code Execution Vulnerabilitymicrosoft · windows server 2012 · CWE-908 | Kritik9,8 | — | %94,6 | 9 May 2023 |
38İzleyin | CVE-2023-24949İstismar yok | Windows Kernel Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1809 · CWE-190 | Yüksek7,8 | — | %24,6 | 9 May 2023 |
46Planlayın | CVE-2023-24950İstismar yok | Microsoft SharePoint Server Spoofing Vulnerabilitymicrosoft · sharepoint enterprise server · CWE-20 | Orta6,5 | — | %67,4 | 9 May 2023 |
83Hemen | CVE-2023-24955Silahlaştırılmış | Microsoft SharePoint Server Remote Code Execution Vulnerabilitymicrosoft · sharepoint enterprise server · CWE-94 | Yüksek7,2 | KEV | %84,9 | 9 May 2023 |
55Planlayın | CVE-2023-29325İstismar yok | Windows OLE Remote Code Execution Vulnerabilitymicrosoft · windows 10 1507 · CWE-416 | Yüksek7,5 | — | %83,8 | 9 May 2023 |
73Bu hafta | CVE-2023-29336Silahlaştırılmış | Win32k Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1507 · CWE-416 | Yüksek7,8 | KEV | %41,1 | 9 May 2023 |
36İzleyin | CVE-2023-31472İstismar yok | An issue was discovered on GL.iNet devices before 3.216.gl-inet · gl-s20 firmware · CWE-770 | Yüksek7,5 | — | %19,8 | 9 May 2023 |
43Planlayın | CVE-2023-28126İstismar yok | An authentication bypass vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to gain access by exploitinivanti · avalanche · CWE-305 | Orta5,9 | — | %66,6 | 9 May 2023 |
48Planlayın | CVE-2023-28127İstismar yok | A path traversal vulnerability exists in Avalanche version 6.3.x and below that when exploited could result in possible information disclosuivanti · avalanche · CWE-22 | Yüksek7,5 | — | %58,6 | 9 May 2023 |
53Planlayın | CVE-2023-28128Silahlaştırılmış | An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker tivanti · avalanche · CWE-434 | Yüksek7,2 | — | %84,6 | 9 May 2023 |
39İzleyin | CVE-2023-31478Kavram kanıtı | An issue was discovered on GL.iNet devices before 3.216.gl-inet · gl-s20 firmware | Yüksek7,5 | — | %29,6 | 9 May 2023 |
37İzleyin | CVE-2023-22361İstismar yok | Improper privilege management vulnerability in SkyBridge MB-A100/110 firmware Ver.seiko-sol · skybridge mb-a110 firmware | Orta6,5 | — | %35,9 | 10 May 2023 |
36İzleyin | CVE-2023-30777Kavram kanıtı | WordPress Advanced Custom Fields / Advanced Custom Fields PRO plugins <= 6.1.5 vulnerable to Cross Site Scripting (XSS)advancedcustomfields · advanced custom fields · CWE-79 | Orta6,1 | — | %39,0 | 10 May 2023 |
19İzleyin | CVE-2022-47137İstismar yok | WordPress Ninja Tables Plugin <= 4.3.4 is vulnerable to Cross Site Scripting (XSS)wpmanageninja · ninja tables · CWE-79 | Orta4,8 | — | %0,4 | 10 May 2023 |
49Planlayın | CVE-2023-30194Kavram kanıtı | Prestashop posstaticfooter <= 1.0.0 is vulnerable to SQL Injection via posstaticfooter::getPosCurrentHook().prestashop · poststaticfooter · CWE-89 | Kritik9,8 | — | %32,4 | 10 May 2023 |
48Planlayın | CVE-2023-2648Kavram kanıtı | Weaver E-Office uploadify.php unrestricted uploadweaver · e-office · CWE-434 | Kritik9,8 | — | %28,4 | 11 May 2023 |
43Planlayın | CVE-2023-31475İstismar yok | An issue was discovered on GL.iNet devices before 3.216.gl-inet · gl-s20 firmware · CWE-120 | Kritik9,8 | — | %13,7 | 11 May 2023 |
42Planlayın | CVE-2023-29809Kavram kanıtı | SQL injection vulnerability found in Maximilian Vogt companymaps (cmaps) v.8.0 allows a remote attacker to execute arbitrary code via a crafcompanymaps project · companymaps · CWE-89 | Kritik9,8 | — | %10,5 | 11 May 2023 |
62Bu hafta | CVE-2023-32243Kavram kanıtı | WordPress Essential Addons for Elementor Plugin 5.4.0-5.7.1 is vulnerable to Privilege Escalationwpdeveloper · essential addons for elementor · CWE-287 | Kritik9,8 | — | %75,5 | 12 May 2023 |
55Planlayın | CVE-2023-27823Kavram kanıtı | An authentication bypass in Optoma 1080PSTX C02 allows an attacker to access the administration console without valid credentials.optoma · 1080pstx · CWE-287 | Kritik9,8 | — | %53,5 | 12 May 2023 |
46Planlayın | CVE-2023-31983İstismar yok | A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the mp edimax · br-6428ns firmware · CWE-77 | Kritik9,8 | — | %24,9 | 12 May 2023 |
64Bu hafta | CVE-2023-1698Kavram kanıtı | WAGO: WBM Command Injection in multiple productswago · compact controller 100 firmware · CWE-78 | Kritik9,8 | — | %81,9 | 15 May 2023 |
33İzleyin | CVE-2023-1549İstismar yok | Ad Inserter < 2.7.27 - Admin+ PHP Object Injectionad inserter project · ad inserter · CWE-502 | Yüksek7,2 | — | %16,9 | 15 May 2023 |
41Planlayın | CVE-2023-32068Kavram kanıtı | URL Redirection to Untrusted Site in XWikixwiki · xwiki · CWE-601 | Orta6,1 | — | %55,0 | 15 May 2023 |
39İzleyin | CVE-2023-32985İstismar yok | Jenkins Sidebar Link Plugin 2.2.1 and earlier does not restrict the path of files in a method implementing form validation, allowing attackejenkins · sidebar link · CWE-22 | Orta4,3 | — | %72,3 | 16 May 2023 |
53Planlayın | CVE-2023-32986İstismar yok | Jenkins File Parameter Plugin 285.v757c5b_67a_c25 and earlier does not restrict the name (and resulting uploaded file name) of Stashed File jenkins · file parameters · CWE-732 | Yüksek8,8 | — | %60,6 | 16 May 2023 |
40Planlayın | CVE-2023-2723İstismar yok | Use after free in DevTools in Google Chrome prior to 113.0.5672.126 allowed a remote attacker who had compromised the renderer process to pogoogle · chrome · CWE-416 | Yüksek8,8 | — | %15,4 | 16 May 2023 |
44Planlayın | CVE-2023-2724İstismar yok | Type confusion in V8 in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a craftedgoogle · chrome · CWE-843 | Yüksek8,8 | — | %29,1 | 16 May 2023 |
42Planlayın | CVE-2023-2725İstismar yok | Use after free in Guest View in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious extensgoogle · chrome · CWE-416 | Yüksek8,8 | — | %24,6 | 16 May 2023 |
45Planlayın | CVE-2023-2745Kavram kanıtı | WordPress Core < 6.2.1 - Directory Traversalwordpress · wordpress · CWE-22 | Orta5,4 | — | %79,5 | 17 May 2023 |
60Bu hafta | CVE-2023-31902Silahlaştırılmış | RPA Technology Mobile Mouse 3.6.0.4 is vulnerable to Remote Code Execution (RCE).mobilemouse · mobile mouse | Kritik9,8 | — | %8,7 | 17 May 2023 |
46Planlayın | CVE-2023-2766Kavram kanıtı | Weaver OA jx2_config.ini file accessweaver · e-office · CWE-552 | Yüksek7,5 | — | %54,2 | 17 May 2023 |
42Planlayın | CVE-2023-20159İstismar yok | Cisco Small Business Series Switches Buffer Overflow Vulnerabilitiescisco · business 250-16p-2g firmware · CWE-120 | Kritik9,8 | — | %10,2 | 17 May 2023 |
42Planlayın | CVE-2023-20160İstismar yok | Cisco Small Business Series Switches Buffer Overflow Vulnerabilitiescisco · business 250-16p-2g firmware · CWE-120 | Kritik9,8 | — | %10,2 | 17 May 2023 |
42Planlayın | CVE-2023-20161İstismar yok | Cisco Small Business Series Switches Buffer Overflow Vulnerabilitiescisco · business 250-16p-2g firmware · CWE-120 | Kritik9,8 | — | %10,2 | 17 May 2023 |
42Planlayın | CVE-2023-20189İstismar yok | Cisco Small Business Series Switches Buffer Overflow Vulnerabilitiescisco · business 250-16p-2g firmware · CWE-120 | Kritik9,8 | — | %11,1 | 17 May 2023 |
44Planlayın | CVE-2023-28709İstismar yok | Apache Tomcat: Fix for CVE-2023-24998 is incompleteapache · tomcat · CWE-193 | Yüksek7,5 | — | %48,0 | 22 May 2023 |
40Planlayın | CVE-2023-31742Silahlaştırılmış | There is a command injection vulnerability in the Linksys WRT54GL router with firmware version 4.30.18.006.linksys · wrt54gl firmware · CWE-77 | Yüksek7,2 | — | %9,1 | 22 May 2023 |
45Planlayın | CVE-2023-31689İstismar yok | In Wcms 0.3.2, an attacker can send a crafted request from a vulnerable web application backend server /wcms/wex/html.php via the finish parwcms · wcms · CWE-434 | Kritik9,8 | — | %20,2 | 22 May 2023 |
54Planlayın | CVE-2023-29919Kavram kanıtı | SolarView Compact <= 6.0 is vulnerable to Insecure Permissions.contec · solarview compact firmware · CWE-276 | Kritik9,1 | — | %60,2 | 22 May 2023 |
31İzleyin | CVE-2022-0357İstismar yok | Improper Quoting Path Issue in Bitdefender Total Securitybitdefender · antivirus plus · CWE-428 | Yüksek7,8 | — | %0,1 | 24 May 2023 |
77Bu hafta | CVE-2023-33009Silahlaştırılmış | A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX seriezyxel · atp100 firmware · CWE-120 | Kritik9,8 | KEV | %28,1 | 24 May 2023 |
78Bu hafta | CVE-2023-33010Silahlaştırılmış | A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX serizyxel · atp100 firmware · CWE-120 | Kritik9,8 | KEV | %29,0 | 24 May 2023 |
98Hemen | CVE-2023-33246Silahlaştırılmış | Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration functionapache · rocketmq · CWE-94 | Kritik9,8 | KEV | %96,5 | 24 May 2023 |
95Hemen | CVE-2023-2868Silahlaştırılmış | Remote Code injection in Barracuda Email Security Gatewaybarracuda · email security gateway 300 firmware · CWE-20 | Kritik9,8 | KEV | %86,8 | 24 May 2023 |
59Planlayın | CVE-2023-2732Kavram kanıtı | MStore API <= 3.9.2 - Authentication Bypassinspireui · mstore api · CWE-288 | Kritik9,8 | — | %67,2 | 24 May 2023 |
53Planlayın | CVE-2023-30145Kavram kanıtı | Camaleon CMS v2.7.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the formats parameter.tuzitio · camaleon cms · CWE-94 | Kritik9,8 | — | %46,1 | 26 May 2023 |
32İzleyin | CVE-2023-33440Kavram kanıtı | Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via /eval/ajax.php?action=save_user.faculty evaluation system project · faculty evaluation system · CWE-94 | Yüksek7,2 | — | %14,5 | 26 May 2023 |
60Bu hafta | CVE-2023-2825Silahlaştırılmış | An issue has been discovered in GitLab CE/EE affecting only version 16.0.0.gitlab · gitlab · CWE-22 | Yüksek7,5 | — | %71,6 | 26 May 2023 |
90Hemen | CVE-2023-32315Silahlaştırılmış | Openfire administration console authentication bypassigniterealtime · openfire · CWE-22 | Yüksek7,5 | KEV | %99,9 | 26 May 2023 |
46Planlayın | CVE-2023-2924İstismar yok | Supcon SimField reportupload.aspx unrestricted uploadsupcontech · simfield firmware · CWE-434 | Kritik9,8 | — | %24,3 | 27 May 2023 |
50Planlayın | CVE-2023-2928Kavram kanıtı | DedeCMS article_allowurl_edit.php code injectiondedecms · dedecms · CWE-94 | Yüksek8,8 | — | %51,3 | 27 May 2023 |
46Planlayın | CVE-2023-2947İstismar yok | Cross-site Scripting (XSS) - Stored in openemr/openemropen-emr · openemr · CWE-79 | Orta4,8 | — | %90,4 | 27 May 2023 |
53Planlayın | CVE-2023-2948Kavram kanıtı | Cross-site Scripting (XSS) - Generic in openemr/openemropen-emr · openemr · CWE-79 | Orta6,1 | — | %96,7 | 28 May 2023 |
47Planlayın | CVE-2022-24627Kavram kanıtı | An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752.audiocodes · device manager express · CWE-89 | Kritik9,8 | — | %26,3 | 29 May 2023 |
50Planlayın | CVE-2022-24629Kavram kanıtı | An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752.audiocodes · device manager express · CWE-22 | Kritik9,8 | — | %37,2 | 29 May 2023 |
35İzleyin | CVE-2022-24630Kavram kanıtı | An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752.audiocodes · device manager express · CWE-77 | Yüksek7,2 | — | %23,8 | 29 May 2023 |
33İzleyin | CVE-2022-24631İstismar yok | An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752.audiocodes · device manager express · CWE-79 | Orta5,4 | — | %41,3 | 29 May 2023 |
29İzleyin | CVE-2022-24632Kavram kanıtı | An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752.audiocodes · device manager express · CWE-22 | Orta5,3 | — | %27,3 | 29 May 2023 |
60Bu hafta | CVE-2023-30253Silahlaştırılmış | Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: <?PHP instead of <?php in injectdolibarr · dolibarr erp\/crm · CWE-78 | Yüksek8,8 | — | %82,0 | 29 May 2023 |
34İzleyin | CVE-2023-0329İstismar yok | Elementor Website Builder < 3.12.2 - Admin+ SQLielementor · website builder · CWE-89 | Yüksek7,2 | — | %19,6 | 30 May 2023 |
40Planlayın | CVE-2023-2288İstismar yok | Otter - Gutenberg Blocks < 2.2.6 - Author+ PHAR Deserializationthemeisle · otter · CWE-502 | Yüksek8,8 | — | %17,9 | 30 May 2023 |
49Planlayın | CVE-2023-2650İstismar yok | Possible DoS translating ASN.1 object identifiersopenssl · openssl · CWE-770 | Orta6,5 | — | %75,3 | 30 May 2023 |
34İzleyin | CVE-2023-31185İstismar yok | ROZCOM server frameworkrozcom · rozcom client · CWE-200 | Yüksek7,5 | — | %12,8 | 30 May 2023 |
42Planlayın | CVE-2023-2935İstismar yok | Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted google · chrome · CWE-843 | Yüksek8,8 | — | %23,8 | 30 May 2023 |
- CVE-2023-166933İzleyin
SEOPress < 6.5.0.3 - Admin+ PHP Object Injection
YüksekCVSS 7,2İstismar yokEPSS %17seopress · seopress2 May 2023
- CVE-2023-173051Planlayın
SupportCandy < 3.1.5 - Unauthenticated SQLi
KritikCVSS 9,8Kavram kanıtıEPSS %40supportcandy · supportcandy2 May 2023
- CVE-2023-186130İzleyin
Limit Login Attempts < 1.7.2 - Subscriber+ Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %28limit login attempts project · limit login attempts2 May 2023
- CVE-2023-3200758Planlayın
Apache Spark: Shell command injection via Spark UI
YüksekCVSS 8,8İstismar yokEPSS %75apache · spark2 May 2023
- CVE-2023-2977223İzleyin
A Cross-site scripting (XSS) vulnerability in the System Log/General Log page of the administrator web UI in ASUS RT-AC51U wireless router f
OrtaCVSS 5,2İstismar yokEPSS %11asus · rt-ac51u firmware2 May 2023
- CVE-2023-247946Planlayın
OS Command Injection in appium/appium-desktop
KritikCVSS 9,8Kavram kanıtıEPSS %22appium · appium-desktop2 May 2023
- CVE-2022-4787432İzleyin
Improper Access Control in /tc/rpc in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to view details of database connections vi
OrtaCVSS 6,5Kavram kanıtıEPSS %21jedox · cloud2 May 2023
- CVE-2022-4787538İzleyin
A Directory Traversal vulnerability in /be/erpc.php in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to execute arbitrary code
YüksekCVSS 8,8Kavram kanıtıEPSS %10jedox · cloud2 May 2023
- CVE-2022-4787846Planlayın
Incorrect input validation for the default-storage-path in the settings page in Jedox 2020.2.5 allows remote, authenticated users to specify
YüksekCVSS 8,8Kavram kanıtıEPSS %35jedox · jedox2 May 2023
- CVE-2023-2977844Planlayın
GL.iNET MT3000 4.1.0 Release 2 is vulnerable to OS Command Injection via /usr/lib/oui-httpd/rpc/logread.
KritikCVSS 9,8İstismar yokEPSS %16gl-inet · gl-mt3000 firmware2 May 2023
- CVE-2023-3040334İzleyin
An issue in the time-based authentication mechanism of Aigital Aigital Wireless-N Repeater Mini_Router v0.131229 allows attackers to bypass
YüksekCVSS 7,5İstismar yokEPSS %13aigital · wireless-n repeater mini router firmware2 May 2023
- CVE-2022-3099560Bu hafta
Sensitive information disclosure due to improper authentication.
YüksekCVSS 7,5SilahlaştırılmışEPSS %3acronis · cyber backup3 May 2023
- CVE-2022-340540Planlayın
Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent.
YüksekCVSS 8,8SilahlaştırılmışEPSS %5acronis · cyber backup3 May 2023
- CVE-2023-2237223İzleyin
BIG-IP Edge Client for Windows and Mac OS vulnerability
OrtaCVSS 5,9İstismar yokEPSS %0f5 · big-ip access policy manager3 May 2023
- CVE-2023-2582660Bu hafta
Remote Code Execution in OpenTSDB
KritikCVSS 9,8SilahlaştırılmışEPSS %43opentsdb · opentsdb3 May 2023
- CVE-2023-3109959Planlayın
Zoho ManageEngine OPManager through 126323 allows an authenticated user to achieve remote code execution via probe servers.
YüksekCVSS 8,8İstismar yokEPSS %81zohocorp · manageengine opmanager3 May 2023
- CVE-2023-252114İzleyin
NEXTU NEXT-7004N POST Request formFilter cross site scripting
DüşükCVSS 3,5İstismar yokEPSS %0ez-net · next-7004n firmware4 May 2023
- CVE-2023-252238İzleyin
Chengdu VEC40G Network Detection os command injection
YüksekCVSS 7,2İstismar yokEPSS %33feiyuxing · vec40g firmware4 May 2023
- CVE-2023-252349Planlayın
Weaver E-Office unrestricted upload
KritikCVSS 9,8Kavram kanıtıEPSS %32e-office · e-office4 May 2023
- CVE-2023-2012650Planlayın
Cisco SPA112 2-Port Phone Adapters Remote Command Execution Vulnerability
KritikCVSS 9,8Kavram kanıtıEPSS %36cisco · spa112 firmware4 May 2023
- CVE-2023-2149248Planlayın
Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.
OrtaCVSS 4,4KEVSilahlaştırılmışEPSS %2samsung · android4 May 2023
- CVE-2023-3223542Planlayın
Ghost before 5.42.1 allows remote attackers to read arbitrary files within the active theme's folder via /assets/built%2F..%2F..%2F/ directo
YüksekCVSS 7,5Kavram kanıtıEPSS %39ghost · ghost5 May 2023
- CVE-2023-3001360Bu hafta
TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setting/setTracerouteCfg.
KritikCVSS 9,8SilahlaştırılmışEPSS %25totolink · x5000r firmware5 May 2023
- CVE-2023-255437İzleyin
External Control of File Name or Path in unilogies/bumsys
YüksekCVSS 7,2İstismar yokEPSS %29bumsys project · bumsys5 May 2023
- CVE-2023-256452Planlayın
OS Command Injection in sbs20/scanservjs
KritikCVSS 10,0İstismar yokEPSS %40scanservjs project · scanservjs7 May 2023
- CVE-2023-257540Planlayın
Authenticated Buffer Overflow
YüksekCVSS 8,8İstismar yokEPSS %15advantech · eki-1521 firmware8 May 2023
- CVE-2023-060339İzleyin
Sloth Logo Customizer <= 2.0.2 - Stored XSS via CSRF
YüksekCVSS 8,8İstismar yokEPSS %13sloth logo customizer project · sloth logo customizer8 May 2023
- CVE-2023-134733İzleyin
Customizer Export/Import < 0.9.6 - Admin+ PHP Object Injection
YüksekCVSS 7,2İstismar yokEPSS %16fastlinemedia · customizer export\/import8 May 2023
- CVE-2023-165049Planlayın
ChatBot < 4.4.7 - Unauthenticated PHP Object Injection
KritikCVSS 9,8İstismar yokEPSS %34quantumcloud · wpbot8 May 2023
- CVE-2023-211441Planlayın
NEX-Forms < 8.4 - Admin+ SQL Injection
YüksekCVSS 7,2Kavram kanıtıEPSS %44basixonline · nex-forms8 May 2023
- CVE-2023-3113344Planlayın
Ghost vulnerable to disclosure of private API fields
YüksekCVSS 7,5İstismar yokEPSS %45ghost · ghost8 May 2023
- CVE-2023-3223335İzleyin
In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary
YüksekCVSS 7,8Kavram kanıtıEPSS %13linux · linux kernel8 May 2023
- CVE-2023-3207157Planlayın
XWiki Platform vulnerable to RXSS via editor parameter - importinline template
KritikCVSS 9,0İstismar yokEPSS %70xwiki · xwiki9 May 2023
- CVE-2023-2004635İzleyin
A vulnerability in the key-based SSH authentication feature of Cisco StarOS Software could allow an authenticated, remote attacker to elevat
YüksekCVSS 8,8İstismar yokEPSS %0cisco · staros9 May 2023
- CVE-2023-2493229İzleyin
Secure Boot Security Feature Bypass Vulnerability
OrtaCVSS 6,7Kavram kanıtıEPSS %10microsoft · windows 10 15079 May 2023
- CVE-2023-2494167Bu hafta
Windows Network File System Remote Code Execution Vulnerability
KritikCVSS 9,8İstismar yokEPSS %94microsoft · windows server 20129 May 2023
- CVE-2023-2494938İzleyin
Windows Kernel Elevation of Privilege Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %24microsoft · windows 10 18099 May 2023
- CVE-2023-2495046Planlayın
Microsoft SharePoint Server Spoofing Vulnerability
OrtaCVSS 6,5İstismar yokEPSS %67microsoft · sharepoint enterprise server9 May 2023
- CVE-2023-2495583Hemen
Microsoft SharePoint Server Remote Code Execution Vulnerability
YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %84microsoft · sharepoint enterprise server9 May 2023
- CVE-2023-2932555Planlayın
Windows OLE Remote Code Execution Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %83microsoft · windows 10 15079 May 2023
- CVE-2023-2933673Bu hafta
Win32k Elevation of Privilege Vulnerability
YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %41microsoft · windows 10 15079 May 2023
- CVE-2023-3147236İzleyin
An issue was discovered on GL.iNet devices before 3.216.
YüksekCVSS 7,5İstismar yokEPSS %19gl-inet · gl-s20 firmware9 May 2023
- CVE-2023-2812643Planlayın
An authentication bypass vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker to gain access by exploitin
OrtaCVSS 5,9İstismar yokEPSS %66ivanti · avalanche9 May 2023
- CVE-2023-2812748Planlayın
A path traversal vulnerability exists in Avalanche version 6.3.x and below that when exploited could result in possible information disclosu
YüksekCVSS 7,5İstismar yokEPSS %58ivanti · avalanche9 May 2023
- CVE-2023-2812853Planlayın
An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacker t
YüksekCVSS 7,2SilahlaştırılmışEPSS %84ivanti · avalanche9 May 2023
- CVE-2023-3147839İzleyin
An issue was discovered on GL.iNet devices before 3.216.
YüksekCVSS 7,5Kavram kanıtıEPSS %29gl-inet · gl-s20 firmware9 May 2023
- CVE-2023-2236137İzleyin
Improper privilege management vulnerability in SkyBridge MB-A100/110 firmware Ver.
OrtaCVSS 6,5İstismar yokEPSS %35seiko-sol · skybridge mb-a110 firmware10 May 2023
- CVE-2023-3077736İzleyin
WordPress Advanced Custom Fields / Advanced Custom Fields PRO plugins <= 6.1.5 vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1Kavram kanıtıEPSS %39advancedcustomfields · advanced custom fields10 May 2023
- CVE-2022-4713719İzleyin
WordPress Ninja Tables Plugin <= 4.3.4 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 4,8İstismar yokEPSS %0wpmanageninja · ninja tables10 May 2023
- CVE-2023-3019449Planlayın
Prestashop posstaticfooter <= 1.0.0 is vulnerable to SQL Injection via posstaticfooter::getPosCurrentHook().
KritikCVSS 9,8Kavram kanıtıEPSS %32prestashop · poststaticfooter10 May 2023
- CVE-2023-264848Planlayın
Weaver E-Office uploadify.php unrestricted upload
KritikCVSS 9,8Kavram kanıtıEPSS %28weaver · e-office11 May 2023
- CVE-2023-3147543Planlayın
An issue was discovered on GL.iNet devices before 3.216.
KritikCVSS 9,8İstismar yokEPSS %13gl-inet · gl-s20 firmware11 May 2023
- CVE-2023-2980942Planlayın
SQL injection vulnerability found in Maximilian Vogt companymaps (cmaps) v.8.0 allows a remote attacker to execute arbitrary code via a craf
KritikCVSS 9,8Kavram kanıtıEPSS %10companymaps project · companymaps11 May 2023
- CVE-2023-3224362Bu hafta
WordPress Essential Addons for Elementor Plugin 5.4.0-5.7.1 is vulnerable to Privilege Escalation
KritikCVSS 9,8Kavram kanıtıEPSS %75wpdeveloper · essential addons for elementor12 May 2023
- CVE-2023-2782355Planlayın
An authentication bypass in Optoma 1080PSTX C02 allows an attacker to access the administration console without valid credentials.
KritikCVSS 9,8Kavram kanıtıEPSS %53optoma · 1080pstx12 May 2023
- CVE-2023-3198346Planlayın
A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the mp
KritikCVSS 9,8İstismar yokEPSS %24edimax · br-6428ns firmware12 May 2023
- CVE-2023-169864Bu hafta
WAGO: WBM Command Injection in multiple products
KritikCVSS 9,8Kavram kanıtıEPSS %81wago · compact controller 100 firmware15 May 2023
- CVE-2023-154933İzleyin
Ad Inserter < 2.7.27 - Admin+ PHP Object Injection
YüksekCVSS 7,2İstismar yokEPSS %16ad inserter project · ad inserter15 May 2023
- CVE-2023-3206841Planlayın
URL Redirection to Untrusted Site in XWiki
OrtaCVSS 6,1Kavram kanıtıEPSS %55xwiki · xwiki15 May 2023
- CVE-2023-3298539İzleyin
Jenkins Sidebar Link Plugin 2.2.1 and earlier does not restrict the path of files in a method implementing form validation, allowing attacke
OrtaCVSS 4,3İstismar yokEPSS %72jenkins · sidebar link16 May 2023
- CVE-2023-3298653Planlayın
Jenkins File Parameter Plugin 285.v757c5b_67a_c25 and earlier does not restrict the name (and resulting uploaded file name) of Stashed File
YüksekCVSS 8,8İstismar yokEPSS %60jenkins · file parameters16 May 2023
- CVE-2023-272340Planlayın
Use after free in DevTools in Google Chrome prior to 113.0.5672.126 allowed a remote attacker who had compromised the renderer process to po
YüksekCVSS 8,8İstismar yokEPSS %15google · chrome16 May 2023
- CVE-2023-272444Planlayın
Type confusion in V8 in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted
YüksekCVSS 8,8İstismar yokEPSS %29google · chrome16 May 2023
- CVE-2023-272542Planlayın
Use after free in Guest View in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious extens
YüksekCVSS 8,8İstismar yokEPSS %24google · chrome16 May 2023
- CVE-2023-274545Planlayın
WordPress Core < 6.2.1 - Directory Traversal
OrtaCVSS 5,4Kavram kanıtıEPSS %79wordpress · wordpress17 May 2023
- CVE-2023-3190260Bu hafta
RPA Technology Mobile Mouse 3.6.0.4 is vulnerable to Remote Code Execution (RCE).
KritikCVSS 9,8SilahlaştırılmışEPSS %8mobilemouse · mobile mouse17 May 2023
- CVE-2023-276646Planlayın
Weaver OA jx2_config.ini file access
YüksekCVSS 7,5Kavram kanıtıEPSS %54weaver · e-office17 May 2023
- CVE-2023-2015942Planlayın
Cisco Small Business Series Switches Buffer Overflow Vulnerabilities
KritikCVSS 9,8İstismar yokEPSS %10cisco · business 250-16p-2g firmware17 May 2023
- CVE-2023-2016042Planlayın
Cisco Small Business Series Switches Buffer Overflow Vulnerabilities
KritikCVSS 9,8İstismar yokEPSS %10cisco · business 250-16p-2g firmware17 May 2023
- CVE-2023-2016142Planlayın
Cisco Small Business Series Switches Buffer Overflow Vulnerabilities
KritikCVSS 9,8İstismar yokEPSS %10cisco · business 250-16p-2g firmware17 May 2023
- CVE-2023-2018942Planlayın
Cisco Small Business Series Switches Buffer Overflow Vulnerabilities
KritikCVSS 9,8İstismar yokEPSS %11cisco · business 250-16p-2g firmware17 May 2023
- CVE-2023-2870944Planlayın
Apache Tomcat: Fix for CVE-2023-24998 is incomplete
YüksekCVSS 7,5İstismar yokEPSS %48apache · tomcat22 May 2023
- CVE-2023-3174240Planlayın
There is a command injection vulnerability in the Linksys WRT54GL router with firmware version 4.30.18.006.
YüksekCVSS 7,2SilahlaştırılmışEPSS %9linksys · wrt54gl firmware22 May 2023
- CVE-2023-3168945Planlayın
In Wcms 0.3.2, an attacker can send a crafted request from a vulnerable web application backend server /wcms/wex/html.php via the finish par
KritikCVSS 9,8İstismar yokEPSS %20wcms · wcms22 May 2023
- CVE-2023-2991954Planlayın
SolarView Compact <= 6.0 is vulnerable to Insecure Permissions.
KritikCVSS 9,1Kavram kanıtıEPSS %60contec · solarview compact firmware22 May 2023
- CVE-2022-035731İzleyin
Improper Quoting Path Issue in Bitdefender Total Security
YüksekCVSS 7,8İstismar yokEPSS %0bitdefender · antivirus plus24 May 2023
- CVE-2023-3300977Bu hafta
A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX serie
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %28zyxel · atp100 firmware24 May 2023
- CVE-2023-3301078Bu hafta
A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX seri
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %29zyxel · atp100 firmware24 May 2023
- CVE-2023-3324698Hemen
Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %96apache · rocketmq24 May 2023
- CVE-2023-286895Hemen
Remote Code injection in Barracuda Email Security Gateway
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %86barracuda · email security gateway 300 firmware24 May 2023
- CVE-2023-273259Planlayın
MStore API <= 3.9.2 - Authentication Bypass
KritikCVSS 9,8Kavram kanıtıEPSS %67inspireui · mstore api24 May 2023
- CVE-2023-3014553Planlayın
Camaleon CMS v2.7.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the formats parameter.
KritikCVSS 9,8Kavram kanıtıEPSS %46tuzitio · camaleon cms26 May 2023
- CVE-2023-3344032İzleyin
Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via /eval/ajax.php?action=save_user.
YüksekCVSS 7,2Kavram kanıtıEPSS %14faculty evaluation system project · faculty evaluation system26 May 2023
- CVE-2023-282560Bu hafta
An issue has been discovered in GitLab CE/EE affecting only version 16.0.0.
YüksekCVSS 7,5SilahlaştırılmışEPSS %71gitlab · gitlab26 May 2023
- CVE-2023-3231590Hemen
Openfire administration console authentication bypass
YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %99igniterealtime · openfire26 May 2023
- CVE-2023-292446Planlayın
Supcon SimField reportupload.aspx unrestricted upload
KritikCVSS 9,8İstismar yokEPSS %24supcontech · simfield firmware27 May 2023
- CVE-2023-292850Planlayın
DedeCMS article_allowurl_edit.php code injection
YüksekCVSS 8,8Kavram kanıtıEPSS %51dedecms · dedecms27 May 2023
- CVE-2023-294746Planlayın
Cross-site Scripting (XSS) - Stored in openemr/openemr
OrtaCVSS 4,8İstismar yokEPSS %90open-emr · openemr27 May 2023
- CVE-2023-294853Planlayın
Cross-site Scripting (XSS) - Generic in openemr/openemr
OrtaCVSS 6,1Kavram kanıtıEPSS %96open-emr · openemr28 May 2023
- CVE-2022-2462747Planlayın
An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752.
KritikCVSS 9,8Kavram kanıtıEPSS %26audiocodes · device manager express29 May 2023
- CVE-2022-2462950Planlayın
An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752.
KritikCVSS 9,8Kavram kanıtıEPSS %37audiocodes · device manager express29 May 2023
- CVE-2022-2463035İzleyin
An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752.
YüksekCVSS 7,2Kavram kanıtıEPSS %23audiocodes · device manager express29 May 2023
- CVE-2022-2463133İzleyin
An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752.
OrtaCVSS 5,4İstismar yokEPSS %41audiocodes · device manager express29 May 2023
- CVE-2022-2463229İzleyin
An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752.
OrtaCVSS 5,3Kavram kanıtıEPSS %27audiocodes · device manager express29 May 2023
- CVE-2023-3025360Bu hafta
Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: <?PHP instead of <?php in inject
YüksekCVSS 8,8SilahlaştırılmışEPSS %82dolibarr · dolibarr erp\/crm29 May 2023
- CVE-2023-032934İzleyin
Elementor Website Builder < 3.12.2 - Admin+ SQLi
YüksekCVSS 7,2İstismar yokEPSS %19elementor · website builder30 May 2023
- CVE-2023-228840Planlayın
Otter - Gutenberg Blocks < 2.2.6 - Author+ PHAR Deserialization
YüksekCVSS 8,8İstismar yokEPSS %17themeisle · otter30 May 2023
- CVE-2023-265049Planlayın
Possible DoS translating ASN.1 object identifiers
OrtaCVSS 6,5İstismar yokEPSS %75openssl · openssl30 May 2023
- CVE-2023-3118534İzleyin
ROZCOM server framework
YüksekCVSS 7,5İstismar yokEPSS %12rozcom · rozcom client30 May 2023
- CVE-2023-293542Planlayın
Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted
YüksekCVSS 8,8İstismar yokEPSS %23google · chrome30 May 2023