CVEs published in May 2023
16 tracked CVEs from 4 vendors had their first vendor advisory published in May 2023: 8 high. Newest first.
- Added
CVE-2023-26049Medium
NetApp · 1 advisory - Added
CVE-2023-26048Medium
NetApp · 1 advisory - Added
CVE-2023-22504Medium
Affected versions of Atlassian Confluence Server
Atlassian · 1 advisory - Added
CVE-2022-3294High
Kubernetes Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2023-22640High
out-of-bounds write vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.10, FortiOS 6.4.0 through 6.4.11, FortiOS 6.2.0 through 6.2.13, FortiOS 6.0.0 through 6.0.16, FortiProxy 7.2.0 through 7.2.1, FortiProxy 7.0.0 through 7.0.7, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions allows an authenticated attacker to execute unauthorized code or commands via specifically crafted requests
Fortinet · 1 advisory - Added
CVE-2023-29240Medium
authenticated attacker granted a Viewer or Auditor role on a BIG-IQ
F5 · 1 advisory - Added
CVE-2023-29163High
When UDP profile with idle timeout set to immediate or the value 0 is configured on a virtual server, undisclosed traffic
F5 · 1 advisory - Added
CVE-2023-28742High
When DNS is provisioned, an authenticated remote command execution vulnerability exists in DNS iQuery mesh.
F5 · 1 advisory - Added
CVE-2023-28724High
NGINX Management Suite default file permissions are set such that an authenticated attacker
F5 · 1 advisory - Added
CVE-2023-28656High
NGINX Management Suite may
F5 · 1 advisory - Added
CVE-2023-28406Medium
directory traversal vulnerability exists in an undisclosed page of the BIG-IP Configuration utility which may
F5 · 1 advisory - Added
CVE-2023-27378High
Multiple reflected cross-site scripting (XSS) vulnerabilities exist in undisclosed pages of the BIG-IP Configuration utility which
F5 · 1 advisory - Added
CVE-2023-24594Medium
When an SSL profile is configured on a Virtual Server, undisclosed traffic
F5 · 1 advisory - Added
CVE-2023-24461High
improper certificate validation vulnerability exists in the BIG-IP Edge Client for Windows and macOS and may
F5 · 1 advisory - Added
CVE-2023-22372Medium
In the pre connection stage, an improper enforcement of message integrity vulnerability exists in BIG-IP Edge Client for Windows…
F5 · 1 advisory - Added
CVE-2023-22503Medium
Affected versions of Atlassian Confluence Server and Data Center
Atlassian · 1 advisory