2023-03-29

2023-03-30

2023-03-31

All (57) Critical (13) High (21) Medium (22) Low (1)

CVE-2023-25040 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Shortcodes Ultimate

NVD

CVSS 3.1

5.4

EPSS

0.4%

CVE-2023-24399 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Ocean Extra

NVD

CVSS 3.1

5.4

EPSS

0.3%

CVE-2023-23681 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Image Hover Effects For Wpbakery Page Builder

NVD

CVSS 3.1

5.4

EPSS

0.4%

CVE-2023-23670 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Fancy Comments

NVD

CVSS 3.1

5.4

EPSS

0.4%

CVE-2023-23675 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Wp Smart Preloader

NVD

CVSS 3.1

4.8

EPSS

0.4%

CVE-2023-25000 MEDIUM PATCH This Month

HashiCorp Vault's implementation of Shamir's secret sharing used precomputed table lookups, and was vulnerable to cache-timing attacks. Rated medium severity (CVSS 4.7).

Information Disclosure Hashicorp Vault

NVD

CVSS 3.1

4.7

EPSS

0.2%

CVE-2023-28646 LOW PATCH Monitor

Nextcloud android is an android app for interfacing with the nextcloud home server ecosystem. Rated low severity (CVSS 2.4), this vulnerability is no authentication required, low attack complexity.

Google Authentication Bypass Nextcloud

NVD GitHub

CVSS 3.1

2.4

EPSS

0.2%

Prev Page 2 of 2