CVE-2023 records published in March 2023
This page lists the 1,856 CVE-2023 records published in March 2023, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 12 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2023 list filters these records by severity or signal.
- Critical
- 31817.1% of these records
- Listed in CISA KEV
- 120.6% of these records
- Reported exploited
- 20.1% of these records
- Detection signal
- 542.9% of these records
- Exploit code
- 723.9% of these records
- Actionable vendor fix
- 1,34372.4% of these records
Figures as of 2026-10-24 13:46 UTC. Records published in March 2023 have had from about 43 months to about 44 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2023-29141 | mediawiki X-Forwarded-For header allows brute-forcing autoblocked IP addresses | 9.8v3.1 | 1.2% | 2023-03-31 | Fix |
| CVE-2023-29140 | mediawiki improper access control | 5.3v3.1 | 0.4% | 2023-03-31 | Fix |
| CVE-2023-29139 | mediawiki denial of service | 6.5v3.1 | 0.6% | 2023-03-31 | Fix |
| CVE-2023-29137 | mediawiki information disclosure | 4.3v3.1 | 0.4% | 2023-03-31 | Fix |
| CVE-2023-28879 | Artifex Ghostscript out-of-bounds write | 9.8v3.1 | 6.3% | 2023-03-31 | Fix |
| CVE-2023-28877 | Vtex Apps-graphql unauthorized access | 7.5v3.1 | 0.5% | 2023-03-31 | |
| CVE-2023-28862 | lemonldap-ng Lemonldap improper authentication | 9.8v3.1 | 1.0% | 2023-03-31 | Fix |
| CVE-2023-28845 | Chat room membership disclosed via autocompletion in Nextcloud Talk | 3.5CNA v3.1 | 0.4% | 2023-03-31 | Fix |
| CVE-2023-28844 | User without download rights can download older version of that file in Nextcloud Server | 5.7CNA v3.1 | 0.6% | 2023-03-31 | Fix |
| CVE-2023-28843 | Improper neutralization of SQL parameter in PayPal module for PrestaShop | 9.8CNA v3.1 | 1.2% | 2023-03-31 | Fix |
| CVE-2023-28756 | Ruby Time component ReDoS issue | 5.3v3.1 | 2.5% | 2023-03-31 | Fix |
| CVE-2023-28755 | Ruby URI component ReDoS issue | 5.3v3.1 | 2.6% | 2023-03-31 | Fix |
| CVE-2023-28727 | Panasonic AiSEG2 improper authentication | 8.8NVD v3.1 | 0.4% | 2023-03-31 | Fix |
| CVE-2023-28726 | Panasonic AiSEG2 OS command injection | 8.8v3.1 | 0.8% | 2023-03-31 | Fix |
| CVE-2023-28645 | Secure view can be bypassed by using internal API endpoint in Nextcloud Richdocuments | 5.7CNA v3.1 | 0.7% | 2023-03-31 | Fix |
| CVE-2023-28464 | Linux kernel double free | 7.8v3.1 | 0.3% | 2023-03-31 | Fix |
| CVE-2023-27163 | Request-baskets vulnerable to server-side request forgery | 6.5v3.1 | 7.0% | 2023-03-31 | NucleiExploit code |
| CVE-2023-27162 | openapi-generator OpenAPI Generator vulnerable to server-side request forgery | 9.1v3.1 | 0.9% | 2023-03-31 | Fix |
| CVE-2023-27160 | forem server-side request forgery | 7.2v3.1 | 1.2% | 2023-03-31 | |
| CVE-2023-27159 | Appwrite server-side request forgery | 7.5v3.1 | 36.2% | 2023-03-31 | Nuclei |
| CVE-2023-26925 | D-Link DIR-882 Syslog functionality information disclosure | 7.5v3.1 | 0.9% | 2023-03-31 | |
| CVE-2023-26858 | Myprestamodules Frequently Asked Questions Page PrestaSHp faqs v.3.1.6 SQL injection | 9.8v3.1 | 1.2% | 2023-03-31 | |
| CVE-2023-26830 | Gladinet CentreStack administrative portal branding component arbitrary file upload | 7.2v3.1 | 1.1% | 2023-03-31 | |
| CVE-2023-26829 | Gladinet CentreStack Password Reset component authentication bypass | 9.8v3.1 | 1.2% | 2023-03-31 | |
| CVE-2023-26485 | Quadratic complexity may lead to a denial of service in cmark-gfm | 5.3CNA v3.1 | 1.0% | 2023-03-31 | Fix |
| CVE-2023-24824 | Quadratic complexity may lead to a denial of service in cmark-gfm | 5.3CNA v3.1 | 1.0% | 2023-03-31 | Fix |
| CVE-2023-23594 | Sato-global CL4NX Plus An authentication bypass | 9.8v3.1 | 1.5% | 2023-03-31 | Fix |
| CVE-2023-1785 | SourceCodester Earnings and Expense Tracker App manage_user.php SQL injection | 9.8v3.1 | 0.7% | 2023-03-31 | |
| CVE-2023-1784 | JeecgBoot jeecg-boot API Documentation improper authentication | 9.8v3.1 | 1.0% | 2023-03-31 | |
| CVE-2023-1777 | Mattermost information disclosure in linked message previews | 6.5CNA v3.1 | 0.5% | 2023-03-31 | Fix |
| CVE-2023-1776 | Mattermost stored XSS via SVG attachment on Boards | 7.3CNA v3.1 | 0.4% | 2023-03-31 | Fix |
| CVE-2023-1775 | Mattermost vulnerable to information disclosure | 4.3CNA v3.1 | 0.5% | 2023-03-31 | Fix |
| CVE-2023-1774 | Mattermost unauthorized email invite to a private channel | 4.2CNA v3.1 | 0.3% | 2023-03-31 | Fix |
| CVE-2023-1773 | RockOA Configuration file webmainConfig.php code injection | 9.8v3.1 | 1.6% | 2023-03-31 | Exploit code |
| CVE-2023-1772 | DataGear Diagram Type cross-site scripting | 4.8v3.1 | 0.6% | 2023-03-31 | |
| CVE-2023-1771 | SourceCodester Grade Point Average GPA Calculator Master.php get_scale cross-site scripting | 6.1v3.1 | 0.5% | 2023-03-31 | |
| CVE-2023-1770 | SourceCodester Grade Point Average GPA Calculator Master.php get_scale SQL injection | 9.8v3.1 | 0.7% | 2023-03-31 | |
| CVE-2023-1769 | SourceCodester Grade Point Average GPA Calculator index.php information disclosure | 7.5v3.1 | 0.6% | 2023-03-31 | |
| CVE-2023-1762 | Improper privilege management in thorsten/phpMyFAQ | 8.8v3.1 | 0.9% | 2023-03-31 | Fix |
| CVE-2023-1761 | Cross-site scripting in thorsten/phpMyFAQ | 5.4v3.1 | 0.5% | 2023-03-31 | Fix |
| CVE-2023-1760 | Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ | 4.8NVD v3.1 | 0.5% | 2023-03-31 | Fix |
| CVE-2023-1759 | Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ | 4.8v3.1 | 0.5% | 2023-03-31 | Fix |
| CVE-2023-1755 | Cross-site scripting (XSS) Generic in thorsten/phpMyFAQ | 5.4NVD v3.1 | 0.6% | 2023-03-31 | Fix |
| CVE-2023-1754 | Improper neutralization of input during web page generation in thorsten/phpMyFAQ | 4.7v3.1 | 0.6% | 2023-03-31 | Fix |
| CVE-2023-1753 | Weak password requirements in thorsten/phpMyFAQ | 9.8v3.1 | 0.7% | 2023-03-31 | Fix |
| CVE-2023-1747 | IBOS mark&op=delFromSend SQL injection | 8.8v3.1 | 0.7% | 2023-03-31 | |
| CVE-2023-1258 | Flow-X disclosure of sensitive information to unauthenticated users | 5.3CNA v3.1 | 3.9% | 2023-03-31 | Exploit codeFix |
| CVE-2023-1060 | YKM CRM reflected cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-03-31 | Fix |
| CVE-2023-0432 | Delta Electronics DX-2100-L1-CN web configuration service command injection | 9.0v3.1 | 1.1% | 2023-03-31 | |
| CVE-2023-0344 | Akuvox E11 SSH server vulnerability | 7.5NVD v3.1 | 0.6% | 2023-03-31 | Fix |
| CVE-2023-0343 | Akuvox E11 insufficient randomness | 7.5v3.1 | 0.6% | 2023-03-31 | Fix |
| CVE-2023-29059 | 3CX embedded malicious code | 7.8v3.1 | 4.4% | 2023-03-30 | Fix |
| CVE-2023-28935 | Apache UIMA DUCC: DUCC (EOL) allows RCE | 8.8v3.1 | 2.9% | 2023-03-30 | Fix |
| CVE-2023-28846 | Denial of service in unpoly-rails | 5.9CNA v3.1 | 1.0% | 2023-03-30 | Fix |
| CVE-2023-28835 | Insecure randomness for default password in Nextcloud | 3.5CNA v3.1 | 0.5% | 2023-03-30 | Fix |
| CVE-2023-28833 | Unrestricted filenames for logo or favicon as admin in the theming settings in Nextcloud Server | 2.4CNA v3.1 | 0.8% | 2023-03-30 | Fix |
| CVE-2023-28733 | Stored XSS affecting the AcyMailing plugin for Joomla | 6.1NVD v3.1 | 0.4% | 2023-03-30 | Fix |
| CVE-2023-28732 | Missing access control affecting the AcyMailing plugin for Joomla | 7.5v3.1 | 0.6% | 2023-03-30 | Fix |
| CVE-2023-28731 | Unauthenticated RCE affecting the AcyMailing plugin for Joomla | 9.8v3.1 | 1.8% | 2023-03-30 | Fix |
| CVE-2023-28647 | App pin of the iOS app can be bypassed in Nextcloud iOS | 4.4CNA v3.1 | 0.3% | 2023-03-30 | Fix |
| CVE-2023-28646 | App lockout in Nextcloud Android app can be bypassed via thirdparty apps | 4.4CNA v3.1 | 0.2% | 2023-03-30 | Fix |
| CVE-2023-28644 | Reference fetch can saturate the server bandwidth for 10 seconds in Nextcloud Server | 5.7CNA v3.1 | 0.6% | 2023-03-30 | Fix |
| CVE-2023-28643 | Potential share collision for recipients when caching is enabled in Nextcloud Server | 5.5CNA v3.1 | 0.8% | 2023-03-30 | Fix |
| CVE-2023-28462 | Payara Server deserialization of untrusted data | 9.8v3.1 | 0.9% | 2023-03-30 | Fix |
| CVE-2023-27538 | curl libcurl An authentication bypass | 5.5NVD v3.1 | 1.5% | 2023-03-30 | Fix |
| CVE-2023-27537 | curl libcurl A double free | 5.9NVD v3.1 | 1.9% | 2023-03-30 | Fix |
| CVE-2023-27536 | https://github.com/curl/curl authentication bypass | 5.9NVD v3.1 | 1.8% | 2023-03-30 | Fix |
| CVE-2023-27535 | curl libcurl An authentication bypass | 5.9NVD v3.1 | 1.8% | 2023-03-30 | Fix |
| CVE-2023-27534 | https://github.com/curl/curl A path traversal | 8.8NVD v3.1 | 2.4% | 2023-03-30 | Fix |
| CVE-2023-27533 | https://github.com/curl/curl special element injection | 8.8NVD v3.1 | 2.2% | 2023-03-30 | Fix |
| CVE-2023-26692 | Zcbs Zbbs cross-site scripting | 6.1v3.1 | 2.7% | 2023-03-30 | Exploit code |
| CVE-2023-26482 | Scope of workflow operations is not validated in Nextcloud Server | 9.1CNA v3.1 | 4.2% | 2023-03-30 | MetasploitExploit codeFix |
| CVE-2023-26118 | angular regular expression denial of service | 5.3v3.1 | 1.7% | 2023-03-30 | Fix |
| CVE-2023-26117 | angular vulnerable to regular expression denial of service via the $resource service | 5.3v3.1 | 1.7% | 2023-03-30 | Fix |
| CVE-2023-26116 | angular vulnerable to regular expression denial of service via the angular.copy utility | 5.3v3.1 | 1.7% | 2023-03-30 | Fix |
| CVE-2023-25076 | SNIProxy handling of wildcard backend hosts buffer overflow | 9.8v3.1 | 65.5% | 2023-03-30 | Fix |
| CVE-2023-25040 | Shortcodes Ultimate WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-03-30 | Fix |
| CVE-2023-25000 | Vault vulnerable to Cache-Timing Attacks during Seal and Unseal Operations | 5.0CNA v3.1 | 0.2% | 2023-03-30 | Fix |
| CVE-2023-24473 | OpenImageIO TGAInput::read_tga2_header functionality information disclosure | 7.5v3.1 | 0.9% | 2023-03-30 | Fix |
| CVE-2023-24472 | OpenImageIO FitsOutput::close functionality denial of service | 7.5v3.1 | 1.3% | 2023-03-30 | Fix |
| CVE-2023-24399 | Ocean Extra WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-03-30 | Fix |
| CVE-2023-23681 | Image Hover Effects For WPBakery Page Builder WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-03-30 | Fix |
| CVE-2023-23677 | GTmetrix for WordPress plugin cross-site scripting (XSS) | 6.1v3.1 | 0.4% | 2023-03-30 | Fix |
| CVE-2023-23675 | WP Smart Preloader WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-03-30 | Fix |
| CVE-2023-23670 | Fancy Comments WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-03-30 | Fix |
| CVE-2023-22845 | OpenImageIO TGAInput::decode_pixel functionality out-of-bounds read | 7.5v3.1 | 0.9% | 2023-03-30 | Fix |
| CVE-2023-1746 | Dreamer CMS file upload cross-site scripting | 5.4v3.1 | 0.6% | 2023-03-30 | |
| CVE-2023-1745 | KMPlayer SHFOLDER.dll uncontrolled search path | 7.8v3.1 | 0.4% | 2023-03-30 | |
| CVE-2023-1744 | IBOS htaccess unrestricted upload | 8.8v3.1 | 0.9% | 2023-03-30 | |
| CVE-2023-1743 | SourceCodester Grade Point Average GPA Calculator index.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-03-30 | |
| CVE-2023-1742 | IBOS Report Search getlist SQL injection | 8.8v3.1 | 0.7% | 2023-03-30 | |
| CVE-2023-1741 | JeecgBoot jeecg-boot Sleep Command SysDictMapper.java SQL injection | 9.8v3.1 | 0.8% | 2023-03-30 | |
| CVE-2023-1740 | SourceCodester Air Cargo Management System GET parameter manage_user.php SQL injection | 9.8v3.1 | 0.7% | 2023-03-30 | |
| CVE-2023-1739 | SourceCodester Simple and Beautiful Shopping Cart System upload.php unrestricted upload | 9.8v3.1 | 0.7% | 2023-03-30 | |
| CVE-2023-1738 | SourceCodester Young Entrepreneur E-Negosyo System SQL injection | 9.8v3.1 | 0.5% | 2023-03-30 | |
| CVE-2023-1737 | SourceCodester Young Entrepreneur E-Negosyo System login.php SQL injection | 9.8v3.1 | 0.6% | 2023-03-30 | |
| CVE-2023-1736 | SourceCodester Young Entrepreneur E-Negosyo System SQL injection | 8.8v3.1 | 0.4% | 2023-03-30 | |
| CVE-2023-1735 | SourceCodester Young Entrepreneur E-Negosyo System passwordrecover.php SQL injection | 9.8v3.1 | 0.5% | 2023-03-30 | |
| CVE-2023-1734 | SourceCodester Young Entrepreneur E-Negosyo System unrestricted upload | 9.8v3.1 | 0.6% | 2023-03-30 | |
| CVE-2023-1725 | SSRF in Infoline Project Management System | 9.8v3.1 | 0.6% | 2023-03-30 | Fix |
| CVE-2023-1712 | deepset-ai/haystack hard-coded security constants | 9.8v3.1 | 0.9% | 2023-03-30 | Fix |
| CVE-2023-1699 | Rapid7 Nexpose forced browsing | 4.3CNA v3.1 | 0.4% | 2023-03-30 | |
| CVE-2023-1670 | Linux kernel flaw use-after-free | 7.8NVD v3.1 | 0.3% | 2023-03-30 | Fix |
| CVE-2023-1393 | xorg-server use-after-free | 7.8NVD v3.1 | 0.4% | 2023-03-30 | Fix |
| CVE-2023-1014 | Information disclosure in Vira-Investing | 7.5v3.1 | 0.5% | 2023-03-30 | Fix |
| CVE-2023-1013 | XSS in Vira-Investing | 6.1CNA v3.1 | 0.4% | 2023-03-30 | Fix |
| CVE-2023-0665 | Vault PKI Issuer Endpoint Did not Correctly Authorize Access to Issuer Metadata | 6.5CNA v3.1 | 0.3% | 2023-03-30 | Fix |
| CVE-2023-0620 | Vault vulnerable to SQL injection when Configuring the Microsoft SQL Database Storage Backend | 6.5CNA v3.1 | 0.4% | 2023-03-30 | Fix |
| CVE-2023-28892 | Malwarebytes Adwcleaner link following | 7.8v3.1 | 0.5% | 2023-03-29 | Fix |
| CVE-2023-28642 | AppArmor bypass with symlinked /proc in runc | 6.1CNA v3.1 | 0.3% | 2023-03-29 | Fix |
| CVE-2023-28509 | Rocket Software UniData weak encryption in UniRPC protocol | 7.5NVD v3.1 | 0.3% | 2023-03-29 | Fix |
| CVE-2023-28508 | Rocket Software UniData heap corruption in UniRPC service | 8.8NVD v3.1 | 0.9% | 2023-03-29 | Fix |
| CVE-2023-28507 | Rocket Software UniData memory exhaustion in LZ4 decompression in UniRPC daemon | 9.8NVD v3.1 | 0.9% | 2023-03-29 | Fix |
| CVE-2023-28506 | Rocket Software UniData stack buffer overflow in UniRPC service | 8.8NVD v3.1 | 0.9% | 2023-03-29 | Fix |
| CVE-2023-28505 | Rocket Software UniData buffer overflow in UniRPC library function | 8.8NVD v3.1 | 0.8% | 2023-03-29 | Fix |
| CVE-2023-28504 | Rocket Software UniData stack buffer overflow in UniRPC library function | 9.8NVD v3.1 | 1.4% | 2023-03-29 | Fix |
| CVE-2023-28503 | Rocket Software UniData authentication bypass in UniRPC's udadmin service | 9.8NVD v3.1 | 62.1% | 2023-03-29 | MetasploitExploit codeFix |
| CVE-2023-28502 | Rocket Software UniData stack buffer overflow in UniRPC's udadmin_server service | 9.8NVD v3.1 | 61.1% | 2023-03-29 | MetasploitExploit codeFix |
| CVE-2023-28501 | Rocket Software UniData heap buffer overflow in unirpcd | 9.8NVD v3.1 | 1.4% | 2023-03-29 | Fix |
| CVE-2023-28158 | Apache Archiva privilege escalation | 6.5CNA v3.1 | 1.2% | 2023-03-29 | Fix |
| CVE-2023-27489 | Stored cross-site scripting via SVG file upload in Kiwi TCMS | 7.6CNA v3.1 | 0.5% | 2023-03-29 | Fix |
| CVE-2023-27167 | supremainc BioStar 2 SQL injection | 6.5v3.1 | 7.5% | 2023-03-29 | Exploit codeFix |
| CVE-2023-26984 | peppermint insecure direct object reference | 8.1v3.1 | 0.9% | 2023-03-29 | Exploit code |
| CVE-2023-26982 | trudesk cross-site scripting | 5.4v3.1 | 1.0% | 2023-03-29 | Exploit codeFix |
| CVE-2023-26968 | Atrocore unrestricted file upload | 9.8v3.1 | 1.0% | 2023-03-29 | |
| CVE-2023-26292 | Forcepoint Cloud Security Gateway (CSG) cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-03-29 | Fix |
| CVE-2023-26291 | Forcepoint Cloud Security Gateway (CSG) cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-03-29 | Fix |
| CVE-2023-26290 | Forcepoint Cloud Security Gateway (CSG) cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-03-29 | Fix |
| CVE-2023-25809 | Rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc | 5.0CNA v3.1 | 0.3% | 2023-03-29 | Fix |
| CVE-2023-23861 | GMAce WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-03-29 | |
| CVE-2023-23355 | QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances), QVR | 6.6CNA v3.1 | 1.2% | 2023-03-29 | Fix |
| CVE-2023-22705 | Welcart e-Commerce WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-03-29 | Fix |
| CVE-2023-1704 | Cross-site scripting (XSS) Stored in pimcore/pimcore | 5.4v3.1 | 0.4% | 2023-03-29 | Fix |
| CVE-2023-1703 | Cross-site scripting (XSS) Generic in pimcore/pimcore | 5.4v3.1 | 0.5% | 2023-03-29 | Fix |
| CVE-2023-1702 | Cross-site scripting (XSS) Generic in pimcore/pimcore | 5.4v3.1 | 0.4% | 2023-03-29 | Fix |
| CVE-2023-1701 | Cross-site scripting (XSS) Reflected in pimcore/pimcore | 5.4v3.1 | 0.4% | 2023-03-29 | Fix |
| CVE-2023-1690 | SourceCodester Earnings and Expense Tracker App cross-site scripting | 6.1v3.1 | 0.4% | 2023-03-29 | |
| CVE-2023-1689 | SourceCodester Earnings and Expense Tracker App cross-site scripting | 6.1v3.1 | 0.4% | 2023-03-29 | |
| CVE-2023-1688 | SourceCodester Earnings and Expense Tracker App cross-site scripting | 6.1v3.1 | 0.4% | 2023-03-29 | |
| CVE-2023-1687 | SourceCodester Simple Task Allocation System cross-site scripting | 6.1v3.1 | 0.4% | 2023-03-29 | |
| CVE-2023-1686 | SourceCodester Young Entrepreneur E-Negosyo System GET parameter index.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-03-29 | |
| CVE-2023-1685 | HadSky Installation interface index.php command injection | 7.2v3.1 | 4.1% | 2023-03-29 | |
| CVE-2023-1684 | HadSky unrestricted upload | 9.8v3.1 | 0.9% | 2023-03-29 | |
| CVE-2023-1683 | Xunrui CMS system_log.html information disclosure | 7.5v3.1 | 0.5% | 2023-03-29 | |
| CVE-2023-1682 | Xunrui CMS Install.txt direct request | 7.5v3.1 | 0.7% | 2023-03-29 | |
| CVE-2023-1680 | Xunrui CMS main.html information disclosure | 7.5v3.1 | 0.8% | 2023-03-29 | |
| CVE-2023-1663 | Synopsys Coverity Authenticated Resources Accessible via forced browsing | 5.3v3.1 | 0.4% | 2023-03-29 | Fix |
| CVE-2023-1656 | ForgeRock OpenIDM LDAP connector vulnerability | 7.5v3.1 | 0.3% | 2023-03-29 | Fix |
| CVE-2023-1652 | Linux kernel use-after-free | 7.1NVD v3.1 | 0.2% | 2023-03-29 | Fix |
| CVE-2023-1575 | Mega Main Menu WordPress plugin authenticated (Administrator+) cross-site scripting | 4.8v3.1 | 0.4% | 2023-03-29 | |
| CVE-2023-1550 | F5 NGINX Agent sensitive information in log files | 5.5CNA v3.1 | 0.2% | 2023-03-29 | Fix |
| CVE-2023-1509 | GMAce WordPress plugin cross-site request forgery to arbitrary file modification | 8.8v3.1 | 0.6% | 2023-03-29 | |
| CVE-2023-0836 | haproxy information disclosure | 7.5NVD v3.1 | 1.2% | 2023-03-29 | Fix |
| CVE-2023-0664 | QEMU execution with unnecessary privileges | 7.8NVD v3.1 | 0.3% | 2023-03-29 | Fix |
| CVE-2023-0213 | Local elevation of privilege in M-Files | 8.8CNA v3.1 | 0.2% | 2023-03-29 | Fix |
| CVE-2023-28718 | ProPump and Controls Osprey Pump Controller cross-site request forgery | 8.0v3.1 | 0.3% | 2023-03-28 | Fix |
| CVE-2023-28712 | ProPump and Controls Osprey Pump Controller command injection | 9.8v3.1 | 1.2% | 2023-03-28 | Fix |
| CVE-2023-28654 | ProPump and Controls Osprey Pump Controller hidden administrative account hard-coded credentials | 9.8v3.1 | 0.8% | 2023-03-28 | Fix |
| CVE-2023-28648 | ProPump and Controls Osprey Pump Controller cross-site scripting | 6.1NVD v3.1 | 0.8% | 2023-03-28 | Fix |
| CVE-2023-28637 | DataEase AWS redshift data source exists for remote code execution | 8.0CNA v3.1 | 1.3% | 2023-03-28 | Fix |
| CVE-2023-28631 | Attacker controlled data in AST nodes is not validated in comrak | 5.3CNA v3.1 | 1.3% | 2023-03-28 | Fix |
| CVE-2023-28626 | Quadratic runtime when parsing Markdown in comrak | 5.3CNA v3.1 | 1.1% | 2023-03-28 | Fix |
| CVE-2023-28447 | Cross-site scripting vulnerability in Javascript escaping in Smarty/Smarty | 7.1CNA v3.1 | 1.0% | 2023-03-28 | Fix |
| CVE-2023-28427 | Prototype pollution in matrix-js-sdk | 8.2CNA v3.1 | 1.2% | 2023-03-28 | Fix |
| CVE-2023-28398 | ProPump and Controls Osprey Pump Controller account creation improper authentication | 9.8v3.1 | 0.9% | 2023-03-28 | Fix |
| CVE-2023-28395 | ProPump and Controls Osprey Pump Controller session token generator vulnerability | 7.5v3.1 | 0.6% | 2023-03-28 | Fix |
| CVE-2023-28375 | ProPump and Controls Osprey Pump Controller information disclosure | 7.5v3.1 | 1.5% | 2023-03-28 | Fix |
| CVE-2023-28326 | Apache OpenMeetings missing authentication and can allow user impersonation | 9.8v3.1 | 1.3% | 2023-03-28 | Fix |
| CVE-2023-28103 | Prototype pollution in matrix-react-sdk | 8.2CNA v3.1 | 0.7% | 2023-03-28 | Fix |
| CVE-2023-27886 | ProPump and Controls Osprey Pump Controller index.php script OS command injection | 9.8v3.1 | 1.6% | 2023-03-28 | Fix |
| CVE-2023-27821 | databasir expression language injection | 9.8v3.1 | 1.5% | 2023-03-28 | |
| CVE-2023-27701 | MuYuCMS missing authorization | 8.1v3.1 | 0.6% | 2023-03-28 | |
| CVE-2023-27700 | MuYuCMS path traversal | 8.1v3.1 | 0.8% | 2023-03-28 | |
| CVE-2023-27394 | ProPump and Controls Osprey Pump Controller DataLogView.php script OS command injection | 9.8v3.1 | 18.2% | 2023-03-28 | Fix |
| CVE-2023-27247 | Cynet Client Agent execution with unnecessary privileges | 4.4v3.1 | 0.3% | 2023-03-28 | |
| CVE-2023-27246 | Mk-auth Virtual Disk arbitrary file upload | 8.8v3.1 | 0.8% | 2023-03-28 | |
| CVE-2023-27232 | TOTOLINK A7100RU command injection | 9.8v3.1 | 1.9% | 2023-03-28 | |
| CVE-2023-27231 | TOTOLINK A7100RU command injection | 9.8v3.1 | 2.0% | 2023-03-28 | |
| CVE-2023-27229 | TOTOLINK A7100RU command injection | 9.8v3.1 | 2.0% | 2023-03-28 | |
| CVE-2023-27008 | ATutor function encrypt_password in login.tmpl.php cross-site scripting | 6.1v3.1 | 1.5% | 2023-03-28 | Nuclei |
| CVE-2023-26923 | MuseScore out-of-bounds write | 7.0v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-26356 | Adobe Dimension USD File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-03-28 | Fix |
| CVE-2023-26355 | Adobe Dimension USD File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-03-28 | Fix |
| CVE-2023-26354 | Adobe Dimension USD File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-03-28 | Fix |
| CVE-2023-26353 | Adobe Dimension USD File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-26352 | Adobe Dimension USD File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-03-28 | Fix |
| CVE-2023-26351 | Adobe Dimension USD File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-03-28 | Fix |
| CVE-2023-26350 | Adobe Dimension USD File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-03-28 | Fix |
| CVE-2023-26349 | Adobe Dimension USDZ File Parsing use-after-free information disclosure | 5.5CNA v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-26348 | Adobe Dimension USD File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-03-28 | Fix |
| CVE-2023-26346 | Adobe Dimension USD File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-03-28 | Fix |
| CVE-2023-26345 | Adobe Dimension USD File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-03-28 | Fix |
| CVE-2023-26344 | Adobe Dimension USD file access of uninitialized pointer information disclosure | 5.5CNA v3.1 | 0.3% | 2023-03-28 | Fix |
| CVE-2023-26343 | Adobe Dimension USD File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-03-28 | Fix |
| CVE-2023-26342 | Adobe Dimension GLB File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-03-28 | Fix |
| CVE-2023-26341 | Adobe Dimension USD File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-03-28 | Fix |
| CVE-2023-26340 | Adobe Dimension OBJ File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-03-28 | Fix |
| CVE-2023-26339 | Adobe Dimension OBJ File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-03-28 | Fix |
| CVE-2023-26338 | Adobe Dimension USD File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-03-28 | Fix |
| CVE-2023-26337 | Adobe Dimension USDA File Parsing stack-based buffer overflow remote code execution | 7.8CNA v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-26336 | Adobe Dimension USD File Parsing use-after-free remote code execution | 7.8CNA v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-26335 | Adobe Dimension USDC File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-26334 | Adobe Dimension USD File Parsing uninitialized pointer information disclosure | 7.8CNA v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-26333 | Adobe Dimension USDC File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-26332 | Adobe Dimension USD File Parsing out-of-bounds read information disclosure | 7.8CNA v3.1 | 0.3% | 2023-03-28 | Fix |
| CVE-2023-26331 | Adobe Dimension USD File Parsing out-of-bounds read information disclosure | 7.8CNA v3.1 | 0.3% | 2023-03-28 | Fix |
| CVE-2023-26330 | Adobe Dimension USD File Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.3% | 2023-03-28 | Fix |
| CVE-2023-26329 | Adobe Dimension OBJ File Parsing out-of-bounds read information disclosure | 7.8CNA v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-26328 | Adobe Dimension USD File Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.3% | 2023-03-28 | Fix |
| CVE-2023-26327 | Adobe Dimension GLTF File Parsing out-of-bounds read information disclosure | 7.8CNA v3.1 | 0.3% | 2023-03-28 | Fix |
| CVE-2023-26071 | Harpaitalia Mcuboict observable discrepancy | 7.5v3.1 | 0.7% | 2023-03-28 | |
| CVE-2023-25907 | Adobe Dimension USD File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-25906 | Adobe Dimension USD File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-25905 | Adobe Dimension OBJ File Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.3% | 2023-03-28 | Fix |
| CVE-2023-25904 | Adobe Dimension out-of-bounds read USDZ file arbitrary code execution | 7.8CNA v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-25903 | Adobe Dimension USDZ files integer overflow or wraparound arbitrary code execution | 7.8CNA v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-25902 | Adobe Dimension USD File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-25901 | Adobe Dimension USD file improper input validation remote code execution | 7.8CNA v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-25900 | Adobe Dimension USD File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-25899 | Adobe Dimension USD File Parsing use-after-free remote code execution | 7.8CNA v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-25898 | Adobe Dimension USD File Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-25897 | Adobe Dimension USD File Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-25896 | Adobe Dimension USD File Parsing use-after-free remote code execution | 7.8CNA v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-25895 | Adobe Dimension USD File Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-25894 | Adobe Dimension USD File Parsing use-after-free remote code execution | 7.8CNA v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-25893 | Adobe Dimension USD File Parsing use-after-free remote code execution | 7.8CNA v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-25892 | Adobe Dimension USD File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-25891 | Adobe Dimension USD File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-25890 | Adobe Dimension USD File Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-25889 | Adobe Dimension USD File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-25888 | Adobe Dimension USD File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-25887 | Adobe Dimension USD File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-25886 | Adobe Dimension USD File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-25885 | Adobe Dimension USD File Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-25884 | Adobe Dimension GLTF File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-25883 | Adobe Dimension FBX File Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-25882 | Adobe Dimension OBJ File Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-25881 | Adobe Dimension OBJ file improper input validation remote code execution | 7.8CNA v3.1 | 0.3% | 2023-03-28 | Fix |
| CVE-2023-25880 | Adobe Dimension GLTF File Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.3% | 2023-03-28 | Fix |
| CVE-2023-25879 | Adobe Dimension OBJ file improper input validation remote code execution | 7.8CNA v3.1 | 0.3% | 2023-03-28 | Fix |
| CVE-2023-25722 | Veracode Scan Jenkins plugin vulnerable to information disclosure | 5.5v3.1 | 0.2% | 2023-03-28 | Fix |
| CVE-2023-25721 | Veracode Scan Jenkins plugin vulnerable to information disclosure | 6.5v3.1 | 0.6% | 2023-03-28 | Fix |
| CVE-2023-25704 | Interactive SVG Image Map Builder WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-25262 | Stimulsoft Designer server-side request forgery | 7.5v3.1 | 0.9% | 2023-03-28 | Exploit code |
| CVE-2023-25260 | Stimulsoft Designer files accessible to external parties | 7.5v3.1 | 0.8% | 2023-03-28 | Exploit code |
| CVE-2023-25197 | Apache Fineract: SQL injection vulnerability in certain procedure calls | 6.3v3.1 | 1.1% | 2023-03-28 | Fix |
| CVE-2023-25196 | Apache Fineract: SQL injection | 4.3v3.1 | 1.3% | 2023-03-28 | Fix |
| CVE-2023-25195 | Apache Fineract: SSRF template type vulnerability in certain authenticated users | 8.1v3.1 | 1.0% | 2023-03-28 | Fix |
| CVE-2023-24308 | PDF-XChange Editor improper exception handling | 7.8v3.1 | 0.2% | 2023-03-28 | |
| CVE-2023-24304 | IrfanView PDF.dll plugin improper input validation | 7.8v3.1 | 0.4% | 2023-03-28 | |
| CVE-2023-23330 | Amano Xoffice files accessible to external parties | 7.5v3.1 | 0.8% | 2023-03-28 | |
| CVE-2023-20903 | Cloud Foundry insufficient session expiration | 4.3v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-1681 | Xunrui CMS test.php information disclosure | 7.5v3.1 | 0.8% | 2023-03-28 | |
| CVE-2023-1679 | DriverGenius IOCTL mydrivers64.sys 0x9C40A108 memory corruption | 7.8v3.1 | 0.3% | 2023-03-28 | |
| CVE-2023-1678 | DriverGenius IOCTL mydrivers64.sys 0x9C40A0E0 memory corruption | 7.8v3.1 | 0.2% | 2023-03-28 | |
| CVE-2023-1677 | DriverGenius IOCTL mydrivers64.sys 0x9c402084 denial of service | 5.5v3.1 | 0.2% | 2023-03-28 | |
| CVE-2023-1676 | DriverGenius IOCTL mydrivers64.sys 0x9C402088 memory corruption | 7.8v3.1 | 0.4% | 2023-03-28 | |
| CVE-2023-1675 | SourceCodester School Registration and Fee System GET parameter edit_stud.php SQL injection | 9.8v3.1 | 0.8% | 2023-03-28 | |
| CVE-2023-1674 | SourceCodester School Registration and Fee System POST parameter login.php SQL injection | 9.8v3.1 | 0.9% | 2023-03-28 | |
| CVE-2023-1518 | CP Plus KVMS Pro insufficiently protected credentials | 7.5v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2023-1516 | RoboDK incorrect permission assignment | 7.8v3.1 | 0.2% | 2023-03-28 | Fix |
| CVE-2023-0775 | silabs.com GSDK bluetooth LE Invalid prepare write request command leads to denial of service | 6.5CNA v3.1 | 0.3% | 2023-03-28 | |
| CVE-2023-0466 | OpenSSL certificate policy check not enabled | 5.3NVD v3.1 | 1.8% | 2023-03-28 | Fix |
| CVE-2023-0465 | OpenSSL invalid certificate policies in leaf certificates are silently ignored | 5.3NVD v3.1 | 1.8% | 2023-03-28 | Fix |
| CVE-2023-28885 | Gm Mylink Infotainment System out-of-bounds write | 6.8v3.1 | 0.4% | 2023-03-27 | |
| CVE-2023-28884 | MISP cross-site scripting | 6.1v3.1 | 0.4% | 2023-03-27 | |
| CVE-2023-28883 | Cerebrate SQL injection | 9.8v3.1 | 0.7% | 2023-03-27 | |
| CVE-2023-28867 | Graphql-java GraphQL Java vulnerable to stack consumption | 7.5v3.1 | 1.1% | 2023-03-27 | Fix |
| CVE-2023-28866 | Linux kernel out-of-bounds read | 5.3v3.1 | 0.8% | 2023-03-27 | Fix |
| CVE-2023-28655 | Sauter EY-AS525F001 cross-site scripting | 5.4v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2023-28652 | Sauter EY-AS525F001 image upload vulnerability | 6.5v3.1 | 0.6% | 2023-03-27 | Fix |
| CVE-2023-28650 | Sauter EY-AS525F001 with moduWeb cross-site scripting | 6.1v3.1 | 0.5% | 2023-03-27 | Fix |
| CVE-2023-28640 | Permissions bypass in Apiman could enable authenticated attacker to unpermitted API Key | 6.4CNA v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2023-28638 | Snappier garbage collector compaction buffer overflow | 7.0CNA v3.1 | 0.6% | 2023-03-27 | Fix |
| CVE-2023-28630 | Thoughtworks GoCD backup failure alerts information disclosure | 4.2CNA v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2023-28629 | Stored XSS possible on VSM and Job Details pages via malicious pipeline label configuration in gocd | 5.4CNA v3.1 | 0.5% | 2023-03-27 | Fix |
| CVE-2023-28628 | `authority-regex` returns the wrong authority in lambdaisland/uri | 5.4CNA v3.1 | 0.5% | 2023-03-27 | Fix |
| CVE-2023-28627 | OS command injection via GIT_PATH in pymedusa | 8.3CNA v3.1 | 0.8% | 2023-03-27 | Fix |
| CVE-2023-28597 | Improper trust boundary implementation for SMB in Zoom Clients | 8.3CNA v3.1 | 0.5% | 2023-03-27 | Fix |
| CVE-2023-28596 | Local privilege escalation in Zoom for macOS Installers | 7.8CNA v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2023-28430 | OneSignal repository github action command injection | 8.1NVD v3.1 | 0.9% | 2023-03-27 | Fix |
| CVE-2023-28102 | Command injection in discordrb | 9.6NVD v3.1 | 2.6% | 2023-03-27 | Fix |
| CVE-2023-27927 | Sauter Controls EY-AS525F001 SMTP credential storage vulnerability | 6.5v3.1 | 0.4% | 2023-03-27 | Fix |
| CVE-2023-27847 | Xipblog PrestaShop SQL injection | 9.8v3.1 | 4.7% | 2023-03-27 | Nuclei |
| CVE-2023-27296 | Apache InLong: JDBC deserialization vulnerability in InLong | 8.8v3.1 | 1.5% | 2023-03-27 | Fix |
| CVE-2023-27245 | File Management System File Management Project cross-site scripting | 6.1v3.1 | 0.4% | 2023-03-27 | |
| CVE-2023-27241 | Water Billing System cross-site scripting | 6.1v3.1 | 0.4% | 2023-03-27 | |
| CVE-2023-27096 | opengoofy hippo4j insecure permissions | 6.5v3.1 | 0.6% | 2023-03-27 | |
| CVE-2023-26959 | PHPGurukul Park Ticketing Management System SQL injection | 9.8v3.1 | 0.8% | 2023-03-27 | |
| CVE-2023-26958 | PHPGurukul Park Ticketing Management System cross-site scripting | 4.8v3.1 | 0.5% | 2023-03-27 | |
| CVE-2023-26924 | Llvm buffer overflow | 5.5v3.1 | 0.3% | 2023-03-27 | |
| CVE-2023-26549 | Huawei EMUI vulnerability of repeated app restart due to improper parameters in the SystemUI module | 7.5v3.1 | 0.4% | 2023-03-27 | Fix |
| CVE-2023-26548 | Huawei HarmonyOS serialization/deserialization mismatch vulnerability in the pgmng module | 7.5v3.1 | 0.5% | 2023-03-27 | Fix |
| CVE-2023-26547 | Huawei HarmonyOS vulnerability of serialization/deserialization mismatch in the InputMethod module | 7.8v3.1 | 0.2% | 2023-03-27 | Fix |
| CVE-2023-26493 | Command injection in Cocos Engine workflow | 8.8NVD v3.1 | 2.9% | 2023-03-27 | Exploit codeFix |
| CVE-2023-25909 | HGiga Inc. OAKlouds arbitrary file upload | 9.8CNA v3.1 | 0.9% | 2023-03-27 | Fix |
| CVE-2023-25908 | Adobe Photoshop SVG file use-after-free arbitrary code execution | 7.8CNA v3.1 | 0.5% | 2023-03-27 | Fix |
| CVE-2023-25878 | Adobe Substance 3D Stager OBJ File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2023-25877 | Adobe Substance 3D Stager OBJ File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2023-25876 | Adobe Substance 3D Stager OBJ File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2023-25875 | Adobe Substance 3D Stager OBJ File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2023-25874 | Adobe Substance 3D Stager SVG File Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.1 | 0.4% | 2023-03-27 | Fix |
| CVE-2023-25873 | Adobe Substance 3D Stager SVG File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2023-25872 | Adobe Substance 3D Stager SVG File Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.1 | 0.4% | 2023-03-27 | Fix |
| CVE-2023-25871 | Adobe Substance 3D Stager SVG File Parsing use-after-free remote code execution | 7.8CNA v3.1 | 0.4% | 2023-03-27 | Fix |
| CVE-2023-25870 | Adobe Substance 3D Stager SVG File Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2023-25869 | Adobe Substance 3D Stager SVG File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2023-25868 | Adobe Substance 3D Stager SVG File Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.1 | 0.4% | 2023-03-27 | Fix |
| CVE-2023-25867 | Adobe Substance 3D Stager PCX File Parsing memory corruption remote code execution | 7.8CNA v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2023-25866 | Adobe Substance 3D Stager OBJ File Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2023-25865 | Adobe Substance 3D Stager OBJ File Parsing memory corruption remote code execution | 7.8CNA v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2023-25864 | Adobe Substance 3D Stager FBX File Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.1 | 0.4% | 2023-03-27 | Fix |
| CVE-2023-25863 | Adobe Substance 3D Stager USDC File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2023-25828 | Authenticate remote code execution in Pluck CMS | 7.2v3.1 | 1.6% | 2023-03-27 | Fix |
| CVE-2023-25818 | Missing brute force protection on password reset token in Nextcloud Server | 5.3CNA v3.1 | 0.6% | 2023-03-27 | Fix |
| CVE-2023-25817 | Delete permissions are not saved when creating public share in Nextcloud Server | 3.5CNA v3.1 | 0.6% | 2023-03-27 | Fix |
| CVE-2023-25661 | Denial of service in TensorFlow | 6.5CNA v3.1 | 0.4% | 2023-03-27 | Fix |
| CVE-2023-25263 | Stimulsoft Designer cleartext storage of sensitive information | 5.5v3.1 | 0.2% | 2023-03-27 | Exploit code |
| CVE-2023-25261 | Stimulsoft Designer code injection | 9.8v3.1 | 1.9% | 2023-03-27 | Exploit code |
| CVE-2023-25018 | Rifartek IOT Wall reflected XSS | 5.4v3.1 | 0.4% | 2023-03-27 | Fix |
| CVE-2023-25017 | Rifartek IOT Wall broken access control | 8.1CNA v3.1 | 0.6% | 2023-03-27 | Fix |
| CVE-2023-24842 | HGiga MailSherlock broken access control | 5.3CNA v3.1 | 0.6% | 2023-03-27 | Fix |
| CVE-2023-24841 | HGiga MailSherlock command injection | 7.2CNA v3.1 | 0.9% | 2023-03-27 | Fix |
| CVE-2023-24840 | HGiga MailSherlock SQL injection | 7.2CNA v3.1 | 0.9% | 2023-03-27 | Fix |
| CVE-2023-24839 | HGiga MailSherlock reflected XSS | 6.1CNA v3.1 | 0.5% | 2023-03-27 | Fix |
| CVE-2023-24838 | HGiga PowerStation information leakage | 9.8v3.1 | 1.1% | 2023-03-27 | Fix |
| CVE-2023-24837 | HGiga PowerStation command injection | 8.8CNA v3.1 | 0.9% | 2023-03-27 | Fix |
| CVE-2023-24835 | Softnext SPAM SQR code injection | 7.2CNA v3.1 | 0.9% | 2023-03-27 | Fix |
| CVE-2023-24834 | WisdomGarden Tronclass ilearn broken access control | 6.5CNA v3.1 | 0.6% | 2023-03-27 | Fix |
| CVE-2023-24366 | rConfig An arbitrary file read | 6.5v3.1 | 0.7% | 2023-03-27 | |
| CVE-2023-24094 | MikroTik RouterOS out-of-bounds write | 7.5v3.1 | 0.8% | 2023-03-27 | |
| CVE-2023-22902 | Openfind MAIL2000 XSS | 5.4CNA v3.1 | 0.4% | 2023-03-27 | Fix |
| CVE-2023-22707 | Greenshift animation and page builder blocks WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-03-27 | Fix |
| CVE-2023-22300 | Sauter EY-AS525F001 with moduWeb cross-site scripting | 6.1v3.1 | 0.5% | 2023-03-27 | Fix |
| CVE-2023-22251 | Adobe Commerce incorrect authorization security feature bypass | 4.3CNA v3.1 | 0.6% | 2023-03-27 | Fix |
| CVE-2023-22250 | Adobe Commerce improper access control security feature bypass | 5.3CNA v3.1 | 1.0% | 2023-03-27 | Fix |
| CVE-2023-22249 | Adobe Commerce stored XSS arbitrary code execution | 4.8CNA v3.1 | 58.5% | 2023-03-27 | Fix |
| CVE-2023-22247 | Adobe Commerce XML injection Arbitrary file system read | 7.5CNA v3.1 | 0.9% | 2023-03-27 | Fix |
| CVE-2023-20860 | Spring Framework is vulnerable to security bypass via mvcRequestMatcher pattern mismatch | 7.5v3.1 | 3.5% | 2023-03-27 | Exploit codeFix |
| CVE-2023-1666 | SourceCodester Automatic Question Paper Generator System GET parameter view_class.php SQL injection | 9.8v3.1 | 0.7% | 2023-03-27 | |
| CVE-2023-1665 | Improper restriction of excessive authentication attempts in linagora/Twake | 9.8v3.1 | 0.6% | 2023-03-27 | Exploit code |
| CVE-2023-1655 | Heap-based buffer overflow in gpac/gpac | 7.8v3.1 | 0.5% | 2023-03-27 | Fix |
| CVE-2023-1654 | Denial of service in gpac/gpac | 7.8v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2023-1647 | Improper access control in calcom/Cal.com | 8.8v3.1 | 0.8% | 2023-03-27 | Fix |
| CVE-2023-1637 | kernel sensitive information not cleared before reuse | 5.5NVD v3.1 | 0.2% | 2023-03-27 | Fix |
| CVE-2023-1400 | Modern Events Calendar lite WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2023-03-27 | Fix |
| CVE-2023-1399 | Keysight N6854A Geolocation Server deserialization of untrusted data | 9.8v3.1 | 0.8% | 2023-03-27 | Fix |
| CVE-2023-1380 | Linux kernel out-of-bounds read | 7.1NVD v3.1 | 16.5% | 2023-03-27 | Fix |
| CVE-2023-1145 | Adobe Delta Electronics InfraSuite Device Master deserialization of untrusted data | 7.8v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2023-1144 | Delta Electronics InfraSuite Device Master Device-Gateway service incorrect authorization | 8.8v3.1 | 0.6% | 2023-03-27 | Fix |
| CVE-2023-1143 | Delta Electronics InfraSuite Device Master Lua scripting remote code execution | 8.8v3.1 | 0.8% | 2023-03-27 | Fix |
| CVE-2023-1142 | Delta Electronics InfraSuite Device Master path traversal | 9.8v3.1 | 1.1% | 2023-03-27 | Fix |
| CVE-2023-1141 | Delta Electronics InfraSuite Device Master command injection | 8.8v3.1 | 1.6% | 2023-03-27 | Fix |
| CVE-2023-1140 | Delta Electronics InfraSuite Device Master remote code execution | 9.8v3.1 | 1.1% | 2023-03-27 | Fix |
| CVE-2023-1139 | Adobe Delta Electronics InfraSuite Device Master deserialization of untrusted data | 8.8v3.1 | 1.3% | 2023-03-27 | Fix |
| CVE-2023-1138 | Delta Electronics InfraSuite Device Master gateway configuration files information disclosure | 7.5v3.1 | 0.6% | 2023-03-27 | Fix |
| CVE-2023-1137 | Delta Electronics InfraSuite Device Master credential storage privilege escalation | 8.8v3.1 | 0.6% | 2023-03-27 | Fix |
| CVE-2023-1136 | Delta Electronics InfraSuite Device Master token authentication authentication bypass | 7.5NVD v3.1 | 0.7% | 2023-03-27 | Fix |
| CVE-2023-1135 | Delta Electronics InfraSuite Device Master incorrect permission assignment | 7.8v3.1 | 0.2% | 2023-03-27 | Fix |
| CVE-2023-1134 | Adobe Delta Electronics InfraSuite Device Master path traversal | 8.8v3.1 | 0.7% | 2023-03-27 | Fix |
| CVE-2023-1133 | Delta Electronics InfraSuite Device Master device-status UDP service insecure deserialization | 9.8v3.1 | 50.1% | 2023-03-27 | MetasploitExploit codeFix |
| CVE-2023-1093 | OAuth Single Sign On - SSO (OAuth Client) WordPress plugin IdP Discard via CSRF | 6.5NVD v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2023-1092 | OAuth Single Sign On SSO (OAuth Client) IdP Deletion via CSRF | 6.5NVD v3.1 | 0.4% | 2023-03-27 | Fix |
| CVE-2023-1089 | Coupon Zen WordPress plugin arbitrary plugin activation via CSRF | 4.3NVD v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2023-1088 | WP Plugin Manager WordPress plugin arbitrary plugin activation via CSRF | 4.3NVD v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2023-1087 | WC Sales Notification WordPress plugin arbitrary plugin activation via CSRF | 4.3NVD v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2023-1086 | Preview Link Generator WordPress plugin arbitrary plugin activation via CSRF | 4.3NVD v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2023-1079 | Linux kernel use-after-free | 6.8NVD v3.1 | 0.5% | 2023-03-27 | Fix |
| CVE-2023-1078 | Linux kernel out-of-bounds write | 7.8NVD v3.1 | 0.2% | 2023-03-27 | Fix |
| CVE-2023-1077 | Linux kernel type confusion | 7.0NVD v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2023-1076 | Linux kernel incomplete filtering | 5.5NVD v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2023-1075 | Linus kernel information disclosure | 3.3NVD v3.1 | 0.2% | 2023-03-27 | Fix |
| CVE-2023-1074 | Linux kernel A memory leak | 5.5NVD v3.1 | 0.2% | 2023-03-27 | Fix |
| CVE-2023-1073 | Linux kernel A memory corruption | 6.6NVD v3.1 | 0.4% | 2023-03-27 | Fix |
| CVE-2023-1069 | Complianz - GDPR/CCPA Cookie Consent WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2023-03-27 | Fix |
| CVE-2023-1025 | Simple File List WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2023-03-27 | Fix |
| CVE-2023-0955 | WP Statistics WordPress plugin authenticated SQLi | 8.8NVD v3.1 | 0.9% | 2023-03-27 | Fix |
| CVE-2023-0823 | Cookie Notice and Compliance for GDPR / CCPA WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-03-27 | Fix |
| CVE-2023-0816 | Formidable Forms WordPress plugin IP spoofing | 6.5NVD v3.1 | 0.5% | 2023-03-27 | Fix |
| CVE-2023-0778 | Podman time-of-check time-of-use (TOCTOU) race condition | 6.8v3.1 | 0.5% | 2023-03-27 | Fix |
| CVE-2023-0660 | Smart Slider 3 WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-03-27 | Fix |
| CVE-2023-0589 | WP Image Carousel WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.4% | 2023-03-27 | |
| CVE-2023-0505 | Ever Compare WordPress plugin arbitrary plugin activation via CSRF | 4.3NVD v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2023-0504 | HT Politic WordPress plugin arbitrary plugin activation via CSRF | 4.3NVD v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2023-0503 | HasThemes Free WooCommerce Theme 99fy Extension cross-site request forgery | 4.3NVD v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2023-0502 | WP News WordPress plugin arbitrary plugin activation via CSRF | 6.5NVD v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2023-0501 | WP Insurance WordPress plugin arbitrary plugin activation via CSRF | 6.5NVD v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2023-0500 | WP Film Studio WordPress plugin arbitrary plugin activation via CSRF | 6.5NVD v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2023-0499 | QuickSwish WordPress plugin arbitrary plugin activation via CSRF | 4.3NVD v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2023-0498 | WP Education WordPress plugin arbitrary plugin activation via CSRF | 4.3NVD v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2023-0497 | HT Portfolio WordPress plugin arbitrary plugin activation via CSRF | 4.3NVD v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2023-0496 | HT Event WordPress plugin arbitrary plugin activation via CSRF | 4.3NVD v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2023-0495 | HT Slider For Elementor WordPress plugin arbitrary plugin activation via CSRF | 4.3NVD v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2023-0494 | xorg-x11-server use-after-free | 7.8NVD v3.1 | 0.9% | 2023-03-27 | Fix |
| CVE-2023-0491 | Schedulicity - Easy Online Scheduling WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2023-03-27 | |
| CVE-2023-0484 | The Contact Form 7 Widget For Elementor Page Builder & Gutenberg Blocks WordPress plugin before 1.1.6 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack | 4.3NVD v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2023-0467 | WP Dark Mode WordPress plugin Subscriber+ local file inclusion | 4.3NVD v3.1 | 0.7% | 2023-03-27 | Fix |
| CVE-2023-0441 | Gallery Blocks with Lightbox WordPress plugin Subscriber+ arbitrary options update | 8.1NVD v3.1 | 0.7% | 2023-03-27 | Fix |
| CVE-2023-0395 | menu shortcode WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-03-27 | |
| CVE-2023-0336 | OoohBoi Steroids for Elementor WordPress plugin Subscriber+ Attachment deletion | 6.5NVD v3.1 | 1.0% | 2023-03-27 | Fix |
| CVE-2023-0335 | WP Shamsi WordPress plugin Subscriber+ Attachment deletion | 6.5NVD v3.1 | 1.0% | 2023-03-27 | |
| CVE-2023-0326 | GitLab DAST API scanner vulnerability report evidence vulnerability | 5.0CNA v3.1 | 0.8% | 2023-03-27 | Fix |
| CVE-2023-0272 | NEX-Forms WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-03-27 | Fix |
| CVE-2023-0241 | pgAdmin 4 vulnerable to directory traversal | 6.5NVD v3.1 | 8.8% | 2023-03-27 | Fix |
| CVE-2023-0210 | Linux kernel heap-based buffer overflow | 7.5NVD v3.1 | 71.7% | 2023-03-27 | Fix |
| CVE-2023-0179 | kernel integer overflow | 7.8NVD v3.1 | 1.9% | 2023-03-27 | Exploit codeFix |
| CVE-2023-28859 | Redis-py race condition due to incomplete fix | 6.5v3.1 | 1.0% | 2023-03-26 | Fix |
| CVE-2023-28858 | Redis-py race condition | 3.7v3.1 | 1.0% | 2023-03-26 | Fix |
| CVE-2023-27796 | Ruijie Networks Rg-ew1800gx Pro command injection | 8.8v3.1 | 2.3% | 2023-03-26 | |
| CVE-2023-26802 | Dcnglobal Dcbi-netlog-lab path traversal | 9.8v3.1 | 48.7% | 2023-03-26 | NucleiEmerging Threats |
| CVE-2023-26801 | LB-LINK BL-AC1900 command injection | 9.8v3.1 | 69.7% | 2023-03-26 | Reported exploitedEmerging Threats |
| CVE-2023-26800 | Ruijie Networks Rg-ew1200 command injection | 9.8v3.1 | 1.0% | 2023-03-26 | |
| CVE-2023-1646 | IObit Malware Fighter IOCTL IMFCameraProtect.sys 0x8018E004 stack-based overflow | 7.8v3.1 | 0.4% | 2023-03-26 | |
| CVE-2023-1645 | IObit Malware Fighter IOCTL IMFCameraProtect.sys 0x8018E008 denial of service | 5.5v3.1 | 0.3% | 2023-03-26 | |
| CVE-2023-1644 | IObit Malware Fighter IOCTL IMFCameraProtect.sys 0x8018E010 denial of service | 5.5v3.1 | 0.3% | 2023-03-26 | |
| CVE-2023-1643 | IObit Malware Fighter IOCTL ImfHpRegFilter.sys 0x8001E040 denial of service | 5.5v3.1 | 0.3% | 2023-03-26 | |
| CVE-2023-1642 | IObit Malware Fighter IOCTL ObCallbackProcess.sys 0x222040 denial of service | 5.5v3.1 | 0.3% | 2023-03-26 | |
| CVE-2023-1641 | IObit Malware Fighter IOCTL ObCallbackProcess.sys 0x222018 denial of service | 5.5v3.1 | 0.3% | 2023-03-26 | |
| CVE-2023-1640 | IObit Malware Fighter IOCTL ObCallbackProcess.sys 0x222010 denial of service | 5.5v3.1 | 0.3% | 2023-03-26 | |
| CVE-2023-1639 | IObit Malware Fighter IOCTL ImfRegistryFilter.sys 0x8001E04C denial of service | 5.5v3.1 | 0.3% | 2023-03-26 | |
| CVE-2023-1638 | IObit Malware Fighter IOCTL ImfRegistryFilter.sys 0x8001E040 denial of service | 5.5v3.1 | 0.3% | 2023-03-26 | |
| CVE-2023-28437 | DataEase SQL injection keyword blacklist SQL injection | 9.8CNA v3.1 | 0.9% | 2023-03-25 | Fix |
| CVE-2023-27579 | TensorFlow has Floating Point Exception in TFLite in conv kernel | 7.5CNA v3.1 | 0.4% | 2023-03-25 | Fix |
| CVE-2023-25801 | TensorFlow has double free in Fractional(Max/Avg)Pool | 8.0CNA v3.1 | 0.2% | 2023-03-25 | Fix |
| CVE-2023-25676 | TensorFlow has null dereference on ParallelConcat with XLA | 7.5CNA v3.1 | 0.4% | 2023-03-25 | Fix |
| CVE-2023-25675 | TensorFlow has Segfault in Bincount with XLA | 7.5CNA v3.1 | 0.4% | 2023-03-25 | Fix |
| CVE-2023-25674 | TensorFlow has null pointer Error in RandomShuffle with XLA enable | 7.5CNA v3.1 | 0.4% | 2023-03-25 | Fix |
| CVE-2023-25673 | TensorFlow has Floating Point Exception in TensorListSplit with XLA | 7.5CNA v3.1 | 0.4% | 2023-03-25 | Fix |
| CVE-2023-25672 | TensorFlow has null pointer Error in LookupTableImportV2 | 7.5CNA v3.1 | 0.4% | 2023-03-25 | Fix |
| CVE-2023-25671 | TensorFlow has segmentation fault in tfg-translate | 7.5CNA v3.1 | 0.5% | 2023-03-25 | Fix |
| CVE-2023-25670 | TensorFlow has null pointer Error in QuantizedMatMulWithBiasAndDequantize | 7.5CNA v3.1 | 0.4% | 2023-03-25 | Fix |
| CVE-2023-25669 | TensorFlow has Floating Point Exception in AvgPoolGrad with XLA | 7.5CNA v3.1 | 0.4% | 2023-03-25 | Fix |
| CVE-2023-25668 | TensorFlow vulnerable to heap out-of-buffer read in the QuantizeAndDequantize operation | 9.8CNA v3.1 | 0.8% | 2023-03-25 | Fix |
| CVE-2023-25667 | TensorFlow vulnerable to segfault when opening multiframe gif | 6.5CNA v3.1 | 0.3% | 2023-03-25 | Fix |
| CVE-2023-25666 | TensorFlow has Floating Point Exception in AudioSpectrogram | 7.5CNA v3.1 | 0.4% | 2023-03-25 | Fix |
| CVE-2023-25665 | TensorFlow has null pointer Error in SparseSparseMaximum | 7.5CNA v3.1 | 0.4% | 2023-03-25 | Fix |
| CVE-2023-25664 | TensorFlow vulnerable to heap buffer overflow in AvgPoolGrad | 7.5CNA v3.1 | 0.4% | 2023-03-25 | Fix |
| CVE-2023-25663 | TensorFlow has null pointer Error in TensorArrayConcatV2 | 7.5CNA v3.1 | 0.4% | 2023-03-25 | Fix |
| CVE-2023-25662 | TensorFlow vulnerable to integer overflow in EditDistance | 7.5CNA v3.1 | 0.4% | 2023-03-25 | Fix |
| CVE-2023-25660 | TensorFlow vulnerable to seg fault in `tf.raw_ops.Print` | 7.5CNA v3.1 | 0.4% | 2023-03-25 | Fix |
| CVE-2023-25659 | TensorFlow vulnerable to out-of-bounds read in DynamicStitch | 7.5CNA v3.1 | 0.4% | 2023-03-25 | Fix |
| CVE-2023-25658 | TensorFlow vulnerable to out-of-bounds read in GRUBlockCellGrad | 7.5CNA v3.1 | 0.4% | 2023-03-25 | Fix |
| CVE-2023-1635 | Otcms apiRun.php AutoRun cross-site scripting | 6.1v3.1 | 0.6% | 2023-03-25 | |
| CVE-2023-1634 | Otcms URL parameter info_deal.php UseCurl server-side request forgery | 9.8v3.1 | 0.7% | 2023-03-25 | |
| CVE-2023-1631 | JiangMin Antivirus IOCTL kvcore.sys 0x222010 null pointer dereference | 5.5v3.1 | 0.3% | 2023-03-25 | |
| CVE-2023-1630 | JiangMin Antivirus IOCTL kvcore.sys 0x222000 denial of service | 5.5v3.1 | 0.3% | 2023-03-25 | |
| CVE-2023-1629 | JiangMin Antivirus IOCTL kvcore.sys 0x222010 memory corruption | 7.8v3.1 | 0.4% | 2023-03-25 | |
| CVE-2023-1628 | Jianming Antivirus IoControlCode kvcore.sys null pointer dereference | 5.5v3.1 | 0.3% | 2023-03-25 | |
| CVE-2023-1627 | Jianming Antivirus IoControlCode kvcore.sys denial of service | 5.5v3.1 | 0.3% | 2023-03-25 | |
| CVE-2023-1626 | Jianming Antivirus IoControlCode kvcore.sys memory corruption | 7.8v3.1 | 0.3% | 2023-03-25 | |
| CVE-2023-1458 | Ubiquiti EdgeRouter X command injection | 9.8v3.1 | 3.3% | 2023-03-25 | |
| CVE-2023-1457 | Ubiquiti EdgeRouter X command injection | 9.8v3.1 | 1.8% | 2023-03-25 | |
| CVE-2023-1456 | Ubiquiti EdgeRouter X command injection | 9.8v3.1 | 1.8% | 2023-03-25 | |
| CVE-2023-28818 | Veritas Netbackup IT Analytics improper signature verification | 5.3v3.1 | 0.2% | 2023-03-24 | Fix |
| CVE-2023-28686 | Dino insecure direct object reference | 7.1v3.1 | 0.7% | 2023-03-24 | Fix |
| CVE-2023-28448 | Versionize is lacking bound checks, potentially leading to out-of-bounds memory access | 5.7CNA v3.1 | 0.6% | 2023-03-24 | Fix |
| CVE-2023-28446 | Deno is vulnerable to interactive `run` permission prompt spoofing via improper ANSI neutralization | 8.8CNA v3.1 | 1.1% | 2023-03-24 | Fix |
| CVE-2023-28445 | Deno improperly handles resizable ArrayBuffer | 10.0CNA v3.1 | 1.0% | 2023-03-24 | Fix |
| CVE-2023-28444 | kyubisation angular-server-side-configuration environment variable detection information disclosure | 9.9CNA v3.1 | 0.8% | 2023-03-24 | Fix |
| CVE-2023-28443 | directus vulnerable to insertion of sensitive information into log file | 4.2CNA v3.1 | 0.3% | 2023-03-24 | Fix |
| CVE-2023-28442 | Geoserver for GeoNode sensitive information leak | 7.5CNA v3.1 | 0.6% | 2023-03-24 | Fix |
| CVE-2023-28441 | smartCARS 3 Password Stored as plain text in Error Log | 8.0CNA v3.1 | 0.4% | 2023-03-24 | Fix |
| CVE-2023-28435 | Dataease file upload interface does not verify permission or file type | 6.5CNA v3.1 | 0.5% | 2023-03-24 | Fix |
| CVE-2023-28152 | Independentsoft Jword XML external entity injection | 9.8v3.1 | 0.7% | 2023-03-24 | |
| CVE-2023-28151 | Independentsoft Jspreadsheet XML external entity injection | 9.8v3.1 | 0.8% | 2023-03-24 | |
| CVE-2023-28150 | Independentsoft Jodf XML external entity injection | 9.8v3.1 | 0.7% | 2023-03-24 | |
| CVE-2023-27242 | Razormist Loan Management System cross-site scripting | 5.4v3.1 | 0.4% | 2023-03-24 | |
| CVE-2023-27055 | AVer Ptzapp 2 path traversal | 7.5v3.1 | 0.7% | 2023-03-24 | |
| CVE-2023-27042 | Tenda AX3 out-of-bounds write | 8.8v3.1 | 0.9% | 2023-03-24 | |
| CVE-2023-26864 | Smplredirectionsmanager PrestaShop SQL injection | 9.8v3.1 | 1.2% | 2023-03-24 | |
| CVE-2023-25350 | Ladybirdweb Faveo Helpdesk SQL injection | 8.8v3.1 | 0.8% | 2023-03-24 | |
| CVE-2023-24625 | Ladybirdweb Faveo Servicedesk insecure direct object reference | 6.5v3.1 | 1.1% | 2023-03-24 | |
| CVE-2023-23149 | Dek-1705 Firmware command injection | 9.8v3.1 | 0.9% | 2023-03-24 | |
| CVE-2023-22812 | SanDisk PrivateAccess Deprecated TLS protocol versions supported | 7.4CNA v3.1 | 0.3% | 2023-03-24 | Fix |
| CVE-2023-21079 | Android dhd_rtt.c out-of-bounds write | 6.7v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21078 | Android dhd_rtt.c out-of-bounds write | 6.7v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21077 | Android dhd_rtt.c out-of-bounds write | 6.7v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21076 | Android nan.cpp out-of-bounds write | 6.7v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21075 | Android nan.cpp out-of-bounds write | 6.7v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21073 | Android dhd_rtt.c out-of-bounds write | 6.7v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21072 | Android dhd_rtt.c out-of-bounds write | 6.7v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21071 | Android dhd_msgbuf.c out-of-bounds write | 6.7v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21070 | Android wl_roam.c out-of-bounds write | 6.7v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21069 | Android wl_cfgscan.c out-of-bounds write | 6.7v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21068 | Android (TBD) privilege escalation | 7.8v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21067 | Android information disclosure | 7.5v3.1 | 0.3% | 2023-03-24 | Fix |
| CVE-2023-21065 | Android fdt.c out-of-bounds write | 6.7v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21064 | Android miscservice.cpp out-of-bounds read | 6.7v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21063 | Android simdata.cpp out-of-bounds read | 6.7v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21062 | Android imsservice.cpp out-of-bounds read | 6.7v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21061 | Android resource exhaustion | 7.5v3.1 | 0.3% | 2023-03-24 | Fix |
| CVE-2023-21060 | Android sms_PduCodec.c out-of-bounds read | 7.5v3.1 | 0.4% | 2023-03-24 | Fix |
| CVE-2023-21059 | Android LPP_LcsManagement.c out-of-bounds read | 7.5v3.1 | 0.4% | 2023-03-24 | Fix |
| CVE-2023-21058 | Android lcsm_bcm_assist.c out-of-bounds write | 9.8v3.1 | 0.5% | 2023-03-24 | Fix |
| CVE-2023-21057 | Android RohcPacketCommon out-of-bounds write | 9.8v3.1 | 0.5% | 2023-03-24 | Fix |
| CVE-2023-21056 | Android lwis_device_slc.c memory corruption | 6.7v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21055 | Android dit.c use-after-free | 6.4v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21054 | Android LPP_CommonUtil.c out-of-bounds write | 7.2v3.1 | 0.5% | 2023-03-24 | Fix |
| CVE-2023-21053 | Android sms_CellBroadcast.c out-of-bounds read | 7.5v3.1 | 0.4% | 2023-03-24 | Fix |
| CVE-2023-21052 | Android ril_external_client.cpp out-of-bounds write | 6.7v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21051 | Android dwc3-exynos.c out-of-bounds write | 6.7v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21050 | Android ExynosHWCHelper.cpp out-of-bounds write | 6.7v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21049 | Android camera_metadata.c out-of-bounds read | 4.4v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21048 | Android nan.cpp out-of-bounds read | 4.4v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21047 | Android aidl_utils.cc out-of-bounds read | 4.4v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21046 | Android aidl_utils.cc out-of-bounds read | 4.4v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21045 | Android use-after-free | 4.4v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21044 | Android VendorGraphicBufferMeta out-of-bounds read | 4.4v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21043 | Android (TBD) privilege escalation | 6.7v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21042 | Android (TBD) privilege escalation | 6.7v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21041 | Android param_util.c out-of-bounds write | 7.8v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21040 | Android bluetooth_ccc.cc out-of-bounds write | 7.8v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21039 | Android Dumpstate.cpp out-of-bounds read | 4.4v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21038 | Android cs40l2x.c out-of-bounds write | 6.7v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21036 | Google Android BitmapExport vulnerability | 5.5NVD v3.1 | 0.5% | 2023-03-24 | Exploit codeFix |
| CVE-2023-21035 | Android BackupHelper.java privilege escalation | 7.8v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21034 | Android SensorService.cpp privilege escalation | 7.8v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21033 | Android WifiManager.java denial of service | 5.5v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21032 | Android ufdt_convert.c out-of-bounds read | 4.4v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21031 | Android HWC2.cpp out-of-bounds read | 4.7v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21030 | Android keystore_cli_v2.cpp privilege escalation | 7.8v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21029 | Android missing authorization | 5.5v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21028 | Android ipphelper.c out-of-bounds read | 7.5v3.1 | 0.4% | 2023-03-24 | Fix |
| CVE-2023-21027 | Android PasspointXmlUtils.java information disclosure | 7.5v3.1 | 0.5% | 2023-03-24 | Fix |
| CVE-2023-21026 | Android WindowManagerService.java denial of service | 5.5v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21025 | Android ufdt_overlay.c out-of-bounds read | 4.4v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21024 | Android FallbackHome.java privilege escalation | 7.8v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21022 | Android Suballocation.cpp out-of-bounds write | 7.8v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21021 | Android WifiServiceImpl.java privilege escalation | 7.8v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21020 | Android main.c arbitrary code execution | 6.7v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21019 | Android ih264e_process.c out-of-bounds read | 5.5v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21018 | Android unwinding.cc out-of-bounds write | 6.7v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21017 | Android InstallStart.java privilege escalation | 7.8v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21016 | Android AccountTypePreference.java denial of service | 5.5v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21015 | Android several Transcode Permission Controllers insecure permissions | 7.8v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21014 | Android p2p_iface.cpp out-of-bounds read | 4.4v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21013 | Android hostapd.cpp out-of-bounds read | 4.4v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21012 | Android p2p_iface.cpp out-of-bounds read | 4.4v3.1 | 0.2% | 2023-03-24 | Fix |
| CVE-2023-21011 | Android p2p_iface.cpp out-of-bounds read | 4.4v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21010 | Android p2p_iface.cpp out-of-bounds read | 4.4v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21009 | Android p2p_iface.cpp out-of-bounds read | 4.4v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21008 | Android p2p_iface.cpp out-of-bounds read | 4.4v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21007 | Android p2p_iface.cpp out-of-bounds read | 4.4v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21006 | Android p2p_iface.cpp out-of-bounds read | 4.4v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21005 | Android several Transcode Permission Controllers insecure permissions | 7.8v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21004 | Android several Transcode Permission Controllers insecure permissions | 7.8v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21003 | Android several Transcode Permission Controllers insecure permissions | 7.8v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21002 | Android several Transcode Permission Controllers insecure permissions | 7.8v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21001 | Android NetworkProviderSettings.java privilege escalation | 7.8v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-21000 | Android MediaCodec.cpp use-after-free | 7.8v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20999 | Android multiple locations denial of service | 5.5v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20998 | Android multiple locations denial of service | 5.5v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20997 | Android multiple locations denial of service | 5.5v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20996 | Android multiple locations denial of service | 5.5v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20995 | Android CustomizedSensor.cpp privilege escalation | 7.8v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20994 | Android ufdt_convert.c out-of-bounds write | 6.7v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20993 | Android SnoozeHelper.java privilege escalation | 7.8v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20992 | Android btm_iso_impl.h out-of-bounds read | 4.5v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20991 | Android ble_scanner_hci_interface.cc out-of-bounds read | 4.4v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20990 | Android btm_ble.cc out-of-bounds read | 4.4v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20989 | Android btm_ble_gap.cc out-of-bounds read | 4.4v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20988 | Android btm_acl.cc out-of-bounds read | 4.5v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20987 | Android btm_acl.cc out-of-bounds read | 4.5v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20986 | Android btm_ble_privacy.cc out-of-bounds read | 4.4v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20985 | Android bta_gatts_api.cc out-of-bounds write | 7.8v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20984 | Android btif_bqr.cc out-of-bounds read | 4.4v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20983 | Android btm_ble.cc out-of-bounds read | 4.4v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20982 | Android btm_acl.cc out-of-bounds read | 4.4v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20981 | Android btu_hcif.cc out-of-bounds read | 4.4v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20980 | Android btu_hcif.cc out-of-bounds read | 5.5v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20979 | Android bta_av_co.cc out-of-bounds read | 5.5v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20977 | Android btm_ble_gap.cc out-of-bounds read | 4.4v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20976 | Android DefaultAutofillPicker.java privilege escalation | 7.3v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20975 | Android privilege escalation | 7.8v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20974 | Android btm_ble_privacy.cc out-of-bounds read | 5.5v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20973 | Android btm_sec.cc out-of-bounds read | 5.5v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20972 | Android btm_devctl.cc out-of-bounds read | 5.5v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20971 | Google Android PermissionManagerServiceImpl.java privilege escalation | 7.8v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20970 | Android p2p_iface.cpp out-of-bounds read | 4.4v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20969 | Android p2p_iface.cpp out-of-bounds read | 4.4v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20968 | Android p2p_iface.cpp out-of-bounds read | 4.4v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20966 | Android inflate.c out-of-bounds write | 7.8v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20964 | Android MediaSessionRecord.java privilege escalation | 7.8v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20963 | Android Framework privilege escalation | 7.8v3.1 | 1.5% | 2023-03-24 | KEVExploit codeFix |
| CVE-2023-20962 | Android MediaVolumePreferenceController.java information disclosure | 5.5v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20960 | Android SettingsHomepageActivity.java privilege escalation | 8.8v3.1 | 0.2% | 2023-03-24 | Fix |
| CVE-2023-20959 | Android missing authorization | 7.8v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20958 | Android ttcolr.c out-of-bounds read | 7.1v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20957 | Android SettingsPreferenceFragment.java privilege escalation | 7.8v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20956 | Android C2SurfaceSyncObj.cpp out-of-bounds write | 4.4v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20955 | Android AppInfoDashboardFragment.java privilege escalation | 7.8v3.1 | 0.2% | 2023-03-24 | Exploit codeFix |
| CVE-2023-20954 | Android sdp_db.cc out-of-bounds write | 9.8v3.1 | 0.5% | 2023-03-24 | Fix |
| CVE-2023-20953 | Android ClipboardListener.java privilege escalation | 7.8v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20952 | Android a2dp_sbc.cc out-of-bounds write | 5.5v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20951 | Android gatt_cl.cc out-of-bounds write | 9.8v3.1 | 0.5% | 2023-03-24 | Fix |
| CVE-2023-20947 | Android GrantPermissionsViewModel.kt privilege escalation | 7.8v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20936 | Android bta_av_act.cc out-of-bounds write | 7.8v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20931 | Android avdt_scb_act.cc out-of-bounds write | 7.8v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20929 | Android HalfSheetActivity.java information disclosure | 5.5v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20926 | Android HeaderPrivacyIconsController.kt privilege escalation | 6.8v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20917 | Android ResolverActivity.java privilege escalation | 7.8v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20911 | Android PermissionManagerServiceImpl.java privilege escalation | 7.8v3.1 | 0.2% | 2023-03-24 | Exploit codeFix |
| CVE-2023-20910 | Google Android WifiNetworkSuggestionsManager.java denial of service | 5.5v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-20906 | Android PermissionManagerService.java privilege escalation | 7.8v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2023-1616 | XiaoBingBy TeaCMS Article Title cross-site scripting | 5.4v3.1 | 0.5% | 2023-03-24 | |
| CVE-2023-1583 | Linux kernel null pointer dereference | 5.5NVD v3.1 | 0.2% | 2023-03-24 | Fix |
| CVE-2023-1177 | Path traversal: \..\filename in MLflow/MLflow | 9.8v3.1 | 69.5% | 2023-03-24 | NucleiExploit codeFix |
| CVE-2023-1176 | Absolute path traversal in MLflow/MLflow | 3.3NVD v3.1 | 0.6% | 2023-03-24 | Fix |
| CVE-2023-28772 | Linux kernel buffer overflow | 6.7v3.1 | 0.7% | 2023-03-23 | Exploit codeFix |
| CVE-2023-28759 | Veritas NetBackup uncontrolled search path | 7.8v3.1 | 0.2% | 2023-03-23 | |
| CVE-2023-28758 | Veritas NetBackup improper privilege management | 7.1v3.1 | 0.2% | 2023-03-23 | Fix |
| CVE-2023-28611 | Omicronenergy Stationguard incorrect authorization | 9.8v3.1 | 0.6% | 2023-03-23 | Fix |
| CVE-2023-28610 | Omicronenergy Stationguard improper signature verification | 9.8v3.1 | 0.6% | 2023-03-23 | Fix |
| CVE-2023-28470 | Couchbase Server missing authentication | 5.3v3.1 | 0.6% | 2023-03-23 | Fix |
| CVE-2023-28436 | Tailscale SSH FreeBSD group ID handling privilege escalation | 5.7CNA v3.1 | 0.5% | 2023-03-23 | Fix |
| CVE-2023-28422 | Event Manager for WooCommerce WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-03-23 | Fix |
| CVE-2023-28336 | Moodle: Teacher can access names of users they do not have permission to access | 4.3NVD v3.1 | 0.7% | 2023-03-23 | Fix |
| CVE-2023-28335 | Moodle: Csrf risk in resetting all templates of a database activity | 8.8NVD v3.1 | 0.4% | 2023-03-23 | Fix |
| CVE-2023-28334 | Moodle: Users' name enumeration possible via IDOR on learning plans page | 4.3NVD v3.1 | 0.6% | 2023-03-23 | Fix |
| CVE-2023-28333 | Moodle: Pix helper potential mustache code injection risk | 9.8NVD v3.1 | 1.2% | 2023-03-23 | Fix |
| CVE-2023-28332 | Moodle: Algebra filter XSS when filter is misconfigured | 6.1NVD v3.1 | 0.6% | 2023-03-23 | Fix |
| CVE-2023-28331 | Moodle: Xss risk when outputting database activity filter data | 6.1NVD v3.1 | 0.7% | 2023-03-23 | Fix |
| CVE-2023-28330 | Moodle: Authenticated arbitrary file read through malformed backup file | 6.5NVD v3.1 | 1.2% | 2023-03-23 | Fix |
| CVE-2023-28329 | Moodle: Authenticated SQL injection via availability check | 8.8NVD v3.1 | 1.2% | 2023-03-23 | Fix |
| CVE-2023-27249 | swftools out-of-bounds write | 5.5v3.1 | 0.4% | 2023-03-23 | |
| CVE-2023-27135 | TOTOLINK A7100RU command injection | 9.8v3.1 | 2.0% | 2023-03-23 | |
| CVE-2023-27094 | Hippo4j privilege escalation issue | 8.8v3.1 | 0.6% | 2023-03-23 | |
| CVE-2023-27079 | Tenda G103 command injection | 7.5v3.1 | 1.9% | 2023-03-23 | |
| CVE-2023-27078 | TP-Link Tl-mr3020 A command injection | 9.8v3.1 | 2.5% | 2023-03-23 | |
| CVE-2023-27077 | 360 D901 stack-based buffer overflow | 7.5v3.1 | 1.6% | 2023-03-23 | |
| CVE-2023-27034 | Joommasters Jms Blog SQL injection | 9.8v3.1 | 58.7% | 2023-03-23 | NucleiFix |
| CVE-2023-26498 | Samsung Exynos Modem 5123 out-of-bounds write | 9.8v3.1 | 21.4% | 2023-03-23 | Fix |
| CVE-2023-26496 | Samsung Exynos Modem 5123 out-of-bounds write | 9.8v3.1 | 21.4% | 2023-03-23 | Fix |
| CVE-2023-26361 | Adobe ColdFusion directory traversal arbitrary file system read | 4.9CNA v3.1 | 58.7% | 2023-03-23 | Fix |
| CVE-2023-26360 | Adobe ColdFusion deserialization of untrusted data | 8.6CNA v3.1 | 97.3% | 2023-03-23 | KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix |
| CVE-2023-26359 | Adobe ColdFusion deserialization of untrusted data | 9.8CNA v3.1 | 17.0% | 2023-03-23 | KEVEmerging ThreatsKCVFix |
| CVE-2023-26114 | code-server vulnerable to missing origin validation in WebSockets | 9.3v3.1 | 0.3% | 2023-03-23 | Fix |
| CVE-2023-26088 | Malwarebytes link following | 7.8v3.1 | 0.5% | 2023-03-23 | Fix |
| CVE-2023-26008 | Top 10 WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-03-23 | Fix |
| CVE-2023-25992 | CM Answers WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-03-23 | Fix |
| CVE-2023-25655 | baserproject basercms unrestricted file upload | 9.8CNA v3.1 | 1.1% | 2023-03-23 | Fix |
| CVE-2023-25654 | baserCMS File Uploader remote code execution (RCE) | 9.8CNA v3.1 | 1.5% | 2023-03-23 | Fix |
| CVE-2023-25456 | Klaviyo WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-03-23 | Fix |
| CVE-2023-24788 | NotrinosERP vulnerable to SQL injection | 8.8v3.1 | 3.1% | 2023-03-23 | Exploit code |
| CVE-2023-24655 | oretnom23 Simple Customer Relationship Management System SQL injection | 9.8v3.1 | 1.0% | 2023-03-23 | |
| CVE-2023-24295 | Softmaker Flexipdf out-of-bounds write | 7.8v3.1 | 0.2% | 2023-03-23 | |
| CVE-2023-23864 | Very Simple Google Maps WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-03-23 | Fix |
| CVE-2023-23728 | WP Flipclock WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-03-23 | Fix |
| CVE-2023-23722 | WP eBay Product Feeds WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-03-23 | Fix |
| CVE-2023-23707 | Embed Any Document Embed PDF, Word, PowerPoint and Excel Files WordPress plugin cross-site scripting | 5.4v3.1 | 0.4% | 2023-03-23 | Fix |
| CVE-2023-23650 | MainWP Code Snippets Extension WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-03-23 | Fix |
| CVE-2023-23192 | Isdecisions Userlock incorrect authorization | 7.2v3.1 | 1.5% | 2023-03-23 | Exploit code |
| CVE-2023-22716 | OOPSpam Anti-Spam WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-03-23 | Fix |
| CVE-2023-22715 | WP-CommentNavi WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-03-23 | Fix |
| CVE-2023-22712 | TemplatesNext ToolKit WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-03-23 | Fix |
| CVE-2023-22704 | teachPress WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-03-23 | Fix |
| CVE-2023-22702 | WPMobile.App Android and iOS Mobile Application WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-03-23 | Fix |
| CVE-2023-20861 | Spring Framework vulnerable to denial of service via specially crafted SpEL expression | 6.5v3.1 | 1.0% | 2023-03-23 | Fix |
| CVE-2023-20859 | Spring Vault vulnerable to insertion of sensitive information into a log file | 5.5v3.1 | 0.2% | 2023-03-23 | Fix |
| CVE-2023-20113 | Cisco SD-WAN vManage software cross-site request forgery | 6.5CNA v3.1 | 0.3% | 2023-03-23 | Fix |
| CVE-2023-20112 | Cisco Access Point Software Association request denial of service | 7.4CNA v3.1 | 0.3% | 2023-03-23 | Fix |
| CVE-2023-20107 | Cisco Adaptive Security Appliance and Firepower Threat Defense Software insufficient entropy | 5.3CNA v3.0 | 0.7% | 2023-03-23 | Fix |
| CVE-2023-20100 | Cisco IOS XE Software for Wireless LAN Controllers CAPWAP Join denial of service | 6.8CNA v3.1 | 0.8% | 2023-03-23 | Fix |
| CVE-2023-20097 | Cisco Access Point Software command injection | 4.6CNA v3.1 | 0.2% | 2023-03-23 | Fix |
| CVE-2023-20082 | Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches Secure Boot Bypass vulnerability | 6.1CNA v3.1 | 0.4% | 2023-03-23 | Fix |
| CVE-2023-20081 | Cisco IOS heap-based buffer overflow | 6.8CNA v3.1 | 0.7% | 2023-03-23 | Fix |
| CVE-2023-20080 | Cisco IOS and IOS XE Software IPv6 DHCP (DHCPv6) Relay and server denial of service | 8.6CNA v3.1 | 1.0% | 2023-03-23 | Fix |
| CVE-2023-20072 | Cisco IOS XE Software Fragmented Tunnel Protocol Packet denial of service | 8.6CNA v3.1 | 1.0% | 2023-03-23 | Fix |
| CVE-2023-20067 | Cisco IOS XE Software for Wireless LAN Controllers HTTP Client Profiling denial of service | 7.4CNA v3.1 | 0.3% | 2023-03-23 | Fix |
| CVE-2023-20066 | Cisco IOS XE Software Web UI path traversal | 6.5CNA v3.1 | 1.7% | 2023-03-23 | Fix |
| CVE-2023-20065 | Cisco IOS XE Software privilege escalation | 7.8CNA v3.1 | 0.2% | 2023-03-23 | Fix |
| CVE-2023-20059 | Cisco DNA Center information disclosure | 4.3CNA v3.1 | 0.4% | 2023-03-23 | Fix |
| CVE-2023-20056 | Cisco Access Point Software denial of service | 6.5CNA v3.1 | 0.3% | 2023-03-23 | Fix |
| CVE-2023-20055 | Cisco DNA Center privilege escalation | 8.0CNA v3.1 | 0.7% | 2023-03-23 | Fix |
| CVE-2023-20035 | Cisco IOS XE SD-WAN software command injection | 7.8CNA v3.1 | 0.2% | 2023-03-23 | Fix |
| CVE-2023-20029 | Cisco IOS XE Software privilege escalation | 4.4CNA v3.1 | 0.2% | 2023-03-23 | Fix |
| CVE-2023-20027 | Cisco IOS XE Software Virtual Fragmentation Reassembly denial of service | 8.6CNA v3.1 | 1.0% | 2023-03-23 | Fix |
| CVE-2023-1613 | Rebuild publish cross-site scripting | 6.1v3.1 | 0.5% | 2023-03-23 | |
| CVE-2023-1612 | Rebuild list-file SQL injection | 9.8v3.1 | 0.7% | 2023-03-23 | |
| CVE-2023-1610 | Rebuild list SQL injection | 9.8v3.1 | 0.7% | 2023-03-23 | |
| CVE-2023-1609 | Zhong Bang CRMEB Java save cross-site scripting | 5.4v3.1 | 0.5% | 2023-03-23 | |
| CVE-2023-1608 | Zhong Bang CRMEB Java list getAdminList SQL injection | 9.8v3.1 | 0.6% | 2023-03-23 | |
| CVE-2023-1607 | Novel-Plus list SQL injection | 8.8v3.1 | 0.7% | 2023-03-23 | |
| CVE-2023-1606 | Novel-Plus DictController.java SQL injection | 9.8v3.1 | 0.9% | 2023-03-23 | |
| CVE-2023-1605 | Denial of service in radareorg/radare2 | 7.5v3.1 | 1.0% | 2023-03-23 | Fix |
| CVE-2023-1595 | Novel-Plus list SQL injection | 7.2v3.1 | 0.9% | 2023-03-23 | |
| CVE-2023-1594 | Novel-Plus list MenuService SQL injection | 9.8v3.1 | 1.0% | 2023-03-23 | |
| CVE-2023-1593 | SourceCodester Automatic Question Paper Generator System cross-site scripting | 6.1v3.1 | 0.4% | 2023-03-23 | |
| CVE-2023-1592 | SourceCodester Automatic Question Paper Generator System GET parameter view_class.php SQL injection | 9.8v3.1 | 0.5% | 2023-03-23 | |
| CVE-2023-1591 | SourceCodester Automatic Question Paper Generator System SQL injection | 9.8v3.1 | 0.5% | 2023-03-23 | |
| CVE-2023-1590 | SourceCodester Online Tours and Travels Management System currency.php exec SQL injection | 9.8v3.1 | 0.8% | 2023-03-23 | |
| CVE-2023-1589 | SourceCodester Online Tours and Travels Management System approve_delete.php exec SQL injection | 9.8v3.1 | 0.8% | 2023-03-23 | |
| CVE-2023-1544 | Qemu: Pvrdma: Out-of-bounds read in pvrdma_ring_next_elem_read | 6.3NVD v3.1 | 0.3% | 2023-03-23 | Fix |
| CVE-2023-1513 | Linux kernel (KVM) improper initialization | 3.3NVD v3.1 | 0.2% | 2023-03-23 | Fix |
| CVE-2023-1410 | Grafana stored XSS in Graphite FunctionDescription tooltip | 6.2CNA v3.1 | 1.0% | 2023-03-23 | Fix |
| CVE-2023-1402 | Moodle: Course participation report shows roles the user should not see | 4.3NVD v3.1 | 0.7% | 2023-03-23 | Fix |
| CVE-2023-1289 | ImageMagick denial of service | 5.5NVD v3.1 | 0.9% | 2023-03-23 | Fix |
| CVE-2023-1252 | Linux kernel A use-after-free | 7.8NVD v3.1 | 0.2% | 2023-03-23 | Fix |
| CVE-2023-1249 | Linux kernel A use-after-free | 5.5NVD v3.1 | 0.3% | 2023-03-23 | Fix |
| CVE-2023-1051 | XSS in As Koc Web Report System | 6.1v3.1 | 0.4% | 2023-03-23 | Fix |
| CVE-2023-1050 | SQLi in As Koc Web Report System | 9.8v3.1 | 0.6% | 2023-03-23 | Fix |
| CVE-2023-0590 | Linux kernel qdisc_graft in net/sched/sch_api.c in the use-after-free | 4.7NVD v3.1 | 0.2% | 2023-03-23 | Fix |
| CVE-2023-0056 | haproxy resource exhaustion | 6.5NVD v3.1 | 1.8% | 2023-03-23 | Fix |
| CVE-2023-28725 | General Bytes Crypto Application Server unrestricted file upload | 9.1v3.1 | 20.6% | 2023-03-22 | Fix |
| CVE-2023-28708 | Apache Tomcat: JSESSIONID Cookie missing secure attribute in some configurations | 4.3v3.1 | 1.8% | 2023-03-22 | Fix |
| CVE-2023-28685 | Jenkins AbsInt a³ Plugin XML external entity Reference | 7.1v3.1 | 0.6% | 2023-03-22 | Fix |
| CVE-2023-28667 | Lead Generated WordPress Plugin deserialization of untrusted data | 9.8NVD v3.1 | 1.1% | 2023-03-22 | Fix |
| CVE-2023-28666 | InPost Gallery WordPress Plugin cross-site scripting | 5.4NVD v3.1 | 0.4% | 2023-03-22 | Fix |
| CVE-2023-28665 | Woo Bulk Price Update WordPress Plugin cross-site scripting | 5.4NVD v3.1 | 0.9% | 2023-03-22 | NucleiFix |
| CVE-2023-28664 | Meta Data and Taxonomies Filter WordPress Plugin cross-site scripting | 5.4NVD v3.1 | 0.4% | 2023-03-22 | Fix |
| CVE-2023-28663 | Formidable PRO2PDF WordPress Plugin SQL injection | 8.8NVD v3.1 | 0.9% | 2023-03-22 | Fix |
| CVE-2023-28662 | Gift Cards (Gift Vouchers and Packages) WordPress Plugin SQL injection | 9.8NVD v3.1 | 42.2% | 2023-03-22 | NucleiFix |
| CVE-2023-28661 | WP Popup Banners WordPress Plugin SQL injection | 8.8NVD v3.1 | 0.9% | 2023-03-22 | |
| CVE-2023-28660 | Events Made Easy WordPress Plugin SQL injection | 8.8NVD v3.1 | 0.9% | 2023-03-22 | Fix |
| CVE-2023-28659 | Waiting: One-click Countdowns WordPress Plugin SQL injection | 8.8NVD v3.1 | 0.9% | 2023-03-22 | |
| CVE-2023-28439 | CKEditor4 Iframe Dialog and Media Embed plugins cross-site scripting | 4.7CNA v3.1 | 0.7% | 2023-03-22 | Fix |
| CVE-2023-28438 | Pimcore vulnerable to improper quoting of filters in Custom Reports | 6.2CNA v3.1 | 0.9% | 2023-03-22 | Fix |
| CVE-2023-28434 | MinIO security feature bypass | 8.8CNA v3.1 | 7.9% | 2023-03-22 | KEVExploit codeKCVFix |
| CVE-2023-28433 | Minio privilege escalation on Windows via Path separator manipulation | 8.8CNA v3.1 | 1.0% | 2023-03-22 | Fix |
| CVE-2023-28432 | MinIO information disclosure | 7.5CNA v3.1 | 84.0% | 2023-03-22 | KEVNucleiEmerging ThreatsExploit codeKCVFix |
| CVE-2023-28431 | Frontier's modexp precompile is slow for even modulus | 7.5CNA v3.1 | 0.9% | 2023-03-22 | Fix |
| CVE-2023-28119 | Crewjam/saml vulnerable to denial of service via Deflate decompression bomb | 7.5CNA v3.1 | 1.0% | 2023-03-22 | Fix |
| CVE-2023-28117 | Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True` | 7.6CNA v3.1 | 0.6% | 2023-03-22 | Fix |
| CVE-2023-28114 | `cilium-cli` disables etcd authorization for clustermesh clusters | 4.8CNA v3.1 | 0.2% | 2023-03-22 | Fix |
| CVE-2023-28083 | HPE Integrated Lights-Out cross-site scripting | 8.3CNA v3.1 | 0.4% | 2023-03-22 | Fix |
| CVE-2023-28005 | A vulnerability in Trend Micro Endpoint Encryption Full Disk Encryption version 6.0.0.3204 and below could allow an attacker with physical access to an affected device to bypass Microsoft Windows� Secure Boot process in an attempt to execute other attacks to obtain access to the contents of the devi | 6.8v3.1 | 0.2% | 2023-03-22 | Fix |
| CVE-2023-27857 | Rockwell Automation ThinManager ThinServer heap-based buffer overflow | 7.5CNA v3.1 | 18.3% | 2023-03-22 | Fix |
| CVE-2023-27856 | Rockwell Automation ThinManager ThinServer path traversal Download | 7.5CNA v3.1 | 77.2% | 2023-03-22 | MetasploitFix |
| CVE-2023-27855 | Rockwell Automation ThinManager ThinServer path traversal upload | 9.8CNA v3.1 | 13.5% | 2023-03-22 | MetasploitFix |
| CVE-2023-27754 | VOX2MESH out-of-bounds write | 5.5v3.1 | 0.3% | 2023-03-22 | |
| CVE-2023-27638 | Tshirtecommerce Custom Product Designer SQL injection | 9.8v3.1 | 3.3% | 2023-03-22 | Nuclei |
| CVE-2023-27637 | Tshirtecommerce Custom Product Designer SQL injection | 9.8v3.1 | 3.3% | 2023-03-22 | Nuclei |
| CVE-2023-27224 | JC21 nginx-proxy-manager command injection | 9.8v3.1 | 1.2% | 2023-03-22 | |
| CVE-2023-27100 | Netgate pfSense Plus SSHGuard component missing brute-force protection | 9.8v3.1 | 9.8% | 2023-03-22 | Exploit codeFix |
| CVE-2023-27060 | Lightcms missing authentication | 9.8v3.1 | 1.3% | 2023-03-22 | |
| CVE-2023-27054 | Mirotalk P2P cross-site scripting | 6.1v3.1 | 0.6% | 2023-03-22 | |
| CVE-2023-26913 | Evolucare Ecs Imaging cross-site scripting | 6.1v3.1 | 0.5% | 2023-03-22 | |
| CVE-2023-26426 | Adobe Illustrator (Beta) has a UAF vulnerability when parsing SVG files arbitrary code execution | 7.8CNA v3.1 | 0.4% | 2023-03-22 | Fix |
| CVE-2023-26358 | Adobe Creative Cloud AdobeExtensionService.exe local privilege escalation | 8.6CNA v3.1 | 0.4% | 2023-03-22 | Fix |
| CVE-2023-25924 | IBM Security Key Lifecycle Manager improper authorization | 5.4CNA v3.1 | 0.4% | 2023-03-22 | Fix |
| CVE-2023-25862 | Adobe Illustrator Font Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-03-22 | Fix |
| CVE-2023-25861 | Adobe Illustrator Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.3% | 2023-03-22 | Fix |
| CVE-2023-25860 | Adobe Illustrator Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.3% | 2023-03-22 | Fix |
| CVE-2023-25859 | Adobe Illustrator improper input validation remote code execution | 7.8CNA v3.1 | 0.3% | 2023-03-22 | Fix |
| CVE-2023-25820 | Nextcloud Server and Enterprise Server missing brute force protection on password confirmation modal | 4.2CNA v3.1 | 0.2% | 2023-03-22 | Fix |
| CVE-2023-25688 | IBM Security Key Lifecycle Manager information disclosure | 4.3CNA v3.1 | 0.9% | 2023-03-22 | Fix |
| CVE-2023-25596 | Authenticated sensitive information disclosure in ClearPass Policy Manager | 4.5CNA v3.1 | 0.3% | 2023-03-22 | Fix |
| CVE-2023-25595 | Sensitive information disclosure in ClearPass OnGuard Ubuntu agent | 5.5CNA v3.1 | 0.2% | 2023-03-22 | Fix |
| CVE-2023-25594 | Aruba ClearPass Policy Manager web-based management interface privilege escalation | 6.3CNA v3.1 | 0.5% | 2023-03-22 | Fix |
| CVE-2023-25593 | Aruba ClearPass Policy Manager web-based management interface reflected cross-site scripting | 7.1CNA v3.1 | 0.5% | 2023-03-22 | Fix |
| CVE-2023-25592 | Aruba ClearPass Policy Manager web-based management interface reflected cross-site scripting | 7.1CNA v3.1 | 0.5% | 2023-03-22 | Fix |
| CVE-2023-25591 | Authenticated information disclosure in ClearPass Policy Manager Web-Based Management interface | 7.6CNA v3.1 | 0.6% | 2023-03-22 | Fix |
| CVE-2023-25590 | Local privilege escalation in ClearPass OnGuard Linux agent | 7.8CNA v3.1 | 0.2% | 2023-03-22 | Fix |
| CVE-2023-25589 | Aruba ClearPass Policy Manager web-based management interface missing authentication | 9.8CNA v3.1 | 1.0% | 2023-03-22 | Fix |
| CVE-2023-25069 | Trend Micro TXOne Networks StellarOne every version improper access control | 8.8v3.1 | 1.0% | 2023-03-22 | Fix |
| CVE-2023-22271 | Adobe Experience Manager AEM weak cryptography for Passwords security feature bypass | 5.3CNA v3.1 | 0.8% | 2023-03-22 | Fix |
| CVE-2023-22269 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.5% | 2023-03-22 | Fix |
| CVE-2023-22266 | Adobe Experience Manager AEM URL redirection to untrusted site security feature bypass | 5.4CNA v3.1 | 0.5% | 2023-03-22 | Fix |
| CVE-2023-22265 | Adobe Experience Manager AEM URL redirection to untrusted site security feature bypass | 5.4CNA v3.1 | 0.5% | 2023-03-22 | Fix |
| CVE-2023-22264 | Adobe Experience Manager AEM URL redirection to untrusted site security feature bypass | 5.4CNA v3.1 | 0.5% | 2023-03-22 | Fix |
| CVE-2023-22263 | Adobe Experience Manager AEM URL redirection to untrusted site security feature bypass | 5.4CNA v3.1 | 0.5% | 2023-03-22 | Fix |
| CVE-2023-22262 | Adobe Experience Manager AEM URL redirection to untrusted site security feature bypass | 5.4CNA v3.1 | 0.5% | 2023-03-22 | Fix |
| CVE-2023-22261 | Adobe Experience Manager AEM URL redirection to untrusted site security feature bypass | 5.4CNA v3.1 | 0.5% | 2023-03-22 | Fix |
| CVE-2023-22260 | Adobe Experience Manager AEM URL redirection to untrusted site security feature bypass | 5.4CNA v3.1 | 0.5% | 2023-03-22 | Fix |
| CVE-2023-22259 | Adobe Experience Manager AEM URL redirection to untrusted site security feature bypass | 5.4CNA v3.1 | 0.5% | 2023-03-22 | Fix |
| CVE-2023-22258 | Adobe Experience Manager AEM URL redirection to untrusted site security feature bypass | 5.4CNA v3.1 | 0.5% | 2023-03-22 | Fix |
| CVE-2023-22257 | Adobe Experience Manager AEM URL redirection to untrusted site security feature bypass | 5.4CNA v3.1 | 0.5% | 2023-03-22 | Fix |
| CVE-2023-22256 | Adobe Experience Manager AEM URL redirection to untrusted site security feature bypass | 5.4CNA v3.1 | 0.5% | 2023-03-22 | Fix |
| CVE-2023-22254 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.5% | 2023-03-22 | Fix |
| CVE-2023-22253 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.5% | 2023-03-22 | Fix |
| CVE-2023-22252 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.5% | 2023-03-22 | Fix |
| CVE-2023-21616 | Adobe Experience Manager cross-site scripting (reflected XSS) | 5.4CNA v3.1 | 0.5% | 2023-03-22 | Fix |
| CVE-2023-21615 | Adobe Experience Manager cross-site scripting (reflected XSS) | 5.4CNA v3.1 | 0.5% | 2023-03-22 | Fix |
| CVE-2023-1578 | SQL injection in pimcore/pimcore | 8.8v3.1 | 62.8% | 2023-03-22 | Fix |
| CVE-2023-1573 | DataGear Graph Dataset cross-site scripting | 6.1v3.1 | 0.6% | 2023-03-22 | Fix |
| CVE-2023-1572 | DataGear plugin cross-site scripting | 5.4v3.1 | 0.5% | 2023-03-22 | Fix |
| CVE-2023-1571 | DataGear pagingQueryData SQL injection | 9.8v3.1 | 0.9% | 2023-03-22 | |
| CVE-2023-1570 | syoyo tinydng tiny_dng_loader.h __interceptor_memcpy heap-based overflow | 5.5v3.1 | 0.4% | 2023-03-22 | |
| CVE-2023-1569 | SourceCodester E-Commerce System cross-site scripting | 5.4v3.1 | 0.5% | 2023-03-22 | |
| CVE-2023-1568 | SourceCodester Student Study Center Desk Management System index.php cross-site scripting | 5.4v3.1 | 0.6% | 2023-03-22 | |
| CVE-2023-1567 | SourceCodester Student Study Center Desk Management System assign.php cross-site scripting | 6.1v3.1 | 0.6% | 2023-03-22 | |
| CVE-2023-1566 | SourceCodester Medical Certificate Generator App action.php SQL injection | 9.8v3.1 | 0.5% | 2023-03-22 | |
| CVE-2023-1565 | FeiFeiCMS extension tool slide_add.html cross-site scripting | 5.4v3.1 | 0.6% | 2023-03-22 | |
| CVE-2023-1564 | SourceCodester Air Cargo Management System GET parameter update_status.php SQL injection | 9.8v3.1 | 0.8% | 2023-03-22 | |
| CVE-2023-1563 | SourceCodester Student Study Center Desk Management System assign.php SQL injection | 9.8v3.1 | 0.8% | 2023-03-22 | |
| CVE-2023-1562 | Mattermost full name revealed via /plugins/focalboard/API/v2/users | 3.5CNA v3.1 | 0.5% | 2023-03-22 | |
| CVE-2023-1561 | code-projects Simple Online Hotel Reservation System add_room.php unrestricted upload | 9.8v3.1 | 0.8% | 2023-03-22 | |
| CVE-2023-1560 | TinyTIFF file tinytiffreader.c buffer overflow | 5.5v3.1 | 0.4% | 2023-03-22 | |
| CVE-2023-1559 | SourceCodester Storage Unit Rental Management System unrestricted upload | 7.2v3.1 | 0.9% | 2023-03-22 | |
| CVE-2023-1558 | Simple and Beautiful Shopping Cart System uploadera.php unrestricted upload | 9.8v3.1 | 0.7% | 2023-03-22 | |
| CVE-2023-1557 | SourceCodester E-Commerce System Username access control | 9.8v3.1 | 0.5% | 2023-03-22 | |
| CVE-2023-1556 | SourceCodester Judging Management System summary_results.php SQL injection | 9.8v3.1 | 0.7% | 2023-03-22 | |
| CVE-2023-1436 | Infinite recursion in Jettison leads to denial of service when creating a crafted JSONArray | 7.5NVD v3.1 | 1.0% | 2023-03-22 | Fix |
| CVE-2023-1370 | Stack exhaustion in json-smart leads to denial of service when parsing malformed JSON | 7.5NVD v3.1 | 1.1% | 2023-03-22 | Fix |
| CVE-2023-1281 | UAF in Linux kernel's tcindex (traffic control index filter) implementation | 7.8NVD v3.1 | 0.3% | 2023-03-22 | Fix |
| CVE-2023-1168 | Authenticated remote code execution in Aruba CX Switches | 7.2CNA v3.1 | 1.1% | 2023-03-22 | Fix |
| CVE-2023-0870 | The OpenNMS Group Meridian form can be Manipulated with cross-site request forgery (CSRF) | 8.1CNA v3.1 | 0.3% | 2023-03-22 | Fix |
| CVE-2023-0464 | OpenSSL Excessive Resource Usage Verifying X.509 Policy Constraints | 7.5NVD v3.1 | 4.0% | 2023-03-22 | Fix |
| CVE-2023-0386 | Linux Kernel improper ownership management | 7.8NVD v3.1 | 7.9% | 2023-03-22 | KEVExploit codeFix |
| CVE-2023-27984 | Schneider Electric IGSS Data Server (IGSSdataServer.exe) improper input validation | 7.8CNA v3.1 | 0.6% | 2023-03-21 | Fix |
| CVE-2023-27983 | Schneider Electric IGSS Data Server (IGSSdataServer.exe) missing authentication | 6.5CNA v3.1 | 0.4% | 2023-03-21 | Fix |
| CVE-2023-27982 | Schneider Electric IGSS Data Server dashboard file handling remote code execution | 8.8CNA v3.1 | 0.4% | 2023-03-21 | Fix |
| CVE-2023-27981 | Schneider Electric IGSS Data Server (IGSSdataServer.exe) path traversal | 7.8CNA v3.1 | 0.7% | 2023-03-21 | Fix |
| CVE-2023-27980 | Schneider Electric IGSS Data Server (IGSSdataServer.exe) missing authentication | 8.8CNA v3.1 | 0.9% | 2023-03-21 | Fix |
| CVE-2023-27979 | Schneider Electric IGSS Data Server Data Server TCP port denial of service | 6.5CNA v3.1 | 0.2% | 2023-03-21 | Fix |
| CVE-2023-27978 | Schneider Electric IGSS Data Server (IGSSdataServer.exe) deserialization of untrusted data | 7.8CNA v3.1 | 6.5% | 2023-03-21 | Fix |
| CVE-2023-27977 | Schneider Electric IGSS Data Server Data Server TCP port vulnerability | 6.5CNA v3.1 | 0.2% | 2023-03-21 | Fix |
| CVE-2023-27874 | IBM Aspera Faspex XML external entity injection | 9.9CNA v3.1 | 1.3% | 2023-03-21 | Fix |
| CVE-2023-27873 | IBM Aspera Faspex information disclosure | 6.5CNA v3.1 | 0.8% | 2023-03-21 | Fix |
| CVE-2023-27871 | IBM Aspera Faspex information disclosure | 7.5CNA v3.1 | 0.9% | 2023-03-21 | Fix |
| CVE-2023-27842 | eXtplorer insecure permissions | 8.8v3.1 | 2.4% | 2023-03-21 | Exploit code |
| CVE-2023-27570 | PrestaShop Eo Tags SQL injection | 9.8v3.1 | 0.6% | 2023-03-21 | Fix |
| CVE-2023-27569 | PrestaShop Eo Tags SQL injection | 9.8v3.1 | 0.9% | 2023-03-21 | |
| CVE-2023-27087 | Xuxueli xxl-job allows attacker to obtain sensitive information via the pageList parameter | 7.5v3.1 | 0.6% | 2023-03-21 | |
| CVE-2023-26497 | Samsung Exynos Modem 5123 out-of-bounds write | 9.8v3.1 | 21.4% | 2023-03-21 | Fix |
| CVE-2023-25923 | IBM Security Key Lifecycle Manager denial of service | 2.7CNA v3.1 | 0.7% | 2023-03-21 | Fix |
| CVE-2023-25689 | IBM Security Key Lifecycle Manager information disclosure | 2.7CNA v3.1 | 0.7% | 2023-03-21 | Fix |
| CVE-2023-25687 | IBM Security Key Lifecycle Manager information disclosure | 4.3CNA v3.1 | 0.5% | 2023-03-21 | Fix |
| CVE-2023-25686 | IBM Security Key Lifecycle Manager information disclosure | 6.2CNA v3.1 | 0.2% | 2023-03-21 | Fix |
| CVE-2023-25684 | IBM Security Key Lifecycle Manager SQL injection | 6.5CNA v3.1 | 1.0% | 2023-03-21 | Fix |
| CVE-2023-25134 | McAfee Total Protection Component Object Model registry entry vulnerability | 6.7v3.1 | 0.3% | 2023-03-21 | Fix |
| CVE-2023-24709 | Paradox IPR512 code injection | 7.5v3.1 | 44.2% | 2023-03-21 | Exploit code |
| CVE-2023-1545 | SQL injection in nilsteampassnet/TeamPass | 7.5v3.1 | 8.4% | 2023-03-21 | Exploit codeFix |
| CVE-2023-1543 | Insufficient session expiration in answerdev/Answer | 8.8v3.1 | 0.8% | 2023-03-21 | Fix |
| CVE-2023-1542 | Business Logic Errors in answerdev/Answer | 5.4NVD v3.1 | 0.8% | 2023-03-21 | Fix |
| CVE-2023-1541 | Business Logic Errors in answerdev/Answer | 3.8NVD v3.1 | 0.6% | 2023-03-21 | Fix |
| CVE-2023-1540 | Observable response discrepancy in answerdev/Answer | 5.3v3.1 | 0.6% | 2023-03-21 | Fix |
| CVE-2023-1539 | Improper restriction of excessive authentication attempts in answerdev/Answer | 5.3v3.1 | 0.6% | 2023-03-21 | Fix |
| CVE-2023-1538 | Observable timing discrepancy in answerdev/Answer | 5.3v3.1 | 0.6% | 2023-03-21 | Fix |
| CVE-2023-1537 | Authentication bypass by capture-replay in answerdev/Answer | 9.8v3.1 | 0.8% | 2023-03-21 | Fix |
| CVE-2023-1536 | Cross-site scripting (XSS) Stored in answerdev/Answer | 5.4NVD v3.1 | 0.5% | 2023-03-21 | Fix |
| CVE-2023-1535 | Cross-site scripting (XSS) Stored in answerdev/Answer | 5.4NVD v3.1 | 0.5% | 2023-03-21 | Fix |
| CVE-2023-1534 | Google Chrome ANGLE out-of-bounds read | 8.8v3.1 | 1.3% | 2023-03-21 | Fix |
| CVE-2023-1533 | Google Chrome WebProtect use-after-free | 8.8v3.1 | 0.9% | 2023-03-21 | Fix |
| CVE-2023-1532 | Google Chrome GPU Video out-of-bounds read | 8.8v3.1 | 1.3% | 2023-03-21 | Fix |
| CVE-2023-1531 | Google Chrome ANGLE use-after-free | 8.8v3.1 | 3.2% | 2023-03-21 | Fix |
| CVE-2023-1530 | Google Chrome PDF use-after-free | 8.8v3.1 | 0.8% | 2023-03-21 | Fix |
| CVE-2023-1529 | Google Chrome WebHID out-of-bounds access | 9.8v3.1 | 1.1% | 2023-03-21 | Fix |
| CVE-2023-1528 | Google Chrome Passwords use-after-free | 8.8v3.1 | 0.8% | 2023-03-21 | Fix |
| CVE-2023-1527 | Cross-site scripting (XSS) Generic in tsolucio/Corebos | 5.4NVD v3.1 | 0.5% | 2023-03-21 | Fix |
| CVE-2023-1462 | Vadi Corporate Information Systems DIGIKENT insecure direct object reference | 8.8v3.1 | 0.7% | 2023-03-21 | Fix |
| CVE-2023-1314 | Local privilege escalation vulnerability in cloudflared's Installer | 7.5CNA v3.1 | 0.3% | 2023-03-21 | Fix |
| CVE-2023-1306 | Rapid7 InsightCloudSec resource.db method access | 8.8v3.1 | 1.2% | 2023-03-21 | Fix |
| CVE-2023-1305 | Rapid7 InsightCloudSec box object access | 8.1v3.1 | 0.8% | 2023-03-21 | Fix |
| CVE-2023-1304 | Rapid7 InsightCloudSec getattr method access | 8.8v3.1 | 1.1% | 2023-03-21 | Fix |
| CVE-2023-1262 | Missing MAC layer security in Wi-SUN Linux Border Router | 8.2CNA v3.1 | 0.4% | 2023-03-21 | Fix |
| CVE-2023-1261 | Missing MAC layer security in Wi-SUN SDK | 8.2CNA v3.1 | 0.4% | 2023-03-21 | Fix |
| CVE-2023-1154 | Pacsrapor reflected cross-site scripting | 6.1v3.1 | 0.4% | 2023-03-21 | Fix |
| CVE-2023-1153 | Pacsrapor SQL command improper neutralization | 9.8v3.1 | 0.7% | 2023-03-21 | Fix |
| CVE-2023-0391 | MGT-COMMERCE CloudPanel administrative interface hard-coded cryptographic key | 8.1NVD v3.1 | 0.6% | 2023-03-21 | |
| CVE-2023-28429 | Pimcore has cross-site scripting vulnerability in DataObject tooltip field | 6.1CNA v3.1 | 0.5% | 2023-03-20 | Fix |
| CVE-2023-28428 | PDFio vulnerable to denial of service when opening a corrupt PDF file | 6.2CNA v3.1 | 0.2% | 2023-03-20 | Fix |
| CVE-2023-28425 | redis specially crafted MSETNX command can lead to denial of service | 5.5CNA v3.1 | 58.5% | 2023-03-20 | Fix |
| CVE-2023-28424 | Gentoo Soko package search handler SQL injection | 9.1CNA v3.1 | 1.2% | 2023-03-20 | Fix |
| CVE-2023-28118 | kaml has potential denial of service while parsing input with anchors and aliases | 7.5CNA v3.1 | 1.0% | 2023-03-20 | Fix |
| CVE-2023-27586 | CairoSVG improperly processes SVG files loaded from external resources | 9.9CNA v3.1 | 0.7% | 2023-03-20 | Fix |
| CVE-2023-27578 | Galaxy Visualizations and Pages permission check incorrect authorization | 9.1CNA v3.1 | 0.8% | 2023-03-20 | Fix |
| CVE-2023-26513 | Apache Sling Resource Merger has excessive iteration | 7.5CNA v3.1 | 1.5% | 2023-03-20 | Fix |
| CVE-2023-25795 | Feed Changer WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-03-20 | Fix |
| CVE-2023-25794 | Nooz WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-03-20 | Fix |
| CVE-2023-25782 | Service Area Postcode Checker WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-03-20 | |
| CVE-2023-25064 | WP htpasswd WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-03-20 | |
| CVE-2023-24381 | Advanced Social Pixel WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-03-20 | |
| CVE-2023-23721 | Admin Log WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-03-20 | |
| CVE-2023-23718 | Page Loading Effects WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-03-20 | Fix |
| CVE-2023-22682 | Camera slideshow WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-03-20 | |
| CVE-2023-22681 | Online Exam Software: eExamhall WordPress plugin cross-site request forgery (CSRF) | 6.5v3.1 | 0.2% | 2023-03-20 | |
| CVE-2023-22680 | No API Amazon Affiliate WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-03-20 | Fix |
| CVE-2023-22679 | WP Better Emails WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-03-20 | |
| CVE-2023-22678 | Superior FAQ WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-03-20 | |
| CVE-2023-22288 | Tribe29 Checkmk email HTML injection | 5.4v3.1 | 0.4% | 2023-03-20 | Fix |
| CVE-2023-1517 | Cross-site scripting (XSS) DOM in pimcore/pimcore | 4.8v3.1 | 0.4% | 2023-03-20 | Fix |
| CVE-2023-1515 | Cross-site scripting (XSS) Stored in pimcore/pimcore | 5.4v3.1 | 0.3% | 2023-03-20 | Fix |
| CVE-2023-1507 | SourceCodester E-Commerce System Category Name controller.php cross-site scripting | 6.1v3.1 | 0.4% | 2023-03-20 | |
| CVE-2023-1506 | SourceCodester E-Commerce System login.php SQL injection | 8.1v3.1 | 0.5% | 2023-03-20 | |
| CVE-2023-1505 | SourceCodester E-Commerce System setDiscount.php SQL injection | 8.1v3.1 | 0.6% | 2023-03-20 | |
| CVE-2023-1504 | SourceCodester Alphaware Simple E-Commerce System SQL injection | 8.1v3.1 | 0.6% | 2023-03-20 | |
| CVE-2023-1503 | SourceCodester Alphaware Simple E-Commerce System admin_index.php SQL injection | 8.1v3.1 | 0.6% | 2023-03-20 | |
| CVE-2023-1502 | SourceCodester Alphaware Simple E-Commerce System edit_customer.php SQL injection | 8.1v3.1 | 0.6% | 2023-03-20 | |
| CVE-2023-1250 | OTRS code execution through ACL creation | 7.4CNA v3.1 | 0.3% | 2023-03-20 | Fix |
| CVE-2023-1248 | OTRS improper input validation | 6.1CNA v3.1 | 0.4% | 2023-03-20 | Fix |
| CVE-2023-0940 | ProfileGrid WordPress plugin Subscriber+ arbitrary password reset | 8.8NVD v3.1 | 0.8% | 2023-03-20 | Fix |
| CVE-2023-0937 | VK All in One Expansion Unit WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.5% | 2023-03-20 | Fix |
| CVE-2023-0911 | Shortcodes Ultimate WordPress plugin Subscriber+ user Meta disclosure | 6.5NVD v3.1 | 0.7% | 2023-03-20 | Fix |
| CVE-2023-0890 | Shortcodes Ultimate WordPress plugin Subscriber+ arbitrary post access | 6.5NVD v3.1 | 0.7% | 2023-03-20 | Fix |
| CVE-2023-0876 | WP Meta SEO WordPress plugin Subscriber+ improper authorization causing arbitrary redirect | 6.1NVD v3.1 | 0.7% | 2023-03-20 | NucleiFix |
| CVE-2023-0875 | WP Meta SEO WordPress plugin Subscriber+ SQLi | 8.8NVD v3.1 | 0.9% | 2023-03-20 | Fix |
| CVE-2023-0865 | WooCommerce Multiple Customer Addresses and Shipping insecure direct object reference | 8.8NVD v3.1 | 1.2% | 2023-03-20 | Fix |
| CVE-2023-0681 | Rapid7 Nexpose Uncontrolled URL Redirect | 4.3CNA v3.1 | 0.3% | 2023-03-20 | |
| CVE-2023-0631 | Paid Memberships Pro WordPress plugin Subscriber+ SQL injection | 8.8NVD v3.1 | 60.5% | 2023-03-20 | Fix |
| CVE-2023-0630 | Slimstat Analytics WordPress plugin Subscriber+ SQL injection | 8.8NVD v3.1 | 5.1% | 2023-03-20 | NucleiExploit codeFix |
| CVE-2023-0370 | WPB Advanced FAQ WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-03-20 | |
| CVE-2023-0369 | GoToWP WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.4% | 2023-03-20 | |
| CVE-2023-0365 | React Webcam WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-03-20 | |
| CVE-2023-0364 | real.Kit WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-03-20 | Fix |
| CVE-2023-0340 | Custom Content Shortcode WordPress plugin Contributor+ LFI | 8.8NVD v3.1 | 1.0% | 2023-03-20 | |
| CVE-2023-0320 | Izmir Katip Celebi University UBYS stored cross-site scripting | 5.4v3.1 | 0.3% | 2023-03-20 | Fix |
| CVE-2023-0273 | Custom Content Shortcode WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.4% | 2023-03-20 | |
| CVE-2023-0175 | Smart Logo Showcase Lite WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-03-20 | |
| CVE-2023-0167 | GetResponse for WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-03-20 | Fix |
| CVE-2023-0145 | Saan World Clock WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-03-20 | |
| CVE-2023-28617 | GNU Org Mode OS command injection | 7.8v3.1 | 0.5% | 2023-03-19 | Fix |
| CVE-2023-26905 | Alphaware Simple E-Commerce System SQL injection | 9.8v3.1 | 0.8% | 2023-03-19 | |
| CVE-2023-26806 | Tenda W20E out-of-bounds write | 9.8v3.1 | 0.9% | 2023-03-19 | |
| CVE-2023-26805 | Tenda W20E out-of-bounds write | 9.8v3.1 | 0.9% | 2023-03-19 | |
| CVE-2023-1501 | RockOA acloudCosAction.php.SQL runAction unrestricted upload | 8.8v3.1 | 0.9% | 2023-03-19 | |
| CVE-2023-1500 | code-projects Simple Art Gallery adminHome.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-03-19 | |
| CVE-2023-1499 | code-projects Simple Art Gallery adminHome.php SQL injection | 9.8v3.1 | 0.7% | 2023-03-19 | |
| CVE-2023-1498 | code-projects Responsive Hotel Site Newsletter Log messages.php SQL injection | 9.8v3.1 | 0.9% | 2023-03-19 | Exploit code |
| CVE-2023-1497 | SourceCodester Simple and Nice Shopping Cart Script uploaderm.php unrestricted upload | 9.8v3.1 | 0.7% | 2023-03-19 | |
| CVE-2023-1496 | Cross-site scripting (XSS) Reflected in imgproxy/imgproxy | 5.4v3.1 | 1.6% | 2023-03-19 | NucleiFix |
| CVE-2023-1495 | Rebuild list queryListOfConfig SQL injection | 8.8v3.1 | 0.7% | 2023-03-19 | |
| CVE-2023-28609 | Ansible Semaphore improper authentication | 9.8v3.1 | 0.9% | 2023-03-18 | Fix |
| CVE-2023-28607 | MISP cross-site scripting | 6.1v3.1 | 0.4% | 2023-03-18 | |
| CVE-2023-28606 | MISP cross-site scripting | 6.1v3.1 | 0.4% | 2023-03-18 | |
| CVE-2023-26113 | Collection.js vulnerable to prototype pollution | 7.5v3.1 | 1.2% | 2023-03-18 | Fix |
| CVE-2023-24278 | squidex cross-site scripting | 6.1v3.1 | 2.9% | 2023-03-18 | NucleiExploit code |
| CVE-2023-1494 | IBOS ApiController.php SQL injection | 9.8v3.1 | 0.7% | 2023-03-18 | |
| CVE-2023-1493 | Max Secure Anti Virus Plus IoControlCode MaxProctetor64.sys 0x220019 denial of service | 5.5v3.1 | 0.3% | 2023-03-18 | |
| CVE-2023-1492 | Max Secure Anti Virus Plus IoControlCode MaxProc64.sys 0x220019 denial of service | 5.5v3.1 | 0.3% | 2023-03-18 | |
| CVE-2023-1491 | Max Secure Anti Virus Plus IoControlCode MaxCryptMon.sys 0x220020 access control | 5.5v3.1 | 0.3% | 2023-03-18 | |
| CVE-2023-1490 | Max Secure Anti Virus Plus IoControlCode SDActMon.sys 0x220020 access control | 5.5v3.1 | 0.3% | 2023-03-18 | |
| CVE-2023-1489 | Lespeed WiseCleaner Wise System Monitor IoControlCode WiseHDInfo64.dll 0x9C402088 access control | 7.8v3.1 | 0.5% | 2023-03-18 | |
| CVE-2023-1488 | Lespeed WiseCleaner Wise System Monitor IoControlCode WiseHDInfo64.dll 0x9C40A0E0 denial of service | 5.5v3.1 | 0.5% | 2023-03-18 | |
| CVE-2023-1487 | Lespeed WiseCleaner Wise System Monitor IoControlCode WiseHDInfo64.dll 0x9C40A0E0 denial of service | 5.5v3.1 | 0.3% | 2023-03-18 | |
| CVE-2023-1486 | Lespeed WiseCleaner Wise Force Deleter IoControlCode WiseUnlock64.sys 0x220004 access control | 7.1v3.1 | 0.5% | 2023-03-18 | |
| CVE-2023-1485 | SourceCodester Young Entrepreneur E-Negosyo System GET parameter index.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-03-18 | |
| CVE-2023-1484 | Xzjie Cms upload unrestricted upload | 9.8v3.1 | 0.8% | 2023-03-18 | |
| CVE-2023-1483 | XiaoBingBy TeaCMS getallarticleinfo SQL injection | 9.8v3.1 | 0.6% | 2023-03-18 | |
| CVE-2023-1482 | HkCms External plugin code injection | 8.8v3.1 | 0.8% | 2023-03-18 | |
| CVE-2023-1481 | SourceCodester Monitoring of Students Cyber Accounts System POST parameter cross-site scripting | 6.1v3.1 | 0.6% | 2023-03-18 | |
| CVE-2023-1480 | SourceCodester Monitoring of Students Cyber Accounts System POST parameter login.php SQL injection | 9.8v3.1 | 0.7% | 2023-03-18 | |
| CVE-2023-1479 | SourceCodester Simple Music Player save_music.php unrestricted upload | 9.8v3.1 | 0.9% | 2023-03-18 | |
| CVE-2023-28531 | OpenBSD OpenSSH improper access control | 9.8NVD v3.1 | 3.0% | 2023-03-17 | Fix |
| CVE-2023-28116 | contiki-ng buffer overflow in L2CAP due to misconfigured MTU | 8.1CNA v3.1 | 0.7% | 2023-03-17 | Fix |
| CVE-2023-28115 | Snappy vulnerable to PHAR deserialization, allowing remote code execution | 9.8CNA v3.1 | 2.8% | 2023-03-17 | Fix |
| CVE-2023-28112 | Discourse's SSRF protection missing for some FastImage requests | 5.9CNA v3.1 | 0.6% | 2023-03-17 | Fix |
| CVE-2023-28111 | Discourse vulnerable to SSRF protection bypass possible with IPv4-mapped IPv6 addresses | 5.7CNA v3.1 | 0.6% | 2023-03-17 | Fix |
| CVE-2023-28107 | Discourse vulnerable to multisite DoS by spamming backups | 4.5CNA v3.1 | 0.7% | 2023-03-17 | Fix |
| CVE-2023-27595 | Cilium eBPF filters may be temporarily removed during agent restart | 6.5CNA v3.1 | 0.7% | 2023-03-17 | Fix |
| CVE-2023-27594 | Cilium vulnerable to potential network policy bypass when routing IPv6 traffic | 4.2CNA v3.1 | 0.6% | 2023-03-17 | Fix |
| CVE-2023-27593 | cilium cilium-agent container can access the host via `hostPath` mount | 4.4CNA v3.1 | 0.2% | 2023-03-17 | Fix |
| CVE-2023-27592 | Stored XSS in Miniflux when opening a broken image due to unescaped ServerError in proxy handler | 4.8CNA v3.1 | 0.6% | 2023-03-17 | Fix |
| CVE-2023-27591 | Unauthenticated Miniflux user can bypass allowed networks check to obtain Prometheus metrics | 7.5CNA v3.1 | 0.8% | 2023-03-17 | Fix |
| CVE-2023-27253 | Netgate pfSense function restore_rrddata command injection | 8.8v3.1 | 89.5% | 2023-03-17 | MetasploitExploit code |
| CVE-2023-26040 | Discourse chat messages susceptible to cross-site scripting through chat excerpts | 6.5CNA v3.1 | 0.4% | 2023-03-17 | Fix |
| CVE-2023-25172 | Discourse vulnerable to cross-site scripting user name displayed on post | 4.4CNA v3.1 | 0.5% | 2023-03-17 | Fix |
| CVE-2023-24678 | Centralite Pearl denial of service | 7.5v3.1 | 0.6% | 2023-03-17 | |
| CVE-2023-23622 | Discourse tag topic counts information disclosure | 4.3CNA v3.1 | 0.5% | 2023-03-17 | Fix |
| CVE-2023-1475 | SourceCodester Canteen Management System createuser.php query SQL injection | 9.8v3.1 | 0.8% | 2023-03-17 | |
| CVE-2023-1474 | SourceCodester Automatic Question Paper Generator System manage_question_paper.php SQL injection | 9.8v3.1 | 0.8% | 2023-03-17 | |
| CVE-2023-1472 | RapidLoad Power-Up for Autoptimize WordPress plugin cross-site request forgery | 6.3v3.1 | 0.2% | 2023-03-17 | Fix |
| CVE-2023-1471 | WP Popup Banners WordPress plugin authenticated (Subscriber+) SQL injection | 6.5NVD v3.1 | 0.9% | 2023-03-17 | |
| CVE-2023-1470 | eCommerce Product Catalog plugin for WordPress stored cross-site scripting | 4.8v3.1 | 0.4% | 2023-03-17 | Fix |
| CVE-2023-1469 | WP Express Checkout WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.4% | 2023-03-17 | Fix |
| CVE-2023-1468 | SourceCodester Student Study Center Desk Management System Report SQL injection | 9.8v3.1 | 0.5% | 2023-03-17 | |
| CVE-2023-1467 | SourceCodester Student Study Center Desk Management System POST parameter path traversal | 9.8v3.1 | 1.1% | 2023-03-17 | |
| CVE-2023-1466 | SourceCodester Student Study Center Desk Management System view_student SQL injection | 9.8NVD v3.1 | 0.5% | 2023-03-17 | |
| CVE-2023-1464 | SourceCodester Medicine Tracker System improper authentication | 9.8v3.1 | 0.8% | 2023-03-17 | |
| CVE-2023-1463 | Authorization bypass through user-controlled key in nilsteampassnet/TeamPass | 5.4v3.1 | 0.5% | 2023-03-17 | Fix |
| CVE-2023-1461 | SourceCodester Canteen Management System createCategories.php query SQL injection | 9.8v3.1 | 0.8% | 2023-03-17 | |
| CVE-2023-1460 | SourceCodester Online Pizza Ordering System Password Change improper authentication | 9.8v3.1 | 1.0% | 2023-03-17 | |
| CVE-2023-1459 | SourceCodester Canteen Management System changeUsername.php SQL injection | 9.8v3.1 | 0.8% | 2023-03-17 | |
| CVE-2023-1455 | SourceCodester Online Pizza Ordering System Login page SQL injection | 8.1v3.1 | 0.6% | 2023-03-17 | |
| CVE-2023-1454 | JeecgBoot jeecg-boot qurestSql SQL injection | 9.8NVD v3.1 | 36.1% | 2023-03-17 | NucleiExploit code |
| CVE-2023-1453 | Watchdog Anti-Virus IoControlCode wsdk-driver.sys 0x80002008 access control | 7.1v3.1 | 0.3% | 2023-03-17 | |
| CVE-2023-1452 | GPAC load_text.c buffer overflow | 7.8v3.1 | 0.4% | 2023-03-17 | |
| CVE-2023-1451 | MP4v2 mp4track.cpp GetSampleFileOffset denial of service | 5.5v3.1 | 0.4% | 2023-03-17 | |
| CVE-2023-1450 | MP4v2 mp4trackdump.cpp DumpTrack denial of service | 5.5v3.1 | 0.4% | 2023-03-17 | |
| CVE-2023-1449 | GPAC av_parsers.c gf_av1_reset_state double free | 7.8v3.1 | 0.4% | 2023-03-17 | |
| CVE-2023-1448 | GPAC mpegts.c gf_m2ts_process_sdt heap-based overflow | 7.8v3.1 | 0.4% | 2023-03-17 | |
| CVE-2023-1447 | SourceCodester Medicine Tracker System cross-site scripting | 6.1v3.1 | 0.4% | 2023-03-17 | |
| CVE-2023-1446 | Watchdog Anti-Virus IoControlCode wsdk-driver.sys 0x80002008 denial of service | 5.5v3.1 | 0.3% | 2023-03-17 | |
| CVE-2023-1445 | Filseclab Twister Antivirus IoControlCode fildds.sys 0x80112053 denial of service | 5.5v3.1 | 0.4% | 2023-03-17 | |
| CVE-2023-1444 | Filseclab Twister Antivirus IoControlCode fildds.sys 0x8011206B denial of service | 6.5NVD v3.1 | 1.3% | 2023-03-17 | |
| CVE-2023-1443 | Filseclab Twister Antivirus IoControlCode fildds.sys 0x80112053 denial of service | 7.5v3.1 | 1.6% | 2023-03-17 | |
| CVE-2023-1442 | Meizhou Qingyunke Qykcms Update api.php unrestricted upload | 7.2v3.1 | 0.9% | 2023-03-17 | |
| CVE-2023-1441 | SourceCodester Automatic Question Paper Generator System GET parameter view_course.php SQL injection | 9.8v3.1 | 0.8% | 2023-03-17 | |
| CVE-2023-1440 | SourceCodester Automatic Question Paper Generator System GET parameter manage_user.php SQL injection | 8.8v3.1 | 0.8% | 2023-03-17 | |
| CVE-2023-1439 | SourceCodester Medicine Tracker System GET parameter view_details.php SQL injection | 9.8v3.1 | 0.8% | 2023-03-17 | |
| CVE-2023-1172 | Bookly WordPress plugin stored cross-site scripting | 6.1NVD v3.1 | 0.5% | 2023-03-17 | Fix |
| CVE-2023-1152 | SQLi in Utarit Persolus | 9.8v3.1 | 0.6% | 2023-03-17 | Fix |
| CVE-2023-0027 | Rockwell Automation Modbus TCP AOI Server could leak sensitive information | 5.3CNA v3.1 | 0.8% | 2023-03-17 | Fix |
| CVE-2023-28487 | sudo improper output encoding | 5.3v3.1 | 1.0% | 2023-03-16 | Fix |
| CVE-2023-28486 | sudo improper output encoding | 5.3v3.1 | 0.9% | 2023-03-16 | Fix |
| CVE-2023-28466 | Linux kernel null pointer dereference | 7.0v3.1 | 0.3% | 2023-03-16 | Fix |
| CVE-2023-28155 | Server-side Request forgery in Request | 6.1v3.1 | 0.7% | 2023-03-16 | Fix |
| CVE-2023-28113 | russh may use insecure Diffie-Hellman keys | 5.9CNA v3.1 | 0.6% | 2023-03-16 | Fix |
| CVE-2023-28110 | JumpServer Koko vulnerable to command injection for Kubernetes Connection | 5.7CNA v3.1 | 0.8% | 2023-03-16 | Fix |
| CVE-2023-28109 | play-with-docker play with Docker vulnerable to authorization bypass through user-controlled key | 6.5CNA v3.1 | 0.7% | 2023-03-16 | Fix |
| CVE-2023-28108 | Pimcore UUID DAO model SQL injection | 7.9CNA v3.1 | 0.9% | 2023-03-16 | Fix |
| CVE-2023-28106 | Pimcore vulnerable to cross-site scripting in UrlSlug Data type | 6.1CNA v3.1 | 0.7% | 2023-03-16 | Fix |
| CVE-2023-28105 | Go-huge-util vulnerable to path traversal when unzipping files | 8.8CNA v3.1 | 0.6% | 2023-03-16 | Fix |
| CVE-2023-28104 | silverstripe/graphql denial of service | 7.5CNA v3.1 | 1.1% | 2023-03-16 | Fix |
| CVE-2023-28101 | Flatpak metadata with ANSI control codes can cause misleading terminal output | 5.0CNA v3.1 | 0.9% | 2023-03-16 | Fix |
| CVE-2023-28100 | flatpak TIOCLINUX can send commands outside sandbox if running on a virtual console | 10.0CNA v3.1 | 0.9% | 2023-03-16 | Fix |
| CVE-2023-27875 | IBM Aspera Faspex improper access controls | 7.5CNA v3.1 | 0.6% | 2023-03-16 | Fix |
| CVE-2023-27789 | Broadcom tcpreplay reachable assertion | 7.5v3.1 | 1.5% | 2023-03-16 | Fix |
| CVE-2023-27788 | Broadcom tcpreplay reachable assertion | 7.5v3.1 | 1.4% | 2023-03-16 | Fix |
| CVE-2023-27787 | Broadcom tcpreplay null pointer dereference | 7.5v3.1 | 1.5% | 2023-03-16 | Fix |