CVE-2023 records published in March 2023

This page lists the 1,856 CVE-2023 records published in March 2023, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 12 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2023 list filters these records by severity or signal.

Critical
31817.1% of these records
Listed in CISA KEV
120.6% of these records
Reported exploited
20.1% of these records
Detection signal
542.9% of these records
Exploit code
723.9% of these records
Actionable vendor fix
1,34372.4% of these records

Figures as of 2026-10-24 13:46 UTC. Records published in March 2023 have had from about 43 months to about 44 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.

CVE-2023 records published in March 2023, newest first: records 1 to 1,000 of 1,856
CVE Summary CVSS EPSS Published Signals
CVE-2023-29141mediawiki X-Forwarded-For header allows brute-forcing autoblocked IP addresses9.8v3.11.2%2023-03-31Fix
CVE-2023-29140mediawiki improper access control5.3v3.10.4%2023-03-31Fix
CVE-2023-29139mediawiki denial of service6.5v3.10.6%2023-03-31Fix
CVE-2023-29137mediawiki information disclosure4.3v3.10.4%2023-03-31Fix
CVE-2023-28879Artifex Ghostscript out-of-bounds write9.8v3.16.3%2023-03-31Fix
CVE-2023-28877Vtex Apps-graphql unauthorized access7.5v3.10.5%2023-03-31
CVE-2023-28862lemonldap-ng Lemonldap improper authentication9.8v3.11.0%2023-03-31Fix
CVE-2023-28845Chat room membership disclosed via autocompletion in Nextcloud Talk3.5CNA v3.10.4%2023-03-31Fix
CVE-2023-28844User without download rights can download older version of that file in Nextcloud Server5.7CNA v3.10.6%2023-03-31Fix
CVE-2023-28843Improper neutralization of SQL parameter in PayPal module for PrestaShop9.8CNA v3.11.2%2023-03-31Fix
CVE-2023-28756Ruby Time component ReDoS issue5.3v3.12.5%2023-03-31Fix
CVE-2023-28755Ruby URI component ReDoS issue5.3v3.12.6%2023-03-31Fix
CVE-2023-28727Panasonic AiSEG2 improper authentication8.8NVD v3.10.4%2023-03-31Fix
CVE-2023-28726Panasonic AiSEG2 OS command injection8.8v3.10.8%2023-03-31Fix
CVE-2023-28645Secure view can be bypassed by using internal API endpoint in Nextcloud Richdocuments5.7CNA v3.10.7%2023-03-31Fix
CVE-2023-28464Linux kernel double free7.8v3.10.3%2023-03-31Fix
CVE-2023-27163Request-baskets vulnerable to server-side request forgery6.5v3.17.0%2023-03-31NucleiExploit code
CVE-2023-27162openapi-generator OpenAPI Generator vulnerable to server-side request forgery9.1v3.10.9%2023-03-31Fix
CVE-2023-27160forem server-side request forgery7.2v3.11.2%2023-03-31
CVE-2023-27159Appwrite server-side request forgery7.5v3.136.2%2023-03-31Nuclei
CVE-2023-26925D-Link DIR-882 Syslog functionality information disclosure7.5v3.10.9%2023-03-31
CVE-2023-26858Myprestamodules Frequently Asked Questions Page PrestaSHp faqs v.3.1.6 SQL injection9.8v3.11.2%2023-03-31
CVE-2023-26830Gladinet CentreStack administrative portal branding component arbitrary file upload7.2v3.11.1%2023-03-31
CVE-2023-26829Gladinet CentreStack Password Reset component authentication bypass9.8v3.11.2%2023-03-31
CVE-2023-26485Quadratic complexity may lead to a denial of service in cmark-gfm5.3CNA v3.11.0%2023-03-31Fix
CVE-2023-24824Quadratic complexity may lead to a denial of service in cmark-gfm5.3CNA v3.11.0%2023-03-31Fix
CVE-2023-23594Sato-global CL4NX Plus An authentication bypass9.8v3.11.5%2023-03-31Fix
CVE-2023-1785SourceCodester Earnings and Expense Tracker App manage_user.php SQL injection9.8v3.10.7%2023-03-31
CVE-2023-1784JeecgBoot jeecg-boot API Documentation improper authentication9.8v3.11.0%2023-03-31
CVE-2023-1777Mattermost information disclosure in linked message previews6.5CNA v3.10.5%2023-03-31Fix
CVE-2023-1776Mattermost stored XSS via SVG attachment on Boards7.3CNA v3.10.4%2023-03-31Fix
CVE-2023-1775Mattermost vulnerable to information disclosure4.3CNA v3.10.5%2023-03-31Fix
CVE-2023-1774Mattermost unauthorized email invite to a private channel4.2CNA v3.10.3%2023-03-31Fix
CVE-2023-1773RockOA Configuration file webmainConfig.php code injection9.8v3.11.6%2023-03-31Exploit code
CVE-2023-1772DataGear Diagram Type cross-site scripting4.8v3.10.6%2023-03-31
CVE-2023-1771SourceCodester Grade Point Average GPA Calculator Master.php get_scale cross-site scripting6.1v3.10.5%2023-03-31
CVE-2023-1770SourceCodester Grade Point Average GPA Calculator Master.php get_scale SQL injection9.8v3.10.7%2023-03-31
CVE-2023-1769SourceCodester Grade Point Average GPA Calculator index.php information disclosure7.5v3.10.6%2023-03-31
CVE-2023-1762Improper privilege management in thorsten/phpMyFAQ8.8v3.10.9%2023-03-31Fix
CVE-2023-1761Cross-site scripting in thorsten/phpMyFAQ5.4v3.10.5%2023-03-31Fix
CVE-2023-1760Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ4.8NVD v3.10.5%2023-03-31Fix
CVE-2023-1759Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ4.8v3.10.5%2023-03-31Fix
CVE-2023-1755Cross-site scripting (XSS) Generic in thorsten/phpMyFAQ5.4NVD v3.10.6%2023-03-31Fix
CVE-2023-1754Improper neutralization of input during web page generation in thorsten/phpMyFAQ4.7v3.10.6%2023-03-31Fix
CVE-2023-1753Weak password requirements in thorsten/phpMyFAQ9.8v3.10.7%2023-03-31Fix
CVE-2023-1747IBOS mark&op=delFromSend SQL injection8.8v3.10.7%2023-03-31
CVE-2023-1258Flow-X disclosure of sensitive information to unauthenticated users5.3CNA v3.13.9%2023-03-31Exploit codeFix
CVE-2023-1060YKM CRM reflected cross-site scripting6.1CNA v3.10.4%2023-03-31Fix
CVE-2023-0432Delta Electronics DX-2100-L1-CN web configuration service command injection9.0v3.11.1%2023-03-31
CVE-2023-0344Akuvox E11 SSH server vulnerability7.5NVD v3.10.6%2023-03-31Fix
CVE-2023-0343Akuvox E11 insufficient randomness7.5v3.10.6%2023-03-31Fix
CVE-2023-290593CX embedded malicious code7.8v3.14.4%2023-03-30Fix
CVE-2023-28935Apache UIMA DUCC: DUCC (EOL) allows RCE8.8v3.12.9%2023-03-30Fix
CVE-2023-28846Denial of service in unpoly-rails5.9CNA v3.11.0%2023-03-30Fix
CVE-2023-28835Insecure randomness for default password in Nextcloud3.5CNA v3.10.5%2023-03-30Fix
CVE-2023-28833Unrestricted filenames for logo or favicon as admin in the theming settings in Nextcloud Server2.4CNA v3.10.8%2023-03-30Fix
CVE-2023-28733Stored XSS affecting the AcyMailing plugin for Joomla6.1NVD v3.10.4%2023-03-30Fix
CVE-2023-28732Missing access control affecting the AcyMailing plugin for Joomla7.5v3.10.6%2023-03-30Fix
CVE-2023-28731Unauthenticated RCE affecting the AcyMailing plugin for Joomla9.8v3.11.8%2023-03-30Fix
CVE-2023-28647App pin of the iOS app can be bypassed in Nextcloud iOS4.4CNA v3.10.3%2023-03-30Fix
CVE-2023-28646App lockout in Nextcloud Android app can be bypassed via thirdparty apps4.4CNA v3.10.2%2023-03-30Fix
CVE-2023-28644Reference fetch can saturate the server bandwidth for 10 seconds in Nextcloud Server5.7CNA v3.10.6%2023-03-30Fix
CVE-2023-28643Potential share collision for recipients when caching is enabled in Nextcloud Server5.5CNA v3.10.8%2023-03-30Fix
CVE-2023-28462Payara Server deserialization of untrusted data9.8v3.10.9%2023-03-30Fix
CVE-2023-27538curl libcurl An authentication bypass5.5NVD v3.11.5%2023-03-30Fix
CVE-2023-27537curl libcurl A double free5.9NVD v3.11.9%2023-03-30Fix
CVE-2023-27536https://github.com/curl/curl authentication bypass5.9NVD v3.11.8%2023-03-30Fix
CVE-2023-27535curl libcurl An authentication bypass5.9NVD v3.11.8%2023-03-30Fix
CVE-2023-27534https://github.com/curl/curl A path traversal8.8NVD v3.12.4%2023-03-30Fix
CVE-2023-27533https://github.com/curl/curl special element injection8.8NVD v3.12.2%2023-03-30Fix
CVE-2023-26692Zcbs Zbbs cross-site scripting6.1v3.12.7%2023-03-30Exploit code
CVE-2023-26482Scope of workflow operations is not validated in Nextcloud Server9.1CNA v3.14.2%2023-03-30MetasploitExploit codeFix
CVE-2023-26118angular regular expression denial of service5.3v3.11.7%2023-03-30Fix
CVE-2023-26117angular vulnerable to regular expression denial of service via the $resource service5.3v3.11.7%2023-03-30Fix
CVE-2023-26116angular vulnerable to regular expression denial of service via the angular.copy utility5.3v3.11.7%2023-03-30Fix
CVE-2023-25076SNIProxy handling of wildcard backend hosts buffer overflow9.8v3.165.5%2023-03-30Fix
CVE-2023-25040Shortcodes Ultimate WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-03-30Fix
CVE-2023-25000Vault vulnerable to Cache-Timing Attacks during Seal and Unseal Operations5.0CNA v3.10.2%2023-03-30Fix
CVE-2023-24473OpenImageIO TGAInput::read_tga2_header functionality information disclosure7.5v3.10.9%2023-03-30Fix
CVE-2023-24472OpenImageIO FitsOutput::close functionality denial of service7.5v3.11.3%2023-03-30Fix
CVE-2023-24399Ocean Extra WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2023-03-30Fix
CVE-2023-23681Image Hover Effects For WPBakery Page Builder WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-03-30Fix
CVE-2023-23677GTmetrix for WordPress plugin cross-site scripting (XSS)6.1v3.10.4%2023-03-30Fix
CVE-2023-23675WP Smart Preloader WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-03-30Fix
CVE-2023-23670Fancy Comments WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-03-30Fix
CVE-2023-22845OpenImageIO TGAInput::decode_pixel functionality out-of-bounds read7.5v3.10.9%2023-03-30Fix
CVE-2023-1746Dreamer CMS file upload cross-site scripting5.4v3.10.6%2023-03-30
CVE-2023-1745KMPlayer SHFOLDER.dll uncontrolled search path7.8v3.10.4%2023-03-30
CVE-2023-1744IBOS htaccess unrestricted upload8.8v3.10.9%2023-03-30
CVE-2023-1743SourceCodester Grade Point Average GPA Calculator index.php cross-site scripting6.1v3.10.5%2023-03-30
CVE-2023-1742IBOS Report Search getlist SQL injection8.8v3.10.7%2023-03-30
CVE-2023-1741JeecgBoot jeecg-boot Sleep Command SysDictMapper.java SQL injection9.8v3.10.8%2023-03-30
CVE-2023-1740SourceCodester Air Cargo Management System GET parameter manage_user.php SQL injection9.8v3.10.7%2023-03-30
CVE-2023-1739SourceCodester Simple and Beautiful Shopping Cart System upload.php unrestricted upload9.8v3.10.7%2023-03-30
CVE-2023-1738SourceCodester Young Entrepreneur E-Negosyo System SQL injection9.8v3.10.5%2023-03-30
CVE-2023-1737SourceCodester Young Entrepreneur E-Negosyo System login.php SQL injection9.8v3.10.6%2023-03-30
CVE-2023-1736SourceCodester Young Entrepreneur E-Negosyo System SQL injection8.8v3.10.4%2023-03-30
CVE-2023-1735SourceCodester Young Entrepreneur E-Negosyo System passwordrecover.php SQL injection9.8v3.10.5%2023-03-30
CVE-2023-1734SourceCodester Young Entrepreneur E-Negosyo System unrestricted upload9.8v3.10.6%2023-03-30
CVE-2023-1725SSRF in Infoline Project Management System9.8v3.10.6%2023-03-30Fix
CVE-2023-1712deepset-ai/haystack hard-coded security constants9.8v3.10.9%2023-03-30Fix
CVE-2023-1699Rapid7 Nexpose forced browsing4.3CNA v3.10.4%2023-03-30
CVE-2023-1670Linux kernel flaw use-after-free7.8NVD v3.10.3%2023-03-30Fix
CVE-2023-1393xorg-server use-after-free7.8NVD v3.10.4%2023-03-30Fix
CVE-2023-1014Information disclosure in Vira-Investing7.5v3.10.5%2023-03-30Fix
CVE-2023-1013XSS in Vira-Investing6.1CNA v3.10.4%2023-03-30Fix
CVE-2023-0665Vault PKI Issuer Endpoint Did not Correctly Authorize Access to Issuer Metadata6.5CNA v3.10.3%2023-03-30Fix
CVE-2023-0620Vault vulnerable to SQL injection when Configuring the Microsoft SQL Database Storage Backend6.5CNA v3.10.4%2023-03-30Fix
CVE-2023-28892Malwarebytes Adwcleaner link following7.8v3.10.5%2023-03-29Fix
CVE-2023-28642AppArmor bypass with symlinked /proc in runc6.1CNA v3.10.3%2023-03-29Fix
CVE-2023-28509Rocket Software UniData weak encryption in UniRPC protocol7.5NVD v3.10.3%2023-03-29Fix
CVE-2023-28508Rocket Software UniData heap corruption in UniRPC service8.8NVD v3.10.9%2023-03-29Fix
CVE-2023-28507Rocket Software UniData memory exhaustion in LZ4 decompression in UniRPC daemon9.8NVD v3.10.9%2023-03-29Fix
CVE-2023-28506Rocket Software UniData stack buffer overflow in UniRPC service8.8NVD v3.10.9%2023-03-29Fix
CVE-2023-28505Rocket Software UniData buffer overflow in UniRPC library function8.8NVD v3.10.8%2023-03-29Fix
CVE-2023-28504Rocket Software UniData stack buffer overflow in UniRPC library function9.8NVD v3.11.4%2023-03-29Fix
CVE-2023-28503Rocket Software UniData authentication bypass in UniRPC's udadmin service9.8NVD v3.162.1%2023-03-29MetasploitExploit codeFix
CVE-2023-28502Rocket Software UniData stack buffer overflow in UniRPC's udadmin_server service9.8NVD v3.161.1%2023-03-29MetasploitExploit codeFix
CVE-2023-28501Rocket Software UniData heap buffer overflow in unirpcd9.8NVD v3.11.4%2023-03-29Fix
CVE-2023-28158Apache Archiva privilege escalation6.5CNA v3.11.2%2023-03-29Fix
CVE-2023-27489Stored cross-site scripting via SVG file upload in Kiwi TCMS7.6CNA v3.10.5%2023-03-29Fix
CVE-2023-27167supremainc BioStar 2 SQL injection6.5v3.17.5%2023-03-29Exploit codeFix
CVE-2023-26984peppermint insecure direct object reference8.1v3.10.9%2023-03-29Exploit code
CVE-2023-26982trudesk cross-site scripting5.4v3.11.0%2023-03-29Exploit codeFix
CVE-2023-26968Atrocore unrestricted file upload9.8v3.11.0%2023-03-29
CVE-2023-26292Forcepoint Cloud Security Gateway (CSG) cross-site scripting6.1CNA v3.10.4%2023-03-29Fix
CVE-2023-26291Forcepoint Cloud Security Gateway (CSG) cross-site scripting6.1CNA v3.10.4%2023-03-29Fix
CVE-2023-26290Forcepoint Cloud Security Gateway (CSG) cross-site scripting6.1CNA v3.10.4%2023-03-29Fix
CVE-2023-25809Rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc5.0CNA v3.10.3%2023-03-29Fix
CVE-2023-23861GMAce WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-03-29
CVE-2023-23355QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances), QVR6.6CNA v3.11.2%2023-03-29Fix
CVE-2023-22705Welcart e-Commerce WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-03-29Fix
CVE-2023-1704Cross-site scripting (XSS) Stored in pimcore/pimcore5.4v3.10.4%2023-03-29Fix
CVE-2023-1703Cross-site scripting (XSS) Generic in pimcore/pimcore5.4v3.10.5%2023-03-29Fix
CVE-2023-1702Cross-site scripting (XSS) Generic in pimcore/pimcore5.4v3.10.4%2023-03-29Fix
CVE-2023-1701Cross-site scripting (XSS) Reflected in pimcore/pimcore5.4v3.10.4%2023-03-29Fix
CVE-2023-1690SourceCodester Earnings and Expense Tracker App cross-site scripting6.1v3.10.4%2023-03-29
CVE-2023-1689SourceCodester Earnings and Expense Tracker App cross-site scripting6.1v3.10.4%2023-03-29
CVE-2023-1688SourceCodester Earnings and Expense Tracker App cross-site scripting6.1v3.10.4%2023-03-29
CVE-2023-1687SourceCodester Simple Task Allocation System cross-site scripting6.1v3.10.4%2023-03-29
CVE-2023-1686SourceCodester Young Entrepreneur E-Negosyo System GET parameter index.php cross-site scripting6.1v3.10.5%2023-03-29
CVE-2023-1685HadSky Installation interface index.php command injection7.2v3.14.1%2023-03-29
CVE-2023-1684HadSky unrestricted upload9.8v3.10.9%2023-03-29
CVE-2023-1683Xunrui CMS system_log.html information disclosure7.5v3.10.5%2023-03-29
CVE-2023-1682Xunrui CMS Install.txt direct request7.5v3.10.7%2023-03-29
CVE-2023-1680Xunrui CMS main.html information disclosure7.5v3.10.8%2023-03-29
CVE-2023-1663Synopsys Coverity Authenticated Resources Accessible via forced browsing5.3v3.10.4%2023-03-29Fix
CVE-2023-1656ForgeRock OpenIDM LDAP connector vulnerability7.5v3.10.3%2023-03-29Fix
CVE-2023-1652Linux kernel use-after-free7.1NVD v3.10.2%2023-03-29Fix
CVE-2023-1575Mega Main Menu WordPress plugin authenticated (Administrator+) cross-site scripting4.8v3.10.4%2023-03-29
CVE-2023-1550F5 NGINX Agent sensitive information in log files5.5CNA v3.10.2%2023-03-29Fix
CVE-2023-1509GMAce WordPress plugin cross-site request forgery to arbitrary file modification8.8v3.10.6%2023-03-29
CVE-2023-0836haproxy information disclosure7.5NVD v3.11.2%2023-03-29Fix
CVE-2023-0664QEMU execution with unnecessary privileges7.8NVD v3.10.3%2023-03-29Fix
CVE-2023-0213Local elevation of privilege in M-Files8.8CNA v3.10.2%2023-03-29Fix
CVE-2023-28718ProPump and Controls Osprey Pump Controller cross-site request forgery8.0v3.10.3%2023-03-28Fix
CVE-2023-28712ProPump and Controls Osprey Pump Controller command injection9.8v3.11.2%2023-03-28Fix
CVE-2023-28654ProPump and Controls Osprey Pump Controller hidden administrative account hard-coded credentials9.8v3.10.8%2023-03-28Fix
CVE-2023-28648ProPump and Controls Osprey Pump Controller cross-site scripting6.1NVD v3.10.8%2023-03-28Fix
CVE-2023-28637DataEase AWS redshift data source exists for remote code execution8.0CNA v3.11.3%2023-03-28Fix
CVE-2023-28631Attacker controlled data in AST nodes is not validated in comrak5.3CNA v3.11.3%2023-03-28Fix
CVE-2023-28626Quadratic runtime when parsing Markdown in comrak5.3CNA v3.11.1%2023-03-28Fix
CVE-2023-28447Cross-site scripting vulnerability in Javascript escaping in Smarty/Smarty7.1CNA v3.11.0%2023-03-28Fix
CVE-2023-28427Prototype pollution in matrix-js-sdk8.2CNA v3.11.2%2023-03-28Fix
CVE-2023-28398ProPump and Controls Osprey Pump Controller account creation improper authentication9.8v3.10.9%2023-03-28Fix
CVE-2023-28395ProPump and Controls Osprey Pump Controller session token generator vulnerability7.5v3.10.6%2023-03-28Fix
CVE-2023-28375ProPump and Controls Osprey Pump Controller information disclosure7.5v3.11.5%2023-03-28Fix
CVE-2023-28326Apache OpenMeetings missing authentication and can allow user impersonation9.8v3.11.3%2023-03-28Fix
CVE-2023-28103Prototype pollution in matrix-react-sdk8.2CNA v3.10.7%2023-03-28Fix
CVE-2023-27886ProPump and Controls Osprey Pump Controller index.php script OS command injection9.8v3.11.6%2023-03-28Fix
CVE-2023-27821databasir expression language injection9.8v3.11.5%2023-03-28
CVE-2023-27701MuYuCMS missing authorization8.1v3.10.6%2023-03-28
CVE-2023-27700MuYuCMS path traversal8.1v3.10.8%2023-03-28
CVE-2023-27394ProPump and Controls Osprey Pump Controller DataLogView.php script OS command injection9.8v3.118.2%2023-03-28Fix
CVE-2023-27247Cynet Client Agent execution with unnecessary privileges4.4v3.10.3%2023-03-28
CVE-2023-27246Mk-auth Virtual Disk arbitrary file upload8.8v3.10.8%2023-03-28
CVE-2023-27232TOTOLINK A7100RU command injection9.8v3.11.9%2023-03-28
CVE-2023-27231TOTOLINK A7100RU command injection9.8v3.12.0%2023-03-28
CVE-2023-27229TOTOLINK A7100RU command injection9.8v3.12.0%2023-03-28
CVE-2023-27008ATutor function encrypt_password in login.tmpl.php cross-site scripting6.1v3.11.5%2023-03-28Nuclei
CVE-2023-26923MuseScore out-of-bounds write7.0v3.10.4%2023-03-28Fix
CVE-2023-26356Adobe Dimension USD File Parsing out-of-bounds read information disclosure5.5CNA v3.10.3%2023-03-28Fix
CVE-2023-26355Adobe Dimension USD File Parsing out-of-bounds read information disclosure5.5CNA v3.10.3%2023-03-28Fix
CVE-2023-26354Adobe Dimension USD File Parsing out-of-bounds read information disclosure5.5CNA v3.10.3%2023-03-28Fix
CVE-2023-26353Adobe Dimension USD File Parsing out-of-bounds read information disclosure5.5CNA v3.10.4%2023-03-28Fix
CVE-2023-26352Adobe Dimension USD File Parsing out-of-bounds read information disclosure5.5CNA v3.10.3%2023-03-28Fix
CVE-2023-26351Adobe Dimension USD File Parsing out-of-bounds read information disclosure5.5CNA v3.10.3%2023-03-28Fix
CVE-2023-26350Adobe Dimension USD File Parsing out-of-bounds read information disclosure5.5CNA v3.10.3%2023-03-28Fix
CVE-2023-26349Adobe Dimension USDZ File Parsing use-after-free information disclosure5.5CNA v3.10.4%2023-03-28Fix
CVE-2023-26348Adobe Dimension USD File Parsing out-of-bounds read information disclosure5.5CNA v3.10.3%2023-03-28Fix
CVE-2023-26346Adobe Dimension USD File Parsing out-of-bounds read information disclosure5.5CNA v3.10.3%2023-03-28Fix
CVE-2023-26345Adobe Dimension USD File Parsing out-of-bounds read information disclosure5.5CNA v3.10.3%2023-03-28Fix
CVE-2023-26344Adobe Dimension USD file access of uninitialized pointer information disclosure5.5CNA v3.10.3%2023-03-28Fix
CVE-2023-26343Adobe Dimension USD File Parsing out-of-bounds read information disclosure5.5CNA v3.10.3%2023-03-28Fix
CVE-2023-26342Adobe Dimension GLB File Parsing out-of-bounds read information disclosure5.5CNA v3.10.3%2023-03-28Fix
CVE-2023-26341Adobe Dimension USD File Parsing out-of-bounds read information disclosure5.5CNA v3.10.3%2023-03-28Fix
CVE-2023-26340Adobe Dimension OBJ File Parsing out-of-bounds read information disclosure5.5CNA v3.10.3%2023-03-28Fix
CVE-2023-26339Adobe Dimension OBJ File Parsing out-of-bounds read information disclosure5.5CNA v3.10.3%2023-03-28Fix
CVE-2023-26338Adobe Dimension USD File Parsing out-of-bounds read information disclosure5.5CNA v3.10.3%2023-03-28Fix
CVE-2023-26337Adobe Dimension USDA File Parsing stack-based buffer overflow remote code execution7.8CNA v3.10.4%2023-03-28Fix
CVE-2023-26336Adobe Dimension USD File Parsing use-after-free remote code execution7.8CNA v3.10.4%2023-03-28Fix
CVE-2023-26335Adobe Dimension USDC File Parsing out-of-bounds read remote code execution7.8CNA v3.10.4%2023-03-28Fix
CVE-2023-26334Adobe Dimension USD File Parsing uninitialized pointer information disclosure7.8CNA v3.10.4%2023-03-28Fix
CVE-2023-26333Adobe Dimension USDC File Parsing out-of-bounds read remote code execution7.8CNA v3.10.4%2023-03-28Fix
CVE-2023-26332Adobe Dimension USD File Parsing out-of-bounds read information disclosure7.8CNA v3.10.3%2023-03-28Fix
CVE-2023-26331Adobe Dimension USD File Parsing out-of-bounds read information disclosure7.8CNA v3.10.3%2023-03-28Fix
CVE-2023-26330Adobe Dimension USD File Parsing out-of-bounds write remote code execution7.8CNA v3.10.3%2023-03-28Fix
CVE-2023-26329Adobe Dimension OBJ File Parsing out-of-bounds read information disclosure7.8CNA v3.10.4%2023-03-28Fix
CVE-2023-26328Adobe Dimension USD File Parsing out-of-bounds write remote code execution7.8CNA v3.10.3%2023-03-28Fix
CVE-2023-26327Adobe Dimension GLTF File Parsing out-of-bounds read information disclosure7.8CNA v3.10.3%2023-03-28Fix
CVE-2023-26071Harpaitalia Mcuboict observable discrepancy7.5v3.10.7%2023-03-28
CVE-2023-25907Adobe Dimension USD File Parsing out-of-bounds read remote code execution7.8CNA v3.10.4%2023-03-28Fix
CVE-2023-25906Adobe Dimension USD File Parsing out-of-bounds read remote code execution7.8CNA v3.10.4%2023-03-28Fix
CVE-2023-25905Adobe Dimension OBJ File Parsing out-of-bounds write remote code execution7.8CNA v3.10.3%2023-03-28Fix
CVE-2023-25904Adobe Dimension out-of-bounds read USDZ file arbitrary code execution7.8CNA v3.10.4%2023-03-28Fix
CVE-2023-25903Adobe Dimension USDZ files integer overflow or wraparound arbitrary code execution7.8CNA v3.10.4%2023-03-28Fix
CVE-2023-25902Adobe Dimension USD File Parsing out-of-bounds read remote code execution7.8CNA v3.10.4%2023-03-28Fix
CVE-2023-25901Adobe Dimension USD file improper input validation remote code execution7.8CNA v3.10.4%2023-03-28Fix
CVE-2023-25900Adobe Dimension USD File Parsing out-of-bounds read remote code execution7.8CNA v3.10.4%2023-03-28Fix
CVE-2023-25899Adobe Dimension USD File Parsing use-after-free remote code execution7.8CNA v3.10.4%2023-03-28Fix
CVE-2023-25898Adobe Dimension USD File Parsing heap-based buffer overflow remote code execution7.8CNA v3.10.4%2023-03-28Fix
CVE-2023-25897Adobe Dimension USD File Parsing heap-based buffer overflow remote code execution7.8CNA v3.10.4%2023-03-28Fix
CVE-2023-25896Adobe Dimension USD File Parsing use-after-free remote code execution7.8CNA v3.10.4%2023-03-28Fix
CVE-2023-25895Adobe Dimension USD File Parsing heap-based buffer overflow remote code execution7.8CNA v3.10.4%2023-03-28Fix
CVE-2023-25894Adobe Dimension USD File Parsing use-after-free remote code execution7.8CNA v3.10.4%2023-03-28Fix
CVE-2023-25893Adobe Dimension USD File Parsing use-after-free remote code execution7.8CNA v3.10.4%2023-03-28Fix
CVE-2023-25892Adobe Dimension USD File Parsing out-of-bounds read remote code execution7.8CNA v3.10.4%2023-03-28Fix
CVE-2023-25891Adobe Dimension USD File Parsing out-of-bounds read remote code execution7.8CNA v3.10.4%2023-03-28Fix
CVE-2023-25890Adobe Dimension USD File Parsing heap-based buffer overflow remote code execution7.8CNA v3.10.4%2023-03-28Fix
CVE-2023-25889Adobe Dimension USD File Parsing out-of-bounds read remote code execution7.8CNA v3.10.4%2023-03-28Fix
CVE-2023-25888Adobe Dimension USD File Parsing out-of-bounds read remote code execution7.8CNA v3.10.4%2023-03-28Fix
CVE-2023-25887Adobe Dimension USD File Parsing out-of-bounds read remote code execution7.8CNA v3.10.4%2023-03-28Fix
CVE-2023-25886Adobe Dimension USD File Parsing out-of-bounds read remote code execution7.8CNA v3.10.4%2023-03-28Fix
CVE-2023-25885Adobe Dimension USD File Parsing heap-based buffer overflow remote code execution7.8CNA v3.10.4%2023-03-28Fix
CVE-2023-25884Adobe Dimension GLTF File Parsing out-of-bounds read remote code execution7.8CNA v3.10.4%2023-03-28Fix
CVE-2023-25883Adobe Dimension FBX File Parsing heap-based buffer overflow remote code execution7.8CNA v3.10.4%2023-03-28Fix
CVE-2023-25882Adobe Dimension OBJ File Parsing heap-based buffer overflow remote code execution7.8CNA v3.10.4%2023-03-28Fix
CVE-2023-25881Adobe Dimension OBJ file improper input validation remote code execution7.8CNA v3.10.3%2023-03-28Fix
CVE-2023-25880Adobe Dimension GLTF File Parsing out-of-bounds write remote code execution7.8CNA v3.10.3%2023-03-28Fix
CVE-2023-25879Adobe Dimension OBJ file improper input validation remote code execution7.8CNA v3.10.3%2023-03-28Fix
CVE-2023-25722Veracode Scan Jenkins plugin vulnerable to information disclosure5.5v3.10.2%2023-03-28Fix
CVE-2023-25721Veracode Scan Jenkins plugin vulnerable to information disclosure6.5v3.10.6%2023-03-28Fix
CVE-2023-25704Interactive SVG Image Map Builder WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-03-28Fix
CVE-2023-25262Stimulsoft Designer server-side request forgery7.5v3.10.9%2023-03-28Exploit code
CVE-2023-25260Stimulsoft Designer files accessible to external parties7.5v3.10.8%2023-03-28Exploit code
CVE-2023-25197Apache Fineract: SQL injection vulnerability in certain procedure calls6.3v3.11.1%2023-03-28Fix
CVE-2023-25196Apache Fineract: SQL injection4.3v3.11.3%2023-03-28Fix
CVE-2023-25195Apache Fineract: SSRF template type vulnerability in certain authenticated users8.1v3.11.0%2023-03-28Fix
CVE-2023-24308PDF-XChange Editor improper exception handling7.8v3.10.2%2023-03-28
CVE-2023-24304IrfanView PDF.dll plugin improper input validation7.8v3.10.4%2023-03-28
CVE-2023-23330Amano Xoffice files accessible to external parties7.5v3.10.8%2023-03-28
CVE-2023-20903Cloud Foundry insufficient session expiration4.3v3.10.4%2023-03-28Fix
CVE-2023-1681Xunrui CMS test.php information disclosure7.5v3.10.8%2023-03-28
CVE-2023-1679DriverGenius IOCTL mydrivers64.sys 0x9C40A108 memory corruption7.8v3.10.3%2023-03-28
CVE-2023-1678DriverGenius IOCTL mydrivers64.sys 0x9C40A0E0 memory corruption7.8v3.10.2%2023-03-28
CVE-2023-1677DriverGenius IOCTL mydrivers64.sys 0x9c402084 denial of service5.5v3.10.2%2023-03-28
CVE-2023-1676DriverGenius IOCTL mydrivers64.sys 0x9C402088 memory corruption7.8v3.10.4%2023-03-28
CVE-2023-1675SourceCodester School Registration and Fee System GET parameter edit_stud.php SQL injection9.8v3.10.8%2023-03-28
CVE-2023-1674SourceCodester School Registration and Fee System POST parameter login.php SQL injection9.8v3.10.9%2023-03-28
CVE-2023-1518CP Plus KVMS Pro insufficiently protected credentials7.5v3.10.4%2023-03-28Fix
CVE-2023-1516RoboDK incorrect permission assignment7.8v3.10.2%2023-03-28Fix
CVE-2023-0775silabs.com GSDK bluetooth LE Invalid prepare write request command leads to denial of service6.5CNA v3.10.3%2023-03-28
CVE-2023-0466OpenSSL certificate policy check not enabled5.3NVD v3.11.8%2023-03-28Fix
CVE-2023-0465OpenSSL invalid certificate policies in leaf certificates are silently ignored5.3NVD v3.11.8%2023-03-28Fix
CVE-2023-28885Gm Mylink Infotainment System out-of-bounds write6.8v3.10.4%2023-03-27
CVE-2023-28884MISP cross-site scripting6.1v3.10.4%2023-03-27
CVE-2023-28883Cerebrate SQL injection9.8v3.10.7%2023-03-27
CVE-2023-28867Graphql-java GraphQL Java vulnerable to stack consumption7.5v3.11.1%2023-03-27Fix
CVE-2023-28866Linux kernel out-of-bounds read5.3v3.10.8%2023-03-27Fix
CVE-2023-28655Sauter EY-AS525F001 cross-site scripting5.4v3.10.3%2023-03-27Fix
CVE-2023-28652Sauter EY-AS525F001 image upload vulnerability6.5v3.10.6%2023-03-27Fix
CVE-2023-28650Sauter EY-AS525F001 with moduWeb cross-site scripting6.1v3.10.5%2023-03-27Fix
CVE-2023-28640Permissions bypass in Apiman could enable authenticated attacker to unpermitted API Key6.4CNA v3.10.3%2023-03-27Fix
CVE-2023-28638Snappier garbage collector compaction buffer overflow7.0CNA v3.10.6%2023-03-27Fix
CVE-2023-28630Thoughtworks GoCD backup failure alerts information disclosure4.2CNA v3.10.3%2023-03-27Fix
CVE-2023-28629Stored XSS possible on VSM and Job Details pages via malicious pipeline label configuration in gocd5.4CNA v3.10.5%2023-03-27Fix
CVE-2023-28628`authority-regex` returns the wrong authority in lambdaisland/uri5.4CNA v3.10.5%2023-03-27Fix
CVE-2023-28627OS command injection via GIT_PATH in pymedusa8.3CNA v3.10.8%2023-03-27Fix
CVE-2023-28597Improper trust boundary implementation for SMB in Zoom Clients8.3CNA v3.10.5%2023-03-27Fix
CVE-2023-28596Local privilege escalation in Zoom for macOS Installers7.8CNA v3.10.3%2023-03-27Fix
CVE-2023-28430OneSignal repository github action command injection8.1NVD v3.10.9%2023-03-27Fix
CVE-2023-28102Command injection in discordrb9.6NVD v3.12.6%2023-03-27Fix
CVE-2023-27927Sauter Controls EY-AS525F001 SMTP credential storage vulnerability6.5v3.10.4%2023-03-27Fix
CVE-2023-27847Xipblog PrestaShop SQL injection9.8v3.14.7%2023-03-27Nuclei
CVE-2023-27296Apache InLong: JDBC deserialization vulnerability in InLong8.8v3.11.5%2023-03-27Fix
CVE-2023-27245File Management System File Management Project cross-site scripting6.1v3.10.4%2023-03-27
CVE-2023-27241Water Billing System cross-site scripting6.1v3.10.4%2023-03-27
CVE-2023-27096opengoofy hippo4j insecure permissions6.5v3.10.6%2023-03-27
CVE-2023-26959PHPGurukul Park Ticketing Management System SQL injection9.8v3.10.8%2023-03-27
CVE-2023-26958PHPGurukul Park Ticketing Management System cross-site scripting4.8v3.10.5%2023-03-27
CVE-2023-26924Llvm buffer overflow5.5v3.10.3%2023-03-27
CVE-2023-26549Huawei EMUI vulnerability of repeated app restart due to improper parameters in the SystemUI module7.5v3.10.4%2023-03-27Fix
CVE-2023-26548Huawei HarmonyOS serialization/deserialization mismatch vulnerability in the pgmng module7.5v3.10.5%2023-03-27Fix
CVE-2023-26547Huawei HarmonyOS vulnerability of serialization/deserialization mismatch in the InputMethod module7.8v3.10.2%2023-03-27Fix
CVE-2023-26493Command injection in Cocos Engine workflow8.8NVD v3.12.9%2023-03-27Exploit codeFix
CVE-2023-25909HGiga Inc. OAKlouds arbitrary file upload9.8CNA v3.10.9%2023-03-27Fix
CVE-2023-25908Adobe Photoshop SVG file use-after-free arbitrary code execution7.8CNA v3.10.5%2023-03-27Fix
CVE-2023-25878Adobe Substance 3D Stager OBJ File Parsing out-of-bounds read information disclosure5.5CNA v3.10.3%2023-03-27Fix
CVE-2023-25877Adobe Substance 3D Stager OBJ File Parsing out-of-bounds read information disclosure5.5CNA v3.10.3%2023-03-27Fix
CVE-2023-25876Adobe Substance 3D Stager OBJ File Parsing out-of-bounds read information disclosure5.5CNA v3.10.3%2023-03-27Fix
CVE-2023-25875Adobe Substance 3D Stager OBJ File Parsing out-of-bounds read information disclosure5.5CNA v3.10.3%2023-03-27Fix
CVE-2023-25874Adobe Substance 3D Stager SVG File Parsing heap-based buffer overflow remote code execution7.8CNA v3.10.4%2023-03-27Fix
CVE-2023-25873Adobe Substance 3D Stager SVG File Parsing out-of-bounds read remote code execution7.8CNA v3.10.3%2023-03-27Fix
CVE-2023-25872Adobe Substance 3D Stager SVG File Parsing heap-based buffer overflow remote code execution7.8CNA v3.10.4%2023-03-27Fix
CVE-2023-25871Adobe Substance 3D Stager SVG File Parsing use-after-free remote code execution7.8CNA v3.10.4%2023-03-27Fix
CVE-2023-25870Adobe Substance 3D Stager SVG File Parsing out-of-bounds write remote code execution7.8CNA v3.10.3%2023-03-27Fix
CVE-2023-25869Adobe Substance 3D Stager SVG File Parsing out-of-bounds read remote code execution7.8CNA v3.10.3%2023-03-27Fix
CVE-2023-25868Adobe Substance 3D Stager SVG File Parsing heap-based buffer overflow remote code execution7.8CNA v3.10.4%2023-03-27Fix
CVE-2023-25867Adobe Substance 3D Stager PCX File Parsing memory corruption remote code execution7.8CNA v3.10.3%2023-03-27Fix
CVE-2023-25866Adobe Substance 3D Stager OBJ File Parsing out-of-bounds write remote code execution7.8CNA v3.10.3%2023-03-27Fix
CVE-2023-25865Adobe Substance 3D Stager OBJ File Parsing memory corruption remote code execution7.8CNA v3.10.3%2023-03-27Fix
CVE-2023-25864Adobe Substance 3D Stager FBX File Parsing heap-based buffer overflow remote code execution7.8CNA v3.10.4%2023-03-27Fix
CVE-2023-25863Adobe Substance 3D Stager USDC File Parsing out-of-bounds read remote code execution7.8CNA v3.10.3%2023-03-27Fix
CVE-2023-25828Authenticate remote code execution in Pluck CMS7.2v3.11.6%2023-03-27Fix
CVE-2023-25818Missing brute force protection on password reset token in Nextcloud Server5.3CNA v3.10.6%2023-03-27Fix
CVE-2023-25817Delete permissions are not saved when creating public share in Nextcloud Server3.5CNA v3.10.6%2023-03-27Fix
CVE-2023-25661Denial of service in TensorFlow6.5CNA v3.10.4%2023-03-27Fix
CVE-2023-25263Stimulsoft Designer cleartext storage of sensitive information5.5v3.10.2%2023-03-27Exploit code
CVE-2023-25261Stimulsoft Designer code injection9.8v3.11.9%2023-03-27Exploit code
CVE-2023-25018Rifartek IOT Wall reflected XSS5.4v3.10.4%2023-03-27Fix
CVE-2023-25017Rifartek IOT Wall broken access control8.1CNA v3.10.6%2023-03-27Fix
CVE-2023-24842HGiga MailSherlock broken access control5.3CNA v3.10.6%2023-03-27Fix
CVE-2023-24841HGiga MailSherlock command injection7.2CNA v3.10.9%2023-03-27Fix
CVE-2023-24840HGiga MailSherlock SQL injection7.2CNA v3.10.9%2023-03-27Fix
CVE-2023-24839HGiga MailSherlock reflected XSS6.1CNA v3.10.5%2023-03-27Fix
CVE-2023-24838HGiga PowerStation information leakage9.8v3.11.1%2023-03-27Fix
CVE-2023-24837HGiga PowerStation command injection8.8CNA v3.10.9%2023-03-27Fix
CVE-2023-24835Softnext SPAM SQR code injection7.2CNA v3.10.9%2023-03-27Fix
CVE-2023-24834WisdomGarden Tronclass ilearn broken access control6.5CNA v3.10.6%2023-03-27Fix
CVE-2023-24366rConfig An arbitrary file read6.5v3.10.7%2023-03-27
CVE-2023-24094MikroTik RouterOS out-of-bounds write7.5v3.10.8%2023-03-27
CVE-2023-22902Openfind MAIL2000 XSS5.4CNA v3.10.4%2023-03-27Fix
CVE-2023-22707Greenshift animation and page builder blocks WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-03-27Fix
CVE-2023-22300Sauter EY-AS525F001 with moduWeb cross-site scripting6.1v3.10.5%2023-03-27Fix
CVE-2023-22251Adobe Commerce incorrect authorization security feature bypass4.3CNA v3.10.6%2023-03-27Fix
CVE-2023-22250Adobe Commerce improper access control security feature bypass5.3CNA v3.11.0%2023-03-27Fix
CVE-2023-22249Adobe Commerce stored XSS arbitrary code execution4.8CNA v3.158.5%2023-03-27Fix
CVE-2023-22247Adobe Commerce XML injection Arbitrary file system read7.5CNA v3.10.9%2023-03-27Fix
CVE-2023-20860Spring Framework is vulnerable to security bypass via mvcRequestMatcher pattern mismatch7.5v3.13.5%2023-03-27Exploit codeFix
CVE-2023-1666SourceCodester Automatic Question Paper Generator System GET parameter view_class.php SQL injection9.8v3.10.7%2023-03-27
CVE-2023-1665Improper restriction of excessive authentication attempts in linagora/Twake9.8v3.10.6%2023-03-27Exploit code
CVE-2023-1655Heap-based buffer overflow in gpac/gpac7.8v3.10.5%2023-03-27Fix
CVE-2023-1654Denial of service in gpac/gpac7.8v3.10.3%2023-03-27Fix
CVE-2023-1647Improper access control in calcom/Cal.com8.8v3.10.8%2023-03-27Fix
CVE-2023-1637kernel sensitive information not cleared before reuse5.5NVD v3.10.2%2023-03-27Fix
CVE-2023-1400Modern Events Calendar lite WordPress plugin Admin+ stored XSS4.8NVD v3.10.5%2023-03-27Fix
CVE-2023-1399Keysight N6854A Geolocation Server deserialization of untrusted data9.8v3.10.8%2023-03-27Fix
CVE-2023-1380Linux kernel out-of-bounds read7.1NVD v3.116.5%2023-03-27Fix
CVE-2023-1145Adobe Delta Electronics InfraSuite Device Master deserialization of untrusted data7.8v3.10.3%2023-03-27Fix
CVE-2023-1144Delta Electronics InfraSuite Device Master Device-Gateway service incorrect authorization8.8v3.10.6%2023-03-27Fix
CVE-2023-1143Delta Electronics InfraSuite Device Master Lua scripting remote code execution8.8v3.10.8%2023-03-27Fix
CVE-2023-1142Delta Electronics InfraSuite Device Master path traversal9.8v3.11.1%2023-03-27Fix
CVE-2023-1141Delta Electronics InfraSuite Device Master command injection8.8v3.11.6%2023-03-27Fix
CVE-2023-1140Delta Electronics InfraSuite Device Master remote code execution9.8v3.11.1%2023-03-27Fix
CVE-2023-1139Adobe Delta Electronics InfraSuite Device Master deserialization of untrusted data8.8v3.11.3%2023-03-27Fix
CVE-2023-1138Delta Electronics InfraSuite Device Master gateway configuration files information disclosure7.5v3.10.6%2023-03-27Fix
CVE-2023-1137Delta Electronics InfraSuite Device Master credential storage privilege escalation8.8v3.10.6%2023-03-27Fix
CVE-2023-1136Delta Electronics InfraSuite Device Master token authentication authentication bypass7.5NVD v3.10.7%2023-03-27Fix
CVE-2023-1135Delta Electronics InfraSuite Device Master incorrect permission assignment7.8v3.10.2%2023-03-27Fix
CVE-2023-1134Adobe Delta Electronics InfraSuite Device Master path traversal8.8v3.10.7%2023-03-27Fix
CVE-2023-1133Delta Electronics InfraSuite Device Master device-status UDP service insecure deserialization9.8v3.150.1%2023-03-27MetasploitExploit codeFix
CVE-2023-1093OAuth Single Sign On - SSO (OAuth Client) WordPress plugin IdP Discard via CSRF6.5NVD v3.10.3%2023-03-27Fix
CVE-2023-1092OAuth Single Sign On SSO (OAuth Client) IdP Deletion via CSRF6.5NVD v3.10.4%2023-03-27Fix
CVE-2023-1089Coupon Zen WordPress plugin arbitrary plugin activation via CSRF4.3NVD v3.10.3%2023-03-27Fix
CVE-2023-1088WP Plugin Manager WordPress plugin arbitrary plugin activation via CSRF4.3NVD v3.10.3%2023-03-27Fix
CVE-2023-1087WC Sales Notification WordPress plugin arbitrary plugin activation via CSRF4.3NVD v3.10.3%2023-03-27Fix
CVE-2023-1086Preview Link Generator WordPress plugin arbitrary plugin activation via CSRF4.3NVD v3.10.3%2023-03-27Fix
CVE-2023-1079Linux kernel use-after-free6.8NVD v3.10.5%2023-03-27Fix
CVE-2023-1078Linux kernel out-of-bounds write7.8NVD v3.10.2%2023-03-27Fix
CVE-2023-1077Linux kernel type confusion7.0NVD v3.10.3%2023-03-27Fix
CVE-2023-1076Linux kernel incomplete filtering5.5NVD v3.10.3%2023-03-27Fix
CVE-2023-1075Linus kernel information disclosure3.3NVD v3.10.2%2023-03-27Fix
CVE-2023-1074Linux kernel A memory leak5.5NVD v3.10.2%2023-03-27Fix
CVE-2023-1073Linux kernel A memory corruption6.6NVD v3.10.4%2023-03-27Fix
CVE-2023-1069Complianz - GDPR/CCPA Cookie Consent WordPress plugin Contributor+ stored XSS5.4NVD v3.10.6%2023-03-27Fix
CVE-2023-1025Simple File List WordPress plugin Admin+ stored XSS4.8NVD v3.10.4%2023-03-27Fix
CVE-2023-0955WP Statistics WordPress plugin authenticated SQLi8.8NVD v3.10.9%2023-03-27Fix
CVE-2023-0823Cookie Notice and Compliance for GDPR / CCPA WordPress plugin Contributor+ stored XSS5.4NVD v3.10.5%2023-03-27Fix
CVE-2023-0816Formidable Forms WordPress plugin IP spoofing6.5NVD v3.10.5%2023-03-27Fix
CVE-2023-0778Podman time-of-check time-of-use (TOCTOU) race condition6.8v3.10.5%2023-03-27Fix
CVE-2023-0660Smart Slider 3 WordPress plugin Contributor+ stored XSS5.4NVD v3.10.5%2023-03-27Fix
CVE-2023-0589WP Image Carousel WordPress plugin Contributor+ stored XSS5.4NVD v3.10.4%2023-03-27
CVE-2023-0505Ever Compare WordPress plugin arbitrary plugin activation via CSRF4.3NVD v3.10.3%2023-03-27Fix
CVE-2023-0504HT Politic WordPress plugin arbitrary plugin activation via CSRF4.3NVD v3.10.3%2023-03-27Fix
CVE-2023-0503HasThemes Free WooCommerce Theme 99fy Extension cross-site request forgery4.3NVD v3.10.3%2023-03-27Fix
CVE-2023-0502WP News WordPress plugin arbitrary plugin activation via CSRF6.5NVD v3.10.3%2023-03-27Fix
CVE-2023-0501WP Insurance WordPress plugin arbitrary plugin activation via CSRF6.5NVD v3.10.3%2023-03-27Fix
CVE-2023-0500WP Film Studio WordPress plugin arbitrary plugin activation via CSRF6.5NVD v3.10.3%2023-03-27Fix
CVE-2023-0499QuickSwish WordPress plugin arbitrary plugin activation via CSRF4.3NVD v3.10.3%2023-03-27Fix
CVE-2023-0498WP Education WordPress plugin arbitrary plugin activation via CSRF4.3NVD v3.10.3%2023-03-27Fix
CVE-2023-0497HT Portfolio WordPress plugin arbitrary plugin activation via CSRF4.3NVD v3.10.3%2023-03-27Fix
CVE-2023-0496HT Event WordPress plugin arbitrary plugin activation via CSRF4.3NVD v3.10.3%2023-03-27Fix
CVE-2023-0495HT Slider For Elementor WordPress plugin arbitrary plugin activation via CSRF4.3NVD v3.10.3%2023-03-27Fix
CVE-2023-0494xorg-x11-server use-after-free7.8NVD v3.10.9%2023-03-27Fix
CVE-2023-0491Schedulicity - Easy Online Scheduling WordPress plugin Contributor+ stored XSS5.4NVD v3.10.6%2023-03-27
CVE-2023-0484The Contact Form 7 Widget For Elementor Page Builder & Gutenberg Blocks WordPress plugin before 1.1.6 does not have CSRF check when activating plugins, which could allow attackers to make logged in admins activate arbitrary plugins present on the blog via a CSRF attack4.3NVD v3.10.3%2023-03-27Fix
CVE-2023-0467WP Dark Mode WordPress plugin Subscriber+ local file inclusion4.3NVD v3.10.7%2023-03-27Fix
CVE-2023-0441Gallery Blocks with Lightbox WordPress plugin Subscriber+ arbitrary options update8.1NVD v3.10.7%2023-03-27Fix
CVE-2023-0395menu shortcode WordPress plugin Contributor+ stored XSS via shortcode5.4NVD v3.10.5%2023-03-27
CVE-2023-0336OoohBoi Steroids for Elementor WordPress plugin Subscriber+ Attachment deletion6.5NVD v3.11.0%2023-03-27Fix
CVE-2023-0335WP Shamsi WordPress plugin Subscriber+ Attachment deletion6.5NVD v3.11.0%2023-03-27
CVE-2023-0326GitLab DAST API scanner vulnerability report evidence vulnerability5.0CNA v3.10.8%2023-03-27Fix
CVE-2023-0272NEX-Forms WordPress plugin Contributor+ stored XSS5.4NVD v3.10.5%2023-03-27Fix
CVE-2023-0241pgAdmin 4 vulnerable to directory traversal6.5NVD v3.18.8%2023-03-27Fix
CVE-2023-0210Linux kernel heap-based buffer overflow7.5NVD v3.171.7%2023-03-27Fix
CVE-2023-0179kernel integer overflow7.8NVD v3.11.9%2023-03-27Exploit codeFix
CVE-2023-28859Redis-py race condition due to incomplete fix6.5v3.11.0%2023-03-26Fix
CVE-2023-28858Redis-py race condition3.7v3.11.0%2023-03-26Fix
CVE-2023-27796Ruijie Networks Rg-ew1800gx Pro command injection8.8v3.12.3%2023-03-26
CVE-2023-26802Dcnglobal Dcbi-netlog-lab path traversal9.8v3.148.7%2023-03-26NucleiEmerging Threats
CVE-2023-26801LB-LINK BL-AC1900 command injection9.8v3.169.7%2023-03-26Reported exploitedEmerging Threats
CVE-2023-26800Ruijie Networks Rg-ew1200 command injection9.8v3.11.0%2023-03-26
CVE-2023-1646IObit Malware Fighter IOCTL IMFCameraProtect.sys 0x8018E004 stack-based overflow7.8v3.10.4%2023-03-26
CVE-2023-1645IObit Malware Fighter IOCTL IMFCameraProtect.sys 0x8018E008 denial of service5.5v3.10.3%2023-03-26
CVE-2023-1644IObit Malware Fighter IOCTL IMFCameraProtect.sys 0x8018E010 denial of service5.5v3.10.3%2023-03-26
CVE-2023-1643IObit Malware Fighter IOCTL ImfHpRegFilter.sys 0x8001E040 denial of service5.5v3.10.3%2023-03-26
CVE-2023-1642IObit Malware Fighter IOCTL ObCallbackProcess.sys 0x222040 denial of service5.5v3.10.3%2023-03-26
CVE-2023-1641IObit Malware Fighter IOCTL ObCallbackProcess.sys 0x222018 denial of service5.5v3.10.3%2023-03-26
CVE-2023-1640IObit Malware Fighter IOCTL ObCallbackProcess.sys 0x222010 denial of service5.5v3.10.3%2023-03-26
CVE-2023-1639IObit Malware Fighter IOCTL ImfRegistryFilter.sys 0x8001E04C denial of service5.5v3.10.3%2023-03-26
CVE-2023-1638IObit Malware Fighter IOCTL ImfRegistryFilter.sys 0x8001E040 denial of service5.5v3.10.3%2023-03-26
CVE-2023-28437DataEase SQL injection keyword blacklist SQL injection9.8CNA v3.10.9%2023-03-25Fix
CVE-2023-27579TensorFlow has Floating Point Exception in TFLite in conv kernel7.5CNA v3.10.4%2023-03-25Fix
CVE-2023-25801TensorFlow has double free in Fractional(Max/Avg)Pool8.0CNA v3.10.2%2023-03-25Fix
CVE-2023-25676TensorFlow has null dereference on ParallelConcat with XLA7.5CNA v3.10.4%2023-03-25Fix
CVE-2023-25675TensorFlow has Segfault in Bincount with XLA7.5CNA v3.10.4%2023-03-25Fix
CVE-2023-25674TensorFlow has null pointer Error in RandomShuffle with XLA enable7.5CNA v3.10.4%2023-03-25Fix
CVE-2023-25673TensorFlow has Floating Point Exception in TensorListSplit with XLA7.5CNA v3.10.4%2023-03-25Fix
CVE-2023-25672TensorFlow has null pointer Error in LookupTableImportV27.5CNA v3.10.4%2023-03-25Fix
CVE-2023-25671TensorFlow has segmentation fault in tfg-translate7.5CNA v3.10.5%2023-03-25Fix
CVE-2023-25670TensorFlow has null pointer Error in QuantizedMatMulWithBiasAndDequantize7.5CNA v3.10.4%2023-03-25Fix
CVE-2023-25669TensorFlow has Floating Point Exception in AvgPoolGrad with XLA7.5CNA v3.10.4%2023-03-25Fix
CVE-2023-25668TensorFlow vulnerable to heap out-of-buffer read in the QuantizeAndDequantize operation9.8CNA v3.10.8%2023-03-25Fix
CVE-2023-25667TensorFlow vulnerable to segfault when opening multiframe gif6.5CNA v3.10.3%2023-03-25Fix
CVE-2023-25666TensorFlow has Floating Point Exception in AudioSpectrogram7.5CNA v3.10.4%2023-03-25Fix
CVE-2023-25665TensorFlow has null pointer Error in SparseSparseMaximum7.5CNA v3.10.4%2023-03-25Fix
CVE-2023-25664TensorFlow vulnerable to heap buffer overflow in AvgPoolGrad7.5CNA v3.10.4%2023-03-25Fix
CVE-2023-25663TensorFlow has null pointer Error in TensorArrayConcatV27.5CNA v3.10.4%2023-03-25Fix
CVE-2023-25662TensorFlow vulnerable to integer overflow in EditDistance7.5CNA v3.10.4%2023-03-25Fix
CVE-2023-25660TensorFlow vulnerable to seg fault in `tf.raw_ops.Print`7.5CNA v3.10.4%2023-03-25Fix
CVE-2023-25659TensorFlow vulnerable to out-of-bounds read in DynamicStitch7.5CNA v3.10.4%2023-03-25Fix
CVE-2023-25658TensorFlow vulnerable to out-of-bounds read in GRUBlockCellGrad7.5CNA v3.10.4%2023-03-25Fix
CVE-2023-1635Otcms apiRun.php AutoRun cross-site scripting6.1v3.10.6%2023-03-25
CVE-2023-1634Otcms URL parameter info_deal.php UseCurl server-side request forgery9.8v3.10.7%2023-03-25
CVE-2023-1631JiangMin Antivirus IOCTL kvcore.sys 0x222010 null pointer dereference5.5v3.10.3%2023-03-25
CVE-2023-1630JiangMin Antivirus IOCTL kvcore.sys 0x222000 denial of service5.5v3.10.3%2023-03-25
CVE-2023-1629JiangMin Antivirus IOCTL kvcore.sys 0x222010 memory corruption7.8v3.10.4%2023-03-25
CVE-2023-1628Jianming Antivirus IoControlCode kvcore.sys null pointer dereference5.5v3.10.3%2023-03-25
CVE-2023-1627Jianming Antivirus IoControlCode kvcore.sys denial of service5.5v3.10.3%2023-03-25
CVE-2023-1626Jianming Antivirus IoControlCode kvcore.sys memory corruption7.8v3.10.3%2023-03-25
CVE-2023-1458Ubiquiti EdgeRouter X command injection9.8v3.13.3%2023-03-25
CVE-2023-1457Ubiquiti EdgeRouter X command injection9.8v3.11.8%2023-03-25
CVE-2023-1456Ubiquiti EdgeRouter X command injection9.8v3.11.8%2023-03-25
CVE-2023-28818Veritas Netbackup IT Analytics improper signature verification5.3v3.10.2%2023-03-24Fix
CVE-2023-28686Dino insecure direct object reference7.1v3.10.7%2023-03-24Fix
CVE-2023-28448Versionize is lacking bound checks, potentially leading to out-of-bounds memory access5.7CNA v3.10.6%2023-03-24Fix
CVE-2023-28446Deno is vulnerable to interactive `run` permission prompt spoofing via improper ANSI neutralization8.8CNA v3.11.1%2023-03-24Fix
CVE-2023-28445Deno improperly handles resizable ArrayBuffer10.0CNA v3.11.0%2023-03-24Fix
CVE-2023-28444kyubisation angular-server-side-configuration environment variable detection information disclosure9.9CNA v3.10.8%2023-03-24Fix
CVE-2023-28443directus vulnerable to insertion of sensitive information into log file4.2CNA v3.10.3%2023-03-24Fix
CVE-2023-28442Geoserver for GeoNode sensitive information leak7.5CNA v3.10.6%2023-03-24Fix
CVE-2023-28441smartCARS 3 Password Stored as plain text in Error Log8.0CNA v3.10.4%2023-03-24Fix
CVE-2023-28435Dataease file upload interface does not verify permission or file type6.5CNA v3.10.5%2023-03-24Fix
CVE-2023-28152Independentsoft Jword XML external entity injection9.8v3.10.7%2023-03-24
CVE-2023-28151Independentsoft Jspreadsheet XML external entity injection9.8v3.10.8%2023-03-24
CVE-2023-28150Independentsoft Jodf XML external entity injection9.8v3.10.7%2023-03-24
CVE-2023-27242Razormist Loan Management System cross-site scripting5.4v3.10.4%2023-03-24
CVE-2023-27055AVer Ptzapp 2 path traversal7.5v3.10.7%2023-03-24
CVE-2023-27042Tenda AX3 out-of-bounds write8.8v3.10.9%2023-03-24
CVE-2023-26864Smplredirectionsmanager PrestaShop SQL injection9.8v3.11.2%2023-03-24
CVE-2023-25350Ladybirdweb Faveo Helpdesk SQL injection8.8v3.10.8%2023-03-24
CVE-2023-24625Ladybirdweb Faveo Servicedesk insecure direct object reference6.5v3.11.1%2023-03-24
CVE-2023-23149Dek-1705 Firmware command injection9.8v3.10.9%2023-03-24
CVE-2023-22812SanDisk PrivateAccess Deprecated TLS protocol versions supported7.4CNA v3.10.3%2023-03-24Fix
CVE-2023-21079Android dhd_rtt.c out-of-bounds write6.7v3.10.1%2023-03-24Fix
CVE-2023-21078Android dhd_rtt.c out-of-bounds write6.7v3.10.1%2023-03-24Fix
CVE-2023-21077Android dhd_rtt.c out-of-bounds write6.7v3.10.1%2023-03-24Fix
CVE-2023-21076Android nan.cpp out-of-bounds write6.7v3.10.1%2023-03-24Fix
CVE-2023-21075Android nan.cpp out-of-bounds write6.7v3.10.1%2023-03-24Fix
CVE-2023-21073Android dhd_rtt.c out-of-bounds write6.7v3.10.1%2023-03-24Fix
CVE-2023-21072Android dhd_rtt.c out-of-bounds write6.7v3.10.1%2023-03-24Fix
CVE-2023-21071Android dhd_msgbuf.c out-of-bounds write6.7v3.10.1%2023-03-24Fix
CVE-2023-21070Android wl_roam.c out-of-bounds write6.7v3.10.1%2023-03-24Fix
CVE-2023-21069Android wl_cfgscan.c out-of-bounds write6.7v3.10.1%2023-03-24Fix
CVE-2023-21068Android (TBD) privilege escalation7.8v3.10.1%2023-03-24Fix
CVE-2023-21067Android information disclosure7.5v3.10.3%2023-03-24Fix
CVE-2023-21065Android fdt.c out-of-bounds write6.7v3.10.1%2023-03-24Fix
CVE-2023-21064Android miscservice.cpp out-of-bounds read6.7v3.10.1%2023-03-24Fix
CVE-2023-21063Android simdata.cpp out-of-bounds read6.7v3.10.1%2023-03-24Fix
CVE-2023-21062Android imsservice.cpp out-of-bounds read6.7v3.10.1%2023-03-24Fix
CVE-2023-21061Android resource exhaustion7.5v3.10.3%2023-03-24Fix
CVE-2023-21060Android sms_PduCodec.c out-of-bounds read7.5v3.10.4%2023-03-24Fix
CVE-2023-21059Android LPP_LcsManagement.c out-of-bounds read7.5v3.10.4%2023-03-24Fix
CVE-2023-21058Android lcsm_bcm_assist.c out-of-bounds write9.8v3.10.5%2023-03-24Fix
CVE-2023-21057Android RohcPacketCommon out-of-bounds write9.8v3.10.5%2023-03-24Fix
CVE-2023-21056Android lwis_device_slc.c memory corruption6.7v3.10.1%2023-03-24Fix
CVE-2023-21055Android dit.c use-after-free6.4v3.10.1%2023-03-24Fix
CVE-2023-21054Android LPP_CommonUtil.c out-of-bounds write7.2v3.10.5%2023-03-24Fix
CVE-2023-21053Android sms_CellBroadcast.c out-of-bounds read7.5v3.10.4%2023-03-24Fix
CVE-2023-21052Android ril_external_client.cpp out-of-bounds write6.7v3.10.1%2023-03-24Fix
CVE-2023-21051Android dwc3-exynos.c out-of-bounds write6.7v3.10.1%2023-03-24Fix
CVE-2023-21050Android ExynosHWCHelper.cpp out-of-bounds write6.7v3.10.1%2023-03-24Fix
CVE-2023-21049Android camera_metadata.c out-of-bounds read4.4v3.10.1%2023-03-24Fix
CVE-2023-21048Android nan.cpp out-of-bounds read4.4v3.10.1%2023-03-24Fix
CVE-2023-21047Android aidl_utils.cc out-of-bounds read4.4v3.10.1%2023-03-24Fix
CVE-2023-21046Android aidl_utils.cc out-of-bounds read4.4v3.10.1%2023-03-24Fix
CVE-2023-21045Android use-after-free4.4v3.10.1%2023-03-24Fix
CVE-2023-21044Android VendorGraphicBufferMeta out-of-bounds read4.4v3.10.1%2023-03-24Fix
CVE-2023-21043Android (TBD) privilege escalation6.7v3.10.1%2023-03-24Fix
CVE-2023-21042Android (TBD) privilege escalation6.7v3.10.1%2023-03-24Fix
CVE-2023-21041Android param_util.c out-of-bounds write7.8v3.10.1%2023-03-24Fix
CVE-2023-21040Android bluetooth_ccc.cc out-of-bounds write7.8v3.10.1%2023-03-24Fix
CVE-2023-21039Android Dumpstate.cpp out-of-bounds read4.4v3.10.1%2023-03-24Fix
CVE-2023-21038Android cs40l2x.c out-of-bounds write6.7v3.10.1%2023-03-24Fix
CVE-2023-21036Google Android BitmapExport vulnerability5.5NVD v3.10.5%2023-03-24Exploit codeFix
CVE-2023-21035Android BackupHelper.java privilege escalation7.8v3.10.1%2023-03-24Fix
CVE-2023-21034Android SensorService.cpp privilege escalation7.8v3.10.1%2023-03-24Fix
CVE-2023-21033Android WifiManager.java denial of service5.5v3.10.1%2023-03-24Fix
CVE-2023-21032Android ufdt_convert.c out-of-bounds read4.4v3.10.1%2023-03-24Fix
CVE-2023-21031Android HWC2.cpp out-of-bounds read4.7v3.10.1%2023-03-24Fix
CVE-2023-21030Android keystore_cli_v2.cpp privilege escalation7.8v3.10.1%2023-03-24Fix
CVE-2023-21029Android missing authorization5.5v3.10.1%2023-03-24Fix
CVE-2023-21028Android ipphelper.c out-of-bounds read7.5v3.10.4%2023-03-24Fix
CVE-2023-21027Android PasspointXmlUtils.java information disclosure7.5v3.10.5%2023-03-24Fix
CVE-2023-21026Android WindowManagerService.java denial of service5.5v3.10.1%2023-03-24Fix
CVE-2023-21025Android ufdt_overlay.c out-of-bounds read4.4v3.10.1%2023-03-24Fix
CVE-2023-21024Android FallbackHome.java privilege escalation7.8v3.10.1%2023-03-24Fix
CVE-2023-21022Android Suballocation.cpp out-of-bounds write7.8v3.10.1%2023-03-24Fix
CVE-2023-21021Android WifiServiceImpl.java privilege escalation7.8v3.10.1%2023-03-24Fix
CVE-2023-21020Android main.c arbitrary code execution6.7v3.10.1%2023-03-24Fix
CVE-2023-21019Android ih264e_process.c out-of-bounds read5.5v3.10.1%2023-03-24Fix
CVE-2023-21018Android unwinding.cc out-of-bounds write6.7v3.10.1%2023-03-24Fix
CVE-2023-21017Android InstallStart.java privilege escalation7.8v3.10.1%2023-03-24Fix
CVE-2023-21016Android AccountTypePreference.java denial of service5.5v3.10.1%2023-03-24Fix
CVE-2023-21015Android several Transcode Permission Controllers insecure permissions7.8v3.10.1%2023-03-24Fix
CVE-2023-21014Android p2p_iface.cpp out-of-bounds read4.4v3.10.1%2023-03-24Fix
CVE-2023-21013Android hostapd.cpp out-of-bounds read4.4v3.10.1%2023-03-24Fix
CVE-2023-21012Android p2p_iface.cpp out-of-bounds read4.4v3.10.2%2023-03-24Fix
CVE-2023-21011Android p2p_iface.cpp out-of-bounds read4.4v3.10.1%2023-03-24Fix
CVE-2023-21010Android p2p_iface.cpp out-of-bounds read4.4v3.10.1%2023-03-24Fix
CVE-2023-21009Android p2p_iface.cpp out-of-bounds read4.4v3.10.1%2023-03-24Fix
CVE-2023-21008Android p2p_iface.cpp out-of-bounds read4.4v3.10.1%2023-03-24Fix
CVE-2023-21007Android p2p_iface.cpp out-of-bounds read4.4v3.10.1%2023-03-24Fix
CVE-2023-21006Android p2p_iface.cpp out-of-bounds read4.4v3.10.1%2023-03-24Fix
CVE-2023-21005Android several Transcode Permission Controllers insecure permissions7.8v3.10.1%2023-03-24Fix
CVE-2023-21004Android several Transcode Permission Controllers insecure permissions7.8v3.10.1%2023-03-24Fix
CVE-2023-21003Android several Transcode Permission Controllers insecure permissions7.8v3.10.1%2023-03-24Fix
CVE-2023-21002Android several Transcode Permission Controllers insecure permissions7.8v3.10.1%2023-03-24Fix
CVE-2023-21001Android NetworkProviderSettings.java privilege escalation7.8v3.10.1%2023-03-24Fix
CVE-2023-21000Android MediaCodec.cpp use-after-free7.8v3.10.1%2023-03-24Fix
CVE-2023-20999Android multiple locations denial of service5.5v3.10.1%2023-03-24Fix
CVE-2023-20998Android multiple locations denial of service5.5v3.10.1%2023-03-24Fix
CVE-2023-20997Android multiple locations denial of service5.5v3.10.1%2023-03-24Fix
CVE-2023-20996Android multiple locations denial of service5.5v3.10.1%2023-03-24Fix
CVE-2023-20995Android CustomizedSensor.cpp privilege escalation7.8v3.10.1%2023-03-24Fix
CVE-2023-20994Android ufdt_convert.c out-of-bounds write6.7v3.10.1%2023-03-24Fix
CVE-2023-20993Android SnoozeHelper.java privilege escalation7.8v3.10.1%2023-03-24Fix
CVE-2023-20992Android btm_iso_impl.h out-of-bounds read4.5v3.10.1%2023-03-24Fix
CVE-2023-20991Android ble_scanner_hci_interface.cc out-of-bounds read4.4v3.10.1%2023-03-24Fix
CVE-2023-20990Android btm_ble.cc out-of-bounds read4.4v3.10.1%2023-03-24Fix
CVE-2023-20989Android btm_ble_gap.cc out-of-bounds read4.4v3.10.1%2023-03-24Fix
CVE-2023-20988Android btm_acl.cc out-of-bounds read4.5v3.10.1%2023-03-24Fix
CVE-2023-20987Android btm_acl.cc out-of-bounds read4.5v3.10.1%2023-03-24Fix
CVE-2023-20986Android btm_ble_privacy.cc out-of-bounds read4.4v3.10.1%2023-03-24Fix
CVE-2023-20985Android bta_gatts_api.cc out-of-bounds write7.8v3.10.1%2023-03-24Fix
CVE-2023-20984Android btif_bqr.cc out-of-bounds read4.4v3.10.1%2023-03-24Fix
CVE-2023-20983Android btm_ble.cc out-of-bounds read4.4v3.10.1%2023-03-24Fix
CVE-2023-20982Android btm_acl.cc out-of-bounds read4.4v3.10.1%2023-03-24Fix
CVE-2023-20981Android btu_hcif.cc out-of-bounds read4.4v3.10.1%2023-03-24Fix
CVE-2023-20980Android btu_hcif.cc out-of-bounds read5.5v3.10.1%2023-03-24Fix
CVE-2023-20979Android bta_av_co.cc out-of-bounds read5.5v3.10.1%2023-03-24Fix
CVE-2023-20977Android btm_ble_gap.cc out-of-bounds read4.4v3.10.1%2023-03-24Fix
CVE-2023-20976Android DefaultAutofillPicker.java privilege escalation7.3v3.10.1%2023-03-24Fix
CVE-2023-20975Android privilege escalation7.8v3.10.1%2023-03-24Fix
CVE-2023-20974Android btm_ble_privacy.cc out-of-bounds read5.5v3.10.1%2023-03-24Fix
CVE-2023-20973Android btm_sec.cc out-of-bounds read5.5v3.10.1%2023-03-24Fix
CVE-2023-20972Android btm_devctl.cc out-of-bounds read5.5v3.10.1%2023-03-24Fix
CVE-2023-20971Google Android PermissionManagerServiceImpl.java privilege escalation7.8v3.10.1%2023-03-24Fix
CVE-2023-20970Android p2p_iface.cpp out-of-bounds read4.4v3.10.1%2023-03-24Fix
CVE-2023-20969Android p2p_iface.cpp out-of-bounds read4.4v3.10.1%2023-03-24Fix
CVE-2023-20968Android p2p_iface.cpp out-of-bounds read4.4v3.10.1%2023-03-24Fix
CVE-2023-20966Android inflate.c out-of-bounds write7.8v3.10.1%2023-03-24Fix
CVE-2023-20964Android MediaSessionRecord.java privilege escalation7.8v3.10.1%2023-03-24Fix
CVE-2023-20963Android Framework privilege escalation7.8v3.11.5%2023-03-24KEVExploit codeFix
CVE-2023-20962Android MediaVolumePreferenceController.java information disclosure5.5v3.10.1%2023-03-24Fix
CVE-2023-20960Android SettingsHomepageActivity.java privilege escalation8.8v3.10.2%2023-03-24Fix
CVE-2023-20959Android missing authorization7.8v3.10.1%2023-03-24Fix
CVE-2023-20958Android ttcolr.c out-of-bounds read7.1v3.10.1%2023-03-24Fix
CVE-2023-20957Android SettingsPreferenceFragment.java privilege escalation7.8v3.10.1%2023-03-24Fix
CVE-2023-20956Android C2SurfaceSyncObj.cpp out-of-bounds write4.4v3.10.1%2023-03-24Fix
CVE-2023-20955Android AppInfoDashboardFragment.java privilege escalation7.8v3.10.2%2023-03-24Exploit codeFix
CVE-2023-20954Android sdp_db.cc out-of-bounds write9.8v3.10.5%2023-03-24Fix
CVE-2023-20953Android ClipboardListener.java privilege escalation7.8v3.10.1%2023-03-24Fix
CVE-2023-20952Android a2dp_sbc.cc out-of-bounds write5.5v3.10.1%2023-03-24Fix
CVE-2023-20951Android gatt_cl.cc out-of-bounds write9.8v3.10.5%2023-03-24Fix
CVE-2023-20947Android GrantPermissionsViewModel.kt privilege escalation7.8v3.10.1%2023-03-24Fix
CVE-2023-20936Android bta_av_act.cc out-of-bounds write7.8v3.10.1%2023-03-24Fix
CVE-2023-20931Android avdt_scb_act.cc out-of-bounds write7.8v3.10.1%2023-03-24Fix
CVE-2023-20929Android HalfSheetActivity.java information disclosure5.5v3.10.1%2023-03-24Fix
CVE-2023-20926Android HeaderPrivacyIconsController.kt privilege escalation6.8v3.10.1%2023-03-24Fix
CVE-2023-20917Android ResolverActivity.java privilege escalation7.8v3.10.1%2023-03-24Fix
CVE-2023-20911Android PermissionManagerServiceImpl.java privilege escalation7.8v3.10.2%2023-03-24Exploit codeFix
CVE-2023-20910Google Android WifiNetworkSuggestionsManager.java denial of service5.5v3.10.1%2023-03-24Fix
CVE-2023-20906Android PermissionManagerService.java privilege escalation7.8v3.10.1%2023-03-24Fix
CVE-2023-1616XiaoBingBy TeaCMS Article Title cross-site scripting5.4v3.10.5%2023-03-24
CVE-2023-1583Linux kernel null pointer dereference5.5NVD v3.10.2%2023-03-24Fix
CVE-2023-1177Path traversal: \..\filename in MLflow/MLflow9.8v3.169.5%2023-03-24NucleiExploit codeFix
CVE-2023-1176Absolute path traversal in MLflow/MLflow3.3NVD v3.10.6%2023-03-24Fix
CVE-2023-28772Linux kernel buffer overflow6.7v3.10.7%2023-03-23Exploit codeFix
CVE-2023-28759Veritas NetBackup uncontrolled search path7.8v3.10.2%2023-03-23
CVE-2023-28758Veritas NetBackup improper privilege management7.1v3.10.2%2023-03-23Fix
CVE-2023-28611Omicronenergy Stationguard incorrect authorization9.8v3.10.6%2023-03-23Fix
CVE-2023-28610Omicronenergy Stationguard improper signature verification9.8v3.10.6%2023-03-23Fix
CVE-2023-28470Couchbase Server missing authentication5.3v3.10.6%2023-03-23Fix
CVE-2023-28436Tailscale SSH FreeBSD group ID handling privilege escalation5.7CNA v3.10.5%2023-03-23Fix
CVE-2023-28422Event Manager for WooCommerce WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-03-23Fix
CVE-2023-28336Moodle: Teacher can access names of users they do not have permission to access4.3NVD v3.10.7%2023-03-23Fix
CVE-2023-28335Moodle: Csrf risk in resetting all templates of a database activity8.8NVD v3.10.4%2023-03-23Fix
CVE-2023-28334Moodle: Users' name enumeration possible via IDOR on learning plans page4.3NVD v3.10.6%2023-03-23Fix
CVE-2023-28333Moodle: Pix helper potential mustache code injection risk9.8NVD v3.11.2%2023-03-23Fix
CVE-2023-28332Moodle: Algebra filter XSS when filter is misconfigured6.1NVD v3.10.6%2023-03-23Fix
CVE-2023-28331Moodle: Xss risk when outputting database activity filter data6.1NVD v3.10.7%2023-03-23Fix
CVE-2023-28330Moodle: Authenticated arbitrary file read through malformed backup file6.5NVD v3.11.2%2023-03-23Fix
CVE-2023-28329Moodle: Authenticated SQL injection via availability check8.8NVD v3.11.2%2023-03-23Fix
CVE-2023-27249swftools out-of-bounds write5.5v3.10.4%2023-03-23
CVE-2023-27135TOTOLINK A7100RU command injection9.8v3.12.0%2023-03-23
CVE-2023-27094Hippo4j privilege escalation issue8.8v3.10.6%2023-03-23
CVE-2023-27079Tenda G103 command injection7.5v3.11.9%2023-03-23
CVE-2023-27078TP-Link Tl-mr3020 A command injection9.8v3.12.5%2023-03-23
CVE-2023-27077360 D901 stack-based buffer overflow7.5v3.11.6%2023-03-23
CVE-2023-27034Joommasters Jms Blog SQL injection9.8v3.158.7%2023-03-23NucleiFix
CVE-2023-26498Samsung Exynos Modem 5123 out-of-bounds write9.8v3.121.4%2023-03-23Fix
CVE-2023-26496Samsung Exynos Modem 5123 out-of-bounds write9.8v3.121.4%2023-03-23Fix
CVE-2023-26361Adobe ColdFusion directory traversal arbitrary file system read4.9CNA v3.158.7%2023-03-23Fix
CVE-2023-26360Adobe ColdFusion deserialization of untrusted data8.6CNA v3.197.3%2023-03-23KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix
CVE-2023-26359Adobe ColdFusion deserialization of untrusted data9.8CNA v3.117.0%2023-03-23KEVEmerging ThreatsKCVFix
CVE-2023-26114code-server vulnerable to missing origin validation in WebSockets9.3v3.10.3%2023-03-23Fix
CVE-2023-26088Malwarebytes link following7.8v3.10.5%2023-03-23Fix
CVE-2023-26008Top 10 WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-03-23Fix
CVE-2023-25992CM Answers WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-03-23Fix
CVE-2023-25655baserproject basercms unrestricted file upload9.8CNA v3.11.1%2023-03-23Fix
CVE-2023-25654baserCMS File Uploader remote code execution (RCE)9.8CNA v3.11.5%2023-03-23Fix
CVE-2023-25456Klaviyo WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-03-23Fix
CVE-2023-24788NotrinosERP vulnerable to SQL injection8.8v3.13.1%2023-03-23Exploit code
CVE-2023-24655oretnom23 Simple Customer Relationship Management System SQL injection9.8v3.11.0%2023-03-23
CVE-2023-24295Softmaker Flexipdf out-of-bounds write7.8v3.10.2%2023-03-23
CVE-2023-23864Very Simple Google Maps WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-03-23Fix
CVE-2023-23728WP Flipclock WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-03-23Fix
CVE-2023-23722WP eBay Product Feeds WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-03-23Fix
CVE-2023-23707Embed Any Document Embed PDF, Word, PowerPoint and Excel Files WordPress plugin cross-site scripting5.4v3.10.4%2023-03-23Fix
CVE-2023-23650MainWP Code Snippets Extension WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-03-23Fix
CVE-2023-23192Isdecisions Userlock incorrect authorization7.2v3.11.5%2023-03-23Exploit code
CVE-2023-22716OOPSpam Anti-Spam WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-03-23Fix
CVE-2023-22715WP-CommentNavi WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-03-23Fix
CVE-2023-22712TemplatesNext ToolKit WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-03-23Fix
CVE-2023-22704teachPress WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-03-23Fix
CVE-2023-22702WPMobile.App Android and iOS Mobile Application WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-03-23Fix
CVE-2023-20861Spring Framework vulnerable to denial of service via specially crafted SpEL expression6.5v3.11.0%2023-03-23Fix
CVE-2023-20859Spring Vault vulnerable to insertion of sensitive information into a log file5.5v3.10.2%2023-03-23Fix
CVE-2023-20113Cisco SD-WAN vManage software cross-site request forgery6.5CNA v3.10.3%2023-03-23Fix
CVE-2023-20112Cisco Access Point Software Association request denial of service7.4CNA v3.10.3%2023-03-23Fix
CVE-2023-20107Cisco Adaptive Security Appliance and Firepower Threat Defense Software insufficient entropy5.3CNA v3.00.7%2023-03-23Fix
CVE-2023-20100Cisco IOS XE Software for Wireless LAN Controllers CAPWAP Join denial of service6.8CNA v3.10.8%2023-03-23Fix
CVE-2023-20097Cisco Access Point Software command injection4.6CNA v3.10.2%2023-03-23Fix
CVE-2023-20082Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches Secure Boot Bypass vulnerability6.1CNA v3.10.4%2023-03-23Fix
CVE-2023-20081Cisco IOS heap-based buffer overflow6.8CNA v3.10.7%2023-03-23Fix
CVE-2023-20080Cisco IOS and IOS XE Software IPv6 DHCP (DHCPv6) Relay and server denial of service8.6CNA v3.11.0%2023-03-23Fix
CVE-2023-20072Cisco IOS XE Software Fragmented Tunnel Protocol Packet denial of service8.6CNA v3.11.0%2023-03-23Fix
CVE-2023-20067Cisco IOS XE Software for Wireless LAN Controllers HTTP Client Profiling denial of service7.4CNA v3.10.3%2023-03-23Fix
CVE-2023-20066Cisco IOS XE Software Web UI path traversal6.5CNA v3.11.7%2023-03-23Fix
CVE-2023-20065Cisco IOS XE Software privilege escalation7.8CNA v3.10.2%2023-03-23Fix
CVE-2023-20059Cisco DNA Center information disclosure4.3CNA v3.10.4%2023-03-23Fix
CVE-2023-20056Cisco Access Point Software denial of service6.5CNA v3.10.3%2023-03-23Fix
CVE-2023-20055Cisco DNA Center privilege escalation8.0CNA v3.10.7%2023-03-23Fix
CVE-2023-20035Cisco IOS XE SD-WAN software command injection7.8CNA v3.10.2%2023-03-23Fix
CVE-2023-20029Cisco IOS XE Software privilege escalation4.4CNA v3.10.2%2023-03-23Fix
CVE-2023-20027Cisco IOS XE Software Virtual Fragmentation Reassembly denial of service8.6CNA v3.11.0%2023-03-23Fix
CVE-2023-1613Rebuild publish cross-site scripting6.1v3.10.5%2023-03-23
CVE-2023-1612Rebuild list-file SQL injection9.8v3.10.7%2023-03-23
CVE-2023-1610Rebuild list SQL injection9.8v3.10.7%2023-03-23
CVE-2023-1609Zhong Bang CRMEB Java save cross-site scripting5.4v3.10.5%2023-03-23
CVE-2023-1608Zhong Bang CRMEB Java list getAdminList SQL injection9.8v3.10.6%2023-03-23
CVE-2023-1607Novel-Plus list SQL injection8.8v3.10.7%2023-03-23
CVE-2023-1606Novel-Plus DictController.java SQL injection9.8v3.10.9%2023-03-23
CVE-2023-1605Denial of service in radareorg/radare27.5v3.11.0%2023-03-23Fix
CVE-2023-1595Novel-Plus list SQL injection7.2v3.10.9%2023-03-23
CVE-2023-1594Novel-Plus list MenuService SQL injection9.8v3.11.0%2023-03-23
CVE-2023-1593SourceCodester Automatic Question Paper Generator System cross-site scripting6.1v3.10.4%2023-03-23
CVE-2023-1592SourceCodester Automatic Question Paper Generator System GET parameter view_class.php SQL injection9.8v3.10.5%2023-03-23
CVE-2023-1591SourceCodester Automatic Question Paper Generator System SQL injection9.8v3.10.5%2023-03-23
CVE-2023-1590SourceCodester Online Tours and Travels Management System currency.php exec SQL injection9.8v3.10.8%2023-03-23
CVE-2023-1589SourceCodester Online Tours and Travels Management System approve_delete.php exec SQL injection9.8v3.10.8%2023-03-23
CVE-2023-1544Qemu: Pvrdma: Out-of-bounds read in pvrdma_ring_next_elem_read6.3NVD v3.10.3%2023-03-23Fix
CVE-2023-1513Linux kernel (KVM) improper initialization3.3NVD v3.10.2%2023-03-23Fix
CVE-2023-1410Grafana stored XSS in Graphite FunctionDescription tooltip6.2CNA v3.11.0%2023-03-23Fix
CVE-2023-1402Moodle: Course participation report shows roles the user should not see4.3NVD v3.10.7%2023-03-23Fix
CVE-2023-1289ImageMagick denial of service5.5NVD v3.10.9%2023-03-23Fix
CVE-2023-1252Linux kernel A use-after-free7.8NVD v3.10.2%2023-03-23Fix
CVE-2023-1249Linux kernel A use-after-free5.5NVD v3.10.3%2023-03-23Fix
CVE-2023-1051XSS in As Koc Web Report System6.1v3.10.4%2023-03-23Fix
CVE-2023-1050SQLi in As Koc Web Report System9.8v3.10.6%2023-03-23Fix
CVE-2023-0590Linux kernel qdisc_graft in net/sched/sch_api.c in the use-after-free4.7NVD v3.10.2%2023-03-23Fix
CVE-2023-0056haproxy resource exhaustion6.5NVD v3.11.8%2023-03-23Fix
CVE-2023-28725General Bytes Crypto Application Server unrestricted file upload9.1v3.120.6%2023-03-22Fix
CVE-2023-28708Apache Tomcat: JSESSIONID Cookie missing secure attribute in some configurations4.3v3.11.8%2023-03-22Fix
CVE-2023-28685Jenkins AbsInt a³ Plugin XML external entity Reference7.1v3.10.6%2023-03-22Fix
CVE-2023-28667Lead Generated WordPress Plugin deserialization of untrusted data9.8NVD v3.11.1%2023-03-22Fix
CVE-2023-28666InPost Gallery WordPress Plugin cross-site scripting5.4NVD v3.10.4%2023-03-22Fix
CVE-2023-28665Woo Bulk Price Update WordPress Plugin cross-site scripting5.4NVD v3.10.9%2023-03-22NucleiFix
CVE-2023-28664Meta Data and Taxonomies Filter WordPress Plugin cross-site scripting5.4NVD v3.10.4%2023-03-22Fix
CVE-2023-28663Formidable PRO2PDF WordPress Plugin SQL injection8.8NVD v3.10.9%2023-03-22Fix
CVE-2023-28662Gift Cards (Gift Vouchers and Packages) WordPress Plugin SQL injection9.8NVD v3.142.2%2023-03-22NucleiFix
CVE-2023-28661WP Popup Banners WordPress Plugin SQL injection8.8NVD v3.10.9%2023-03-22
CVE-2023-28660Events Made Easy WordPress Plugin SQL injection8.8NVD v3.10.9%2023-03-22Fix
CVE-2023-28659Waiting: One-click Countdowns WordPress Plugin SQL injection8.8NVD v3.10.9%2023-03-22
CVE-2023-28439CKEditor4 Iframe Dialog and Media Embed plugins cross-site scripting4.7CNA v3.10.7%2023-03-22Fix
CVE-2023-28438Pimcore vulnerable to improper quoting of filters in Custom Reports6.2CNA v3.10.9%2023-03-22Fix
CVE-2023-28434MinIO security feature bypass8.8CNA v3.17.9%2023-03-22KEVExploit codeKCVFix
CVE-2023-28433Minio privilege escalation on Windows via Path separator manipulation8.8CNA v3.11.0%2023-03-22Fix
CVE-2023-28432MinIO information disclosure7.5CNA v3.184.0%2023-03-22KEVNucleiEmerging ThreatsExploit codeKCVFix
CVE-2023-28431Frontier's modexp precompile is slow for even modulus7.5CNA v3.10.9%2023-03-22Fix
CVE-2023-28119Crewjam/saml vulnerable to denial of service via Deflate decompression bomb7.5CNA v3.11.0%2023-03-22Fix
CVE-2023-28117Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True`7.6CNA v3.10.6%2023-03-22Fix
CVE-2023-28114`cilium-cli` disables etcd authorization for clustermesh clusters4.8CNA v3.10.2%2023-03-22Fix
CVE-2023-28083HPE Integrated Lights-Out cross-site scripting8.3CNA v3.10.4%2023-03-22Fix
CVE-2023-28005A vulnerability in Trend Micro Endpoint Encryption Full Disk Encryption version 6.0.0.3204 and below could allow an attacker with physical access to an affected device to bypass Microsoft Windows� Secure Boot process in an attempt to execute other attacks to obtain access to the contents of the devi6.8v3.10.2%2023-03-22Fix
CVE-2023-27857Rockwell Automation ThinManager ThinServer heap-based buffer overflow7.5CNA v3.118.3%2023-03-22Fix
CVE-2023-27856Rockwell Automation ThinManager ThinServer path traversal Download7.5CNA v3.177.2%2023-03-22MetasploitFix
CVE-2023-27855Rockwell Automation ThinManager ThinServer path traversal upload9.8CNA v3.113.5%2023-03-22MetasploitFix
CVE-2023-27754VOX2MESH out-of-bounds write5.5v3.10.3%2023-03-22
CVE-2023-27638Tshirtecommerce Custom Product Designer SQL injection9.8v3.13.3%2023-03-22Nuclei
CVE-2023-27637Tshirtecommerce Custom Product Designer SQL injection9.8v3.13.3%2023-03-22Nuclei
CVE-2023-27224JC21 nginx-proxy-manager command injection9.8v3.11.2%2023-03-22
CVE-2023-27100Netgate pfSense Plus SSHGuard component missing brute-force protection9.8v3.19.8%2023-03-22Exploit codeFix
CVE-2023-27060Lightcms missing authentication9.8v3.11.3%2023-03-22
CVE-2023-27054Mirotalk P2P cross-site scripting6.1v3.10.6%2023-03-22
CVE-2023-26913Evolucare Ecs Imaging cross-site scripting6.1v3.10.5%2023-03-22
CVE-2023-26426Adobe Illustrator (Beta) has a UAF vulnerability when parsing SVG files arbitrary code execution7.8CNA v3.10.4%2023-03-22Fix
CVE-2023-26358Adobe Creative Cloud AdobeExtensionService.exe local privilege escalation8.6CNA v3.10.4%2023-03-22Fix
CVE-2023-25924IBM Security Key Lifecycle Manager improper authorization5.4CNA v3.10.4%2023-03-22Fix
CVE-2023-25862Adobe Illustrator Font Parsing out-of-bounds read information disclosure5.5CNA v3.10.3%2023-03-22Fix
CVE-2023-25861Adobe Illustrator Font Parsing out-of-bounds write remote code execution7.8CNA v3.10.3%2023-03-22Fix
CVE-2023-25860Adobe Illustrator Font Parsing out-of-bounds write remote code execution7.8CNA v3.10.3%2023-03-22Fix
CVE-2023-25859Adobe Illustrator improper input validation remote code execution7.8CNA v3.10.3%2023-03-22Fix
CVE-2023-25820Nextcloud Server and Enterprise Server missing brute force protection on password confirmation modal4.2CNA v3.10.2%2023-03-22Fix
CVE-2023-25688IBM Security Key Lifecycle Manager information disclosure4.3CNA v3.10.9%2023-03-22Fix
CVE-2023-25596Authenticated sensitive information disclosure in ClearPass Policy Manager4.5CNA v3.10.3%2023-03-22Fix
CVE-2023-25595Sensitive information disclosure in ClearPass OnGuard Ubuntu agent5.5CNA v3.10.2%2023-03-22Fix
CVE-2023-25594Aruba ClearPass Policy Manager web-based management interface privilege escalation6.3CNA v3.10.5%2023-03-22Fix
CVE-2023-25593Aruba ClearPass Policy Manager web-based management interface reflected cross-site scripting7.1CNA v3.10.5%2023-03-22Fix
CVE-2023-25592Aruba ClearPass Policy Manager web-based management interface reflected cross-site scripting7.1CNA v3.10.5%2023-03-22Fix
CVE-2023-25591Authenticated information disclosure in ClearPass Policy Manager Web-Based Management interface7.6CNA v3.10.6%2023-03-22Fix
CVE-2023-25590Local privilege escalation in ClearPass OnGuard Linux agent7.8CNA v3.10.2%2023-03-22Fix
CVE-2023-25589Aruba ClearPass Policy Manager web-based management interface missing authentication9.8CNA v3.11.0%2023-03-22Fix
CVE-2023-25069Trend Micro TXOne Networks StellarOne every version improper access control8.8v3.11.0%2023-03-22Fix
CVE-2023-22271Adobe Experience Manager AEM weak cryptography for Passwords security feature bypass5.3CNA v3.10.8%2023-03-22Fix
CVE-2023-22269Adobe Experience Manager AEM reflected XSS arbitrary code execution5.4CNA v3.10.5%2023-03-22Fix
CVE-2023-22266Adobe Experience Manager AEM URL redirection to untrusted site security feature bypass5.4CNA v3.10.5%2023-03-22Fix
CVE-2023-22265Adobe Experience Manager AEM URL redirection to untrusted site security feature bypass5.4CNA v3.10.5%2023-03-22Fix
CVE-2023-22264Adobe Experience Manager AEM URL redirection to untrusted site security feature bypass5.4CNA v3.10.5%2023-03-22Fix
CVE-2023-22263Adobe Experience Manager AEM URL redirection to untrusted site security feature bypass5.4CNA v3.10.5%2023-03-22Fix
CVE-2023-22262Adobe Experience Manager AEM URL redirection to untrusted site security feature bypass5.4CNA v3.10.5%2023-03-22Fix
CVE-2023-22261Adobe Experience Manager AEM URL redirection to untrusted site security feature bypass5.4CNA v3.10.5%2023-03-22Fix
CVE-2023-22260Adobe Experience Manager AEM URL redirection to untrusted site security feature bypass5.4CNA v3.10.5%2023-03-22Fix
CVE-2023-22259Adobe Experience Manager AEM URL redirection to untrusted site security feature bypass5.4CNA v3.10.5%2023-03-22Fix
CVE-2023-22258Adobe Experience Manager AEM URL redirection to untrusted site security feature bypass5.4CNA v3.10.5%2023-03-22Fix
CVE-2023-22257Adobe Experience Manager AEM URL redirection to untrusted site security feature bypass5.4CNA v3.10.5%2023-03-22Fix
CVE-2023-22256Adobe Experience Manager AEM URL redirection to untrusted site security feature bypass5.4CNA v3.10.5%2023-03-22Fix
CVE-2023-22254Adobe Experience Manager AEM reflected XSS arbitrary code execution5.4CNA v3.10.5%2023-03-22Fix
CVE-2023-22253Adobe Experience Manager AEM reflected XSS arbitrary code execution5.4CNA v3.10.5%2023-03-22Fix
CVE-2023-22252Adobe Experience Manager AEM reflected XSS arbitrary code execution5.4CNA v3.10.5%2023-03-22Fix
CVE-2023-21616Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.5%2023-03-22Fix
CVE-2023-21615Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.5%2023-03-22Fix
CVE-2023-1578SQL injection in pimcore/pimcore8.8v3.162.8%2023-03-22Fix
CVE-2023-1573DataGear Graph Dataset cross-site scripting6.1v3.10.6%2023-03-22Fix
CVE-2023-1572DataGear plugin cross-site scripting5.4v3.10.5%2023-03-22Fix
CVE-2023-1571DataGear pagingQueryData SQL injection9.8v3.10.9%2023-03-22
CVE-2023-1570syoyo tinydng tiny_dng_loader.h __interceptor_memcpy heap-based overflow5.5v3.10.4%2023-03-22
CVE-2023-1569SourceCodester E-Commerce System cross-site scripting5.4v3.10.5%2023-03-22
CVE-2023-1568SourceCodester Student Study Center Desk Management System index.php cross-site scripting5.4v3.10.6%2023-03-22
CVE-2023-1567SourceCodester Student Study Center Desk Management System assign.php cross-site scripting6.1v3.10.6%2023-03-22
CVE-2023-1566SourceCodester Medical Certificate Generator App action.php SQL injection9.8v3.10.5%2023-03-22
CVE-2023-1565FeiFeiCMS extension tool slide_add.html cross-site scripting5.4v3.10.6%2023-03-22
CVE-2023-1564SourceCodester Air Cargo Management System GET parameter update_status.php SQL injection9.8v3.10.8%2023-03-22
CVE-2023-1563SourceCodester Student Study Center Desk Management System assign.php SQL injection9.8v3.10.8%2023-03-22
CVE-2023-1562Mattermost full name revealed via /plugins/focalboard/API/v2/users3.5CNA v3.10.5%2023-03-22
CVE-2023-1561code-projects Simple Online Hotel Reservation System add_room.php unrestricted upload9.8v3.10.8%2023-03-22
CVE-2023-1560TinyTIFF file tinytiffreader.c buffer overflow5.5v3.10.4%2023-03-22
CVE-2023-1559SourceCodester Storage Unit Rental Management System unrestricted upload7.2v3.10.9%2023-03-22
CVE-2023-1558Simple and Beautiful Shopping Cart System uploadera.php unrestricted upload9.8v3.10.7%2023-03-22
CVE-2023-1557SourceCodester E-Commerce System Username access control9.8v3.10.5%2023-03-22
CVE-2023-1556SourceCodester Judging Management System summary_results.php SQL injection9.8v3.10.7%2023-03-22
CVE-2023-1436Infinite recursion in Jettison leads to denial of service when creating a crafted JSONArray7.5NVD v3.11.0%2023-03-22Fix
CVE-2023-1370Stack exhaustion in json-smart leads to denial of service when parsing malformed JSON7.5NVD v3.11.1%2023-03-22Fix
CVE-2023-1281UAF in Linux kernel's tcindex (traffic control index filter) implementation7.8NVD v3.10.3%2023-03-22Fix
CVE-2023-1168Authenticated remote code execution in Aruba CX Switches7.2CNA v3.11.1%2023-03-22Fix
CVE-2023-0870The OpenNMS Group Meridian form can be Manipulated with cross-site request forgery (CSRF)8.1CNA v3.10.3%2023-03-22Fix
CVE-2023-0464OpenSSL Excessive Resource Usage Verifying X.509 Policy Constraints7.5NVD v3.14.0%2023-03-22Fix
CVE-2023-0386Linux Kernel improper ownership management7.8NVD v3.17.9%2023-03-22KEVExploit codeFix
CVE-2023-27984Schneider Electric IGSS Data Server (IGSSdataServer.exe) improper input validation7.8CNA v3.10.6%2023-03-21Fix
CVE-2023-27983Schneider Electric IGSS Data Server (IGSSdataServer.exe) missing authentication6.5CNA v3.10.4%2023-03-21Fix
CVE-2023-27982Schneider Electric IGSS Data Server dashboard file handling remote code execution8.8CNA v3.10.4%2023-03-21Fix
CVE-2023-27981Schneider Electric IGSS Data Server (IGSSdataServer.exe) path traversal7.8CNA v3.10.7%2023-03-21Fix
CVE-2023-27980Schneider Electric IGSS Data Server (IGSSdataServer.exe) missing authentication8.8CNA v3.10.9%2023-03-21Fix
CVE-2023-27979Schneider Electric IGSS Data Server Data Server TCP port denial of service6.5CNA v3.10.2%2023-03-21Fix
CVE-2023-27978Schneider Electric IGSS Data Server (IGSSdataServer.exe) deserialization of untrusted data7.8CNA v3.16.5%2023-03-21Fix
CVE-2023-27977Schneider Electric IGSS Data Server Data Server TCP port vulnerability6.5CNA v3.10.2%2023-03-21Fix
CVE-2023-27874IBM Aspera Faspex XML external entity injection9.9CNA v3.11.3%2023-03-21Fix
CVE-2023-27873IBM Aspera Faspex information disclosure6.5CNA v3.10.8%2023-03-21Fix
CVE-2023-27871IBM Aspera Faspex information disclosure7.5CNA v3.10.9%2023-03-21Fix
CVE-2023-27842eXtplorer insecure permissions8.8v3.12.4%2023-03-21Exploit code
CVE-2023-27570PrestaShop Eo Tags SQL injection9.8v3.10.6%2023-03-21Fix
CVE-2023-27569PrestaShop Eo Tags SQL injection9.8v3.10.9%2023-03-21
CVE-2023-27087Xuxueli xxl-job allows attacker to obtain sensitive information via the pageList parameter7.5v3.10.6%2023-03-21
CVE-2023-26497Samsung Exynos Modem 5123 out-of-bounds write9.8v3.121.4%2023-03-21Fix
CVE-2023-25923IBM Security Key Lifecycle Manager denial of service2.7CNA v3.10.7%2023-03-21Fix
CVE-2023-25689IBM Security Key Lifecycle Manager information disclosure2.7CNA v3.10.7%2023-03-21Fix
CVE-2023-25687IBM Security Key Lifecycle Manager information disclosure4.3CNA v3.10.5%2023-03-21Fix
CVE-2023-25686IBM Security Key Lifecycle Manager information disclosure6.2CNA v3.10.2%2023-03-21Fix
CVE-2023-25684IBM Security Key Lifecycle Manager SQL injection6.5CNA v3.11.0%2023-03-21Fix
CVE-2023-25134McAfee Total Protection Component Object Model registry entry vulnerability6.7v3.10.3%2023-03-21Fix
CVE-2023-24709Paradox IPR512 code injection7.5v3.144.2%2023-03-21Exploit code
CVE-2023-1545SQL injection in nilsteampassnet/TeamPass7.5v3.18.4%2023-03-21Exploit codeFix
CVE-2023-1543Insufficient session expiration in answerdev/Answer8.8v3.10.8%2023-03-21Fix
CVE-2023-1542Business Logic Errors in answerdev/Answer5.4NVD v3.10.8%2023-03-21Fix
CVE-2023-1541Business Logic Errors in answerdev/Answer3.8NVD v3.10.6%2023-03-21Fix
CVE-2023-1540Observable response discrepancy in answerdev/Answer5.3v3.10.6%2023-03-21Fix
CVE-2023-1539Improper restriction of excessive authentication attempts in answerdev/Answer5.3v3.10.6%2023-03-21Fix
CVE-2023-1538Observable timing discrepancy in answerdev/Answer5.3v3.10.6%2023-03-21Fix
CVE-2023-1537Authentication bypass by capture-replay in answerdev/Answer9.8v3.10.8%2023-03-21Fix
CVE-2023-1536Cross-site scripting (XSS) Stored in answerdev/Answer5.4NVD v3.10.5%2023-03-21Fix
CVE-2023-1535Cross-site scripting (XSS) Stored in answerdev/Answer5.4NVD v3.10.5%2023-03-21Fix
CVE-2023-1534Google Chrome ANGLE out-of-bounds read8.8v3.11.3%2023-03-21Fix
CVE-2023-1533Google Chrome WebProtect use-after-free8.8v3.10.9%2023-03-21Fix
CVE-2023-1532Google Chrome GPU Video out-of-bounds read8.8v3.11.3%2023-03-21Fix
CVE-2023-1531Google Chrome ANGLE use-after-free8.8v3.13.2%2023-03-21Fix
CVE-2023-1530Google Chrome PDF use-after-free8.8v3.10.8%2023-03-21Fix
CVE-2023-1529Google Chrome WebHID out-of-bounds access9.8v3.11.1%2023-03-21Fix
CVE-2023-1528Google Chrome Passwords use-after-free8.8v3.10.8%2023-03-21Fix
CVE-2023-1527Cross-site scripting (XSS) Generic in tsolucio/Corebos5.4NVD v3.10.5%2023-03-21Fix
CVE-2023-1462Vadi Corporate Information Systems DIGIKENT insecure direct object reference8.8v3.10.7%2023-03-21Fix
CVE-2023-1314Local privilege escalation vulnerability in cloudflared's Installer7.5CNA v3.10.3%2023-03-21Fix
CVE-2023-1306Rapid7 InsightCloudSec resource.db method access8.8v3.11.2%2023-03-21Fix
CVE-2023-1305Rapid7 InsightCloudSec box object access8.1v3.10.8%2023-03-21Fix
CVE-2023-1304Rapid7 InsightCloudSec getattr method access8.8v3.11.1%2023-03-21Fix
CVE-2023-1262Missing MAC layer security in Wi-SUN Linux Border Router8.2CNA v3.10.4%2023-03-21Fix
CVE-2023-1261Missing MAC layer security in Wi-SUN SDK8.2CNA v3.10.4%2023-03-21Fix
CVE-2023-1154Pacsrapor reflected cross-site scripting6.1v3.10.4%2023-03-21Fix
CVE-2023-1153Pacsrapor SQL command improper neutralization9.8v3.10.7%2023-03-21Fix
CVE-2023-0391MGT-COMMERCE CloudPanel administrative interface hard-coded cryptographic key8.1NVD v3.10.6%2023-03-21
CVE-2023-28429Pimcore has cross-site scripting vulnerability in DataObject tooltip field6.1CNA v3.10.5%2023-03-20Fix
CVE-2023-28428PDFio vulnerable to denial of service when opening a corrupt PDF file6.2CNA v3.10.2%2023-03-20Fix
CVE-2023-28425redis specially crafted MSETNX command can lead to denial of service5.5CNA v3.158.5%2023-03-20Fix
CVE-2023-28424Gentoo Soko package search handler SQL injection9.1CNA v3.11.2%2023-03-20Fix
CVE-2023-28118kaml has potential denial of service while parsing input with anchors and aliases7.5CNA v3.11.0%2023-03-20Fix
CVE-2023-27586CairoSVG improperly processes SVG files loaded from external resources9.9CNA v3.10.7%2023-03-20Fix
CVE-2023-27578Galaxy Visualizations and Pages permission check incorrect authorization9.1CNA v3.10.8%2023-03-20Fix
CVE-2023-26513Apache Sling Resource Merger has excessive iteration7.5CNA v3.11.5%2023-03-20Fix
CVE-2023-25795Feed Changer WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-03-20Fix
CVE-2023-25794Nooz WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-03-20Fix
CVE-2023-25782Service Area Postcode Checker WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-03-20
CVE-2023-25064WP htpasswd WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-03-20
CVE-2023-24381Advanced Social Pixel WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-03-20
CVE-2023-23721Admin Log WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-03-20
CVE-2023-23718Page Loading Effects WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-03-20Fix
CVE-2023-22682Camera slideshow WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-03-20
CVE-2023-22681Online Exam Software: eExamhall WordPress plugin cross-site request forgery (CSRF)6.5v3.10.2%2023-03-20
CVE-2023-22680No API Amazon Affiliate WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-03-20Fix
CVE-2023-22679WP Better Emails WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-03-20
CVE-2023-22678Superior FAQ WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-03-20
CVE-2023-22288Tribe29 Checkmk email HTML injection5.4v3.10.4%2023-03-20Fix
CVE-2023-1517Cross-site scripting (XSS) DOM in pimcore/pimcore4.8v3.10.4%2023-03-20Fix
CVE-2023-1515Cross-site scripting (XSS) Stored in pimcore/pimcore5.4v3.10.3%2023-03-20Fix
CVE-2023-1507SourceCodester E-Commerce System Category Name controller.php cross-site scripting6.1v3.10.4%2023-03-20
CVE-2023-1506SourceCodester E-Commerce System login.php SQL injection8.1v3.10.5%2023-03-20
CVE-2023-1505SourceCodester E-Commerce System setDiscount.php SQL injection8.1v3.10.6%2023-03-20
CVE-2023-1504SourceCodester Alphaware Simple E-Commerce System SQL injection8.1v3.10.6%2023-03-20
CVE-2023-1503SourceCodester Alphaware Simple E-Commerce System admin_index.php SQL injection8.1v3.10.6%2023-03-20
CVE-2023-1502SourceCodester Alphaware Simple E-Commerce System edit_customer.php SQL injection8.1v3.10.6%2023-03-20
CVE-2023-1250OTRS code execution through ACL creation7.4CNA v3.10.3%2023-03-20Fix
CVE-2023-1248OTRS improper input validation6.1CNA v3.10.4%2023-03-20Fix
CVE-2023-0940ProfileGrid WordPress plugin Subscriber+ arbitrary password reset8.8NVD v3.10.8%2023-03-20Fix
CVE-2023-0937VK All in One Expansion Unit WordPress plugin reflected XSS6.1NVD v3.10.5%2023-03-20Fix
CVE-2023-0911Shortcodes Ultimate WordPress plugin Subscriber+ user Meta disclosure6.5NVD v3.10.7%2023-03-20Fix
CVE-2023-0890Shortcodes Ultimate WordPress plugin Subscriber+ arbitrary post access6.5NVD v3.10.7%2023-03-20Fix
CVE-2023-0876WP Meta SEO WordPress plugin Subscriber+ improper authorization causing arbitrary redirect6.1NVD v3.10.7%2023-03-20NucleiFix
CVE-2023-0875WP Meta SEO WordPress plugin Subscriber+ SQLi8.8NVD v3.10.9%2023-03-20Fix
CVE-2023-0865WooCommerce Multiple Customer Addresses and Shipping insecure direct object reference8.8NVD v3.11.2%2023-03-20Fix
CVE-2023-0681Rapid7 Nexpose Uncontrolled URL Redirect4.3CNA v3.10.3%2023-03-20
CVE-2023-0631Paid Memberships Pro WordPress plugin Subscriber+ SQL injection8.8NVD v3.160.5%2023-03-20Fix
CVE-2023-0630Slimstat Analytics WordPress plugin Subscriber+ SQL injection8.8NVD v3.15.1%2023-03-20NucleiExploit codeFix
CVE-2023-0370WPB Advanced FAQ WordPress plugin Contributor+ stored XSS5.4NVD v3.10.5%2023-03-20
CVE-2023-0369GoToWP WordPress plugin Contributor+ stored XSS5.4NVD v3.10.4%2023-03-20
CVE-2023-0365React Webcam WordPress plugin Contributor+ stored XSS5.4NVD v3.10.5%2023-03-20
CVE-2023-0364real.Kit WordPress plugin Contributor+ stored XSS5.4NVD v3.10.5%2023-03-20Fix
CVE-2023-0340Custom Content Shortcode WordPress plugin Contributor+ LFI8.8NVD v3.11.0%2023-03-20
CVE-2023-0320Izmir Katip Celebi University UBYS stored cross-site scripting5.4v3.10.3%2023-03-20Fix
CVE-2023-0273Custom Content Shortcode WordPress plugin Contributor+ stored XSS5.4NVD v3.10.4%2023-03-20
CVE-2023-0175Smart Logo Showcase Lite WordPress plugin Contributor+ stored XSS5.4NVD v3.10.5%2023-03-20
CVE-2023-0167GetResponse for WordPress plugin Contributor+ stored XSS5.4NVD v3.10.5%2023-03-20Fix
CVE-2023-0145Saan World Clock WordPress plugin Contributor+ stored XSS5.4NVD v3.10.5%2023-03-20
CVE-2023-28617GNU Org Mode OS command injection7.8v3.10.5%2023-03-19Fix
CVE-2023-26905Alphaware Simple E-Commerce System SQL injection9.8v3.10.8%2023-03-19
CVE-2023-26806Tenda W20E out-of-bounds write9.8v3.10.9%2023-03-19
CVE-2023-26805Tenda W20E out-of-bounds write9.8v3.10.9%2023-03-19
CVE-2023-1501RockOA acloudCosAction.php.SQL runAction unrestricted upload8.8v3.10.9%2023-03-19
CVE-2023-1500code-projects Simple Art Gallery adminHome.php cross-site scripting6.1v3.10.5%2023-03-19
CVE-2023-1499code-projects Simple Art Gallery adminHome.php SQL injection9.8v3.10.7%2023-03-19
CVE-2023-1498code-projects Responsive Hotel Site Newsletter Log messages.php SQL injection9.8v3.10.9%2023-03-19Exploit code
CVE-2023-1497SourceCodester Simple and Nice Shopping Cart Script uploaderm.php unrestricted upload9.8v3.10.7%2023-03-19
CVE-2023-1496Cross-site scripting (XSS) Reflected in imgproxy/imgproxy5.4v3.11.6%2023-03-19NucleiFix
CVE-2023-1495Rebuild list queryListOfConfig SQL injection8.8v3.10.7%2023-03-19
CVE-2023-28609Ansible Semaphore improper authentication9.8v3.10.9%2023-03-18Fix
CVE-2023-28607MISP cross-site scripting6.1v3.10.4%2023-03-18
CVE-2023-28606MISP cross-site scripting6.1v3.10.4%2023-03-18
CVE-2023-26113Collection.js vulnerable to prototype pollution7.5v3.11.2%2023-03-18Fix
CVE-2023-24278squidex cross-site scripting6.1v3.12.9%2023-03-18NucleiExploit code
CVE-2023-1494IBOS ApiController.php SQL injection9.8v3.10.7%2023-03-18
CVE-2023-1493Max Secure Anti Virus Plus IoControlCode MaxProctetor64.sys 0x220019 denial of service5.5v3.10.3%2023-03-18
CVE-2023-1492Max Secure Anti Virus Plus IoControlCode MaxProc64.sys 0x220019 denial of service5.5v3.10.3%2023-03-18
CVE-2023-1491Max Secure Anti Virus Plus IoControlCode MaxCryptMon.sys 0x220020 access control5.5v3.10.3%2023-03-18
CVE-2023-1490Max Secure Anti Virus Plus IoControlCode SDActMon.sys 0x220020 access control5.5v3.10.3%2023-03-18
CVE-2023-1489Lespeed WiseCleaner Wise System Monitor IoControlCode WiseHDInfo64.dll 0x9C402088 access control7.8v3.10.5%2023-03-18
CVE-2023-1488Lespeed WiseCleaner Wise System Monitor IoControlCode WiseHDInfo64.dll 0x9C40A0E0 denial of service5.5v3.10.5%2023-03-18
CVE-2023-1487Lespeed WiseCleaner Wise System Monitor IoControlCode WiseHDInfo64.dll 0x9C40A0E0 denial of service5.5v3.10.3%2023-03-18
CVE-2023-1486Lespeed WiseCleaner Wise Force Deleter IoControlCode WiseUnlock64.sys 0x220004 access control7.1v3.10.5%2023-03-18
CVE-2023-1485SourceCodester Young Entrepreneur E-Negosyo System GET parameter index.php cross-site scripting6.1v3.10.5%2023-03-18
CVE-2023-1484Xzjie Cms upload unrestricted upload9.8v3.10.8%2023-03-18
CVE-2023-1483XiaoBingBy TeaCMS getallarticleinfo SQL injection9.8v3.10.6%2023-03-18
CVE-2023-1482HkCms External plugin code injection8.8v3.10.8%2023-03-18
CVE-2023-1481SourceCodester Monitoring of Students Cyber Accounts System POST parameter cross-site scripting6.1v3.10.6%2023-03-18
CVE-2023-1480SourceCodester Monitoring of Students Cyber Accounts System POST parameter login.php SQL injection9.8v3.10.7%2023-03-18
CVE-2023-1479SourceCodester Simple Music Player save_music.php unrestricted upload9.8v3.10.9%2023-03-18
CVE-2023-28531OpenBSD OpenSSH improper access control9.8NVD v3.13.0%2023-03-17Fix
CVE-2023-28116contiki-ng buffer overflow in L2CAP due to misconfigured MTU8.1CNA v3.10.7%2023-03-17Fix
CVE-2023-28115Snappy vulnerable to PHAR deserialization, allowing remote code execution9.8CNA v3.12.8%2023-03-17Fix
CVE-2023-28112Discourse's SSRF protection missing for some FastImage requests5.9CNA v3.10.6%2023-03-17Fix
CVE-2023-28111Discourse vulnerable to SSRF protection bypass possible with IPv4-mapped IPv6 addresses5.7CNA v3.10.6%2023-03-17Fix
CVE-2023-28107Discourse vulnerable to multisite DoS by spamming backups4.5CNA v3.10.7%2023-03-17Fix
CVE-2023-27595Cilium eBPF filters may be temporarily removed during agent restart6.5CNA v3.10.7%2023-03-17Fix
CVE-2023-27594Cilium vulnerable to potential network policy bypass when routing IPv6 traffic4.2CNA v3.10.6%2023-03-17Fix
CVE-2023-27593cilium cilium-agent container can access the host via `hostPath` mount4.4CNA v3.10.2%2023-03-17Fix
CVE-2023-27592Stored XSS in Miniflux when opening a broken image due to unescaped ServerError in proxy handler4.8CNA v3.10.6%2023-03-17Fix
CVE-2023-27591Unauthenticated Miniflux user can bypass allowed networks check to obtain Prometheus metrics7.5CNA v3.10.8%2023-03-17Fix
CVE-2023-27253Netgate pfSense function restore_rrddata command injection8.8v3.189.5%2023-03-17MetasploitExploit code
CVE-2023-26040Discourse chat messages susceptible to cross-site scripting through chat excerpts6.5CNA v3.10.4%2023-03-17Fix
CVE-2023-25172Discourse vulnerable to cross-site scripting user name displayed on post4.4CNA v3.10.5%2023-03-17Fix
CVE-2023-24678Centralite Pearl denial of service7.5v3.10.6%2023-03-17
CVE-2023-23622Discourse tag topic counts information disclosure4.3CNA v3.10.5%2023-03-17Fix
CVE-2023-1475SourceCodester Canteen Management System createuser.php query SQL injection9.8v3.10.8%2023-03-17
CVE-2023-1474SourceCodester Automatic Question Paper Generator System manage_question_paper.php SQL injection9.8v3.10.8%2023-03-17
CVE-2023-1472RapidLoad Power-Up for Autoptimize WordPress plugin cross-site request forgery6.3v3.10.2%2023-03-17Fix
CVE-2023-1471WP Popup Banners WordPress plugin authenticated (Subscriber+) SQL injection6.5NVD v3.10.9%2023-03-17
CVE-2023-1470eCommerce Product Catalog plugin for WordPress stored cross-site scripting4.8v3.10.4%2023-03-17Fix
CVE-2023-1469WP Express Checkout WordPress plugin stored cross-site scripting4.8v3.10.4%2023-03-17Fix
CVE-2023-1468SourceCodester Student Study Center Desk Management System Report SQL injection9.8v3.10.5%2023-03-17
CVE-2023-1467SourceCodester Student Study Center Desk Management System POST parameter path traversal9.8v3.11.1%2023-03-17
CVE-2023-1466SourceCodester Student Study Center Desk Management System view_student SQL injection9.8NVD v3.10.5%2023-03-17
CVE-2023-1464SourceCodester Medicine Tracker System improper authentication9.8v3.10.8%2023-03-17
CVE-2023-1463Authorization bypass through user-controlled key in nilsteampassnet/TeamPass5.4v3.10.5%2023-03-17Fix
CVE-2023-1461SourceCodester Canteen Management System createCategories.php query SQL injection9.8v3.10.8%2023-03-17
CVE-2023-1460SourceCodester Online Pizza Ordering System Password Change improper authentication9.8v3.11.0%2023-03-17
CVE-2023-1459SourceCodester Canteen Management System changeUsername.php SQL injection9.8v3.10.8%2023-03-17
CVE-2023-1455SourceCodester Online Pizza Ordering System Login page SQL injection8.1v3.10.6%2023-03-17
CVE-2023-1454JeecgBoot jeecg-boot qurestSql SQL injection9.8NVD v3.136.1%2023-03-17NucleiExploit code
CVE-2023-1453Watchdog Anti-Virus IoControlCode wsdk-driver.sys 0x80002008 access control7.1v3.10.3%2023-03-17
CVE-2023-1452GPAC load_text.c buffer overflow7.8v3.10.4%2023-03-17
CVE-2023-1451MP4v2 mp4track.cpp GetSampleFileOffset denial of service5.5v3.10.4%2023-03-17
CVE-2023-1450MP4v2 mp4trackdump.cpp DumpTrack denial of service5.5v3.10.4%2023-03-17
CVE-2023-1449GPAC av_parsers.c gf_av1_reset_state double free7.8v3.10.4%2023-03-17
CVE-2023-1448GPAC mpegts.c gf_m2ts_process_sdt heap-based overflow7.8v3.10.4%2023-03-17
CVE-2023-1447SourceCodester Medicine Tracker System cross-site scripting6.1v3.10.4%2023-03-17
CVE-2023-1446Watchdog Anti-Virus IoControlCode wsdk-driver.sys 0x80002008 denial of service5.5v3.10.3%2023-03-17
CVE-2023-1445Filseclab Twister Antivirus IoControlCode fildds.sys 0x80112053 denial of service5.5v3.10.4%2023-03-17
CVE-2023-1444Filseclab Twister Antivirus IoControlCode fildds.sys 0x8011206B denial of service6.5NVD v3.11.3%2023-03-17
CVE-2023-1443Filseclab Twister Antivirus IoControlCode fildds.sys 0x80112053 denial of service7.5v3.11.6%2023-03-17
CVE-2023-1442Meizhou Qingyunke Qykcms Update api.php unrestricted upload7.2v3.10.9%2023-03-17
CVE-2023-1441SourceCodester Automatic Question Paper Generator System GET parameter view_course.php SQL injection9.8v3.10.8%2023-03-17
CVE-2023-1440SourceCodester Automatic Question Paper Generator System GET parameter manage_user.php SQL injection8.8v3.10.8%2023-03-17
CVE-2023-1439SourceCodester Medicine Tracker System GET parameter view_details.php SQL injection9.8v3.10.8%2023-03-17
CVE-2023-1172Bookly WordPress plugin stored cross-site scripting6.1NVD v3.10.5%2023-03-17Fix
CVE-2023-1152SQLi in Utarit Persolus9.8v3.10.6%2023-03-17Fix
CVE-2023-0027Rockwell Automation Modbus TCP AOI Server could leak sensitive information5.3CNA v3.10.8%2023-03-17Fix
CVE-2023-28487sudo improper output encoding5.3v3.11.0%2023-03-16Fix
CVE-2023-28486sudo improper output encoding5.3v3.10.9%2023-03-16Fix
CVE-2023-28466Linux kernel null pointer dereference7.0v3.10.3%2023-03-16Fix
CVE-2023-28155Server-side Request forgery in Request6.1v3.10.7%2023-03-16Fix
CVE-2023-28113russh may use insecure Diffie-Hellman keys5.9CNA v3.10.6%2023-03-16Fix
CVE-2023-28110JumpServer Koko vulnerable to command injection for Kubernetes Connection5.7CNA v3.10.8%2023-03-16Fix
CVE-2023-28109play-with-docker play with Docker vulnerable to authorization bypass through user-controlled key6.5CNA v3.10.7%2023-03-16Fix
CVE-2023-28108Pimcore UUID DAO model SQL injection7.9CNA v3.10.9%2023-03-16Fix
CVE-2023-28106Pimcore vulnerable to cross-site scripting in UrlSlug Data type6.1CNA v3.10.7%2023-03-16Fix
CVE-2023-28105Go-huge-util vulnerable to path traversal when unzipping files8.8CNA v3.10.6%2023-03-16Fix
CVE-2023-28104silverstripe/graphql denial of service7.5CNA v3.11.1%2023-03-16Fix
CVE-2023-28101Flatpak metadata with ANSI control codes can cause misleading terminal output5.0CNA v3.10.9%2023-03-16Fix
CVE-2023-28100flatpak TIOCLINUX can send commands outside sandbox if running on a virtual console10.0CNA v3.10.9%2023-03-16Fix
CVE-2023-27875IBM Aspera Faspex improper access controls7.5CNA v3.10.6%2023-03-16Fix
CVE-2023-27789Broadcom tcpreplay reachable assertion7.5v3.11.5%2023-03-16Fix
CVE-2023-27788Broadcom tcpreplay reachable assertion7.5v3.11.4%2023-03-16Fix
CVE-2023-27787Broadcom tcpreplay null pointer dereference7.5v3.11.5%2023-03-16Fix