CVE-2023 records published in March 2023
Page two of two: records 1,001 to 1,856 of the 1,856 published in March 2023, newest first. The first page carries the figures for March 2023.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2023-27786 | Broadcom tcpreplay null pointer dereference | 7.5v3.1 | 1.5% | 2023-03-16 | Fix |
| CVE-2023-27785 | Broadcom tcpreplay null pointer dereference | 7.5v3.1 | 1.5% | 2023-03-16 | Fix |
| CVE-2023-27784 | Broadcom tcpreplay null pointer dereference | 7.5v3.1 | 1.5% | 2023-03-16 | Fix |
| CVE-2023-27783 | Broadcom tcpreplay reachable assertion | 7.5v3.1 | 1.5% | 2023-03-16 | Fix |
| CVE-2023-27711 | Typecho cross-site scripting | 4.8v3.1 | 0.7% | 2023-03-16 | |
| CVE-2023-27709 | DedeCMS SQL injection | 7.2v3.1 | 1.3% | 2023-03-16 | |
| CVE-2023-27707 | DedeCMS SQL injection | 7.2v3.1 | 1.3% | 2023-03-16 | |
| CVE-2023-27494 | Streamlit cross-site scripting | 5.9CNA v3.1 | 0.4% | 2023-03-16 | Fix |
| CVE-2023-27250 | Online Book Store Project SQL injection | 9.8v3.1 | 0.8% | 2023-03-16 | |
| CVE-2023-27131 | Typecho cross-site scripting | 4.8v3.1 | 0.6% | 2023-03-16 | |
| CVE-2023-27130 | Typecho cross-site scripting | 4.8v3.1 | 0.6% | 2023-03-16 | |
| CVE-2023-27095 | Exposure of sensitive information in OpenGoofy Hippo4j | 6.5v3.1 | 0.6% | 2023-03-16 | |
| CVE-2023-27084 | iteachyou Dreamer CMS incorrect permission assignment | 5.3v3.1 | 0.2% | 2023-03-16 | |
| CVE-2023-27059 | ChurchCRM Edit Group function cross-site scripting | 5.4NVD v3.1 | 0.4% | 2023-03-16 | |
| CVE-2023-27041 | School Registration and Fee System SQL injection | 9.8v3.1 | 0.8% | 2023-03-16 | |
| CVE-2023-27040 | Simple Image Gallery Web App remote code execution | 9.8v3.1 | 2.0% | 2023-03-16 | |
| CVE-2023-27037 | QiboSoft Qibocms SQL injection | 8.8v3.1 | 1.5% | 2023-03-16 | |
| CVE-2023-26951 | Onekeyadmin cross-site scripting | 5.4v3.1 | 0.3% | 2023-03-16 | |
| CVE-2023-26784 | Tosec Kirin Fortress Machine SQL injection | 9.8v3.1 | 0.7% | 2023-03-16 | |
| CVE-2023-26769 | liblouis buffer overflow | 7.5v3.1 | 1.2% | 2023-03-16 | Fix |
| CVE-2023-26768 | liblouis buffer overflow | 7.5v3.1 | 1.4% | 2023-03-16 | Fix |
| CVE-2023-26767 | liblouis buffer overflow | 7.5v3.1 | 1.4% | 2023-03-16 | Fix |
| CVE-2023-25281 | D-Link DIR-820L pingV4Msg component stack-based buffer overflow | 7.5v3.1 | 1.1% | 2023-03-16 | |
| CVE-2023-25280 | D-Link DIR-820 Router OS command injection | 9.8v3.1 | 97.9% | 2023-03-16 | KEVNucleiEmerging Threats |
| CVE-2023-24795 | Jcgcn.com Jhr-n916r code injection | 9.8v3.1 | 1.0% | 2023-03-16 | |
| CVE-2023-24760 | OFCMS improper privilege management | 8.8v3.1 | 0.8% | 2023-03-16 | |
| CVE-2023-24671 | VX Search unquoted search path | 7.8v3.1 | 0.4% | 2023-03-16 | |
| CVE-2023-24571 | Dell Embedded Box PC 3000, CPG BIOS improper input validation | 7.5CNA v3.1 | 0.2% | 2023-03-16 | Fix |
| CVE-2023-23935 | Presence of restricted personal Discourse messages may be leaked if tagged with a tag | 3.5CNA v3.1 | 0.5% | 2023-03-16 | Fix |
| CVE-2023-23150 | Lancombg Sa-wr915nd code execution | 9.8v3.1 | 0.8% | 2023-03-16 | |
| CVE-2023-22883 | Local privilege escalation in Zoom for Windows Installers | 7.2CNA v3.1 | 0.2% | 2023-03-16 | Fix |
| CVE-2023-22882 | Denial of service in Zoom clients | 6.5CNA v3.1 | 1.1% | 2023-03-16 | Fix |
| CVE-2023-22881 | Denial of service in Zoom clients | 6.5CNA v3.1 | 1.1% | 2023-03-16 | Fix |
| CVE-2023-22880 | Information disclosure in Zoom for Windows Clients | 6.8CNA v3.1 | 1.0% | 2023-03-16 | Fix |
| CVE-2023-21465 | Samsung Mobile Bixby Touch improper access control | 5.5CNA v3.1 | 0.2% | 2023-03-16 | Fix |
| CVE-2023-21464 | Samsung Mobile Samsung Calendar improper access control | 4.0CNA v3.1 | 0.1% | 2023-03-16 | Fix |
| CVE-2023-21463 | Samsung Mobile MyFiles improper access control | 4.0CNA v3.1 | 0.1% | 2023-03-16 | Fix |
| CVE-2023-21462 | Samsung Mobile Quick Share Agent The information disclosure | 4.2CNA v3.1 | 0.2% | 2023-03-16 | Fix |
| CVE-2023-21461 | Samsung Mobile Devices AutoPowerOnOffConfirmDialog in settings improper authorization | 4.0CNA v3.1 | 0.1% | 2023-03-16 | Fix |
| CVE-2023-21460 | Samsung Mobile Devices SecSettings improper authentication | 4.4CNA v3.1 | 0.2% | 2023-03-16 | Fix |
| CVE-2023-21459 | Samsung Mobile Devices decon driver use-after-free | 5.0CNA v3.1 | 0.3% | 2023-03-16 | Fix |
| CVE-2023-21458 | Samsung Mobile Devices PhoneStatusBarPolicy in System UI improper privilege management | 6.2CNA v3.1 | 0.2% | 2023-03-16 | Fix |
| CVE-2023-21457 | Samsung Mobile Devices Bluetooth improper access control | 4.1CNA v3.1 | 0.2% | 2023-03-16 | Fix |
| CVE-2023-21456 | Samsung Mobile Devices Galaxy Themes service path traversal | 9.0CNA v3.1 | 0.2% | 2023-03-16 | Fix |
| CVE-2023-21455 | Samsung Exynos improper authorization | 5.9CNA v3.1 | 0.4% | 2023-03-16 | Fix |
| CVE-2023-21454 | Samsung Mobile Devices improper authorization | 2.4CNA v3.1 | 0.2% | 2023-03-16 | Fix |
| CVE-2023-21453 | Samsung Mobile Devices SoftSim TA improper input validation | 6.0CNA v3.1 | 0.2% | 2023-03-16 | Fix |
| CVE-2023-21452 | Samsung Mobile Devices improper authorization | 3.3CNA v3.1 | 0.2% | 2023-03-16 | Fix |
| CVE-2023-21449 | Samsung Mobile Devices Call application improper access control | 4.0CNA v3.1 | 0.2% | 2023-03-16 | Fix |
| CVE-2023-1433 | SourceCodester Gadget Works Online Ordering System Products unrestricted upload | 7.2v3.1 | 0.9% | 2023-03-16 | |
| CVE-2023-1432 | SourceCodester Online Food Ordering System POST request access control | 9.8v3.1 | 0.6% | 2023-03-16 | |
| CVE-2023-1431 | WP Simple Shopping Cart WordPress plugin information disclosure | 5.3v3.1 | 0.5% | 2023-03-16 | Fix |
| CVE-2023-1429 | Cross-site scripting (XSS) Reflected in pimcore/pimcore | 5.4v3.1 | 0.4% | 2023-03-16 | Fix |
| CVE-2023-1390 | Linux kernel (TIPC kernel module) denial of service | 7.5NVD v3.1 | 5.1% | 2023-03-16 | Fix |
| CVE-2023-1256 | AVEVA Plant SCADA and Telemetry Server incorrect authorization | 9.8v3.1 | 0.7% | 2023-03-16 | Fix |
| CVE-2023-0811 | OMRON CJ1M SYSMAC CJ-series improper access control | 9.1v3.1 | 0.6% | 2023-03-16 | Fix |
| CVE-2023-0598 | GE Digital Proficy code injection | 9.8v3.1 | 0.6% | 2023-03-16 | Fix |
| CVE-2023-28461 | Array Networks AG and vxAG ArrayOS missing authentication for critical function | 9.8v3.1 | 68.1% | 2023-03-15 | KEVFix |
| CVE-2023-28460 | Array Networks APV10650 command injection | 7.2v3.1 | 1.6% | 2023-03-15 | Fix |
| CVE-2023-28450 | dnsmasq default EDNS.0 UDP packet size vulnerability | 7.5v3.1 | 1.8% | 2023-03-15 | Fix |
| CVE-2023-28371 | Stellarium path traversal | 9.8v3.1 | 1.6% | 2023-03-15 | Fix |
| CVE-2023-28338 | NETGEAR Nighthawk WiFi6 Router (RAX30) resource exhaustion | 7.5NVD v3.1 | 0.6% | 2023-03-15 | |
| CVE-2023-28337 | NETGEAR Nighthawk WiFi6 Router (RAX30) unrestricted file upload | 8.8NVD v3.1 | 0.7% | 2023-03-15 | |
| CVE-2023-28099 | OpenSIPS ds_is_in_list function improper input validation | 5.9CNA v3.1 | 0.9% | 2023-03-15 | Fix |
| CVE-2023-28098 | OpenSIPS has vulnerability in the Digest Authentication parser | 5.9CNA v3.1 | 0.9% | 2023-03-15 | Fix |
| CVE-2023-28097 | OpenSIPS Content-Length parser integer overflow | 7.5CNA v3.1 | 1.0% | 2023-03-15 | Fix |
| CVE-2023-28096 | OpenSIPS has memory leak in cJSON lib | 4.5CNA v3.1 | 0.8% | 2023-03-15 | Fix |
| CVE-2023-28095 | OpenSIPS has vulnerability in the building the local negative replies | 7.5CNA v3.1 | 1.0% | 2023-03-15 | Fix |
| CVE-2023-27781 | Jpegoptim out-of-bounds write | 7.8v3.1 | 0.4% | 2023-03-15 | Fix |
| CVE-2023-27757 | PerfreeBlog /admin/user/uploadImg component arbitrary file upload | 9.8v3.1 | 0.9% | 2023-03-15 | |
| CVE-2023-27601 | OpenSIPS SDP body parser denial of service | 7.5CNA v3.1 | 1.0% | 2023-03-15 | Fix |
| CVE-2023-27600 | OpenSIPS SDP body parser denial of service | 7.5CNA v3.1 | 1.0% | 2023-03-15 | Fix |
| CVE-2023-27599 | OpenSIPS To header parser denial of service | 7.5CNA v3.1 | 1.0% | 2023-03-15 | Fix |
| CVE-2023-27598 | OpenSIPS Via header parser denial of service | 7.5CNA v3.1 | 1.0% | 2023-03-15 | Fix |
| CVE-2023-27597 | OpenSIPS rewrite_ruri function denial of service | 7.5CNA v3.1 | 0.7% | 2023-03-15 | Fix |
| CVE-2023-27596 | OpenSIPS codec_delete_except_re function denial of service | 7.5CNA v3.1 | 0.7% | 2023-03-15 | Fix |
| CVE-2023-27240 | Tenda AX3 command injection | 9.8v3.1 | 2.8% | 2023-03-15 | Emerging Threats |
| CVE-2023-27239 | Tenda AX3 out-of-bounds write | 9.8v3.1 | 0.8% | 2023-03-15 | |
| CVE-2023-27235 | jizhiCMS \admin\c\CommonController.php component arbitrary file upload | 7.2v3.1 | 1.0% | 2023-03-15 | |
| CVE-2023-27234 | jizhiCMS /Sys/index.html cross-site request forgery | 6.5v3.1 | 0.3% | 2023-03-15 | |
| CVE-2023-27103 | struktur libde265 out-of-bounds write | 8.8v3.1 | 0.9% | 2023-03-15 | Fix |
| CVE-2023-27102 | struktur libde265 null pointer dereference | 6.5v3.1 | 0.7% | 2023-03-15 | Fix |
| CVE-2023-26912 | S-mall-ssm xenv cross-site scripting | 4.8v3.1 | 0.4% | 2023-03-15 | |
| CVE-2023-26484 | KubeVirt virt-handler service account privilege escalation | 8.2CNA v3.1 | 0.6% | 2023-03-15 | Fix |
| CVE-2023-26284 | IBM MQ Certified Container improper access controls | 7.5CNA v3.1 | 0.7% | 2023-03-15 | Fix |
| CVE-2023-26084 | Arm Aarch64cryptolib improper initialization | 3.7v3.1 | 0.4% | 2023-03-15 | Fix |
| CVE-2023-25968 | Client Portal Private user pages and login WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-03-15 | Fix |
| CVE-2023-25804 | Roxy-WI vulnerable to limited path traversal in name parameter | 7.5CNA v3.1 | 0.8% | 2023-03-15 | Fix |
| CVE-2023-25709 | Locatoraid Store Locator WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-03-15 | Fix |
| CVE-2023-25708 | WP VR 360 Panorama and Virtual Tour Builder For WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-03-15 | Fix |
| CVE-2023-25695 | Information disclosure in Apache Airflow | 5.3v3.1 | 1.4% | 2023-03-15 | Fix |
| CVE-2023-25680 | IBM Robotic Process Automation information disclosure | 4.2CNA v3.1 | 0.6% | 2023-03-15 | Fix |
| CVE-2023-25345 | Swig-templates arbitrary local file read vulnerability during template rendering | 7.5v3.1 | 1.0% | 2023-03-15 | |
| CVE-2023-25344 | Swig-templates code injection | 9.8v3.1 | 1.0% | 2023-03-15 | |
| CVE-2023-25282 | D-Link DIR-820L A heap-based buffer overflow | 6.5v3.1 | 1.0% | 2023-03-15 | |
| CVE-2023-25267 | GFI KerioConnect out-of-bounds write | 8.8v3.1 | 1.0% | 2023-03-15 | Fix |
| CVE-2023-24732 | oretnom23 Simple Customer Relationship Management System SQL injection | 8.8v3.1 | 1.0% | 2023-03-15 | |
| CVE-2023-24731 | oretnom23 Simple Customer Relationship Management System SQL injection | 8.8v3.1 | 1.0% | 2023-03-15 | |
| CVE-2023-24730 | oretnom23 Simple Customer Relationship Management System SQL injection | 8.8v3.1 | 1.0% | 2023-03-15 | |
| CVE-2023-24729 | oretnom23 Simple Customer Relationship Management System SQL injection | 8.8v3.1 | 1.0% | 2023-03-15 | |
| CVE-2023-24728 | oretnom23 Simple Customer Relationship Management System SQL injection | 8.8v3.1 | 1.0% | 2023-03-15 | |
| CVE-2023-24726 | PHPGurukul Art Gallery Management System SQL injection | 9.8v3.1 | 1.1% | 2023-03-15 | |
| CVE-2023-24468 | NetIQ Advanced Authentication Advanced Authentication versions missing authorization | 9.8v3.1 | 0.9% | 2023-03-15 | Fix |
| CVE-2023-24229 | DrayTek Vigor 2960 command injection | 7.8v3.1 | 6.7% | 2023-03-15 | Emerging Threats |
| CVE-2023-22876 | IBM Sterling B2B Integrator information disclosure | 4.3CNA v3.1 | 0.5% | 2023-03-15 | Fix |
| CVE-2023-22591 | IBM Robotic Process Automation session fixation | 3.9CNA v3.1 | 0.2% | 2023-03-15 | Fix |
| CVE-2023-1421 | Mattermost reflected XSS in OAuth flow completion endpoints | 3.5CNA v3.1 | 0.4% | 2023-03-15 | Fix |
| CVE-2023-1418 | SourceCodester Friendly Island Pizza Website and Ordering System cross-site scripting | 6.1v3.1 | 0.6% | 2023-03-15 | |
| CVE-2023-1416 | Simple Art Gallery adminHome.php SQL injection | 9.8v3.1 | 0.8% | 2023-03-15 | |
| CVE-2023-1415 | Simple Art Gallery adminHome.php sliderPicSubmit unrestricted upload | 8.8v3.1 | 1.0% | 2023-03-15 | |
| CVE-2023-1407 | SourceCodester Student Study Center Desk Management System manage_user.php SQL injection | 7.2v3.1 | 0.7% | 2023-03-15 | |
| CVE-2023-1389 | TP-Link Archer AX-21 command injection | 8.8NVD v3.1 | 100.0% | 2023-03-15 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2023-1379 | SourceCodester Friendly Island Pizza Website and Ordering System addmem.php SQL injection | 9.8v3.1 | 0.8% | 2023-03-15 | |
| CVE-2023-0322 | XSS in Talent Software UNIS | 6.1v3.1 | 0.4% | 2023-03-15 | Fix |
| CVE-2023-0100 | Improper input validation in Eclipse BIRT | 8.8v3.1 | 0.7% | 2023-03-15 | Fix |
| CVE-2023-28343 | Apsystems Energy Communication Unit OS command injection | 9.8v3.1 | 85.3% | 2023-03-14 | NucleiEmerging ThreatsExploit code |
| CVE-2023-28339 | Opendoas improper privilege management | 8.8v3.1 | 0.6% | 2023-03-14 | |
| CVE-2023-28144 | Kdab Hotspot race condition | 7.0v3.1 | 0.3% | 2023-03-14 | Fix |
| CVE-2023-27896 | Server side request forgery (SSRF) in the SAP BusinessObjects Business Intelligence platform | 6.5CNA v3.1 | 0.5% | 2023-03-14 | Fix |
| CVE-2023-27895 | Information disclosure vulnerability in SAP Authenticator for Android | 6.1CNA v3.1 | 0.4% | 2023-03-14 | Fix |
| CVE-2023-27894 | Sensitive information disclosure in the SAP BusinessObjects Business Intelligence platform | 5.0CNA v3.1 | 0.6% | 2023-03-14 | Fix |
| CVE-2023-27893 | Arbitrary code execution in SAP Solution Manager and ABAP managed systems (ST-PI) | 8.8CNA v3.1 | 1.2% | 2023-03-14 | Fix |
| CVE-2023-27590 | Rizin has stack-based buffer overflow when parsing GDB registers profile files | 7.8CNA v3.1 | 0.3% | 2023-03-14 | Fix |
| CVE-2023-27589 | Minio vulnerable to denial of access by an admin privileged user for root credential | 6.5CNA v3.1 | 0.9% | 2023-03-14 | Fix |
| CVE-2023-27588 | Unauthenticated path traversal vulnerability in Hasura GraphQL Engine | 7.5CNA v3.1 | 1.3% | 2023-03-14 | Fix |
| CVE-2023-27585 | pjsip pjproject buffer overflow | 7.5CNA v3.1 | 2.3% | 2023-03-14 | Fix |
| CVE-2023-27501 | Directory traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform | 8.7CNA v3.1 | 1.0% | 2023-03-14 | Fix |
| CVE-2023-27500 | Directory traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform | 9.6CNA v3.1 | 1.0% | 2023-03-14 | Fix |
| CVE-2023-27498 | Memory corruption vulnerability in SAP Host Agent (SAPOSCOL) | 7.2CNA v3.1 | 0.5% | 2023-03-14 | Fix |
| CVE-2023-27463 | Siemens RUGGEDCOM CROSSBOW SQL injection | 8.8CNA v3.1 | 0.8% | 2023-03-14 | Fix |
| CVE-2023-27462 | Siemens RUGGEDCOM CROSSBOW missing authorization | 3.1CNA v3.1 | 0.5% | 2023-03-14 | Fix |
| CVE-2023-27406 | Siemens Tecnomatix Plant Simulation stack-based buffer overflow | 7.8CNA v3.1 | 0.2% | 2023-03-14 | Fix |
| CVE-2023-27405 | Siemens Tecnomatix Plant Simulation out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2023-03-14 | Fix |
| CVE-2023-27404 | Siemens Tecnomatix Plant Simulation stack-based buffer overflow | 7.8CNA v3.1 | 2.5% | 2023-03-14 | Fix |
| CVE-2023-27403 | Siemens Tecnomatix Plant Simulation memory corruption | 7.8CNA v3.1 | 0.2% | 2023-03-14 | Fix |
| CVE-2023-27402 | Siemens Tecnomatix Plant Simulation out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2023-03-14 | Fix |
| CVE-2023-27401 | Siemens Tecnomatix Plant Simulation out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2023-03-14 | Fix |
| CVE-2023-27400 | Siemens Tecnomatix Plant Simulation out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2023-03-14 | Fix |
| CVE-2023-27399 | Siemens Tecnomatix Plant Simulation out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2023-03-14 | Fix |
| CVE-2023-27398 | Siemens Tecnomatix Plant Simulation out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2023-03-14 | Fix |
| CVE-2023-27310 | Siemens RUGGEDCOM CROSSBOW missing authorization | 6.6CNA v3.1 | 0.6% | 2023-03-14 | Fix |
| CVE-2023-27309 | Siemens RUGGEDCOM CROSSBOW missing authorization | 5.0CNA v3.1 | 0.5% | 2023-03-14 | Fix |
| CVE-2023-27271 | Server side request forgery (SSRF) in the SAP BusinessObjects Business Intelligence platform | 6.5CNA v3.1 | 0.6% | 2023-03-14 | Fix |
| CVE-2023-27270 | Denial of service (DoS) in SAP NetWeaver AS for ABAP and ABAP Platform | 6.5CNA v3.1 | 0.6% | 2023-03-14 | Fix |
| CVE-2023-27269 | Directory traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform | 9.6CNA v3.1 | 1.0% | 2023-03-14 | Fix |
| CVE-2023-27268 | Improper access control in SAP NetWeaver AS Java (Object Analyzing service) | 5.3CNA v3.1 | 0.4% | 2023-03-14 | Fix |
| CVE-2023-27074 | PHPGurukul BP Monitoring Management System SQL injection | 9.8v3.1 | 0.6% | 2023-03-14 | |
| CVE-2023-27073 | oretnom23 Online Food Ordering System A cross-site request forgery | 6.5v3.1 | 0.3% | 2023-03-14 | |
| CVE-2023-27070 | Total.js Openplatform stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-03-14 | |
| CVE-2023-27069 | Total.js Openplatform stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-03-14 | |
| CVE-2023-26511 | Propius Machineselector hard-coded credentials | 9.8v3.1 | 0.9% | 2023-03-14 | Fix |
| CVE-2023-26461 | XML external entity (XXE) vulnerability in SAP NetWeaver (SAP Enterprise Portal) | 6.8CNA v3.1 | 0.5% | 2023-03-14 | Fix |
| CVE-2023-26460 | Improper access control in SAP NetWeaver AS Java (Cache Management service) | 5.3CNA v3.1 | 0.5% | 2023-03-14 | Fix |
| CVE-2023-26459 | Server side request forgery (SSRF) vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform | 7.4CNA v3.1 | 0.4% | 2023-03-14 | Fix |
| CVE-2023-26457 | Cross-site scripting (XSS) vulnerability in SAP Content Server | 6.1CNA v3.1 | 0.4% | 2023-03-14 | Fix |
| CVE-2023-26262 | Sitecore Experience Manager unrestricted file upload | 7.2v3.1 | 1.7% | 2023-03-14 | Exploit codeFix |
| CVE-2023-25957 | Siemens Mendix SAML (Mendix 7 compatible) flawed authentication | 9.1CNA v3.1 | 0.6% | 2023-03-14 | Fix |
| CVE-2023-25618 | Denial of service (DoS) vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform | 6.5CNA v3.1 | 0.6% | 2023-03-14 | Fix |
| CVE-2023-25617 | OS command execution vulnerability in SAP Business Objects Business Intelligence Platform | 9.0CNA v3.1 | 0.9% | 2023-03-14 | Fix |
| CVE-2023-25616 | Code injection vulnerability in SAP Business Objects Business Intelligence Platform (CMC) | 9.9CNA v3.1 | 0.9% | 2023-03-14 | Fix |
| CVE-2023-25615 | SQL injection vulnerability in SAP ABAP Platform | 6.8CNA v3.1 | 0.5% | 2023-03-14 | Fix |
| CVE-2023-25206 | PrestaShop Advanced Reviews SQL injection | 8.8v3.1 | 0.9% | 2023-03-14 | |
| CVE-2023-24930 | Microsoft OneDrive for MacOS elevation of privilege | 7.8CNA v3.1 | 0.5% | 2023-03-14 | Fix |
| CVE-2023-24923 | Microsoft OneDrive for Android information disclosure | 5.5CNA v3.1 | 0.8% | 2023-03-14 | Fix |
| CVE-2023-24922 | Microsoft Dynamics 365 (on-premises) information disclosure | 6.5CNA v3.1 | 1.5% | 2023-03-14 | Fix |
| CVE-2023-24921 | Microsoft Dynamics 365 (on-premises) cross-site scripting | 5.4CNA v3.1 | 0.6% | 2023-03-14 | Fix |
| CVE-2023-24920 | Microsoft Dynamics 365 (on-premises) cross-site scripting | 5.4CNA v3.1 | 0.3% | 2023-03-14 | Fix |
| CVE-2023-24919 | Microsoft Dynamics 365 (on-premises) cross-site scripting | 5.4CNA v3.1 | 0.6% | 2023-03-14 | Fix |
| CVE-2023-24913 | Microsoft PostScript and PCL6 Class Printer driver remote code execution | 8.8CNA v3.1 | 1.3% | 2023-03-14 | Fix |
| CVE-2023-24911 | Microsoft PostScript and PCL6 Class Printer driver information disclosure | 4.3CNA v3.1 | 1.1% | 2023-03-14 | Fix |
| CVE-2023-24910 | Microsoft Windows Graphics component elevation of privilege | 7.8CNA v3.1 | 0.4% | 2023-03-14 | Fix |
| CVE-2023-24909 | Microsoft PostScript and PCL6 Class Printer driver remote code execution | 8.8CNA v3.1 | 1.3% | 2023-03-14 | Fix |
| CVE-2023-24908 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.1CNA v3.1 | 1.0% | 2023-03-14 | Fix |
| CVE-2023-24907 | Microsoft PostScript and PCL6 Class Printer driver remote code execution | 8.8CNA v3.1 | 1.3% | 2023-03-14 | Fix |
| CVE-2023-24906 | Microsoft PostScript and PCL6 Class Printer driver information disclosure | 6.5CNA v3.1 | 1.5% | 2023-03-14 | Fix |
| CVE-2023-24892 | Microsoft Edge (Chromium-based) Webview2 spoofing | 8.2CNA v3.1 | 3.5% | 2023-03-14 | Exploit codeFix |
| CVE-2023-24891 | Microsoft Dynamics 365 (on-premises) cross-site scripting | 5.4CNA v3.1 | 0.6% | 2023-03-14 | Fix |
| CVE-2023-24890 | Microsoft OneDrive for iOS security feature bypass | 6.5CNA v3.1 | 1.2% | 2023-03-14 | Fix |
| CVE-2023-24882 | Microsoft OneDrive for Android information disclosure | 5.5CNA v3.1 | 0.7% | 2023-03-14 | Fix |
| CVE-2023-24880 | Microsoft Windows SmartScreen security feature bypass | 4.4CNA v3.1 | 78.0% | 2023-03-14 | KEVFix |
| CVE-2023-24879 | Microsoft Dynamics 365 (on-premises) cross-site scripting | 5.4CNA v3.1 | 0.6% | 2023-03-14 | Fix |
| CVE-2023-24876 | Microsoft PostScript and PCL6 Class Printer driver remote code execution | 8.8CNA v3.1 | 1.4% | 2023-03-14 | Fix |
| CVE-2023-24872 | Microsoft PostScript and PCL6 Class Printer driver remote code execution | 8.8CNA v3.1 | 1.3% | 2023-03-14 | Fix |
| CVE-2023-24871 | Microsoft Windows Bluetooth service remote code execution | 8.8CNA v3.1 | 3.2% | 2023-03-14 | Exploit codeFix |
| CVE-2023-24870 | Microsoft PostScript and PCL6 Class Printer driver information disclosure | 6.5CNA v3.1 | 1.5% | 2023-03-14 | Fix |
| CVE-2023-24869 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.1CNA v3.1 | 1.0% | 2023-03-14 | Fix |
| CVE-2023-24868 | Microsoft PostScript and PCL6 Class Printer driver remote code execution | 8.8CNA v3.1 | 1.3% | 2023-03-14 | Fix |
| CVE-2023-24867 | Microsoft PostScript and PCL6 Class Printer driver remote code execution | 8.8CNA v3.1 | 1.3% | 2023-03-14 | Fix |
| CVE-2023-24866 | Microsoft PostScript and PCL6 Class Printer driver information disclosure | 6.5CNA v3.1 | 1.5% | 2023-03-14 | Fix |
| CVE-2023-24865 | Microsoft PostScript and PCL6 Class Printer driver information disclosure | 6.5CNA v3.1 | 1.5% | 2023-03-14 | Fix |
| CVE-2023-24864 | Microsoft PostScript and PCL6 Class Printer driver elevation of privilege | 8.8CNA v3.1 | 1.3% | 2023-03-14 | Fix |
| CVE-2023-24863 | Microsoft PostScript and PCL6 Class Printer driver information disclosure | 6.5CNA v3.1 | 1.5% | 2023-03-14 | Fix |
| CVE-2023-24862 | Microsoft Windows Secure Channel denial of service | 5.5CNA v3.1 | 0.5% | 2023-03-14 | Fix |
| CVE-2023-24861 | Microsoft Windows Graphics component elevation of privilege | 7.0CNA v3.1 | 0.3% | 2023-03-14 | Fix |
| CVE-2023-24859 | Microsoft Windows Internet Key Exchange (IKE) extension denial of service | 7.5CNA v3.1 | 1.7% | 2023-03-14 | Fix |
| CVE-2023-24858 | Microsoft PostScript and PCL6 Class Printer driver information disclosure | 7.5CNA v3.1 | 1.4% | 2023-03-14 | Fix |
| CVE-2023-24857 | Microsoft PostScript and PCL6 Class Printer driver information disclosure | 6.5CNA v3.1 | 1.5% | 2023-03-14 | Fix |
| CVE-2023-24856 | Microsoft PostScript and PCL6 Class Printer driver information disclosure | 7.5CNA v3.1 | 1.5% | 2023-03-14 | Fix |
| CVE-2023-24526 | Improper access control in SAP NetWeaver AS Java (Classload Service) | 5.3CNA v3.1 | 0.6% | 2023-03-14 | Fix |
| CVE-2023-24279 | ONOS vulnerable to reflected cross-site scripting | 6.1v3.1 | 0.6% | 2023-03-14 | |
| CVE-2023-24180 | Libelfin integer overflow | 6.5v3.1 | 0.6% | 2023-03-14 | |
| CVE-2023-23857 | Improper access control in SAP NetWeaver AS for Java | 9.9CNA v3.1 | 0.5% | 2023-03-14 | Fix |
| CVE-2023-23423 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.6% | 2023-03-14 | Fix |
| CVE-2023-23422 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.6% | 2023-03-14 | Fix |
| CVE-2023-23421 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.7% | 2023-03-14 | Fix |
| CVE-2023-23420 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.7% | 2023-03-14 | Fix |
| CVE-2023-23419 | Microsoft Windows Resilient File System (ReFS) elevation of privilege | 7.8CNA v3.1 | 0.4% | 2023-03-14 | Fix |
| CVE-2023-23418 | Microsoft Windows Resilient File System (ReFS) elevation of privilege | 7.8CNA v3.1 | 0.4% | 2023-03-14 | Fix |
| CVE-2023-23417 | Microsoft Windows Partition Management driver elevation of privilege | 7.8CNA v3.1 | 0.4% | 2023-03-14 | Fix |
| CVE-2023-23416 | Microsoft Windows Cryptographic services remote code execution | 7.8CNA v3.1 | 7.6% | 2023-03-14 | Fix |
| CVE-2023-23415 | Microsoft Windows internet Control message Protocol (ICMP) remote code execution | 9.8CNA v3.1 | 3.5% | 2023-03-14 | Fix |
| CVE-2023-23414 | Microsoft Windows Point-to-Point protocol over Ethernet (PPPoE) remote code execution | 7.1CNA v3.1 | 0.4% | 2023-03-14 | Fix |
| CVE-2023-23413 | Microsoft PostScript and PCL6 Class Printer driver remote code execution | 8.8CNA v3.1 | 1.3% | 2023-03-14 | Fix |
| CVE-2023-23412 | Microsoft Windows Accounts Picture elevation of privilege | 7.8CNA v3.1 | 0.3% | 2023-03-14 | Fix |
| CVE-2023-23411 | Microsoft Windows Hyper-V denial of service | 6.5CNA v3.1 | 0.6% | 2023-03-14 | Fix |
| CVE-2023-23410 | Microsoft Windows HTTP.sys elevation of privilege | 7.8CNA v3.1 | 8.0% | 2023-03-14 | Fix |
| CVE-2023-23409 | Microsoft Windows Client Server Run-Time Subsystem (CSRSS) information disclosure | 5.5CNA v3.1 | 0.5% | 2023-03-14 | Fix |
| CVE-2023-23408 | Microsoft Azure Apache Ambari spoofing | 4.5CNA v3.1 | 4.0% | 2023-03-14 | Exploit codeFix |
| CVE-2023-23407 | Microsoft Windows Point-to-Point protocol over Ethernet (PPPoE) remote code execution | 7.1CNA v3.1 | 0.4% | 2023-03-14 | Fix |
| CVE-2023-23406 | Microsoft PostScript and PCL6 Class Printer driver remote code execution | 8.8CNA v3.1 | 1.3% | 2023-03-14 | Fix |
| CVE-2023-23405 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.1CNA v3.1 | 1.0% | 2023-03-14 | Fix |
| CVE-2023-23404 | Microsoft Windows Point-to-Point Tunneling protocol remote code execution | 8.1CNA v3.1 | 0.8% | 2023-03-14 | Fix |
| CVE-2023-23403 | Microsoft PostScript and PCL6 Class Printer driver remote code execution | 8.8CNA v3.1 | 1.3% | 2023-03-14 | Fix |
| CVE-2023-23402 | Microsoft Windows Media remote code execution | 7.8CNA v3.1 | 0.6% | 2023-03-14 | Fix |
| CVE-2023-23401 | Microsoft Windows Media remote code execution | 7.8CNA v3.1 | 0.6% | 2023-03-14 | Fix |
| CVE-2023-23400 | Microsoft Windows DNS server remote code execution | 7.2CNA v3.1 | 1.3% | 2023-03-14 | Fix |
| CVE-2023-23399 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 2.5% | 2023-03-14 | Exploit codeFix |
| CVE-2023-23398 | Microsoft Excel spoofing | 7.1CNA v3.1 | 0.6% | 2023-03-14 | Fix |
| CVE-2023-23397 | Microsoft Office Outlook privilege escalation | 9.8CNA v3.1 | 97.2% | 2023-03-14 | KEVEmerging ThreatsExploit codeFix |
| CVE-2023-23396 | Microsoft Excel denial of service | 6.5CNA v3.1 | 3.8% | 2023-03-14 | Exploit codeFix |
| CVE-2023-23395 | Microsoft SharePoint server spoofing | 3.1CNA v3.1 | 0.6% | 2023-03-14 | Fix |
| CVE-2023-23394 | Microsoft Windows Client Server Run-Time Subsystem (CSRSS) information disclosure | 5.5CNA v3.1 | 0.5% | 2023-03-14 | Fix |
| CVE-2023-23393 | Microsoft Windows BrokerInfrastructure service elevation of privilege | 7.0CNA v3.1 | 0.2% | 2023-03-14 | Fix |
| CVE-2023-23392 | Microsoft Windows HTTP Protocol Stack remote code execution | 9.8CNA v3.1 | 1.7% | 2023-03-14 | Fix |
| CVE-2023-23391 | Office for Android spoofing | 5.5CNA v3.1 | 0.6% | 2023-03-14 | Fix |
| CVE-2023-23389 | Microsoft Defender elevation of privilege | 6.3CNA v3.1 | 0.3% | 2023-03-14 | Fix |
| CVE-2023-23388 | Microsoft Windows Bluetooth driver elevation of privilege | 8.8CNA v3.1 | 1.6% | 2023-03-14 | Exploit codeFix |
| CVE-2023-23385 | Microsoft Windows Point-to-Point protocol over Ethernet (PPPoE) elevation of privilege | 7.0CNA v3.1 | 0.3% | 2023-03-14 | Fix |
| CVE-2023-23383 | Microsoft Service Fabric Explorer spoofing | 8.2CNA v3.1 | 11.7% | 2023-03-14 | Fix |
| CVE-2023-21708 | Microsoft Windows remote Procedure Call Runtime remote code execution | 9.8CNA v3.1 | 1.5% | 2023-03-14 | Fix |
| CVE-2023-1398 | XiaoBingBy TeaCMS upload path traversal | 8.8v3.1 | 1.0% | 2023-03-14 | |
| CVE-2023-1397 | SourceCodester Online Student Management System profile.php cross-site scripting | 6.1v3.1 | 0.6% | 2023-03-14 | |
| CVE-2023-1396 | SourceCodester Online Tours and Travels Management System traveller_details.php cross-site scripting | 6.1v3.1 | 0.6% | 2023-03-14 | |
| CVE-2023-1395 | SourceCodester Yoga Class Registration System list.php query cross-site scripting | 6.1v3.1 | 0.6% | 2023-03-14 | |
| CVE-2023-1394 | SourceCodester Online Graduate Tracer System bsitemp.php mysqli_query SQL injection | 9.8v3.1 | 0.7% | 2023-03-14 | |
| CVE-2023-1392 | SourceCodester Online Pizza Ordering System save_menu unrestricted upload | 9.8v3.1 | 0.9% | 2023-03-14 | |
| CVE-2023-1391 | SourceCodester Online Tours and Travels Management System ab.php unrestricted upload | 9.8v3.1 | 0.7% | 2023-03-14 | |
| CVE-2023-1327 | Netgear RAX30 (AX2400) improper authentication | 9.8NVD v3.1 | 0.9% | 2023-03-14 | |
| CVE-2023-1299 | Nomad Job Submitter privilege escalation using Workload Identity | 7.4CNA v3.1 | 0.5% | 2023-03-14 | Fix |
| CVE-2023-1296 | Nomad ACLs can not Deny Access to Workload's Own variables | 2.7CNA v3.1 | 0.5% | 2023-03-14 | Fix |
| CVE-2023-0021 | Cross-site scripting (XSS) vulnerability in SAP NetWeaver | 6.1CNA v3.1 | 0.5% | 2023-03-14 | Fix |
| CVE-2023-28154 | Cross-realm object access in Webpack 5 | 9.8v3.1 | 1.4% | 2023-03-13 | Fix |
| CVE-2023-27587 | rozbb readtomyshoe information disclosure through error messages | 7.4CNA v3.1 | 3.9% | 2023-03-13 | NucleiExploit codeFix |
| CVE-2023-27583 | PanIndex uses hard coded cyptographic key | 9.8CNA v3.1 | 0.9% | 2023-03-13 | Fix |
| CVE-2023-27582 | foxcpp maddy full authentication bypass if SASL authorization username is specified | 9.1CNA v3.1 | 1.0% | 2023-03-13 | Fix |
| CVE-2023-27581 | github-slug-action vulnerable to arbitrary code execution | 8.8CNA v3.1 | 1.6% | 2023-03-13 | Fix |
| CVE-2023-27580 | CodeIgniter Shield password hashing weak password hash | 7.5CNA v3.1 | 0.5% | 2023-03-13 | Fix |
| CVE-2023-27093 | My-Blog cross-site scripting | 6.1v3.1 | 0.4% | 2023-03-13 | |
| CVE-2023-27065 | Tenda W15E buffer overflow | 7.5v3.1 | 0.9% | 2023-03-13 | |
| CVE-2023-27064 | Tenda W15E buffer overflow | 7.5v3.1 | 0.9% | 2023-03-13 | |
| CVE-2023-27063 | Tenda W15E buffer overflow | 9.8v3.1 | 1.0% | 2023-03-13 | |
| CVE-2023-27062 | Tenda W15E buffer overflow | 7.5v3.1 | 0.9% | 2023-03-13 | |
| CVE-2023-27061 | Tenda W15E buffer overflow | 9.8v3.1 | 1.0% | 2023-03-13 | |
| CVE-2023-27052 | Moosikay SQL injection | 9.8v3.1 | 0.8% | 2023-03-13 | |
| CVE-2023-27010 | Wondershare Dr.Fone execution with unnecessary privileges | 7.8v3.1 | 1.0% | 2023-03-13 | Exploit code |
| CVE-2023-26076 | Samsung Exynos Auto T5123 buffer overflow | 9.8v3.1 | 0.9% | 2023-03-13 | Fix |
| CVE-2023-26074 | Samsung Exynos Auto T5123 out-of-bounds write | 9.8v3.1 | 1.0% | 2023-03-13 | Fix |
| CVE-2023-26073 | Samsung Exynos Auto T5123 out-of-bounds write | 9.8v3.1 | 1.1% | 2023-03-13 | Fix |
| CVE-2023-26072 | Samsung Exynos Auto T5123 out-of-bounds write | 9.8v3.1 | 1.1% | 2023-03-13 | Fix |
| CVE-2023-25991 | RegistrationMagic WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-03-13 | Fix |
| CVE-2023-25973 | Auto Affiliate Links WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-03-13 | Fix |
| CVE-2023-25803 | hap-wi roxy-wi path traversal | 7.5CNA v3.1 | 1.2% | 2023-03-13 | Fix |
| CVE-2023-25802 | Roxy-WI has path traversal | 7.5CNA v3.1 | 1.0% | 2023-03-13 | Fix |
| CVE-2023-25283 | D-Link DIR-820L A stack-based buffer overflow | 7.5v3.1 | 1.2% | 2023-03-13 | |
| CVE-2023-25279 | D-Link DIR-820L OS command injection | 9.8v3.1 | 32.0% | 2023-03-13 | |
| CVE-2023-25207 | PrestaShop Dpd France SQL injection | 9.8v3.1 | 0.9% | 2023-03-13 | |
| CVE-2023-25170 | PrestaShop has possible CSRF token fixation | 5.0CNA v3.1 | 0.2% | 2023-03-13 | Fix |
| CVE-2023-24762 | D-Link DIR-867 OS command injection | 9.8v3.1 | 2.5% | 2023-03-13 | |
| CVE-2023-24579 | McAfee Total Protection improper input validation | 5.5NVD v3.1 | 0.2% | 2023-03-13 | Fix |
| CVE-2023-24578 | McAfee Total Protection uncontrolled search path | 5.5v3.1 | 0.3% | 2023-03-13 | Fix |
| CVE-2023-24577 | McAfee Total Protection link following | 5.5v3.1 | 0.3% | 2023-03-13 | Fix |
| CVE-2023-24033 | Samsung Exynos Modem 5123 denial of service | 9.8v3.1 | 33.2% | 2023-03-13 | Fix |
| CVE-2023-23711 | A2 Optimized WP WordPress plugin cross-site request forgery (CSRF) | 4.3v3.1 | 0.2% | 2023-03-13 | Fix |
| CVE-2023-22700 | PixelYourSite Your smart PIXEL (TAG) Manager WordPress plugin cross-site request forgery (CSRF) | 4.3v3.1 | 0.2% | 2023-03-13 | Fix |
| CVE-2023-1378 | SourceCodester Friendly Island Pizza Website and Ordering System paypalsuccess.php SQL injection | 9.8v3.1 | 0.7% | 2023-03-13 | |
| CVE-2023-1374 | Solidres WordPress plugin authenticated (Admin+) stored cross-site scripting | 4.8v3.1 | 0.6% | 2023-03-13 | |
| CVE-2023-1372 | WH Testimonials WordPress plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 0.7% | 2023-03-13 | |
| CVE-2023-1369 | TG Soft Vir.IT eXplorer IoControlCode VIRAGTLT.sys 0x82730088 denial of service | 5.5v3.1 | 0.2% | 2023-03-13 | Fix |
| CVE-2023-1368 | XHCMS POST parameter login.php SQL injection | 9.8v3.1 | 0.8% | 2023-03-13 | |
| CVE-2023-1367 | Code injection in alextselegidis/easyappointments | 3.8NVD v3.1 | 0.4% | 2023-03-13 | Fix |
| CVE-2023-1366 | SourceCodester Yoga Class Registration System manage_category.php query SQL injection | 7.2v3.1 | 0.7% | 2023-03-13 | |
| CVE-2023-1365 | SourceCodester Online Pizza Ordering System ajax.php SQL injection | 7.5v3.1 | 0.8% | 2023-03-13 | |
| CVE-2023-1364 | SourceCodester Online Pizza Ordering System GET parameter category.php SQL injection | 7.5v3.1 | 0.6% | 2023-03-13 | |
| CVE-2023-1363 | SourceCodester Computer Parts Sales and Inventory System Add User Account cross-site scripting | 5.4v3.1 | 0.6% | 2023-03-13 | |
| CVE-2023-1362 | Improper restriction of rendered UI layers or frames in unilogies/Bumsys | 6.1NVD v3.1 | 1.4% | 2023-03-13 | NucleiFix |
| CVE-2023-1361 | SQL injection in unilogies/Bumsys | 6.5NVD v3.1 | 0.8% | 2023-03-13 | Fix |
| CVE-2023-0978 | Trellix Intelligent Sandbox command injection | 6.4CNA v3.1 | 0.4% | 2023-03-13 | Fix |
| CVE-2023-0973 | STEP Tools ifcmesh library null pointer dereference | 5.5v3.1 | 0.2% | 2023-03-13 | Fix |
| CVE-2023-0888 | Authenticated eval injection in B. Braun Space Battery pack SP with Wi-Fi | 4.9CNA v3.1 | 0.6% | 2023-03-13 | Fix |
| CVE-2023-0844 | Namaste! LMS WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2023-03-13 | Fix |
| CVE-2023-0772 | Popup Builder by OptinMonster WordPress plugin Subscriber+ arbitrary post content disclosure | 6.5NVD v3.1 | 0.8% | 2023-03-13 | Fix |
| CVE-2023-0749 | Ocean Extra WordPress plugin Subscriber+ arbitrary post content disclosure | 6.5NVD v3.1 | 0.7% | 2023-03-13 | Fix |
| CVE-2023-0629 | Docker Desktop Enhanced Container Isolation vulnerability | 7.1CNA v3.1 | 0.2% | 2023-03-13 | Fix |
| CVE-2023-0628 | Docker Desktop Dev Environments container initialization command injection | 6.1CNA v3.1 | 0.3% | 2023-03-13 | Fix |
| CVE-2023-0538 | Campaign URL Builder WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.4% | 2023-03-13 | Fix |
| CVE-2023-0477 | Auto Featured Image WordPress plugin Author+ arbitrary file upload | 8.8NVD v3.1 | 1.6% | 2023-03-13 | Fix |
| CVE-2023-0355 | Akuvox E11 hard-coded cryptographic key | 7.5v3.1 | 0.5% | 2023-03-13 | Fix |
| CVE-2023-0354 | Akuvox E11 packet capture feature missing authentication | 9.1v3.1 | 0.6% | 2023-03-13 | Fix |
| CVE-2023-0353 | Akuvox E11 hard-coded credentials | 9.8v3.1 | 0.4% | 2023-03-13 | Fix |
| CVE-2023-0352 | Akuvox E11 password recovery page missing authentication | 9.1v3.1 | 0.6% | 2023-03-13 | Fix |
| CVE-2023-0351 | Akuvox E11 phone-book contacts feature command injection | 8.8v3.1 | 1.3% | 2023-03-13 | Fix |
| CVE-2023-0350 | Akuvox E11 insufficient verification of data authenticity | 6.5v3.1 | 0.3% | 2023-03-13 | Fix |
| CVE-2023-0349 | Akuvox E11 libvoice library missing authentication | 9.1v3.1 | 0.6% | 2023-03-13 | Fix |
| CVE-2023-0348 | Akuvox E11 SIP server vulnerability | 7.5v3.1 | 0.5% | 2023-03-13 | Fix |
| CVE-2023-0347 | The Akuvox E11 Media Access Control (MAC) address, a primary identifier, combined with the Akuvox E11 IP address, could allow an attacker to identify the device on the Akuvox cloud. | 5.3NVD v3.1 | 0.5% | 2023-03-13 | Fix |
| CVE-2023-0346 | Akuvox E11 cloud login vulnerability | 7.5v3.1 | 0.6% | 2023-03-13 | Fix |
| CVE-2023-0345 | Akuvox E11 SSH server vulnerability | 9.8v3.1 | 0.7% | 2023-03-13 | Fix |
| CVE-2023-0219 | FluentSMTP WordPress plugin stored XSS via email Logs | 5.4NVD v3.1 | 0.5% | 2023-03-13 | Fix |
| CVE-2023-0172 | Juicer WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-03-13 | Fix |
| CVE-2023-0073 | Client Logo Carousel WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-03-13 | Fix |
| CVE-2023-0066 | Companion Sitemap Generator WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.4% | 2023-03-13 | Fix |
| CVE-2023-0037 | 10Web Map Builder for Google Maps AJAX action SQL injection | 9.8NVD v3.1 | 3.9% | 2023-03-13 | NucleiFix |
| CVE-2023-1360 | SourceCodester Employee Payslip Generator with Sending Mail New User Creation SQL injection | 4.9v3.1 | 0.6% | 2023-03-12 | |
| CVE-2023-1359 | SourceCodester Gadget Works Online Ordering System Add New User cross-site scripting | 4.8v3.1 | 0.6% | 2023-03-12 | |
| CVE-2023-1358 | SourceCodester Gadget Works Online Ordering System POST parameter login.php SQL injection | 9.8v3.1 | 0.7% | 2023-03-12 | |
| CVE-2023-1357 | SourceCodester Simple Bakery Shop Management System Admin Login SQL injection | 9.8v3.1 | 0.6% | 2023-03-12 | |
| CVE-2023-24999 | Vault fails to Verify if the AppRole SecretID Belongs to Role during a Destroy Operation | 4.4CNA v3.1 | 0.6% | 2023-03-11 | Fix |
| CVE-2023-1355 | Null pointer dereference in Vim/Vim | 5.5NVD v3.1 | 0.5% | 2023-03-11 | Fix |
| CVE-2023-1354 | A vulnerability has been found in SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file register.php. The manipulation of the argument txtfullname/txtage/txtaddres | 6.1v3.1 | 0.6% | 2023-03-11 | |
| CVE-2023-1353 | A vulnerability, which was classified as problematic, was found in SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System 1.0. Affected is an unknown function of the file verification.php. The manipulation of the argument txtvaccinationID leads to cross site scripting. | 6.1v3.1 | 0.6% | 2023-03-11 | |
| CVE-2023-1352 | SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System SQL injection | 8.1v3.1 | 0.9% | 2023-03-11 | |
| CVE-2023-1351 | SourceCodester Computer Parts Sales and Inventory System cust_transac.php SQL injection | 9.8v3.1 | 0.8% | 2023-03-11 | |
| CVE-2023-1350 | liferea Feed Enrichment update.c update_job_run os command injection | 9.8v3.1 | 2.3% | 2023-03-11 | Fix |
| CVE-2023-1349 | Hsycms Add Category module cate.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-03-11 | |
| CVE-2023-27905 | Cross-site scripting vulnerability in Update-center2 | 9.6v3.1 | 1.5% | 2023-03-10 | Fix |
| CVE-2023-27904 | Jenkins information disclosure through error stack traces related to agents | 5.3v3.1 | 0.7% | 2023-03-10 | Fix |
| CVE-2023-27903 | Incorrect authorization in Jenkins Core | 4.4v3.1 | 0.2% | 2023-03-10 | Fix |
| CVE-2023-27902 | Incorrect Permission Preservation in Jenkins Core | 4.3v3.1 | 0.7% | 2023-03-10 | Fix |
| CVE-2023-27901 | Denial of service in Jenkins Core | 7.5v3.1 | 1.0% | 2023-03-10 | Fix |
| CVE-2023-27900 | Denial of service in Jenkins Core | 7.5v3.1 | 1.0% | 2023-03-10 | Fix |
| CVE-2023-27899 | Incorrect authorization in Jenkins Core | 7.0v3.1 | 0.2% | 2023-03-10 | Fix |
| CVE-2023-27898 | Cross-site scripting vulnerability in Jenkins | 9.6v3.1 | 1.8% | 2023-03-10 | Fix |
| CVE-2023-27853 | NETGEAR Nighthawk WiFi6 Router buffer overflow | 9.8NVD v3.1 | 19.7% | 2023-03-10 | |
| CVE-2023-27852 | NETGEAR Nighthawk WiFi6 Router buffer overflow | 9.8NVD v3.1 | 0.8% | 2023-03-10 | |
| CVE-2023-27851 | NETGEAR Nighthawk WiFi6 Router arbitrary code execution | 8.8NVD v3.1 | 0.8% | 2023-03-10 | |
| CVE-2023-27850 | NETGEAR Nighthawk WiFi6 Router link following | 6.8NVD v3.1 | 0.3% | 2023-03-10 | |
| CVE-2023-27577 | Path traversal vulnerability in `LESS` parser allows reading of sensitive server files in Flarum | 6.6CNA v3.1 | 0.9% | 2023-03-10 | Fix |
| CVE-2023-27532 | Veeam Backup & Replication Cloud Connect missing authentication for critical function | 7.5v3.1 | 81.3% | 2023-03-10 | KEVEmerging ThreatsExploit codeFix |
| CVE-2023-27530 | Rack has possible DoS vulnerability in Multipart MIME parsing | 7.5v3.1 | 1.8% | 2023-03-10 | Fix |
| CVE-2023-27164 | halo An arbitrary file upload | 4.8v3.1 | 0.7% | 2023-03-10 | |
| CVE-2023-27161 | jellyfin server-side request forgery | 7.5v3.1 | 1.0% | 2023-03-10 | |
| CVE-2023-27119 | WebAssembly wabt decompiler vulnerability | 5.5v3.1 | 0.3% | 2023-03-10 | |
| CVE-2023-27117 | Webassembly out-of-bounds write | 7.8v3.1 | 0.3% | 2023-03-10 | |
| CVE-2023-27116 | WebAssembly v1.0.29 discovered to contain an abort in CWriter::MangleType. | 5.5v3.1 | 0.3% | 2023-03-10 | Fix |
| CVE-2023-27115 | Webassembly improper initialization | 5.5v3.1 | 0.3% | 2023-03-10 | |
| CVE-2023-27114 | radare2 null pointer dereference | 5.5v3.1 | 0.3% | 2023-03-10 | Fix |
| CVE-2023-26464 | Apache Log4j (EOL) allows DoS in Chainsaw and SocketAppender | 7.5v3.1 | 1.9% | 2023-03-10 | Fix |
| CVE-2023-26075 | Samsung Exynos Auto T5123 buffer overflow | 9.8v3.1 | 0.9% | 2023-03-10 | Fix |
| CVE-2023-25947 | OpenAtom OpenHarmony bundle management subsystem null pointer dereference | 6.2CNA v3.1 | 0.2% | 2023-03-10 | |
| CVE-2023-25148 | Trend Micro Apex One security agent link following | 7.8v3.1 | 0.4% | 2023-03-10 | Fix |
| CVE-2023-25147 | Trend Micro Apex One uncontrolled search path | 6.7v3.1 | 0.2% | 2023-03-10 | Fix |
| CVE-2023-25146 | Trend Micro Apex One security agent link following | 7.8v3.1 | 0.4% | 2023-03-10 | Fix |
| CVE-2023-25145 | Trend Micro Apex One scanning function link following | 7.8v3.1 | 0.4% | 2023-03-10 | Fix |
| CVE-2023-25144 | Trend Micro Apex One An improper access control | 7.8v3.1 | 0.3% | 2023-03-10 | Fix |
| CVE-2023-25143 | Trend Micro Apex One An uncontrolled search path | 9.8v3.1 | 1.7% | 2023-03-10 | Fix |
| CVE-2023-24975 | IBM Spectrum Symphony host header injection | 5.4CNA v3.1 | 0.4% | 2023-03-10 | Fix |
| CVE-2023-24774 | Funadmin vulnerable to SQL injection | 9.8v3.1 | 0.9% | 2023-03-10 | |
| CVE-2023-24465 | OpenAtom OpenHarmony Wi-Fi subsystem null pointer dereference | 5.5CNA v3.1 | 0.2% | 2023-03-10 | |
| CVE-2023-23911 | Rocket.Chat improper access control | 7.5v3.1 | 0.3% | 2023-03-10 | |
| CVE-2023-23328 | AvantFAX file upload | 8.8v3.1 | 1.0% | 2023-03-10 | |
| CVE-2023-23327 | AvantFAX information disclosure | 4.9v3.1 | 0.8% | 2023-03-10 | |
| CVE-2023-23326 | AvantFAX stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-03-10 | |
| CVE-2023-22436 | OpenHarmony the kernel subsystem function check_permission_for_set_tokenid has an UAF | 7.8CNA v3.1 | 0.2% | 2023-03-10 | |
| CVE-2023-22301 | OpenHarmony the kernel subsystem hmdfs has a arbitrary memory accessing vulnerability | 6.5CNA v3.1 | 0.6% | 2023-03-10 | |
| CVE-2023-1346 | RapidLoad Power-Up for Autoptimize WordPress plugin cross-site request forgery via clear_page_cache | 4.3v3.1 | 0.3% | 2023-03-10 | Fix |
| CVE-2023-1345 | RapidLoad Power-Up for Autoptimize WordPress plugin cross-site request forgery via queue_posts | 4.3v3.1 | 0.3% | 2023-03-10 | Fix |
| CVE-2023-1344 | RapidLoad Power-Up for Autoptimize WordPress plugin cross-site request forgery via uucss_update_rule | 4.3v3.1 | 0.3% | 2023-03-10 | Fix |
| CVE-2023-1343 | RapidLoad Power-Up for Autoptimize WordPress plugin cross-site request forgery via attach_rule | 4.3v3.1 | 0.3% | 2023-03-10 | Fix |
| CVE-2023-1342 | RapidLoad Power-Up for Autoptimize WordPress plugin cross-site request forgery via ucss_connect | 4.3v3.1 | 0.3% | 2023-03-10 | Fix |
| CVE-2023-1341 | RapidLoad Power-Up for Autoptimize WordPress plugin cross-site request forgery via ajax_deactivate | 4.3v3.1 | 0.3% | 2023-03-10 | Fix |
| CVE-2023-1340 | RapidLoad Power-Up for Autoptimize WordPress plugin cross-site request forgery via clear_uucss_logs | 4.3v3.1 | 0.3% | 2023-03-10 | Fix |
| CVE-2023-1339 | RapidLoad Power-Up for Autoptimize WordPress plugin missing authorization in uucss_update_rule | 4.3v3.1 | 0.5% | 2023-03-10 | Fix |
| CVE-2023-1338 | RapidLoad Power-Up for Autoptimize WordPress plugin missing authorization in attach_rule | 4.3v3.1 | 0.5% | 2023-03-10 | Fix |
| CVE-2023-1337 | RapidLoad Power-Up for Autoptimize WordPress plugin missing authorization in clear_uucss_logs | 4.3v3.1 | 1.0% | 2023-03-10 | Exploit codeFix |
| CVE-2023-1336 | RapidLoad Power-Up for Autoptimize WordPress plugin missing authorization in ajax_deactivate | 4.3v3.1 | 0.5% | 2023-03-10 | Fix |
| CVE-2023-1335 | RapidLoad Power-Up for Autoptimize WordPress plugin missing authorization in ucss_connect | 4.3v3.1 | 0.5% | 2023-03-10 | Fix |
| CVE-2023-1334 | RapidLoad Power-Up for Autoptimize WordPress plugin missing authorization in queue_posts | 4.3v3.1 | 0.5% | 2023-03-10 | Fix |
| CVE-2023-1333 | RapidLoad Power-Up for Autoptimize WordPress plugin missing authorization in clear_page_cache | 4.3v3.1 | 0.5% | 2023-03-10 | Fix |
| CVE-2023-1328 | Guizhou 115cms index unrestricted upload | 7.2v3.1 | 0.9% | 2023-03-10 | |
| CVE-2023-1322 | Lmxcms BookAction.class.php reply SQL injection | 9.8v3.1 | 0.5% | 2023-03-10 | |
| CVE-2023-1321 | Lmxcms AcquisiAction.class.php update SQL injection | 9.8v3.1 | 0.5% | 2023-03-10 | |
| CVE-2023-1320 | Cross-site scripting (XSS) Stored in osTicket/osTicket | 6.1NVD v3.1 | 0.6% | 2023-03-10 | Fix |
| CVE-2023-1319 | Cross-site scripting (XSS) Stored in osTicket/osTicket | 4.8v3.1 | 0.5% | 2023-03-10 | Fix |
| CVE-2023-1318 | Cross-site scripting (XSS) Generic in osTicket/osTicket | 5.4v3.1 | 1.0% | 2023-03-10 | NucleiFix |
| CVE-2023-1317 | Cross-site scripting (XSS) Reflected in osTicket/osTicket | 5.4v3.1 | 1.0% | 2023-03-10 | NucleiFix |
| CVE-2023-1316 | Cross-site scripting (XSS) Stored in osTicket/osTicket | 5.4v3.1 | 0.5% | 2023-03-10 | Fix |
| CVE-2023-1315 | Cross-site scripting (XSS) Reflected in osTicket/osTicket | 5.4v3.1 | 1.1% | 2023-03-10 | NucleiFix |
| CVE-2023-1313 | Unrestricted upload of file with dangerous type in cockpit-hq/cockpit | 8.8v3.1 | 1.0% | 2023-03-10 | Fix |
| CVE-2023-1312 | Cross-site scripting (XSS) Reflected in pimcore/pimcore | 4.8v3.1 | 0.4% | 2023-03-10 | Fix |
| CVE-2023-1311 | SourceCodester Friendly Island Pizza Website and Ordering System large.php SQL injection | 9.8v3.1 | 0.8% | 2023-03-10 | |
| CVE-2023-1310 | SourceCodester Online Graduate Tracer System prof.php SQL injection | 9.8v3.1 | 0.7% | 2023-03-10 | |
| CVE-2023-1309 | SourceCodester Online Graduate Tracer System search_it.php SQL injection | 9.8v3.1 | 0.7% | 2023-03-10 | |
| CVE-2023-1308 | SourceCodester Online Graduate Tracer System adminlog.php SQL injection | 9.8v3.1 | 0.7% | 2023-03-10 | |
| CVE-2023-1307 | Authentication bypass by primary weakness in froxlor/froxlor | 9.8v3.1 | 1.1% | 2023-03-10 | Fix |
| CVE-2023-1246 | Files or directories accessible to external parties in Saysis Starcities | 7.5v3.1 | 0.6% | 2023-03-10 | |
| CVE-2023-1205 | NETGEAR Nighthawk WiFi6 Router cross-site request forgery | 8.8NVD v3.1 | 0.3% | 2023-03-10 | |
| CVE-2023-1203 | Devolutions Remote Desktop Manager PowerShell Module information disclosure | 6.5v3.1 | 1.1% | 2023-03-10 | Fix |
| CVE-2023-1201 | Devolutions Server secure messages feature improper access control | 6.5v3.1 | 0.8% | 2023-03-10 | Fix |
| CVE-2023-1198 | SQLi in Saysis Starcities | 9.8v3.1 | 0.7% | 2023-03-10 | |
| CVE-2023-1091 | SQL injection found in Alpata's Licensed Warehousing Automation System | 9.8v3.1 | 0.7% | 2023-03-10 | |
| CVE-2023-0746 | XSS vulnerability in GigaVue-FM | 6.1v3.1 | 0.4% | 2023-03-10 | Fix |
| CVE-2023-0193 | NVIDIA CUDA Toolkit out-of-bounds read | 4.4CNA v3.1 | 0.2% | 2023-03-10 | Fix |
| CVE-2023-0083 | OpenHarmony ArkUI framework type confusion | 4.0CNA v3.1 | 0.2% | 2023-03-10 | |
| CVE-2023-27986 | GNU Emacs code injection | 7.8v3.1 | 0.5% | 2023-03-09 | Fix |
| CVE-2023-27985 | GNU Emacs OS command injection | 7.8v3.1 | 1.1% | 2023-03-09 | Fix |
| CVE-2023-27974 | Bitwarden password auto-fill vulnerability | 7.5v3.1 | 1.0% | 2023-03-09 | Fix |
| CVE-2023-27490 | Missing proper state, nonce and PKCE checks for OAuth authentication in next-auth | 8.1CNA v3.1 | 0.5% | 2023-03-09 | Fix |
| CVE-2023-27484 | crossplane crossplane-runtime contains improper input validation via Compositions | 6.2CNA v3.1 | 0.7% | 2023-03-09 | Fix |
| CVE-2023-27483 | Fieldpath's Paved.SetValue allows growing arrays up to arbitrary sizes in crossplane-runtime | 5.9CNA v3.1 | 0.8% | 2023-03-09 | Fix |
| CVE-2023-27214 | Online Student Management System SQL injection | 9.8v3.1 | 0.8% | 2023-03-09 | |
| CVE-2023-27213 | Online Student Management System SQL injection | 9.8v3.1 | 0.8% | 2023-03-09 | |
| CVE-2023-27212 | Online Pizza Ordering System /php-opos/signup.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-03-09 | |
| CVE-2023-27211 | Online Pizza Ordering System /admin/navbar.php cross-site scripting | 6.1v3.1 | 0.4% | 2023-03-09 | |
| CVE-2023-27210 | Online Pizza Ordering System SQL injection | 9.8v3.1 | 0.9% | 2023-03-09 | |
| CVE-2023-27208 | Online Pizza Ordering System /php-opos/login.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-03-09 | |
| CVE-2023-27207 | Online Pizza Ordering System SQL injection | 9.8v3.1 | 0.9% | 2023-03-09 | |
| CVE-2023-27206 | Mayuri K Best POS Management System /kruxton/navbar.php cross-site scripting | 6.1v3.1 | 0.4% | 2023-03-09 | |
| CVE-2023-27205 | Mayuri K Best POS Management System SQL injection | 9.8v3.1 | 0.8% | 2023-03-09 | |
| CVE-2023-27204 | Mayuri K Best POS Management System SQL injection | 9.8v3.1 | 0.8% | 2023-03-09 | |
| CVE-2023-27203 | Mayuri K Best POS Management System SQL injection | 9.8v3.1 | 0.8% | 2023-03-09 | |
| CVE-2023-27202 | Mayuri K Best POS Management System SQL injection | 9.8v3.1 | 0.8% | 2023-03-09 | |
| CVE-2023-26957 | Onekeyadmin missing authorization | 9.1v3.1 | 0.6% | 2023-03-09 | |
| CVE-2023-26948 | Onekeyadmin files accessible to external parties | 7.5v3.1 | 0.6% | 2023-03-09 | |
| CVE-2023-26209 | Fortinet FortiDeceptor missing brute-force protection | 3.5CNA v3.1 | 1.7% | 2023-03-09 | Fix |
| CVE-2023-26208 | Fortinet FortiAuthenticator missing brute-force protection | 3.5CNA v3.1 | 1.8% | 2023-03-09 | Exploit codeFix |
| CVE-2023-26110 | node-bluetooth is vulnerable to buffer overflow | 9.8v3.1 | 0.9% | 2023-03-09 | |
| CVE-2023-26109 | node-bluetooth-serial-port is vulnerable to buffer overflow via the findSerialPortChannel | 9.8v3.1 | 0.7% | 2023-03-09 | |
| CVE-2023-25814 | Arbitrary file read vulnerability in metersphere | 7.1CNA v3.1 | 0.9% | 2023-03-09 | Fix |
| CVE-2023-25573 | Improper access control to download file in metersphere | 8.6CNA v3.1 | 51.6% | 2023-03-09 | NucleiFix |
| CVE-2023-20064 | Cisco IOS XR Software Bootloader Unauthenticated information disclosure | 4.6CNA v3.1 | 0.3% | 2023-03-09 | Fix |
| CVE-2023-20049 | Cisco IOS XR Software bidirectional forwarding detection hardware offload denial of service | 8.6CNA v3.1 | 1.0% | 2023-03-09 | Fix |
| CVE-2023-1303 | UCMS System File Management module fileedit.php unrestricted upload | 9.8v3.1 | 0.8% | 2023-03-09 | |
| CVE-2023-1302 | SourceCodester File Tracker Manager System borrow1.php cross-site scripting | 6.1v3.1 | 0.6% | 2023-03-09 | |
| CVE-2023-1301 | SourceCodester Friendly Island Pizza Website and Ordering System deleteorder.php SQL injection | 9.8v3.1 | 0.8% | 2023-03-09 | |
| CVE-2023-1300 | SourceCodester COVID 19 Testing Management System POST parameter patient-report.php SQL injection | 9.8v3.1 | 0.8% | 2023-03-09 | |
| CVE-2023-1294 | SourceCodester File Tracker Manager System POST parameter login.php SQL injection | 9.8v3.1 | 0.8% | 2023-03-09 | |
| CVE-2023-1293 | SourceCodester Online Graduate Tracer System admin_cs.php mysqli_query SQL injection | 8.1v3.1 | 0.6% | 2023-03-09 | |
| CVE-2023-1292 | SourceCodester Sales Tracker Management System Master.php delete_client SQL injection | 9.8v3.1 | 0.8% | 2023-03-09 | |
| CVE-2023-1291 | SourceCodester Sales Tracker Management System manage_client.php SQL injection | 9.8v3.1 | 0.8% | 2023-03-09 | |
| CVE-2023-1290 | SourceCodester Sales Tracker Management System view_client.php SQL injection | 9.8v3.1 | 0.8% | 2023-03-09 | |
| CVE-2023-1288 | ENOVIA Live Collaboration V6R2013xE is affected by an XML external entity injection (XXE) | 6.8CNA v3.1 | 0.5% | 2023-03-09 | |
| CVE-2023-1287 | ENOVIA Live Collaboration V6R2013xE is affected by an XSL template injection | 9.0CNA v3.1 | 1.0% | 2023-03-09 | |
| CVE-2023-1286 | Cross-site scripting (XSS) Stored in pimcore/pimcore | 4.8v3.1 | 0.4% | 2023-03-09 | Fix |
| CVE-2023-1251 | Akinsoft Wolvox SQL command improper neutralization | 9.8v3.1 | 0.6% | 2023-03-09 | Fix |
| CVE-2023-1084 | GitLab Project Access Token creation vulnerability | 2.7CNA v3.1 | 0.8% | 2023-03-09 | Fix |
| CVE-2023-1072 | GitLab resource exhaustion | 4.3CNA v3.1 | 0.8% | 2023-03-09 | Fix |
| CVE-2023-0845 | Consul Server panic when Ingress and API Gateways Configured with Peering | 4.9CNA v3.1 | 1.0% | 2023-03-09 | Fix |
| CVE-2023-0623 | Horner Automation Cscape EnvisionRV project file parser out-of-bounds write | 7.8v3.1 | 0.2% | 2023-03-09 | Fix |
| CVE-2023-0622 | Horner Automation Cscape EnvisionRV project file parser out-of-bounds write | 7.8v3.1 | 0.2% | 2023-03-09 | Fix |
| CVE-2023-0621 | Horner Automation Cscape EnvisionRV project file parser out-of-bounds read | 7.8v3.1 | 0.2% | 2023-03-09 | Fix |
| CVE-2023-0483 | GitLab Datadog integration information disclosure | 5.5CNA v3.1 | 0.6% | 2023-03-09 | Fix |
| CVE-2023-0223 | GitLab release API vulnerability | 5.3CNA v3.1 | 0.8% | 2023-03-09 | Fix |
| CVE-2023-0050 | GitLab cross-site scripting | 8.7CNA v3.1 | 92.4% | 2023-03-09 | Fix |
| CVE-2023-27486 | Insufficient authorization validation between zones when xCAT zones are enabled | 8.1CNA v3.1 | 0.9% | 2023-03-08 | Fix |
| CVE-2023-27482 | home-assistant core improper authentication | 10.0CNA v3.1 | 72.2% | 2023-03-08 | NucleiFix |
| CVE-2023-27477 | wasmtime vulnerable to miscompilation of `i8x16.select` with the same inputs on x86_64 | 3.1CNA v3.1 | 0.6% | 2023-03-08 | Fix |
| CVE-2023-27476 | XML external entity (XXE) injection in OWSLib | 8.2CNA v3.1 | 1.0% | 2023-03-08 | Fix |
| CVE-2023-27088 | Feiqu-opensource improper access control | 8.8v3.1 | 0.6% | 2023-03-08 | |
| CVE-2023-26956 | Onekeyadmin files accessible to external parties | 7.5v3.1 | 0.7% | 2023-03-08 | |
| CVE-2023-26952 | Onekeyadmin cross-site scripting | 5.4v3.1 | 0.4% | 2023-03-08 | |
| CVE-2023-26950 | Onekeyadmin cross-site scripting | 5.4v3.1 | 0.4% | 2023-03-08 | |
| CVE-2023-26922 | Variscite Matrix-gui Varisicte SQL injection | 9.8v3.1 | 1.2% | 2023-03-08 | |
| CVE-2023-26489 | Guest-controlled out-of-bounds read/write on x86_64 in wasmtime | 10.0CNA v3.1 | 1.3% | 2023-03-08 | Fix |
| CVE-2023-26261 | Ubikasec Waap Gateway XPath injection | 9.8v3.1 | 0.8% | 2023-03-08 | |
| CVE-2023-25395 | TOTOLINK A7100RU OS command injection | 9.8v3.1 | 1.9% | 2023-03-08 | |
| CVE-2023-24782 | SQL injection in Funadmin | 9.8v3.1 | 0.7% | 2023-03-08 | |
| CVE-2023-24780 | SQL injection in Funadmin | 9.8v3.1 | 0.8% | 2023-03-08 | |
| CVE-2023-24777 | SQL injection in Funadmin | 9.8v3.1 | 0.7% | 2023-03-08 | |
| CVE-2023-24773 | SQL injection in Funadmin | 9.8v3.1 | 0.7% | 2023-03-08 | |
| CVE-2023-24657 | phpipam cross-site scripting | 6.1v3.1 | 3.9% | 2023-03-08 | NucleiExploit code |
| CVE-2023-24533 | Incorrect multiplication of unreduced P-256 scalars in filippo.io/Nistec | 7.5v3.1 | 0.7% | 2023-03-08 | Fix |
| CVE-2023-24532 | Incorrect calculation on P256 curves in crypto/internal/nistec | 5.3v3.1 | 0.8% | 2023-03-08 | Fix |
| CVE-2023-24282 | Poly Trio 8800 An arbitrary file upload | 5.4v3.1 | 0.5% | 2023-03-08 | |
| CVE-2023-23760 | Path traversal in GitHub Enterprise Server leading to remote code execution | 4.9CNA v3.1 | 1.0% | 2023-03-08 | Fix |
| CVE-2023-23638 | Apache Dubbo deserialization vulnerability Gadgets Bypass | 5.0CNA v3.1 | 4.8% | 2023-03-08 | Exploit codeFix |
| CVE-2023-22892 | SMARTBEAR Zephyr Enterprise information disclosure | 7.5v3.1 | 0.6% | 2023-03-08 | Fix |
| CVE-2023-22891 | SMARTBEAR Zephyr Enterprise privilege escalation | 8.1v3.1 | 0.5% | 2023-03-08 | Fix |
| CVE-2023-22890 | SMARTBEAR Zephyr Enterprise unrestricted file upload | 7.5v3.1 | 0.6% | 2023-03-08 | Fix |
| CVE-2023-22889 | SMARTBEAR Zephyr Enterprise code injection | 9.8v3.1 | 1.3% | 2023-03-08 | Fix |
| CVE-2023-1283 | Code injection in BuilderIO/Qwik | 9.8v3.1 | 1.1% | 2023-03-08 | Fix |
| CVE-2023-1278 | IBOS index.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-03-08 | |
| CVE-2023-1277 | kylin-system-updater Update InstallSnap command injection | 7.8v3.1 | 1.8% | 2023-03-08 | |
| CVE-2023-1276 | SUL1SS_shop Order.php SQL injection | 7.2v3.1 | 0.7% | 2023-03-08 | |
| CVE-2023-1275 | SourceCodester Phone Shop Sales Managements System CAPTCHA index.php cross-site scripting | 6.1v3.1 | 0.6% | 2023-03-08 | |
| CVE-2023-1270 | Cross-site scripting in Btcpayserver/Btcpayserver | 5.4v3.1 | 0.4% | 2023-03-08 | Fix |
| CVE-2023-1269 | Easy!Appointments uses hard-coded credentials | 9.8v3.1 | 0.7% | 2023-03-08 | Fix |
| CVE-2023-1267 | SQLi in Ulkem Company's PtteM Kart | 9.8v3.1 | 0.7% | 2023-03-08 | Fix |
| CVE-2023-0090 | Proofpoint Enterprise Protection webservices unauthenticated RCE | 9.8CNA v3.1 | 0.7% | 2023-03-08 | Exploit codeFix |
| CVE-2023-0089 | Proofpoint Enterprise Protection webutils authenticated RCE | 8.8CNA v3.1 | 0.7% | 2023-03-08 | Exploit codeFix |
| CVE-2023-0030 | Linux kernel A use-after-free | 7.8NVD v3.1 | 0.2% | 2023-03-08 | Fix |
| CVE-2023-27522 | Apache HTTP Server: Mod_proxy_uwsgi HTTP response splitting | 7.5v3.1 | 2.1% | 2023-03-07 | Fix |
| CVE-2023-27485 | feedbacksystem subresults query incorrect authorization | 4.3CNA v3.1 | 0.5% | 2023-03-07 | Fix |
| CVE-2023-27481 | Extract password hashes through export querying in directus | 4.3CNA v3.1 | 0.6% | 2023-03-07 | Fix |
| CVE-2023-27480 | xwiki-platform data leak through a XAR import XXE attack in xwiki-platform-xar-model | 7.7CNA v3.1 | 0.7% | 2023-03-07 | Fix |
| CVE-2023-27479 | xwiki-platform org.Xwiki.platform:xwiki-platform-panels-ui vulnerable to eval injection | 10.0CNA v3.1 | 1.1% | 2023-03-07 | Fix |
| CVE-2023-27478 | awesomized libmemcached disclosure of unrelated data in libmemcached-awesome | 6.5CNA v3.1 | 0.7% | 2023-03-07 | Fix |
| CVE-2023-27475 | Goutil vulnerable to path traversal when unzipping files | 8.8CNA v3.1 | 0.8% | 2023-03-07 | Fix |
| CVE-2023-26955 | Onekeyadmin cross-site scripting | 5.4v3.1 | 0.4% | 2023-03-07 | |
| CVE-2023-26954 | Onekeyadmin cross-site scripting | 5.4v3.1 | 0.4% | 2023-03-07 | |
| CVE-2023-26953 | Onekeyadmin cross-site scripting | 4.8v3.1 | 0.5% | 2023-03-07 | |
| CVE-2023-25690 | Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy | 9.8NVD v3.1 | 84.5% | 2023-03-07 | Emerging ThreatsExploit codeFix |
| CVE-2023-25611 | Fortinet FortiAnalyzer CSV file vulnerability improper neutralization | 4.0CNA v3.1 | 0.3% | 2023-03-07 | Fix |
| CVE-2023-25605 | Fortinet FortiSOAR improper access control | 7.5CNA v3.1 | 0.9% | 2023-03-07 | Fix |
| CVE-2023-25230 | Loonflow A server-side request forgery | 4.9v3.1 | 0.7% | 2023-03-07 | |
| CVE-2023-25223 | crmeb_java SQL injection | 7.2v3.1 | 0.8% | 2023-03-07 | |
| CVE-2023-24781 | SQL injection in Funadmin | 9.8v3.1 | 0.7% | 2023-03-07 | |
| CVE-2023-24775 | SQL injection in Funadmin | 9.8v3.1 | 19.8% | 2023-03-07 | Exploit code |
| CVE-2023-23776 | Fortinet FortiAnalyzer information disclosure | 4.6CNA v3.1 | 0.2% | 2023-03-07 | Fix |
| CVE-2023-23554 | IVM Development Group pg_ivm uncontrolled search path | 8.8v3.1 | 0.9% | 2023-03-07 | Fix |
| CVE-2023-22847 | IVM Development Group pg_ivm information disclosure | 4.3v3.1 | 0.6% | 2023-03-07 | Fix |
| CVE-2023-20651 | MediaTek chipsets improper input validation in apu | 4.4v3.1 | 0.1% | 2023-03-07 | Fix |
| CVE-2023-20650 | MediaTek chipsets improper input validation in apu | 6.7v3.1 | 0.1% | 2023-03-07 | Fix |
| CVE-2023-20649 | MediaTek chipsets improper input validation in ril | 4.4v3.1 | 0.1% | 2023-03-07 | Fix |
| CVE-2023-20648 | MediaTek chipsets improper input validation in ril | 4.4v3.1 | 0.1% | 2023-03-07 | Fix |
| CVE-2023-20647 | MediaTek chipsets improper input validation in ril | 4.4v3.1 | 0.1% | 2023-03-07 | Fix |
| CVE-2023-20646 | MediaTek chipsets improper input validation in ril | 4.4v3.1 | 0.1% | 2023-03-07 | Fix |
| CVE-2023-20645 | MediaTek chipsets improper input validation in ril | 4.4v3.1 | 0.1% | 2023-03-07 | Fix |
| CVE-2023-20644 | MediaTek chipsets improper input validation in ril | 4.4v3.1 | 0.1% | 2023-03-07 | Fix |
| CVE-2023-20643 | MediaTek chipsets improper input validation in ril | 6.7v3.1 | 0.1% | 2023-03-07 | Fix |
| CVE-2023-20642 | MediaTek chipsets improper input validation in ril | 6.7v3.1 | 0.1% | 2023-03-07 | Fix |
| CVE-2023-20641 | MediaTek chipsets improper input validation in ril | 6.7v3.1 | 0.1% | 2023-03-07 | Fix |
| CVE-2023-20640 | MediaTek chipsets improper input validation in ril | 6.7v3.1 | 0.1% | 2023-03-07 | Fix |
| CVE-2023-20639 | MediaTek chipsets improper input validation in ril | 6.7v3.1 | 0.1% | 2023-03-07 | Fix |
| CVE-2023-20638 | MediaTek chipsets improper input validation in ril | 6.7v3.1 | 0.1% | 2023-03-07 | Fix |
| CVE-2023-20637 | MediaTek chipsets improper input validation in ril | 6.7v3.1 | 0.1% | 2023-03-07 | Fix |
| CVE-2023-20636 | MediaTek chipsets improper input validation in display drm | 6.7v3.1 | 0.1% | 2023-03-07 | Fix |
| CVE-2023-20635 | MediaTek chipsets integer underflow (wrap or wraparound) in keyinstall | 4.4v3.1 | 0.1% | 2023-03-07 | Fix |
| CVE-2023-20634 | MediaTek chipsets improper input validation in widevine | 6.7v3.1 | 0.1% | 2023-03-07 | Fix |
| CVE-2023-20633 | MediaTek chipsets improper validation of array index in usb | 6.7v3.1 | 0.1% | 2023-03-07 | Fix |
| CVE-2023-20632 | MediaTek chipsets out-of-bounds write in usb | 6.7v3.1 | 0.1% | 2023-03-07 | Fix |
| CVE-2023-20630 | MediaTek chipsets out-of-bounds write in usb | 6.7v3.1 | 0.1% | 2023-03-07 | Fix |
| CVE-2023-20628 | MediaTek chipsets improper check or handling of exceptional conditions in thermal | 6.7v3.1 | 0.1% | 2023-03-07 | Fix |
| CVE-2023-20627 | MediaTek chipsets incorrect calculation of buffer size in pqframework | 6.7v3.1 | 0.1% | 2023-03-07 | Fix |
| CVE-2023-20626 | MediaTek chipsets improper input validation in msdc | 6.7v3.1 | 0.1% | 2023-03-07 | Fix |
| CVE-2023-20625 | MediaTek chipsets improper synchronization in adsp | 6.4v3.1 | 0.1% | 2023-03-07 | Fix |
| CVE-2023-20624 | MediaTek chipsets buffer copy without checking size of input (classic buffer overflow) in vow | 6.7v3.1 | 0.1% | 2023-03-07 | Fix |
| CVE-2023-20623 | MediaTek chipsets time-of-check time-of-use (toctou) race condition in ion | 6.4v3.1 | 0.1% | 2023-03-07 | Fix |
| CVE-2023-20621 | MediaTek chipsets improper input validation in tinysys | 6.7v3.1 | 0.1% | 2023-03-07 | Fix |
| CVE-2023-20620 | MediaTek chipsets time-of-check time-of-use (toctou) race condition in adsp | 4.1v3.1 | 0.1% | 2023-03-07 | Fix |
| CVE-2023-1264 | Null pointer dereference in Vim/Vim | 5.5v3.1 | 0.4% | 2023-03-07 | Fix |
| CVE-2023-1263 | CMP Coming Soon and Maintenance Plugin by NiteoThemes WordPress plugin information exposure | 5.3v3.1 | 1.4% | 2023-03-07 | NucleiFix |
| CVE-2023-1257 | Moxa UC Series BIOS vulnerability | 6.8NVD v3.1 | 0.3% | 2023-03-07 | Fix |
| CVE-2023-1254 | SourceCodester Health Center Patient Record Management System cross-site scripting | 5.4v3.1 | 0.6% | 2023-03-07 | |
| CVE-2023-1253 | SourceCodester Health Center Patient Record Management System login.php SQL injection | 9.8v3.1 | 0.8% | 2023-03-07 | |
| CVE-2023-1245 | Cross-site scripting (XSS) Stored in answerdev/Answer | 5.4v3.1 | 0.5% | 2023-03-07 | Fix |
| CVE-2023-1244 | Cross-site scripting (XSS) Stored in answerdev/Answer | 5.4NVD v3.1 | 0.5% | 2023-03-07 | Fix |
| CVE-2023-1243 | Cross-site scripting (XSS) Stored in answerdev/Answer | 4.8v3.1 | 0.5% | 2023-03-07 | Fix |
| CVE-2023-1242 | Cross-site scripting (XSS) Stored in answerdev/Answer | 5.4NVD v3.1 | 0.6% | 2023-03-07 | Fix |
| CVE-2023-1241 | Cross-site scripting (XSS) Stored in answerdev/Answer | 5.4NVD v3.1 | 0.6% | 2023-03-07 | Fix |
| CVE-2023-1240 | Cross-site scripting (XSS) Stored in answerdev/Answer | 5.4NVD v3.1 | 0.6% | 2023-03-07 | Fix |
| CVE-2023-1239 | Cross-site scripting (XSS) Reflected in answerdev/Answer | 4.8v3.1 | 0.5% | 2023-03-07 | Fix |
| CVE-2023-1238 | Cross-site scripting (XSS) Stored in answerdev/Answer | 5.4NVD v3.1 | 0.6% | 2023-03-07 | Fix |
| CVE-2023-1237 | Cross-site scripting (XSS) Stored in answerdev/Answer | 5.4v3.1 | 0.4% | 2023-03-07 | Fix |
| CVE-2023-1236 | Google Chrome Internals inappropriate implementation | 4.3v3.1 | 0.5% | 2023-03-07 | Fix |
| CVE-2023-1235 | Google Chrome DevTools type confusion | 6.3v3.1 | 0.4% | 2023-03-07 | Fix |
| CVE-2023-1234 | Google Chrome Intents inappropriate implementation | 4.3v3.1 | 0.7% | 2023-03-07 | Fix |
| CVE-2023-1233 | Google Chrome Resource Timing insufficient policy enforcement | 4.3v3.1 | 0.4% | 2023-03-07 | Fix |
| CVE-2023-1232 | Google Chrome Resource Timing insufficient policy enforcement | 4.3v3.1 | 0.5% | 2023-03-07 | Fix |
| CVE-2023-1231 | Google Chrome Autofill inappropriate implementation | 4.3v3.1 | 0.5% | 2023-03-07 | Fix |
| CVE-2023-1230 | Google Chrome WebApp Installs inappropriate implementation | 4.3v3.1 | 0.3% | 2023-03-07 | Fix |
| CVE-2023-1229 | Google Chrome Permission prompts inappropriate implementation | 4.3v3.1 | 1.2% | 2023-03-07 | Fix |
| CVE-2023-1228 | Google Chrome Intents insufficient policy enforcement | 4.3NVD v3.1 | 0.4% | 2023-03-07 | Fix |
| CVE-2023-1227 | Google Chrome Core use-after-free | 8.8v3.1 | 0.5% | 2023-03-07 | Fix |
| CVE-2023-1226 | Google Chrome Web Payments API insufficient policy enforcement | 6.5v3.1 | 0.5% | 2023-03-07 | Fix |
| CVE-2023-1225 | Google Chrome Navigation insufficient policy enforcement | 4.3v3.1 | 0.4% | 2023-03-07 | Fix |
| CVE-2023-1224 | Google Chrome Web Payments API insufficient policy enforcement | 4.3v3.1 | 0.4% | 2023-03-07 | Fix |
| CVE-2023-1223 | Google Chrome Autofill insufficient policy enforcement | 4.3v3.1 | 0.4% | 2023-03-07 | Fix |
| CVE-2023-1222 | Google Chrome Web Audio API heap-based buffer overflow | 8.8v3.1 | 0.6% | 2023-03-07 | Fix |
| CVE-2023-1221 | Google Chrome Extensions API insufficient policy enforcement | 4.3v3.1 | 0.3% | 2023-03-07 | Fix |
| CVE-2023-1220 | Google Chrome UMA heap-based buffer overflow | 8.8v3.1 | 1.0% | 2023-03-07 | Fix |
| CVE-2023-1219 | Google Chrome Metrics heap-based buffer overflow | 8.8v3.1 | 1.1% | 2023-03-07 | Fix |
| CVE-2023-1218 | Google Chrome WebRTC use-after-free | 8.8v3.1 | 0.5% | 2023-03-07 | Fix |
| CVE-2023-1217 | Google Chrome Crash reporting stack-based buffer overflow | 6.5v3.1 | 0.5% | 2023-03-07 | Fix |
| CVE-2023-1216 | Google Chrome DevTools use-after-free | 8.8v3.1 | 0.5% | 2023-03-07 | Fix |
| CVE-2023-1215 | Google Chrome CSS type confusion | 8.8v3.1 | 0.5% | 2023-03-07 | Fix |
| CVE-2023-1214 | Google Chrome V8 type confusion | 8.8v3.1 | 0.7% | 2023-03-07 | Fix |
| CVE-2023-1213 | Google Chrome Swiftshader use-after-free | 8.8v3.1 | 0.5% | 2023-03-07 | Fix |
| CVE-2023-1212 | Cross-site scripting (XSS) Stored in phpipam/phpipam | 4.8v3.1 | 0.5% | 2023-03-07 | Fix |
| CVE-2023-1211 | SQL injection in phpipam/phpipam | 7.2v3.1 | 3.1% | 2023-03-07 | Exploit codeFix |
| CVE-2023-1003 | Typora WSH JScript code injection | 7.8v3.1 | 0.4% | 2023-03-07 | |
| CVE-2023-27891 | Insufficient session expiration in pretix | 7.5v3.1 | 0.6% | 2023-03-06 | Fix |
| CVE-2023-27474 | HTML injection in Password Reset email to custom Reset URL in directus | 8.0CNA v3.1 | 0.5% | 2023-03-06 | Fix |
| CVE-2023-27472 | HTML tags in entity names in the tree view are not sanitised in quickentity-editor-next | 8.2CNA v3.1 | 0.3% | 2023-03-06 | Fix |
| CVE-2023-26949 | Onekeyadmin component /admin1/config/update arbitrary file upload | 9.8v3.1 | 0.9% | 2023-03-06 | |
| CVE-2023-26601 | Zoho ManageEngine AssetExplorer denial of service | 7.5v3.1 | 34.1% | 2023-03-06 | Fix |
| CVE-2023-26600 | Zoho ManageEngine AssetExplorer improper privilege management | 6.5v3.1 | 6.3% | 2023-03-06 | Fix |
| CVE-2023-26111 | node-static and @nubosoftware/node-static vulnerable to directory traversal | 7.5v3.1 | 1.4% | 2023-03-06 | |
| CVE-2023-26108 | @nestjs/core vulnerable to information exposure via StreamableFile pipe | 5.3v3.1 | 0.7% | 2023-03-06 | Fix |
| CVE-2023-26107 | SketchSVG arbitrary code injection | 7.8v3.1 | 0.4% | 2023-03-06 | |
| CVE-2023-26106 | dot-lens vulnerable to prototype pollution | 7.5v3.1 | 0.9% | 2023-03-06 | |
| CVE-2023-26054 | Credentials inlined to Git URLs could end up in provenance attestation in BuildKit | 6.5CNA v3.1 | 1.0% | 2023-03-06 | Fix |
| CVE-2023-25304 | Prism Launcher path traversal | 7.8v3.1 | 0.4% | 2023-03-06 | Fix |
| CVE-2023-25169 | Yearly Review plugin leaking anonymised users data in discourse-yearly-review | 3.1CNA v3.1 | 0.4% | 2023-03-06 | Fix |
| CVE-2023-25077 | EC-CUBE 4 series Authentication Key settings cross-site scripting | 5.4v3.1 | 0.6% | 2023-03-06 | Fix |
| CVE-2023-24789 | Jeecg jeecg-boot contains SQL injection | 8.8v3.1 | 0.8% | 2023-03-06 | |
| CVE-2023-24776 | Remote code execution in Funadmin | 9.8v3.1 | 1.4% | 2023-03-06 | |
| CVE-2023-24763 | PrestaShop Xen Forum SQL injection | 8.8v3.1 | 0.9% | 2023-03-06 | |
| CVE-2023-24737 | SIGB PMB cross-site scripting | 6.1v3.1 | 1.2% | 2023-03-06 | Nuclei |
| CVE-2023-24736 | SIGB PMB remote code execution | 9.8v3.1 | 1.6% | 2023-03-06 | |
| CVE-2023-24735 | SIGB PMB open redirect | 6.1v3.1 | 1.1% | 2023-03-06 | Nuclei |
| CVE-2023-24734 | SIGB PMB camera_upload.php component arbitrary file upload | 9.8v3.1 | 20.7% | 2023-03-06 | |
| CVE-2023-24733 | SIGB PMB cross-site scripting | 6.1v3.1 | 1.2% | 2023-03-06 | Nuclei |
| CVE-2023-24217 | Agilebio Electronic Lab Notebook remote file inclusion | 8.8v3.1 | 4.5% | 2023-03-06 | Exploit codeFix |
| CVE-2023-23939 | Azure/setup-kubectl: Escalation of privilege vulnerability for v3 and lower | 3.9CNA v3.1 | 0.4% | 2023-03-06 | Fix |
| CVE-2023-22858 | Stored cross-site scripting in BlogEngine.NET | 5.3v3.1 | 0.4% | 2023-03-06 | |
| CVE-2023-22857 | Stored cross-site scripting in BlogEngine.NET | 5.4NVD v3.1 | 0.4% | 2023-03-06 | |
| CVE-2023-22856 | Stored cross-site scripting in BlogEngine.NET | 5.4NVD v3.1 | 0.4% | 2023-03-06 | |
| CVE-2023-22838 | EC-CUBE 4 series cross-site scripting | 5.4v3.1 | 0.5% | 2023-03-06 | Fix |
| CVE-2023-22481 | Sensitive information exposure in the logs of greader API in FreshRSS | 4.0CNA v3.1 | 0.5% | 2023-03-06 | Fix |
| CVE-2023-22438 | EC-CUBE 4 series Contents Management cross-site scripting | 5.4v3.1 | 0.7% | 2023-03-06 | Fix |
| CVE-2023-22432 | Open redirect in web2py | 6.1v3.1 | 2.4% | 2023-03-06 | NucleiExploit codeFix |
| CVE-2023-22424 | JTEKT ELECTRONICS Kostac PLC Programming Software use-after-free | 7.8v3.1 | 0.3% | 2023-03-06 | Fix |
| CVE-2023-22421 | JTEKT ELECTRONICS Kostac PLC Programming Software out-of-bounds read | 7.8v3.1 | 0.3% | 2023-03-06 | Fix |
| CVE-2023-22419 | JTEKT ELECTRONICS Kostac PLC Programming Software out-of-bounds read | 7.8v3.1 | 0.2% | 2023-03-06 | Fix |
| CVE-2023-22344 | DOS SS1 and Rakuraku PC Cloud hard-coded credentials | 9.8v3.1 | 0.9% | 2023-03-06 | Fix |
| CVE-2023-22336 | DOS SS1 and Rakuraku PC Cloud path traversal | 9.8v3.1 | 1.1% | 2023-03-06 | Fix |
| CVE-2023-22335 | DOS SS1 and Rakuraku PC Cloud improper access control | 7.5v3.1 | 0.7% | 2023-03-06 | Fix |
| CVE-2023-1200 | ehuacui bbs cross-site scripting | 5.4v3.1 | 0.6% | 2023-03-06 | |
| CVE-2023-1197 | Cross-site scripting (XSS) Stored in uvdesk/community-skeleton | 4.8v3.1 | 0.4% | 2023-03-06 | Fix |
| CVE-2023-1191 | FastCMS ZIP File TemplateController.java path traversal | 7.2v3.1 | 0.9% | 2023-03-06 | |
| CVE-2023-1190 | xiaozhuai imageinfo imageinfo.hpp buffer overflow | 7.8v3.1 | 0.4% | 2023-03-06 | |
| CVE-2023-1189 | WiseCleaner Wise Folder Hider IoControlCode WiseFs64.sys 0x222410 denial of service | 5.5v3.1 | 0.4% | 2023-03-06 | Exploit code |
| CVE-2023-1188 | FabulaTech Webcam for Remote Desktop IoControlCode ftwebcam.sys 0x222018 denial of service | 5.5v3.1 | 0.4% | 2023-03-06 | |
| CVE-2023-1187 | FabulaTech Webcam for Remote Desktop Global variable ftwebcam.sys denial of service | 5.5v3.1 | 0.4% | 2023-03-06 | |
| CVE-2023-1186 | FabulaTech Webcam for Remote Desktop IOCTL ftwebcam.sys 0x222018 null pointer dereference | 5.5v3.1 | 0.4% | 2023-03-06 | |
| CVE-2023-1185 | ECshop New Product unrestricted upload | 8.8v3.1 | 0.7% | 2023-03-06 | |
| CVE-2023-1184 | ECshop Backup Database database.php unrestricted upload | 8.8v3.1 | 0.7% | 2023-03-06 | |
| CVE-2023-1161 | Wireshark buffer overflow | 6.3CNA v3.1 | 0.6% | 2023-03-06 | Fix |
| CVE-2023-0979 | MedDataPACS SQL command improper neutralization | 9.8v3.1 | 0.7% | 2023-03-06 | Fix |
| CVE-2023-0839 | Improper error handling in inSCADA | 9.8v3.1 | 0.6% | 2023-03-06 | Fix |
| CVE-2023-0377 | Scriptless Social Sharing WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.8% | 2023-03-06 | Fix |
| CVE-2023-0330 | Qemu: Lsi53c895a: Dma reentrancy issue leads to stack overflow | 6.0NVD v3.1 | 0.3% | 2023-03-06 | Fix |
| CVE-2023-0328 | WPCode WordPress plugin Contributor+ WPCode Library Auth Key Update/Deletion | 4.3NVD v3.1 | 0.8% | 2023-03-06 | Fix |
| CVE-2023-0212 | Advanced Recent Posts WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-03-06 | |
| CVE-2023-0165 | Cost Calculator WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-03-06 | |
| CVE-2023-0093 | Okta Advanced Server Access command injection | 8.8v3.1 | 1.1% | 2023-03-06 | Fix |
| CVE-2023-0078 | Resume Builder WordPress plugin Subscriber+ stored XSS | 5.4NVD v3.1 | 0.4% | 2023-03-06 | Fix |
| CVE-2023-0076 | Download Attachments WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-03-06 | Fix |
| CVE-2023-0069 | WPaudio MP3 Player WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.7% | 2023-03-06 | |
| CVE-2023-0068 | Product GTIN (EAN, UPC, ISBN) for WooCommerce WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-03-06 | |
| CVE-2023-0065 | i2 Pros and Cons WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-03-06 | |
| CVE-2023-0064 | eVision Responsive Column Layout Shortcodes WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-03-06 | |
| CVE-2023-0063 | Synved Shortcodes WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-03-06 | |
| CVE-2023-27641 | Lsoft Listserv cross-site scripting | 6.1v3.1 | 1.1% | 2023-03-05 | Nuclei |
| CVE-2023-27635 | Debian Debmany arbitrary command execution | 7.8v3.1 | 0.4% | 2023-03-05 | Fix |
| CVE-2023-26510 | Ghost missing authorization | 5.7v3.1 | 0.6% | 2023-03-05 | Fix |
| CVE-2023-1181 | Cross-site scripting (XSS) Stored in icret/Easyimages2.0 | 5.4v3.1 | 0.4% | 2023-03-05 | Fix |
| CVE-2023-1180 | SourceCodester Health Center Patient Record Management System cross-site scripting | 6.1v3.1 | 0.6% | 2023-03-05 | |
| CVE-2023-1179 | SourceCodester Computer Parts Sales and Inventory System Add Supplier cross-site scripting | 5.4v3.1 | 0.6% | 2023-03-05 | |
| CVE-2023-0734 | Improper authorization in wallabag/wallabag | 5.3NVD v3.1 | 0.5% | 2023-03-05 | Fix |
| CVE-2023-26490 | Mailcow is vulnerable to shell command injection via xoauth2 authentication in imapsync | 7.3CNA v3.1 | 2.2% | 2023-03-04 | Fix |
| CVE-2023-26487 | Vega has cross-site scripting vulnerability in `lassoAppend` function | 6.5CNA v3.1 | 0.8% | 2023-03-04 | Fix |
| CVE-2023-26486 | Vega `scale` expression function cross-site scripting | 6.5CNA v3.1 | 0.8% | 2023-03-04 | Fix |
| CVE-2023-26481 | goauthentik authentik insufficient user check in FlowTokens by Email stage | 9.1CNA v3.1 | 0.3% | 2023-03-04 | Fix |
| CVE-2023-25819 | Discourse tags with no visibility are leaking into og:article:tag | 5.3CNA v3.1 | 0.5% | 2023-03-04 | Fix |
| CVE-2023-23929 | Refresh tokens do not expire in Vantage6 | 8.8CNA v3.1 | 0.6% | 2023-03-04 | Fix |
| CVE-2023-1175 | Incorrect calculation of buffer size in Vim/Vim | 6.6NVD v3.1 | 0.4% | 2023-03-04 | Fix |
| CVE-2023-27574 | Shadowsocksx-ng download without integrity check | 9.8v3.1 | 0.4% | 2023-03-03 | |
| CVE-2023-27567 | OpenBSD pf divert-to rule handling denial of service | 7.5v3.1 | 0.8% | 2023-03-03 | Fix |
| CVE-2023-27566 | LIVE2D Cubism Editor out-of-bounds write | 7.8v3.1 | 0.6% | 2023-03-03 | Exploit codeFix |
| CVE-2023-27561 | Opencontainers runc incorrect authorization | 7.0v3.1 | 0.4% | 2023-03-03 | Fix |
| CVE-2023-27560 | phpseclib infinite loop | 7.5v3.1 | 0.8% | 2023-03-03 | Fix |
| CVE-2023-27290 | IBM Observability with Instana missing authentication | 9.1CNA v3.1 | 8.6% | 2023-03-03 | Exploit codeFix |
| CVE-2023-26779 | Yf-exam deserialization of untrusted data | 9.8v3.1 | 1.4% | 2023-03-03 | |
| CVE-2023-26604 | systemd improper privilege management | 7.8NVD v3.1 | 1.1% | 2023-03-03 | Fix |
| CVE-2023-26492 | Directus vulnerable to server-side request forgery on File Import | 5.0CNA v3.1 | 1.0% | 2023-03-03 | Fix |
| CVE-2023-26491 | RSSHub is vulnerable to cross-site scripting (XSS) via unvalidated URL parameters | 5.4CNA v3.1 | 0.4% | 2023-03-03 | Fix |
| CVE-2023-26488 | OpenZeppelin Contracts contains incorrect calculation | 6.5CNA v3.1 | 0.7% | 2023-03-03 | Fix |
| CVE-2023-26483 | gosaml2 vulnerable to denial of service via deflate decompression bomb | 5.3CNA v3.1 | 1.0% | 2023-03-03 | Fix |
| CVE-2023-26213 | Barracuda T100B OS command injection | 7.2v3.1 | 7.9% | 2023-03-03 | Fix |
| CVE-2023-26047 | teler-waf contains detection rule bypass via entities payload | 6.5CNA v3.1 | 0.5% | 2023-03-03 | Fix |
| CVE-2023-25403 | Yf-exam insecure direct object reference | 7.5v3.1 | 0.7% | 2023-03-03 | |
| CVE-2023-25402 | Yf-exam unrestricted file upload | 7.5v3.1 | 0.6% | 2023-03-03 | |
| CVE-2023-24643 | Judging Management System SQL injection | 9.8v3.1 | 0.8% | 2023-03-03 | |
| CVE-2023-24642 | Judging Management System SQL injection | 9.8v3.1 | 0.8% | 2023-03-03 | |
| CVE-2023-24641 | Judging Management System SQL injection | 9.8v3.1 | 0.8% | 2023-03-03 | |
| CVE-2023-23927 | Craft CMS stored cross-site scripting | 6.1CNA v3.1 | 0.8% | 2023-03-03 | Fix |
| CVE-2023-23313 | DrayTek Vigor1000B cross-site scripting | 6.1v3.1 | 0.4% | 2023-03-03 | Fix |
| CVE-2023-20104 | Cisco Webex App for web cross-site scripting | 6.1CNA v3.1 | 0.5% | 2023-03-03 | Fix |
| CVE-2023-20088 | Cisco Finesse Reverse Proxy VPN-less Access to Finesse Desktop denial of service | 5.3CNA v3.1 | 0.8% | 2023-03-03 | Fix |
| CVE-2023-20079 | Cisco IP Phones with Multiplatform Firmware stack-based buffer overflow | 9.8CNA v3.1 | 10.3% | 2023-03-03 | Fix |
| CVE-2023-20078 | Cisco IP Phones with Multiplatform Firmware stack-based buffer overflow | 9.8CNA v3.1 | 10.4% | 2023-03-03 | Fix |
| CVE-2023-20069 | Cisco Prime Infrastructure and Evolved Programmable Network Manager stored cross-site scripting | 5.4CNA v3.0 | 0.5% | 2023-03-03 | Fix |
| CVE-2023-20062 | Cisco Unified Intelligence Center information disclosure | 6.5CNA v3.1 | 0.5% | 2023-03-03 | |
| CVE-2023-20061 | Cisco Unified Intelligence Center information disclosure | 6.5CNA v3.1 | 0.7% | 2023-03-03 | |
| CVE-2023-1170 | Heap-based buffer overflow in Vim/Vim | 6.6NVD v3.1 | 0.5% | 2023-03-03 | Fix |
| CVE-2023-1165 | Zhong Bang CRMEB Java list SQL injection | 7.2v3.1 | 0.8% | 2023-03-03 | |
| CVE-2023-1164 | KylinSoft kylin-activation file import improper authorization | 7.8v3.1 | 0.4% | 2023-03-03 | |
| CVE-2023-1163 | DrayTek Vigor 2960 Web Management interface mainfunction.cgi getSyslogFile path traversal | 6.5v3.1 | 1.8% | 2023-03-03 | Emerging Threats |
| CVE-2023-1162 | DrayTek Vigor 2960 Web Management interface mainfunction.cgi command injection | 8.8v3.1 | 26.0% | 2023-03-03 | Emerging Threats |
| CVE-2023-1160 | Cockpit Uses Platform-Dependent Third Party components | 5.5v3.1 | 0.3% | 2023-03-03 | Fix |
| CVE-2023-0968 | Watu Quiz WordPress plugin reflected cross-site scripting | 6.1v3.1 | 1.3% | 2023-03-03 | NucleiFix |
| CVE-2023-0957 | Gitpod missing WebSocket origin validation | 9.6v3.1 | 0.4% | 2023-03-03 | Fix |
| CVE-2023-0578 | Multiple XSS in ASOS Information Technologies' Book Cites | 6.1v3.1 | 0.4% | 2023-03-03 | Fix |
| CVE-2023-0577 | Multiple XSS in ASOS Information Technologies' Sobiad | 6.1v3.1 | 0.4% | 2023-03-03 | Fix |
| CVE-2023-0457 | Information disclosure vulnerability in MELSEC Series | 7.5CNA v3.1 | 1.2% | 2023-03-03 | Fix |
| CVE-2023-26780 | Yf-exam SQL injection | 9.8v3.1 | 0.8% | 2023-03-02 | |
| CVE-2023-26480 | XWiki-Platform vulnerable to stored cross-site scripting via the HTML displayer in Live Data | 8.9CNA v3.1 | 0.7% | 2023-03-02 | Fix |
| CVE-2023-26479 | Xwiki vulnerable to improper handling of exceptional conditions | 6.5CNA v3.1 | 1.1% | 2023-03-02 | Fix |
| CVE-2023-26478 | Xwiki contains exposed dangerous method or function | 6.6CNA v3.1 | 0.7% | 2023-03-02 | Fix |
| CVE-2023-26477 | xwiki-platform org.Xwiki.platform:xwiki-platform-flamingo-theme-ui eval injection | 10.0CNA v3.1 | 74.8% | 2023-03-02 | Fix |
| CVE-2023-26476 | Two XWiki Platform UIs Expose Sensitive Information to an Unauthorized Actor | 7.5CNA v3.1 | 0.9% | 2023-03-02 | Fix |
| CVE-2023-26475 | XWiki Platform vulnerable to remote code execution in Annotations | 10.0CNA v3.1 | 63.6% | 2023-03-02 | Fix |
| CVE-2023-26474 | XWiki Platform vulnerable to privilege escalation | 10.0CNA v3.1 | 0.8% | 2023-03-02 | Fix |
| CVE-2023-26473 | XWiki Platform DatabaseListProperty and suggest.vm vulnerability | 6.5CNA v3.1 | 0.6% | 2023-03-02 | Fix |
| CVE-2023-26472 | XWiki Platform vulnerable to privilege escalation | 10.0CNA v3.1 | 1.1% | 2023-03-02 | Fix |
| CVE-2023-26471 | XWiki Platform users may execute anything with superadmin right through comments and async macro | 10.0CNA v3.1 | 0.9% | 2023-03-02 | Fix |
| CVE-2023-26470 | In XWiki Platform, saving a document with a large object number leads to persistent OOM errors | 5.7CNA v3.1 | 0.9% | 2023-03-02 | Fix |
| CVE-2023-26056 | Xwiki contains incorrect authorization | 5.4CNA v3.1 | 0.6% | 2023-03-02 | Fix |
| CVE-2023-26055 | XWiki Commons may allow privilege escalation to programming rights via user's first name | 10.0CNA v3.1 | 1.2% | 2023-03-02 | Fix |
| CVE-2023-26053 | Gradle usage of long IDs for PGP keys opens potential for collision attacks | 6.6CNA v3.1 | 1.0% | 2023-03-02 | Fix |
| CVE-2023-26052 | Saleor is vulnerable to unauthenticated information disclosure via Python exceptions | 3.7CNA v3.1 | 0.8% | 2023-03-02 | Fix |
| CVE-2023-26051 | Saleor is vulnerable to staff-authenticated error message information disclosure vulnerability | 6.5CNA v3.1 | 0.8% | 2023-03-02 | Fix |
| CVE-2023-26046 | teler-waf subject to bypass of common web attack threat rule with HTML entities payload | 6.5CNA v3.1 | 0.5% | 2023-03-02 | Fix |
| CVE-2023-25806 | Time discrepancy in authentication responses in OpenSearch | 5.3CNA v3.0 | 0.3% | 2023-03-02 | Fix |
| CVE-2023-25536 | Dell PowerScale OneFS information disclosure | 6.7CNA v3.1 | 0.1% | 2023-03-02 | Fix |
| CVE-2023-25363 | WebKitGTK use-after-free | 8.8v3.1 | 1.0% | 2023-03-02 | Fix |
| CVE-2023-25362 | WebKitGTK use-after-free | 8.8v3.1 | 1.0% | 2023-03-02 | Fix |
| CVE-2023-25361 | WebKitGTK WebCore::RenderLayer::setNextSibling use-after-free | 8.8v3.1 | 1.0% | 2023-03-02 | Fix |
| CVE-2023-25360 | WebKitGTK WebCore::RenderLayer::renderer use-after-free | 8.8v3.1 | 1.0% | 2023-03-02 | Fix |
| CVE-2023-25358 | WebKitGTK WebCore::RenderLayer::addChild use-after-free | 8.8v3.1 | 1.1% | 2023-03-02 | Fix |
| CVE-2023-25155 | Integer overflow in several Redis commands can lead to denial of service | 5.5CNA v3.1 | 0.9% | 2023-03-02 | Fix |
| CVE-2023-22462 | Stored XSS in Grafana Text plugin | 6.4CNA v3.1 | 1.6% | 2023-03-02 | Fix |
| CVE-2023-22381 | GitHub Enterprise Server GitHub Actions Windows runner code injection | 4.1CNA v3.1 | 0.8% | 2023-03-02 | Fix |
| CVE-2023-1157 | finixbit elf-parser elf_parser.cpp get_segments denial of service | 5.5v3.1 | 0.4% | 2023-03-02 | |
| CVE-2023-1156 | SourceCodester Health Center Patient Record Management System cross-site scripting | 6.1v3.1 | 0.6% | 2023-03-02 | |
| CVE-2023-1155 | Cost Calculator WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-03-02 | |
| CVE-2023-1151 | SourceCodester Electronic Medical Records System Cookie administrator.php SQL injection | 9.8v3.1 | 0.7% | 2023-03-02 | |
| CVE-2023-1149 | Improper neutralization of Equivalent Special Elements in btcpayserver/btcpayserver | 5.4v3.1 | 0.5% | 2023-03-02 | Fix |
| CVE-2023-1148 | Cross-site scripting (XSS) Stored in flatpressblog/FlatPress | 4.8v3.1 | 0.5% | 2023-03-02 | Fix |
| CVE-2023-1147 | Cross-site scripting (XSS) Stored in flatpressblog/FlatPress | 5.4v3.1 | 0.5% | 2023-03-02 | Fix |
| CVE-2023-1146 | Cross-site scripting (XSS) Generic in flatpressblog/FlatPress | 5.4v3.1 | 0.5% | 2023-03-02 | Fix |
| CVE-2023-1118 | Linux kernel flaw use-after-free | 7.8NVD v3.1 | 0.3% | 2023-03-02 | Fix |
| CVE-2023-1107 | Cross-site scripting (XSS) Stored in flatpressblog/FlatPress | 5.4v3.1 | 0.5% | 2023-03-02 | Fix |
| CVE-2023-1106 | Cross-site scripting (XSS) Reflected in flatpressblog/FlatPress | 6.1v3.1 | 0.6% | 2023-03-02 | Fix |
| CVE-2023-1101 | SonicWall SonicOS missing brute-force protection | 8.8v3.1 | 0.7% | 2023-03-02 | Fix |
| CVE-2023-0656 | SonicWall SonicOS stack-based buffer overflow | 7.5v3.1 | 41.3% | 2023-03-02 | Reported exploitedEmerging ThreatsFix |
| CVE-2023-0228 | Improper authentication vulnerability in S+ Operations | 8.8CNA v3.1 | 0.3% | 2023-03-02 | Fix |
| CVE-2023-0196 | NVIDIA CUDA Toolkit null pointer dereference | 3.3CNA v3.1 | 0.2% | 2023-03-02 | Fix |
| CVE-2023-0085 | Metform Elementor Contact Form Builder WordPress plugin reCaptcha Protection bypass | 5.3v3.1 | 0.7% | 2023-03-02 | Fix |
| CVE-2023-0084 | Metform Elementor Contact Form Builder WordPress plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 28.6% | 2023-03-02 | Exploit codeFix |
| CVE-2023-0053 | SAUTER Controls Nova 200-220 Series cleartext transmission of sensitive information | 7.5v3.1 | 0.4% | 2023-03-02 | |
| CVE-2023-26608 | vxcontrol Soldr cross-site scripting | 5.4v3.1 | 0.4% | 2023-03-01 | |
| CVE-2023-26281 | IBM HTTP Server denial of service | 5.9CNA v3.1 | 1.1% | 2023-03-01 | Fix |
| CVE-2023-25931 | Medtronic Micro Clinician and InterStim X Clinician App Password Reset issue | 6.4CNA v3.1 | 0.3% | 2023-03-01 | Fix |
| CVE-2023-25544 | Dell NetWorker, NVE information disclosure | 7.5CNA v3.1 | 0.6% | 2023-03-01 | Fix |
| CVE-2023-25222 | GNU LibreDWG heap-based buffer overflow | 8.8v3.1 | 0.8% | 2023-03-01 | |
| CVE-2023-25221 | struktur libde265 out-of-bounds write | 7.8v3.1 | 0.3% | 2023-03-01 | Fix |
| CVE-2023-24758 | struktur libde265 null pointer dereference | 5.5v3.1 | 0.3% | 2023-03-01 | Fix |
| CVE-2023-24757 | struktur libde265 null pointer dereference | 5.5v3.1 | 0.3% | 2023-03-01 | Fix |
| CVE-2023-24756 | struktur libde265 null pointer dereference | 5.5v3.1 | 0.3% | 2023-03-01 | Fix |
| CVE-2023-24755 | struktur libde265 null pointer dereference | 5.5v3.1 | 0.3% | 2023-03-01 | Fix |
| CVE-2023-24754 | struktur libde265 null pointer dereference | 5.5v3.1 | 0.3% | 2023-03-01 | Fix |
| CVE-2023-24752 | struktur libde265 null pointer dereference | 5.5v3.1 | 0.3% | 2023-03-01 | Fix |
| CVE-2023-24751 | struktur libde265 null pointer dereference | 6.5v3.1 | 0.8% | 2023-03-01 | Fix |
| CVE-2023-24567 | Dell NetWorker, NVE information disclosure | 7.5CNA v3.1 | 0.6% | 2023-03-01 | Fix |
| CVE-2023-24134 | Heimgardtechnologies Eagle 1200ac out-of-bounds write | 6.5v3.1 | 0.8% | 2023-03-01 | |
| CVE-2023-24133 | Heimgardtechnologies Eagle 1200ac out-of-bounds write | 6.5v3.1 | 0.8% | 2023-03-01 | |
| CVE-2023-24132 | Heimgardtechnologies Eagle 1200ac out-of-bounds write | 6.5v3.1 | 0.8% | 2023-03-01 | |
| CVE-2023-24131 | Heimgardtechnologies Eagle 1200ac out-of-bounds write | 6.5v3.1 | 0.8% | 2023-03-01 | |
| CVE-2023-24130 | Heimgardtechnologies Eagle 1200ac out-of-bounds write | 6.5v3.1 | 0.8% | 2023-03-01 | |
| CVE-2023-24129 | Heimgardtechnologies Eagle 1200ac out-of-bounds write | 6.5v3.1 | 0.8% | 2023-03-01 | |
| CVE-2023-24128 | Heimgardtechnologies Eagle 1200ac out-of-bounds write | 6.5v3.1 | 0.8% | 2023-03-01 | |
| CVE-2023-24127 | Heimgardtechnologies Eagle 1200ac out-of-bounds write | 6.5v3.1 | 0.8% | 2023-03-01 | |
| CVE-2023-24126 | Heimgardtechnologies Eagle 1200ac out-of-bounds write | 6.5v3.1 | 0.8% | 2023-03-01 | |
| CVE-2023-24125 | Heimgardtechnologies Eagle 1200ac out-of-bounds write | 6.5v3.1 | 0.8% | 2023-03-01 | |
| CVE-2023-24124 | Heimgardtechnologies Eagle 1200ac out-of-bounds write | 6.5v3.1 | 0.8% | 2023-03-01 | |
| CVE-2023-24123 | Heimgardtechnologies Eagle 1200ac out-of-bounds write | 6.5v3.1 | 0.6% | 2023-03-01 | |
| CVE-2023-24122 | Heimgardtechnologies Eagle 1200ac out-of-bounds write | 6.5v3.1 | 0.6% | 2023-03-01 | |
| CVE-2023-24121 | Heimgardtechnologies Eagle 1200ac out-of-bounds write | 6.5v3.1 | 0.8% | 2023-03-01 | |
| CVE-2023-24120 | Heimgardtechnologies Eagle 1200ac out-of-bounds write | 6.5v3.1 | 0.8% | 2023-03-01 | |
| CVE-2023-24119 | Heimgardtechnologies Eagle 1200ac out-of-bounds write | 6.5v3.1 | 0.8% | 2023-03-01 | |
| CVE-2023-24118 | Heimgardtechnologies Eagle 1200ac out-of-bounds write | 6.5v3.1 | 0.8% | 2023-03-01 | |
| CVE-2023-24117 | Heimgardtechnologies Eagle 1200ac out-of-bounds write | 6.5v3.1 | 0.8% | 2023-03-01 | |
| CVE-2023-24045 | Dataiku DATA Science Studio unrestricted file upload | 6.5v3.1 | 0.8% | 2023-03-01 | |
| CVE-2023-23984 | Bubble Menu circle floating menu WordPress plugin cross-site request forgery (CSRF) | 5.4v3.1 | 0.2% | 2023-03-01 | Fix |
| CVE-2023-23974 | Quick Event Manager WordPress plugin cross-site request forgery (CSRF) | 5.4v3.1 | 0.2% | 2023-03-01 | Fix |
| CVE-2023-23973 | Contact Us page - Contact people LITE WordPress plugin cross-site request forgery (CSRF) | 6.5v3.1 | 0.2% | 2023-03-01 | Fix |
| CVE-2023-23315 | Stripe Payment Pro SQL injection | 9.8v3.1 | 0.9% | 2023-03-01 | |
| CVE-2023-23006 | Linux kernel null pointer dereference | 5.5v3.1 | 0.2% | 2023-03-01 | Fix |
| CVE-2023-23005 | Linux kernel null pointer dereference | 5.5v3.1 | 0.3% | 2023-03-01 | Fix |
| CVE-2023-23004 | Linux kernel null pointer dereference | 5.5v3.1 | 0.3% | 2023-03-01 | Fix |
| CVE-2023-23003 | Linux kernel unchecked return value | 4.0v3.1 | 0.3% | 2023-03-01 | Fix |
| CVE-2023-23002 | Linux kernel null pointer dereference | 5.5v3.1 | 0.2% | 2023-03-01 | Fix |
| CVE-2023-23001 | Linux kernel null pointer dereference | 5.5v3.1 | 0.2% | 2023-03-01 | Fix |
| CVE-2023-23000 | Linux kernel null pointer dereference | 5.5v3.1 | 0.3% | 2023-03-01 | Fix |
| CVE-2023-22778 | HPE Aruba Mobility Conductor authenticated stored cross-site scripting | 4.8CNA v3.1 | 0.5% | 2023-03-01 | Fix |
| CVE-2023-22777 | HPE Aruba Mobility Conductor authenticated information disclosure | 4.9CNA v3.1 | 0.6% | 2023-03-01 | Fix |
| CVE-2023-22776 | HPE Aruba Mobility Conductor authenticated path traversal | 4.9CNA v3.1 | 0.7% | 2023-03-01 | Fix |
| CVE-2023-22775 | ArubaOS command line interface information disclosure | 6.5CNA v3.1 | 0.6% | 2023-03-01 | Fix |
| CVE-2023-22774 | HPE Aruba Mobility Conductor Authenticated path traversal | 7.2CNA v3.1 | 0.8% | 2023-03-01 | Fix |
| CVE-2023-22773 | HPE Aruba Mobility Conductor Authenticated path traversal | 7.2CNA v3.1 | 0.8% | 2023-03-01 | Fix |
| CVE-2023-22772 | HPE Aruba Mobility Conductor authenticated path traversal | 6.5CNA v3.1 | 0.7% | 2023-03-01 | Fix |
| CVE-2023-22771 | HPE Aruba Mobility Conductor insufficient session expiration in ArubaOS Command Line interface | 6.8CNA v3.1 | 0.4% | 2023-03-01 | Fix |
| CVE-2023-22770 | HPE Aruba Mobility Conductor Authenticated command injection | 7.2CNA v3.1 | 1.5% | 2023-03-01 | Fix |
| CVE-2023-22769 | HPE Aruba Mobility Conductor Authenticated command injection | 7.2CNA v3.1 | 1.5% | 2023-03-01 | Fix |
| CVE-2023-22768 | HPE Aruba Mobility Conductor Authenticated command injection | 7.2CNA v3.1 | 1.5% | 2023-03-01 | Fix |
| CVE-2023-22767 | HPE Aruba Mobility Conductor Authenticated command injection | 7.2CNA v3.1 | 1.5% | 2023-03-01 | Fix |
| CVE-2023-22766 | HPE Aruba Mobility Conductor Authenticated command injection | 7.2CNA v3.1 | 1.5% | 2023-03-01 | Fix |
| CVE-2023-22765 | HPE Aruba Mobility Conductor Authenticated command injection | 7.2CNA v3.1 | 1.5% | 2023-03-01 | Fix |
| CVE-2023-22764 | HPE Aruba Mobility Conductor Authenticated command injection | 7.2CNA v3.1 | 1.5% | 2023-03-01 | Fix |
| CVE-2023-22763 | HPE Aruba Mobility Conductor Authenticated command injection | 7.2CNA v3.1 | 1.5% | 2023-03-01 | Fix |
| CVE-2023-22762 | HPE Aruba Mobility Conductor Authenticated command injection | 7.2CNA v3.1 | 1.5% | 2023-03-01 | Fix |
| CVE-2023-22761 | HPE Aruba Mobility Conductor Authenticated remote command injection | 7.2CNA v3.1 | 1.6% | 2023-03-01 | Fix |
| CVE-2023-22760 | HPE Aruba Mobility Conductor Authenticated remote command injection | 7.2CNA v3.1 | 1.6% | 2023-03-01 | Fix |
| CVE-2023-22759 | HPE Aruba Mobility Conductor Authenticated remote command injection | 7.2CNA v3.1 | 1.6% | 2023-03-01 | Fix |
| CVE-2023-22758 | HPE Aruba Mobility Conductor Authenticated remote command injection | 7.2CNA v3.1 | 1.6% | 2023-03-01 | Fix |
| CVE-2023-22757 | HPE Aruba Mobility Conductor unauthenticated buffer overflow vulnerabilities in ArubaOS Processes | 8.1CNA v3.1 | 1.1% | 2023-03-01 | Fix |
| CVE-2023-22756 | HPE Aruba Mobility Conductor unauthenticated buffer overflow vulnerabilities in ArubaOS Processes | 8.1CNA v3.1 | 1.1% | 2023-03-01 | Fix |
| CVE-2023-22755 | HPE Aruba Mobility Conductor unauthenticated buffer overflow vulnerabilities in ArubaOS Processes | 8.1CNA v3.1 | 1.1% | 2023-03-01 | Fix |
| CVE-2023-22754 | HPE Aruba Mobility Conductor unauthenticated buffer overflow vulnerabilities in ArubaOS Processes | 8.1CNA v3.1 | 1.1% | 2023-03-01 | Fix |
| CVE-2023-22753 | HPE Aruba Mobility Conductor unauthenticated buffer overflow vulnerabilities in ArubaOS Processes | 8.1CNA v3.1 | 1.1% | 2023-03-01 | Fix |
| CVE-2023-22752 | ArubaOS PAPI protocol stack-based buffer overflow | 9.8CNA v3.1 | 1.3% | 2023-03-01 | Fix |
| CVE-2023-22751 | ArubaOS PAPI protocol stack-based buffer overflow | 9.8CNA v3.1 | 1.3% | 2023-03-01 | Fix |
| CVE-2023-22750 | HPE Aruba Mobility Conductor Multiple Unauthenticated Command Injections in the PAPI protocol | 9.8CNA v3.1 | 1.7% | 2023-03-01 | Fix |
| CVE-2023-22749 | HPE Aruba Mobility Conductor Multiple Unauthenticated Command Injections in the PAPI protocol | 9.8CNA v3.1 | 1.7% | 2023-03-01 | Fix |
| CVE-2023-22748 | HPE Aruba Mobility Conductor Multiple Unauthenticated Command Injections in the PAPI protocol | 9.8CNA v3.1 | 1.7% | 2023-03-01 | Fix |
| CVE-2023-22747 | HPE Aruba Mobility Conductor Multiple Unauthenticated Command Injections in the PAPI protocol | 9.8CNA v3.1 | 1.7% | 2023-03-01 | Fix |
| CVE-2023-22738 | Improper preservation of permissions in vantage6 | 6.3CNA v3.1 | 0.4% | 2023-03-01 | Fix |
| CVE-2023-20085 | Cisco Identity Services Engine Software cross-site scripting | 6.1CNA v3.1 | 0.7% | 2023-03-01 | Fix |
| CVE-2023-20075 | Cisco Secure Email command injection | 6.0CNA v3.1 | 0.5% | 2023-03-01 | Exploit codeFix |
| CVE-2023-20053 | Cisco Nexus Dashboard cross-site scripting | 6.1CNA v3.1 | 0.5% | 2023-03-01 | Fix |
| CVE-2023-20052 | Cisco Secure Endpoint XML external entity injection | 5.3CNA v3.1 | 7.0% | 2023-03-01 | Exploit codeFix |
| CVE-2023-20032 | Cisco Secure Web Appliance buffer overflow | 9.8CNA v3.1 | 29.3% | 2023-03-01 | Fix |
| CVE-2023-20014 | Cisco Nexus Dashboard denial of service | 7.5CNA v3.1 | 1.0% | 2023-03-01 | Fix |
| CVE-2023-20009 | Cisco Secure Email improper input validation | 6.5CNA v3.1 | 1.3% | 2023-03-01 | Exploit codeFix |
| CVE-2023-1131 | SourceCodester Computer Parts Sales and Inventory System customer.php cross-site scripting | 6.1v3.1 | 0.6% | 2023-03-01 | |
| CVE-2023-1130 | SourceCodester Computer Parts Sales and Inventory System processlogin SQL injection | 9.8v3.1 | 0.7% | 2023-03-01 | |
| CVE-2023-1127 | Divide by zero in Vim/Vim | 7.8v3.1 | 0.5% | 2023-03-01 | Fix |
| CVE-2023-1117 | Cross-site scripting (XSS) Stored in pimcore/pimcore | 5.4v3.1 | 0.4% | 2023-03-01 | Fix |
| CVE-2023-1116 | Cross-site scripting (XSS) Stored in pimcore/pimcore | 5.4v3.1 | 0.5% | 2023-03-01 | Fix |
| CVE-2023-1115 | Cross-site scripting (XSS) Stored in pimcore/pimcore | 5.4NVD v3.1 | 0.6% | 2023-03-01 | Fix |
| CVE-2023-1114 | Improper input validation on e-Belediye | 9.8v3.1 | 0.7% | 2023-03-01 | Fix |
| CVE-2023-1113 | SourceCodester Simple Payroll System POST parameter cross-site scripting | 4.8v3.1 | 0.6% | 2023-03-01 | |
| CVE-2023-1112 | Drag and Drop Multiple File Upload Contact Form 7 admin-ajax.php path traversal | 9.8v3.1 | 3.0% | 2023-03-01 | Exploit codeFix |
| CVE-2023-1105 | External control of file name or path in flatpressblog/FlatPress | 8.1v3.1 | 0.7% | 2023-03-01 | Fix |
| CVE-2023-1104 | Cross-site scripting (XSS) Stored in flatpressblog/FlatPress | 5.4NVD v3.1 | 0.6% | 2023-03-01 | Fix |
| CVE-2023-1097 | Unauthenticated command injection EG7035-M11 Series | 9.8v3.1 | 1.1% | 2023-03-01 | Fix |
| CVE-2023-1064 | SQLi in Uzay Baskul's Weighbridge Automation Software | 9.8v3.1 | 0.7% | 2023-03-01 | Fix |
| CVE-2023-0953 | Devolutions Server SQL injection | 8.8v3.1 | 1.0% | 2023-03-01 | Fix |
| CVE-2023-0952 | Devolutions Server incorrect authorization | 6.5v3.1 | 0.7% | 2023-03-01 | Fix |
| CVE-2023-0951 | Devolutions Server API endpoints vulnerability | 8.8v3.1 | 1.0% | 2023-03-01 | Fix |
| CVE-2023-0847 | Sub-IoT DASH 7 Alliance Protocol stack implementation out-of-bounds write | 8.1v3.1 | 0.8% | 2023-03-01 | Fix |
| CVE-2023-0594 | Grafana vulnerable to cross-site scripting | 7.3CNA v3.1 | 9.2% | 2023-03-01 | Fix |
| CVE-2023-0507 | Grafana vulnerable to cross-site scripting | 7.3CNA v3.1 | 15.5% | 2023-03-01 | Fix |
| CVE-2023-0460 | Google remote code execution in YouTube Android Player API SDK | 5.1CNA v3.1 | 0.1% | 2023-03-01 |