CVE-2023 records published in April 2023
This page lists the 1,918 CVE-2023 records published in April 2023, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 16 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2023 list filters these records by severity or signal.
- Critical
- 30916.1% of these records
- Listed in CISA KEV
- 160.8% of these records
- Reported exploited
- 10.1% of these records
- Detection signal
- 482.5% of these records
- Exploit code
- 844.4% of these records
- Actionable vendor fix
- 1,31768.7% of these records
Figures as of 2026-10-24 13:46 UTC. Records published in April 2023 have had from about 42 months to about 43 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2023-2429 | Improper access control in thorsten/phpMyFAQ | 9.8v3.1 | 0.5% | 2023-04-30 | Fix |
| CVE-2023-2428 | Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ | 5.4v3.1 | 0.6% | 2023-04-30 | Fix |
| CVE-2023-31486 | perl improper certificate validation | 8.1v3.1 | 1.7% | 2023-04-29 | Fix |
| CVE-2023-31485 | GitLab::API::v4 improper certificate validation | 5.9v3.1 | 0.7% | 2023-04-29 | Fix |
| CVE-2023-31484 | Cpanpm improper certificate validation | 8.1v3.1 | 1.5% | 2023-04-29 | Fix |
| CVE-2023-30792 | Meta Platforms Lexical cross-site scripting | 6.1v3.1 | 0.4% | 2023-04-29 | Fix |
| CVE-2023-30441 | IBM Java information disclosure | 7.5CNA v3.1 | 0.6% | 2023-04-29 | Fix |
| CVE-2023-2426 | vim/vim GitHub repository out-of-range pointer offset | 5.3v3.1 | 0.4% | 2023-04-29 | Fix |
| CVE-2023-2425 | SourceCodester Simple Student Information System Add New Course cross-site scripting | 4.8v3.1 | 0.6% | 2023-04-29 | |
| CVE-2023-2424 | DedeCMS config.php UpDateMemberModCache unrestricted upload | 8.8v3.1 | 0.9% | 2023-04-29 | |
| CVE-2023-2421 | Control iD RHiD department cross-site scripting | 6.1v3.1 | 0.6% | 2023-04-29 | |
| CVE-2023-2420 | Mlecms common.func.php get_url SQL injection | 9.8v3.1 | 0.7% | 2023-04-29 | |
| CVE-2023-2419 | Zhong Bang CRMEB SystemAttachmentServices.php videoUpload unrestricted upload | 7.2v3.1 | 0.8% | 2023-04-29 | |
| CVE-2023-2418 | Konga Login API random values | 5.9v3.1 | 0.7% | 2023-04-29 | |
| CVE-2023-2417 | Ks-Soft Advanced Host Monitor rma_active.exe unquoted search path | 7.8v3.1 | 0.3% | 2023-04-29 | |
| CVE-2023-2413 | SourceCodester AC Repair and Services System manage_booking.php SQL injection | 6.5v3.1 | 0.6% | 2023-04-29 | |
| CVE-2023-2412 | SourceCodester AC Repair and Services System manage_user.php SQL injection | 6.5v3.1 | 0.5% | 2023-04-29 | |
| CVE-2023-31483 | Cauldrondevelopment Cbang path traversal | 7.5v3.1 | 1.0% | 2023-04-28 | |
| CVE-2023-31470 | pymumu SmartDNS out-of-bounds write | 9.8v3.1 | 1.1% | 2023-04-28 | |
| CVE-2023-31444 | Talend studio missing authentication | 7.5v3.1 | 0.5% | 2023-04-28 | Fix |
| CVE-2023-31436 | Linux kernel out-of-bounds write | 7.8NVD v3.1 | 0.6% | 2023-04-28 | Fix |
| CVE-2023-30858 | Denosaurs emoji has ReDoS vulnerability in `replace` function | 5.3CNA v3.1 | 1.2% | 2023-04-28 | Fix |
| CVE-2023-30857 | @aedart/support possibly vulnerable to prototype pollution in metadata record, when | 3.7CNA v3.1 | 0.5% | 2023-04-28 | Fix |
| CVE-2023-30856 | eDEX-UI cross-site websocket hijacking vulnerability enables remote command execution | 8.3CNA v3.1 | 0.3% | 2023-04-28 | Fix |
| CVE-2023-30854 | WWBN AVideo vulnerable to OS command injection | 8.8CNA v3.1 | 5.2% | 2023-04-28 | Exploit codeFix |
| CVE-2023-30853 | Gradle Build Action data written to GitHub Actions Cache may expose secrets | 7.6CNA v3.1 | 0.3% | 2023-04-28 | Fix |
| CVE-2023-30467 | Improper authorization vulnerability in Milesight Network Video Recorder (NVR) | 9.8v3.1 | 1.1% | 2023-04-28 | Fix |
| CVE-2023-30466 | Authentication bypass vulnerability in Milesight Network Video Recorder (NVR) | 9.8v3.1 | 1.1% | 2023-04-28 | Fix |
| CVE-2023-30455 | Ebankit resource exhaustion | 7.5v3.1 | 1.0% | 2023-04-28 | |
| CVE-2023-30454 | Ebankit cross-site scripting | 6.1v3.1 | 0.5% | 2023-04-28 | |
| CVE-2023-30405 | Aigital Wireless-n Repeater Mini Router cross-site scripting | 5.4v3.1 | 29.3% | 2023-04-28 | |
| CVE-2023-30125 | EyouCMS cross-site scripting | 6.1v3.1 | 0.4% | 2023-04-28 | |
| CVE-2023-30123 | WuzhiCMS cross-site scripting | 5.4v3.1 | 0.4% | 2023-04-28 | |
| CVE-2023-30024 | Magicjack A921 improper privilege management | 6.6v3.1 | 0.5% | 2023-04-28 | |
| CVE-2023-29815 | chshcms mccms cross-site request forgery | 8.8v3.1 | 0.3% | 2023-04-28 | |
| CVE-2023-29334 | Microsoft Edge (Chromium-based) spoofing | 4.3CNA v3.1 | 1.1% | 2023-04-28 | Fix |
| CVE-2023-29058 | Lenovo XClarity Controller incorrect default permissions | 6.4CNA v3.1 | 0.4% | 2023-04-28 | Fix |
| CVE-2023-29057 | Lenovo XClarity Controller incorrect default permissions | 7.3CNA v3.1 | 0.5% | 2023-04-28 | Fix |
| CVE-2023-29056 | Lenovo XClarity Controller improper privilege management | 5.3CNA v3.1 | 0.4% | 2023-04-28 | Fix |
| CVE-2023-28882 | OWASP ModSecurity resource exhaustion | 7.5v3.1 | 0.7% | 2023-04-28 | Fix |
| CVE-2023-28821 | Concrete CMS missing rate limit for password resets | 5.3v3.1 | 0.7% | 2023-04-28 | Fix |
| CVE-2023-28820 | Concrete CMS stored cross-site scripting in RSS displayer | 5.4v3.1 | 0.4% | 2023-04-28 | Fix |
| CVE-2023-28819 | Concrete CMS (previously concrete5) is vulnerable to stored XSS in uploaded file and folder names | 5.4v3.1 | 0.6% | 2023-04-28 | Fix |
| CVE-2023-28528 | IBM AIX command execution | 8.4CNA v3.1 | 1.5% | 2023-04-28 | Exploit codeFix |
| CVE-2023-28477 | Concrete CMS stored cross-site scripting on API integration | 5.4v3.1 | 0.6% | 2023-04-28 | Fix |
| CVE-2023-28476 | Concrete CMS stored cross-site scripting on tags | 5.4v3.1 | 0.5% | 2023-04-28 | Fix |
| CVE-2023-28475 | Concrete CMS reflected cross-site scripting | 6.1v3.1 | 0.6% | 2023-04-28 | Fix |
| CVE-2023-28474 | Concrete CMS stored cross-site scripting on saved presets | 5.4v3.1 | 0.6% | 2023-04-28 | Fix |
| CVE-2023-28473 | Concrete CMS (previously concrete5) is vulnerable to possible auth bypass in the jobs section | 3.3v3.1 | 0.8% | 2023-04-28 | Fix |
| CVE-2023-28472 | Concrete CMS missing secure cookie parameters | 5.3v3.1 | 0.6% | 2023-04-28 | Fix |
| CVE-2023-28471 | Concrete CMS stored cross-site scripting via container name | 5.4v3.1 | 0.5% | 2023-04-28 | Fix |
| CVE-2023-27973 | HP LaserJet Pro out-of-bounds write | 9.8v3.1 | 1.5% | 2023-04-28 | Fix |
| CVE-2023-27972 | HP LaserJet Pro buffer overflow | 9.8v3.1 | 1.5% | 2023-04-28 | Fix |
| CVE-2023-27971 | HP LaserJet Pro buffer overflow | 9.8v3.1 | 0.9% | 2023-04-28 | Fix |
| CVE-2023-27864 | IBM Maximo Asset Management HTML injection | 5.4CNA v3.1 | 0.5% | 2023-04-28 | Fix |
| CVE-2023-27557 | IBM Safter Payments information disclosure | 5.9CNA v3.1 | 0.4% | 2023-04-28 | Fix |
| CVE-2023-27556 | IBM Safer Payments denial of service | 6.5CNA v3.1 | 1.0% | 2023-04-28 | Fix |
| CVE-2023-27555 | IBM Db2 denial of service | 5.1CNA v3.1 | 0.6% | 2023-04-28 | Fix |
| CVE-2023-26813 | wangmarket com.xnx3. SQL injection | 9.8v3.1 | 1.0% | 2023-04-28 | |
| CVE-2023-26782 | chshcms mccms code injection | 6.5v3.1 | 0.9% | 2023-04-28 | |
| CVE-2023-26781 | chshcms mccms SQL injection | 9.8v3.1 | 1.0% | 2023-04-28 | |
| CVE-2023-26022 | IBM Db2 denial of service | 5.9CNA v3.1 | 1.0% | 2023-04-28 | Fix |
| CVE-2023-26021 | IBM Db2 denial of service | 7.5CNA v3.1 | 1.0% | 2023-04-28 | Fix |
| CVE-2023-25930 | IBM Db2 denial of service | 5.9CNA v3.1 | 1.0% | 2023-04-28 | Fix |
| CVE-2023-25496 | Lenovo Drivers Management privilege escalation | 7.8CNA v3.1 | 0.2% | 2023-04-28 | Fix |
| CVE-2023-25495 | Lenovo XClarity Controller insufficiently protected credentials | 4.9CNA v3.1 | 0.6% | 2023-04-28 | Fix |
| CVE-2023-24269 | Textpattern plugin upload function arbitrary file upload | 8.8v3.1 | 1.1% | 2023-04-28 | |
| CVE-2023-2411 | SourceCodester AC Repair and Services System view_inquiry.php SQL injection | 6.5v3.1 | 0.6% | 2023-04-28 | |
| CVE-2023-2410 | SourceCodester AC Repair and Services System view_booking.php SQL injection | 6.5v3.1 | 0.6% | 2023-04-28 | |
| CVE-2023-2409 | SourceCodester AC Repair and Services System view_service.php SQL injection | 6.5v3.1 | 0.6% | 2023-04-28 | |
| CVE-2023-2408 | SourceCodester AC Repair and Services System view.php SQL injection | 6.5v3.1 | 0.6% | 2023-04-28 | |
| CVE-2023-2397 | SourceCodester Simple Mobile Comparison Website cross-site scripting | 4.8v3.1 | 0.6% | 2023-04-28 | |
| CVE-2023-2396 | Netgear SRX5308 web management interface cross-site scripting | 6.1v3.1 | 0.8% | 2023-04-28 | |
| CVE-2023-2395 | Netgear SRX5308 web management interface cross-site scripting | 6.1v3.1 | 0.8% | 2023-04-28 | |
| CVE-2023-2394 | Netgear SRX5308 web management interface cross-site scripting | 4.8v3.1 | 0.6% | 2023-04-28 | |
| CVE-2023-2393 | Netgear SRX5308 web management interface cross-site scripting | 4.8v3.1 | 0.6% | 2023-04-28 | |
| CVE-2023-2392 | Netgear SRX5308 web management interface cross-site scripting | 4.8v3.1 | 0.6% | 2023-04-28 | |
| CVE-2023-2391 | Netgear SRX5308 web management interface cross-site scripting | 4.8v3.1 | 0.6% | 2023-04-28 | |
| CVE-2023-2390 | Netgear SRX5308 web management interface cross-site scripting | 4.8v3.1 | 0.7% | 2023-04-28 | |
| CVE-2023-2389 | Netgear SRX5308 web management interface cross-site scripting | 4.8v3.1 | 0.7% | 2023-04-28 | |
| CVE-2023-2388 | Netgear SRX5308 web management interface cross-site scripting | 4.8v3.1 | 0.6% | 2023-04-28 | |
| CVE-2023-2387 | Netgear SRX5308 web management interface cross-site scripting | 4.8v3.1 | 0.6% | 2023-04-28 | |
| CVE-2023-2386 | Netgear SRX5308 web management interface cross-site scripting | 4.8v3.1 | 0.6% | 2023-04-28 | |
| CVE-2023-2385 | Netgear SRX5308 web management interface cross-site scripting | 4.8v3.1 | 0.6% | 2023-04-28 | |
| CVE-2023-2384 | Netgear SRX5308 web management interface cross-site scripting | 4.8v3.1 | 0.6% | 2023-04-28 | |
| CVE-2023-2383 | Netgear SRX5308 web management interface cross-site scripting | 4.8v3.1 | 0.7% | 2023-04-28 | |
| CVE-2023-2382 | Netgear SRX5308 web management interface cross-site scripting | 4.8v3.1 | 0.6% | 2023-04-28 | |
| CVE-2023-2381 | Netgear SRX5308 web management interface cross-site scripting | 4.8v3.1 | 0.6% | 2023-04-28 | |
| CVE-2023-2380 | Netgear SRX5308 denial of service | 6.5v3.1 | 1.3% | 2023-04-28 | |
| CVE-2023-2379 | Ubiquiti EdgeRouter X web service denial of service | 7.5v3.1 | 1.3% | 2023-04-28 | |
| CVE-2023-2378 | Ubiquiti EdgeRouter X web management command injection | 8.8NVD v3.1 | 7.6% | 2023-04-28 | |
| CVE-2023-2377 | Ubiquiti EdgeRouter X web management command injection | 8.8NVD v3.1 | 7.6% | 2023-04-28 | |
| CVE-2023-2376 | Ubiquiti EdgeRouter X web management command injection | 8.8NVD v3.1 | 7.6% | 2023-04-28 | |
| CVE-2023-2375 | Ubiquiti EdgeRouter X web management command injection | 8.8NVD v3.1 | 9.3% | 2023-04-28 | Exploit code |
| CVE-2023-2374 | Ubiquiti EdgeRouter X web management command injection | 8.8NVD v3.1 | 6.9% | 2023-04-28 | |
| CVE-2023-2373 | Ubiquiti EdgeRouter X web management command injection | 8.8NVD v3.1 | 7.6% | 2023-04-28 | |
| CVE-2023-2372 | SourceCodester Online DJ Management System cross-site scripting | 4.8v3.1 | 0.6% | 2023-04-28 | |
| CVE-2023-2371 | SourceCodester Online DJ Management System GET parameter view_details.php SQL injection | 9.8v3.1 | 0.8% | 2023-04-28 | |
| CVE-2023-2370 | SourceCodester Online DJ Management System GET parameter manage_event.php SQL injection | 9.8v3.1 | 0.9% | 2023-04-28 | |
| CVE-2023-2369 | SourceCodester Faculty Evaluation System manage_restriction.php SQL injection | 9.8v3.1 | 0.7% | 2023-04-28 | |
| CVE-2023-2368 | SourceCodester Faculty Evaluation System SQL injection | 9.8v3.1 | 0.7% | 2023-04-28 | |
| CVE-2023-2367 | SourceCodester Faculty Evaluation System manage_academic.php SQL injection | 9.8v3.1 | 0.7% | 2023-04-28 | |
| CVE-2023-2366 | SourceCodester Faculty Evaluation System SQL injection | 9.8v3.1 | 0.8% | 2023-04-28 | |
| CVE-2023-2365 | SourceCodester Faculty Evaluation System SQL injection | 9.8v3.1 | 0.7% | 2023-04-28 | |
| CVE-2023-2364 | SourceCodester Resort Reservation System registration.php cross-site scripting | 5.4v3.1 | 0.8% | 2023-04-28 | |
| CVE-2023-2363 | SourceCodester Resort Reservation System view_room.php SQL injection | 9.8v3.1 | 0.8% | 2023-04-28 | |
| CVE-2023-2361 | Cross-site scripting (XSS) Stored in pimcore/pimcore | 5.4v3.1 | 0.5% | 2023-04-28 | Fix |
| CVE-2023-2360 | Acronis Cyber Infrastructure permissive cross-domain policy | 3.1CNA v3.0 | 0.4% | 2023-04-28 | Fix |
| CVE-2023-2356 | Relative path traversal in MLflow/MLflow | 7.5NVD v3.1 | 4.2% | 2023-04-28 | NucleiFix |
| CVE-2023-1968 | Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP address. An unauthenticated malicious actor could use UCS to listen on all IP addresses, including those capable of accepting remote communications. | 7.5NVD v3.1 | 1.8% | 2023-04-28 | Fix |
| CVE-2023-1966 | Illumina Universal Copy Service remote code execution | 9.8v3.1 | 0.9% | 2023-04-28 | Fix |
| CVE-2023-1526 | HP DesignJet and PageWide XL information disclosure | 4.6v3.1 | 1.2% | 2023-04-28 | Fix |
| CVE-2023-1477 | HYPR Keycloak Authenticator Extension improper authentication | 7.2CNA v3.1 | 0.6% | 2023-04-28 | Fix |
| CVE-2023-0834 | HYPR Workforce Access incorrect permission assignment | 7.0CNA v3.1 | 0.4% | 2023-04-28 | Fix |
| CVE-2023-31290 | Trust Wallet Browser Extension weak random number generator | 5.9v3.1 | 1.0% | 2023-04-27 | Exploit codeFix |
| CVE-2023-31287 | Insufficient token expiration in Serenity | 7.8v3.1 | 0.4% | 2023-04-27 | Fix |
| CVE-2023-31286 | User account enumeration in Serenity | 5.3v3.1 | 1.0% | 2023-04-27 | Fix |
| CVE-2023-31285 | Cross-site scripting (XSS) in Serenity | 6.1v3.1 | 0.8% | 2023-04-27 | Fix |
| CVE-2023-30852 | Pimcore arbitrary file read in Admin JS CSS files | 4.4CNA v3.1 | 1.0% | 2023-04-27 | Fix |
| CVE-2023-30850 | Pimcore SQL injection vulnerability in Admin Translations API | 8.8CNA v3.1 | 0.8% | 2023-04-27 | Fix |
| CVE-2023-30849 | Pimcore vulnerable to SQL injection in Translation Export API | 8.8CNA v3.1 | 0.8% | 2023-04-27 | Fix |
| CVE-2023-30848 | Pimcore SQL injection vulnerability in Admin Search Find API | 8.8CNA v3.1 | 0.7% | 2023-04-27 | Fix |
| CVE-2023-30847 | H2O vulnerable to read from uninitialized pointer in the reverse proxy handler | 8.2CNA v3.1 | 0.9% | 2023-04-27 | Fix |
| CVE-2023-30624 | Wasmtime has undefined behavior in Rust runtime functions | 3.9CNA v3.1 | 0.5% | 2023-04-27 | Fix |
| CVE-2023-30444 | IBM Watson Machine Learning on Cloud Pak for Data server-side request forgery | 7.1CNA v3.1 | 0.4% | 2023-04-27 | Fix |
| CVE-2023-30380 | DedeCMS path traversal | 7.5v3.1 | 1.2% | 2023-04-27 | |
| CVE-2023-30349 | jflyfox jfinal_cms remote code execution in JFinal CMS | 9.8v3.1 | 1.6% | 2023-04-27 | |
| CVE-2023-30338 | emlog Multiple stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-04-27 | |
| CVE-2023-29950 | swftools out-of-bounds write | 5.5v3.1 | 0.3% | 2023-04-27 | |
| CVE-2023-29489 | cPanel cross-site scripting | 6.1NVD v3.1 | 65.5% | 2023-04-27 | NucleiEmerging ThreatsExploit codeFix |
| CVE-2023-29471 | Lightbend Alpakka Kafka logs credentials on debug level | 5.5v3.1 | 0.2% | 2023-04-27 | Fix |
| CVE-2023-29255 | IBM Db2 for Linux, UNIX and Windows denial of service | 7.5CNA v3.1 | 1.0% | 2023-04-27 | Fix |
| CVE-2023-29169 | mySCADA myPRO OS command injection | 8.8v3.1 | 0.7% | 2023-04-27 | Fix |
| CVE-2023-29150 | mySCADA myPRO OS command injection | 8.8v3.1 | 0.7% | 2023-04-27 | Fix |
| CVE-2023-28770 | Zyxel DX5401-B0 firmware CGI “Export_Log” and the binary “zcmd” information disclosure | 7.5CNA v3.1 | 57.8% | 2023-04-27 | MetasploitExploit codeFix |
| CVE-2023-28769 | Zyxel DX5401-B0 firmware buffer overflow | 9.8CNA v3.1 | 5.4% | 2023-04-27 | MetasploitExploit codeFix |
| CVE-2023-28716 | mySCADA myPRO OS command injection | 8.8v3.1 | 4.5% | 2023-04-27 | Fix |
| CVE-2023-28697 | Moxa MiiNePort E1 broken access control | 9.8CNA v3.1 | 0.9% | 2023-04-27 | Fix |
| CVE-2023-28400 | mySCADA myPRO OS command injection | 8.8v3.1 | 24.6% | 2023-04-27 | Fix |
| CVE-2023-28384 | mySCADA myPRO OS command injection | 8.8v3.1 | 44.8% | 2023-04-27 | MetasploitExploit codeFix |
| CVE-2023-28286 | Microsoft Edge (Chromium-based) security feature bypass | 6.1CNA v3.1 | 0.6% | 2023-04-27 | Fix |
| CVE-2023-28261 | Microsoft Edge (Chromium-based) elevation of privilege | 5.7CNA v3.1 | 0.6% | 2023-04-27 | Fix |
| CVE-2023-27860 | IBM Maximo Asset Management information disclosure | 5.3CNA v3.1 | 0.5% | 2023-04-27 | Fix |
| CVE-2023-26246 | Hyundai GEN5W L improper privilege management | 7.8v3.1 | 0.3% | 2023-04-27 | |
| CVE-2023-26245 | Hyundai GEN5W L improper privilege management | 7.8v3.1 | 0.3% | 2023-04-27 | |
| CVE-2023-26244 | Hyundai GEN5W L improper privilege management | 7.8v3.1 | 0.3% | 2023-04-27 | |
| CVE-2023-26243 | Hyundai GEN5W L path traversal | 7.8v3.1 | 0.3% | 2023-04-27 | |
| CVE-2023-25437 | Vtech VCS754A cleartext transmission of sensitive information | 8.8v3.1 | 14.1% | 2023-04-27 | |
| CVE-2023-25292 | groupoffice Intermesh BV reflected cross-site scripting | 6.1v3.1 | 0.6% | 2023-04-27 | Exploit code |
| CVE-2023-24966 | IBM WebSphere Application Server cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-04-27 | Fix |
| CVE-2023-24836 | Sunnet CTMS path traversal | 8.8CNA v3.1 | 1.2% | 2023-04-27 | Fix |
| CVE-2023-22901 | ChangingTec MOTP path traversal | 4.9CNA v3.1 | 0.9% | 2023-04-27 | Fix |
| CVE-2023-21712 | Microsoft Windows Point-to-Point Tunneling protocol remote code execution | 8.1CNA v3.1 | 1.0% | 2023-04-27 | Fix |
| CVE-2023-20853 | aEnrich a+HRD deserialization of untrusted data | 9.8CNA v3.1 | 1.0% | 2023-04-27 | Fix |
| CVE-2023-20852 | aEnrich a+HRD deserialization of untrusted data | 9.8CNA v3.1 | 1.0% | 2023-04-27 | Fix |
| CVE-2023-2355 | Acronis Snap Deploy uncontrolled search path | 6.7CNA v3.0 | 0.2% | 2023-04-27 | Fix |
| CVE-2023-2350 | SourceCodester Service Provider Management System Users.php cross-site scripting | 5.4v3.1 | 0.6% | 2023-04-27 | |
| CVE-2023-2349 | SourceCodester Service Provider Management System index.php cross-site scripting | 5.4v3.1 | 0.6% | 2023-04-27 | |
| CVE-2023-2348 | SourceCodester Service Provider Management System manage_user.php SQL injection | 9.8v3.1 | 0.8% | 2023-04-27 | |
| CVE-2023-2347 | SourceCodester Service Provider Management System manage_service.php SQL injection | 9.8v3.1 | 0.8% | 2023-04-27 | |
| CVE-2023-2346 | SourceCodester Service Provider Management System view_inquiry.php SQL injection | 9.8v3.1 | 0.8% | 2023-04-27 | |
| CVE-2023-2345 | SourceCodester Service Provider Management System improper authorization | 9.8v3.1 | 0.5% | 2023-04-27 | |
| CVE-2023-2344 | SourceCodester Service Provider Management System HTTP POST request SQL injection | 9.8v3.1 | 0.8% | 2023-04-27 | |
| CVE-2023-2343 | Cross-site scripting (XSS) DOM in pimcore/pimcore | 5.4v3.1 | 0.4% | 2023-04-27 | Fix |
| CVE-2023-2342 | Cross-site scripting (XSS) Reflected in pimcore/pimcore | 5.4v3.1 | 0.4% | 2023-04-27 | Fix |
| CVE-2023-2341 | Cross-site scripting (XSS) Generic in pimcore/pimcore | 6.1NVD v3.1 | 1.1% | 2023-04-27 | Fix |
| CVE-2023-2340 | Cross-site scripting (XSS) Stored in pimcore/pimcore | 5.4v3.1 | 0.5% | 2023-04-27 | Fix |
| CVE-2023-2339 | Cross-site scripting (XSS) Reflected in pimcore/pimcore | 5.4v3.1 | 0.5% | 2023-04-27 | Fix |
| CVE-2023-2338 | SQL injection in pimcore/pimcore | 8.8v3.1 | 0.9% | 2023-04-27 | Fix |
| CVE-2023-2336 | Path traversal in pimcore/pimcore | 6.5v3.1 | 0.7% | 2023-04-27 | Fix |
| CVE-2023-2335 | 42Gears Surelock Windows plaintext password in Registry | 6.5CNA v3.1 | 0.3% | 2023-04-27 | Fix |
| CVE-2023-2331 | 42Gears Surelock Windows bypassing hardening via unquoted service path | 7.8CNA v3.1 | 0.2% | 2023-04-27 | Fix |
| CVE-2023-2328 | Cross-site scripting (XSS) Generic in pimcore/pimcore | 5.4v3.1 | 0.4% | 2023-04-27 | Fix |
| CVE-2023-2327 | Cross-site scripting (XSS) Stored in pimcore/pimcore | 5.4v3.1 | 0.4% | 2023-04-27 | Fix |
| CVE-2023-2323 | Cross-site scripting (XSS) Stored in pimcore/pimcore | 5.4v3.1 | 0.5% | 2023-04-27 | Fix |
| CVE-2023-2322 | Cross-site scripting (XSS) Stored in pimcore/pimcore | 5.4v3.1 | 0.6% | 2023-04-27 | Fix |
| CVE-2023-2297 | cozmoslabs Profile Builder password reset function vulnerability | 8.1NVD v3.1 | 1.0% | 2023-04-27 | Fix |
| CVE-2023-2158 | Synopsys Code Dx impersonation through User-Controlled Token | 9.8v3.1 | 0.6% | 2023-04-27 | Fix |
| CVE-2023-1967 | Keysight N8844A Data Analytics Web Service insecure deserialization | 9.8v3.1 | 0.8% | 2023-04-27 | Fix |
| CVE-2023-1778 | GajShield Data Security Firewall improper authentication | 9.8v3.1 | 1.1% | 2023-04-27 | Fix |
| CVE-2023-31250 | Drupal Core Moderately critical Access bypass SA-CORE-2023-005 | 6.5v3.1 | 0.5% | 2023-04-26 | Fix |
| CVE-2023-30846 | Microsoft typed-rest-client vulnerable to potential leak of authentication data to 3rd parties | 9.1CNA v3.1 | 2.2% | 2023-04-26 | Fix |
| CVE-2023-30845 | GoogleCloudPlatform esp-v2 ESPv2 vulnerable to JWT authentication bypass | 8.2CNA v3.1 | 0.7% | 2023-04-26 | Exploit codeFix |
| CVE-2023-30843 | Payload's hidden fields can be leaked on readable collections | 7.4CNA v3.1 | 0.6% | 2023-04-26 | Fix |
| CVE-2023-30841 | metal3-io baremetal-operator ironic and ironic-inspector may expose as ConfigMaps | 6.0CNA v3.1 | 0.2% | 2023-04-26 | Fix |
| CVE-2023-30546 | Contiki-NG has off-by-one error in Antelope DBMS | 9.8CNA v3.1 | 0.6% | 2023-04-26 | Fix |
| CVE-2023-30404 | Aigital Wireless-n Repeater Mini Router code injection | 9.8v3.1 | 2.2% | 2023-04-26 | |
| CVE-2023-30363 | Prototype pollution in vConsole | 9.8v3.1 | 1.0% | 2023-04-26 | Fix |
| CVE-2023-30280 | NETGEAR R6700 buffer overflow | 9.8v3.1 | 1.2% | 2023-04-26 | Fix |
| CVE-2023-30269 | CLTPHP improper quantity validation | 8.1v3.1 | 0.7% | 2023-04-26 | |
| CVE-2023-30267 | CLTPHP cross-site scripting | 6.1v3.1 | 0.4% | 2023-04-26 | |
| CVE-2023-30266 | CLTPHP unrestricted file upload | 8.8v3.1 | 0.8% | 2023-04-26 | |
| CVE-2023-30265 | CLTPHP path traversal | 6.5v3.1 | 1.0% | 2023-04-26 | |
| CVE-2023-30212 | Ourphp cross-site scripting | 6.1v3.1 | 8.1% | 2023-04-26 | NucleiExploit code |
| CVE-2023-30211 | Ourphp SQL injection | 9.8v3.1 | 1.0% | 2023-04-26 | |
| CVE-2023-30210 | Ourphp cross-site scripting | 6.1v3.1 | 1.2% | 2023-04-26 | Nuclei |
| CVE-2023-30112 | Medicine Tracker System SQL injection | 7.5v3.1 | 0.6% | 2023-04-26 | |
| CVE-2023-30111 | Medicine Tracker System cross-site scripting | 6.1v3.1 | 0.4% | 2023-04-26 | |
| CVE-2023-30106 | Medicine Tracker System cross-site scripting | 6.1v3.1 | 0.5% | 2023-04-26 | |
| CVE-2023-29836 | Exelysis Unified Communications Solution cross-site scripting | 6.1v3.1 | 0.6% | 2023-04-26 | |
| CVE-2023-29835 | Wondershare Dr.Fone privilege escalation | 7.8v3.1 | 0.4% | 2023-04-26 | |
| CVE-2023-29596 | Cmix ByronKnoll buffer overflow | 7.8v3.1 | 0.3% | 2023-04-26 | |
| CVE-2023-29443 | Zoho ManageEngine ServiceDesk Plus XML external entity injection | 4.9v3.1 | 3.0% | 2023-04-26 | Fix |
| CVE-2023-29442 | Zoho ManageEngine Applications Manager cross-site scripting | 6.1v3.1 | 9.4% | 2023-04-26 | Fix |
| CVE-2023-29268 | TIBCO Spotfire Statistics Services unrestricted file upload | 9.8CNA v3.1 | 1.0% | 2023-04-26 | |
| CVE-2023-29257 | IBM Db2 code execution | 7.2CNA v3.1 | 1.5% | 2023-04-26 | Fix |
| CVE-2023-28009 | HCL Workload Automation is vulnerable to XML external entity (XXE) injection | 6.5CNA v3.1 | 0.8% | 2023-04-26 | Fix |
| CVE-2023-28008 | HCL Workload Automation is vulnerable to XML external entity (XXE) injection | 7.1CNA v3.1 | 0.8% | 2023-04-26 | Fix |
| CVE-2023-27843 | Ask For A Quote PrestaShop askforaquote v.5.4.2 and SQL injection | 9.8v3.1 | 1.2% | 2023-04-26 | |
| CVE-2023-27559 | IBM Db2 denial of service | 5.3CNA v3.1 | 0.9% | 2023-04-26 | Fix |
| CVE-2023-27107 | Myq-solution Central Server incorrect authorization | 8.8v3.1 | 0.8% | 2023-04-26 | |
| CVE-2023-26930 | Xpdfreader Xpdf buffer overflow | 5.5v3.1 | 0.3% | 2023-04-26 | |
| CVE-2023-26735 | prometheus Blackbox Exporter server-side request forgery | 7.5v3.1 | 0.9% | 2023-04-26 | |
| CVE-2023-26567 | Sangoma Freepbx Linux 7 insufficiently protected credentials | 8.1v3.1 | 0.6% | 2023-04-26 | |
| CVE-2023-26560 | Northern.tech Cfengine observable discrepancy | 6.5v3.1 | 0.5% | 2023-04-26 | Fix |
| CVE-2023-26286 | IBM AIX privilege escalation | 8.4CNA v3.1 | 0.3% | 2023-04-26 | Fix |
| CVE-2023-24796 | Vinga Wr-ac1200 arbitrary code execution | 9.8v3.1 | 1.6% | 2023-04-26 | |
| CVE-2023-22729 | Silverstripe Framework has open redirect vulnerability on CMSSecurity relogin screen | 5.4CNA v3.1 | 0.4% | 2023-04-26 | Fix |
| CVE-2023-22728 | Silverstripe Framework has missing permission check of canView in GridFieldPrintButton | 4.3CNA v3.1 | 0.5% | 2023-04-26 | Fix |
| CVE-2023-2307 | Cross-site request forgery (CSRF) in BuilderIO/Qwik | 6.5v3.1 | 0.3% | 2023-04-26 | Fix |
| CVE-2023-2294 | UCMS Column Configuration saddpost.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-04-26 | |
| CVE-2023-2291 | Zoho ManageEngine Multiple Products hard-coded credentials | 7.8NVD v3.1 | 0.8% | 2023-04-26 | |
| CVE-2023-2273 | Rapid7 Insight Agent directory traversal | 5.8CNA v3.1 | 0.7% | 2023-04-26 | Fix |
| CVE-2023-1786 | Sensitive data exposure in cloud-init logs | 5.5CNA v3.1 | 0.3% | 2023-04-26 | Fix |
| CVE-2023-1387 | Grafana information disclosure | 4.2CNA v3.1 | 1.5% | 2023-04-26 | Fix |
| CVE-2023-0458 | Spectre V1 Gadget in do_prlimit in the Linux kernel | 4.7NVD v3.1 | 0.7% | 2023-04-26 | Fix |
| CVE-2023-31223 | dradisframework Dradis cross-site scripting | 5.4NVD v3.1 | 0.5% | 2023-04-25 | Fix |
| CVE-2023-30839 | PrestaShop vulnerable to SQL filter bypass leading to arbitrary write requests using SQL Manager | 10.0CNA v3.1 | 1.7% | 2023-04-25 | Fix |
| CVE-2023-30838 | PrestaShop vulnerable to possible XSS injection through Validate::isCleanHTML method | 8.6CNA v3.1 | 1.0% | 2023-04-25 | Fix |
| CVE-2023-30609 | matrix-react-sdk vulnerable to HTML injection in search results via plaintext message highlighting | 5.4CNA v3.1 | 0.6% | 2023-04-25 | Fix |
| CVE-2023-30549 | Unpatched extfs vulnerabilities are exploitable through suid-mode Apptainer | 7.1CNA v3.1 | 0.4% | 2023-04-25 | Fix |
| CVE-2023-30545 | PrestaShop arbitrary file read | 7.7CNA v3.1 | 0.9% | 2023-04-25 | Fix |
| CVE-2023-30417 | Pear Admin Boot Pear-Admin-Boot up to v2.0.2 cross-site scripting | 5.4v3.1 | 0.4% | 2023-04-25 | |
| CVE-2023-30402 | Yasm out-of-bounds write | 5.5v3.1 | 0.3% | 2023-04-25 | |
| CVE-2023-30177 | Cross-site scripting in CraftCMS | 6.1v3.1 | 0.4% | 2023-04-25 | Fix |
| CVE-2023-29779 | Sengled E1e-g7f resource exhaustion | 7.5v3.1 | 1.2% | 2023-04-25 | |
| CVE-2023-29552 | Service Location Protocol (SLP) denial of service | 7.5v3.1 | 64.0% | 2023-04-25 | KEVFix |
| CVE-2023-29200 | Contao/core-bundle has path traversal vulnerability in the file manager | 4.3CNA v3.1 | 0.8% | 2023-04-25 | Fix |
| CVE-2023-29012 | Git CMD erroneously executes `doskey.exe` in the current directory, if it exists | 7.3CNA v3.1 | 0.4% | 2023-04-25 | Fix |
| CVE-2023-29011 | Git For Windows's config file of `connect.exe` is susceptible to malicious placing | 7.6CNA v3.1 | 0.4% | 2023-04-25 | Fix |
| CVE-2023-29007 | Arbitrary configuration injection via `git submodule deinit` | 7.0CNA v3.1 | 6.1% | 2023-04-25 | Exploit codeFix |
| CVE-2023-28847 | Nextcloud Server missing brute force protection for passwords of password protected share links | 3.1CNA v3.1 | 0.8% | 2023-04-25 | Fix |
| CVE-2023-28771 | Zyxel Multiple Firewalls OS command injection | 9.8CNA v3.1 | 99.3% | 2023-04-25 | KEVMetasploitEmerging ThreatsExploit codeFix |
| CVE-2023-28090 | HPE OneView insufficiently protected credentials | 5.5v3.1 | 0.2% | 2023-04-25 | Fix |
| CVE-2023-28089 | HPE OneView insufficiently protected credentials | 7.1v3.1 | 0.2% | 2023-04-25 | Fix |
| CVE-2023-28088 | HPE OneView insufficiently protected credentials | 7.8v3.1 | 0.2% | 2023-04-25 | Fix |
| CVE-2023-28087 | HPE OneView insufficiently protected credentials | 5.5v3.1 | 0.2% | 2023-04-25 | Fix |
| CVE-2023-28086 | HPE OneView insufficiently protected credentials | 5.5v3.1 | 0.2% | 2023-04-25 | Fix |
| CVE-2023-28084 | HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens | 5.5v3.1 | 0.2% | 2023-04-25 | Fix |
| CVE-2023-27619 | Regina Lite WordPress theme cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-04-25 | |
| CVE-2023-27105 | Shanling Mtouch OS path traversal | 9.8v3.1 | 1.3% | 2023-04-25 | |
| CVE-2023-26843 | ChurchCRM A stored cross-site scripting | 5.4v3.1 | 1.4% | 2023-04-25 | Nuclei |
| CVE-2023-26841 | ChurchCRM A cross-site request forgery | 6.5v3.1 | 0.4% | 2023-04-25 | |
| CVE-2023-26840 | ChurchCRM A cross-site request forgery | 5.3v3.1 | 0.3% | 2023-04-25 | |
| CVE-2023-26839 | ChurchCRM A cross-site request forgery | 4.3v3.1 | 0.3% | 2023-04-25 | |
| CVE-2023-26098 | Telindus Apsal unrestricted file upload | 7.8v3.1 | 0.2% | 2023-04-25 | |
| CVE-2023-26058 | Nokia Netact XML external entity injection | 6.5v3.1 | 0.5% | 2023-04-25 | |
| CVE-2023-26057 | Nokia Netact XML external entity injection | 6.5v3.1 | 0.5% | 2023-04-25 | |
| CVE-2023-25815 | Git looks for localized messages in the wrong place | 3.3CNA v3.1 | 1.0% | 2023-04-25 | Fix |
| CVE-2023-25793 | Link Juice Keeper WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-25 | Fix |
| CVE-2023-25710 | Click to Call or Chat Buttons WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-25 | Fix |
| CVE-2023-25652 | git apply --reject partially-controlled arbitrary file write | 7.5CNA v3.1 | 51.9% | 2023-04-25 | Fix |
| CVE-2023-25490 | Archivist Custom Archive Templates WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-25 | Fix |
| CVE-2023-25485 | JSON Content Importer WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-25 | Fix |
| CVE-2023-25484 | Simple Yearly Archive WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-25 | Fix |
| CVE-2023-25479 | Podlove Subscribe button WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-25 | Fix |
| CVE-2023-25461 | Wp-Insert WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-25 | Fix |
| CVE-2023-25348 | ChurchCRM CSV injection | 7.8v3.1 | 0.4% | 2023-04-25 | |
| CVE-2023-25347 | ChurchCRM A stored cross-site scripting | 5.4v3.1 | 0.6% | 2023-04-25 | |
| CVE-2023-25346 | ChurchCRM A reflected cross-site scripting | 6.1v3.1 | 1.5% | 2023-04-25 | Nuclei |
| CVE-2023-25314 | WWBN AVideo World Wide Broadcast Network cross-site scripting | 6.1v3.1 | 0.4% | 2023-04-25 | |
| CVE-2023-25313 | AVideo contains command injection when embedding a video link | 9.8v3.1 | 1.3% | 2023-04-25 | Fix |
| CVE-2023-24512 | Arista Networks Terminattr improper access control | 8.8CNA v3.1 | 0.6% | 2023-04-25 | |
| CVE-2023-24005 | Inline Tweet Sharer Twitter Sharing WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-25 | Fix |
| CVE-2023-23995 | TinyMCE Custom Styles WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-25 | Fix |
| CVE-2023-23889 | Quick Paypal Payments WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-04-25 | Fix |
| CVE-2023-23866 | Interactive Geo Maps WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-04-25 | Fix |
| CVE-2023-23839 | SolarWinds Platform exposure of sensitive information | 6.5CNA v3.1 | 1.1% | 2023-04-25 | Fix |
| CVE-2023-23838 | Directory traversal and file enumeration vulnerability: Database Performance Analyzer (DPA) | 6.5CNA v3.1 | 1.3% | 2023-04-25 | Fix |
| CVE-2023-23837 | No Exception Handling vulnerability: Database Performance Analyzer (DPA) | 7.5CNA v3.1 | 0.8% | 2023-04-25 | Fix |
| CVE-2023-23710 | WordPress Social Login and Register plugin cross-site scripting | 4.8v3.1 | 0.4% | 2023-04-25 | Fix |
| CVE-2023-22665 | Apache Jena: Exposure of arbitrary execution in script engine expressions | 5.4v3.1 | 1.3% | 2023-04-25 | Fix |
| CVE-2023-20872 | VMware Workstation Pro / Player (Workstation) and VMware Fusion out-of-bounds write | 8.8v3.1 | 0.9% | 2023-04-25 | Exploit codeFix |
| CVE-2023-20871 | VMware Fusion incorrect authorization | 7.8v3.1 | 0.4% | 2023-04-25 | Fix |
| CVE-2023-20870 | VMware Workstation Pro / Player (Workstation) and VMware Fusion out-of-bounds read | 6.0v3.1 | 0.4% | 2023-04-25 | Fix |
| CVE-2023-20869 | VMware Workstation Pro / Player (Workstation) and VMware Fusion out-of-bounds write | 8.2v3.1 | 2.0% | 2023-04-25 | Fix |
| CVE-2023-2293 | SourceCodester Purchase Order Management System cross-site scripting | 4.8v3.1 | 0.6% | 2023-04-25 | |
| CVE-2023-2282 | Devolutions Remote Desktop Manager Web Login listener improper access control | 6.5v3.1 | 0.4% | 2023-04-25 | Fix |
| CVE-2023-2281 | Mattermost archiving a team broadcasts unsanitized data over WebSockets | 3.1CNA v3.1 | 0.5% | 2023-04-25 | Fix |
| CVE-2023-2269 | Linux kernel Device Mapper ioctl interface deadlock | 4.4NVD v3.1 | 0.2% | 2023-04-25 | Fix |
| CVE-2023-0045 | Incorrect indirect branch prediction barrier in the Linux kernel | 7.5NVD v3.1 | 2.4% | 2023-04-25 | Exploit codeFix |
| CVE-2023-31085 | Linux kernel divide by zero | 5.5NVD v3.1 | 0.4% | 2023-04-24 | Fix |
| CVE-2023-31084 | Linux kernel deadlock | 5.5v3.1 | 0.4% | 2023-04-24 | Fix |
| CVE-2023-31083 | Linux kernel race condition | 4.7v3.1 | 0.3% | 2023-04-24 | Fix |
| CVE-2023-31082 | Linux kernel release of an invalid pointer | 5.5v3.1 | 0.4% | 2023-04-24 | Fix |
| CVE-2023-31081 | Linux kernel null pointer dereference | 5.5v3.1 | 0.4% | 2023-04-24 | Fix |
| CVE-2023-31061 | Repetier-server cross-site request forgery | 8.8v3.1 | 0.5% | 2023-04-24 | |
| CVE-2023-31060 | Repetier Server through 1.4.10 executes as SYSTEM. This can be leveraged in conjunction with CVE-2023-31059 for full compromise. | 9.8v3.1 | 1.2% | 2023-04-24 | |
| CVE-2023-31059 | Repetier-server path traversal | 7.5v3.1 | 5.6% | 2023-04-24 | NucleiExploit code |
| CVE-2023-31056 | Cloverdx sensitive information in log files | 6.5NVD v3.1 | 0.6% | 2023-04-24 | Fix |
| CVE-2023-31045 | Cross-site scripting in Backdrop CMS | 4.8v3.1 | 0.5% | 2023-04-24 | Fix |
| CVE-2023-30776 | Apache Superset: Database connection password leak | 4.9CNA v3.1 | 2.1% | 2023-04-24 | Fix |
| CVE-2023-30629 | Vyper's raw_call with outsize=0 and revert_on_failure=False returns incorrect success value | 7.5CNA v3.1 | 0.9% | 2023-04-24 | Fix |
| CVE-2023-30628 | Kiwi TCMS has command injection vulnerability in changelog.yml CI workflow | 8.8CNA v3.1 | 3.6% | 2023-04-24 | Fix |
| CVE-2023-30627 | jellyfin-web has a stored cross-site scripting vulnerability in devices.js | 9.1CNA v3.1 | 1.3% | 2023-04-24 | Fix |
| CVE-2023-30626 | Jellyfin vulnerable to directory traversal and file write causing arbitrary code execution | 8.8CNA v3.1 | 2.0% | 2023-04-24 | Fix |
| CVE-2023-30623 | Arbitrary command injection in embano1/wip | 8.8CNA v3.1 | 3.7% | 2023-04-24 | Fix |
| CVE-2023-30622 | Clusternet has potential risk which can be leveraged to make a cluster-level privilege escalation | 6.6CNA v3.1 | 0.2% | 2023-04-24 | Fix |
| CVE-2023-30613 | Kiwi TCMS unrestricted file upload | 8.1CNA v3.1 | 1.0% | 2023-04-24 | Fix |
| CVE-2023-30544 | Kiwi TCMS may allow user to update email address to unverified one | 3.9CNA v3.1 | 0.4% | 2023-04-24 | Fix |
| CVE-2023-30533 | Prototype pollution in sheetJS | 7.8NVD v3.1 | 1.0% | 2023-04-24 | Exploit codeFix |
| CVE-2023-30458 | Medicine Tracker System observable discrepancy | 5.3v3.1 | 0.8% | 2023-04-24 | Exploit code |
| CVE-2023-30414 | JerryScript out-of-bounds write | 5.5v3.1 | 0.3% | 2023-04-24 | |
| CVE-2023-30410 | JerryScript out-of-bounds write | 5.5v3.1 | 0.3% | 2023-04-24 | |
| CVE-2023-30408 | JerryScript resource exhaustion | 5.5v3.1 | 0.3% | 2023-04-24 | |
| CVE-2023-30406 | JerryScript resource exhaustion | 5.5v3.1 | 0.3% | 2023-04-24 | |
| CVE-2023-30378 | Tenda AC15 out-of-bounds write | 9.8v3.1 | 0.8% | 2023-04-24 | |
| CVE-2023-30376 | Tenda AC15 out-of-bounds write | 9.8v3.1 | 0.8% | 2023-04-24 | |
| CVE-2023-30375 | Tenda AC15 out-of-bounds write | 9.8v3.1 | 0.8% | 2023-04-24 | |
| CVE-2023-30373 | Tenda AC15 out-of-bounds write | 9.8v3.1 | 0.8% | 2023-04-24 | |
| CVE-2023-30372 | Tenda AC15 out-of-bounds write | 9.8v3.1 | 0.8% | 2023-04-24 | |
| CVE-2023-30371 | Tenda AC15 out-of-bounds write | 9.8v3.1 | 0.8% | 2023-04-24 | |
| CVE-2023-30370 | Tenda AC15 out-of-bounds write | 9.8v3.1 | 0.8% | 2023-04-24 | |
| CVE-2023-30369 | Tenda AC15 out-of-bounds write | 9.8v3.1 | 0.8% | 2023-04-24 | |
| CVE-2023-30368 | Tenda AC5 out-of-bounds write | 9.8v3.1 | 0.8% | 2023-04-24 | |
| CVE-2023-29849 | Hockeycomputindo Bang Resto SQL injection | 8.8v3.1 | 3.2% | 2023-04-24 | Exploit code |
| CVE-2023-29848 | Hockeycomputindo Bang Resto cross-site scripting | 4.8v3.1 | 1.9% | 2023-04-24 | Exploit code |
| CVE-2023-29780 | 3reality 3rsb015bz denial of service | 7.5v3.1 | 1.1% | 2023-04-24 | |
| CVE-2023-29583 | Yasm stack-based buffer overflow | 5.5v3.1 | 0.3% | 2023-04-24 | |
| CVE-2023-29582 | Yasm out-of-bounds write | 5.5v3.1 | 0.3% | 2023-04-24 | |
| CVE-2023-29579 | Yasm out-of-bounds write | 5.5v3.1 | 0.3% | 2023-04-24 | Fix |
| CVE-2023-29578 | MP4v2 out-of-bounds write | 8.8v3.1 | 0.8% | 2023-04-24 | |
| CVE-2023-29570 | Cesanta mJS resource exhaustion | 5.5v3.1 | 0.3% | 2023-04-24 | |
| CVE-2023-29566 | Remote code execution in Dawnsparks-node-tesseract | 9.8v3.1 | 2.2% | 2023-04-24 | Fix |
| CVE-2023-29530 | Laminas Diactoros vulnerable to HTTP Multiline Header Termination | 7.5CNA v3.1 | 1.0% | 2023-04-24 | Fix |
| CVE-2023-29480 | Ribose RNP cleartext storage of sensitive information | 7.5v3.1 | 0.4% | 2023-04-24 | Fix |
| CVE-2023-29479 | Ribose RNP resource exhaustion | 5.3v3.1 | 0.9% | 2023-04-24 | Fix |
| CVE-2023-29469 | libxml2 xmlDictComputeFastKey function double free | 6.5NVD v3.1 | 1.3% | 2023-04-24 | Fix |
| CVE-2023-28484 | libxml2 null pointer dereference | 6.5NVD v3.1 | 1.2% | 2023-04-24 | Fix |
| CVE-2023-28131 | Expo.io Expo AuthSession module insufficiently protected credentials | 9.6NVD v3.1 | 23.2% | 2023-04-24 | Fix |
| CVE-2023-27991 | Zyxel ATP series firmware CLI command command injection | 8.8CNA v3.1 | 1.5% | 2023-04-24 | Fix |
| CVE-2023-27990 | Zyxel ATP series firmware cross-site scripting | 4.8CNA v3.1 | 0.3% | 2023-04-24 | Fix |
| CVE-2023-27849 | Rails-routes-to-json command injection | 9.8v3.1 | 1.8% | 2023-04-24 | |
| CVE-2023-27848 | Remote code execution in Broccoli-compass | 9.8v3.1 | 1.9% | 2023-04-24 | |
| CVE-2023-27524 | Apache Superset insecure default initialization of Resource | 8.9CNA v3.1 | 97.4% | 2023-04-24 | KEVNucleiMetasploitExploit codeKCVFix |
| CVE-2023-26865 | Brandsdistribution Bdroppy PrestaShop SQL injection | 9.8v3.1 | 1.2% | 2023-04-24 | |
| CVE-2023-26494 | lorawan-stack has open redirect | 6.1NVD v3.1 | 0.6% | 2023-04-24 | Fix |
| CVE-2023-26099 | Telindus Apsal consultation permission vulnerability | 7.1v3.1 | 0.2% | 2023-04-24 | |
| CVE-2023-26097 | Telindus Apsal incorrect authorization | 5.5NVD v3.1 | 0.2% | 2023-04-24 | |
| CVE-2023-26061 | Nokia Netact cross-site scripting | 5.4v3.1 | 0.4% | 2023-04-24 | |
| CVE-2023-26060 | Nokia Netact code injection | 8.8v3.1 | 0.6% | 2023-04-24 | |
| CVE-2023-26059 | Nokia Netact cross-site scripting | 5.4v3.1 | 0.4% | 2023-04-24 | |
| CVE-2023-25133 | Improper privilege management vulnerability in CyberPower PowerPanel Business | 9.8v3.1 | 1.0% | 2023-04-24 | |
| CVE-2023-25132 | Unrestricted upload of file with dangerous type vulnerability in CyberPower PowerPanel Business | 9.8v3.1 | 1.1% | 2023-04-24 | |
| CVE-2023-25131 | CyberPower PowerPanel Business Local / Remote default password | 9.8v3.1 | 1.0% | 2023-04-24 | |
| CVE-2023-24823 | RIOT-OS vulnerable to Packet type confusion during IPHC send | 9.8CNA v3.1 | 1.0% | 2023-04-24 | Fix |
| CVE-2023-24822 | RIOT-OS vulnerable to null pointer dereference during IPHC encoding | 7.5CNA v3.1 | 0.9% | 2023-04-24 | Fix |
| CVE-2023-24821 | RIOT-OS vulnerable to integer underflow during defragmentation | 7.5CNA v3.1 | 0.9% | 2023-04-24 | Fix |
| CVE-2023-24820 | RIOT-OS vulnerable to integer underflow during IPHC receive | 7.5CNA v3.1 | 0.9% | 2023-04-24 | Fix |
| CVE-2023-24819 | RIOT-OS vulnerable to buffer overflow during IPHC receive | 9.8CNA v3.1 | 1.0% | 2023-04-24 | Fix |
| CVE-2023-24818 | RIOT-OS vulnerable to null pointer dereference during fragment forwarding | 7.5CNA v3.1 | 1.2% | 2023-04-24 | Fix |
| CVE-2023-23892 | M Chart WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-04-24 | Fix |
| CVE-2023-22918 | Zyxel ATP series firmware CGI program information disclosure | 6.5CNA v3.1 | 0.8% | 2023-04-24 | Fix |
| CVE-2023-22917 | Zyxel ATP series firmware “sdwan_iface_ipc” binary buffer overflow | 7.5CNA v3.1 | 0.9% | 2023-04-24 | Fix |
| CVE-2023-22916 | Zyxel ATP series firmware improper input validation | 8.1CNA v3.1 | 0.7% | 2023-04-24 | Fix |
| CVE-2023-22915 | Zyxel USG FLEX series firmware “fbwifi_forward.cgi” CGI program buffer overflow | 7.5CNA v3.1 | 1.1% | 2023-04-24 | Fix |
| CVE-2023-22914 | Zyxel USG FLEX series firmware “account_print.cgi” CGI program path traversal | 7.2CNA v3.1 | 1.0% | 2023-04-24 | Fix |
| CVE-2023-22913 | Zyxel USG FLEX series firmware “account_operator.cgi” CGI program command injection | 8.1CNA v3.1 | 1.3% | 2023-04-24 | Fix |
| CVE-2023-22581 | White Rabbit Switch unauthenticated remote code execution | 9.8v3.1 | 0.7% | 2023-04-24 | |
| CVE-2023-22577 | White Rabbit Switch password disclosure | 7.5NVD v3.1 | 0.8% | 2023-04-24 | |
| CVE-2023-2260 | Authorization bypass through user-controlled key in alfio-event/Alf.io | 8.8v3.1 | 0.9% | 2023-04-24 | Fix |
| CVE-2023-2259 | Improper neutralization of special elements used in a template engine in alfio-event/Alf.io | 7.2NVD v3.1 | 1.1% | 2023-04-24 | Fix |
| CVE-2023-2258 | Improper neutralization of formula elements in a CSV file in alfio-event/Alf.io | 8.8v3.1 | 0.9% | 2023-04-24 | Fix |
| CVE-2023-2257 | Devolutions Workspace Desktop Hub Business integration authentication bypass | 7.8v3.1 | 0.2% | 2023-04-24 | Fix |
| CVE-2023-2251 | Uncaught exception in eemeli/yaml | 7.5v3.1 | 1.1% | 2023-04-24 | Fix |
| CVE-2023-2250 | MCE privilege escalation | 6.7v3.1 | 0.2% | 2023-04-24 | |
| CVE-2023-2019 | Linux kernel's netdevsim device driver improper reference count update | 4.4NVD v3.1 | 0.3% | 2023-04-24 | Fix |
| CVE-2023-2007 | Linux kernel's DPT I2O Controller driver time-of-check time-of-use race condition | 7.8NVD v3.1 | 0.3% | 2023-04-24 | Fix |
| CVE-2023-2006 | Linux kernel's RxRPC network protocol A race condition | 7.0NVD v3.1 | 0.4% | 2023-04-24 | Fix |
| CVE-2023-1731 | Improper input validation in Meinberg LTOS | 7.2CNA v3.1 | 1.0% | 2023-04-24 | Fix |
| CVE-2023-1624 | WPCode Lite WordPress plugin arbitrary Log file deletion via CSRF | 6.5NVD v3.1 | 0.3% | 2023-04-24 | Fix |
| CVE-2023-1623 | Custom Post Type UI WordPress plugin Debug Info Sending via CSRF | 6.5NVD v3.1 | 0.4% | 2023-04-24 | Fix |
| CVE-2023-1435 | Ajax Search Lite Pro WordPress plugin Multiple reflected cross-site scripting | 6.1NVD v3.1 | 0.5% | 2023-04-24 | Fix |
| CVE-2023-1420 | Ajax Search Lite and Pro reflected cross-site scripting | 6.1NVD v3.1 | 0.5% | 2023-04-24 | Fix |
| CVE-2023-1414 | WP VR WordPress plugin Subscriber+ arbitrary Tour update | 4.3NVD v3.1 | 0.2% | 2023-04-24 | Fix |
| CVE-2023-1324 | Easy Forms for MailChimp WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.6% | 2023-04-24 | Fix |
| CVE-2023-1129 | WP FEvents Book WordPress plugin Subscriber+ arbitrary Booking manipulation via IDOR | 6.5NVD v3.1 | 0.6% | 2023-04-24 | Fix |
| CVE-2023-1126 | WP FEvents Book WordPress plugin Subscriber+ stored XSS | 5.4NVD v3.1 | 0.4% | 2023-04-24 | |
| CVE-2023-1020 | Steveas WP Live Chat Shoutbox WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 4.9% | 2023-04-24 | Nuclei |
| CVE-2023-0899 | Steveas WP Live Chat Shoutbox WordPress plugin unauthenticated stored XSS | 6.1NVD v3.1 | 0.5% | 2023-04-24 | |
| CVE-2023-0424 | MS-Reviews WordPress plugin Subscriber+ stored XSS | 5.4NVD v3.1 | 0.4% | 2023-04-24 | |
| CVE-2023-0420 | Custom Post Type and Taxonomy GUI Manager WordPress plugin stored XSS via CSRF | 4.8NVD v3.1 | 0.2% | 2023-04-24 | |
| CVE-2023-0418 | Video Central for WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.4% | 2023-04-24 | |
| CVE-2023-0388 | Random Text WordPress plugin Subscriber+ SQLi | 8.8NVD v3.1 | 0.9% | 2023-04-24 | |
| CVE-2023-0276 | Weaver Xtreme Theme Support WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-04-24 | Fix |
| CVE-2023-31043 | EnterpriseDB Postgres Advanced Server cleartext storage of sensitive information | 7.5v3.1 | 0.4% | 2023-04-23 | Fix |
| CVE-2023-27614 | Motor Racing League WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-23 | |
| CVE-2023-27425 | Electric Studio Client Login WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-23 | |
| CVE-2023-25451 | CPO Content Types WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-23 | Fix |
| CVE-2023-24404 | Marketing Performance WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-04-23 | |
| CVE-2023-24386 | AI Contact Us Form WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-23 | |
| CVE-2023-23879 | PHP Execution WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-04-23 | |
| CVE-2023-23832 | Ultimate WP Query Search Filter WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-04-23 | |
| CVE-2023-23827 | Google Maps v3 Shortcode WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-04-23 | |
| CVE-2023-23817 | Simple PDF Viewer WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-04-23 | |
| CVE-2023-23816 | Sitemap Index WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-23 | |
| CVE-2023-23806 | WordPress Custom Settings plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-23 | |
| CVE-2023-23753 | vi-solutions Visforms Base Package for Joomla 3 SQL injection | 9.8NVD v3.1 | 0.8% | 2023-04-23 | Fix |
| CVE-2023-23717 | Portfolio Slideshow WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-04-23 | |
| CVE-2023-22718 | User Meta Manager WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-04-23 | Fix |
| CVE-2023-22698 | Theme Blvd Responsive Google Maps WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-04-23 | |
| CVE-2023-22686 | Nice PayPal Button Lite WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-04-23 | |
| CVE-2023-2246 | SourceCodester Online Pizza Ordering System unrestricted upload | 9.8v3.1 | 3.6% | 2023-04-23 | Exploit code |
| CVE-2023-25514 | NVIDIA CUDA Toolkit out-of-bounds read | 5.3CNA v3.1 | 0.2% | 2023-04-22 | Fix |
| CVE-2023-25513 | NVIDIA CUDA Toolkit out-of-bounds read | 5.3CNA v3.1 | 0.3% | 2023-04-22 | Fix |
| CVE-2023-25512 | NVIDIA CUDA Toolkit out-of-bounds read | 5.3CNA v3.1 | 0.3% | 2023-04-22 | Fix |
| CVE-2023-25511 | NVIDIA CUDA Toolkit divide by zero | 3.3CNA v3.1 | 0.2% | 2023-04-22 | Fix |
| CVE-2023-25510 | NVIDIA CUDA Toolkit null pointer dereference | 3.3CNA v3.1 | 0.2% | 2023-04-22 | Fix |
| CVE-2023-25509 | NVIDIA DGX servers code execution | 6.0CNA v3.1 | 0.2% | 2023-04-22 | Fix |
| CVE-2023-25508 | NVIDIA DGX servers path traversal | 6.7CNA v3.1 | 0.2% | 2023-04-22 | Fix |
| CVE-2023-25507 | NVIDIA DGX servers OS command injection | 7.2CNA v3.1 | 0.9% | 2023-04-22 | Fix |
| CVE-2023-25506 | NVIDIA DGX servers out-of-bounds access | 7.5CNA v3.1 | 0.2% | 2023-04-22 | Fix |
| CVE-2023-25505 | NVIDIA DGX servers buffer overflow | 7.8CNA v3.1 | 0.2% | 2023-04-22 | Fix |
| CVE-2023-2245 | hansunCMS unrestricted upload | 9.8NVD v3.1 | 1.3% | 2023-04-22 | Exploit code |
| CVE-2023-2244 | SourceCodester Online Eyewear Shop GET parameter update_status.php SQL injection | 9.8v3.1 | 0.7% | 2023-04-22 | |
| CVE-2023-2243 | SourceCodester Complaint Management System POST parameter registration.php SQL injection | 8.8v3.1 | 0.7% | 2023-04-22 | |
| CVE-2023-2242 | SourceCodester Online Computer and Laptop Store GET parameter SQL injection | 8.8v3.1 | 0.7% | 2023-04-22 | |
| CVE-2023-2241 | PoDoFo PdfXRefStreamParserObject.cpp readXRefStreamEntry heap-based overflow | 7.8NVD v3.1 | 0.4% | 2023-04-22 | |
| CVE-2023-2240 | Improper privilege management in microweber/microweber | 8.8v3.1 | 0.7% | 2023-04-22 | Fix |
| CVE-2023-2239 | Exposure of private personal information to an unauthorized actor in microweber/microweber | 6.5NVD v3.1 | 0.5% | 2023-04-22 | Fix |
| CVE-2023-1875 | Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ | 5.4v3.1 | 0.5% | 2023-04-22 | Fix |
| CVE-2023-0209 | NVIDIA DGX servers improper authentication | 8.2CNA v3.1 | 0.2% | 2023-04-22 | Fix |
| CVE-2023-0207 | NVIDIA DGX servers incorrect permission assignment | 7.5CNA v3.1 | 0.1% | 2023-04-22 | Fix |
| CVE-2023-0206 | NVIDIA DGX servers denial of service | 7.5CNA v3.1 | 0.2% | 2023-04-22 | Fix |
| CVE-2023-0205 | NVIDIA ConnectX Firmware insufficient access control granularity | 5.0CNA v3.1 | 0.5% | 2023-04-22 | Fix |
| CVE-2023-0204 | NVIDIA ConnectX Firmware improper exception handling | 6.5CNA v3.1 | 0.4% | 2023-04-22 | Fix |
| CVE-2023-0203 | NVIDIA ConnectX Firmware insufficient access control granularity | 5.0CNA v3.1 | 0.5% | 2023-04-22 | Fix |
| CVE-2023-0202 | NVIDIA DGX servers denial of service | 7.5CNA v3.1 | 0.2% | 2023-04-22 | Fix |
| CVE-2023-0201 | NVIDIA DGX servers code execution | 6.7CNA v3.1 | 0.2% | 2023-04-22 | Fix |
| CVE-2023-0200 | NVIDIA DGX servers out-of-bounds access | 7.5CNA v3.1 | 0.2% | 2023-04-22 | Fix |
| CVE-2023-0199 | NVIDIA GPU Display Driver out-of-bounds write | 6.1CNA v3.1 | 0.2% | 2023-04-22 | Fix |
| CVE-2023-0190 | NVIDIA GPU Display Driver null pointer dereference | 5.5CNA v3.1 | 0.2% | 2023-04-22 | Fix |
| CVE-2023-0184 | NVIDIA GPU Display Driver untrusted pointer dereference | 8.8CNA v3.1 | 0.3% | 2023-04-22 | Fix |
| CVE-2023-30798 | MultipartParser DOS with too many fields or files in Starlette Framework | 7.5v3.1 | 1.3% | 2023-04-21 | Fix |
| CVE-2023-30621 | OS command injection in Gipsy | 9.8CNA v3.1 | 1.8% | 2023-04-21 | Fix |
| CVE-2023-30620 | Arbitrary file write when Extracting a Remotely retrieved Tarball in mindsdb/mindsdb | 7.5CNA v3.1 | 1.0% | 2023-04-21 | Fix |
| CVE-2023-30618 | Sensitive Terraform Output Values Printed at Info Logging Level in Kitchen-Terraform | 3.2CNA v3.1 | 0.2% | 2023-04-21 | Fix |
| CVE-2023-29924 | PowerJob vulnerable to incorrect access control | 9.8v3.1 | 1.1% | 2023-04-21 | |
| CVE-2023-29917 | H3C Magic R200 Firmware out-of-bounds write | 4.9v3.1 | 0.8% | 2023-04-21 | |
| CVE-2023-29916 | H3C Magic R200 Firmware out-of-bounds write | 4.9v3.1 | 0.8% | 2023-04-21 | |
| CVE-2023-29915 | H3C Magic R200 Firmware out-of-bounds write | 4.9v3.1 | 0.8% | 2023-04-21 | |
| CVE-2023-29914 | H3C Magic R200 Firmware out-of-bounds write | 4.9v3.1 | 0.8% | 2023-04-21 | |
| CVE-2023-29913 | H3C Magic R200 Firmware out-of-bounds write | 4.9v3.1 | 0.8% | 2023-04-21 | |
| CVE-2023-29912 | H3C Magic R200 Firmware out-of-bounds write | 4.9v3.1 | 0.8% | 2023-04-21 | |
| CVE-2023-29911 | H3C Magic R200 Firmware out-of-bounds write | 4.9v3.1 | 0.8% | 2023-04-21 | |
| CVE-2023-29910 | H3C Magic R200 Firmware out-of-bounds write | 4.9v3.1 | 0.8% | 2023-04-21 | |
| CVE-2023-29909 | H3C Magic R200 Firmware out-of-bounds write | 4.9v3.1 | 0.8% | 2023-04-21 | |
| CVE-2023-29908 | H3C Magic R200 Firmware out-of-bounds write | 4.9v3.1 | 0.8% | 2023-04-21 | |
| CVE-2023-29907 | H3C Magic R200 Firmware out-of-bounds write | 4.9v3.1 | 0.8% | 2023-04-21 | |
| CVE-2023-29906 | H3C Magic R200 Firmware out-of-bounds write | 4.9v3.1 | 0.8% | 2023-04-21 | |
| CVE-2023-29905 | H3C Magic R200 Firmware out-of-bounds write | 4.9v3.1 | 0.8% | 2023-04-21 | |
| CVE-2023-29575 | Axiosys Bento4 resource exhaustion | 5.5v3.1 | 0.3% | 2023-04-21 | |
| CVE-2023-29020 | Cross-site request forgery token fixation in fastify-passport | 6.5CNA v3.1 | 0.4% | 2023-04-21 | Fix |
| CVE-2023-29019 | Session fixation in fastify-passport | 8.1CNA v3.1 | 0.8% | 2023-04-21 | Fix |
| CVE-2023-26876 | Piwigo SQL injection | 8.8v3.1 | 9.7% | 2023-04-21 | MetasploitExploit code |
| CVE-2023-26557 | IO FinNet Tss-lib vulnerable to timing attack from non-constant time scalar arithmetic | 7.5v3.1 | 0.9% | 2023-04-21 | Fix |
| CVE-2023-26556 | IO FinNet Tss-lib vulnerable to timing attack from non-constant time scalar multiplication | 9.1v3.1 | 0.9% | 2023-04-21 | Fix |
| CVE-2023-26101 | Progress Flowmon Packet Investigator path traversal | 7.5v3.1 | 0.7% | 2023-04-21 | |
| CVE-2023-26100 | Progress Flowmon OS cross-site scripting | 6.1v3.1 | 0.4% | 2023-04-21 | |
| CVE-2023-2231 | MAXTECH MAX-G866ac remote management missing authentication | 9.8v3.1 | 2.0% | 2023-04-21 | |
| CVE-2023-2228 | Cross-site request forgery (CSRF) in modoboa/modoboa | 6.8v3.1 | 0.4% | 2023-04-21 | Fix |
| CVE-2023-2227 | Improper authorization in modoboa/modoboa | 9.1v3.1 | 43.8% | 2023-04-21 | NucleiFix |
| CVE-2023-2226 | Velociraptor crashes while parsing some malformed PE or OLE files | 3.3CNA v3.1 | 0.4% | 2023-04-21 | Fix |
| CVE-2023-2220 | Dream Technology mica form object cross-site scripting | 6.1v3.1 | 0.6% | 2023-04-21 | |
| CVE-2023-2219 | SourceCodester Task Reminder System Users.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-04-21 | |
| CVE-2023-2218 | SourceCodester Task Reminder System manage_user.php SQL injection | 9.8v3.1 | 0.7% | 2023-04-21 | |
| CVE-2023-2217 | SourceCodester Task Reminder System manage_reminder.php SQL injection | 9.8v3.1 | 0.7% | 2023-04-21 | |
| CVE-2023-2216 | Campcodes Coffee Shop POS System Users.php cross-site scripting | 6.1v3.1 | 0.6% | 2023-04-21 | |
| CVE-2023-2215 | Campcodes Coffee Shop POS System manage_user.php SQL injection | 9.8v3.1 | 1.6% | 2023-04-21 | Exploit code |
| CVE-2023-2214 | Campcodes Coffee Shop POS System manage_sale.php SQL injection | 7.5v3.1 | 0.6% | 2023-04-21 | |
| CVE-2023-2213 | Campcodes Coffee Shop POS System manage_product.php SQL injection | 7.5v3.1 | 0.6% | 2023-04-21 | |
| CVE-2023-2212 | Campcodes Coffee Shop POS System view_product.php SQL injection | 7.5v3.1 | 0.6% | 2023-04-21 | |
| CVE-2023-2211 | Campcodes Coffee Shop POS System manage_category.php SQL injection | 7.5v3.1 | 0.6% | 2023-04-21 | |
| CVE-2023-2210 | Campcodes Coffee Shop POS System view_category.php SQL injection | 7.5v3.1 | 0.6% | 2023-04-21 | |
| CVE-2023-2209 | Campcodes Coffee Shop POS System view_details.php SQL injection | 7.5v3.1 | 0.6% | 2023-04-21 | |
| CVE-2023-2208 | Campcodes Retro Basketball Shoes Online Store details.php SQL injection | 7.5v3.1 | 0.6% | 2023-04-21 | |
| CVE-2023-2207 | Campcodes Retro Basketball Shoes Online Store contactus1.php SQL injection | 7.5v3.1 | 0.6% | 2023-04-21 | |
| CVE-2023-2206 | Campcodes Retro Basketball Shoes Online Store contactus.php SQL injection | 9.8v3.1 | 0.7% | 2023-04-21 | |
| CVE-2023-2205 | Campcodes Retro Basketball Shoes Online Store login.php SQL injection | 7.5v3.1 | 0.6% | 2023-04-21 | |
| CVE-2023-2204 | Campcodes Retro Basketball Shoes Online Store faqs.php SQL injection | 7.5v3.1 | 0.6% | 2023-04-21 | |
| CVE-2023-2202 | Improper access control in francoisjacquet/RosarioSIS | 6.5v3.1 | 0.5% | 2023-04-21 | Fix |
| CVE-2023-2141 | Unsafe .NET object deserialization affecting DELMIA Apriso Release 2017 through Release 2022 | 8.5CNA v3.1 | 1.0% | 2023-04-21 | |
| CVE-2023-2140 | Server-side request forgery vulnerability affecting DELMIA Apriso Release 2017 through Release 2022 | 7.5CNA v3.1 | 0.6% | 2023-04-21 | |
| CVE-2023-2139 | Reflected cross-site scripting vulnerability affecting DELMIA Apriso Release 2017 | 5.4CNA v3.1 | 0.4% | 2023-04-21 | |
| CVE-2023-2118 | Devolutions Server support ticket feature improper access control | 5.4v3.1 | 0.4% | 2023-04-21 | Fix |
| CVE-2023-1998 | Spectre v2 SMT mitigations problem in Linux kernel | 5.6NVD v3.1 | 1.4% | 2023-04-21 | Exploit codeFix |
| CVE-2023-1892 | Cross-site scripting (XSS) Reflected in sidekiq/sidekiq | 9.6v3.1 | 2.7% | 2023-04-21 | NucleiFix |
| CVE-2023-30616 | Cross-site request forgery due to missing nonce verification in Form Block | 6.5CNA v3.1 | 0.3% | 2023-04-20 | Fix |
| CVE-2023-30076 | Judging Management System SQL injection | 9.8v3.1 | 0.8% | 2023-04-20 | |
| CVE-2023-29926 | PowerJob vulnerable to remote code execution | 9.8v3.1 | 1.2% | 2023-04-20 | |
| CVE-2023-29528 | xwiki-commons cross-site scripting in org.xwiki.Commons:xwiki-commons-xml | 9.1CNA v3.1 | 1.3% | 2023-04-20 | Fix |
| CVE-2023-28459 | pretalx vulnerable to path traversal in HTML export | 6.5v3.1 | 6.6% | 2023-04-20 | MetasploitExploit codeFix |
| CVE-2023-28458 | pretalx allows path traversal in HTML export | 4.3v3.1 | 3.5% | 2023-04-20 | MetasploitExploit codeFix |
| CVE-2023-28047 | Dell Display Manager least privilege violation | 7.3CNA v3.1 | 0.2% | 2023-04-20 | Fix |
| CVE-2023-27652 | Egostudiogroup Super Clean XML external entity injection | 5.5v3.1 | 0.3% | 2023-04-20 | |
| CVE-2023-27495 | Bypass of CSRF protection in the presence of predictable userInfo in @fastify/csrf-protection | 5.3CNA v3.1 | 0.3% | 2023-04-20 | Fix |
| CVE-2023-27355 | Sonos One Speaker stack-based buffer overflow | 8.8v3.1 | 0.8% | 2023-04-20 | |
| CVE-2023-27354 | Sonos One Speaker integer overflow | 6.5v3.1 | 0.6% | 2023-04-20 | |
| CVE-2023-27353 | Sonos One Speaker out-of-bounds read | 6.5v3.1 | 0.6% | 2023-04-20 | |
| CVE-2023-27352 | Sonos One Speaker use-after-free | 8.8v3.1 | 0.8% | 2023-04-20 | |
| CVE-2023-27351 | PaperCut NG/MF improper authentication | 7.5NVD v3.1 | 78.1% | 2023-04-20 | KEVNucleiFix |
| CVE-2023-27350 | PaperCut MF/NG improper access control | 9.8NVD v3.1 | 100.0% | 2023-04-20 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2023-27090 | TeaCMS cross-site scripting | 5.4v3.1 | 0.4% | 2023-04-20 | |
| CVE-2023-25601 | Apache DolphinScheduler to python gateway has improper authentication | 4.3v3.1 | 1.1% | 2023-04-20 | Fix |
| CVE-2023-23938 | Cross-site scripting (XSS) through the name of a color of select box values in tuleap | 5.9CNA v3.1 | 0.5% | 2023-04-20 | Fix |
| CVE-2023-23579 | Datakit CrossCAD/Ware SLDPRT file parser out-of-bounds write | 7.8v3.1 | 0.2% | 2023-04-20 | Fix |
| CVE-2023-22846 | Datakit CrossCAD/Ware SLDPRT file parser out-of-bounds read | 5.5v3.1 | 0.2% | 2023-04-20 | Fix |
| CVE-2023-22354 | Datakit CrossCAD/Ware SLDPRT file parser out-of-bounds read | 5.5v3.1 | 0.2% | 2023-04-20 | Fix |
| CVE-2023-22321 | Datakit CrossCAD/Ware SLDPRT file parser out-of-bounds read | 5.5v3.1 | 0.2% | 2023-04-20 | Fix |
| CVE-2023-22309 | Tribe29 Checkmk Appliance reflected cross-site scripting (XSS) | 6.1v3.1 | 0.4% | 2023-04-20 | Fix |
| CVE-2023-22295 | Datakit CrossCAD/Ware SLDPRT file parser out-of-bounds read | 5.5v3.1 | 0.2% | 2023-04-20 | Fix |
| CVE-2023-20873 | Spring Boot Security Bypass with Wildcard Pattern Matching on Cloud Foundry | 9.8v3.1 | 1.1% | 2023-04-20 | Fix |
| CVE-2023-20865 | VMware Aria Operations for Logs command injection | 7.2v3.1 | 1.6% | 2023-04-20 | Fix |
| CVE-2023-20864 | VMware Aria Operations for Logs deserialization of untrusted data | 9.8v3.1 | 70.4% | 2023-04-20 | NucleiFix |
| CVE-2023-2194 | Linux kernel: i2c: xgene-slimpro out-of-bounds write | 6.7NVD v3.1 | 0.2% | 2023-04-20 | Fix |
| CVE-2023-2193 | Mattermost oauth authorization codes do not expire when deauthorizing an oauth2 app | 6.5CNA v3.1 | 0.6% | 2023-04-20 | |
| CVE-2023-2191 | Cross-site scripting (XSS) Stored in AzuraCast/AzuraCast | 4.8v3.1 | 0.5% | 2023-04-20 | Fix |
| CVE-2023-2177 | Linux kernel null pointer dereference | 5.5NVD v3.1 | 0.2% | 2023-04-20 | Fix |
| CVE-2023-2176 | kernel out-of-bounds read | 7.8NVD v3.1 | 0.2% | 2023-04-20 | Fix |
| CVE-2023-2131 | INEA ME RTU firmware OS command injection | 9.8v3.1 | 1.7% | 2023-04-20 | Fix |
| CVE-2023-2112 | Desktop component allows lateral movement between sessions | 3.6CNA v3.1 | 0.2% | 2023-04-20 | Fix |
| CVE-2023-1767 | Snyk Advisor cross-site scripting | 5.4v3.1 | 0.5% | 2023-04-20 | Exploit codeFix |
| CVE-2023-1255 | OpenSSL input buffer over-read in AES-XTS implementation on 64 bit ARM | 5.9v3.1 | 1.0% | 2023-04-20 | Fix |
| CVE-2023-0384 | Uncontrolled Resource Consuption in M-Files Server | 6.5CNA v3.1 | 0.8% | 2023-04-20 | Fix |
| CVE-2023-0383 | Uncontrolled Resource Consuption in M-Files Server | 7.5CNA v3.1 | 0.8% | 2023-04-20 | Fix |
| CVE-2023-30797 | Insecure Random Generation in Netflix Lemur | 7.5v3.1 | 0.8% | 2023-04-19 | Fix |
| CVE-2023-30614 | Improper neutralization of script-related HTML tags in a web page in pay | 7.1CNA v3.1 | 0.5% | 2023-04-19 | Fix |
| CVE-2023-30612 | Malicious HTTP requests could close arbitrary opening file descriptors in cloud-hypervisor | 4.0CNA v3.1 | 0.4% | 2023-04-19 | Fix |
| CVE-2023-30611 | Reaction metadata exposed in private topics in Discourse-reactions | 4.3CNA v3.1 | 0.4% | 2023-04-19 | Fix |
| CVE-2023-30610 | AWS SDK for Rust aws-sigv4 signing parameters logging information disclosure | 5.5CNA v3.1 | 0.2% | 2023-04-19 | Fix |
| CVE-2023-30605 | Multiple SQL injections in SQL/instance.py param_edit method in Archery GHSL-2022-104 | 6.5CNA v3.1 | 0.8% | 2023-04-19 | |
| CVE-2023-30558 | Multiple SQL injections in SQL/data_dictionary.py table_list method in Archery GHSL-2022-105 | 6.5CNA v3.1 | 0.8% | 2023-04-19 | |
| CVE-2023-30557 | SQL injection in data_dictionary.py table_info method in Archery GHSL-2022-106 | 6.5CNA v3.1 | 0.8% | 2023-04-19 | |
| CVE-2023-30556 | SQL injection in sql_optimize.py optimize_sqltuningadvisor method in Archery GHSL-2022-107 | 6.5CNA v3.1 | 0.8% | 2023-04-19 | |
| CVE-2023-30555 | SQL injection in sql_optimize.py explain method in Archery GHSL-2022-108 | 6.5CNA v3.1 | 0.8% | 2023-04-19 | |
| CVE-2023-30554 | SQL injection in sql_api/api_workflow.py endpoint in Archery GHSL-2022-103 | 6.5CNA v3.1 | 0.8% | 2023-04-19 | |
| CVE-2023-30553 | Multiple SQL injections in sql_api/api_workflow.py endpoint in Archery GHSL-2022-102 | 6.5CNA v3.1 | 0.8% | 2023-04-19 | |
| CVE-2023-30552 | SQL injection in SQL/instance.py endpoint in Archery GHSL-2022-101 | 6.5CNA v3.1 | 0.8% | 2023-04-19 | |
| CVE-2023-30463 | Altran Picotcp integer overflow | 7.5v3.1 | 0.9% | 2023-04-19 | Fix |
| CVE-2023-29923 | PowerJob vulnerable to insecure permissions | 5.3NVD v3.1 | 9.5% | 2023-04-19 | NucleiExploit code |
| CVE-2023-29922 | PowerJob vulnerable to Incorrect Access Control via the create user/save interface | 5.3v3.1 | 3.0% | 2023-04-19 | NucleiExploit code |
| CVE-2023-29921 | PowerJob incorrect access control vulnerability | 5.3v3.1 | 0.5% | 2023-04-19 | |
| CVE-2023-29586 | Codesector Teracopy arbitrary file read | 5.5v3.1 | 0.3% | 2023-04-19 | |
| CVE-2023-29527 | Code injection from account through AWM view sheet in Xwiki platform | 10.0CNA v3.1 | 1.1% | 2023-04-19 | Fix |
| CVE-2023-29526 | XWiki Platform async and display macros code injection | 10.0CNA v3.1 | 1.1% | 2023-04-19 | Fix |
| CVE-2023-29525 | XWiki Platform notifications administration endpoint code injection | 10.0CNA v3.1 | 77.8% | 2023-04-19 | Fix |
| CVE-2023-29524 | Code injection from account through XWiki.SchedulerJobSheet in xwiki-platform | 10.0CNA v3.1 | 75.7% | 2023-04-19 | Fix |
| CVE-2023-29523 | Code injection in display method used in user profiles in xwiki-platform | 10.0CNA v3.1 | 2.0% | 2023-04-19 | Fix |
| CVE-2023-29522 | Code injection from view right on XWiki.ClassSheet in xwiki-platform | 9.9CNA v3.1 | 1.9% | 2023-04-19 | Fix |
| CVE-2023-29521 | Code injection from account/view through VFS Tree macro in xwiki-platform | 8.4CNA v3.1 | 1.1% | 2023-04-19 | Fix |
| CVE-2023-29520 | Page render failure due to broken translations in xwiki-platform | 4.3CNA v3.1 | 0.5% | 2023-04-19 | Fix |
| CVE-2023-29519 | xwiki-platform code injection in org.Xwiki.platform:xwiki-platform-attachment-ui | 9.1CNA v3.1 | 1.9% | 2023-04-19 | Fix |
| CVE-2023-29518 | Code injection from view right using Invitation.InvitationCommon in xwiki-platform | 9.9CNA v3.1 | 1.1% | 2023-04-19 | Fix |
| CVE-2023-29517 | XWiki Platform office document viewer macro information disclosure | 7.5CNA v3.1 | 1.0% | 2023-04-19 | Fix |
| CVE-2023-29516 | Code injection from view right on XWiki.AttachmentSelector in xwiki-platform | 9.9CNA v3.1 | 65.9% | 2023-04-19 | Fix |
| CVE-2023-29515 | Cross-site scripting (XSS) in xwiki-platform | 7.7CNA v3.1 | 0.6% | 2023-04-19 | Fix |
| CVE-2023-29514 | Code injection in template provider administration in xwiki-platform | 10.0CNA v3.1 | 1.9% | 2023-04-19 | Fix |
| CVE-2023-29513 | XWiki Platform firstadminuser.wiki template improper access control | 5.0CNA v3.1 | 0.7% | 2023-04-19 | Fix |
| CVE-2023-29512 | xwiki-platform code injection in xwiki-platform-web-templates | 9.9CNA v3.1 | 1.1% | 2023-04-19 | Fix |
| CVE-2023-29510 | Code injection via unescaped translations in xwiki-platform | 10.0CNA v3.1 | 1.9% | 2023-04-19 | Fix |
| CVE-2023-28328 | Linux kernel null pointer dereference | 5.5NVD v3.1 | 0.2% | 2023-04-19 | Fix |
| CVE-2023-28327 | Linux kernel null pointer dereference | 5.5NVD v3.1 | 0.2% | 2023-04-19 | Fix |
| CVE-2023-28124 | UI Desktop inadequate encryption strength | 5.5v3.1 | 0.1% | 2023-04-19 | Fix |
| CVE-2023-28123 | UI Desktop incorrect permission assignment | 5.5v3.1 | 0.2% | 2023-04-19 | Fix |
| CVE-2023-28122 | UI Desktop A local privilege escalation | 7.8v3.1 | 0.2% | 2023-04-19 | Fix |
| CVE-2023-27777 | Online Jewelry Shop cross-site scripting | 5.4v3.1 | 0.4% | 2023-04-19 | |
| CVE-2023-27776 | Online Jewelry Shop /index.php?page=category_list stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-04-19 | |
| CVE-2023-27043 | Python improper syntax validation | 5.3v3.1 | 2.5% | 2023-04-19 | Fix |
| CVE-2023-26599 | Uniguest Tripleplay TripleSign cross-site scripting | 6.1v3.1 | 0.4% | 2023-04-19 | Fix |
| CVE-2023-25760 | Uniguest Tripleplay insufficiently protected credentials | 8.8v3.1 | 0.6% | 2023-04-19 | Fix |
| CVE-2023-25759 | Uniguest Tripleplay TripleData Reporting Engine OS command injection | 5.4v3.1 | 0.8% | 2023-04-19 | Fix |
| CVE-2023-25620 | Schneider Electric Modicon M340 CPU improper check for exceptional conditions | 6.5CNA v3.1 | 0.6% | 2023-04-19 | Fix |
| CVE-2023-25619 | Schneider Electric Modicon M340 CPU improper check for exceptional conditions | 7.5CNA v3.1 | 0.6% | 2023-04-19 | Fix |
| CVE-2023-23451 | The Flexi Classic and Flexi Soft Gateways SICK UE410-EN3 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN1 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN3S04 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firm | 9.8v3.1 | 0.6% | 2023-04-19 | Fix |
| CVE-2023-22894 | Strapi cleartext storage of sensitive information | 4.9NVD v3.1 | 3.6% | 2023-04-19 | KEVExploit codeKCVFix |
| CVE-2023-22893 | Strapi does not verify the access or ID tokens issued during the OAuth flow | 7.5v3.1 | 4.2% | 2023-04-19 | NucleiFix |
| CVE-2023-22645 | Linux Foundation kubewarden-controller SUSE improper privilege management | 8.0CNA v3.1 | 0.5% | 2023-04-19 | Fix |
| CVE-2023-22621 | strapi server-side template injection | 7.2NVD v3.1 | 70.6% | 2023-04-19 | Reported exploitedNucleiExploit codeKCVFix |
| CVE-2023-21100 | Android inflate.c out-of-bounds write | 7.8v3.1 | 0.1% | 2023-04-19 | Fix |
| CVE-2023-21099 | Android PackageInstallerSession.java privilege escalation | 7.8v3.1 | 0.1% | 2023-04-19 | Fix |
| CVE-2023-21098 | Android AccountManagerService.java privilege escalation | 7.8v3.1 | 0.1% | 2023-04-19 | Fix |
| CVE-2023-21097 | Android Intent.java privilege escalation | 7.8v3.1 | 0.2% | 2023-04-19 | Exploit codeFix |
| CVE-2023-21096 | Android use-after-free | 9.8v3.1 | 0.5% | 2023-04-19 | Fix |
| CVE-2023-21094 | Android LayerState.cpp privilege escalation | 7.8v3.1 | 0.2% | 2023-04-19 | Exploit codeFix |
| CVE-2023-21093 | Android FileUtils.java privilege escalation | 7.8v3.1 | 0.1% | 2023-04-19 | Fix |
| CVE-2023-21092 | Android ActiveServices.java privilege escalation | 7.8v3.1 | 0.1% | 2023-04-19 | Fix |
| CVE-2023-21091 | Android AppLocalePickerActivity.java denial of service | 5.5v3.1 | 0.1% | 2023-04-19 | Fix |
| CVE-2023-21090 | Android ParsingPackageUtils.java denial of service | 5.0v3.1 | 0.1% | 2023-04-19 | Fix |
| CVE-2023-21089 | Android ActivityManagerService.java privilege escalation | 7.8v3.1 | 0.1% | 2023-04-19 | Fix |
| CVE-2023-21088 | Android LocationProviderManager.java privilege escalation | 7.8v3.1 | 0.1% | 2023-04-19 | Fix |
| CVE-2023-21087 | Android uncaught exception | 5.5v3.1 | 0.1% | 2023-04-19 | Fix |
| CVE-2023-21086 | Android SecureNfcPreferenceController.java privilege escalation | 7.8v3.1 | 0.2% | 2023-04-19 | Exploit codeFix |
| CVE-2023-21085 | Android nci_hmsgs.cc out-of-bounds write | 8.8v3.1 | 0.2% | 2023-04-19 | Fix |
| CVE-2023-21084 | Android filesystem.go privilege escalation | 6.7v3.1 | 0.1% | 2023-04-19 | Fix |
| CVE-2023-21083 | Android CallScreeningServiceHelper.java privilege escalation | 7.8v3.1 | 0.1% | 2023-04-19 | Fix |
| CVE-2023-21082 | Android NewOutgoingCallIntentBroadcaster.java information disclosure | 5.5v3.1 | 0.1% | 2023-04-19 | Fix |
| CVE-2023-21081 | Android PackageInstallerService.java privilege escalation | 7.8v3.1 | 0.1% | 2023-04-19 | Fix |
| CVE-2023-21080 | Android btif_rc.cc out-of-bounds read | 5.5v3.1 | 0.1% | 2023-04-19 | Fix |
| CVE-2023-20967 | Android avdt_scb_act.cc out-of-bounds write | 7.8v3.1 | 0.1% | 2023-04-19 | Fix |
| CVE-2023-20950 | Android AlarmManagerActivity.java privilege escalation | 7.8v3.1 | 0.1% | 2023-04-19 | Fix |
| CVE-2023-20941 | Android f_accessory.c out-of-bounds write | 6.6v3.1 | 0.2% | 2023-04-19 | Fix |
| CVE-2023-20935 | Android multiple files out-of-bounds read | 5.5v3.1 | 0.1% | 2023-04-19 | Fix |
| CVE-2023-20909 | Android RunningTasks.java privilege escalation | 5.5v3.1 | 0.2% | 2023-04-19 | Exploit codeFix |
| CVE-2023-20862 | Spring Security logout not clearing security context | 6.3v3.1 | 0.6% | 2023-04-19 | Fix |
| CVE-2023-2170 | TaxoPress WordPress plugin authenticated (Editor+) stored cross-site scripting | 4.8v3.1 | 0.5% | 2023-04-19 | Fix |
| CVE-2023-2169 | TaxoPress WordPress plugin authenticated (Editor+) stored cross-site scripting | 4.8v3.1 | 0.5% | 2023-04-19 | Fix |
| CVE-2023-2168 | TaxoPress WordPress plugin authenticated (Editor+) stored cross-site scripting | 4.8v3.1 | 0.5% | 2023-04-19 | Fix |
| CVE-2023-2166 | Linux can protocol in net/can/af_can.c in the null pointer dereference | 5.5NVD v3.1 | 0.2% | 2023-04-19 | Fix |
| CVE-2023-2162 | kernel use-after-free | 5.5NVD v3.1 | 0.2% | 2023-04-19 | Fix |
| CVE-2023-2137 | Google Chrome sqlite heap-based buffer overflow | 8.8v3.1 | 1.1% | 2023-04-19 | Fix |
| CVE-2023-2136 | Google Chrome Skia integer overflow | 9.6v3.1 | 5.7% | 2023-04-19 | KEVFix |
| CVE-2023-2135 | Google Chrome DevTools use-after-free | 7.5v3.1 | 1.0% | 2023-04-19 | Fix |
| CVE-2023-2134 | Google Chrome Service Worker API out-of-bounds access | 8.8v3.1 | 1.1% | 2023-04-19 | Fix |
| CVE-2023-2133 | Google Chrome Service Worker API out-of-bounds access | 8.8v3.1 | 1.1% | 2023-04-19 | Fix |
| CVE-2023-1900 | Avira Antivirus integer overflow | 5.5NVD v3.1 | 0.3% | 2023-04-19 | Fix |
| CVE-2023-1587 | AVG Antivirus null pointer dereference | 5.5v3.1 | 0.2% | 2023-04-19 | |
| CVE-2023-1586 | AVG Antivirus time-of-check time-of-use race condition | 4.7v3.1 | 0.2% | 2023-04-19 | |
| CVE-2023-1585 | AVG Antivirus time-of-check time-of-use race condition | 6.3v3.1 | 0.2% | 2023-04-19 | |
| CVE-2023-1382 | Linux kernel A race condition | 4.7NVD v3.1 | 0.2% | 2023-04-19 | Fix |
| CVE-2023-0317 | GateManager debug interface is included in non-debug builds | 4.9CNA v3.1 | 0.5% | 2023-04-19 | Fix |
| CVE-2023-30608 | Parser contains an inefficient regular expression in sqlparse | 5.5CNA v3.1 | 1.0% | 2023-04-18 | Fix |
| CVE-2023-30606 | Multisite denial of service through unsanitized dynamic dispatch to SiteSetting in Discourse | 4.2CNA v3.1 | 0.4% | 2023-04-18 | Fix |
| CVE-2023-30538 | Stored cross-site scripting via improper sanitization of svg files in Discourse | 5.4CNA v3.1 | 0.4% | 2023-04-18 | Fix |
| CVE-2023-29887 | Nuovo Spreadsheet-reader test.php local file inclusion | 7.5v3.1 | 4.7% | 2023-04-18 | Nuclei |
| CVE-2023-29855 | WBCE_CMS command injection | 7.2v3.1 | 1.2% | 2023-04-18 | |
| CVE-2023-29854 | Dircms cross-site scripting | 6.1v3.1 | 0.4% | 2023-04-18 | |
| CVE-2023-29774 | iteachyou Dreamer CMS cross-site scripting | 5.4v3.1 | 0.3% | 2023-04-18 | |
| CVE-2023-29413 | Schneider Electric APC Easy UPS Online Monitoring Software missing authentication | 7.5CNA v3.1 | 0.7% | 2023-04-18 | Fix |
| CVE-2023-29412 | Schneider Electric APC Easy UPS Online Monitoring Software OS command injection | 9.8CNA v3.1 | 1.2% | 2023-04-18 | Fix |
| CVE-2023-29411 | Schneider Electric APC Easy UPS Online Monitoring Software missing authentication | 9.8CNA v3.1 | 1.3% | 2023-04-18 | Fix |
| CVE-2023-29410 | Schneider Electric InsightHome improper input validation | 7.2CNA v3.1 | 0.7% | 2023-04-18 | Fix |
| CVE-2023-29196 | HTML injection via topic embedding in Discourse | 4.2CNA v3.1 | 0.3% | 2023-04-18 | Fix |
| CVE-2023-29002 | Debug mode leaks confidential data in Cilium | 7.2CNA v3.1 | 0.2% | 2023-04-18 | Fix |
| CVE-2023-28863 | AMI MegaRAC_SPx insufficient verification of data authenticity | 9.1v3.1 | 0.4% | 2023-04-18 | Fix |
| CVE-2023-28856 | redis `HINCRBYFLOAT` can be used to crash a redis-server process | 5.5CNA v3.1 | 1.3% | 2023-04-18 | Fix |
| CVE-2023-28839 | Improper neutralization in an SQL query in Shoppingfeed | 9.4CNA v3.1 | 0.8% | 2023-04-18 | Fix |
| CVE-2023-28440 | Denial of service via admin theme import route in Discourse | 2.7CNA v3.1 | 0.7% | 2023-04-18 | Fix |
| CVE-2023-28143 | Qualys Cloud Agent local privilege escalation | 6.7CNA v3.1 | 0.2% | 2023-04-18 | Fix |
| CVE-2023-28142 | Qualys Cloud Agent race condition | 6.7CNA v3.1 | 0.1% | 2023-04-18 | Fix |
| CVE-2023-28141 | Qualys Cloud Agent NTFS Junction | 6.7CNA v3.1 | 0.2% | 2023-04-18 | Fix |
| CVE-2023-28140 | Qualys Cloud Agent executable Hijacking | 6.7CNA v3.1 | 0.2% | 2023-04-18 | Fix |
| CVE-2023-28004 | Schneider Electric PowerLogic HDPM6000 improper array index validation | 9.8CNA v3.1 | 1.1% | 2023-04-18 | Fix |
| CVE-2023-28003 | Schneider Electric EcoStruxure Power Monitoring Expert insufficient session expiration | 6.7CNA v3.1 | 0.3% | 2023-04-18 | Fix |
| CVE-2023-27976 | Schneider Electric EcoStruxure Control Expert resource exposure | 8.8CNA v3.1 | 0.8% | 2023-04-18 | Fix |
| CVE-2023-27092 | Jbootfly cross-site scripting | 6.1v3.1 | 0.4% | 2023-04-18 | |
| CVE-2023-26049 | Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty | 2.4CNA v3.1 | 1.3% | 2023-04-18 | Fix |
| CVE-2023-26048 | OutOfMemoryError for large multipart without filename in Eclipse Jetty | 5.3CNA v3.1 | 3.4% | 2023-04-18 | Fix |
| CVE-2023-25556 | Schneider Electric Merten INSTABUS Tastermodul 1fach System M 625199 improper authentication | 8.3CNA v3.1 | 0.4% | 2023-04-18 | |
| CVE-2023-25555 | Schneider Electric StruxureWare Data Center Expert OS command injection | 5.6CNA v3.1 | 0.8% | 2023-04-18 | Fix |
| CVE-2023-25554 | Schneider Electric StruxureWare Data Center Expert OS command injection | 7.8CNA v3.1 | 0.6% | 2023-04-18 | Fix |
| CVE-2023-25553 | Schneider Electric StruxureWare Data Center Expert cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-04-18 | Fix |
| CVE-2023-25552 | Schneider Electric StruxureWare Data Center Expert missing authorization | 8.1CNA v3.1 | 0.5% | 2023-04-18 | Fix |
| CVE-2023-25551 | Schneider Electric StruxureWare Data Center Expert cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-04-18 | Fix |
| CVE-2023-25550 | Schneider Electric StruxureWare Data Center Expert code injection | 7.2CNA v3.1 | 1.2% | 2023-04-18 | Fix |
| CVE-2023-25549 | Schneider Electric StruxureWare Data Center Expert code injection | 7.2CNA v3.1 | 1.2% | 2023-04-18 | Fix |
| CVE-2023-25548 | Schneider Electric StruxureWare Data Center Expert incorrect authorization | 8.8CNA v3.1 | 0.5% | 2023-04-18 | Fix |
| CVE-2023-25547 | Schneider Electric StruxureWare Data Center Expert incorrect authorization | 8.8CNA v3.1 | 0.9% | 2023-04-18 | Fix |
| CVE-2023-22307 | Tribe29 Checkmk Appliance Site-Passwords in GET parameters | 5.5v3.1 | 0.2% | 2023-04-18 | Fix |
| CVE-2023-22294 | Privilege escalation in Checkmk Appliance | 8.8v3.1 | 0.7% | 2023-04-18 | Fix |
| CVE-2023-22003 | Oracle Solaris utility component unauthorized data modification | 3.3CNA v3.1 | 0.2% | 2023-04-18 | Fix |
| CVE-2023-22002 | Oracle VM VirtualBox Core component unauthorized data access | 6.0CNA v3.1 | 0.3% | 2023-04-18 | Fix |
| CVE-2023-22001 | Oracle VM VirtualBox Core component unauthorized data modification | 4.6CNA v3.1 | 0.3% | 2023-04-18 | Fix |
| CVE-2023-22000 | Oracle VM VirtualBox Core component unauthorized data modification | 4.6CNA v3.1 | 0.3% | 2023-04-18 | Fix |
| CVE-2023-21999 | Oracle VM VirtualBox Core component unauthorized data modification | 3.6CNA v3.1 | 0.3% | 2023-04-18 | Fix |
| CVE-2023-21998 | Oracle VM VirtualBox Core component unauthorized data modification | 4.6CNA v3.1 | 0.3% | 2023-04-18 | Fix |
| CVE-2023-21997 | Oracle E-Business Suite User Management Proxy User Delegation component information disclosure | 4.3CNA v3.1 | 0.5% | 2023-04-18 | Fix |
| CVE-2023-21996 | Oracle WebLogic Server Web services component denial of service | 7.5CNA v3.1 | 0.8% | 2023-04-18 | Fix |
| CVE-2023-21993 | Oracle Clinical Remote Data Capture forms component unauthorized data access | 6.5CNA v3.1 | 0.6% | 2023-04-18 | Fix |
| CVE-2023-21992 | Oracle PeopleSoft Enterprise HCM Human Resources unauthorized data modification | 5.4CNA v3.1 | 0.4% | 2023-04-18 | Fix |
| CVE-2023-21991 | Oracle VM VirtualBox Core component information disclosure | 3.2CNA v3.1 | 0.3% | 2023-04-18 | Fix |
| CVE-2023-21990 | Oracle VM VirtualBox Core component takeover | 8.2CNA v3.1 | 0.3% | 2023-04-18 | Fix |
| CVE-2023-21989 | Oracle VM VirtualBox Core component unauthorized data access | 6.0CNA v3.1 | 0.3% | 2023-04-18 | Fix |
| CVE-2023-21988 | Oracle VM VirtualBox Core component information disclosure | 3.8CNA v3.1 | 0.3% | 2023-04-18 | Fix |
| CVE-2023-21987 | Oracle VM VirtualBox Core component takeover | 7.8CNA v3.1 | 0.7% | 2023-04-18 | Exploit codeFix |
| CVE-2023-21986 | Oracle GraalVM Enterprise Edition Native Image component unauthorized data modification | 5.7CNA v3.1 | 0.3% | 2023-04-18 | Fix |
| CVE-2023-21985 | Oracle Solaris utility component takeover | 7.7CNA v3.1 | 0.2% | 2023-04-18 | Fix |
| CVE-2023-21984 | Oracle Solaris Libraries component denial of service | 6.5CNA v3.1 | 0.7% | 2023-04-18 | Fix |
| CVE-2023-21982 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.1% | 2023-04-18 | Fix |
| CVE-2023-21981 | Oracle PeopleSoft Enterprise PeopleTools Elastic Search component unauthorized data access | 4.9CNA v3.1 | 0.6% | 2023-04-18 | Fix |
| CVE-2023-21980 | Oracle MySQL Server client programs component takeover | 7.1CNA v3.1 | 0.8% | 2023-04-18 | Fix |
| CVE-2023-21979 | Oracle WebLogic Server Core component unauthorized data access | 7.5CNA v3.1 | 0.6% | 2023-04-18 | Fix |
| CVE-2023-21978 | Oracle E-Business Suite Application Object Library GUI component unauthorized data modification | 6.5CNA v3.1 | 0.4% | 2023-04-18 | Fix |
| CVE-2023-21977 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.1% | 2023-04-18 | Fix |
| CVE-2023-21976 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.1% | 2023-04-18 | Fix |
| CVE-2023-21973 | Oracle E-Business Suite iProcurement unauthorized data modification | 5.4CNA v3.1 | 0.4% | 2023-04-18 | Fix |
| CVE-2023-21972 | Oracle MySQL Server DML component denial of service | 4.9CNA v3.1 | 1.1% | 2023-04-18 | Fix |
| CVE-2023-21971 | Oracle MySQL Connectors Connector/J component unauthorized data modification | 5.3CNA v3.1 | 1.5% | 2023-04-18 | Fix |
| CVE-2023-21970 | Oracle BI Publisher Security component unauthorized data access | 5.7CNA v3.1 | 0.6% | 2023-04-18 | Fix |
| CVE-2023-21969 | Oracle SQL Developer takeover | 6.7CNA v3.1 | 0.2% | 2023-04-18 | Fix |
| CVE-2023-21968 | Oracle Java SE, Oracle GraalVM Enterprise Edition Libraries component unauthorized data modification | 3.7CNA v3.1 | 1.0% | 2023-04-18 | Fix |
| CVE-2023-21967 | Oracle Java SE, Oracle GraalVM Enterprise Edition JSSE component denial of service | 5.9CNA v3.1 | 1.5% | 2023-04-18 | Fix |
| CVE-2023-21966 | Oracle MySQL Server JSON component denial of service | 4.9CNA v3.1 | 1.1% | 2023-04-18 | Fix |
| CVE-2023-21965 | Oracle Business Intelligence Enterprise Edition Analytics Server component unauthorized data access | 5.7CNA v3.1 | 0.6% | 2023-04-18 | Fix |
| CVE-2023-21964 | Oracle WebLogic Server Core component denial of service | 7.5CNA v3.1 | 0.8% | 2023-04-18 | Fix |
| CVE-2023-21963 | Oracle MySQL Server Connection Handling component denial of service | 2.7CNA v3.1 | 1.0% | 2023-04-18 | Fix |
| CVE-2023-21962 | Oracle MySQL Server components services component denial of service | 4.9CNA v3.1 | 1.4% | 2023-04-18 | Fix |
| CVE-2023-21960 | Oracle WebLogic Server Core component unauthorized data modification | 5.6CNA v3.1 | 0.4% | 2023-04-18 | Fix |
| CVE-2023-21959 | Oracle E-Business Suite iReceivables Attachments component information disclosure | 4.3CNA v3.1 | 0.5% | 2023-04-18 | Fix |
| CVE-2023-21956 | Oracle WebLogic Server Web Container component unauthorized data modification | 6.1CNA v3.1 | 0.4% | 2023-04-18 | Fix |
| CVE-2023-21955 | Oracle MySQL Server Partition component denial of service | 4.9CNA v3.1 | 1.4% | 2023-04-18 | Fix |
| CVE-2023-21954 | Oracle Java SE, Oracle GraalVM Enterprise Edition Hotspot component unauthorized data access | 5.9CNA v3.1 | 1.4% | 2023-04-18 | Fix |
| CVE-2023-21953 | Oracle MySQL Server Partition component denial of service | 4.9CNA v3.1 | 1.5% | 2023-04-18 | Fix |
| CVE-2023-21952 | Oracle Business Intelligence Enterprise Edition Analytics Server component unauthorized data access | 5.7CNA v3.1 | 0.6% | 2023-04-18 | Fix |
| CVE-2023-21948 | Oracle Solaris Core component takeover | 7.8CNA v3.1 | 0.2% | 2023-04-18 | Fix |
| CVE-2023-21947 | Oracle MySQL Server components services component denial of service | 4.4CNA v3.1 | 1.4% | 2023-04-18 | Fix |
| CVE-2023-21946 | Oracle MySQL Server Optimizer component denial of service | 6.5CNA v3.1 | 1.5% | 2023-04-18 | Fix |
| CVE-2023-21945 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.4% | 2023-04-18 | Fix |
| CVE-2023-21944 | Oracle Hyperion Essbase unauthorized access | 5.3CNA v3.1 | 0.5% | 2023-04-18 | Fix |
| CVE-2023-21943 | Oracle Hyperion Essbase unauthorized access | 5.3CNA v3.1 | 0.5% | 2023-04-18 | Fix |
| CVE-2023-21942 | Oracle Hyperion Essbase unauthorized access | 5.3CNA v3.1 | 0.5% | 2023-04-18 | Fix |
| CVE-2023-21941 | Oracle BI Publisher Web Server component information disclosure | 4.3CNA v3.1 | 0.5% | 2023-04-18 | Fix |
| CVE-2023-21940 | Oracle MySQL Server components services component denial of service | 4.4CNA v3.1 | 1.3% | 2023-04-18 | Fix |
| CVE-2023-21939 | Oracle Java SE, Oracle GraalVM Enterprise Edition Swing component unauthorized data modification | 5.3CNA v3.1 | 2.5% | 2023-04-18 | Exploit codeFix |
| CVE-2023-21938 | Oracle Java SE, Oracle GraalVM Enterprise Edition Libraries component unauthorized data modification | 3.7CNA v3.1 | 1.2% | 2023-04-18 | Fix |
| CVE-2023-21937 | Oracle Java SE, Oracle GraalVM Enterprise Edition unauthorized data modification | 3.7CNA v3.1 | 1.2% | 2023-04-18 | Fix |
| CVE-2023-21936 | Oracle JD Edwards EnterpriseOne Tools Web Runtime SEC component unauthorized data modification | 5.4CNA v3.1 | 0.4% | 2023-04-18 | Fix |
| CVE-2023-21935 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.4% | 2023-04-18 | Fix |
| CVE-2023-21934 | Oracle Database Java VM improper access control | 6.8CNA v3.1 | 0.5% | 2023-04-18 | Fix |
| CVE-2023-21933 | Oracle MySQL Server DDL component denial of service | 4.9CNA v3.1 | 1.4% | 2023-04-18 | Fix |
| CVE-2023-21932 | Oracle Hospitality OPERA 5 Property Services OXI component unauthorized data access | 7.2CNA v3.1 | 45.0% | 2023-04-18 | Emerging ThreatsFix |
| CVE-2023-21931 | Oracle WebLogic Server Core component unauthorized data access | 7.5CNA v3.1 | 82.3% | 2023-04-18 | Exploit codeFix |
| CVE-2023-21930 | Oracle Java SE, Oracle GraalVM Enterprise Edition JSSE component unauthorized data access | 7.4CNA v3.1 | 1.3% | 2023-04-18 | Fix |
| CVE-2023-21929 | Oracle MySQL Server DDL component unauthorized data modification | 5.5CNA v3.1 | 1.3% | 2023-04-18 | Fix |
| CVE-2023-21928 | Oracle Solaris IPS repository daemon component unauthorized data modification | 1.8CNA v3.1 | 0.2% | 2023-04-18 | Fix |
| CVE-2023-21927 | Oracle JD Edwards EnterpriseOne Tools Interoperability SEC component information disclosure | 4.3CNA v3.1 | 0.5% | 2023-04-18 | Fix |
| CVE-2023-21926 | Oracle Health Sciences InForm Core component unauthorized data access | 5.5CNA v3.1 | 0.2% | 2023-04-18 | Fix |
| CVE-2023-21925 | Oracle Health Sciences InForm Core component denial of service | 5.3CNA v3.1 | 0.6% | 2023-04-18 | Fix |
| CVE-2023-21924 | Oracle Health Sciences InForm Core component unauthorized data modification | 5.9CNA v3.1 | 0.4% | 2023-04-18 | Fix |
| CVE-2023-21923 | Oracle Health Sciences InForm Core component unauthorized data access | 8.3CNA v3.1 | 0.6% | 2023-04-18 | Fix |
| CVE-2023-21922 | Oracle Health Sciences InForm Core component unauthorized data access | 6.8CNA v3.1 | 0.5% | 2023-04-18 | Fix |
| CVE-2023-21921 | Oracle Health Sciences InForm Core component unauthorized data modification | 5.4CNA v3.1 | 0.4% | 2023-04-18 | Fix |
| CVE-2023-21920 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.5% | 2023-04-18 | Fix |
| CVE-2023-21919 | Oracle MySQL Server DDL component denial of service | 4.9CNA v3.1 | 1.5% | 2023-04-18 | Fix |
| CVE-2023-21918 | Oracle Database Recovery Manager denial of service | 6.8CNA v3.1 | 0.7% | 2023-04-18 | Fix |
| CVE-2023-21917 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.1% | 2023-04-18 | Fix |
| CVE-2023-21916 | Oracle PeopleSoft Enterprise PeopleTools Web Server component information disclosure | 5.3CNA v3.1 | 0.5% | 2023-04-18 | Fix |
| CVE-2023-21915 | Oracle Financial Services Applications Banking Payments unauthorized data modification | 4.6CNA v3.1 | 0.4% | 2023-04-18 | Fix |
| CVE-2023-21913 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.1% | 2023-04-18 | Fix |
| CVE-2023-21912 | Oracle MySQL Server Security Privileges component denial of service | 7.5CNA v3.1 | 1.2% | 2023-04-18 | Fix |
| CVE-2023-21911 | Oracle MySQL Server InnoDB component denial of service | 4.9CNA v3.1 | 1.4% | 2023-04-18 | Fix |
| CVE-2023-21910 | Oracle Business Intelligence Enterprise Edition unauthorized data access | 6.5CNA v3.1 | 0.6% | 2023-04-18 | Fix |
| CVE-2023-21909 | Oracle Siebel CRM UI Framework component unauthorized data access | 6.5CNA v3.1 | 0.6% | 2023-04-18 | Fix |
| CVE-2023-21908 | Oracle Banking Virtual Account Management unauthorized data access | 6.0CNA v3.1 | 0.4% | 2023-04-18 | Fix |
| CVE-2023-21907 | Oracle Banking Virtual Account Management unauthorized data access | 6.0CNA v3.1 | 0.4% | 2023-04-18 | Fix |
| CVE-2023-21906 | Oracle Banking Virtual Account Management SMS module component unauthorized data access | 6.1CNA v3.1 | 0.6% | 2023-04-18 | Fix |
| CVE-2023-21905 | Oracle Banking Virtual Account Management Routing Hub component unauthorized data access | 6.1CNA v3.1 | 0.6% | 2023-04-18 | Fix |
| CVE-2023-21904 | Oracle Banking Virtual Account Management unauthorized data access | 5.3CNA v3.1 | 0.4% | 2023-04-18 | Fix |
| CVE-2023-21903 | Oracle Banking Virtual Account Management unauthorized data access | 5.3CNA v3.1 | 0.4% | 2023-04-18 | Fix |
| CVE-2023-21902 | Oracle Financial Services Behavior Detection Platform application component information disclosure | 4.3CNA v3.1 | 0.5% | 2023-04-18 | Fix |
| CVE-2023-21896 | Oracle Solaris NSSwitch component takeover | 7.0CNA v3.1 | 0.2% | 2023-04-18 | Fix |
| CVE-2023-2160 | Weak password requirements in modoboa/modoboa | 9.8v3.1 | 0.6% | 2023-04-18 | Fix |
| CVE-2023-2155 | SourceCodester Air Cargo Management System cross-site scripting | 4.8v3.1 | 0.6% | 2023-04-18 | |
| CVE-2023-2154 | SourceCodester Task Reminder System SQL injection | 7.2v3.1 | 0.7% | 2023-04-18 | |
| CVE-2023-2153 | SourceCodester Complaint Management System POST parameter editable_ajax.php cross-site scripting | 6.1v3.1 | 0.6% | 2023-04-18 | |
| CVE-2023-2152 | SourceCodester Student Study Center Desk Management System index.php file inclusion | 9.8v3.1 | 1.2% | 2023-04-18 | |
| CVE-2023-2151 | SourceCodester Student Study Center Desk Management System manage_student.php SQL injection | 9.8v3.1 | 0.8% | 2023-04-18 | |
| CVE-2023-2150 | SourceCodester Task Reminder System Master.php SQL injection | 7.2v3.1 | 0.7% | 2023-04-18 | |
| CVE-2023-2149 | Campcodes Online Thesis Archiving System manage_user.php SQL injection | 9.8v3.1 | 0.8% | 2023-04-18 | |
| CVE-2023-2148 | Campcodes Online Thesis Archiving System view_curriculum.php SQL injection | 9.8v3.1 | 0.8% | 2023-04-18 | |
| CVE-2023-2147 | Campcodes Online Thesis Archiving System view_details.php SQL injection | 9.8v3.1 | 0.8% | 2023-04-18 | |
| CVE-2023-2146 | Campcodes Online Thesis Archiving System Master.php SQL injection | 9.8v3.1 | 0.8% | 2023-04-18 | |
| CVE-2023-2145 | Campcodes Online Thesis Archiving System projects_per_curriculum.php SQL injection | 9.8v3.1 | 1.0% | 2023-04-18 | |
| CVE-2023-2144 | Campcodes Online Thesis Archiving System view_department.php SQL injection | 9.8v3.1 | 1.0% | 2023-04-18 | |
| CVE-2023-2138 | @nuxtlabs/github-module made use of hard-coded credentials | 9.8v3.1 | 0.7% | 2023-04-18 | Fix |
| CVE-2023-2120 | Thumbnail carousel slider WordPress plugin reflected cross-site scripting | 6.1v3.1 | 0.6% | 2023-04-18 | Fix |
| CVE-2023-2119 | Responsive Filterable Portfolio WordPress plugin reflected cross-site scripting | 6.1v3.1 | 0.6% | 2023-04-18 | Fix |
| CVE-2023-2020 | Tribe29 Checkmk unauthorized scheduling of downtimes via REST API | 4.3v3.1 | 0.4% | 2023-04-18 | Fix |
| CVE-2023-1548 | Schneider Electric EcoStruxure Control Expert improper privilege management | 5.5CNA v3.1 | 0.1% | 2023-04-18 | Fix |
| CVE-2023-30771 | Apache IoTDB Workbench: Apache/iotdb-web-workbench: Forge the JWTToken to access workbench | 9.8v3.1 | 1.4% | 2023-04-17 | Fix |
| CVE-2023-30770 | A stack-based buffer overflow vulnerability was found in the ADM | 9.8v3.1 | 0.6% | 2023-04-17 | Fix |
| CVE-2023-30769 | Dogecoin Node peer-to-peer network denial of service | 9.8v3.1 | 0.9% | 2023-04-17 | Fix |
| CVE-2023-30548 | Path traversal vulnerability in Gatsby-plugin-sharp | 4.3CNA v3.1 | 0.9% | 2023-04-17 | Fix |
| CVE-2023-30547 | Sandbox escape in vm2 | 9.8CNA v3.1 | 73.0% | 2023-04-17 | Exploit codeFix |
| CVE-2023-30543 | `chainId` may be outdated if user changes chains as part of connection in @web3-react | 5.2CNA v3.1 | 0.4% | 2023-04-17 | Fix |
| CVE-2023-30541 | TransparentUpgradeableProxy clashing selector calls may not be delegated in @OpenZeppelin/Contracts | 5.3CNA v3.1 | 0.8% | 2023-04-17 | Fix |
| CVE-2023-30540 | Chat poll data can still be queried from API after purging history in Nextcloud Talk | 3.5CNA v3.1 | 0.7% | 2023-04-17 | Fix |
| CVE-2023-30539 | Users can set up workflows using restricted and invisible system tags in Nextcloud | 6.5CNA v3.1 | 0.6% | 2023-04-17 | Fix |
| CVE-2023-30536 | slimphp Slim-Psr7 insecure header validation in slim/psr7 | 6.5CNA v3.1 | 0.7% | 2023-04-17 | Fix |
| CVE-2023-29665 | D-Link DIR-823G out-of-bounds write | 9.8v3.1 | 1.2% | 2023-04-17 | |
| CVE-2023-29213 | xwiki-platform org.Xwiki.platform:xwiki-platform-logging-ui injection | 9.1CNA v3.1 | 0.4% | 2023-04-17 | Fix |
| CVE-2023-29197 | Improper header name validation in guzzlehttp/psr7 | 5.3CNA v3.1 | 1.2% | 2023-04-17 | Fix |
| CVE-2023-29004 | Path traversal vulnerability in hap-wi/roxy-wi | 6.5CNA v3.1 | 0.9% | 2023-04-17 | |
| CVE-2023-28984 | Junos OS: QFX Series: The PFE may crash when a lot of MAC addresses are being learned and aged | 5.3CNA v3.1 | 0.2% | 2023-04-17 | Fix |
| CVE-2023-28983 | Junos OS Evolved: Shell injection vulnerability in the gNOI server | 8.8CNA v3.1 | 1.5% | 2023-04-17 | Fix |
| CVE-2023-28982 | Juniper Networks Junos OS Evolved memory leak | 7.5CNA v3.1 | 0.6% | 2023-04-17 | Fix |
| CVE-2023-28981 | Juniper Networks Junos OS Evolved improper input validation | 6.5CNA v3.1 | 0.3% | 2023-04-17 | Fix |
| CVE-2023-28980 | Juniper Networks Junos OS Evolved use-after-free | 5.5CNA v3.1 | 0.2% | 2023-04-17 | Fix |
| CVE-2023-28979 | Junos OS: In a 6PE scenario upon receipt of a specific IPv6 packet an integrity check fails | 4.7CNA v3.1 | 0.3% | 2023-04-17 | Fix |
| CVE-2023-28978 | Junos OS Evolved: Read access to some confidential user information is possible | 5.3CNA v3.1 | 0.5% | 2023-04-17 | Fix |
| CVE-2023-28976 | Juniper Networks Junos OS packet forwarding engine improper check for exceptional conditions | 7.5CNA v3.1 | 0.6% | 2023-04-17 | Fix |
| CVE-2023-28975 | Junos OS: The kernel will crash when certain USB devices are inserted | 4.6CNA v3.1 | 0.3% | 2023-04-17 | Fix |
| CVE-2023-28974 | Juniper Networks Junos OS bbe-smgd improper check for exceptional conditions | 7.4CNA v3.1 | 0.3% | 2023-04-17 | Fix |
| CVE-2023-28973 | Juniper Networks Junos OS Evolved 'sysmanctl' shell command improper authorization | 7.1CNA v3.1 | 0.1% | 2023-04-17 | Fix |
| CVE-2023-28972 | Junos OS: NFX Series: Set system ports console insecure allows root password recovery | 6.8CNA v3.1 | 0.4% | 2023-04-17 | Fix |
| CVE-2023-28971 | Paragon Active Assurance: Enabling the timescaledb enables IP forwarding | 7.2CNA v3.1 | 0.4% | 2023-04-17 | Fix |
| CVE-2023-28970 | Junos OS: JRR200: Kernel crash upon receipt of a specific packet | 6.5CNA v3.1 | 0.3% | 2023-04-17 | Fix |
| CVE-2023-28968 | Junos OS: SRX Series: Policies that rely on JDPI-Decoder actions may fail open | 5.3CNA v3.1 | 0.6% | 2023-04-17 | Fix |
| CVE-2023-28967 | Junos OS and Junos OS Evolved: An attacker sending genuine BGP packets causes an RPD crash | 7.5CNA v3.1 | 0.6% | 2023-04-17 | Fix |
| CVE-2023-28966 | Junos OS Evolved: Local low-privileged user with shell access can execute CLI commands as root | 7.8CNA v3.1 | 0.2% | 2023-04-17 | Fix |
| CVE-2023-28965 | Junos OS: QFX10002: Failure of storm control feature may lead to denial of service | 6.5CNA v3.1 | 0.6% | 2023-04-17 | Fix |
| CVE-2023-28964 | Junos OS and Junos OS Evolved: Malformed BGP flowspec update causes RPD crash | 7.5CNA v3.1 | 0.6% | 2023-04-17 | Fix |
| CVE-2023-28963 | Junos OS: User-controlled input vulnerability in J-Web | 5.3CNA v3.1 | 0.5% | 2023-04-17 | Fix |
| CVE-2023-28962 | Junos OS: Unauthenticated access vulnerability in J-Web | 5.3CNA v3.1 | 0.6% | 2023-04-17 | Fix |
| CVE-2023-28961 | Junos OS: ACX Series: IPv6 firewall filter is not installed in PFE when from next-header ah is used | 5.8CNA v3.1 | 0.4% | 2023-04-17 | Fix |
| CVE-2023-28960 | Juniper Networks Junos OS Evolved incorrect permission assignment | 8.2CNA v3.1 | 0.2% | 2023-04-17 | Fix |
| CVE-2023-28959 | Junos OS: QFX10002: PFE wedges and restarts upon receipt of specific malformed packets | 6.5CNA v3.1 | 0.3% | 2023-04-17 | Fix |
| CVE-2023-27911 | Autodesk FBX-SDK heap-based buffer overflow | 7.8v3.1 | 0.6% | 2023-04-17 | Fix |
| CVE-2023-27910 | Autodesk FBX-SDK stack-based buffer overflow | 7.8v3.1 | 0.5% | 2023-04-17 | Fix |
| CVE-2023-27909 | Autodesk FBX-SDK An out-of-bounds write | 7.8v3.1 | 0.5% | 2023-04-17 | Fix |
| CVE-2023-27907 | Autodesk Maya USD Plugin out-of-bounds write | 7.8v3.1 | 0.3% | 2023-04-17 | Fix |
| CVE-2023-27906 | Autodesk Maya USD Plugin out-of-bounds read | 7.8v3.1 | 0.3% | 2023-04-17 | Fix |
| CVE-2023-27844 | Litextension Leurlrewrite PrestaShop SQL injection | 9.8v3.1 | 0.8% | 2023-04-17 | Fix |
| CVE-2023-27755 | 71note Go-bbs unrestricted file upload | 8.8v3.1 | 0.8% | 2023-04-17 | |
| CVE-2023-27733 | DedeCMS SQL injection | 7.2v3.1 | 0.8% | 2023-04-17 | |
| CVE-2023-27705 | Apng Optimizer buffer overflow | 7.5v3.1 | 0.8% | 2023-04-17 | |
| CVE-2023-27525 | Apache Superset: Incorrect default permissions for Gamma role | 3.1CNA v3.1 | 0.8% | 2023-04-17 | Fix |
| CVE-2023-25504 | Apache Superset: Possible SSRF on import datasets | 4.9CNA v3.1 | 1.0% | 2023-04-17 | Fix |
| CVE-2023-25010 | Autodesk Maya USD Plugin improper initialization | 7.8v3.1 | 0.3% | 2023-04-17 | Fix |
| CVE-2023-24831 | Apache IoTDB grafana-connector Login Bypass vulnerability | 9.8v3.1 | 1.2% | 2023-04-17 | Fix |
| CVE-2023-24504 | Electra Central AC unit update server connection vulnerability | 6.5NVD v3.1 | 0.3% | 2023-04-17 | |
| CVE-2023-24503 | Electra Smart Kit for Split AC Adjacent attacker may cause the unit to load unauthorized FW | 6.5NVD v3.1 | 0.2% | 2023-04-17 | |
| CVE-2023-24502 | Electra Central AC unit Easily calculated password | 6.5NVD v3.1 | 0.2% | 2023-04-17 | |
| CVE-2023-24501 | Electra Central AC unit hard-coded credentials | 9.8v3.1 | 0.6% | 2023-04-17 | |
| CVE-2023-24500 | Electra Central AC unit Adjacent attacker may cause the unit to load unauthorized FW | 6.5NVD v3.1 | 0.2% | 2023-04-17 | |
| CVE-2023-22946 | Apache Spark proxy-user privilege escalation from malicious configuration class | 6.4CNA v3.1 | 1.1% | 2023-04-17 | Fix |
| CVE-2023-2130 | SourceCodester Purchase Order Management System GET parameter view_details.php SQL injection | 9.8v3.1 | 4.1% | 2023-04-17 | Nuclei |
| CVE-2023-2109 | Cross-site scripting (XSS) DOM in chatwoot/chatwoot | 6.1v3.1 | 0.4% | 2023-04-17 | Fix |
| CVE-2023-2017 | Improper control of generation of code in Twig Rendered Views in Shopware | 8.8v3.1 | 2.1% | 2023-04-17 | Fix |
| CVE-2023-1873 | Faturamatik Bircard SQL command improper neutralization | 9.8CNA v3.1 | 0.7% | 2023-04-17 | Fix |
| CVE-2023-1831 | Mattermost user password logged in audit logs | 7.2CNA v3.1 | 0.4% | 2023-04-17 | Fix |
| CVE-2023-1723 | SQLi in Veragroup Mobile Assistant | 9.8CNA v3.1 | 0.6% | 2023-04-17 | Fix |
| CVE-2023-1697 | Juniper Networks Junos OS Packet Forwarding Engine denial of service | 6.5CNA v3.1 | 0.3% | 2023-04-17 | Fix |
| CVE-2023-1473 | Slider WordPress plugin Responsive WordPress Slideshows reflected XSS | 6.1NVD v3.1 | 0.5% | 2023-04-17 | Fix |
| CVE-2023-1427 | Photo Gallery by 10Web WordPress plugin Admin+ path traversal | 4.9NVD v3.1 | 0.8% | 2023-04-17 | Fix |
| CVE-2023-1413 | WP VR WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.5% | 2023-04-17 | Fix |
| CVE-2023-1373 | W4 Post List WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.5% | 2023-04-17 | Fix |
| CVE-2023-1371 | W4 Post List WordPress plugin Subscriber+ password Protected post content disclosure | 6.5NVD v3.1 | 0.7% | 2023-04-17 | Fix |
| CVE-2023-1331 | Redirection WordPress plugin plugin reset via CSRF | 6.5NVD v3.1 | 0.3% | 2023-04-17 | Fix |
| CVE-2023-1325 | Easy Forms for MailChimp WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-04-17 | Fix |
| CVE-2023-1282 | Drag and Drop Multiple File Upload PRO reflected cross-site scripting | 6.1NVD v3.1 | 0.5% | 2023-04-17 | Fix |
| CVE-2023-1274 | Pricing Tables For WPBakery Page Builder WordPress plugin Subscriber+ LFI | 6.5NVD v3.1 | 0.9% | 2023-04-17 | Fix |
| CVE-2023-1109 | Phoenix Contact: Directory traversal vulnerability in Energy Axc Pu Web service | 8.8CNA v3.1 | 0.8% | 2023-04-17 | Fix |
| CVE-2023-0889 | TF Random Numbers WordPress plugin Subscriber+ arbitrary option update | 6.5NVD v3.1 | 0.3% | 2023-04-17 | Fix |
| CVE-2023-0765 | Gallery by BestWebSoft WordPress plugin Author+ SQL injection | 8.8NVD v3.1 | 0.9% | 2023-04-17 | Fix |
| CVE-2023-0764 | Gallery by BestWebSoft WordPress plugin Author+ stored cross-site scripting | 5.4NVD v3.1 | 0.4% | 2023-04-17 | Fix |
| CVE-2023-0374 | W4 Post List WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.4% | 2023-04-17 | Fix |
| CVE-2023-0367 | Pricing Tables For WPBakery Page Builder WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.4% | 2023-04-17 | Fix |
| CVE-2023-0277 | WC Fields Factory WordPress plugin ShopManager+ SQLi | 7.2NVD v3.1 | 0.9% | 2023-04-17 | Fix |
| CVE-2023-30772 | Linux kernel use-after-free | 6.4v3.1 | 0.5% | 2023-04-16 | Fix |
| CVE-2023-30542 | openzeppelin-contracts GovernorCompatibilityBravo may trim proposal calldata | 6.8CNA v3.1 | 0.6% | 2023-04-16 | Fix |
| CVE-2023-30537 | XWiki Platform Flamingo theme styles page eval injection | 9.9CNA v3.1 | 1.0% | 2023-04-16 | Fix |
| CVE-2023-30474 | Ultimate Noindex Nofollow Tool II WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-04-16 | Fix |
| CVE-2023-29511 | xwiki-platform xwiki-platform-administration-ui vulnerable to privilege escalation | 9.9CNA v3.1 | 1.0% | 2023-04-16 | Fix |
| CVE-2023-29509 | xwiki-platform org.Xwiki.platform:xwiki-platform-flamingo-theme-ui eval injection | 10.0CNA v3.1 | 75.7% | 2023-04-16 | Fix |
| CVE-2023-29508 | xwiki-platform org.Xwiki.platform:xwiki-platform-livedata-macro vulnerable to cross-site scripting | 8.9CNA v3.1 | 0.4% | 2023-04-16 | Fix |
| CVE-2023-29507 | XWiki Platform document script API incorrect use of privileged apis | 9.1CNA v3.1 | 0.9% | 2023-04-16 | Fix |
| CVE-2023-29506 | XWiki Platform authentication endpoint URLs cross-site scripting | 5.4CNA v3.1 | 1.7% | 2023-04-16 | NucleiFix |
| CVE-2023-29214 | xwiki-platform org.Xwiki.platform:xwiki-platform-panels-ui eval injection | 10.0CNA v3.1 | 1.2% | 2023-04-16 | Fix |
| CVE-2023-29212 | xwiki-platform xwiki.platform:xwiki-platform-panels-ui eval injection | 10.0CNA v3.1 | 1.2% | 2023-04-16 | Fix |
| CVE-2023-29211 | xwiki-platform org.Xwiki.platform:xwiki-platform-wiki-ui-mainwiki eval injection | 10.0CNA v3.1 | 1.2% | 2023-04-16 | Fix |
| CVE-2023-27610 | Transbank Webpay REST WordPress plugin SQL injection | 7.2v3.1 | 0.7% | 2023-04-16 | Fix |
| CVE-2023-22687 | Freesoul Deactivate Plugins Plugin manager and cleanup WordPress plugin sensitive data exposure | 7.5v3.1 | 0.5% | 2023-04-16 | Fix |
| CVE-2023-2108 | SourceCodester Judging Management System edit_contestant.php SQL injection | 9.8v3.1 | 0.6% | 2023-04-16 | |
| CVE-2023-29210 | xwiki-platform org.Xwiki.platform:xwiki-platform-notifications-ui eval injection | 10.0CNA v3.1 | 1.2% | 2023-04-15 | Fix |
| CVE-2023-29209 | xwiki-platform org.Xwiki.platform:xwiki-platform-legacy-notification-activitymacro eval injection | 10.0CNA v3.1 | 1.1% | 2023-04-15 | Fix |
| CVE-2023-29208 | xwiki-platform data leak through deleted documents | 7.5CNA v3.1 | 0.9% | 2023-04-15 | Fix |
| CVE-2023-29207 | xwiki-platform improper neutralization of Script-Related HTML Tags (XSS) in the LiveTable Macro | 8.9CNA v3.1 | 1.4% | 2023-04-15 | Fix |
| CVE-2023-29206 | XWiki Platform JSX and SSX skin extensions cross-site scripting | 9.1CNA v3.1 | 1.0% | 2023-04-15 | Fix |
| CVE-2023-29205 | xwiki-platform cross-site scripting | 10.0CNA v3.1 | 0.6% | 2023-04-15 | Fix |
| CVE-2023-29204 | xwiki-platform URL redirection to untrusted site in org.Xwiki.platform:xwiki-platform-oldcore | 4.7CNA v3.1 | 1.8% | 2023-04-15 | NucleiFix |
| CVE-2023-29203 | XWiki Commons uorgsuggest user suggestion script information disclosure | 3.7CNA v3.1 | 0.7% | 2023-04-15 | Fix |
| CVE-2023-29202 | xwiki-platform org.Xwiki.platform:xwiki-platform-rendering-macro-rss cross-site scripting | 9.1CNA v3.1 | 1.4% | 2023-04-15 | Fix |
| CVE-2023-29201 | xwiki-commons org.Xwiki.commons:xwiki-commons-xml cross-site scripting | 9.1CNA v3.1 | 1.2% | 2023-04-15 | Fix |
| CVE-2023-27572 | CommScope DG3450 cross-site scripting | 6.1v3.1 | 0.8% | 2023-04-15 | |
| CVE-2023-27571 | CommScope DG3450 missing authentication | 5.3v3.1 | 0.9% | 2023-04-15 | |
| CVE-2023-26463 | strongSwan improper certificate validation | 9.8v3.1 | 2.3% | 2023-04-15 | Fix |
| CVE-2023-24607 | Qt denial of service | 7.5v3.1 | 1.3% | 2023-04-15 | Fix |
| CVE-2023-22670 | Opendesign Drawings SDK heap-based buffer overflow | 7.8v3.1 | 0.2% | 2023-04-15 | Fix |
| CVE-2023-22669 | Opendesign Drawings SDK out-of-bounds write | 7.8v3.1 | 0.3% | 2023-04-15 | Fix |
| CVE-2023-2107 | IBOS del&op=recycle SQL injection | 9.8v3.1 | 0.7% | 2023-04-15 | |
| CVE-2023-2106 | Weak password requirements in janeczku/Calibre-Web | 9.8v3.1 | 0.7% | 2023-04-15 | Fix |
| CVE-2023-2105 | Session fixation in alextselegidis/easyappointments | 8.8v3.1 | 0.7% | 2023-04-15 | Fix |
| CVE-2023-2104 | Improper access control in alextselegidis/easyappointments | 5.4v3.1 | 0.4% | 2023-04-15 | Fix |
| CVE-2023-2103 | Cross-site scripting (XSS) Stored in alextselegidis/easyappointments | 5.4v3.1 | 0.5% | 2023-04-15 | Fix |
| CVE-2023-2102 | Cross-site scripting (XSS) Stored in alextselegidis/easyappointments | 4.8v3.1 | 0.5% | 2023-04-15 | Fix |
| CVE-2023-2101 | moxi624 Mogu Blog v2 uploadPicsByUrl uploadPictureByUrl absolute path traversal | 6.5v3.1 | 0.8% | 2023-04-15 | |
| CVE-2023-2100 | SourceCodester Vehicle Service Management System index.php cross-site scripting | 6.1v3.1 | 0.6% | 2023-04-15 | |
| CVE-2023-2099 | SourceCodester Vehicle Service Management System Users.php cross-site scripting | 6.1v3.1 | 0.7% | 2023-04-15 | |
| CVE-2023-2098 | SourceCodester Vehicle Service Management System topBarNav.php cross-site scripting | 6.1v3.1 | 0.6% | 2023-04-15 | |
| CVE-2023-2097 | SourceCodester Vehicle Service Management System Master.php SQL injection | 9.8v3.1 | 0.8% | 2023-04-15 | |
| CVE-2023-2096 | SourceCodester Vehicle Service Management System manage_inventory.php SQL injection | 9.8v3.1 | 0.7% | 2023-04-15 | |
| CVE-2023-2095 | SourceCodester Vehicle Service Management System manage_category.php SQL injection | 9.8v3.1 | 0.7% | 2023-04-15 | |
| CVE-2023-2094 | SourceCodester Vehicle Service Management System manage_mechanic.php SQL injection | 9.8NVD v3.1 | 0.8% | 2023-04-15 | |
| CVE-2023-2093 | SourceCodester Vehicle Service Management System Login.php SQL injection | 9.8v3.1 | 0.7% | 2023-04-15 | |
| CVE-2023-2092 | SourceCodester Vehicle Service Management System view_service.php SQL injection | 9.8v3.1 | 0.7% | 2023-04-15 | |
| CVE-2023-2091 | KylinSoft youker-assistant adjust_cpufreq_scaling_governer os command injection | 7.8v3.1 | 1.5% | 2023-04-15 | Fix |
| CVE-2023-2090 | SourceCodester Employee and Visitor Gate Pass Logging System view_designation.php SQL injection | 8.8v3.1 | 0.7% | 2023-04-15 | |
| CVE-2023-2089 | SourceCodester Complaint Management System GET parameter userprofile.php SQL injection | 8.8v3.1 | 0.6% | 2023-04-15 | |
| CVE-2023-2027 | ZM Ajax Login and Register WordPress plugin authentication bypass | 9.8v3.1 | 1.0% | 2023-04-15 | |
| CVE-2023-30638 | Atos Unify Openscape Bcf command injection | 7.2v3.1 | 1.0% | 2023-04-14 | Fix |
| CVE-2023-30535 | Snowflake JDBC vulnerable to command injection via SSO URL authentication | 7.3CNA v3.1 | 1.7% | 2023-04-14 | Fix |
| CVE-2023-30459 | Smartptt SCADA remote code execution | 7.2v3.1 | 2.1% | 2023-04-14 | Exploit code |
| CVE-2023-29850 | SLIMS Senayan Library Management System observable discrepancy | 7.5v3.1 | 0.7% | 2023-04-14 | |
| CVE-2023-29847 | Aero CMS cross-site scripting | 5.4v3.1 | 0.4% | 2023-04-14 | |
| CVE-2023-29805 | Iodata Wfs-sr03k OS command injection | 9.8v3.1 | 2.4% | 2023-04-14 | |
| CVE-2023-29804 | Iodata Wfs-sr03k OS command injection | 8.8v3.1 | 17.5% | 2023-04-14 | |
| CVE-2023-29803 | TOTOLINK X18 command injection | 9.8v3.1 | 2.1% | 2023-04-14 | Emerging Threats |
| CVE-2023-29802 | TOTOLINK X18 command injection | 9.8v3.1 | 2.0% | 2023-04-14 | |
| CVE-2023-29801 | TOTOLINK X18 command injection | 9.8v3.1 | 2.0% | 2023-04-14 | |
| CVE-2023-29800 | TOTOLINK X18 command injection | 9.8v3.1 | 2.0% | 2023-04-14 | |
| CVE-2023-29799 | TOTOLINK X18 command injection | 9.8v3.1 | 2.0% | 2023-04-14 | |
| CVE-2023-29798 | TOTOLINK X18 command injection | 9.8v3.1 | 2.0% | 2023-04-14 | |
| CVE-2023-29627 | Online Pizza Ordering unrestricted file upload | 8.8v3.1 | 1.0% | 2023-04-14 | |
| CVE-2023-29626 | Yoga Class Registration System SQL injection | 7.5v3.1 | 0.7% | 2023-04-14 | |
| CVE-2023-29625 | Employee Performance Evaluation System unrestricted file upload | 8.8v3.1 | 1.0% | 2023-04-14 | |
| CVE-2023-29623 | Purchase ORDER Management cross-site scripting | 6.1v3.1 | 1.3% | 2023-04-14 | Nuclei |
| CVE-2023-29622 | Purchase ORDER Management SQL injection | 9.8v3.1 | 1.7% | 2023-04-14 | |
| CVE-2023-29621 | Purchase ORDER Management unrestricted file upload | 8.8v3.1 | 1.0% | 2023-04-14 | |
| CVE-2023-29584 | MP4v2 out-of-bounds write | 8.8v3.1 | 0.8% | 2023-04-14 | |
| CVE-2023-29569 | Cesanta mJS null pointer dereference | 5.5v3.1 | 0.3% | 2023-04-14 | |
| CVE-2023-29529 | matrix-js-sdk vulnerable to invisible eavesdropping in group calls | 5.0CNA v3.1 | 0.5% | 2023-04-14 | Fix |
| CVE-2023-29491 | Invisible-island ncurses out-of-bounds write | 7.8NVD v3.1 | 1.0% | 2023-04-14 | Fix |
| CVE-2023-29383 | shadow out-of-bounds read | 3.3NVD v3.1 | 0.4% | 2023-04-14 | Fix |
| CVE-2023-29199 | vm2 exception sanitization improper control of dynamic code | 9.8CNA v3.1 | 3.9% | 2023-04-14 | Fix |
| CVE-2023-29194 | vitess allows users to create keyspaces that can deny access to already existing keyspaces | 4.1CNA v3.1 | 0.8% | 2023-04-14 | Fix |
| CVE-2023-29193 | SpiceDB binding metrics port to untrusted networks and can leak command-line flags | 8.7CNA v3.1 | 0.8% | 2023-04-14 | Fix |
| CVE-2023-29132 | Irssi use-after-free | 5.3v3.1 | 0.8% | 2023-04-14 | Fix |
| CVE-2023-29091 | Samsung Exynos Auto T5123 out-of-bounds write | 7.5v3.1 | 0.8% | 2023-04-14 | Fix |
| CVE-2023-29090 | Samsung Exynos Auto T5123 out-of-bounds write | 7.5v3.1 | 0.8% | 2023-04-14 | Fix |
| CVE-2023-29089 | Samsung Exynos Auto T5123 out-of-bounds read | 7.5v3.1 | 0.8% | 2023-04-14 | Fix |
| CVE-2023-29088 | Samsung Exynos Auto T5123 out-of-bounds write | 7.5v3.1 | 0.8% | 2023-04-14 | Fix |
| CVE-2023-29087 | Samsung Exynos Auto T5123 out-of-bounds write | 7.5v3.1 | 0.8% | 2023-04-14 | Fix |
| CVE-2023-29086 | Samsung Exynos Auto T5123 out-of-bounds write | 7.5v3.1 | 0.8% | 2023-04-14 | Fix |
| CVE-2023-29085 | Samsung Exynos Auto T5123 out-of-bounds write | 7.5v3.1 | 0.8% | 2023-04-14 | Fix |
| CVE-2023-29067 | Autodesk AutoCAD out-of-bounds write | 7.8v3.1 | 0.3% | 2023-04-14 | Fix |
| CVE-2023-29018 | OpenFeature Operator vulnerable to Cluster-level privilege escalation | 8.1CNA v3.1 | 0.7% | 2023-04-14 | Fix |
| CVE-2023-29013 | traefik HTTP header parsing could cause a deny of service | 7.5CNA v3.1 | 1.1% | 2023-04-14 | Fix |
| CVE-2023-28091 | HPE OneView Migrate server hardware option information disclosure | 5.5v3.1 | 0.2% | 2023-04-14 | Fix |
| CVE-2023-28085 | HPE OneView Global Dashboard appliance support dump information disclosure | 5.5v3.1 | 0.2% | 2023-04-14 | Fix |
| CVE-2023-27915 | Autodesk AutoCAD out-of-bounds read | 7.8v3.1 | 0.2% | 2023-04-14 | Fix |
| CVE-2023-27914 | Autodesk AutoCAD stack-based buffer overflow | 7.8v3.1 | 0.2% | 2023-04-14 | Fix |
| CVE-2023-27913 | Autodesk AutoCAD integer overflow | 7.8v3.1 | 0.2% | 2023-04-14 | Fix |
| CVE-2023-27912 | Autodesk AutoCAD out-of-bounds read | 7.8v3.1 | 0.2% | 2023-04-14 | Fix |
| CVE-2023-27890 | Export User cross-site scripting | 5.4v3.1 | 0.6% | 2023-04-14 | |
| CVE-2023-27666 | Auto Dealer Management System cross-site scripting | 6.1v3.1 | 0.4% | 2023-04-14 | |
| CVE-2023-27654 | Whoapp Who improper privilege management | 9.8v3.1 | 1.1% | 2023-04-14 | |
| CVE-2023-27653 | Whoapp Who resource exhaustion | 7.5v3.1 | 1.1% | 2023-04-14 | |
| CVE-2023-27651 | Egostudiogroup Super Clean improper privilege management | 7.8v3.1 | 0.4% | 2023-04-14 | |
| CVE-2023-27649 | Bestools Trusted Tools Free Music SQL injection | 7.5v3.1 | 1.2% | 2023-04-14 | |
| CVE-2023-27648 | Timmystudios Change Color Of Keypad T-ME Studios path traversal | 9.8v3.1 | 2.6% | 2023-04-14 | |
| CVE-2023-27647 | Dualspace Lock Master incorrect default permissions | 7.1v3.1 | 0.7% | 2023-04-14 | |
| CVE-2023-27643 | Powerampapp Poweramp resource exhaustion | 7.5v3.1 | 1.5% | 2023-04-14 | |
| CVE-2023-27193 | Dualspace Space Clean & Super Cleaner privilege escalation | 7.8v3.1 | 0.4% | 2023-04-14 | |
| CVE-2023-26980 | PAX Technology Paydroid race condition | 7.0v3.1 | 0.3% | 2023-04-14 | |
| CVE-2023-26969 | AtroCore AtroPIM path traversal | 7.5v3.1 | 1.1% | 2023-04-14 | |
| CVE-2023-26918 | File Replication Pro incorrect default permissions | 9.8v3.1 | 6.1% | 2023-04-14 | Exploit code |
| CVE-2023-26756 | Revive Adserver missing brute-force protection | 7.5v3.1 | 1.2% | 2023-04-14 | |
| CVE-2023-26559 | Sync Oxygen XML Web Author path traversal | 5.3v3.1 | 1.0% | 2023-04-14 | Fix |
| CVE-2023-26123 | raysan5/raylib cross-site scripting | 6.1v3.1 | 0.6% | 2023-04-14 | Fix |
| CVE-2023-25597 | Mitel MiCollab improper authentication | 5.9v3.1 | 0.7% | 2023-04-14 | Fix |
| CVE-2023-24934 | Microsoft Defender security feature bypass | 6.2CNA v3.1 | 0.5% | 2023-04-14 | Fix |
| CVE-2023-22949 | Tigergraph Enterprise cleartext storage of sensitive information | 4.9v3.1 | 0.4% | 2023-04-14 | |
| CVE-2023-2077 | Campcodes Online Traffic Offense Management System view_details.php cross-site scripting | 6.1v3.1 | 0.6% | 2023-04-14 | |
| CVE-2023-2076 | Campcodes Online Traffic Offense Management System Users.phpp cross-site scripting | 6.1v3.1 | 0.6% | 2023-04-14 | |
| CVE-2023-2075 | Campcodes Online Traffic Offense Management System view_details.php SQL injection | 8.8v3.1 | 0.7% | 2023-04-14 | |
| CVE-2023-2074 | Campcodes Online Traffic Offense Management System Master.php SQL injection | 9.8v3.1 | 0.8% | 2023-04-14 | |
| CVE-2023-2073 | Campcodes Online Traffic Offense Management System Login.php SQL injection | 9.8v3.1 | 0.9% | 2023-04-14 | |
| CVE-2023-2059 | DedeCMS select_templets.php path traversal | 5.3v3.1 | 2.4% | 2023-04-14 | Nuclei |
| CVE-2023-2058 | EyouCms HTTP POST request cross-site scripting | 6.1v3.1 | 0.6% | 2023-04-14 | |
| CVE-2023-2057 | EyouCms New Picture cross-site scripting | 6.1v3.1 | 0.6% | 2023-04-14 | |
| CVE-2023-2056 | DedeCMS module_main.php GetSystemFile code injection | 9.8v3.1 | 1.0% | 2023-04-14 | |
| CVE-2023-2055 | Campcodes Advanced Online Voting System config_save.php cross-site scripting | 6.1v3.1 | 0.6% | 2023-04-14 | |
| CVE-2023-2054 | Campcodes Advanced Online Voting System positions_delete.php SQL injection | 8.8v3.1 | 0.7% | 2023-04-14 | |
| CVE-2023-2053 | Campcodes Advanced Online Voting System candidates_row.php SQL injection | 8.8v3.1 | 0.7% | 2023-04-14 | |
| CVE-2023-2052 | Campcodes Advanced Online Voting System ballot_down.php SQL injection | 8.8v3.1 | 0.7% | 2023-04-14 | |
| CVE-2023-2051 | Campcodes Advanced Online Voting System positions_row.php SQL injection | 8.8v3.1 | 0.7% | 2023-04-14 | |
| CVE-2023-2050 | Campcodes Advanced Online Voting System positions_add.php SQL injection | 8.8v3.1 | 0.8% | 2023-04-14 | |
| CVE-2023-2049 | Campcodes Advanced Online Voting System ballot_up.php SQL injection | 8.8v3.1 | 0.7% | 2023-04-14 | |
| CVE-2023-2048 | Campcodes Advanced Online Voting System voters_row.php SQL injection | 8.8v3.1 | 0.7% | 2023-04-14 | |
| CVE-2023-2047 | Campcodes Advanced Online Voting System login.php SQL injection | 8.8v3.1 | 0.7% | 2023-04-14 | |
| CVE-2023-2044 | Control iD iDSecure Dispositivos page cross-site scripting | 6.1v3.1 | 0.4% | 2023-04-14 | |
| CVE-2023-2043 | Control iD RHiD Edit a SQL injection | 9.8v3.1 | 0.5% | 2023-04-14 | |
| CVE-2023-2042 | DataGear JDBC server deserialization | 8.8v3.1 | 1.1% | 2023-04-14 | |
| CVE-2023-2041 | Novel-Plus SQL injection | 8.8v3.1 | 0.8% | 2023-04-14 | |
| CVE-2023-2040 | Novel-Plus SQL injection | 8.8v3.1 | 0.7% | 2023-04-14 | |
| CVE-2023-2039 | Novel-Plus SQL injection | 8.8v3.1 | 0.8% | 2023-04-14 | |
| CVE-2023-2038 | Campcodes Video Sharing Website admin_class.php SQL injection | 7.5v3.1 | 0.6% | 2023-04-14 | |
| CVE-2023-2037 | Campcodes Video Sharing Website watch.php SQL injection | 9.8v3.1 | 0.8% | 2023-04-14 | |
| CVE-2023-2036 | Campcodes Video Sharing Website upload.php SQL injection | 7.5v3.1 | 0.7% | 2023-04-14 | |
| CVE-2023-2035 | Campcodes Video Sharing Website signup.php SQL injection | 7.5v3.1 | 0.7% | 2023-04-14 |