CVE-2023 records published in April 2023

This page lists the 1,918 CVE-2023 records published in April 2023, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 16 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2023 list filters these records by severity or signal.

Critical
30916.1% of these records
Listed in CISA KEV
160.8% of these records
Reported exploited
10.1% of these records
Detection signal
482.5% of these records
Exploit code
844.4% of these records
Actionable vendor fix
1,31768.7% of these records

Figures as of 2026-10-24 13:46 UTC. Records published in April 2023 have had from about 42 months to about 43 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.

CVE-2023 records published in April 2023, newest first: records 1 to 1,000 of 1,918
CVE Summary CVSS EPSS Published Signals
CVE-2023-2429Improper access control in thorsten/phpMyFAQ9.8v3.10.5%2023-04-30Fix
CVE-2023-2428Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ5.4v3.10.6%2023-04-30Fix
CVE-2023-31486perl improper certificate validation8.1v3.11.7%2023-04-29Fix
CVE-2023-31485GitLab::API::v4 improper certificate validation5.9v3.10.7%2023-04-29Fix
CVE-2023-31484Cpanpm improper certificate validation8.1v3.11.5%2023-04-29Fix
CVE-2023-30792Meta Platforms Lexical cross-site scripting6.1v3.10.4%2023-04-29Fix
CVE-2023-30441IBM Java information disclosure7.5CNA v3.10.6%2023-04-29Fix
CVE-2023-2426vim/vim GitHub repository out-of-range pointer offset5.3v3.10.4%2023-04-29Fix
CVE-2023-2425SourceCodester Simple Student Information System Add New Course cross-site scripting4.8v3.10.6%2023-04-29
CVE-2023-2424DedeCMS config.php UpDateMemberModCache unrestricted upload8.8v3.10.9%2023-04-29
CVE-2023-2421Control iD RHiD department cross-site scripting6.1v3.10.6%2023-04-29
CVE-2023-2420Mlecms common.func.php get_url SQL injection9.8v3.10.7%2023-04-29
CVE-2023-2419Zhong Bang CRMEB SystemAttachmentServices.php videoUpload unrestricted upload7.2v3.10.8%2023-04-29
CVE-2023-2418Konga Login API random values5.9v3.10.7%2023-04-29
CVE-2023-2417Ks-Soft Advanced Host Monitor rma_active.exe unquoted search path7.8v3.10.3%2023-04-29
CVE-2023-2413SourceCodester AC Repair and Services System manage_booking.php SQL injection6.5v3.10.6%2023-04-29
CVE-2023-2412SourceCodester AC Repair and Services System manage_user.php SQL injection6.5v3.10.5%2023-04-29
CVE-2023-31483Cauldrondevelopment Cbang path traversal7.5v3.11.0%2023-04-28
CVE-2023-31470pymumu SmartDNS out-of-bounds write9.8v3.11.1%2023-04-28
CVE-2023-31444Talend studio missing authentication7.5v3.10.5%2023-04-28Fix
CVE-2023-31436Linux kernel out-of-bounds write7.8NVD v3.10.6%2023-04-28Fix
CVE-2023-30858Denosaurs emoji has ReDoS vulnerability in `replace` function5.3CNA v3.11.2%2023-04-28Fix
CVE-2023-30857@aedart/support possibly vulnerable to prototype pollution in metadata record, when3.7CNA v3.10.5%2023-04-28Fix
CVE-2023-30856eDEX-UI cross-site websocket hijacking vulnerability enables remote command execution8.3CNA v3.10.3%2023-04-28Fix
CVE-2023-30854WWBN AVideo vulnerable to OS command injection8.8CNA v3.15.2%2023-04-28Exploit codeFix
CVE-2023-30853Gradle Build Action data written to GitHub Actions Cache may expose secrets7.6CNA v3.10.3%2023-04-28Fix
CVE-2023-30467Improper authorization vulnerability in Milesight Network Video Recorder (NVR)9.8v3.11.1%2023-04-28Fix
CVE-2023-30466Authentication bypass vulnerability in Milesight Network Video Recorder (NVR)9.8v3.11.1%2023-04-28Fix
CVE-2023-30455Ebankit resource exhaustion7.5v3.11.0%2023-04-28
CVE-2023-30454Ebankit cross-site scripting6.1v3.10.5%2023-04-28
CVE-2023-30405Aigital Wireless-n Repeater Mini Router cross-site scripting5.4v3.129.3%2023-04-28
CVE-2023-30125EyouCMS cross-site scripting6.1v3.10.4%2023-04-28
CVE-2023-30123WuzhiCMS cross-site scripting5.4v3.10.4%2023-04-28
CVE-2023-30024Magicjack A921 improper privilege management6.6v3.10.5%2023-04-28
CVE-2023-29815chshcms mccms cross-site request forgery8.8v3.10.3%2023-04-28
CVE-2023-29334Microsoft Edge (Chromium-based) spoofing4.3CNA v3.11.1%2023-04-28Fix
CVE-2023-29058Lenovo XClarity Controller incorrect default permissions6.4CNA v3.10.4%2023-04-28Fix
CVE-2023-29057Lenovo XClarity Controller incorrect default permissions7.3CNA v3.10.5%2023-04-28Fix
CVE-2023-29056Lenovo XClarity Controller improper privilege management5.3CNA v3.10.4%2023-04-28Fix
CVE-2023-28882OWASP ModSecurity resource exhaustion7.5v3.10.7%2023-04-28Fix
CVE-2023-28821Concrete CMS missing rate limit for password resets5.3v3.10.7%2023-04-28Fix
CVE-2023-28820Concrete CMS stored cross-site scripting in RSS displayer5.4v3.10.4%2023-04-28Fix
CVE-2023-28819Concrete CMS (previously concrete5) is vulnerable to stored XSS in uploaded file and folder names5.4v3.10.6%2023-04-28Fix
CVE-2023-28528IBM AIX command execution8.4CNA v3.11.5%2023-04-28Exploit codeFix
CVE-2023-28477Concrete CMS stored cross-site scripting on API integration5.4v3.10.6%2023-04-28Fix
CVE-2023-28476Concrete CMS stored cross-site scripting on tags5.4v3.10.5%2023-04-28Fix
CVE-2023-28475Concrete CMS reflected cross-site scripting6.1v3.10.6%2023-04-28Fix
CVE-2023-28474Concrete CMS stored cross-site scripting on saved presets5.4v3.10.6%2023-04-28Fix
CVE-2023-28473Concrete CMS (previously concrete5) is vulnerable to possible auth bypass in the jobs section3.3v3.10.8%2023-04-28Fix
CVE-2023-28472Concrete CMS missing secure cookie parameters5.3v3.10.6%2023-04-28Fix
CVE-2023-28471Concrete CMS stored cross-site scripting via container name5.4v3.10.5%2023-04-28Fix
CVE-2023-27973HP LaserJet Pro out-of-bounds write9.8v3.11.5%2023-04-28Fix
CVE-2023-27972HP LaserJet Pro buffer overflow9.8v3.11.5%2023-04-28Fix
CVE-2023-27971HP LaserJet Pro buffer overflow9.8v3.10.9%2023-04-28Fix
CVE-2023-27864IBM Maximo Asset Management HTML injection5.4CNA v3.10.5%2023-04-28Fix
CVE-2023-27557IBM Safter Payments information disclosure5.9CNA v3.10.4%2023-04-28Fix
CVE-2023-27556IBM Safer Payments denial of service6.5CNA v3.11.0%2023-04-28Fix
CVE-2023-27555IBM Db2 denial of service5.1CNA v3.10.6%2023-04-28Fix
CVE-2023-26813wangmarket com.xnx3. SQL injection9.8v3.11.0%2023-04-28
CVE-2023-26782chshcms mccms code injection6.5v3.10.9%2023-04-28
CVE-2023-26781chshcms mccms SQL injection9.8v3.11.0%2023-04-28
CVE-2023-26022IBM Db2 denial of service5.9CNA v3.11.0%2023-04-28Fix
CVE-2023-26021IBM Db2 denial of service7.5CNA v3.11.0%2023-04-28Fix
CVE-2023-25930IBM Db2 denial of service5.9CNA v3.11.0%2023-04-28Fix
CVE-2023-25496Lenovo Drivers Management privilege escalation7.8CNA v3.10.2%2023-04-28Fix
CVE-2023-25495Lenovo XClarity Controller insufficiently protected credentials4.9CNA v3.10.6%2023-04-28Fix
CVE-2023-24269Textpattern plugin upload function arbitrary file upload8.8v3.11.1%2023-04-28
CVE-2023-2411SourceCodester AC Repair and Services System view_inquiry.php SQL injection6.5v3.10.6%2023-04-28
CVE-2023-2410SourceCodester AC Repair and Services System view_booking.php SQL injection6.5v3.10.6%2023-04-28
CVE-2023-2409SourceCodester AC Repair and Services System view_service.php SQL injection6.5v3.10.6%2023-04-28
CVE-2023-2408SourceCodester AC Repair and Services System view.php SQL injection6.5v3.10.6%2023-04-28
CVE-2023-2397SourceCodester Simple Mobile Comparison Website cross-site scripting4.8v3.10.6%2023-04-28
CVE-2023-2396Netgear SRX5308 web management interface cross-site scripting6.1v3.10.8%2023-04-28
CVE-2023-2395Netgear SRX5308 web management interface cross-site scripting6.1v3.10.8%2023-04-28
CVE-2023-2394Netgear SRX5308 web management interface cross-site scripting4.8v3.10.6%2023-04-28
CVE-2023-2393Netgear SRX5308 web management interface cross-site scripting4.8v3.10.6%2023-04-28
CVE-2023-2392Netgear SRX5308 web management interface cross-site scripting4.8v3.10.6%2023-04-28
CVE-2023-2391Netgear SRX5308 web management interface cross-site scripting4.8v3.10.6%2023-04-28
CVE-2023-2390Netgear SRX5308 web management interface cross-site scripting4.8v3.10.7%2023-04-28
CVE-2023-2389Netgear SRX5308 web management interface cross-site scripting4.8v3.10.7%2023-04-28
CVE-2023-2388Netgear SRX5308 web management interface cross-site scripting4.8v3.10.6%2023-04-28
CVE-2023-2387Netgear SRX5308 web management interface cross-site scripting4.8v3.10.6%2023-04-28
CVE-2023-2386Netgear SRX5308 web management interface cross-site scripting4.8v3.10.6%2023-04-28
CVE-2023-2385Netgear SRX5308 web management interface cross-site scripting4.8v3.10.6%2023-04-28
CVE-2023-2384Netgear SRX5308 web management interface cross-site scripting4.8v3.10.6%2023-04-28
CVE-2023-2383Netgear SRX5308 web management interface cross-site scripting4.8v3.10.7%2023-04-28
CVE-2023-2382Netgear SRX5308 web management interface cross-site scripting4.8v3.10.6%2023-04-28
CVE-2023-2381Netgear SRX5308 web management interface cross-site scripting4.8v3.10.6%2023-04-28
CVE-2023-2380Netgear SRX5308 denial of service6.5v3.11.3%2023-04-28
CVE-2023-2379Ubiquiti EdgeRouter X web service denial of service7.5v3.11.3%2023-04-28
CVE-2023-2378Ubiquiti EdgeRouter X web management command injection8.8NVD v3.17.6%2023-04-28
CVE-2023-2377Ubiquiti EdgeRouter X web management command injection8.8NVD v3.17.6%2023-04-28
CVE-2023-2376Ubiquiti EdgeRouter X web management command injection8.8NVD v3.17.6%2023-04-28
CVE-2023-2375Ubiquiti EdgeRouter X web management command injection8.8NVD v3.19.3%2023-04-28Exploit code
CVE-2023-2374Ubiquiti EdgeRouter X web management command injection8.8NVD v3.16.9%2023-04-28
CVE-2023-2373Ubiquiti EdgeRouter X web management command injection8.8NVD v3.17.6%2023-04-28
CVE-2023-2372SourceCodester Online DJ Management System cross-site scripting4.8v3.10.6%2023-04-28
CVE-2023-2371SourceCodester Online DJ Management System GET parameter view_details.php SQL injection9.8v3.10.8%2023-04-28
CVE-2023-2370SourceCodester Online DJ Management System GET parameter manage_event.php SQL injection9.8v3.10.9%2023-04-28
CVE-2023-2369SourceCodester Faculty Evaluation System manage_restriction.php SQL injection9.8v3.10.7%2023-04-28
CVE-2023-2368SourceCodester Faculty Evaluation System SQL injection9.8v3.10.7%2023-04-28
CVE-2023-2367SourceCodester Faculty Evaluation System manage_academic.php SQL injection9.8v3.10.7%2023-04-28
CVE-2023-2366SourceCodester Faculty Evaluation System SQL injection9.8v3.10.8%2023-04-28
CVE-2023-2365SourceCodester Faculty Evaluation System SQL injection9.8v3.10.7%2023-04-28
CVE-2023-2364SourceCodester Resort Reservation System registration.php cross-site scripting5.4v3.10.8%2023-04-28
CVE-2023-2363SourceCodester Resort Reservation System view_room.php SQL injection9.8v3.10.8%2023-04-28
CVE-2023-2361Cross-site scripting (XSS) Stored in pimcore/pimcore5.4v3.10.5%2023-04-28Fix
CVE-2023-2360Acronis Cyber Infrastructure permissive cross-domain policy3.1CNA v3.00.4%2023-04-28Fix
CVE-2023-2356Relative path traversal in MLflow/MLflow7.5NVD v3.14.2%2023-04-28NucleiFix
CVE-2023-1968Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP address. An unauthenticated malicious actor could use UCS to listen on all IP addresses, including those capable of accepting remote communications.7.5NVD v3.11.8%2023-04-28Fix
CVE-2023-1966Illumina Universal Copy Service remote code execution9.8v3.10.9%2023-04-28Fix
CVE-2023-1526HP DesignJet and PageWide XL information disclosure4.6v3.11.2%2023-04-28Fix
CVE-2023-1477HYPR Keycloak Authenticator Extension improper authentication7.2CNA v3.10.6%2023-04-28Fix
CVE-2023-0834HYPR Workforce Access incorrect permission assignment7.0CNA v3.10.4%2023-04-28Fix
CVE-2023-31290Trust Wallet Browser Extension weak random number generator5.9v3.11.0%2023-04-27Exploit codeFix
CVE-2023-31287Insufficient token expiration in Serenity7.8v3.10.4%2023-04-27Fix
CVE-2023-31286User account enumeration in Serenity5.3v3.11.0%2023-04-27Fix
CVE-2023-31285Cross-site scripting (XSS) in Serenity6.1v3.10.8%2023-04-27Fix
CVE-2023-30852Pimcore arbitrary file read in Admin JS CSS files4.4CNA v3.11.0%2023-04-27Fix
CVE-2023-30850Pimcore SQL injection vulnerability in Admin Translations API8.8CNA v3.10.8%2023-04-27Fix
CVE-2023-30849Pimcore vulnerable to SQL injection in Translation Export API8.8CNA v3.10.8%2023-04-27Fix
CVE-2023-30848Pimcore SQL injection vulnerability in Admin Search Find API8.8CNA v3.10.7%2023-04-27Fix
CVE-2023-30847H2O vulnerable to read from uninitialized pointer in the reverse proxy handler8.2CNA v3.10.9%2023-04-27Fix
CVE-2023-30624Wasmtime has undefined behavior in Rust runtime functions3.9CNA v3.10.5%2023-04-27Fix
CVE-2023-30444IBM Watson Machine Learning on Cloud Pak for Data server-side request forgery7.1CNA v3.10.4%2023-04-27Fix
CVE-2023-30380DedeCMS path traversal7.5v3.11.2%2023-04-27
CVE-2023-30349jflyfox jfinal_cms remote code execution in JFinal CMS9.8v3.11.6%2023-04-27
CVE-2023-30338emlog Multiple stored cross-site scripting5.4v3.10.4%2023-04-27
CVE-2023-29950swftools out-of-bounds write5.5v3.10.3%2023-04-27
CVE-2023-29489cPanel cross-site scripting6.1NVD v3.165.5%2023-04-27NucleiEmerging ThreatsExploit codeFix
CVE-2023-29471Lightbend Alpakka Kafka logs credentials on debug level5.5v3.10.2%2023-04-27Fix
CVE-2023-29255IBM Db2 for Linux, UNIX and Windows denial of service7.5CNA v3.11.0%2023-04-27Fix
CVE-2023-29169mySCADA myPRO OS command injection8.8v3.10.7%2023-04-27Fix
CVE-2023-29150mySCADA myPRO OS command injection8.8v3.10.7%2023-04-27Fix
CVE-2023-28770Zyxel DX5401-B0 firmware CGI “Export_Log” and the binary “zcmd” information disclosure7.5CNA v3.157.8%2023-04-27MetasploitExploit codeFix
CVE-2023-28769Zyxel DX5401-B0 firmware buffer overflow9.8CNA v3.15.4%2023-04-27MetasploitExploit codeFix
CVE-2023-28716mySCADA myPRO OS command injection8.8v3.14.5%2023-04-27Fix
CVE-2023-28697Moxa MiiNePort E1 broken access control9.8CNA v3.10.9%2023-04-27Fix
CVE-2023-28400mySCADA myPRO OS command injection8.8v3.124.6%2023-04-27Fix
CVE-2023-28384mySCADA myPRO OS command injection8.8v3.144.8%2023-04-27MetasploitExploit codeFix
CVE-2023-28286Microsoft Edge (Chromium-based) security feature bypass6.1CNA v3.10.6%2023-04-27Fix
CVE-2023-28261Microsoft Edge (Chromium-based) elevation of privilege5.7CNA v3.10.6%2023-04-27Fix
CVE-2023-27860IBM Maximo Asset Management information disclosure5.3CNA v3.10.5%2023-04-27Fix
CVE-2023-26246Hyundai GEN5W L improper privilege management7.8v3.10.3%2023-04-27
CVE-2023-26245Hyundai GEN5W L improper privilege management7.8v3.10.3%2023-04-27
CVE-2023-26244Hyundai GEN5W L improper privilege management7.8v3.10.3%2023-04-27
CVE-2023-26243Hyundai GEN5W L path traversal7.8v3.10.3%2023-04-27
CVE-2023-25437Vtech VCS754A cleartext transmission of sensitive information8.8v3.114.1%2023-04-27
CVE-2023-25292groupoffice Intermesh BV reflected cross-site scripting6.1v3.10.6%2023-04-27Exploit code
CVE-2023-24966IBM WebSphere Application Server cross-site scripting6.1CNA v3.10.4%2023-04-27Fix
CVE-2023-24836Sunnet CTMS path traversal8.8CNA v3.11.2%2023-04-27Fix
CVE-2023-22901ChangingTec MOTP path traversal4.9CNA v3.10.9%2023-04-27Fix
CVE-2023-21712Microsoft Windows Point-to-Point Tunneling protocol remote code execution8.1CNA v3.11.0%2023-04-27Fix
CVE-2023-20853aEnrich a+HRD deserialization of untrusted data9.8CNA v3.11.0%2023-04-27Fix
CVE-2023-20852aEnrich a+HRD deserialization of untrusted data9.8CNA v3.11.0%2023-04-27Fix
CVE-2023-2355Acronis Snap Deploy uncontrolled search path6.7CNA v3.00.2%2023-04-27Fix
CVE-2023-2350SourceCodester Service Provider Management System Users.php cross-site scripting5.4v3.10.6%2023-04-27
CVE-2023-2349SourceCodester Service Provider Management System index.php cross-site scripting5.4v3.10.6%2023-04-27
CVE-2023-2348SourceCodester Service Provider Management System manage_user.php SQL injection9.8v3.10.8%2023-04-27
CVE-2023-2347SourceCodester Service Provider Management System manage_service.php SQL injection9.8v3.10.8%2023-04-27
CVE-2023-2346SourceCodester Service Provider Management System view_inquiry.php SQL injection9.8v3.10.8%2023-04-27
CVE-2023-2345SourceCodester Service Provider Management System improper authorization9.8v3.10.5%2023-04-27
CVE-2023-2344SourceCodester Service Provider Management System HTTP POST request SQL injection9.8v3.10.8%2023-04-27
CVE-2023-2343Cross-site scripting (XSS) DOM in pimcore/pimcore5.4v3.10.4%2023-04-27Fix
CVE-2023-2342Cross-site scripting (XSS) Reflected in pimcore/pimcore5.4v3.10.4%2023-04-27Fix
CVE-2023-2341Cross-site scripting (XSS) Generic in pimcore/pimcore6.1NVD v3.11.1%2023-04-27Fix
CVE-2023-2340Cross-site scripting (XSS) Stored in pimcore/pimcore5.4v3.10.5%2023-04-27Fix
CVE-2023-2339Cross-site scripting (XSS) Reflected in pimcore/pimcore5.4v3.10.5%2023-04-27Fix
CVE-2023-2338SQL injection in pimcore/pimcore8.8v3.10.9%2023-04-27Fix
CVE-2023-2336Path traversal in pimcore/pimcore6.5v3.10.7%2023-04-27Fix
CVE-2023-233542Gears Surelock Windows plaintext password in Registry6.5CNA v3.10.3%2023-04-27Fix
CVE-2023-233142Gears Surelock Windows bypassing hardening via unquoted service path7.8CNA v3.10.2%2023-04-27Fix
CVE-2023-2328Cross-site scripting (XSS) Generic in pimcore/pimcore5.4v3.10.4%2023-04-27Fix
CVE-2023-2327Cross-site scripting (XSS) Stored in pimcore/pimcore5.4v3.10.4%2023-04-27Fix
CVE-2023-2323Cross-site scripting (XSS) Stored in pimcore/pimcore5.4v3.10.5%2023-04-27Fix
CVE-2023-2322Cross-site scripting (XSS) Stored in pimcore/pimcore5.4v3.10.6%2023-04-27Fix
CVE-2023-2297cozmoslabs Profile Builder password reset function vulnerability8.1NVD v3.11.0%2023-04-27Fix
CVE-2023-2158Synopsys Code Dx impersonation through User-Controlled Token9.8v3.10.6%2023-04-27Fix
CVE-2023-1967Keysight N8844A Data Analytics Web Service insecure deserialization9.8v3.10.8%2023-04-27Fix
CVE-2023-1778GajShield Data Security Firewall improper authentication9.8v3.11.1%2023-04-27Fix
CVE-2023-31250Drupal Core Moderately critical Access bypass SA-CORE-2023-0056.5v3.10.5%2023-04-26Fix
CVE-2023-30846Microsoft typed-rest-client vulnerable to potential leak of authentication data to 3rd parties9.1CNA v3.12.2%2023-04-26Fix
CVE-2023-30845GoogleCloudPlatform esp-v2 ESPv2 vulnerable to JWT authentication bypass8.2CNA v3.10.7%2023-04-26Exploit codeFix
CVE-2023-30843Payload's hidden fields can be leaked on readable collections7.4CNA v3.10.6%2023-04-26Fix
CVE-2023-30841metal3-io baremetal-operator ironic and ironic-inspector may expose as ConfigMaps6.0CNA v3.10.2%2023-04-26Fix
CVE-2023-30546Contiki-NG has off-by-one error in Antelope DBMS9.8CNA v3.10.6%2023-04-26Fix
CVE-2023-30404Aigital Wireless-n Repeater Mini Router code injection9.8v3.12.2%2023-04-26
CVE-2023-30363Prototype pollution in vConsole9.8v3.11.0%2023-04-26Fix
CVE-2023-30280NETGEAR R6700 buffer overflow9.8v3.11.2%2023-04-26Fix
CVE-2023-30269CLTPHP improper quantity validation8.1v3.10.7%2023-04-26
CVE-2023-30267CLTPHP cross-site scripting6.1v3.10.4%2023-04-26
CVE-2023-30266CLTPHP unrestricted file upload8.8v3.10.8%2023-04-26
CVE-2023-30265CLTPHP path traversal6.5v3.11.0%2023-04-26
CVE-2023-30212Ourphp cross-site scripting6.1v3.18.1%2023-04-26NucleiExploit code
CVE-2023-30211Ourphp SQL injection9.8v3.11.0%2023-04-26
CVE-2023-30210Ourphp cross-site scripting6.1v3.11.2%2023-04-26Nuclei
CVE-2023-30112Medicine Tracker System SQL injection7.5v3.10.6%2023-04-26
CVE-2023-30111Medicine Tracker System cross-site scripting6.1v3.10.4%2023-04-26
CVE-2023-30106Medicine Tracker System cross-site scripting6.1v3.10.5%2023-04-26
CVE-2023-29836Exelysis Unified Communications Solution cross-site scripting6.1v3.10.6%2023-04-26
CVE-2023-29835Wondershare Dr.Fone privilege escalation7.8v3.10.4%2023-04-26
CVE-2023-29596Cmix ByronKnoll buffer overflow7.8v3.10.3%2023-04-26
CVE-2023-29443Zoho ManageEngine ServiceDesk Plus XML external entity injection4.9v3.13.0%2023-04-26Fix
CVE-2023-29442Zoho ManageEngine Applications Manager cross-site scripting6.1v3.19.4%2023-04-26Fix
CVE-2023-29268TIBCO Spotfire Statistics Services unrestricted file upload9.8CNA v3.11.0%2023-04-26
CVE-2023-29257IBM Db2 code execution7.2CNA v3.11.5%2023-04-26Fix
CVE-2023-28009HCL Workload Automation is vulnerable to XML external entity (XXE) injection6.5CNA v3.10.8%2023-04-26Fix
CVE-2023-28008HCL Workload Automation is vulnerable to XML external entity (XXE) injection7.1CNA v3.10.8%2023-04-26Fix
CVE-2023-27843Ask For A Quote PrestaShop askforaquote v.5.4.2 and SQL injection9.8v3.11.2%2023-04-26
CVE-2023-27559IBM Db2 denial of service5.3CNA v3.10.9%2023-04-26Fix
CVE-2023-27107Myq-solution Central Server incorrect authorization8.8v3.10.8%2023-04-26
CVE-2023-26930Xpdfreader Xpdf buffer overflow5.5v3.10.3%2023-04-26
CVE-2023-26735prometheus Blackbox Exporter server-side request forgery7.5v3.10.9%2023-04-26
CVE-2023-26567Sangoma Freepbx Linux 7 insufficiently protected credentials8.1v3.10.6%2023-04-26
CVE-2023-26560Northern.tech Cfengine observable discrepancy6.5v3.10.5%2023-04-26Fix
CVE-2023-26286IBM AIX privilege escalation8.4CNA v3.10.3%2023-04-26Fix
CVE-2023-24796Vinga Wr-ac1200 arbitrary code execution9.8v3.11.6%2023-04-26
CVE-2023-22729Silverstripe Framework has open redirect vulnerability on CMSSecurity relogin screen5.4CNA v3.10.4%2023-04-26Fix
CVE-2023-22728Silverstripe Framework has missing permission check of canView in GridFieldPrintButton4.3CNA v3.10.5%2023-04-26Fix
CVE-2023-2307Cross-site request forgery (CSRF) in BuilderIO/Qwik6.5v3.10.3%2023-04-26Fix
CVE-2023-2294UCMS Column Configuration saddpost.php cross-site scripting6.1v3.10.5%2023-04-26
CVE-2023-2291Zoho ManageEngine Multiple Products hard-coded credentials7.8NVD v3.10.8%2023-04-26
CVE-2023-2273Rapid7 Insight Agent directory traversal5.8CNA v3.10.7%2023-04-26Fix
CVE-2023-1786Sensitive data exposure in cloud-init logs5.5CNA v3.10.3%2023-04-26Fix
CVE-2023-1387Grafana information disclosure4.2CNA v3.11.5%2023-04-26Fix
CVE-2023-0458Spectre V1 Gadget in do_prlimit in the Linux kernel4.7NVD v3.10.7%2023-04-26Fix
CVE-2023-31223dradisframework Dradis cross-site scripting5.4NVD v3.10.5%2023-04-25Fix
CVE-2023-30839PrestaShop vulnerable to SQL filter bypass leading to arbitrary write requests using SQL Manager10.0CNA v3.11.7%2023-04-25Fix
CVE-2023-30838PrestaShop vulnerable to possible XSS injection through Validate::isCleanHTML method8.6CNA v3.11.0%2023-04-25Fix
CVE-2023-30609matrix-react-sdk vulnerable to HTML injection in search results via plaintext message highlighting5.4CNA v3.10.6%2023-04-25Fix
CVE-2023-30549Unpatched extfs vulnerabilities are exploitable through suid-mode Apptainer7.1CNA v3.10.4%2023-04-25Fix
CVE-2023-30545PrestaShop arbitrary file read7.7CNA v3.10.9%2023-04-25Fix
CVE-2023-30417Pear Admin Boot Pear-Admin-Boot up to v2.0.2 cross-site scripting5.4v3.10.4%2023-04-25
CVE-2023-30402Yasm out-of-bounds write5.5v3.10.3%2023-04-25
CVE-2023-30177Cross-site scripting in CraftCMS6.1v3.10.4%2023-04-25Fix
CVE-2023-29779Sengled E1e-g7f resource exhaustion7.5v3.11.2%2023-04-25
CVE-2023-29552Service Location Protocol (SLP) denial of service7.5v3.164.0%2023-04-25KEVFix
CVE-2023-29200Contao/core-bundle has path traversal vulnerability in the file manager4.3CNA v3.10.8%2023-04-25Fix
CVE-2023-29012Git CMD erroneously executes `doskey.exe` in the current directory, if it exists7.3CNA v3.10.4%2023-04-25Fix
CVE-2023-29011Git For Windows's config file of `connect.exe` is susceptible to malicious placing7.6CNA v3.10.4%2023-04-25Fix
CVE-2023-29007Arbitrary configuration injection via `git submodule deinit`7.0CNA v3.16.1%2023-04-25Exploit codeFix
CVE-2023-28847Nextcloud Server missing brute force protection for passwords of password protected share links3.1CNA v3.10.8%2023-04-25Fix
CVE-2023-28771Zyxel Multiple Firewalls OS command injection9.8CNA v3.199.3%2023-04-25KEVMetasploitEmerging ThreatsExploit codeFix
CVE-2023-28090HPE OneView insufficiently protected credentials5.5v3.10.2%2023-04-25Fix
CVE-2023-28089HPE OneView insufficiently protected credentials7.1v3.10.2%2023-04-25Fix
CVE-2023-28088HPE OneView insufficiently protected credentials7.8v3.10.2%2023-04-25Fix
CVE-2023-28087HPE OneView insufficiently protected credentials5.5v3.10.2%2023-04-25Fix
CVE-2023-28086HPE OneView insufficiently protected credentials5.5v3.10.2%2023-04-25Fix
CVE-2023-28084HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens5.5v3.10.2%2023-04-25Fix
CVE-2023-27619Regina Lite WordPress theme cross-site scripting (XSS)5.4v3.10.4%2023-04-25
CVE-2023-27105Shanling Mtouch OS path traversal9.8v3.11.3%2023-04-25
CVE-2023-26843ChurchCRM A stored cross-site scripting5.4v3.11.4%2023-04-25Nuclei
CVE-2023-26841ChurchCRM A cross-site request forgery6.5v3.10.4%2023-04-25
CVE-2023-26840ChurchCRM A cross-site request forgery5.3v3.10.3%2023-04-25
CVE-2023-26839ChurchCRM A cross-site request forgery4.3v3.10.3%2023-04-25
CVE-2023-26098Telindus Apsal unrestricted file upload7.8v3.10.2%2023-04-25
CVE-2023-26058Nokia Netact XML external entity injection6.5v3.10.5%2023-04-25
CVE-2023-26057Nokia Netact XML external entity injection6.5v3.10.5%2023-04-25
CVE-2023-25815Git looks for localized messages in the wrong place3.3CNA v3.11.0%2023-04-25Fix
CVE-2023-25793Link Juice Keeper WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-04-25Fix
CVE-2023-25710Click to Call or Chat Buttons WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-04-25Fix
CVE-2023-25652git apply --reject partially-controlled arbitrary file write7.5CNA v3.151.9%2023-04-25Fix
CVE-2023-25490Archivist Custom Archive Templates WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-04-25Fix
CVE-2023-25485JSON Content Importer WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-04-25Fix
CVE-2023-25484Simple Yearly Archive WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-04-25Fix
CVE-2023-25479Podlove Subscribe button WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-04-25Fix
CVE-2023-25461Wp-Insert WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-04-25Fix
CVE-2023-25348ChurchCRM CSV injection7.8v3.10.4%2023-04-25
CVE-2023-25347ChurchCRM A stored cross-site scripting5.4v3.10.6%2023-04-25
CVE-2023-25346ChurchCRM A reflected cross-site scripting6.1v3.11.5%2023-04-25Nuclei
CVE-2023-25314WWBN AVideo World Wide Broadcast Network cross-site scripting6.1v3.10.4%2023-04-25
CVE-2023-25313AVideo contains command injection when embedding a video link9.8v3.11.3%2023-04-25Fix
CVE-2023-24512Arista Networks Terminattr improper access control8.8CNA v3.10.6%2023-04-25
CVE-2023-24005Inline Tweet Sharer Twitter Sharing WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-04-25Fix
CVE-2023-23995TinyMCE Custom Styles WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-04-25Fix
CVE-2023-23889Quick Paypal Payments WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-04-25Fix
CVE-2023-23866Interactive Geo Maps WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-04-25Fix
CVE-2023-23839SolarWinds Platform exposure of sensitive information6.5CNA v3.11.1%2023-04-25Fix
CVE-2023-23838Directory traversal and file enumeration vulnerability: Database Performance Analyzer (DPA)6.5CNA v3.11.3%2023-04-25Fix
CVE-2023-23837No Exception Handling vulnerability: Database Performance Analyzer (DPA)7.5CNA v3.10.8%2023-04-25Fix
CVE-2023-23710WordPress Social Login and Register plugin cross-site scripting4.8v3.10.4%2023-04-25Fix
CVE-2023-22665Apache Jena: Exposure of arbitrary execution in script engine expressions5.4v3.11.3%2023-04-25Fix
CVE-2023-20872VMware Workstation Pro / Player (Workstation) and VMware Fusion out-of-bounds write8.8v3.10.9%2023-04-25Exploit codeFix
CVE-2023-20871VMware Fusion incorrect authorization7.8v3.10.4%2023-04-25Fix
CVE-2023-20870VMware Workstation Pro / Player (Workstation) and VMware Fusion out-of-bounds read6.0v3.10.4%2023-04-25Fix
CVE-2023-20869VMware Workstation Pro / Player (Workstation) and VMware Fusion out-of-bounds write8.2v3.12.0%2023-04-25Fix
CVE-2023-2293SourceCodester Purchase Order Management System cross-site scripting4.8v3.10.6%2023-04-25
CVE-2023-2282Devolutions Remote Desktop Manager Web Login listener improper access control6.5v3.10.4%2023-04-25Fix
CVE-2023-2281Mattermost archiving a team broadcasts unsanitized data over WebSockets3.1CNA v3.10.5%2023-04-25Fix
CVE-2023-2269Linux kernel Device Mapper ioctl interface deadlock4.4NVD v3.10.2%2023-04-25Fix
CVE-2023-0045Incorrect indirect branch prediction barrier in the Linux kernel7.5NVD v3.12.4%2023-04-25Exploit codeFix
CVE-2023-31085Linux kernel divide by zero5.5NVD v3.10.4%2023-04-24Fix
CVE-2023-31084Linux kernel deadlock5.5v3.10.4%2023-04-24Fix
CVE-2023-31083Linux kernel race condition4.7v3.10.3%2023-04-24Fix
CVE-2023-31082Linux kernel release of an invalid pointer5.5v3.10.4%2023-04-24Fix
CVE-2023-31081Linux kernel null pointer dereference5.5v3.10.4%2023-04-24Fix
CVE-2023-31061Repetier-server cross-site request forgery8.8v3.10.5%2023-04-24
CVE-2023-31060Repetier Server through 1.4.10 executes as SYSTEM. This can be leveraged in conjunction with CVE-2023-31059 for full compromise.9.8v3.11.2%2023-04-24
CVE-2023-31059Repetier-server path traversal7.5v3.15.6%2023-04-24NucleiExploit code
CVE-2023-31056Cloverdx sensitive information in log files6.5NVD v3.10.6%2023-04-24Fix
CVE-2023-31045Cross-site scripting in Backdrop CMS4.8v3.10.5%2023-04-24Fix
CVE-2023-30776Apache Superset: Database connection password leak4.9CNA v3.12.1%2023-04-24Fix
CVE-2023-30629Vyper's raw_call with outsize=0 and revert_on_failure=False returns incorrect success value7.5CNA v3.10.9%2023-04-24Fix
CVE-2023-30628Kiwi TCMS has command injection vulnerability in changelog.yml CI workflow8.8CNA v3.13.6%2023-04-24Fix
CVE-2023-30627jellyfin-web has a stored cross-site scripting vulnerability in devices.js9.1CNA v3.11.3%2023-04-24Fix
CVE-2023-30626Jellyfin vulnerable to directory traversal and file write causing arbitrary code execution8.8CNA v3.12.0%2023-04-24Fix
CVE-2023-30623Arbitrary command injection in embano1/wip8.8CNA v3.13.7%2023-04-24Fix
CVE-2023-30622Clusternet has potential risk which can be leveraged to make a cluster-level privilege escalation6.6CNA v3.10.2%2023-04-24Fix
CVE-2023-30613Kiwi TCMS unrestricted file upload8.1CNA v3.11.0%2023-04-24Fix
CVE-2023-30544Kiwi TCMS may allow user to update email address to unverified one3.9CNA v3.10.4%2023-04-24Fix
CVE-2023-30533Prototype pollution in sheetJS7.8NVD v3.11.0%2023-04-24Exploit codeFix
CVE-2023-30458Medicine Tracker System observable discrepancy5.3v3.10.8%2023-04-24Exploit code
CVE-2023-30414JerryScript out-of-bounds write5.5v3.10.3%2023-04-24
CVE-2023-30410JerryScript out-of-bounds write5.5v3.10.3%2023-04-24
CVE-2023-30408JerryScript resource exhaustion5.5v3.10.3%2023-04-24
CVE-2023-30406JerryScript resource exhaustion5.5v3.10.3%2023-04-24
CVE-2023-30378Tenda AC15 out-of-bounds write9.8v3.10.8%2023-04-24
CVE-2023-30376Tenda AC15 out-of-bounds write9.8v3.10.8%2023-04-24
CVE-2023-30375Tenda AC15 out-of-bounds write9.8v3.10.8%2023-04-24
CVE-2023-30373Tenda AC15 out-of-bounds write9.8v3.10.8%2023-04-24
CVE-2023-30372Tenda AC15 out-of-bounds write9.8v3.10.8%2023-04-24
CVE-2023-30371Tenda AC15 out-of-bounds write9.8v3.10.8%2023-04-24
CVE-2023-30370Tenda AC15 out-of-bounds write9.8v3.10.8%2023-04-24
CVE-2023-30369Tenda AC15 out-of-bounds write9.8v3.10.8%2023-04-24
CVE-2023-30368Tenda AC5 out-of-bounds write9.8v3.10.8%2023-04-24
CVE-2023-29849Hockeycomputindo Bang Resto SQL injection8.8v3.13.2%2023-04-24Exploit code
CVE-2023-29848Hockeycomputindo Bang Resto cross-site scripting4.8v3.11.9%2023-04-24Exploit code
CVE-2023-297803reality 3rsb015bz denial of service7.5v3.11.1%2023-04-24
CVE-2023-29583Yasm stack-based buffer overflow5.5v3.10.3%2023-04-24
CVE-2023-29582Yasm out-of-bounds write5.5v3.10.3%2023-04-24
CVE-2023-29579Yasm out-of-bounds write5.5v3.10.3%2023-04-24Fix
CVE-2023-29578MP4v2 out-of-bounds write8.8v3.10.8%2023-04-24
CVE-2023-29570Cesanta mJS resource exhaustion5.5v3.10.3%2023-04-24
CVE-2023-29566Remote code execution in Dawnsparks-node-tesseract9.8v3.12.2%2023-04-24Fix
CVE-2023-29530Laminas Diactoros vulnerable to HTTP Multiline Header Termination7.5CNA v3.11.0%2023-04-24Fix
CVE-2023-29480Ribose RNP cleartext storage of sensitive information7.5v3.10.4%2023-04-24Fix
CVE-2023-29479Ribose RNP resource exhaustion5.3v3.10.9%2023-04-24Fix
CVE-2023-29469libxml2 xmlDictComputeFastKey function double free6.5NVD v3.11.3%2023-04-24Fix
CVE-2023-28484libxml2 null pointer dereference6.5NVD v3.11.2%2023-04-24Fix
CVE-2023-28131Expo.io Expo AuthSession module insufficiently protected credentials9.6NVD v3.123.2%2023-04-24Fix
CVE-2023-27991Zyxel ATP series firmware CLI command command injection8.8CNA v3.11.5%2023-04-24Fix
CVE-2023-27990Zyxel ATP series firmware cross-site scripting4.8CNA v3.10.3%2023-04-24Fix
CVE-2023-27849Rails-routes-to-json command injection9.8v3.11.8%2023-04-24
CVE-2023-27848Remote code execution in Broccoli-compass9.8v3.11.9%2023-04-24
CVE-2023-27524Apache Superset insecure default initialization of Resource8.9CNA v3.197.4%2023-04-24KEVNucleiMetasploitExploit codeKCVFix
CVE-2023-26865Brandsdistribution Bdroppy PrestaShop SQL injection9.8v3.11.2%2023-04-24
CVE-2023-26494lorawan-stack has open redirect6.1NVD v3.10.6%2023-04-24Fix
CVE-2023-26099Telindus Apsal consultation permission vulnerability7.1v3.10.2%2023-04-24
CVE-2023-26097Telindus Apsal incorrect authorization5.5NVD v3.10.2%2023-04-24
CVE-2023-26061Nokia Netact cross-site scripting5.4v3.10.4%2023-04-24
CVE-2023-26060Nokia Netact code injection8.8v3.10.6%2023-04-24
CVE-2023-26059Nokia Netact cross-site scripting5.4v3.10.4%2023-04-24
CVE-2023-25133Improper privilege management vulnerability in CyberPower PowerPanel Business9.8v3.11.0%2023-04-24
CVE-2023-25132Unrestricted upload of file with dangerous type vulnerability in CyberPower PowerPanel Business9.8v3.11.1%2023-04-24
CVE-2023-25131CyberPower PowerPanel Business Local / Remote default password9.8v3.11.0%2023-04-24
CVE-2023-24823RIOT-OS vulnerable to Packet type confusion during IPHC send9.8CNA v3.11.0%2023-04-24Fix
CVE-2023-24822RIOT-OS vulnerable to null pointer dereference during IPHC encoding7.5CNA v3.10.9%2023-04-24Fix
CVE-2023-24821RIOT-OS vulnerable to integer underflow during defragmentation7.5CNA v3.10.9%2023-04-24Fix
CVE-2023-24820RIOT-OS vulnerable to integer underflow during IPHC receive7.5CNA v3.10.9%2023-04-24Fix
CVE-2023-24819RIOT-OS vulnerable to buffer overflow during IPHC receive9.8CNA v3.11.0%2023-04-24Fix
CVE-2023-24818RIOT-OS vulnerable to null pointer dereference during fragment forwarding7.5CNA v3.11.2%2023-04-24Fix
CVE-2023-23892M Chart WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-04-24Fix
CVE-2023-22918Zyxel ATP series firmware CGI program information disclosure6.5CNA v3.10.8%2023-04-24Fix
CVE-2023-22917Zyxel ATP series firmware “sdwan_iface_ipc” binary buffer overflow7.5CNA v3.10.9%2023-04-24Fix
CVE-2023-22916Zyxel ATP series firmware improper input validation8.1CNA v3.10.7%2023-04-24Fix
CVE-2023-22915Zyxel USG FLEX series firmware “fbwifi_forward.cgi” CGI program buffer overflow7.5CNA v3.11.1%2023-04-24Fix
CVE-2023-22914Zyxel USG FLEX series firmware “account_print.cgi” CGI program path traversal7.2CNA v3.11.0%2023-04-24Fix
CVE-2023-22913Zyxel USG FLEX series firmware “account_operator.cgi” CGI program command injection8.1CNA v3.11.3%2023-04-24Fix
CVE-2023-22581White Rabbit Switch unauthenticated remote code execution9.8v3.10.7%2023-04-24
CVE-2023-22577White Rabbit Switch password disclosure7.5NVD v3.10.8%2023-04-24
CVE-2023-2260Authorization bypass through user-controlled key in alfio-event/Alf.io8.8v3.10.9%2023-04-24Fix
CVE-2023-2259Improper neutralization of special elements used in a template engine in alfio-event/Alf.io7.2NVD v3.11.1%2023-04-24Fix
CVE-2023-2258Improper neutralization of formula elements in a CSV file in alfio-event/Alf.io8.8v3.10.9%2023-04-24Fix
CVE-2023-2257Devolutions Workspace Desktop Hub Business integration authentication bypass7.8v3.10.2%2023-04-24Fix
CVE-2023-2251Uncaught exception in eemeli/yaml7.5v3.11.1%2023-04-24Fix
CVE-2023-2250MCE privilege escalation6.7v3.10.2%2023-04-24
CVE-2023-2019Linux kernel's netdevsim device driver improper reference count update4.4NVD v3.10.3%2023-04-24Fix
CVE-2023-2007Linux kernel's DPT I2O Controller driver time-of-check time-of-use race condition7.8NVD v3.10.3%2023-04-24Fix
CVE-2023-2006Linux kernel's RxRPC network protocol A race condition7.0NVD v3.10.4%2023-04-24Fix
CVE-2023-1731Improper input validation in Meinberg LTOS7.2CNA v3.11.0%2023-04-24Fix
CVE-2023-1624WPCode Lite WordPress plugin arbitrary Log file deletion via CSRF6.5NVD v3.10.3%2023-04-24Fix
CVE-2023-1623Custom Post Type UI WordPress plugin Debug Info Sending via CSRF6.5NVD v3.10.4%2023-04-24Fix
CVE-2023-1435Ajax Search Lite Pro WordPress plugin Multiple reflected cross-site scripting6.1NVD v3.10.5%2023-04-24Fix
CVE-2023-1420Ajax Search Lite and Pro reflected cross-site scripting6.1NVD v3.10.5%2023-04-24Fix
CVE-2023-1414WP VR WordPress plugin Subscriber+ arbitrary Tour update4.3NVD v3.10.2%2023-04-24Fix
CVE-2023-1324Easy Forms for MailChimp WordPress plugin reflected XSS6.1NVD v3.10.6%2023-04-24Fix
CVE-2023-1129WP FEvents Book WordPress plugin Subscriber+ arbitrary Booking manipulation via IDOR6.5NVD v3.10.6%2023-04-24Fix
CVE-2023-1126WP FEvents Book WordPress plugin Subscriber+ stored XSS5.4NVD v3.10.4%2023-04-24
CVE-2023-1020Steveas WP Live Chat Shoutbox WordPress plugin unauthenticated SQLi9.8NVD v3.14.9%2023-04-24Nuclei
CVE-2023-0899Steveas WP Live Chat Shoutbox WordPress plugin unauthenticated stored XSS6.1NVD v3.10.5%2023-04-24
CVE-2023-0424MS-Reviews WordPress plugin Subscriber+ stored XSS5.4NVD v3.10.4%2023-04-24
CVE-2023-0420Custom Post Type and Taxonomy GUI Manager WordPress plugin stored XSS via CSRF4.8NVD v3.10.2%2023-04-24
CVE-2023-0418Video Central for WordPress plugin Contributor+ stored XSS5.4NVD v3.10.4%2023-04-24
CVE-2023-0388Random Text WordPress plugin Subscriber+ SQLi8.8NVD v3.10.9%2023-04-24
CVE-2023-0276Weaver Xtreme Theme Support WordPress plugin Contributor+ stored XSS5.4NVD v3.10.5%2023-04-24Fix
CVE-2023-31043EnterpriseDB Postgres Advanced Server cleartext storage of sensitive information7.5v3.10.4%2023-04-23Fix
CVE-2023-27614Motor Racing League WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-04-23
CVE-2023-27425Electric Studio Client Login WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-04-23
CVE-2023-25451CPO Content Types WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-04-23Fix
CVE-2023-24404Marketing Performance WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-04-23
CVE-2023-24386AI Contact Us Form WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-04-23
CVE-2023-23879PHP Execution WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-04-23
CVE-2023-23832Ultimate WP Query Search Filter WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-04-23
CVE-2023-23827Google Maps v3 Shortcode WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-04-23
CVE-2023-23817Simple PDF Viewer WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-04-23
CVE-2023-23816Sitemap Index WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-04-23
CVE-2023-23806WordPress Custom Settings plugin cross-site scripting (XSS)4.8v3.10.4%2023-04-23
CVE-2023-23753vi-solutions Visforms Base Package for Joomla 3 SQL injection9.8NVD v3.10.8%2023-04-23Fix
CVE-2023-23717Portfolio Slideshow WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-04-23
CVE-2023-22718User Meta Manager WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-04-23Fix
CVE-2023-22698Theme Blvd Responsive Google Maps WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-04-23
CVE-2023-22686Nice PayPal Button Lite WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-04-23
CVE-2023-2246SourceCodester Online Pizza Ordering System unrestricted upload9.8v3.13.6%2023-04-23Exploit code
CVE-2023-25514NVIDIA CUDA Toolkit out-of-bounds read5.3CNA v3.10.2%2023-04-22Fix
CVE-2023-25513NVIDIA CUDA Toolkit out-of-bounds read5.3CNA v3.10.3%2023-04-22Fix
CVE-2023-25512NVIDIA CUDA Toolkit out-of-bounds read5.3CNA v3.10.3%2023-04-22Fix
CVE-2023-25511NVIDIA CUDA Toolkit divide by zero3.3CNA v3.10.2%2023-04-22Fix
CVE-2023-25510NVIDIA CUDA Toolkit null pointer dereference3.3CNA v3.10.2%2023-04-22Fix
CVE-2023-25509NVIDIA DGX servers code execution6.0CNA v3.10.2%2023-04-22Fix
CVE-2023-25508NVIDIA DGX servers path traversal6.7CNA v3.10.2%2023-04-22Fix
CVE-2023-25507NVIDIA DGX servers OS command injection7.2CNA v3.10.9%2023-04-22Fix
CVE-2023-25506NVIDIA DGX servers out-of-bounds access7.5CNA v3.10.2%2023-04-22Fix
CVE-2023-25505NVIDIA DGX servers buffer overflow7.8CNA v3.10.2%2023-04-22Fix
CVE-2023-2245hansunCMS unrestricted upload9.8NVD v3.11.3%2023-04-22Exploit code
CVE-2023-2244SourceCodester Online Eyewear Shop GET parameter update_status.php SQL injection9.8v3.10.7%2023-04-22
CVE-2023-2243SourceCodester Complaint Management System POST parameter registration.php SQL injection8.8v3.10.7%2023-04-22
CVE-2023-2242SourceCodester Online Computer and Laptop Store GET parameter SQL injection8.8v3.10.7%2023-04-22
CVE-2023-2241PoDoFo PdfXRefStreamParserObject.cpp readXRefStreamEntry heap-based overflow7.8NVD v3.10.4%2023-04-22
CVE-2023-2240Improper privilege management in microweber/microweber8.8v3.10.7%2023-04-22Fix
CVE-2023-2239Exposure of private personal information to an unauthorized actor in microweber/microweber6.5NVD v3.10.5%2023-04-22Fix
CVE-2023-1875Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ5.4v3.10.5%2023-04-22Fix
CVE-2023-0209NVIDIA DGX servers improper authentication8.2CNA v3.10.2%2023-04-22Fix
CVE-2023-0207NVIDIA DGX servers incorrect permission assignment7.5CNA v3.10.1%2023-04-22Fix
CVE-2023-0206NVIDIA DGX servers denial of service7.5CNA v3.10.2%2023-04-22Fix
CVE-2023-0205NVIDIA ConnectX Firmware insufficient access control granularity5.0CNA v3.10.5%2023-04-22Fix
CVE-2023-0204NVIDIA ConnectX Firmware improper exception handling6.5CNA v3.10.4%2023-04-22Fix
CVE-2023-0203NVIDIA ConnectX Firmware insufficient access control granularity5.0CNA v3.10.5%2023-04-22Fix
CVE-2023-0202NVIDIA DGX servers denial of service7.5CNA v3.10.2%2023-04-22Fix
CVE-2023-0201NVIDIA DGX servers code execution6.7CNA v3.10.2%2023-04-22Fix
CVE-2023-0200NVIDIA DGX servers out-of-bounds access7.5CNA v3.10.2%2023-04-22Fix
CVE-2023-0199NVIDIA GPU Display Driver out-of-bounds write6.1CNA v3.10.2%2023-04-22Fix
CVE-2023-0190NVIDIA GPU Display Driver null pointer dereference5.5CNA v3.10.2%2023-04-22Fix
CVE-2023-0184NVIDIA GPU Display Driver untrusted pointer dereference8.8CNA v3.10.3%2023-04-22Fix
CVE-2023-30798MultipartParser DOS with too many fields or files in Starlette Framework7.5v3.11.3%2023-04-21Fix
CVE-2023-30621OS command injection in Gipsy9.8CNA v3.11.8%2023-04-21Fix
CVE-2023-30620Arbitrary file write when Extracting a Remotely retrieved Tarball in mindsdb/mindsdb7.5CNA v3.11.0%2023-04-21Fix
CVE-2023-30618Sensitive Terraform Output Values Printed at Info Logging Level in Kitchen-Terraform3.2CNA v3.10.2%2023-04-21Fix
CVE-2023-29924PowerJob vulnerable to incorrect access control9.8v3.11.1%2023-04-21
CVE-2023-29917H3C Magic R200 Firmware out-of-bounds write4.9v3.10.8%2023-04-21
CVE-2023-29916H3C Magic R200 Firmware out-of-bounds write4.9v3.10.8%2023-04-21
CVE-2023-29915H3C Magic R200 Firmware out-of-bounds write4.9v3.10.8%2023-04-21
CVE-2023-29914H3C Magic R200 Firmware out-of-bounds write4.9v3.10.8%2023-04-21
CVE-2023-29913H3C Magic R200 Firmware out-of-bounds write4.9v3.10.8%2023-04-21
CVE-2023-29912H3C Magic R200 Firmware out-of-bounds write4.9v3.10.8%2023-04-21
CVE-2023-29911H3C Magic R200 Firmware out-of-bounds write4.9v3.10.8%2023-04-21
CVE-2023-29910H3C Magic R200 Firmware out-of-bounds write4.9v3.10.8%2023-04-21
CVE-2023-29909H3C Magic R200 Firmware out-of-bounds write4.9v3.10.8%2023-04-21
CVE-2023-29908H3C Magic R200 Firmware out-of-bounds write4.9v3.10.8%2023-04-21
CVE-2023-29907H3C Magic R200 Firmware out-of-bounds write4.9v3.10.8%2023-04-21
CVE-2023-29906H3C Magic R200 Firmware out-of-bounds write4.9v3.10.8%2023-04-21
CVE-2023-29905H3C Magic R200 Firmware out-of-bounds write4.9v3.10.8%2023-04-21
CVE-2023-29575Axiosys Bento4 resource exhaustion5.5v3.10.3%2023-04-21
CVE-2023-29020Cross-site request forgery token fixation in fastify-passport6.5CNA v3.10.4%2023-04-21Fix
CVE-2023-29019Session fixation in fastify-passport8.1CNA v3.10.8%2023-04-21Fix
CVE-2023-26876Piwigo SQL injection8.8v3.19.7%2023-04-21MetasploitExploit code
CVE-2023-26557IO FinNet Tss-lib vulnerable to timing attack from non-constant time scalar arithmetic7.5v3.10.9%2023-04-21Fix
CVE-2023-26556IO FinNet Tss-lib vulnerable to timing attack from non-constant time scalar multiplication9.1v3.10.9%2023-04-21Fix
CVE-2023-26101Progress Flowmon Packet Investigator path traversal7.5v3.10.7%2023-04-21
CVE-2023-26100Progress Flowmon OS cross-site scripting6.1v3.10.4%2023-04-21
CVE-2023-2231MAXTECH MAX-G866ac remote management missing authentication9.8v3.12.0%2023-04-21
CVE-2023-2228Cross-site request forgery (CSRF) in modoboa/modoboa6.8v3.10.4%2023-04-21Fix
CVE-2023-2227Improper authorization in modoboa/modoboa9.1v3.143.8%2023-04-21NucleiFix
CVE-2023-2226Velociraptor crashes while parsing some malformed PE or OLE files3.3CNA v3.10.4%2023-04-21Fix
CVE-2023-2220Dream Technology mica form object cross-site scripting6.1v3.10.6%2023-04-21
CVE-2023-2219SourceCodester Task Reminder System Users.php cross-site scripting6.1v3.10.5%2023-04-21
CVE-2023-2218SourceCodester Task Reminder System manage_user.php SQL injection9.8v3.10.7%2023-04-21
CVE-2023-2217SourceCodester Task Reminder System manage_reminder.php SQL injection9.8v3.10.7%2023-04-21
CVE-2023-2216Campcodes Coffee Shop POS System Users.php cross-site scripting6.1v3.10.6%2023-04-21
CVE-2023-2215Campcodes Coffee Shop POS System manage_user.php SQL injection9.8v3.11.6%2023-04-21Exploit code
CVE-2023-2214Campcodes Coffee Shop POS System manage_sale.php SQL injection7.5v3.10.6%2023-04-21
CVE-2023-2213Campcodes Coffee Shop POS System manage_product.php SQL injection7.5v3.10.6%2023-04-21
CVE-2023-2212Campcodes Coffee Shop POS System view_product.php SQL injection7.5v3.10.6%2023-04-21
CVE-2023-2211Campcodes Coffee Shop POS System manage_category.php SQL injection7.5v3.10.6%2023-04-21
CVE-2023-2210Campcodes Coffee Shop POS System view_category.php SQL injection7.5v3.10.6%2023-04-21
CVE-2023-2209Campcodes Coffee Shop POS System view_details.php SQL injection7.5v3.10.6%2023-04-21
CVE-2023-2208Campcodes Retro Basketball Shoes Online Store details.php SQL injection7.5v3.10.6%2023-04-21
CVE-2023-2207Campcodes Retro Basketball Shoes Online Store contactus1.php SQL injection7.5v3.10.6%2023-04-21
CVE-2023-2206Campcodes Retro Basketball Shoes Online Store contactus.php SQL injection9.8v3.10.7%2023-04-21
CVE-2023-2205Campcodes Retro Basketball Shoes Online Store login.php SQL injection7.5v3.10.6%2023-04-21
CVE-2023-2204Campcodes Retro Basketball Shoes Online Store faqs.php SQL injection7.5v3.10.6%2023-04-21
CVE-2023-2202Improper access control in francoisjacquet/RosarioSIS6.5v3.10.5%2023-04-21Fix
CVE-2023-2141Unsafe .NET object deserialization affecting DELMIA Apriso Release 2017 through Release 20228.5CNA v3.11.0%2023-04-21
CVE-2023-2140Server-side request forgery vulnerability affecting DELMIA Apriso Release 2017 through Release 20227.5CNA v3.10.6%2023-04-21
CVE-2023-2139Reflected cross-site scripting vulnerability affecting DELMIA Apriso Release 20175.4CNA v3.10.4%2023-04-21
CVE-2023-2118Devolutions Server support ticket feature improper access control5.4v3.10.4%2023-04-21Fix
CVE-2023-1998Spectre v2 SMT mitigations problem in Linux kernel5.6NVD v3.11.4%2023-04-21Exploit codeFix
CVE-2023-1892Cross-site scripting (XSS) Reflected in sidekiq/sidekiq9.6v3.12.7%2023-04-21NucleiFix
CVE-2023-30616Cross-site request forgery due to missing nonce verification in Form Block6.5CNA v3.10.3%2023-04-20Fix
CVE-2023-30076Judging Management System SQL injection9.8v3.10.8%2023-04-20
CVE-2023-29926PowerJob vulnerable to remote code execution9.8v3.11.2%2023-04-20
CVE-2023-29528xwiki-commons cross-site scripting in org.xwiki.Commons:xwiki-commons-xml9.1CNA v3.11.3%2023-04-20Fix
CVE-2023-28459pretalx vulnerable to path traversal in HTML export6.5v3.16.6%2023-04-20MetasploitExploit codeFix
CVE-2023-28458pretalx allows path traversal in HTML export4.3v3.13.5%2023-04-20MetasploitExploit codeFix
CVE-2023-28047Dell Display Manager least privilege violation7.3CNA v3.10.2%2023-04-20Fix
CVE-2023-27652Egostudiogroup Super Clean XML external entity injection5.5v3.10.3%2023-04-20
CVE-2023-27495Bypass of CSRF protection in the presence of predictable userInfo in @fastify/csrf-protection5.3CNA v3.10.3%2023-04-20Fix
CVE-2023-27355Sonos One Speaker stack-based buffer overflow8.8v3.10.8%2023-04-20
CVE-2023-27354Sonos One Speaker integer overflow6.5v3.10.6%2023-04-20
CVE-2023-27353Sonos One Speaker out-of-bounds read6.5v3.10.6%2023-04-20
CVE-2023-27352Sonos One Speaker use-after-free8.8v3.10.8%2023-04-20
CVE-2023-27351PaperCut NG/MF improper authentication7.5NVD v3.178.1%2023-04-20KEVNucleiFix
CVE-2023-27350PaperCut MF/NG improper access control9.8NVD v3.1100.0%2023-04-20KEVNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2023-27090TeaCMS cross-site scripting5.4v3.10.4%2023-04-20
CVE-2023-25601Apache DolphinScheduler to python gateway has improper authentication4.3v3.11.1%2023-04-20Fix
CVE-2023-23938Cross-site scripting (XSS) through the name of a color of select box values in tuleap5.9CNA v3.10.5%2023-04-20Fix
CVE-2023-23579Datakit CrossCAD/Ware SLDPRT file parser out-of-bounds write7.8v3.10.2%2023-04-20Fix
CVE-2023-22846Datakit CrossCAD/Ware SLDPRT file parser out-of-bounds read5.5v3.10.2%2023-04-20Fix
CVE-2023-22354Datakit CrossCAD/Ware SLDPRT file parser out-of-bounds read5.5v3.10.2%2023-04-20Fix
CVE-2023-22321Datakit CrossCAD/Ware SLDPRT file parser out-of-bounds read5.5v3.10.2%2023-04-20Fix
CVE-2023-22309Tribe29 Checkmk Appliance reflected cross-site scripting (XSS)6.1v3.10.4%2023-04-20Fix
CVE-2023-22295Datakit CrossCAD/Ware SLDPRT file parser out-of-bounds read5.5v3.10.2%2023-04-20Fix
CVE-2023-20873Spring Boot Security Bypass with Wildcard Pattern Matching on Cloud Foundry9.8v3.11.1%2023-04-20Fix
CVE-2023-20865VMware Aria Operations for Logs command injection7.2v3.11.6%2023-04-20Fix
CVE-2023-20864VMware Aria Operations for Logs deserialization of untrusted data9.8v3.170.4%2023-04-20NucleiFix
CVE-2023-2194Linux kernel: i2c: xgene-slimpro out-of-bounds write6.7NVD v3.10.2%2023-04-20Fix
CVE-2023-2193Mattermost oauth authorization codes do not expire when deauthorizing an oauth2 app6.5CNA v3.10.6%2023-04-20
CVE-2023-2191Cross-site scripting (XSS) Stored in AzuraCast/AzuraCast4.8v3.10.5%2023-04-20Fix
CVE-2023-2177Linux kernel null pointer dereference5.5NVD v3.10.2%2023-04-20Fix
CVE-2023-2176kernel out-of-bounds read7.8NVD v3.10.2%2023-04-20Fix
CVE-2023-2131INEA ME RTU firmware OS command injection9.8v3.11.7%2023-04-20Fix
CVE-2023-2112Desktop component allows lateral movement between sessions3.6CNA v3.10.2%2023-04-20Fix
CVE-2023-1767Snyk Advisor cross-site scripting5.4v3.10.5%2023-04-20Exploit codeFix
CVE-2023-1255OpenSSL input buffer over-read in AES-XTS implementation on 64 bit ARM5.9v3.11.0%2023-04-20Fix
CVE-2023-0384Uncontrolled Resource Consuption in M-Files Server6.5CNA v3.10.8%2023-04-20Fix
CVE-2023-0383Uncontrolled Resource Consuption in M-Files Server7.5CNA v3.10.8%2023-04-20Fix
CVE-2023-30797Insecure Random Generation in Netflix Lemur7.5v3.10.8%2023-04-19Fix
CVE-2023-30614Improper neutralization of script-related HTML tags in a web page in pay7.1CNA v3.10.5%2023-04-19Fix
CVE-2023-30612Malicious HTTP requests could close arbitrary opening file descriptors in cloud-hypervisor4.0CNA v3.10.4%2023-04-19Fix
CVE-2023-30611Reaction metadata exposed in private topics in Discourse-reactions4.3CNA v3.10.4%2023-04-19Fix
CVE-2023-30610AWS SDK for Rust aws-sigv4 signing parameters logging information disclosure5.5CNA v3.10.2%2023-04-19Fix
CVE-2023-30605Multiple SQL injections in SQL/instance.py param_edit method in Archery GHSL-2022-1046.5CNA v3.10.8%2023-04-19
CVE-2023-30558Multiple SQL injections in SQL/data_dictionary.py table_list method in Archery GHSL-2022-1056.5CNA v3.10.8%2023-04-19
CVE-2023-30557SQL injection in data_dictionary.py table_info method in Archery GHSL-2022-1066.5CNA v3.10.8%2023-04-19
CVE-2023-30556SQL injection in sql_optimize.py optimize_sqltuningadvisor method in Archery GHSL-2022-1076.5CNA v3.10.8%2023-04-19
CVE-2023-30555SQL injection in sql_optimize.py explain method in Archery GHSL-2022-1086.5CNA v3.10.8%2023-04-19
CVE-2023-30554SQL injection in sql_api/api_workflow.py endpoint in Archery GHSL-2022-1036.5CNA v3.10.8%2023-04-19
CVE-2023-30553Multiple SQL injections in sql_api/api_workflow.py endpoint in Archery GHSL-2022-1026.5CNA v3.10.8%2023-04-19
CVE-2023-30552SQL injection in SQL/instance.py endpoint in Archery GHSL-2022-1016.5CNA v3.10.8%2023-04-19
CVE-2023-30463Altran Picotcp integer overflow7.5v3.10.9%2023-04-19Fix
CVE-2023-29923PowerJob vulnerable to insecure permissions5.3NVD v3.19.5%2023-04-19NucleiExploit code
CVE-2023-29922PowerJob vulnerable to Incorrect Access Control via the create user/save interface5.3v3.13.0%2023-04-19NucleiExploit code
CVE-2023-29921PowerJob incorrect access control vulnerability5.3v3.10.5%2023-04-19
CVE-2023-29586Codesector Teracopy arbitrary file read5.5v3.10.3%2023-04-19
CVE-2023-29527Code injection from account through AWM view sheet in Xwiki platform10.0CNA v3.11.1%2023-04-19Fix
CVE-2023-29526XWiki Platform async and display macros code injection10.0CNA v3.11.1%2023-04-19Fix
CVE-2023-29525XWiki Platform notifications administration endpoint code injection10.0CNA v3.177.8%2023-04-19Fix
CVE-2023-29524Code injection from account through XWiki.SchedulerJobSheet in xwiki-platform10.0CNA v3.175.7%2023-04-19Fix
CVE-2023-29523Code injection in display method used in user profiles in xwiki-platform10.0CNA v3.12.0%2023-04-19Fix
CVE-2023-29522Code injection from view right on XWiki.ClassSheet in xwiki-platform9.9CNA v3.11.9%2023-04-19Fix
CVE-2023-29521Code injection from account/view through VFS Tree macro in xwiki-platform8.4CNA v3.11.1%2023-04-19Fix
CVE-2023-29520Page render failure due to broken translations in xwiki-platform4.3CNA v3.10.5%2023-04-19Fix
CVE-2023-29519xwiki-platform code injection in org.Xwiki.platform:xwiki-platform-attachment-ui9.1CNA v3.11.9%2023-04-19Fix
CVE-2023-29518Code injection from view right using Invitation.InvitationCommon in xwiki-platform9.9CNA v3.11.1%2023-04-19Fix
CVE-2023-29517XWiki Platform office document viewer macro information disclosure7.5CNA v3.11.0%2023-04-19Fix
CVE-2023-29516Code injection from view right on XWiki.AttachmentSelector in xwiki-platform9.9CNA v3.165.9%2023-04-19Fix
CVE-2023-29515Cross-site scripting (XSS) in xwiki-platform7.7CNA v3.10.6%2023-04-19Fix
CVE-2023-29514Code injection in template provider administration in xwiki-platform10.0CNA v3.11.9%2023-04-19Fix
CVE-2023-29513XWiki Platform firstadminuser.wiki template improper access control5.0CNA v3.10.7%2023-04-19Fix
CVE-2023-29512xwiki-platform code injection in xwiki-platform-web-templates9.9CNA v3.11.1%2023-04-19Fix
CVE-2023-29510Code injection via unescaped translations in xwiki-platform10.0CNA v3.11.9%2023-04-19Fix
CVE-2023-28328Linux kernel null pointer dereference5.5NVD v3.10.2%2023-04-19Fix
CVE-2023-28327Linux kernel null pointer dereference5.5NVD v3.10.2%2023-04-19Fix
CVE-2023-28124UI Desktop inadequate encryption strength5.5v3.10.1%2023-04-19Fix
CVE-2023-28123UI Desktop incorrect permission assignment5.5v3.10.2%2023-04-19Fix
CVE-2023-28122UI Desktop A local privilege escalation7.8v3.10.2%2023-04-19Fix
CVE-2023-27777Online Jewelry Shop cross-site scripting5.4v3.10.4%2023-04-19
CVE-2023-27776Online Jewelry Shop /index.php?page=category_list stored cross-site scripting5.4v3.10.5%2023-04-19
CVE-2023-27043Python improper syntax validation5.3v3.12.5%2023-04-19Fix
CVE-2023-26599Uniguest Tripleplay TripleSign cross-site scripting6.1v3.10.4%2023-04-19Fix
CVE-2023-25760Uniguest Tripleplay insufficiently protected credentials8.8v3.10.6%2023-04-19Fix
CVE-2023-25759Uniguest Tripleplay TripleData Reporting Engine OS command injection5.4v3.10.8%2023-04-19Fix
CVE-2023-25620Schneider Electric Modicon M340 CPU improper check for exceptional conditions6.5CNA v3.10.6%2023-04-19Fix
CVE-2023-25619Schneider Electric Modicon M340 CPU improper check for exceptional conditions7.5CNA v3.10.6%2023-04-19Fix
CVE-2023-23451The Flexi Classic and Flexi Soft Gateways SICK UE410-EN3 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN1 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN3S04 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firm9.8v3.10.6%2023-04-19Fix
CVE-2023-22894Strapi cleartext storage of sensitive information4.9NVD v3.13.6%2023-04-19KEVExploit codeKCVFix
CVE-2023-22893Strapi does not verify the access or ID tokens issued during the OAuth flow7.5v3.14.2%2023-04-19NucleiFix
CVE-2023-22645Linux Foundation kubewarden-controller SUSE improper privilege management8.0CNA v3.10.5%2023-04-19Fix
CVE-2023-22621strapi server-side template injection7.2NVD v3.170.6%2023-04-19Reported exploitedNucleiExploit codeKCVFix
CVE-2023-21100Android inflate.c out-of-bounds write7.8v3.10.1%2023-04-19Fix
CVE-2023-21099Android PackageInstallerSession.java privilege escalation7.8v3.10.1%2023-04-19Fix
CVE-2023-21098Android AccountManagerService.java privilege escalation7.8v3.10.1%2023-04-19Fix
CVE-2023-21097Android Intent.java privilege escalation7.8v3.10.2%2023-04-19Exploit codeFix
CVE-2023-21096Android use-after-free9.8v3.10.5%2023-04-19Fix
CVE-2023-21094Android LayerState.cpp privilege escalation7.8v3.10.2%2023-04-19Exploit codeFix
CVE-2023-21093Android FileUtils.java privilege escalation7.8v3.10.1%2023-04-19Fix
CVE-2023-21092Android ActiveServices.java privilege escalation7.8v3.10.1%2023-04-19Fix
CVE-2023-21091Android AppLocalePickerActivity.java denial of service5.5v3.10.1%2023-04-19Fix
CVE-2023-21090Android ParsingPackageUtils.java denial of service5.0v3.10.1%2023-04-19Fix
CVE-2023-21089Android ActivityManagerService.java privilege escalation7.8v3.10.1%2023-04-19Fix
CVE-2023-21088Android LocationProviderManager.java privilege escalation7.8v3.10.1%2023-04-19Fix
CVE-2023-21087Android uncaught exception5.5v3.10.1%2023-04-19Fix
CVE-2023-21086Android SecureNfcPreferenceController.java privilege escalation7.8v3.10.2%2023-04-19Exploit codeFix
CVE-2023-21085Android nci_hmsgs.cc out-of-bounds write8.8v3.10.2%2023-04-19Fix
CVE-2023-21084Android filesystem.go privilege escalation6.7v3.10.1%2023-04-19Fix
CVE-2023-21083Android CallScreeningServiceHelper.java privilege escalation7.8v3.10.1%2023-04-19Fix
CVE-2023-21082Android NewOutgoingCallIntentBroadcaster.java information disclosure5.5v3.10.1%2023-04-19Fix
CVE-2023-21081Android PackageInstallerService.java privilege escalation7.8v3.10.1%2023-04-19Fix
CVE-2023-21080Android btif_rc.cc out-of-bounds read5.5v3.10.1%2023-04-19Fix
CVE-2023-20967Android avdt_scb_act.cc out-of-bounds write7.8v3.10.1%2023-04-19Fix
CVE-2023-20950Android AlarmManagerActivity.java privilege escalation7.8v3.10.1%2023-04-19Fix
CVE-2023-20941Android f_accessory.c out-of-bounds write6.6v3.10.2%2023-04-19Fix
CVE-2023-20935Android multiple files out-of-bounds read5.5v3.10.1%2023-04-19Fix
CVE-2023-20909Android RunningTasks.java privilege escalation5.5v3.10.2%2023-04-19Exploit codeFix
CVE-2023-20862Spring Security logout not clearing security context6.3v3.10.6%2023-04-19Fix
CVE-2023-2170TaxoPress WordPress plugin authenticated (Editor+) stored cross-site scripting4.8v3.10.5%2023-04-19Fix
CVE-2023-2169TaxoPress WordPress plugin authenticated (Editor+) stored cross-site scripting4.8v3.10.5%2023-04-19Fix
CVE-2023-2168TaxoPress WordPress plugin authenticated (Editor+) stored cross-site scripting4.8v3.10.5%2023-04-19Fix
CVE-2023-2166Linux can protocol in net/can/af_can.c in the null pointer dereference5.5NVD v3.10.2%2023-04-19Fix
CVE-2023-2162kernel use-after-free5.5NVD v3.10.2%2023-04-19Fix
CVE-2023-2137Google Chrome sqlite heap-based buffer overflow8.8v3.11.1%2023-04-19Fix
CVE-2023-2136Google Chrome Skia integer overflow9.6v3.15.7%2023-04-19KEVFix
CVE-2023-2135Google Chrome DevTools use-after-free7.5v3.11.0%2023-04-19Fix
CVE-2023-2134Google Chrome Service Worker API out-of-bounds access8.8v3.11.1%2023-04-19Fix
CVE-2023-2133Google Chrome Service Worker API out-of-bounds access8.8v3.11.1%2023-04-19Fix
CVE-2023-1900Avira Antivirus integer overflow5.5NVD v3.10.3%2023-04-19Fix
CVE-2023-1587AVG Antivirus null pointer dereference5.5v3.10.2%2023-04-19
CVE-2023-1586AVG Antivirus time-of-check time-of-use race condition4.7v3.10.2%2023-04-19
CVE-2023-1585AVG Antivirus time-of-check time-of-use race condition6.3v3.10.2%2023-04-19
CVE-2023-1382Linux kernel A race condition4.7NVD v3.10.2%2023-04-19Fix
CVE-2023-0317GateManager debug interface is included in non-debug builds4.9CNA v3.10.5%2023-04-19Fix
CVE-2023-30608Parser contains an inefficient regular expression in sqlparse5.5CNA v3.11.0%2023-04-18Fix
CVE-2023-30606Multisite denial of service through unsanitized dynamic dispatch to SiteSetting in Discourse4.2CNA v3.10.4%2023-04-18Fix
CVE-2023-30538Stored cross-site scripting via improper sanitization of svg files in Discourse5.4CNA v3.10.4%2023-04-18Fix
CVE-2023-29887Nuovo Spreadsheet-reader test.php local file inclusion7.5v3.14.7%2023-04-18Nuclei
CVE-2023-29855WBCE_CMS command injection7.2v3.11.2%2023-04-18
CVE-2023-29854Dircms cross-site scripting6.1v3.10.4%2023-04-18
CVE-2023-29774iteachyou Dreamer CMS cross-site scripting5.4v3.10.3%2023-04-18
CVE-2023-29413Schneider Electric APC Easy UPS Online Monitoring Software missing authentication7.5CNA v3.10.7%2023-04-18Fix
CVE-2023-29412Schneider Electric APC Easy UPS Online Monitoring Software OS command injection9.8CNA v3.11.2%2023-04-18Fix
CVE-2023-29411Schneider Electric APC Easy UPS Online Monitoring Software missing authentication9.8CNA v3.11.3%2023-04-18Fix
CVE-2023-29410Schneider Electric InsightHome improper input validation7.2CNA v3.10.7%2023-04-18Fix
CVE-2023-29196HTML injection via topic embedding in Discourse4.2CNA v3.10.3%2023-04-18Fix
CVE-2023-29002Debug mode leaks confidential data in Cilium7.2CNA v3.10.2%2023-04-18Fix
CVE-2023-28863AMI MegaRAC_SPx insufficient verification of data authenticity9.1v3.10.4%2023-04-18Fix
CVE-2023-28856redis `HINCRBYFLOAT` can be used to crash a redis-server process5.5CNA v3.11.3%2023-04-18Fix
CVE-2023-28839Improper neutralization in an SQL query in Shoppingfeed9.4CNA v3.10.8%2023-04-18Fix
CVE-2023-28440Denial of service via admin theme import route in Discourse2.7CNA v3.10.7%2023-04-18Fix
CVE-2023-28143Qualys Cloud Agent local privilege escalation6.7CNA v3.10.2%2023-04-18Fix
CVE-2023-28142Qualys Cloud Agent race condition6.7CNA v3.10.1%2023-04-18Fix
CVE-2023-28141Qualys Cloud Agent NTFS Junction6.7CNA v3.10.2%2023-04-18Fix
CVE-2023-28140Qualys Cloud Agent executable Hijacking6.7CNA v3.10.2%2023-04-18Fix
CVE-2023-28004Schneider Electric PowerLogic HDPM6000 improper array index validation9.8CNA v3.11.1%2023-04-18Fix
CVE-2023-28003Schneider Electric EcoStruxure Power Monitoring Expert insufficient session expiration6.7CNA v3.10.3%2023-04-18Fix
CVE-2023-27976Schneider Electric EcoStruxure Control Expert resource exposure8.8CNA v3.10.8%2023-04-18Fix
CVE-2023-27092Jbootfly cross-site scripting6.1v3.10.4%2023-04-18
CVE-2023-26049Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty2.4CNA v3.11.3%2023-04-18Fix
CVE-2023-26048OutOfMemoryError for large multipart without filename in Eclipse Jetty5.3CNA v3.13.4%2023-04-18Fix
CVE-2023-25556Schneider Electric Merten INSTABUS Tastermodul 1fach System M 625199 improper authentication8.3CNA v3.10.4%2023-04-18
CVE-2023-25555Schneider Electric StruxureWare Data Center Expert OS command injection5.6CNA v3.10.8%2023-04-18Fix
CVE-2023-25554Schneider Electric StruxureWare Data Center Expert OS command injection7.8CNA v3.10.6%2023-04-18Fix
CVE-2023-25553Schneider Electric StruxureWare Data Center Expert cross-site scripting6.1CNA v3.10.4%2023-04-18Fix
CVE-2023-25552Schneider Electric StruxureWare Data Center Expert missing authorization8.1CNA v3.10.5%2023-04-18Fix
CVE-2023-25551Schneider Electric StruxureWare Data Center Expert cross-site scripting6.1CNA v3.10.4%2023-04-18Fix
CVE-2023-25550Schneider Electric StruxureWare Data Center Expert code injection7.2CNA v3.11.2%2023-04-18Fix
CVE-2023-25549Schneider Electric StruxureWare Data Center Expert code injection7.2CNA v3.11.2%2023-04-18Fix
CVE-2023-25548Schneider Electric StruxureWare Data Center Expert incorrect authorization8.8CNA v3.10.5%2023-04-18Fix
CVE-2023-25547Schneider Electric StruxureWare Data Center Expert incorrect authorization8.8CNA v3.10.9%2023-04-18Fix
CVE-2023-22307Tribe29 Checkmk Appliance Site-Passwords in GET parameters5.5v3.10.2%2023-04-18Fix
CVE-2023-22294Privilege escalation in Checkmk Appliance8.8v3.10.7%2023-04-18Fix
CVE-2023-22003Oracle Solaris utility component unauthorized data modification3.3CNA v3.10.2%2023-04-18Fix
CVE-2023-22002Oracle VM VirtualBox Core component unauthorized data access6.0CNA v3.10.3%2023-04-18Fix
CVE-2023-22001Oracle VM VirtualBox Core component unauthorized data modification4.6CNA v3.10.3%2023-04-18Fix
CVE-2023-22000Oracle VM VirtualBox Core component unauthorized data modification4.6CNA v3.10.3%2023-04-18Fix
CVE-2023-21999Oracle VM VirtualBox Core component unauthorized data modification3.6CNA v3.10.3%2023-04-18Fix
CVE-2023-21998Oracle VM VirtualBox Core component unauthorized data modification4.6CNA v3.10.3%2023-04-18Fix
CVE-2023-21997Oracle E-Business Suite User Management Proxy User Delegation component information disclosure4.3CNA v3.10.5%2023-04-18Fix
CVE-2023-21996Oracle WebLogic Server Web services component denial of service7.5CNA v3.10.8%2023-04-18Fix
CVE-2023-21993Oracle Clinical Remote Data Capture forms component unauthorized data access6.5CNA v3.10.6%2023-04-18Fix
CVE-2023-21992Oracle PeopleSoft Enterprise HCM Human Resources unauthorized data modification5.4CNA v3.10.4%2023-04-18Fix
CVE-2023-21991Oracle VM VirtualBox Core component information disclosure3.2CNA v3.10.3%2023-04-18Fix
CVE-2023-21990Oracle VM VirtualBox Core component takeover8.2CNA v3.10.3%2023-04-18Fix
CVE-2023-21989Oracle VM VirtualBox Core component unauthorized data access6.0CNA v3.10.3%2023-04-18Fix
CVE-2023-21988Oracle VM VirtualBox Core component information disclosure3.8CNA v3.10.3%2023-04-18Fix
CVE-2023-21987Oracle VM VirtualBox Core component takeover7.8CNA v3.10.7%2023-04-18Exploit codeFix
CVE-2023-21986Oracle GraalVM Enterprise Edition Native Image component unauthorized data modification5.7CNA v3.10.3%2023-04-18Fix
CVE-2023-21985Oracle Solaris utility component takeover7.7CNA v3.10.2%2023-04-18Fix
CVE-2023-21984Oracle Solaris Libraries component denial of service6.5CNA v3.10.7%2023-04-18Fix
CVE-2023-21982Oracle MySQL Server Optimizer component denial of service4.9CNA v3.11.1%2023-04-18Fix
CVE-2023-21981Oracle PeopleSoft Enterprise PeopleTools Elastic Search component unauthorized data access4.9CNA v3.10.6%2023-04-18Fix
CVE-2023-21980Oracle MySQL Server client programs component takeover7.1CNA v3.10.8%2023-04-18Fix
CVE-2023-21979Oracle WebLogic Server Core component unauthorized data access7.5CNA v3.10.6%2023-04-18Fix
CVE-2023-21978Oracle E-Business Suite Application Object Library GUI component unauthorized data modification6.5CNA v3.10.4%2023-04-18Fix
CVE-2023-21977Oracle MySQL Server Optimizer component denial of service4.9CNA v3.11.1%2023-04-18Fix
CVE-2023-21976Oracle MySQL Server Optimizer component denial of service4.9CNA v3.11.1%2023-04-18Fix
CVE-2023-21973Oracle E-Business Suite iProcurement unauthorized data modification5.4CNA v3.10.4%2023-04-18Fix
CVE-2023-21972Oracle MySQL Server DML component denial of service4.9CNA v3.11.1%2023-04-18Fix
CVE-2023-21971Oracle MySQL Connectors Connector/J component unauthorized data modification5.3CNA v3.11.5%2023-04-18Fix
CVE-2023-21970Oracle BI Publisher Security component unauthorized data access5.7CNA v3.10.6%2023-04-18Fix
CVE-2023-21969Oracle SQL Developer takeover6.7CNA v3.10.2%2023-04-18Fix
CVE-2023-21968Oracle Java SE, Oracle GraalVM Enterprise Edition Libraries component unauthorized data modification3.7CNA v3.11.0%2023-04-18Fix
CVE-2023-21967Oracle Java SE, Oracle GraalVM Enterprise Edition JSSE component denial of service5.9CNA v3.11.5%2023-04-18Fix
CVE-2023-21966Oracle MySQL Server JSON component denial of service4.9CNA v3.11.1%2023-04-18Fix
CVE-2023-21965Oracle Business Intelligence Enterprise Edition Analytics Server component unauthorized data access5.7CNA v3.10.6%2023-04-18Fix
CVE-2023-21964Oracle WebLogic Server Core component denial of service7.5CNA v3.10.8%2023-04-18Fix
CVE-2023-21963Oracle MySQL Server Connection Handling component denial of service2.7CNA v3.11.0%2023-04-18Fix
CVE-2023-21962Oracle MySQL Server components services component denial of service4.9CNA v3.11.4%2023-04-18Fix
CVE-2023-21960Oracle WebLogic Server Core component unauthorized data modification5.6CNA v3.10.4%2023-04-18Fix
CVE-2023-21959Oracle E-Business Suite iReceivables Attachments component information disclosure4.3CNA v3.10.5%2023-04-18Fix
CVE-2023-21956Oracle WebLogic Server Web Container component unauthorized data modification6.1CNA v3.10.4%2023-04-18Fix
CVE-2023-21955Oracle MySQL Server Partition component denial of service4.9CNA v3.11.4%2023-04-18Fix
CVE-2023-21954Oracle Java SE, Oracle GraalVM Enterprise Edition Hotspot component unauthorized data access5.9CNA v3.11.4%2023-04-18Fix
CVE-2023-21953Oracle MySQL Server Partition component denial of service4.9CNA v3.11.5%2023-04-18Fix
CVE-2023-21952Oracle Business Intelligence Enterprise Edition Analytics Server component unauthorized data access5.7CNA v3.10.6%2023-04-18Fix
CVE-2023-21948Oracle Solaris Core component takeover7.8CNA v3.10.2%2023-04-18Fix
CVE-2023-21947Oracle MySQL Server components services component denial of service4.4CNA v3.11.4%2023-04-18Fix
CVE-2023-21946Oracle MySQL Server Optimizer component denial of service6.5CNA v3.11.5%2023-04-18Fix
CVE-2023-21945Oracle MySQL Server Optimizer component denial of service4.9CNA v3.11.4%2023-04-18Fix
CVE-2023-21944Oracle Hyperion Essbase unauthorized access5.3CNA v3.10.5%2023-04-18Fix
CVE-2023-21943Oracle Hyperion Essbase unauthorized access5.3CNA v3.10.5%2023-04-18Fix
CVE-2023-21942Oracle Hyperion Essbase unauthorized access5.3CNA v3.10.5%2023-04-18Fix
CVE-2023-21941Oracle BI Publisher Web Server component information disclosure4.3CNA v3.10.5%2023-04-18Fix
CVE-2023-21940Oracle MySQL Server components services component denial of service4.4CNA v3.11.3%2023-04-18Fix
CVE-2023-21939Oracle Java SE, Oracle GraalVM Enterprise Edition Swing component unauthorized data modification5.3CNA v3.12.5%2023-04-18Exploit codeFix
CVE-2023-21938Oracle Java SE, Oracle GraalVM Enterprise Edition Libraries component unauthorized data modification3.7CNA v3.11.2%2023-04-18Fix
CVE-2023-21937Oracle Java SE, Oracle GraalVM Enterprise Edition unauthorized data modification3.7CNA v3.11.2%2023-04-18Fix
CVE-2023-21936Oracle JD Edwards EnterpriseOne Tools Web Runtime SEC component unauthorized data modification5.4CNA v3.10.4%2023-04-18Fix
CVE-2023-21935Oracle MySQL Server Optimizer component denial of service4.9CNA v3.11.4%2023-04-18Fix
CVE-2023-21934Oracle Database Java VM improper access control6.8CNA v3.10.5%2023-04-18Fix
CVE-2023-21933Oracle MySQL Server DDL component denial of service4.9CNA v3.11.4%2023-04-18Fix
CVE-2023-21932Oracle Hospitality OPERA 5 Property Services OXI component unauthorized data access7.2CNA v3.145.0%2023-04-18Emerging ThreatsFix
CVE-2023-21931Oracle WebLogic Server Core component unauthorized data access7.5CNA v3.182.3%2023-04-18Exploit codeFix
CVE-2023-21930Oracle Java SE, Oracle GraalVM Enterprise Edition JSSE component unauthorized data access7.4CNA v3.11.3%2023-04-18Fix
CVE-2023-21929Oracle MySQL Server DDL component unauthorized data modification5.5CNA v3.11.3%2023-04-18Fix
CVE-2023-21928Oracle Solaris IPS repository daemon component unauthorized data modification1.8CNA v3.10.2%2023-04-18Fix
CVE-2023-21927Oracle JD Edwards EnterpriseOne Tools Interoperability SEC component information disclosure4.3CNA v3.10.5%2023-04-18Fix
CVE-2023-21926Oracle Health Sciences InForm Core component unauthorized data access5.5CNA v3.10.2%2023-04-18Fix
CVE-2023-21925Oracle Health Sciences InForm Core component denial of service5.3CNA v3.10.6%2023-04-18Fix
CVE-2023-21924Oracle Health Sciences InForm Core component unauthorized data modification5.9CNA v3.10.4%2023-04-18Fix
CVE-2023-21923Oracle Health Sciences InForm Core component unauthorized data access8.3CNA v3.10.6%2023-04-18Fix
CVE-2023-21922Oracle Health Sciences InForm Core component unauthorized data access6.8CNA v3.10.5%2023-04-18Fix
CVE-2023-21921Oracle Health Sciences InForm Core component unauthorized data modification5.4CNA v3.10.4%2023-04-18Fix
CVE-2023-21920Oracle MySQL Server Optimizer component denial of service4.9CNA v3.11.5%2023-04-18Fix
CVE-2023-21919Oracle MySQL Server DDL component denial of service4.9CNA v3.11.5%2023-04-18Fix
CVE-2023-21918Oracle Database Recovery Manager denial of service6.8CNA v3.10.7%2023-04-18Fix
CVE-2023-21917Oracle MySQL Server Optimizer component denial of service4.9CNA v3.11.1%2023-04-18Fix
CVE-2023-21916Oracle PeopleSoft Enterprise PeopleTools Web Server component information disclosure5.3CNA v3.10.5%2023-04-18Fix
CVE-2023-21915Oracle Financial Services Applications Banking Payments unauthorized data modification4.6CNA v3.10.4%2023-04-18Fix
CVE-2023-21913Oracle MySQL Server Optimizer component denial of service4.9CNA v3.11.1%2023-04-18Fix
CVE-2023-21912Oracle MySQL Server Security Privileges component denial of service7.5CNA v3.11.2%2023-04-18Fix
CVE-2023-21911Oracle MySQL Server InnoDB component denial of service4.9CNA v3.11.4%2023-04-18Fix
CVE-2023-21910Oracle Business Intelligence Enterprise Edition unauthorized data access6.5CNA v3.10.6%2023-04-18Fix
CVE-2023-21909Oracle Siebel CRM UI Framework component unauthorized data access6.5CNA v3.10.6%2023-04-18Fix
CVE-2023-21908Oracle Banking Virtual Account Management unauthorized data access6.0CNA v3.10.4%2023-04-18Fix
CVE-2023-21907Oracle Banking Virtual Account Management unauthorized data access6.0CNA v3.10.4%2023-04-18Fix
CVE-2023-21906Oracle Banking Virtual Account Management SMS module component unauthorized data access6.1CNA v3.10.6%2023-04-18Fix
CVE-2023-21905Oracle Banking Virtual Account Management Routing Hub component unauthorized data access6.1CNA v3.10.6%2023-04-18Fix
CVE-2023-21904Oracle Banking Virtual Account Management unauthorized data access5.3CNA v3.10.4%2023-04-18Fix
CVE-2023-21903Oracle Banking Virtual Account Management unauthorized data access5.3CNA v3.10.4%2023-04-18Fix
CVE-2023-21902Oracle Financial Services Behavior Detection Platform application component information disclosure4.3CNA v3.10.5%2023-04-18Fix
CVE-2023-21896Oracle Solaris NSSwitch component takeover7.0CNA v3.10.2%2023-04-18Fix
CVE-2023-2160Weak password requirements in modoboa/modoboa9.8v3.10.6%2023-04-18Fix
CVE-2023-2155SourceCodester Air Cargo Management System cross-site scripting4.8v3.10.6%2023-04-18
CVE-2023-2154SourceCodester Task Reminder System SQL injection7.2v3.10.7%2023-04-18
CVE-2023-2153SourceCodester Complaint Management System POST parameter editable_ajax.php cross-site scripting6.1v3.10.6%2023-04-18
CVE-2023-2152SourceCodester Student Study Center Desk Management System index.php file inclusion9.8v3.11.2%2023-04-18
CVE-2023-2151SourceCodester Student Study Center Desk Management System manage_student.php SQL injection9.8v3.10.8%2023-04-18
CVE-2023-2150SourceCodester Task Reminder System Master.php SQL injection7.2v3.10.7%2023-04-18
CVE-2023-2149Campcodes Online Thesis Archiving System manage_user.php SQL injection9.8v3.10.8%2023-04-18
CVE-2023-2148Campcodes Online Thesis Archiving System view_curriculum.php SQL injection9.8v3.10.8%2023-04-18
CVE-2023-2147Campcodes Online Thesis Archiving System view_details.php SQL injection9.8v3.10.8%2023-04-18
CVE-2023-2146Campcodes Online Thesis Archiving System Master.php SQL injection9.8v3.10.8%2023-04-18
CVE-2023-2145Campcodes Online Thesis Archiving System projects_per_curriculum.php SQL injection9.8v3.11.0%2023-04-18
CVE-2023-2144Campcodes Online Thesis Archiving System view_department.php SQL injection9.8v3.11.0%2023-04-18
CVE-2023-2138@nuxtlabs/github-module made use of hard-coded credentials9.8v3.10.7%2023-04-18Fix
CVE-2023-2120Thumbnail carousel slider WordPress plugin reflected cross-site scripting6.1v3.10.6%2023-04-18Fix
CVE-2023-2119Responsive Filterable Portfolio WordPress plugin reflected cross-site scripting6.1v3.10.6%2023-04-18Fix
CVE-2023-2020Tribe29 Checkmk unauthorized scheduling of downtimes via REST API4.3v3.10.4%2023-04-18Fix
CVE-2023-1548Schneider Electric EcoStruxure Control Expert improper privilege management5.5CNA v3.10.1%2023-04-18Fix
CVE-2023-30771Apache IoTDB Workbench: Apache/iotdb-web-workbench: Forge the JWTToken to access workbench9.8v3.11.4%2023-04-17Fix
CVE-2023-30770A stack-based buffer overflow vulnerability was found in the ADM9.8v3.10.6%2023-04-17Fix
CVE-2023-30769Dogecoin Node peer-to-peer network denial of service9.8v3.10.9%2023-04-17Fix
CVE-2023-30548Path traversal vulnerability in Gatsby-plugin-sharp4.3CNA v3.10.9%2023-04-17Fix
CVE-2023-30547Sandbox escape in vm29.8CNA v3.173.0%2023-04-17Exploit codeFix
CVE-2023-30543`chainId` may be outdated if user changes chains as part of connection in @web3-react5.2CNA v3.10.4%2023-04-17Fix
CVE-2023-30541TransparentUpgradeableProxy clashing selector calls may not be delegated in @OpenZeppelin/Contracts5.3CNA v3.10.8%2023-04-17Fix
CVE-2023-30540Chat poll data can still be queried from API after purging history in Nextcloud Talk3.5CNA v3.10.7%2023-04-17Fix
CVE-2023-30539Users can set up workflows using restricted and invisible system tags in Nextcloud6.5CNA v3.10.6%2023-04-17Fix
CVE-2023-30536slimphp Slim-Psr7 insecure header validation in slim/psr76.5CNA v3.10.7%2023-04-17Fix
CVE-2023-29665D-Link DIR-823G out-of-bounds write9.8v3.11.2%2023-04-17
CVE-2023-29213xwiki-platform org.Xwiki.platform:xwiki-platform-logging-ui injection9.1CNA v3.10.4%2023-04-17Fix
CVE-2023-29197Improper header name validation in guzzlehttp/psr75.3CNA v3.11.2%2023-04-17Fix
CVE-2023-29004Path traversal vulnerability in hap-wi/roxy-wi6.5CNA v3.10.9%2023-04-17
CVE-2023-28984Junos OS: QFX Series: The PFE may crash when a lot of MAC addresses are being learned and aged5.3CNA v3.10.2%2023-04-17Fix
CVE-2023-28983Junos OS Evolved: Shell injection vulnerability in the gNOI server8.8CNA v3.11.5%2023-04-17Fix
CVE-2023-28982Juniper Networks Junos OS Evolved memory leak7.5CNA v3.10.6%2023-04-17Fix
CVE-2023-28981Juniper Networks Junos OS Evolved improper input validation6.5CNA v3.10.3%2023-04-17Fix
CVE-2023-28980Juniper Networks Junos OS Evolved use-after-free5.5CNA v3.10.2%2023-04-17Fix
CVE-2023-28979Junos OS: In a 6PE scenario upon receipt of a specific IPv6 packet an integrity check fails4.7CNA v3.10.3%2023-04-17Fix
CVE-2023-28978Junos OS Evolved: Read access to some confidential user information is possible5.3CNA v3.10.5%2023-04-17Fix
CVE-2023-28976Juniper Networks Junos OS packet forwarding engine improper check for exceptional conditions7.5CNA v3.10.6%2023-04-17Fix
CVE-2023-28975Junos OS: The kernel will crash when certain USB devices are inserted4.6CNA v3.10.3%2023-04-17Fix
CVE-2023-28974Juniper Networks Junos OS bbe-smgd improper check for exceptional conditions7.4CNA v3.10.3%2023-04-17Fix
CVE-2023-28973Juniper Networks Junos OS Evolved 'sysmanctl' shell command improper authorization7.1CNA v3.10.1%2023-04-17Fix
CVE-2023-28972Junos OS: NFX Series: Set system ports console insecure allows root password recovery6.8CNA v3.10.4%2023-04-17Fix
CVE-2023-28971Paragon Active Assurance: Enabling the timescaledb enables IP forwarding7.2CNA v3.10.4%2023-04-17Fix
CVE-2023-28970Junos OS: JRR200: Kernel crash upon receipt of a specific packet6.5CNA v3.10.3%2023-04-17Fix
CVE-2023-28968Junos OS: SRX Series: Policies that rely on JDPI-Decoder actions may fail open5.3CNA v3.10.6%2023-04-17Fix
CVE-2023-28967Junos OS and Junos OS Evolved: An attacker sending genuine BGP packets causes an RPD crash7.5CNA v3.10.6%2023-04-17Fix
CVE-2023-28966Junos OS Evolved: Local low-privileged user with shell access can execute CLI commands as root7.8CNA v3.10.2%2023-04-17Fix
CVE-2023-28965Junos OS: QFX10002: Failure of storm control feature may lead to denial of service6.5CNA v3.10.6%2023-04-17Fix
CVE-2023-28964Junos OS and Junos OS Evolved: Malformed BGP flowspec update causes RPD crash7.5CNA v3.10.6%2023-04-17Fix
CVE-2023-28963Junos OS: User-controlled input vulnerability in J-Web5.3CNA v3.10.5%2023-04-17Fix
CVE-2023-28962Junos OS: Unauthenticated access vulnerability in J-Web5.3CNA v3.10.6%2023-04-17Fix
CVE-2023-28961Junos OS: ACX Series: IPv6 firewall filter is not installed in PFE when from next-header ah is used5.8CNA v3.10.4%2023-04-17Fix
CVE-2023-28960Juniper Networks Junos OS Evolved incorrect permission assignment8.2CNA v3.10.2%2023-04-17Fix
CVE-2023-28959Junos OS: QFX10002: PFE wedges and restarts upon receipt of specific malformed packets6.5CNA v3.10.3%2023-04-17Fix
CVE-2023-27911Autodesk FBX-SDK heap-based buffer overflow7.8v3.10.6%2023-04-17Fix
CVE-2023-27910Autodesk FBX-SDK stack-based buffer overflow7.8v3.10.5%2023-04-17Fix
CVE-2023-27909Autodesk FBX-SDK An out-of-bounds write7.8v3.10.5%2023-04-17Fix
CVE-2023-27907Autodesk Maya USD Plugin out-of-bounds write7.8v3.10.3%2023-04-17Fix
CVE-2023-27906Autodesk Maya USD Plugin out-of-bounds read7.8v3.10.3%2023-04-17Fix
CVE-2023-27844Litextension Leurlrewrite PrestaShop SQL injection9.8v3.10.8%2023-04-17Fix
CVE-2023-2775571note Go-bbs unrestricted file upload8.8v3.10.8%2023-04-17
CVE-2023-27733DedeCMS SQL injection7.2v3.10.8%2023-04-17
CVE-2023-27705Apng Optimizer buffer overflow7.5v3.10.8%2023-04-17
CVE-2023-27525Apache Superset: Incorrect default permissions for Gamma role3.1CNA v3.10.8%2023-04-17Fix
CVE-2023-25504Apache Superset: Possible SSRF on import datasets4.9CNA v3.11.0%2023-04-17Fix
CVE-2023-25010Autodesk Maya USD Plugin improper initialization7.8v3.10.3%2023-04-17Fix
CVE-2023-24831Apache IoTDB grafana-connector Login Bypass vulnerability9.8v3.11.2%2023-04-17Fix
CVE-2023-24504Electra Central AC unit update server connection vulnerability6.5NVD v3.10.3%2023-04-17
CVE-2023-24503Electra Smart Kit for Split AC Adjacent attacker may cause the unit to load unauthorized FW6.5NVD v3.10.2%2023-04-17
CVE-2023-24502Electra Central AC unit Easily calculated password6.5NVD v3.10.2%2023-04-17
CVE-2023-24501Electra Central AC unit hard-coded credentials9.8v3.10.6%2023-04-17
CVE-2023-24500Electra Central AC unit Adjacent attacker may cause the unit to load unauthorized FW6.5NVD v3.10.2%2023-04-17
CVE-2023-22946Apache Spark proxy-user privilege escalation from malicious configuration class6.4CNA v3.11.1%2023-04-17Fix
CVE-2023-2130SourceCodester Purchase Order Management System GET parameter view_details.php SQL injection9.8v3.14.1%2023-04-17Nuclei
CVE-2023-2109Cross-site scripting (XSS) DOM in chatwoot/chatwoot6.1v3.10.4%2023-04-17Fix
CVE-2023-2017Improper control of generation of code in Twig Rendered Views in Shopware8.8v3.12.1%2023-04-17Fix
CVE-2023-1873Faturamatik Bircard SQL command improper neutralization9.8CNA v3.10.7%2023-04-17Fix
CVE-2023-1831Mattermost user password logged in audit logs7.2CNA v3.10.4%2023-04-17Fix
CVE-2023-1723SQLi in Veragroup Mobile Assistant9.8CNA v3.10.6%2023-04-17Fix
CVE-2023-1697Juniper Networks Junos OS Packet Forwarding Engine denial of service6.5CNA v3.10.3%2023-04-17Fix
CVE-2023-1473Slider WordPress plugin Responsive WordPress Slideshows reflected XSS6.1NVD v3.10.5%2023-04-17Fix
CVE-2023-1427Photo Gallery by 10Web WordPress plugin Admin+ path traversal4.9NVD v3.10.8%2023-04-17Fix
CVE-2023-1413WP VR WordPress plugin reflected XSS6.1NVD v3.10.5%2023-04-17Fix
CVE-2023-1373W4 Post List WordPress plugin reflected XSS6.1NVD v3.10.5%2023-04-17Fix
CVE-2023-1371W4 Post List WordPress plugin Subscriber+ password Protected post content disclosure6.5NVD v3.10.7%2023-04-17Fix
CVE-2023-1331Redirection WordPress plugin plugin reset via CSRF6.5NVD v3.10.3%2023-04-17Fix
CVE-2023-1325Easy Forms for MailChimp WordPress plugin Contributor+ stored XSS5.4NVD v3.10.5%2023-04-17Fix
CVE-2023-1282Drag and Drop Multiple File Upload PRO reflected cross-site scripting6.1NVD v3.10.5%2023-04-17Fix
CVE-2023-1274Pricing Tables For WPBakery Page Builder WordPress plugin Subscriber+ LFI6.5NVD v3.10.9%2023-04-17Fix
CVE-2023-1109Phoenix Contact: Directory traversal vulnerability in Energy Axc Pu Web service8.8CNA v3.10.8%2023-04-17Fix
CVE-2023-0889TF Random Numbers WordPress plugin Subscriber+ arbitrary option update6.5NVD v3.10.3%2023-04-17Fix
CVE-2023-0765Gallery by BestWebSoft WordPress plugin Author+ SQL injection8.8NVD v3.10.9%2023-04-17Fix
CVE-2023-0764Gallery by BestWebSoft WordPress plugin Author+ stored cross-site scripting5.4NVD v3.10.4%2023-04-17Fix
CVE-2023-0374W4 Post List WordPress plugin Contributor+ stored XSS5.4NVD v3.10.4%2023-04-17Fix
CVE-2023-0367Pricing Tables For WPBakery Page Builder WordPress plugin Contributor+ stored XSS5.4NVD v3.10.4%2023-04-17Fix
CVE-2023-0277WC Fields Factory WordPress plugin ShopManager+ SQLi7.2NVD v3.10.9%2023-04-17Fix
CVE-2023-30772Linux kernel use-after-free6.4v3.10.5%2023-04-16Fix
CVE-2023-30542openzeppelin-contracts GovernorCompatibilityBravo may trim proposal calldata6.8CNA v3.10.6%2023-04-16Fix
CVE-2023-30537XWiki Platform Flamingo theme styles page eval injection9.9CNA v3.11.0%2023-04-16Fix
CVE-2023-30474Ultimate Noindex Nofollow Tool II WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-04-16Fix
CVE-2023-29511xwiki-platform xwiki-platform-administration-ui vulnerable to privilege escalation9.9CNA v3.11.0%2023-04-16Fix
CVE-2023-29509xwiki-platform org.Xwiki.platform:xwiki-platform-flamingo-theme-ui eval injection10.0CNA v3.175.7%2023-04-16Fix
CVE-2023-29508xwiki-platform org.Xwiki.platform:xwiki-platform-livedata-macro vulnerable to cross-site scripting8.9CNA v3.10.4%2023-04-16Fix
CVE-2023-29507XWiki Platform document script API incorrect use of privileged apis9.1CNA v3.10.9%2023-04-16Fix
CVE-2023-29506XWiki Platform authentication endpoint URLs cross-site scripting5.4CNA v3.11.7%2023-04-16NucleiFix
CVE-2023-29214xwiki-platform org.Xwiki.platform:xwiki-platform-panels-ui eval injection10.0CNA v3.11.2%2023-04-16Fix
CVE-2023-29212xwiki-platform xwiki.platform:xwiki-platform-panels-ui eval injection10.0CNA v3.11.2%2023-04-16Fix
CVE-2023-29211xwiki-platform org.Xwiki.platform:xwiki-platform-wiki-ui-mainwiki eval injection10.0CNA v3.11.2%2023-04-16Fix
CVE-2023-27610Transbank Webpay REST WordPress plugin SQL injection7.2v3.10.7%2023-04-16Fix
CVE-2023-22687Freesoul Deactivate Plugins Plugin manager and cleanup WordPress plugin sensitive data exposure7.5v3.10.5%2023-04-16Fix
CVE-2023-2108SourceCodester Judging Management System edit_contestant.php SQL injection9.8v3.10.6%2023-04-16
CVE-2023-29210xwiki-platform org.Xwiki.platform:xwiki-platform-notifications-ui eval injection10.0CNA v3.11.2%2023-04-15Fix
CVE-2023-29209xwiki-platform org.Xwiki.platform:xwiki-platform-legacy-notification-activitymacro eval injection10.0CNA v3.11.1%2023-04-15Fix
CVE-2023-29208xwiki-platform data leak through deleted documents7.5CNA v3.10.9%2023-04-15Fix
CVE-2023-29207xwiki-platform improper neutralization of Script-Related HTML Tags (XSS) in the LiveTable Macro8.9CNA v3.11.4%2023-04-15Fix
CVE-2023-29206XWiki Platform JSX and SSX skin extensions cross-site scripting9.1CNA v3.11.0%2023-04-15Fix
CVE-2023-29205xwiki-platform cross-site scripting10.0CNA v3.10.6%2023-04-15Fix
CVE-2023-29204xwiki-platform URL redirection to untrusted site in org.Xwiki.platform:xwiki-platform-oldcore4.7CNA v3.11.8%2023-04-15NucleiFix
CVE-2023-29203XWiki Commons uorgsuggest user suggestion script information disclosure3.7CNA v3.10.7%2023-04-15Fix
CVE-2023-29202xwiki-platform org.Xwiki.platform:xwiki-platform-rendering-macro-rss cross-site scripting9.1CNA v3.11.4%2023-04-15Fix
CVE-2023-29201xwiki-commons org.Xwiki.commons:xwiki-commons-xml cross-site scripting9.1CNA v3.11.2%2023-04-15Fix
CVE-2023-27572CommScope DG3450 cross-site scripting6.1v3.10.8%2023-04-15
CVE-2023-27571CommScope DG3450 missing authentication5.3v3.10.9%2023-04-15
CVE-2023-26463strongSwan improper certificate validation9.8v3.12.3%2023-04-15Fix
CVE-2023-24607Qt denial of service7.5v3.11.3%2023-04-15Fix
CVE-2023-22670Opendesign Drawings SDK heap-based buffer overflow7.8v3.10.2%2023-04-15Fix
CVE-2023-22669Opendesign Drawings SDK out-of-bounds write7.8v3.10.3%2023-04-15Fix
CVE-2023-2107IBOS del&op=recycle SQL injection9.8v3.10.7%2023-04-15
CVE-2023-2106Weak password requirements in janeczku/Calibre-Web9.8v3.10.7%2023-04-15Fix
CVE-2023-2105Session fixation in alextselegidis/easyappointments8.8v3.10.7%2023-04-15Fix
CVE-2023-2104Improper access control in alextselegidis/easyappointments5.4v3.10.4%2023-04-15Fix
CVE-2023-2103Cross-site scripting (XSS) Stored in alextselegidis/easyappointments5.4v3.10.5%2023-04-15Fix
CVE-2023-2102Cross-site scripting (XSS) Stored in alextselegidis/easyappointments4.8v3.10.5%2023-04-15Fix
CVE-2023-2101moxi624 Mogu Blog v2 uploadPicsByUrl uploadPictureByUrl absolute path traversal6.5v3.10.8%2023-04-15
CVE-2023-2100SourceCodester Vehicle Service Management System index.php cross-site scripting6.1v3.10.6%2023-04-15
CVE-2023-2099SourceCodester Vehicle Service Management System Users.php cross-site scripting6.1v3.10.7%2023-04-15
CVE-2023-2098SourceCodester Vehicle Service Management System topBarNav.php cross-site scripting6.1v3.10.6%2023-04-15
CVE-2023-2097SourceCodester Vehicle Service Management System Master.php SQL injection9.8v3.10.8%2023-04-15
CVE-2023-2096SourceCodester Vehicle Service Management System manage_inventory.php SQL injection9.8v3.10.7%2023-04-15
CVE-2023-2095SourceCodester Vehicle Service Management System manage_category.php SQL injection9.8v3.10.7%2023-04-15
CVE-2023-2094SourceCodester Vehicle Service Management System manage_mechanic.php SQL injection9.8NVD v3.10.8%2023-04-15
CVE-2023-2093SourceCodester Vehicle Service Management System Login.php SQL injection9.8v3.10.7%2023-04-15
CVE-2023-2092SourceCodester Vehicle Service Management System view_service.php SQL injection9.8v3.10.7%2023-04-15
CVE-2023-2091KylinSoft youker-assistant adjust_cpufreq_scaling_governer os command injection7.8v3.11.5%2023-04-15Fix
CVE-2023-2090SourceCodester Employee and Visitor Gate Pass Logging System view_designation.php SQL injection8.8v3.10.7%2023-04-15
CVE-2023-2089SourceCodester Complaint Management System GET parameter userprofile.php SQL injection8.8v3.10.6%2023-04-15
CVE-2023-2027ZM Ajax Login and Register WordPress plugin authentication bypass9.8v3.11.0%2023-04-15
CVE-2023-30638Atos Unify Openscape Bcf command injection7.2v3.11.0%2023-04-14Fix
CVE-2023-30535Snowflake JDBC vulnerable to command injection via SSO URL authentication7.3CNA v3.11.7%2023-04-14Fix
CVE-2023-30459Smartptt SCADA remote code execution7.2v3.12.1%2023-04-14Exploit code
CVE-2023-29850SLIMS Senayan Library Management System observable discrepancy7.5v3.10.7%2023-04-14
CVE-2023-29847Aero CMS cross-site scripting5.4v3.10.4%2023-04-14
CVE-2023-29805Iodata Wfs-sr03k OS command injection9.8v3.12.4%2023-04-14
CVE-2023-29804Iodata Wfs-sr03k OS command injection8.8v3.117.5%2023-04-14
CVE-2023-29803TOTOLINK X18 command injection9.8v3.12.1%2023-04-14Emerging Threats
CVE-2023-29802TOTOLINK X18 command injection9.8v3.12.0%2023-04-14
CVE-2023-29801TOTOLINK X18 command injection9.8v3.12.0%2023-04-14
CVE-2023-29800TOTOLINK X18 command injection9.8v3.12.0%2023-04-14
CVE-2023-29799TOTOLINK X18 command injection9.8v3.12.0%2023-04-14
CVE-2023-29798TOTOLINK X18 command injection9.8v3.12.0%2023-04-14
CVE-2023-29627Online Pizza Ordering unrestricted file upload8.8v3.11.0%2023-04-14
CVE-2023-29626Yoga Class Registration System SQL injection7.5v3.10.7%2023-04-14
CVE-2023-29625Employee Performance Evaluation System unrestricted file upload8.8v3.11.0%2023-04-14
CVE-2023-29623Purchase ORDER Management cross-site scripting6.1v3.11.3%2023-04-14Nuclei
CVE-2023-29622Purchase ORDER Management SQL injection9.8v3.11.7%2023-04-14
CVE-2023-29621Purchase ORDER Management unrestricted file upload8.8v3.11.0%2023-04-14
CVE-2023-29584MP4v2 out-of-bounds write8.8v3.10.8%2023-04-14
CVE-2023-29569Cesanta mJS null pointer dereference5.5v3.10.3%2023-04-14
CVE-2023-29529matrix-js-sdk vulnerable to invisible eavesdropping in group calls5.0CNA v3.10.5%2023-04-14Fix
CVE-2023-29491Invisible-island ncurses out-of-bounds write7.8NVD v3.11.0%2023-04-14Fix
CVE-2023-29383shadow out-of-bounds read3.3NVD v3.10.4%2023-04-14Fix
CVE-2023-29199vm2 exception sanitization improper control of dynamic code9.8CNA v3.13.9%2023-04-14Fix
CVE-2023-29194vitess allows users to create keyspaces that can deny access to already existing keyspaces4.1CNA v3.10.8%2023-04-14Fix
CVE-2023-29193SpiceDB binding metrics port to untrusted networks and can leak command-line flags8.7CNA v3.10.8%2023-04-14Fix
CVE-2023-29132Irssi use-after-free5.3v3.10.8%2023-04-14Fix
CVE-2023-29091Samsung Exynos Auto T5123 out-of-bounds write7.5v3.10.8%2023-04-14Fix
CVE-2023-29090Samsung Exynos Auto T5123 out-of-bounds write7.5v3.10.8%2023-04-14Fix
CVE-2023-29089Samsung Exynos Auto T5123 out-of-bounds read7.5v3.10.8%2023-04-14Fix
CVE-2023-29088Samsung Exynos Auto T5123 out-of-bounds write7.5v3.10.8%2023-04-14Fix
CVE-2023-29087Samsung Exynos Auto T5123 out-of-bounds write7.5v3.10.8%2023-04-14Fix
CVE-2023-29086Samsung Exynos Auto T5123 out-of-bounds write7.5v3.10.8%2023-04-14Fix
CVE-2023-29085Samsung Exynos Auto T5123 out-of-bounds write7.5v3.10.8%2023-04-14Fix
CVE-2023-29067Autodesk AutoCAD out-of-bounds write7.8v3.10.3%2023-04-14Fix
CVE-2023-29018OpenFeature Operator vulnerable to Cluster-level privilege escalation8.1CNA v3.10.7%2023-04-14Fix
CVE-2023-29013traefik HTTP header parsing could cause a deny of service7.5CNA v3.11.1%2023-04-14Fix
CVE-2023-28091HPE OneView Migrate server hardware option information disclosure5.5v3.10.2%2023-04-14Fix
CVE-2023-28085HPE OneView Global Dashboard appliance support dump information disclosure5.5v3.10.2%2023-04-14Fix
CVE-2023-27915Autodesk AutoCAD out-of-bounds read7.8v3.10.2%2023-04-14Fix
CVE-2023-27914Autodesk AutoCAD stack-based buffer overflow7.8v3.10.2%2023-04-14Fix
CVE-2023-27913Autodesk AutoCAD integer overflow7.8v3.10.2%2023-04-14Fix
CVE-2023-27912Autodesk AutoCAD out-of-bounds read7.8v3.10.2%2023-04-14Fix
CVE-2023-27890Export User cross-site scripting5.4v3.10.6%2023-04-14
CVE-2023-27666Auto Dealer Management System cross-site scripting6.1v3.10.4%2023-04-14
CVE-2023-27654Whoapp Who improper privilege management9.8v3.11.1%2023-04-14
CVE-2023-27653Whoapp Who resource exhaustion7.5v3.11.1%2023-04-14
CVE-2023-27651Egostudiogroup Super Clean improper privilege management7.8v3.10.4%2023-04-14
CVE-2023-27649Bestools Trusted Tools Free Music SQL injection7.5v3.11.2%2023-04-14
CVE-2023-27648Timmystudios Change Color Of Keypad T-ME Studios path traversal9.8v3.12.6%2023-04-14
CVE-2023-27647Dualspace Lock Master incorrect default permissions7.1v3.10.7%2023-04-14
CVE-2023-27643Powerampapp Poweramp resource exhaustion7.5v3.11.5%2023-04-14
CVE-2023-27193Dualspace Space Clean & Super Cleaner privilege escalation7.8v3.10.4%2023-04-14
CVE-2023-26980PAX Technology Paydroid race condition7.0v3.10.3%2023-04-14
CVE-2023-26969AtroCore AtroPIM path traversal7.5v3.11.1%2023-04-14
CVE-2023-26918File Replication Pro incorrect default permissions9.8v3.16.1%2023-04-14Exploit code
CVE-2023-26756Revive Adserver missing brute-force protection7.5v3.11.2%2023-04-14
CVE-2023-26559Sync Oxygen XML Web Author path traversal5.3v3.11.0%2023-04-14Fix
CVE-2023-26123raysan5/raylib cross-site scripting6.1v3.10.6%2023-04-14Fix
CVE-2023-25597Mitel MiCollab improper authentication5.9v3.10.7%2023-04-14Fix
CVE-2023-24934Microsoft Defender security feature bypass6.2CNA v3.10.5%2023-04-14Fix
CVE-2023-22949Tigergraph Enterprise cleartext storage of sensitive information4.9v3.10.4%2023-04-14
CVE-2023-2077Campcodes Online Traffic Offense Management System view_details.php cross-site scripting6.1v3.10.6%2023-04-14
CVE-2023-2076Campcodes Online Traffic Offense Management System Users.phpp cross-site scripting6.1v3.10.6%2023-04-14
CVE-2023-2075Campcodes Online Traffic Offense Management System view_details.php SQL injection8.8v3.10.7%2023-04-14
CVE-2023-2074Campcodes Online Traffic Offense Management System Master.php SQL injection9.8v3.10.8%2023-04-14
CVE-2023-2073Campcodes Online Traffic Offense Management System Login.php SQL injection9.8v3.10.9%2023-04-14
CVE-2023-2059DedeCMS select_templets.php path traversal5.3v3.12.4%2023-04-14Nuclei
CVE-2023-2058EyouCms HTTP POST request cross-site scripting6.1v3.10.6%2023-04-14
CVE-2023-2057EyouCms New Picture cross-site scripting6.1v3.10.6%2023-04-14
CVE-2023-2056DedeCMS module_main.php GetSystemFile code injection9.8v3.11.0%2023-04-14
CVE-2023-2055Campcodes Advanced Online Voting System config_save.php cross-site scripting6.1v3.10.6%2023-04-14
CVE-2023-2054Campcodes Advanced Online Voting System positions_delete.php SQL injection8.8v3.10.7%2023-04-14
CVE-2023-2053Campcodes Advanced Online Voting System candidates_row.php SQL injection8.8v3.10.7%2023-04-14
CVE-2023-2052Campcodes Advanced Online Voting System ballot_down.php SQL injection8.8v3.10.7%2023-04-14
CVE-2023-2051Campcodes Advanced Online Voting System positions_row.php SQL injection8.8v3.10.7%2023-04-14
CVE-2023-2050Campcodes Advanced Online Voting System positions_add.php SQL injection8.8v3.10.8%2023-04-14
CVE-2023-2049Campcodes Advanced Online Voting System ballot_up.php SQL injection8.8v3.10.7%2023-04-14
CVE-2023-2048Campcodes Advanced Online Voting System voters_row.php SQL injection8.8v3.10.7%2023-04-14
CVE-2023-2047Campcodes Advanced Online Voting System login.php SQL injection8.8v3.10.7%2023-04-14
CVE-2023-2044Control iD iDSecure Dispositivos page cross-site scripting6.1v3.10.4%2023-04-14
CVE-2023-2043Control iD RHiD Edit a SQL injection9.8v3.10.5%2023-04-14
CVE-2023-2042DataGear JDBC server deserialization8.8v3.11.1%2023-04-14
CVE-2023-2041Novel-Plus SQL injection8.8v3.10.8%2023-04-14
CVE-2023-2040Novel-Plus SQL injection8.8v3.10.7%2023-04-14
CVE-2023-2039Novel-Plus SQL injection8.8v3.10.8%2023-04-14
CVE-2023-2038Campcodes Video Sharing Website admin_class.php SQL injection7.5v3.10.6%2023-04-14
CVE-2023-2037Campcodes Video Sharing Website watch.php SQL injection9.8v3.10.8%2023-04-14
CVE-2023-2036Campcodes Video Sharing Website upload.php SQL injection7.5v3.10.7%2023-04-14
CVE-2023-2035Campcodes Video Sharing Website signup.php SQL injection7.5v3.10.7%2023-04-14