CVE-2023 records published in April 2023
Page two of two: records 1,001 to 1,918 of the 1,918 published in April 2023, newest first. The first page carries the figures for April 2023.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2023-2034 | Unrestricted upload of file with dangerous type in froxlor/froxlor | 8.8NVD v3.1 | 71.4% | 2023-04-14 | Fix |
| CVE-2023-2033 | Google Chromium V8 type confusion | 8.8NVD v3.1 | 40.8% | 2023-04-14 | KEVExploit codeFix |
| CVE-2023-2008 | Kernel: Udmabuf: Improper validation of array index leading to local privilege escalation | 7.8NVD v3.1 | 1.0% | 2023-04-14 | Exploit codeFix |
| CVE-2023-1863 | SQLi in Eskom Computer Water Metering Software | 9.8CNA v3.1 | 0.7% | 2023-04-14 | Fix |
| CVE-2023-1833 | Authentication bypass in Redline Router | 9.8v3.1 | 0.8% | 2023-04-14 | Fix |
| CVE-2023-1803 | Authentication bypass in Redline Router | 9.8v3.1 | 0.8% | 2023-04-14 | Fix |
| CVE-2023-1617 | Improper authentication Mechanism in B&R VC4 Visualization | 9.8CNA v3.1 | 0.7% | 2023-04-14 | Fix |
| CVE-2023-1285 | Mitsubishi Electric India GC-ENET-COM signal handler race condition | 7.5CNA v3.1 | 0.7% | 2023-04-14 | Fix |
| CVE-2023-30637 | Baidu Braft memory leak | 7.5v3.1 | 0.7% | 2023-04-13 | |
| CVE-2023-30636 | Tikv resource exhaustion | 7.5v3.1 | 1.0% | 2023-04-13 | |
| CVE-2023-30635 | Tikv denial of service | 7.5v3.1 | 1.0% | 2023-04-13 | |
| CVE-2023-30630 | Nongnu Dmidecode relative path traversal | 7.1v3.1 | 0.5% | 2023-04-13 | Fix |
| CVE-2023-29598 | lmxcms SQL injection | 9.8v3.1 | 0.7% | 2023-04-13 | |
| CVE-2023-29597 | bloofoxCMS SQL injection | 8.8v3.1 | 0.7% | 2023-04-13 | |
| CVE-2023-29573 | Axiosys Bento4 resource exhaustion | 5.5v3.1 | 0.3% | 2023-04-13 | |
| CVE-2023-29084 | Zoho ManageEngine ADManager Plus command injection | 7.2v3.1 | 98.4% | 2023-04-13 | NucleiMetasploitExploit codeFix |
| CVE-2023-27812 | bloofoxCMS path traversal | 9.1v3.1 | 1.2% | 2023-04-13 | |
| CVE-2023-27779 | Amsystem Am Presencia SQL injection | 9.8v3.1 | 1.0% | 2023-04-13 | |
| CVE-2023-27772 | MZ Automation libiec61850 improper check for exceptional conditions | 7.5v3.1 | 0.9% | 2023-04-13 | |
| CVE-2023-27748 | BlackVue Dr750-2ch Lte insufficient verification of data authenticity | 9.8v3.1 | 0.7% | 2023-04-13 | |
| CVE-2023-27747 | BlackVue Dr750-2ch Lte missing authentication | 7.5v3.1 | 1.1% | 2023-04-13 | |
| CVE-2023-27746 | BlackVue Dr750-2ch Lte missing brute-force protection | 9.8v3.1 | 1.8% | 2023-04-13 | Exploit code |
| CVE-2023-27667 | Auto Dealer Management System SQL injection | 9.8v3.1 | 0.6% | 2023-04-13 | |
| CVE-2023-26416 | Adobe Substance 3D Designer DAE File Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.1 | 0.4% | 2023-04-13 | Fix |
| CVE-2023-26415 | Adobe Substance 3D Designer DAE File Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.3% | 2023-04-13 | Fix |
| CVE-2023-26414 | Adobe Substance 3D Designer USD File Parsing use-after-free remote code execution | 7.8CNA v3.1 | 0.4% | 2023-04-13 | Fix |
| CVE-2023-26413 | Adobe Substance 3D Designer USD File Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.1 | 0.4% | 2023-04-13 | Fix |
| CVE-2023-26412 | Adobe Substance 3D Designer USDA File Parsing stack-based buffer overflow remote code execution | 7.8CNA v3.1 | 0.4% | 2023-04-13 | Fix |
| CVE-2023-26411 | Adobe Substance 3D Designer USDC File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.3% | 2023-04-13 | Fix |
| CVE-2023-26410 | Adobe Substance 3D Designer USD File Parsing use-after-free remote code execution | 7.8CNA v3.1 | 0.4% | 2023-04-13 | Fix |
| CVE-2023-26409 | Adobe Substance 3D Designer USD File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.3% | 2023-04-13 | Fix |
| CVE-2023-26398 | Adobe Substance 3D Designer USDC File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.3% | 2023-04-13 | Fix |
| CVE-2023-26264 | Talend DATA Catalog XML external entity injection | 5.5v3.1 | 0.2% | 2023-04-13 | Fix |
| CVE-2023-26263 | Talend DATA Catalog XML external entity injection | 5.5v3.1 | 0.2% | 2023-04-13 | Fix |
| CVE-2023-25954 | Kyocera Mobile Print Android intent handling vulnerability | 5.5v3.1 | 0.3% | 2023-04-13 | Fix |
| CVE-2023-24509 | Arista EOS standby supervisor module privilege escalation | 9.3CNA v3.1 | 0.2% | 2023-04-13 | |
| CVE-2023-22951 | Tigergraph Enterprise incorrect default permissions | 8.8v3.1 | 0.8% | 2023-04-13 | |
| CVE-2023-22950 | Tigergraph incorrect resource transfer | 6.5v3.1 | 0.7% | 2023-04-13 | Fix |
| CVE-2023-22948 | Tigergraph missing encryption | 4.9v3.1 | 0.4% | 2023-04-13 | Fix |
| CVE-2023-21630 | Qualcomm Snapdragon integer overflow in Multimedia Framework | 8.4CNA v3.1 | 0.1% | 2023-04-13 | Fix |
| CVE-2023-20866 | Spring Session session ID can be logged to the standard output stream | 6.5v3.1 | 0.7% | 2023-04-13 | Fix |
| CVE-2023-20863 | Spring Framework vulnerable to denial of service | 6.5v3.1 | 1.1% | 2023-04-13 | Fix |
| CVE-2023-20118 | Cisco Small Business RV Series Routers command injection | 6.5CNA v3.1 | 54.1% | 2023-04-13 | KEVEmerging Threats |
| CVE-2023-2021 | Cross-site scripting (XSS) Stored in nilsteampassnet/TeamPass | 5.4v3.1 | 0.4% | 2023-04-13 | Fix |
| CVE-2023-2014 | Cross-site scripting (XSS) Generic in microweber/microweber | 4.8v3.1 | 0.5% | 2023-04-13 | Fix |
| CVE-2023-1326 | Canonical apport local privilege escalation in apport-cli | 7.7CNA v3.1 | 0.9% | 2023-04-13 | Exploit codeFix |
| CVE-2023-30532 | Lack of authentication mechanism in Jenkins TurboScript Plugin webhook | 6.5v3.1 | 0.6% | 2023-04-12 | Fix |
| CVE-2023-30531 | Jenkins Consul KV Builder Plugin stores HashiCorp Consul ACL Token unencrypted | 6.5v3.1 | 0.4% | 2023-04-12 | Fix |
| CVE-2023-30530 | Jenkins Consul KV Builder Plugin stores HashiCorp Consul ACL Token unencrypted | 4.3v3.1 | 0.3% | 2023-04-12 | Fix |
| CVE-2023-30529 | Jenkins Lucene-search Plugin vulnerable to cross-site request forgery | 4.3v3.1 | 0.3% | 2023-04-12 | Fix |
| CVE-2023-30528 | Jenkins WSO2 Oauth Plugin cleartext storage of sensitive information | 6.5v3.1 | 0.4% | 2023-04-12 | Fix |
| CVE-2023-30527 | Jenkins WSO2 Oauth Plugin cleartext storage of sensitive information | 4.3v3.1 | 0.3% | 2023-04-12 | Fix |
| CVE-2023-30526 | Jenkins Report Portal Plugin missing permissions check | 6.5v3.1 | 0.5% | 2023-04-12 | Fix |
| CVE-2023-30525 | Jenkins Report Portal Plugin cross-site request forgery | 8.8v3.1 | 0.8% | 2023-04-12 | Fix |
| CVE-2023-30524 | Jenkins Report Portal Plugin configuration form does not mask tokens | 4.3v3.1 | 0.4% | 2023-04-12 | Fix |
| CVE-2023-30523 | Jenkins Report Portal Plugin missing encryption | 4.3v3.1 | 0.3% | 2023-04-12 | Fix |
| CVE-2023-30522 | Jenkins Fogbugz Plugin has missing permissions check | 4.3v3.1 | 0.4% | 2023-04-12 | Fix |
| CVE-2023-30521 | Jenkins Assembla Merge Request Builder Plugin missing authentication to access endpoint | 5.3v3.1 | 0.5% | 2023-04-12 | Fix |
| CVE-2023-30520 | Jenkins Quay.io Trigger Plugin cross-site scripting | 5.4v3.1 | 0.5% | 2023-04-12 | Fix |
| CVE-2023-30519 | Jenkins Quay.io Trigger Plugin webhook endpoint can be accessed without authentication | 5.3v3.1 | 0.5% | 2023-04-12 | Fix |
| CVE-2023-30518 | Jenkins Thycotic Secret Server Plugin missing permissions check | 4.3v3.1 | 0.5% | 2023-04-12 | Fix |
| CVE-2023-30517 | Jenkins NeuVector vulnerability Scanner Plugin disables SSL/TLS certificate and hostname validation | 5.3v3.1 | 0.3% | 2023-04-12 | Fix |
| CVE-2023-30516 | Jenkins Image Tag Parameter Plugin improper certificate validation | 6.5v3.1 | 0.5% | 2023-04-12 | Fix |
| CVE-2023-30515 | Jenkins Thycotic DevOps Secrets Vault Plugin does not properly mask credentials | 7.5v3.1 | 0.4% | 2023-04-12 | Fix |
| CVE-2023-30514 | Jenkins Azure Key Vault Plugin does not properly mask credentials | 7.5v3.1 | 0.5% | 2023-04-12 | Fix |
| CVE-2023-30513 | Jenkins Kubernetes Plugin does not properly mask credentials | 7.5v3.1 | 0.5% | 2023-04-12 | Fix |
| CVE-2023-30512 | CubeFS allows Kubernetes cluster-level privilege escalation | 6.5v3.1 | 0.5% | 2023-04-12 | |
| CVE-2023-29581 | yasm NASM preprocessor denial of service | 5.5v3.1 | 0.3% | 2023-04-12 | |
| CVE-2023-29580 | Yasm improper isolation | 5.5v3.1 | 0.3% | 2023-04-12 | |
| CVE-2023-29574 | Axiosys Bento4 memory corruption | 5.5v3.1 | 0.3% | 2023-04-12 | |
| CVE-2023-29571 | Cesanta mJS denial of service | 5.5v3.1 | 0.3% | 2023-04-12 | |
| CVE-2023-28488 | Intel ConnMan out-of-bounds write | 6.5v3.1 | 1.0% | 2023-04-12 | Fix |
| CVE-2023-28121 | WooCommerce Payments WordPress Plugin improper authentication | 9.8v3.1 | 86.9% | 2023-04-12 | NucleiMetasploitExploit codeFix |
| CVE-2023-27830 | TightVNC improper privilege management | 9.0v3.1 | 1.1% | 2023-04-12 | Fix |
| CVE-2023-27826 | Seowonintech Swc-5100w OS command injection | 8.8v3.1 | 11.8% | 2023-04-12 | Exploit code |
| CVE-2023-27775 | Liveaction Livesp stored HTML injection | 5.4v3.1 | 0.5% | 2023-04-12 | |
| CVE-2023-27704 | Voidtools Everything regular expression denial of service | 5.5v3.1 | 0.4% | 2023-04-12 | Exploit code |
| CVE-2023-27703 | Mypikpak Pikpak information disclosure | 3.3NVD v3.1 | 0.3% | 2023-04-12 | |
| CVE-2023-27216 | D-Link DSL-3782 OS command injection | 8.8v3.1 | 3.0% | 2023-04-12 | Exploit code |
| CVE-2023-27032 | Idnovate Popup Module (on Entering, Exit Popup, Add Product) And Newsletter SQL injection | 9.8v3.1 | 3.0% | 2023-04-12 | NucleiFix |
| CVE-2023-26852 | Textpattern upload plugin arbitrary file upload | 7.2v3.1 | 2.0% | 2023-04-12 | Exploit code |
| CVE-2023-26425 | Adobe Acrobat Reader DC Annotation out-of-bounds read remote code execution | 7.8CNA v3.1 | 2.6% | 2023-04-12 | Fix |
| CVE-2023-26424 | Adobe Acrobat Reader DC PDF Parsing use-after-free remote code execution | 7.8CNA v3.1 | 2.7% | 2023-04-12 | Fix |
| CVE-2023-26423 | Adobe Acrobat Reader DC AcroForm insertItemAt use-after-free remote code execution | 7.8CNA v3.1 | 3.1% | 2023-04-12 | Fix |
| CVE-2023-26422 | Adobe Acrobat Reader DC AcroForm deleteItemAt use-after-free remote code execution | 7.8CNA v3.1 | 3.1% | 2023-04-12 | Fix |
| CVE-2023-26421 | Adobe Acrobat Reader DC Doc object integer underflow remote code execution | 7.8CNA v3.1 | 4.6% | 2023-04-12 | Fix |
| CVE-2023-26420 | Adobe Acrobat Reader DC AcroForm addField use-after-free remote code execution | 7.8CNA v3.1 | 2.7% | 2023-04-12 | Fix |
| CVE-2023-26419 | Adobe Acrobat Reader DC AcroForm removeField use-after-free remote code execution | 7.8CNA v3.1 | 2.7% | 2023-04-12 | Fix |
| CVE-2023-26418 | Adobe Acrobat Reader DC AcroForm exportAsFDFStr use-after-free remote code execution | 7.8CNA v3.1 | 2.7% | 2023-04-12 | Fix |
| CVE-2023-26417 | Adobe Acrobat Reader DC Popup use-after-free remote code execution | 7.8CNA v3.1 | 2.6% | 2023-04-12 | Fix |
| CVE-2023-26408 | Adobe Acrobat Reader AnnotsString object prototype pollution Restrictions Bypass | 7.8CNA v3.1 | 4.3% | 2023-04-12 | Fix |
| CVE-2023-26407 | Adobe Acrobat Reader Net.HTTP.request arbitrary command execution | 7.8CNA v3.1 | 4.3% | 2023-04-12 | Fix |
| CVE-2023-26406 | Adobe Acrobat Reader Net.HTTP.request URL restriction bypass | 7.8CNA v3.1 | 4.2% | 2023-04-12 | Fix |
| CVE-2023-26405 | Adobe Acrobat Reader object prototype pollution which leads to API Restrictions Bypass | 7.8CNA v3.1 | 4.3% | 2023-04-12 | Fix |
| CVE-2023-26404 | Adobe Dimension USD File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-04-12 | Fix |
| CVE-2023-26403 | Adobe Substance 3D Stager USD File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-04-12 | Fix |
| CVE-2023-26402 | Adobe Substance 3D Stager USD File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.3% | 2023-04-12 | Fix |
| CVE-2023-26401 | Adobe Dimension USD File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-04-12 | Fix |
| CVE-2023-26400 | Adobe Dimension USD File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-04-12 | Fix |
| CVE-2023-26397 | Adobe Acrobat out-of-bounds read memory leak | 5.5CNA v3.1 | 2.9% | 2023-04-12 | Fix |
| CVE-2023-26396 | Adobe Acrobat Reader DC for macOS installer contains a local privilege escalation | 7.8CNA v3.1 | 4.0% | 2023-04-12 | Fix |
| CVE-2023-26395 | Adobe Acrobat parsing PDF out-of-bounds write arbitrary code execution | 7.8CNA v3.1 | 2.1% | 2023-04-12 | Fix |
| CVE-2023-26394 | Adobe Substance 3D Stager USD File Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.1 | 0.4% | 2023-04-12 | Fix |
| CVE-2023-26393 | Adobe Substance 3D Stager USD File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.3% | 2023-04-12 | Fix |
| CVE-2023-26392 | Adobe Substance 3D Stager USD File Parsing use-after-free remote code execution | 7.8CNA v3.1 | 0.4% | 2023-04-12 | Fix |
| CVE-2023-26391 | Adobe Substance 3D Stager USD File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.3% | 2023-04-12 | Fix |
| CVE-2023-26390 | Adobe Substance 3D Stager USDA File Parsing stack-based buffer overflow remote code execution | 7.8CNA v3.1 | 0.4% | 2023-04-12 | Fix |
| CVE-2023-26389 | Adobe Substance 3D Stager USDC File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.3% | 2023-04-12 | Fix |
| CVE-2023-26388 | Adobe Substance 3D Stager USDZ File Parsing memory corruption remote code execution | 7.8CNA v3.1 | 0.3% | 2023-04-12 | Fix |
| CVE-2023-26387 | Adobe Substance 3D Stager USDC File Parsing uninitialized variable information disclosure | 5.5CNA v3.1 | 0.3% | 2023-04-12 | Fix |
| CVE-2023-26386 | Adobe Substance 3D Stager USDC File Parsing uninitialized variable information disclosure | 5.5CNA v3.1 | 0.3% | 2023-04-12 | Fix |
| CVE-2023-26385 | Adobe Substance 3D Stager USD File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-04-12 | Fix |
| CVE-2023-26384 | Adobe Substance 3D Stager USD File Parsing use-after-free remote code execution | 7.8CNA v3.1 | 0.4% | 2023-04-12 | Fix |
| CVE-2023-26383 | Adobe Substance 3D Stager USDA File Parsing stack-based buffer overflow remote code execution | 7.8CNA v3.1 | 0.4% | 2023-04-12 | Fix |
| CVE-2023-26382 | Adobe Dimension USD File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-04-12 | Fix |
| CVE-2023-26381 | Adobe Dimension USD File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-04-12 | Fix |
| CVE-2023-26380 | Adobe Dimension USD File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-04-12 | Fix |
| CVE-2023-26379 | Adobe Dimension USD File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-04-12 | Fix |
| CVE-2023-26378 | Adobe Dimension USD File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-04-12 | Fix |
| CVE-2023-26377 | Adobe Dimension USD File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-04-12 | Fix |
| CVE-2023-26376 | Adobe Dimension USD File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-04-12 | Fix |
| CVE-2023-26375 | Adobe Dimension USD File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-04-12 | Fix |
| CVE-2023-26374 | Adobe Dimension USD File Parsing out-of-bounds read memory leak | 5.5CNA v3.1 | 0.3% | 2023-04-12 | Fix |
| CVE-2023-26373 | Adobe Dimension has an arbitrary address write vulnerability when parsing USDZ files | 7.8CNA v3.1 | 0.3% | 2023-04-12 | Fix |
| CVE-2023-26372 | Adobe Dimension USDZ File Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.3% | 2023-04-12 | Fix |
| CVE-2023-26371 | Adobe Dimension Validate Your Inputs out-of-bounds read | 7.8CNA v3.1 | 0.3% | 2023-04-12 | Fix |
| CVE-2023-24545 | Arista CloudEOS Software Forwarding Engine denial of service | 7.5CNA v3.1 | 0.8% | 2023-04-12 | |
| CVE-2023-24513 | Arista CloudEOS Software Forwarding Engine buffer over-read | 6.5CNA v3.1 | 0.7% | 2023-04-12 | |
| CVE-2023-24511 | Arista EOS SNMP daemon memory leak | 5.3CNA v3.1 | 0.8% | 2023-04-12 | |
| CVE-2023-23591 | Terminalfour sensitive information in log files | 4.9v3.1 | 0.6% | 2023-04-12 | Fix |
| CVE-2023-22897 | Securepoint Unified Threat Management uninitialized resource use | 6.5v3.1 | 4.1% | 2023-04-12 | Nuclei |
| CVE-2023-22620 | Securepoint Unified Threat Management incorrect authorization | 7.5v3.1 | 3.9% | 2023-04-12 | Nuclei |
| CVE-2023-22616 | InsydeH2O externally controlled resource reference | 7.8v3.1 | 0.4% | 2023-04-12 | Fix |
| CVE-2023-22235 | Adobe InCopy SVG file use-after-free arbitrary code execution | 7.8CNA v3.1 | 0.4% | 2023-04-12 | Fix |
| CVE-2023-21582 | Adobe Digital Editions PDF File Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.3% | 2023-04-12 | Fix |
| CVE-2023-1994 | Wireshark GQUIC dissector crash | 6.3CNA v3.1 | 1.0% | 2023-04-12 | Fix |
| CVE-2023-1993 | Wireshark excessive iteration | 6.3CNA v3.1 | 4.1% | 2023-04-12 | Fix |
| CVE-2023-1992 | Wireshark RPCoRDMA dissector crash | 6.3CNA v3.1 | 4.6% | 2023-04-12 | Fix |
| CVE-2023-1990 | Linux kernel use-after-free | 4.7NVD v3.1 | 0.2% | 2023-04-12 | Fix |
| CVE-2023-1906 | ImageMagick heap-based buffer overflow | 5.5NVD v3.1 | 0.6% | 2023-04-12 | Fix |
| CVE-2023-1874 | WP Data Access WordPress plugin authenticated (Subscriber+) privilege escalation | 8.8v3.1 | 2.7% | 2023-04-12 | Exploit codeFix |
| CVE-2023-1872 | Linux kernel A use-after-free | 7.0NVD v3.1 | 0.3% | 2023-04-12 | Fix |
| CVE-2023-1829 | Linux kernel A use-after-free | 7.8NVD v3.1 | 1.1% | 2023-04-12 | Exploit codeFix |
| CVE-2023-0006 | GlobalProtect App: Local file deletion | 6.3CNA v3.1 | 0.1% | 2023-04-12 | Fix |
| CVE-2023-0005 | PAN-OS: Exposure of sensitive information | 4.1CNA v3.1 | 0.3% | 2023-04-12 | Fix |
| CVE-2023-0004 | PAN-OS: Local file deletion | 6.5CNA v3.1 | 1.1% | 2023-04-12 | Fix |
| CVE-2023-30465 | Apache InLong: SQL injection in Apache inLong | 5.3v3.1 | 1.2% | 2023-04-11 | Fix |
| CVE-2023-29576 | Axiosys Bento4 out-of-bounds read | 5.5v3.1 | 0.3% | 2023-04-11 | |
| CVE-2023-29492 | Novi Survey insecure deserialization | 9.8v3.1 | 2.7% | 2023-04-11 | KEVFix |
| CVE-2023-29189 | HTTP Verb tampering vulnerability in SAP CRM (WebClient UI) | 5.4CNA v3.1 | 0.4% | 2023-04-11 | Fix |
| CVE-2023-29187 | DLL hijacking vulnerability in SapSetup (Software Installation Program) | 6.7CNA v3.1 | 0.2% | 2023-04-11 | Fix |
| CVE-2023-29186 | Directory/path traversal vulnerability in SAP NetWeaver | 8.7CNA v3.1 | 23.0% | 2023-04-11 | Fix |
| CVE-2023-29185 | Denial of service (DOS) in SAP NetWeaver AS for ABAP (Business Server Pages) | 5.3CNA v3.1 | 0.6% | 2023-04-11 | Fix |
| CVE-2023-29112 | Code injection vulnerability in SAP Application Interface Framework (Message Monitoring) | 3.7CNA v3.1 | 0.3% | 2023-04-11 | Fix |
| CVE-2023-29111 | Information disclosure vulnerability in SAP Application Interface Framework (ODATA service) | 3.1CNA v3.1 | 0.4% | 2023-04-11 | Fix |
| CVE-2023-29110 | Code injection vulnerability in SAP Application Interface Framework (Message Dashboard) | 3.7CNA v3.1 | 0.3% | 2023-04-11 | Fix |
| CVE-2023-29109 | Code injection vulnerability in SAP Application Interface Framework (Message Dashboard) | 4.4CNA v3.1 | 0.3% | 2023-04-11 | Fix |
| CVE-2023-29108 | IP filter vulnerability in ABAP Platform and SAP Web Dispatcher | 5.0CNA v3.1 | 0.4% | 2023-04-11 | Fix |
| CVE-2023-29054 | Siemens SCALANCE X200-4P IRT inadequate encryption strength | 6.7CNA v3.1 | 0.3% | 2023-04-11 | Fix |
| CVE-2023-29053 | Siemens JT Open out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2023-04-11 | Fix |
| CVE-2023-28828 | Siemens Polarion ALM XML external entity injection | 5.9CNA v3.1 | 0.6% | 2023-04-11 | Fix |
| CVE-2023-28808 | Hikvision DS-A71024/48/72R improper access control | 9.1CNA v3.1 | 0.8% | 2023-04-11 | Fix |
| CVE-2023-28766 | Siemens SIPROTEC 5 6MD85 (CP300) null pointer dereference | 7.5CNA v3.1 | 0.9% | 2023-04-11 | Fix |
| CVE-2023-28765 | Information disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform | 9.8CNA v3.1 | 14.9% | 2023-04-11 | Fix |
| CVE-2023-28763 | Denial of service in SAP NetWeaver AS for ABAP and ABAP Platform | 6.5CNA v3.1 | 0.6% | 2023-04-11 | Fix |
| CVE-2023-28761 | Missing authentication check in SAP NetWeaver Enterprise Portal | 6.5CNA v3.1 | 0.4% | 2023-04-11 | Fix |
| CVE-2023-28489 | Siemens CP-8031 MASTER MODULE command injection | 9.8CNA v3.1 | 2.8% | 2023-04-11 | Fix |
| CVE-2023-28368 | TP-Link T2600G-28SQ weak credentials | 5.7v3.1 | 0.3% | 2023-04-11 | Fix |
| CVE-2023-28341 | Zoho ManageEngine Applications Manager stored cross-site scripting | 6.1v3.1 | 98.8% | 2023-04-11 | Fix |
| CVE-2023-28340 | Zoho ManageEngine Applications Manager XML external entity injection | 6.5v3.1 | 3.2% | 2023-04-11 | Fix |
| CVE-2023-28314 | Microsoft Dynamics 365 (on-premises) cross-site scripting | 6.1CNA v3.1 | 0.7% | 2023-04-11 | Fix |
| CVE-2023-28313 | Microsoft Dynamics 365 Customer Voice cross-site scripting | 6.1CNA v3.1 | 0.7% | 2023-04-11 | Fix |
| CVE-2023-28312 | Microsoft Azure Machine Learning information disclosure | 6.5CNA v3.1 | 1.5% | 2023-04-11 | Fix |
| CVE-2023-28311 | Microsoft Word remote code execution | 7.8CNA v3.1 | 2.7% | 2023-04-11 | Exploit codeFix |
| CVE-2023-28309 | Microsoft Dynamics 365 (on-premises) cross-site scripting | 7.6CNA v3.1 | 0.7% | 2023-04-11 | Fix |
| CVE-2023-28308 | Microsoft Windows DNS server remote code execution | 6.6CNA v3.1 | 0.9% | 2023-04-11 | Fix |
| CVE-2023-28307 | Microsoft Windows DNS server remote code execution | 6.6CNA v3.1 | 0.9% | 2023-04-11 | Fix |
| CVE-2023-28306 | Microsoft Windows DNS server remote code execution | 6.6CNA v3.1 | 0.9% | 2023-04-11 | Fix |
| CVE-2023-28305 | Microsoft Windows DNS server remote code execution | 6.6CNA v3.1 | 0.9% | 2023-04-11 | Fix |
| CVE-2023-28304 | Microsoft Odbc and Ole DB remote code execution | 7.8CNA v3.1 | 0.8% | 2023-04-11 | Fix |
| CVE-2023-28302 | Microsoft Message Queuing (MSMQ) denial of service | 7.5CNA v3.1 | 92.6% | 2023-04-11 | Fix |
| CVE-2023-28301 | Microsoft Edge (Chromium-based) tampering | 3.7CNA v3.1 | 0.9% | 2023-04-11 | Fix |
| CVE-2023-28300 | Microsoft Azure Service Connector security feature bypass | 7.5CNA v3.1 | 1.0% | 2023-04-11 | Fix |
| CVE-2023-28299 | Visual Studio spoofing | 5.5CNA v3.1 | 0.5% | 2023-04-11 | Fix |
| CVE-2023-28298 | Microsoft Windows Kernel denial of service | 5.5CNA v3.1 | 0.6% | 2023-04-11 | Fix |
| CVE-2023-28297 | Microsoft Windows Remote Procedure Call Service (RPCSS) elevation of privilege | 8.8CNA v3.1 | 1.7% | 2023-04-11 | Fix |
| CVE-2023-28296 | Visual Studio remote code execution | 7.8CNA v3.1 | 0.7% | 2023-04-11 | Fix |
| CVE-2023-28293 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 2.9% | 2023-04-11 | Exploit codeFix |
| CVE-2023-28292 | Microsoft Raw Image Extension remote code execution | 7.8CNA v3.1 | 0.6% | 2023-04-11 | Fix |
| CVE-2023-28291 | Microsoft Raw Image Extension remote code execution | 8.4CNA v3.1 | 0.6% | 2023-04-11 | Fix |
| CVE-2023-28288 | Microsoft SharePoint server spoofing | 8.1CNA v3.1 | 6.2% | 2023-04-11 | Exploit codeFix |
| CVE-2023-28285 | Microsoft Office remote code execution | 7.8CNA v3.1 | 3.0% | 2023-04-11 | Exploit codeFix |
| CVE-2023-28284 | Microsoft Edge (Chromium-based) security feature bypass | 4.3CNA v3.1 | 0.8% | 2023-04-11 | |
| CVE-2023-28278 | Microsoft Windows DNS server remote code execution | 6.6CNA v3.1 | 0.9% | 2023-04-11 | Fix |
| CVE-2023-28277 | Microsoft Windows DNS server information disclosure | 4.9CNA v3.1 | 1.4% | 2023-04-11 | Fix |
| CVE-2023-28276 | Microsoft Windows Group Policy security feature bypass | 4.4CNA v3.1 | 0.5% | 2023-04-11 | Fix |
| CVE-2023-28275 | Microsoft WDAC OLE DB provider for SQL server remote code execution | 8.8CNA v3.1 | 1.5% | 2023-04-11 | Fix |
| CVE-2023-28274 | Microsoft Windows Win32k elevation of privilege | 7.8CNA v3.1 | 6.8% | 2023-04-11 | Fix |
| CVE-2023-28273 | Microsoft Windows Clip service elevation of privilege | 7.0CNA v3.1 | 0.2% | 2023-04-11 | Fix |
| CVE-2023-28272 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.5% | 2023-04-11 | Fix |
| CVE-2023-28271 | Microsoft Windows Kernel Memory information disclosure | 5.5CNA v3.1 | 1.2% | 2023-04-11 | Fix |
| CVE-2023-28270 | Microsoft Windows Lock Screen security feature bypass | 6.8CNA v3.1 | 0.5% | 2023-04-11 | Fix |
| CVE-2023-28269 | Microsoft Windows Boot Manager security feature bypass | 6.2CNA v3.1 | 0.6% | 2023-04-11 | Fix |
| CVE-2023-28268 | Microsoft Windows netlogon RPC elevation of privilege | 8.1CNA v3.1 | 1.5% | 2023-04-11 | Fix |
| CVE-2023-28267 | Remote Desktop protocol client information disclosure | 6.5CNA v3.1 | 2.1% | 2023-04-11 | Fix |
| CVE-2023-28266 | Microsoft Windows Common Log File System driver information disclosure | 5.5CNA v3.1 | 4.4% | 2023-04-11 | Fix |
| CVE-2023-28263 | Visual Studio information disclosure | 5.5CNA v3.1 | 0.6% | 2023-04-11 | Fix |
| CVE-2023-28262 | Visual Studio elevation of privilege | 7.8CNA v3.1 | 0.4% | 2023-04-11 | Fix |
| CVE-2023-28260 | Microsoft .NET DLL hijacking remote code execution | 7.8CNA v3.1 | 1.5% | 2023-04-11 | Fix |
| CVE-2023-28256 | Microsoft Windows DNS server remote code execution | 6.6CNA v3.1 | 0.8% | 2023-04-11 | Fix |
| CVE-2023-28255 | Microsoft Windows DNS server remote code execution | 6.6CNA v3.1 | 0.8% | 2023-04-11 | Fix |
| CVE-2023-28254 | Microsoft Windows DNS server remote code execution | 7.2CNA v3.1 | 1.4% | 2023-04-11 | Fix |
| CVE-2023-28253 | Microsoft Windows Kernel information disclosure | 5.5CNA v3.1 | 0.6% | 2023-04-11 | Fix |
| CVE-2023-28252 | Microsoft Windows Common Log File System (CLFS) driver privilege escalation | 7.8CNA v3.1 | 49.0% | 2023-04-11 | KEVExploit codeKCVFix |
| CVE-2023-28250 | Microsoft Windows Pragmatic General Multicast (PGM) remote code execution | 9.8CNA v3.1 | 2.0% | 2023-04-11 | Fix |
| CVE-2023-28249 | Microsoft Windows Boot Manager security feature bypass | 6.2CNA v3.1 | 0.6% | 2023-04-11 | Fix |
| CVE-2023-28248 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.7% | 2023-04-11 | Fix |
| CVE-2023-28247 | Microsoft Windows Network file system information disclosure | 7.5CNA v3.1 | 1.6% | 2023-04-11 | Fix |
| CVE-2023-28246 | Microsoft Windows Registry elevation of privilege | 7.8CNA v3.1 | 0.4% | 2023-04-11 | Fix |
| CVE-2023-28244 | Microsoft Windows Kerberos elevation of privilege | 8.1CNA v3.1 | 2.9% | 2023-04-11 | Exploit codeFix |
| CVE-2023-28243 | Microsoft PostScript and PCL6 Class Printer driver remote code execution | 8.8CNA v3.1 | 1.6% | 2023-04-11 | Fix |
| CVE-2023-28241 | Microsoft Windows Secure Socket Tunneling Protocol (SSTP) denial of service | 7.5CNA v3.1 | 2.0% | 2023-04-11 | Fix |
| CVE-2023-28240 | Microsoft Windows Network Load Balancing remote code execution | 8.8CNA v3.1 | 0.8% | 2023-04-11 | Fix |
| CVE-2023-28238 | Microsoft Windows Internet Key Exchange (IKE) protocol extensions remote code execution | 7.5CNA v3.1 | 0.9% | 2023-04-11 | Fix |
| CVE-2023-28237 | Microsoft Windows Kernel remote code execution | 7.8CNA v3.1 | 0.6% | 2023-04-11 | Fix |
| CVE-2023-28236 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.3% | 2023-04-11 | Fix |
| CVE-2023-28235 | Microsoft Windows Lock Screen security feature bypass | 6.8CNA v3.1 | 0.5% | 2023-04-11 | Fix |
| CVE-2023-28234 | Microsoft Windows Secure Channel denial of service | 7.5CNA v3.1 | 1.7% | 2023-04-11 | Fix |
| CVE-2023-28233 | Microsoft Windows Secure Channel denial of service | 7.5CNA v3.1 | 1.7% | 2023-04-11 | Fix |
| CVE-2023-28232 | Microsoft Windows Point-to-Point Tunneling protocol remote code execution | 7.5CNA v3.1 | 0.9% | 2023-04-11 | Fix |
| CVE-2023-28231 | Microsoft Windows DHCP server service remote code execution | 8.8CNA v3.1 | 36.6% | 2023-04-11 | Exploit codeFix |
| CVE-2023-28229 | Microsoft Windows CNG Key Isolation Service privilege escalation | 7.0CNA v3.1 | 1.7% | 2023-04-11 | KEVExploit codeFix |
| CVE-2023-28228 | Microsoft Windows spoofing | 5.5CNA v3.1 | 0.5% | 2023-04-11 | Fix |
| CVE-2023-28227 | Microsoft Windows Bluetooth driver remote code execution | 7.5CNA v3.1 | 6.6% | 2023-04-11 | Fix |
| CVE-2023-28226 | Microsoft Windows Enroll Engine security feature bypass | 5.3CNA v3.1 | 0.7% | 2023-04-11 | Fix |
| CVE-2023-28225 | Microsoft Windows NTLM elevation of privilege | 7.8CNA v3.1 | 0.4% | 2023-04-11 | Fix |
| CVE-2023-28224 | Microsoft Windows Point-to-Point protocol over Ethernet (PPPoE) remote code execution | 7.1CNA v3.1 | 0.4% | 2023-04-11 | Fix |
| CVE-2023-28223 | Microsoft Windows Domain Name service remote code execution | 6.6CNA v3.1 | 1.1% | 2023-04-11 | Fix |
| CVE-2023-28222 | Microsoft Windows Kernel elevation of privilege | 7.1CNA v3.1 | 0.7% | 2023-04-11 | Fix |
| CVE-2023-28221 | Microsoft Windows Error Reporting service elevation of privilege | 7.0CNA v3.1 | 0.5% | 2023-04-11 | Fix |
| CVE-2023-28220 | Microsoft Windows layer 2 Tunneling protocol remote code execution | 8.1CNA v3.1 | 15.0% | 2023-04-11 | Fix |
| CVE-2023-28219 | Microsoft Windows layer 2 Tunneling protocol remote code execution | 8.1CNA v3.1 | 15.0% | 2023-04-11 | Fix |
| CVE-2023-28218 | Microsoft Windows Ancillary function driver for WinSock elevation of privilege | 7.0CNA v3.1 | 12.3% | 2023-04-11 | Exploit codeFix |
| CVE-2023-28217 | Microsoft Windows Network Address Translation (NAT) denial of service | 7.5CNA v3.1 | 1.9% | 2023-04-11 | Fix |
| CVE-2023-28216 | Microsoft Windows Advanced Local Procedure Call (ALPC) elevation of privilege | 7.0CNA v3.1 | 0.4% | 2023-04-11 | Fix |
| CVE-2023-28062 | Dell PPDM Reporting (PowerProtect Data Manager) incorrect use of privileged APIs | 8.8CNA v3.1 | 0.8% | 2023-04-11 | Fix |
| CVE-2023-27995 | Fortinet FortiSOAR server-side template injection | 7.2CNA v3.1 | 1.1% | 2023-04-11 | Fix |
| CVE-2023-27917 | Contec CONPROSYS IoT Gateway products OS command injection | 8.8v3.1 | 1.9% | 2023-04-11 | Fix |
| CVE-2023-27897 | Code injection vulnerability in SAP CRM | 6.0CNA v3.1 | 0.7% | 2023-04-11 | Fix |
| CVE-2023-27645 | Powerampapp Poweramp improper privilege management | 9.8v3.1 | 1.5% | 2023-04-11 | |
| CVE-2023-27520 | SEIKO EPSON printers/network interface Web Config cross-site request forgery | 6.5v3.1 | 0.3% | 2023-04-11 | Fix |
| CVE-2023-27499 | Cross-site scripting (XSS) vulnerability in SAP GUI for HTML | 6.1CNA v3.1 | 0.4% | 2023-04-11 | Fix |
| CVE-2023-27497 | SAP Diagnostics Agent EventLogServiceCollector vulnerability | 10.0CNA v3.1 | 0.8% | 2023-04-11 | Fix |
| CVE-2023-27464 | Siemens Mendix Forgot Password (Mendix 7 compatible) response discrepancy | 5.3CNA v3.1 | 0.5% | 2023-04-11 | Fix |
| CVE-2023-27389 | Contec CONPROSYS IoT Gateway products inadequate encryption strength | 7.2v3.1 | 0.5% | 2023-04-11 | Fix |
| CVE-2023-27267 | SAP Diagnostics Agent OSCommand Bridge vulnerability | 9.0CNA v3.1 | 14.2% | 2023-04-11 | Fix |
| CVE-2023-27192 | Dualspace Super Security denial of service | 9.8v3.1 | 1.2% | 2023-04-11 | |
| CVE-2023-27191 | Dualspace Super Security resource exhaustion | 7.5v3.1 | 1.1% | 2023-04-11 | |
| CVE-2023-27179 | Gdidees Cms unrestricted file upload | 7.5v3.1 | 60.8% | 2023-04-11 | NucleiExploit code |
| CVE-2023-26964 | H2 vulnerable to denial of service | 7.5v3.1 | 1.1% | 2023-04-11 | Fix |
| CVE-2023-26917 | CESNET libyang null pointer dereference | 7.5v3.1 | 0.9% | 2023-04-11 | Fix |
| CVE-2023-26847 | OpenCATS stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-04-11 | |
| CVE-2023-26846 | OpenCATS stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-04-11 | |
| CVE-2023-26845 | OpenCATS cross-site request forgery | 4.3v3.1 | 0.2% | 2023-04-11 | |
| CVE-2023-26593 | Yokogawa Electric CENTUM series cleartext storage of sensitive information | 7.8v3.1 | 0.1% | 2023-04-11 | Fix |
| CVE-2023-26588 | Buffalo BS-GSL and BS-GS series hard-coded credentials | 7.5v3.1 | 0.6% | 2023-04-11 | Fix |
| CVE-2023-26555 | NTP out-of-bounds write | 6.4v3.1 | 0.5% | 2023-04-11 | Fix |
| CVE-2023-26554 | NTP out-of-bounds write | 5.6v3.1 | 0.6% | 2023-04-11 | Fix |
| CVE-2023-26553 | NTP out-of-bounds write | 5.6v3.1 | 0.7% | 2023-04-11 | Fix |
| CVE-2023-26552 | NTP out-of-bounds write | 5.6v3.1 | 0.6% | 2023-04-11 | Fix |
| CVE-2023-26551 | NTP out-of-bounds write | 5.6v3.1 | 0.7% | 2023-04-11 | Fix |
| CVE-2023-26458 | Information disclosure vulnerability in SAP Landscape Management | 6.8CNA v3.1 | 0.6% | 2023-04-11 | Fix |
| CVE-2023-26293 | Siemens Totally Integrated Automation Portal (TIA Portal) V15 path traversal | 7.3CNA v3.1 | 0.2% | 2023-04-11 | Fix |
| CVE-2023-26260 | Oxidforge OXID eShop session fixation | 5.4v3.1 | 0.4% | 2023-04-11 | Fix |
| CVE-2023-26122 | safe-eval vulnerable to sandbox bypass due to improper input sanitization | 10.0v3.1 | 2.1% | 2023-04-11 | |
| CVE-2023-26121 | safe-eval vulnerable to prototype pollution via the safeEval function | 10.0v3.1 | 1.1% | 2023-04-11 | |
| CVE-2023-25955 | MLIT National land numerical information data conversion tool XML external entity injection | 5.5v3.1 | 0.2% | 2023-04-11 | Fix |
| CVE-2023-25950 | HAProxy HTTP request smuggling | 7.3v3.1 | 2.9% | 2023-04-11 | Exploit codeFix |
| CVE-2023-25755 | JTEKT ELECTRONICS Screen Creator Advance 2 memory corruption | 7.8v3.1 | 0.2% | 2023-04-11 | Fix |
| CVE-2023-25415 | ATEN PE8108 incorrect authorization | 5.3v3.1 | 0.5% | 2023-04-11 | |
| CVE-2023-25414 | ATEN PE8108 resource exhaustion | 5.3v3.1 | 0.7% | 2023-04-11 | |
| CVE-2023-25413 | ATEN PE8108 insufficiently protected credentials | 7.5v3.1 | 0.7% | 2023-04-11 | |
| CVE-2023-25411 | ATEN PE8108 cross-site request forgery | 4.3v3.1 | 0.2% | 2023-04-11 | |
| CVE-2023-25409 | ATEN PE8108 resource exposure | 8.1v3.1 | 0.8% | 2023-04-11 | |
| CVE-2023-25407 | ATEN PE8108 insufficiently protected credentials | 7.2v3.1 | 0.8% | 2023-04-11 | |
| CVE-2023-24935 | Microsoft Edge (Chromium-based) spoofing | 6.1CNA v3.1 | 1.0% | 2023-04-11 | Fix |
| CVE-2023-24931 | Microsoft Windows Secure Channel denial of service | 7.5CNA v3.1 | 2.0% | 2023-04-11 | Fix |
| CVE-2023-24929 | Microsoft PostScript and PCL6 Class Printer driver remote code execution | 8.8CNA v3.1 | 1.6% | 2023-04-11 | Fix |
| CVE-2023-24928 | Microsoft PostScript and PCL6 Class Printer driver remote code execution | 8.8CNA v3.1 | 1.6% | 2023-04-11 | Fix |
| CVE-2023-24927 | Microsoft PostScript and PCL6 Class Printer driver remote code execution | 8.8CNA v3.1 | 1.6% | 2023-04-11 | Fix |
| CVE-2023-24926 | Microsoft PostScript and PCL6 Class Printer driver remote code execution | 8.8CNA v3.1 | 1.6% | 2023-04-11 | Fix |
| CVE-2023-24925 | Microsoft PostScript and PCL6 Class Printer driver remote code execution | 8.8CNA v3.1 | 1.6% | 2023-04-11 | Fix |
| CVE-2023-24924 | Microsoft PostScript and PCL6 Class Printer driver remote code execution | 8.8CNA v3.1 | 1.6% | 2023-04-11 | Fix |
| CVE-2023-24914 | Microsoft Windows win32k elevation of privilege | 7.0CNA v3.1 | 0.3% | 2023-04-11 | Fix |
| CVE-2023-24912 | Microsoft Windows Graphics component elevation of privilege | 7.8CNA v3.1 | 3.6% | 2023-04-11 | Fix |
| CVE-2023-24893 | Microsoft Visual Studio Code remote code execution | 7.8CNA v3.1 | 1.1% | 2023-04-11 | Fix |
| CVE-2023-24887 | Microsoft PostScript and PCL6 Class Printer driver remote code execution | 8.8CNA v3.1 | 1.6% | 2023-04-11 | Fix |
| CVE-2023-24886 | Microsoft PostScript and PCL6 Class Printer driver remote code execution | 8.8CNA v3.1 | 1.6% | 2023-04-11 | Fix |
| CVE-2023-24885 | Microsoft PostScript and PCL6 Class Printer driver remote code execution | 8.8CNA v3.1 | 1.6% | 2023-04-11 | Fix |
| CVE-2023-24884 | Microsoft PostScript and PCL6 Class Printer driver remote code execution | 8.8CNA v3.1 | 1.6% | 2023-04-11 | Fix |
| CVE-2023-24883 | Microsoft PostScript and PCL6 Class Printer driver information disclosure | 6.5CNA v3.1 | 1.5% | 2023-04-11 | Fix |
| CVE-2023-24860 | Microsoft Defender denial of service | 7.5CNA v3.1 | 3.0% | 2023-04-11 | Fix |
| CVE-2023-24544 | Buffalo BS-GSL and BS-GS series improper access control | 8.1v3.1 | 0.3% | 2023-04-11 | Fix |
| CVE-2023-24527 | Improper access control in SAP NetWeaver AS Java for Deploy Service | 5.3CNA v3.1 | 0.5% | 2023-04-11 | Fix |
| CVE-2023-24464 | Buffalo BS-GS series Stored- cross-site scripting | 5.4v3.1 | 0.4% | 2023-04-11 | Fix |
| CVE-2023-24182 | openwrt cross-site scripting | 5.4v3.1 | 0.6% | 2023-04-11 | |
| CVE-2023-23588 | Siemens SIMATIC IPC1047 information disclosure | 6.2CNA v3.1 | 0.1% | 2023-04-11 | Fix |
| CVE-2023-23575 | Contec CONPROSYS IoT Gateway products improper access control | 4.3v3.1 | 0.7% | 2023-04-11 | Fix |
| CVE-2023-23572 | SEIKO EPSON printers/network interface Web Config cross-site scripting | 4.8v3.1 | 0.5% | 2023-04-11 | Fix |
| CVE-2023-23384 | Microsoft SQL server remote code execution | 7.3CNA v3.1 | 0.9% | 2023-04-11 | Fix |
| CVE-2023-23375 | Microsoft Odbc and Ole DB remote code execution | 7.8CNA v3.1 | 0.7% | 2023-04-11 | Fix |
| CVE-2023-23277 | Snippet Box cross-site scripting | 6.1v3.1 | 0.7% | 2023-04-11 | |
| CVE-2023-22808 | Arm Avalon Android Gralloc Module out-of-bounds read | 3.3v3.1 | 0.2% | 2023-04-11 | Fix |
| CVE-2023-22642 | Fortinet FortiAnalyzer improper certificate validation | 6.8CNA v3.1 | 0.3% | 2023-04-11 | Fix |
| CVE-2023-22641 | Fortinet FortiOS A open redirect | 4.1CNA v3.1 | 0.3% | 2023-04-11 | Fix |
| CVE-2023-22635 | Fortinet FortiClientMac download without integrity check | 6.9CNA v3.1 | 0.1% | 2023-04-11 | Fix |
| CVE-2023-22615 | InsydeH2O out-of-bounds write | 8.4v3.1 | 0.2% | 2023-04-11 | Fix |
| CVE-2023-22614 | InsydeH2O out-of-bounds write | 8.8v3.1 | 0.4% | 2023-04-11 | Fix |
| CVE-2023-22613 | InsydeH2O out-of-bounds write | 8.8v3.1 | 0.2% | 2023-04-11 | Fix |
| CVE-2023-22612 | InsydeH2O out-of-bounds write | 8.8v3.1 | 0.2% | 2023-04-11 | Fix |
| CVE-2023-22429 | Wolt Delivery: Food and more hard-coded credentials | 7.8v3.1 | 0.2% | 2023-04-11 | Fix |
| CVE-2023-22282 | ELECOM WAB-MAT unquoted search path | 7.3v3.1 | 0.2% | 2023-04-11 | Fix |
| CVE-2023-21769 | Microsoft Message Queuing (MSMQ) denial of service | 7.5CNA v3.1 | 88.7% | 2023-04-11 | Fix |
| CVE-2023-21729 | Microsoft Windows Remote Procedure Call Runtime information disclosure | 4.3CNA v3.1 | 1.3% | 2023-04-11 | Fix |
| CVE-2023-21727 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 1.6% | 2023-04-11 | Fix |
| CVE-2023-21554 | Microsoft Message Queuing (MSMQ) remote code execution | 9.8CNA v3.1 | 95.5% | 2023-04-11 | Exploit codeFix |
| CVE-2023-1989 | Linux kernel use-after-free | 7.0NVD v3.1 | 0.4% | 2023-04-11 | Fix |
| CVE-2023-1988 | SourceCodester Online Computer and Laptop Store cross-site scripting | 4.8v3.1 | 0.6% | 2023-04-11 | |
| CVE-2023-1987 | SourceCodester Online Computer and Laptop Store update_order_status SQL injection | 7.2v3.1 | 0.8% | 2023-04-11 | |
| CVE-2023-1986 | SourceCodester Online Computer and Laptop Store delete_order SQL injection | 7.2v3.1 | 0.8% | 2023-04-11 | |
| CVE-2023-1985 | SourceCodester Online Computer and Laptop Store save_brand SQL injection | 7.2v3.1 | 0.8% | 2023-04-11 | |
| CVE-2023-1984 | SourceCodester Complaint Management System POST parameter check_availability.php SQL injection | 9.8v3.1 | 0.8% | 2023-04-11 | |
| CVE-2023-1983 | SourceCodester Sales Tracker Management System GET parameter manage_product.php SQL injection | 9.8v3.1 | 0.7% | 2023-04-11 | |
| CVE-2023-1980 | Devolutions Remote Desktop Manager authentication bypass | 6.5v3.1 | 0.5% | 2023-04-11 | Fix |
| CVE-2023-1976 | Password Aging with Long Expiration in answerdev/Answer | 8.8v3.1 | 0.6% | 2023-04-11 | Fix |
| CVE-2023-1975 | Insertion of sensitive information into sent data in answerdev/Answer | 6.5NVD v3.1 | 0.6% | 2023-04-11 | Fix |
| CVE-2023-1974 | Exposure of sensitive information through Metadata in answerdev/Answer | 6.5NVD v3.1 | 0.6% | 2023-04-11 | Fix |
| CVE-2023-1939 | Devolutions Remote Desktop Manager no access control for the OTP key on OTP entries | 4.3v3.1 | 0.4% | 2023-04-11 | Fix |
| CVE-2023-1903 | Missing authorization check in SAP HCM Fiori App My Forms (Fiori) | 4.3CNA v3.1 | 0.4% | 2023-04-11 | Fix |
| CVE-2023-1552 | ToolboxST deserialization of Untrusted Configuration Data | 7.8v3.1 | 0.2% | 2023-04-11 | Fix |
| CVE-2023-0645 | Out-of-bounds read in libjxl | 5.3CNA v3.1 | 0.9% | 2023-04-11 | Fix |
| CVE-2023-30456 | Linux kernel improper check for exceptional conditions | 6.5v3.1 | 0.5% | 2023-04-10 | Fix |
| CVE-2023-29376 | Progress Sitefinity cross-site scripting | 5.4v3.1 | 0.4% | 2023-04-10 | Fix |
| CVE-2023-29375 | Progress Sitefinity unrestricted file upload | 9.8v3.1 | 0.8% | 2023-04-10 | Fix |
| CVE-2023-29216 | Apache Linkis DatasourceManager module has a deserialization command execution | 9.8v3.1 | 2.1% | 2023-04-10 | Fix |
| CVE-2023-29215 | Apache Linkis JDBC EngineCon has a deserialization command execution | 9.8v3.1 | 2.1% | 2023-04-10 | Fix |
| CVE-2023-29192 | SilverwareGames.io game upload panel vulnerability | 2.7CNA v3.1 | 0.4% | 2023-04-10 | Fix |
| CVE-2023-29005 | dpgaspar Flask-AppBuilder No Rate Limiting on Login AUTH DB | 7.5CNA v3.1 | 0.6% | 2023-04-10 | Fix |
| CVE-2023-28206 | Apple iOS, iPadOS, and macOS IOSurfaceAccelerator out-of-bounds write | 8.6v3.1 | 23.0% | 2023-04-10 | KEVExploit codeFix |
| CVE-2023-28205 | Apple Multiple Products WebKit use-after-free | 8.8v3.1 | 27.1% | 2023-04-10 | KEVExploit codeFix |
| CVE-2023-28093 | Pegasystems RPA: Synchronization Engine improper certificate validation | 7.5CNA v3.0 | 1.4% | 2023-04-10 | Fix |
| CVE-2023-27987 | Apache Linkis gateway module token authentication bypass | 9.1v3.1 | 0.8% | 2023-04-10 | Fix |
| CVE-2023-27650 | Apusapps Launcher code injection | 9.8v3.1 | 2.1% | 2023-04-10 | |
| CVE-2023-27603 | Apache Linkis Mangaer module engineConn material upload exists Zip Slip issue | 9.8v3.1 | 1.8% | 2023-04-10 | Fix |
| CVE-2023-27602 | Apache Linkis publicsercice module unrestricted upload of file | 9.8v3.1 | 2.0% | 2023-04-10 | Fix |
| CVE-2023-27178 | Gdidees Cms upload function arbitrary file upload | 9.8v3.1 | 1.4% | 2023-04-10 | Fix |
| CVE-2023-27076 | Tenda G103 command injection | 9.8v3.1 | 22.9% | 2023-04-10 | Emerging Threats |
| CVE-2023-26986 | Chinamobileltd Oa Mailbox PC arbitrary command execution | 7.8v3.1 | 0.5% | 2023-04-10 | |
| CVE-2023-26919 | Javadelight Nashorn Sandbox sandbox escape | 7.2v3.1 | 0.6% | 2023-04-10 | Fix |
| CVE-2023-26860 | Save Your Carts And Buy Later Or Send IT PrestaShop Igbudget v.1.0.3 and SQL injection | 8.8v3.1 | 1.1% | 2023-04-10 | |
| CVE-2023-26788 | Veritas Netbackup Appliance Firmware cross-site scripting | 6.1v3.1 | 0.4% | 2023-04-10 | |
| CVE-2023-26774 | Sales Tracker Management System information disclosure | 7.5v3.1 | 1.4% | 2023-04-10 | |
| CVE-2023-26773 | Sales Tracker Management System cross-site scripting | 6.1v3.1 | 0.9% | 2023-04-10 | |
| CVE-2023-26495 | Opendesign Drawings SDK use-after-free | 7.8v3.1 | 0.4% | 2023-04-10 | Fix |
| CVE-2023-26467 | Pegasystems RPA: Synchronization Engine insufficient verification of data authenticity | 8.1CNA v3.0 | 0.6% | 2023-04-10 | Fix |
| CVE-2023-26466 | Pegasystems RPA: Synchronization Engine improper authorization | 7.8CNA v3.0 | 0.2% | 2023-04-10 | Fix |
| CVE-2023-26120 | XXL-JOB vulnerable to cross-site scripting | 6.1v3.1 | 0.5% | 2023-04-10 | |
| CVE-2023-26070 | Lexmark 6500e improper input validation | 9.8v3.1 | 0.7% | 2023-04-10 | Fix |
| CVE-2023-26069 | Lexmark B2236 improper input validation | 9.8v3.1 | 0.7% | 2023-04-10 | Fix |
| CVE-2023-26068 | Lexmark B2236 improper input validation | 9.8v3.1 | 11.6% | 2023-04-10 | MetasploitExploit codeFix |
| CVE-2023-26067 | Lexmark B2236 improper input validation | 8.1v3.1 | 37.8% | 2023-04-10 | NucleiExploit codeFix |
| CVE-2023-26066 | Lexmark 6500e improper array index validation | 9.8v3.1 | 0.7% | 2023-04-10 | Fix |
| CVE-2023-26065 | Lexmark 6500e integer overflow | 9.8v3.1 | 0.7% | 2023-04-10 | Fix |
| CVE-2023-26064 | Lexmark 6500e out-of-bounds write | 9.8v3.1 | 0.7% | 2023-04-10 | Fix |
| CVE-2023-26063 | Lexmark 6500e type confusion | 9.8v3.1 | 0.7% | 2023-04-10 | Fix |
| CVE-2023-25392 | Allegro Tech BigFlow vulnerable to Missing SSL Certificate Validation | 5.9v3.1 | 0.4% | 2023-04-10 | Fix |
| CVE-2023-24721 | Liveaction Livesp cross-site scripting | 5.4v3.1 | 0.4% | 2023-04-10 | |
| CVE-2023-24181 | openwrt luci cross-site scripting | 5.4v3.1 | 0.6% | 2023-04-10 | |
| CVE-2023-1971 | yuan1994 tpAdmin Upload.php remote server-side request forgery | 4.9v3.1 | 0.6% | 2023-04-10 | |
| CVE-2023-1970 | yuan1994 tpAdmin Upload.php upload unrestricted upload | 7.2v3.1 | 1.0% | 2023-04-10 | |
| CVE-2023-1969 | SourceCodester Online Eyewear Shop GET parameter manage_stock.php SQL injection | 9.8v3.1 | 0.8% | 2023-04-10 | |
| CVE-2023-1916 | libtiff out-of-bounds read | 6.1NVD v3.1 | 0.4% | 2023-04-10 | Fix |
| CVE-2023-1668 | openvswitch incorrect control flow | 8.2NVD v3.1 | 1.2% | 2023-04-10 | Fix |
| CVE-2023-1478 | Hummingbird WordPress plugin unauthenticated path traversal | 9.8NVD v3.1 | 1.1% | 2023-04-10 | Fix |
| CVE-2023-1426 | WP Tiles WordPress plugin Subscriber+ Draft/Private post Title disclosure | 6.5NVD v3.1 | 0.8% | 2023-04-10 | |
| CVE-2023-1425 | Groundhogg Contacts WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 0.9% | 2023-04-10 | Fix |
| CVE-2023-1406 | JetEngine WordPress plugin Author+ remote code execution | 8.8NVD v3.1 | 1.5% | 2023-04-10 | Fix |
| CVE-2023-1381 | WP Meta SEO WordPress plugin Author+ PHAR deserialization | 8.8NVD v3.1 | 1.7% | 2023-04-10 | Fix |
| CVE-2023-1122 | Simple Giveaways WordPress plugin Editor+ stored cross-site scripting | 4.8NVD v3.1 | 0.4% | 2023-04-10 | Fix |
| CVE-2023-1121 | Simple Giveaways WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.4% | 2023-04-10 | Fix |
| CVE-2023-1120 | Simple Giveaways WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2023-04-10 | Fix |
| CVE-2023-0983 | Stylish Cost Calculator Premium WordPress plugin unauthenticated stored XSS | 6.1NVD v3.1 | 0.5% | 2023-04-10 | Fix |
| CVE-2023-0893 | Time Sheets WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2023-04-10 | Fix |
| CVE-2023-0874 | Klaviyo WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2023-04-10 | Fix |
| CVE-2023-0605 | Auto Rename Media On Upload WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2023-04-10 | Fix |
| CVE-2023-0546 | FluentForms WordPress plugin Contributor+ stored XSS via Custom HTML form field | 5.4NVD v3.1 | 0.5% | 2023-04-10 | Fix |
| CVE-2023-0423 | WordPress Amazon S3 plugin reflected XSS | 4.8NVD v3.1 | 0.4% | 2023-04-10 | Fix |
| CVE-2023-0422 | Article Directory WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2023-04-10 | |
| CVE-2023-0363 | Scheduled Announcements Widget WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.4% | 2023-04-10 | Fix |
| CVE-2023-0157 | All-In-One Security (AIOS) WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 32.5% | 2023-04-10 | Exploit codeFix |
| CVE-2023-0156 | All-In-One Security (AIOS) WordPress plugin Admin+ arbitrary File/Folder access via traversal | 4.9NVD v3.1 | 19.9% | 2023-04-10 | Fix |
| CVE-2023-27730 | F5 Njs out-of-bounds read | 7.5v3.1 | 0.7% | 2023-04-09 | |
| CVE-2023-27729 | F5 Njs memory corruption | 7.5v3.1 | 0.7% | 2023-04-09 | |
| CVE-2023-27728 | F5 Njs out-of-bounds read | 7.5v3.1 | 0.7% | 2023-04-09 | |
| CVE-2023-27727 | F5 Njs out-of-bounds read | 7.5v3.1 | 0.7% | 2023-04-09 | |
| CVE-2023-27720 | D-Link DIR-878 out-of-bounds write | 9.8v3.1 | 1.4% | 2023-04-09 | |
| CVE-2023-27719 | D-Link DIR-878 out-of-bounds write | 9.8v3.1 | 1.4% | 2023-04-09 | |
| CVE-2023-27718 | D-Link DIR-878 out-of-bounds write | 9.8v3.1 | 1.4% | 2023-04-09 | |
| CVE-2023-1964 | PHPGurukul Bank Locker Management System Password Reset recovery.php SQL injection | 9.1v3.1 | 1.0% | 2023-04-09 | |
| CVE-2023-1963 | PHPGurukul Bank Locker Management System Search index.php SQL injection | 9.8v3.1 | 0.7% | 2023-04-09 | |
| CVE-2023-1962 | SourceCodester Best Online News Portal POST parameter forgot-password.php SQL injection | 9.8v3.1 | 0.8% | 2023-04-09 | |
| CVE-2023-30450 | redpanda improper input validation | 4.3v3.1 | 0.6% | 2023-04-08 | |
| CVE-2023-24626 | GNU Screen incorrect permission assignment | 6.5v3.1 | 0.5% | 2023-04-08 | Exploit codeFix |
| CVE-2023-1961 | SourceCodester Online Computer and Laptop Store cross-site scripting | 6.1v3.1 | 0.5% | 2023-04-08 | |
| CVE-2023-1960 | SourceCodester Online Computer and Laptop Store SQL injection | 8.8v3.1 | 0.7% | 2023-04-08 | |
| CVE-2023-1959 | SourceCodester Online Computer and Laptop Store SQL injection | 8.8v3.1 | 0.7% | 2023-04-08 | |
| CVE-2023-1958 | SourceCodester Online Computer and Laptop Store SQL injection | 9.8v3.1 | 0.7% | 2023-04-08 | |
| CVE-2023-1957 | SourceCodester Online Computer and Laptop Store Subcategory SQL injection | 8.8v3.1 | 0.7% | 2023-04-08 | |
| CVE-2023-1956 | SourceCodester Online Computer and Laptop Store Image path traversal | 8.8v3.1 | 1.1% | 2023-04-08 | |
| CVE-2023-1955 | SourceCodester Online Computer and Laptop Store User Registration login.php SQL injection | 9.8v3.1 | 0.8% | 2023-04-08 | |
| CVE-2023-1954 | SourceCodester Online Computer and Laptop Store manage.php save_inventory SQL injection | 8.8v3.1 | 0.7% | 2023-04-08 | |
| CVE-2023-1953 | SourceCodester Online Computer and Laptop Store index.php SQL injection | 8.8v3.1 | 0.7% | 2023-04-08 | |
| CVE-2023-1952 | SourceCodester Online Computer and Laptop Store Product Search ?p=products SQL injection | 9.8v3.1 | 0.7% | 2023-04-08 | |
| CVE-2023-1951 | SourceCodester Online Computer and Laptop Store brand.php delete_brand SQL injection | 9.8v3.1 | 0.7% | 2023-04-08 | |
| CVE-2023-1950 | PHPGurukul BP Monitoring Management System Password Recovery password-recovery.php SQL injection | 9.8v3.1 | 0.7% | 2023-04-08 | |
| CVE-2023-1949 | PHPGurukul BP Monitoring Management System Change Password change-password.php SQL injection | 9.8v3.1 | 0.7% | 2023-04-08 | |
| CVE-2023-1948 | PHPGurukul BP Monitoring Management System add-family-member.php cross-site scripting | 6.1v3.1 | 0.6% | 2023-04-08 | |
| CVE-2023-29478 | Bibliocraftmod Bibliocraft path traversal | 9.8v3.1 | 1.7% | 2023-04-07 | Exploit code |
| CVE-2023-29388 | Product Catalog Simple WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-04-07 | Fix |
| CVE-2023-29236 | Outdoor WordPress theme cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-04-07 | Fix |
| CVE-2023-29172 | PropertyHive WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-04-07 | Fix |
| CVE-2023-29171 | Magic Post Thumbnail WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-04-07 | Fix |
| CVE-2023-29170 | Product Enquiry for WooCommerce WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-07 | Fix |
| CVE-2023-29094 | Product page shipping calculator for WooCommerce WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-07 | Fix |
| CVE-2023-28993 | Albo Pretorio Online WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-04-07 | Fix |
| CVE-2023-28792 | Continuous Image Carousel With Lightbox WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-04-07 | Fix |
| CVE-2023-28789 | Contact Forms by Cimatti WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-04-07 | Fix |
| CVE-2023-28781 | Contact Forms by Cimatti WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-04-07 | Fix |
| CVE-2023-28710 | Apache Airflow Spark Provider arbitrary file read via JDBC | 7.5v3.1 | 2.2% | 2023-04-07 | Fix |
| CVE-2023-28707 | Airflow Apache Drill Provider arbitrary file read | 7.5v3.1 | 2.1% | 2023-04-07 | Fix |
| CVE-2023-28706 | Apache Airflow Hive Provider Beeline remote command execution | 9.8v3.1 | 2.8% | 2023-04-07 | Fix |
| CVE-2023-28051 | Dell Power Manager (DPM) improper access control | 7.8CNA v3.1 | 0.2% | 2023-04-07 | Fix |
| CVE-2023-27876 | IBM TRIRIGA Application Platform XML external entity injection | 7.1CNA v3.1 | 1.1% | 2023-04-07 | Fix |
| CVE-2023-27810 | H3C Magic R100 Firmware out-of-bounds write | 4.9v3.1 | 0.8% | 2023-04-07 | |
| CVE-2023-27808 | H3C Magic R100 Firmware out-of-bounds write | 4.9v3.1 | 0.8% | 2023-04-07 | |
| CVE-2023-27807 | H3C Magic R100 Firmware out-of-bounds write | 4.9v3.1 | 0.8% | 2023-04-07 | |
| CVE-2023-27806 | H3C Magic R100 Firmware out-of-bounds write | 4.9v3.1 | 0.8% | 2023-04-07 | |
| CVE-2023-27805 | H3C Magic R100 Firmware out-of-bounds write | 4.9v3.1 | 0.8% | 2023-04-07 | |
| CVE-2023-27804 | H3C Magic R100 Firmware out-of-bounds write | 4.9v3.1 | 0.8% | 2023-04-07 | |
| CVE-2023-27803 | H3C Magic R100 Firmware out-of-bounds write | 4.9v3.1 | 0.8% | 2023-04-07 | |
| CVE-2023-27802 | H3C Magic R100 Firmware out-of-bounds write | 4.9v3.1 | 0.8% | 2023-04-07 | |
| CVE-2023-27801 | H3C Magic R100 Firmware out-of-bounds write | 4.9v3.1 | 0.8% | 2023-04-07 | |
| CVE-2023-27620 | Robo Gallery WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.5% | 2023-04-07 | Fix |
| CVE-2023-27180 | Gdidees Cms files accessible to external parties | 7.5v3.1 | 1.1% | 2023-04-07 | |
| CVE-2023-27033 | Cdesigner unrestricted file upload | 9.8v3.1 | 0.9% | 2023-04-07 | |
| CVE-2023-27021 | Tenda AC10 out-of-bounds write | 9.8v3.1 | 1.1% | 2023-04-07 | |
| CVE-2023-27020 | Tenda AC10 out-of-bounds write | 9.8v3.1 | 1.1% | 2023-04-07 | |
| CVE-2023-27019 | Tenda AC10 out-of-bounds write | 9.8v3.1 | 1.1% | 2023-04-07 | |
| CVE-2023-27018 | Tenda AC10 out-of-bounds write | 9.8v3.1 | 1.1% | 2023-04-07 | |
| CVE-2023-27017 | Tenda AC10 out-of-bounds write | 9.8v3.1 | 1.1% | 2023-04-07 | |
| CVE-2023-27016 | Tenda AC10 out-of-bounds write | 9.8v3.1 | 1.1% | 2023-04-07 | |
| CVE-2023-27015 | Tenda AC10 out-of-bounds write | 9.8v3.1 | 1.1% | 2023-04-07 | |
| CVE-2023-27014 | Tenda AC10 out-of-bounds write | 9.8v3.1 | 1.1% | 2023-04-07 | |
| CVE-2023-27013 | Tenda AC10 out-of-bounds write | 9.8v3.1 | 1.1% | 2023-04-07 | |
| CVE-2023-27012 | Tenda AC10 out-of-bounds write | 9.8v3.1 | 1.1% | 2023-04-07 | |
| CVE-2023-26978 | TOTOLINK A7100RU command injection | 9.8v3.1 | 1.9% | 2023-04-07 | |
| CVE-2023-26848 | TOTOLINK A7100RU command injection | 9.8v3.1 | 1.9% | 2023-04-07 | |
| CVE-2023-26820 | Siteproxy path traversal | 7.5v3.1 | 0.8% | 2023-04-07 | |
| CVE-2023-26817 | Pgyer Codefever code injection | 8.8v3.1 | 1.5% | 2023-04-07 | |
| CVE-2023-25716 | Announce from the Dashboard WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-07 | Fix |
| CVE-2023-25713 | Quick Paypal Payments WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-04-07 | Fix |
| CVE-2023-25712 | Opt-Out for Google Analytics WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-07 | Fix |
| CVE-2023-25711 | WPGlobus Translate Options WordPress plugin cross-site scripting (XSS) | 6.1v3.1 | 0.3% | 2023-04-07 | Fix |
| CVE-2023-25705 | WP Prayer WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-07 | Fix |
| CVE-2023-25702 | Quick Paypal Payments WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-07 | Fix |
| CVE-2023-25464 | Twitch Player WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-07 | Fix |
| CVE-2023-25442 | Zeno Font Resizer WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-07 | Fix |
| CVE-2023-25220 | Tenda AC5 out-of-bounds write | 9.8v3.1 | 1.0% | 2023-04-07 | |
| CVE-2023-25219 | Tenda AC5 out-of-bounds write | 9.8v3.1 | 0.9% | 2023-04-07 | |
| CVE-2023-25218 | Tenda AC5 out-of-bounds write | 9.8v3.1 | 1.0% | 2023-04-07 | |
| CVE-2023-25217 | Tenda AC5 out-of-bounds write | 9.8v3.1 | 0.9% | 2023-04-07 | |
| CVE-2023-25216 | Tenda AC5 out-of-bounds write | 9.8v3.1 | 0.9% | 2023-04-07 | |
| CVE-2023-25215 | Tenda AC5 out-of-bounds write | 9.8v3.1 | 0.9% | 2023-04-07 | |
| CVE-2023-25214 | Tenda AC5 out-of-bounds write | 9.8v3.1 | 0.9% | 2023-04-07 | |
| CVE-2023-25213 | Tenda AC5 out-of-bounds write | 9.8v3.1 | 0.9% | 2023-04-07 | |
| CVE-2023-25212 | Tenda AC5 out-of-bounds write | 9.8v3.1 | 0.9% | 2023-04-07 | |
| CVE-2023-25211 | Tenda AC5 out-of-bounds write | 9.8v3.1 | 0.9% | 2023-04-07 | |
| CVE-2023-25210 | Tenda AC5 out-of-bounds write | 9.8v3.1 | 0.9% | 2023-04-07 | |
| CVE-2023-25061 | Arigato Autoresponder and Newsletter WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-04-07 | Fix |
| CVE-2023-25059 | avalex WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.5% | 2023-04-07 | Fix |
| CVE-2023-25049 | eCommerce Product Catalog WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-07 | Fix |
| CVE-2023-25046 | Podlove Podcast Publisher WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-07 | Fix |
| CVE-2023-25041 | Monolit WordPress theme cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-04-07 | Fix |
| CVE-2023-25031 | Arigato Autoresponder and Newsletter WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-07 | Fix |
| CVE-2023-25027 | Chained Quiz WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-07 | Fix |
| CVE-2023-25024 | Icegram Collect WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-07 | Fix |
| CVE-2023-25023 | WebinarIgnition WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-07 | Fix |
| CVE-2023-25022 | Watu Quiz WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-07 | Fix |
| CVE-2023-25020 | Arigato Autoresponder and Newsletter WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-04-07 | Fix |
| CVE-2023-24800 | D-Link DIR-878 out-of-bounds write | 9.8v3.1 | 1.3% | 2023-04-07 | |
| CVE-2023-24799 | D-Link DIR-878 out-of-bounds write | 9.8v3.1 | 1.1% | 2023-04-07 | |
| CVE-2023-24798 | D-Link DIR-878 out-of-bounds write | 9.8v3.1 | 1.1% | 2023-04-07 | |
| CVE-2023-24797 | D-Link Dir-882 A1 out-of-bounds write | 9.8v3.1 | 1.4% | 2023-04-07 | |
| CVE-2023-24402 | WP Booking System WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-07 | Fix |
| CVE-2023-24398 | EZP Coming Soon Page WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-07 | Fix |
| CVE-2023-23994 | Auto Hide Admin Bar WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-07 | Fix |
| CVE-2023-23885 | Quick Contact Form WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-04-07 | Fix |
| CVE-2023-23799 | Easy Panorama WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-07 | Fix |
| CVE-2023-23762 | Incorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling | 6.5CNA v3.1 | 0.6% | 2023-04-07 | Fix |
| CVE-2023-23761 | GitHub Enterprise Server SSH certificate authority login improper authentication | 7.7CNA v3.1 | 0.5% | 2023-04-07 | Fix |
| CVE-2023-1947 | taoCMS admin.php code injection | 9.8v3.1 | 1.1% | 2023-04-07 | |
| CVE-2023-1946 | SourceCodester Survey Application System Add New cross-site scripting | 6.1v3.1 | 0.4% | 2023-04-07 | |
| CVE-2023-1942 | SourceCodester Online Computer and Laptop Store Avatar unrestricted upload | 9.8v3.1 | 0.9% | 2023-04-07 | |
| CVE-2023-1941 | SourceCodester Simple and Beautiful Shopping Cart System login.php SQL injection | 9.8v3.1 | 0.8% | 2023-04-07 | |
| CVE-2023-1940 | SourceCodester Simple and Beautiful Shopping Cart System delete_user_query.php SQL injection | 9.1v3.1 | 0.6% | 2023-04-07 | |
| CVE-2023-1937 | zhenfeng13 My-Blog userInfo cross-site request forgery | 4.3v3.1 | 0.3% | 2023-04-07 | |
| CVE-2023-1909 | PHPGurukul BP Monitoring Management System User Profile Update profile.php SQL injection | 6.5v3.1 | 0.6% | 2023-04-07 | |
| CVE-2023-1801 | The Tcpdump Group tcpdump out-of-bounds write | 6.5v3.1 | 0.8% | 2023-04-07 | Fix |
| CVE-2023-1726 | OBS stored cross-site scripting | 5.4CNA v3.1 | 0.3% | 2023-04-07 | Fix |
| CVE-2023-29475 | Atos Unify Openscape 4000 command injection | 9.8v3.1 | 0.9% | 2023-04-06 | Fix |
| CVE-2023-29474 | Atos Unify Openscape 4000 command injection | 9.8v3.1 | 0.8% | 2023-04-06 | Fix |
| CVE-2023-29473 | Atos Unify Openscape 4000 command injection | 9.8v3.1 | 0.8% | 2023-04-06 | Fix |
| CVE-2023-29465 | SageMath FlintQS 1.0 relies on pathnames under TMPDIR (typically world-writable), which (for example) allows a local user to overwrite files with the privileges of a different user (who is running FlintQS). | 5.5v3.1 | 0.2% | 2023-04-06 | |
| CVE-2023-29421 | BZIP3 out-of-bounds write | 8.8v3.1 | 0.9% | 2023-04-06 | Fix |
| CVE-2023-29420 | bzip3 bz3_decode_block function memory corruption | 6.5v3.1 | 0.9% | 2023-04-06 | Fix |
| CVE-2023-29419 | BZIP3 out-of-bounds read | 6.5v3.1 | 0.9% | 2023-04-06 | Fix |
| CVE-2023-29418 | BZIP3 out-of-bounds read | 6.5v3.1 | 0.9% | 2023-04-06 | Fix |
| CVE-2023-29417 | BZIP3 out-of-bounds read | 6.5v3.1 | 0.8% | 2023-04-06 | Fix |
| CVE-2023-29416 | BZIP3 out-of-bounds write | 6.5v3.1 | 0.9% | 2023-04-06 | Fix |
| CVE-2023-29415 | BZIP3 denial of service | 6.5v3.1 | 0.9% | 2023-04-06 | Fix |
| CVE-2023-29017 | vm2 vulnerable to sandbox escape | 10.0CNA v3.1 | 63.2% | 2023-04-06 | Exploit codeFix |
| CVE-2023-29016 | intranda Goobi viewer user nicknames cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-04-06 | Fix |
| CVE-2023-29015 | intranda goobi-viewer-core goobi viewer Core has cross-site scripting vulnerability in User Comments | 6.1CNA v3.1 | 0.4% | 2023-04-06 | Fix |
| CVE-2023-29014 | intranda goobi-viewer-core goobi viewer Core reflected cross-site scripting vulnerability | 6.1CNA v3.1 | 0.4% | 2023-04-06 | Fix |
| CVE-2023-29010 | BudiBase server-side request forgery | 6.5CNA v3.1 | 0.6% | 2023-04-06 | Fix |
| CVE-2023-29008 | SvelteKit framework has insufficient CSRF protection for CORS requests | 8.8CNA v3.1 | 0.4% | 2023-04-06 | Fix |
| CVE-2023-28500 | Adobe Livecycle ES4 deserialization of untrusted data | 9.8v3.1 | 1.4% | 2023-04-06 | |
| CVE-2023-28046 | Dell Display Manager least privilege violation | 6.6CNA v3.1 | 0.1% | 2023-04-06 | Fix |
| CVE-2023-26083 | Arm Mali GPU Kernel driver information disclosure | 3.3v3.1 | 1.2% | 2023-04-06 | KEVExploit codeFix |
| CVE-2023-25542 | Dell Trusted Device Client incorrect default permissions | 7.0CNA v3.1 | 0.1% | 2023-04-06 | Fix |
| CVE-2023-25062 | Pinpoint Booking System WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.5% | 2023-04-06 | Fix |
| CVE-2023-24538 | Backticks not treated as string delimiters in html/template | 9.8NVD v3.1 | 2.3% | 2023-04-06 | Fix |
| CVE-2023-24537 | Infinite loop in parsing in go/scanner | 7.5v3.1 | 1.4% | 2023-04-06 | Fix |
| CVE-2023-24536 | Excessive resource consumption in net/HTTP, net/textproto and mime/multipart | 7.5v3.1 | 1.5% | 2023-04-06 | Fix |
| CVE-2023-24534 | Excessive memory allocation in net/HTTP and net/textproto | 7.5v3.1 | 1.9% | 2023-04-06 | Fix |
| CVE-2023-24411 | BNE Testimonials WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-04-06 | Fix |
| CVE-2023-24403 | bbPress Voting WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-06 | Fix |
| CVE-2023-24396 | VikBooking Hotel Booking Engine and PMS WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-06 | Fix |
| CVE-2023-24387 | Organization chart WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-06 | Fix |
| CVE-2023-24383 | Namaste! LMS WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-06 | Fix |
| CVE-2023-24378 | Glossary WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-04-06 | Fix |
| CVE-2023-24374 | Material Design Icons for Page Builders WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-04-06 | Fix |
| CVE-2023-24006 | WP Terms Popup Terms and Conditions and Privacy Policy WordPress Popups plugin cross-site scripting | 4.8v3.1 | 0.4% | 2023-04-06 | Fix |
| CVE-2023-24004 | Image and Video Lightbox, Image PopUp WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-06 | Fix |
| CVE-2023-24003 | WP Popups WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-04-06 | Fix |
| CVE-2023-24002 | YouTube Embed, Playlist and Popup by WpDevArt WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-06 | Fix |
| CVE-2023-24001 | Modal Dialog WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-06 | Fix |
| CVE-2023-23998 | VikRentCar WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-06 | Fix |
| CVE-2023-23996 | ProfilePress WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-06 | Fix |
| CVE-2023-23987 | User Registration WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-06 | Fix |
| CVE-2023-23982 | WPFrom Email WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-06 | Fix |
| CVE-2023-23981 | Conversational Forms for ChatBot WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-06 | Fix |
| CVE-2023-23980 | MailOptin WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-06 | Fix |
| CVE-2023-23979 | Quick Event Manager WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-04-06 | Fix |
| CVE-2023-23972 | Social Like Box and Page by WpDevArt WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-06 | Fix |
| CVE-2023-23971 | WP Time Slots Booking Form WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-06 | Fix |
| CVE-2023-23898 | Blocksy Companion WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-04-06 | Fix |
| CVE-2023-23891 | Ocean Extra WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-04-06 | Fix |
| CVE-2023-23815 | Multi-column Tag Map WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-04-06 | Fix |
| CVE-2023-23801 | Really Simple Google Tag Manager WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-04-06 | Fix |
| CVE-2023-22985 | Simple Guestbook Management System cross-site scripting | 6.1v3.1 | 0.4% | 2023-04-06 | |
| CVE-2023-20688 | MediaTek chipsets active debug code in power | 4.4v3.1 | 0.1% | 2023-04-06 | Fix |
| CVE-2023-20687 | MediaTek chipsets improper synchronization in display drm | 6.4v3.1 | 0.1% | 2023-04-06 | Fix |
| CVE-2023-20686 | MediaTek chipsets improper synchronization in display drm | 6.4v3.1 | 0.1% | 2023-04-06 | Fix |
| CVE-2023-20685 | MediaTek chipsets concurrent execution using shared resource with improper synchronization in vdec | 6.4v3.1 | 0.1% | 2023-04-06 | Fix |
| CVE-2023-20684 | MediaTek chipsets concurrent execution using shared resource with improper synchronization in vdec | 6.4v3.1 | 0.1% | 2023-04-06 | Fix |
| CVE-2023-20682 | MediaTek chipsets improper input validation in wlan | 6.7v3.1 | 0.1% | 2023-04-06 | Fix |
| CVE-2023-20681 | MediaTek chipsets improper input validation in adsp | 6.7v3.1 | 0.1% | 2023-04-06 | Fix |
| CVE-2023-20680 | MediaTek chipsets improper input validation in adsp | 6.7v3.1 | 0.1% | 2023-04-06 | Fix |
| CVE-2023-20679 | MediaTek chipsets improper input validation in wlan | 4.4v3.1 | 0.1% | 2023-04-06 | Fix |
| CVE-2023-20677 | MediaTek chipsets improper input validation in wlan | 4.4v3.1 | 0.1% | 2023-04-06 | Fix |
| CVE-2023-20676 | MediaTek chipsets improper input validation in wlan | 4.4v3.1 | 0.1% | 2023-04-06 | Fix |
| CVE-2023-20675 | MediaTek chipsets improper input validation in wlan | 4.4v3.1 | 0.1% | 2023-04-06 | Fix |
| CVE-2023-20674 | MediaTek chipsets improper input validation in wlan | 4.4v3.1 | 0.1% | 2023-04-06 | Fix |
| CVE-2023-20670 | MediaTek chipsets improper input validation in audio | 6.7v3.1 | 0.1% | 2023-04-06 | Fix |
| CVE-2023-20666 | MediaTek chipsets improper input validation in display drm | 6.7v3.1 | 0.1% | 2023-04-06 | Fix |
| CVE-2023-20665 | MediaTek chipsets improper input validation in ril | 4.4v3.1 | 0.1% | 2023-04-06 | Fix |
| CVE-2023-20664 | MediaTek chipsets double free in gz | 6.7v3.1 | 0.1% | 2023-04-06 | Fix |
| CVE-2023-20663 | MediaTek chipsets improper input validation in wlan | 6.7v3.1 | 0.1% | 2023-04-06 | Fix |
| CVE-2023-20662 | MediaTek chipsets improper input validation in wlan | 6.7v3.1 | 0.1% | 2023-04-06 | Fix |
| CVE-2023-20661 | MediaTek chipsets improper input validation in wlan | 6.7v3.1 | 0.1% | 2023-04-06 | Fix |
| CVE-2023-20660 | MediaTek chipsets improper input validation in wlan | 4.4v3.1 | 0.1% | 2023-04-06 | Fix |
| CVE-2023-20659 | MediaTek chipsets improper input validation in wlan | 6.7v3.1 | 0.1% | 2023-04-06 | Fix |
| CVE-2023-20658 | MediaTek chipsets improper input validation in isp | 6.7v3.1 | 0.1% | 2023-04-06 | Fix |
| CVE-2023-20657 | MediaTek chipsets out-of-bounds write in mtee | 6.7v3.1 | 0.1% | 2023-04-06 | Fix |
| CVE-2023-20656 | MediaTek chipsets write-what-where condition in geniezone | 6.7v3.1 | 0.1% | 2023-04-06 | Fix |
| CVE-2023-20655 | MediaTek chipsets improper input validation in mmsdk | 7.8v3.1 | 0.1% | 2023-04-06 | Fix |
| CVE-2023-20654 | MediaTek chipsets improper input validation in keyinstall | 6.7v3.1 | 0.1% | 2023-04-06 | Fix |
| CVE-2023-20653 | MediaTek chipsets improper input validation in keyinstall | 6.7v3.1 | 0.1% | 2023-04-06 | Fix |
| CVE-2023-20652 | MediaTek chipsets improper input validation in keyinstall | 6.7v3.1 | 0.1% | 2023-04-06 | Fix |
| CVE-2023-1931 | WP Fastest Cache WordPress plugin missing authorization in deleteCssAndJsCacheToolbar | 4.3v3.1 | 0.4% | 2023-04-06 | Fix |
| CVE-2023-1930 | WP Fastest Cache WordPress plugin missing authorization in wpfc_clear_cache_of_allsites_callback | 4.3v3.1 | 0.4% | 2023-04-06 | Fix |
| CVE-2023-1929 | WP Fastest Cache WordPress plugin missing authorization in wpfc_purgecache_varnish_callback | 4.3v3.1 | 0.4% | 2023-04-06 | Fix |
| CVE-2023-1928 | WP Fastest Cache WordPress plugin missing authorization in wpfc_preload_single_callback | 4.3v3.1 | 0.4% | 2023-04-06 | Fix |
| CVE-2023-1927 | WP Fastest Cache WordPress plugin cross-site request forgery via deleteCssAndJsCacheToolbar | 4.3v3.1 | 0.2% | 2023-04-06 | Fix |
| CVE-2023-1926 | WP Fastest Cache WordPress plugin cross-site request forgery via deleteCacheToolbar | 4.3v3.1 | 0.2% | 2023-04-06 | Fix |
| CVE-2023-1925 | WP Fastest Cache WordPress plugin cross-site request forgery | 4.3v3.1 | 0.2% | 2023-04-06 | Fix |
| CVE-2023-1924 | WP Fastest Cache WordPress plugin cross-site request forgery via wpfc_toolbar_save_settings_callback | 4.3v3.1 | 0.2% | 2023-04-06 | Fix |
| CVE-2023-1923 | WP Fastest Cache WordPress plugin cross-site request forgery | 4.3v3.1 | 0.2% | 2023-04-06 | Fix |
| CVE-2023-1922 | WP Fastest Cache WordPress plugin cross-site request forgery | 4.3v3.1 | 0.2% | 2023-04-06 | Fix |
| CVE-2023-1921 | WP Fastest Cache WordPress plugin cross-site request forgery | 4.3v3.1 | 0.2% | 2023-04-06 | Fix |
| CVE-2023-1920 | WP Fastest Cache WordPress plugin cross-site request forgery via wpfc_purgecache_varnish_callback | 4.3v3.1 | 0.2% | 2023-04-06 | Fix |
| CVE-2023-1919 | WP Fastest Cache WordPress plugin cross-site request forgery | 4.3v3.1 | 0.2% | 2023-04-06 | Fix |
| CVE-2023-1918 | WP Fastest Cache WordPress plugin cross-site request forgery via wpfc_preload_single_callback | 4.3v3.1 | 0.2% | 2023-04-06 | Fix |
| CVE-2023-1913 | Maps Widget for Google Maps WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.4% | 2023-04-06 | Fix |
| CVE-2023-1912 | Automattic Limit Login Attempts lock logging stored cross-site scripting | 6.1NVD v3.1 | 0.8% | 2023-04-06 | Fix |
| CVE-2023-1908 | SourceCodester Simple Mobile Comparison Website GET parameter view_category.php SQL injection | 9.8v3.1 | 0.7% | 2023-04-06 | |
| CVE-2023-1802 | Docker Desktop Artifactory integration cleartext transmission of sensitive information | 5.9CNA v3.1 | 0.5% | 2023-04-06 | Fix |
| CVE-2023-0750 | Yellowbrik PEC-1864 authentication bypass | 9.8v3.1 | 0.5% | 2023-04-06 | Fix |
| CVE-2023-0652 | Local privilege escalation in Cloudflare WARP Installer (Windows) | 7.0CNA v3.1 | 0.3% | 2023-04-06 | Fix |
| CVE-2023-0580 | Information disclosure vulnerability in My Control System (on-premise) | 5.4CNA v3.1 | 0.5% | 2023-04-06 | Fix |
| CVE-2023-29389 | Toyota RAV4 injection | 6.8v3.1 | 0.7% | 2023-04-05 | |
| CVE-2023-29374 | LangChain vulnerable to code injection | 9.8v3.1 | 39.7% | 2023-04-05 | Fix |
| CVE-2023-29006 | Order GLPI plugin vulnerable to remote code execution from authenticated user | 8.8CNA v3.1 | 0.9% | 2023-04-05 | Fix |
| CVE-2023-28855 | Fields GLPI plugin vulnerable to unauthorized write access to additional fields | 6.5CNA v3.1 | 0.6% | 2023-04-05 | Fix |
| CVE-2023-28852 | GLPI vulnerable to stored cross-site scripting through dashboard administration | 4.8CNA v3.1 | 0.5% | 2023-04-05 | Fix |
| CVE-2023-28849 | GLPI vulnerable to SQL injection and stored XSS via inventory agent request | 10.0CNA v3.1 | 0.5% | 2023-04-05 | Fix |
| CVE-2023-28838 | GLPI vulnerable to SQL injection through dynamic reports | 9.6CNA v3.1 | 0.8% | 2023-04-05 | Fix |
| CVE-2023-28639 | GLPI vulnerable to reflected cross-site scripting in search pages | 6.1CNA v3.1 | 0.6% | 2023-04-05 | Fix |
| CVE-2023-28636 | GLPI vulnerable to stored cross-site scripting in external links | 4.5CNA v3.1 | 0.6% | 2023-04-05 | Fix |
| CVE-2023-28634 | GLPI vulnerable to privilege escalation from Technician to Super-Admin | 8.8CNA v3.1 | 0.8% | 2023-04-05 | Fix |
| CVE-2023-28633 | GLPI vulnerable to blind server-side request forgery (SSRF) in RSS feeds | 3.5CNA v3.1 | 0.5% | 2023-04-05 | Fix |
| CVE-2023-28632 | GLPI vulnerable to account takeover by authenticated user | 8.1CNA v3.1 | 0.7% | 2023-04-05 | Fix |
| CVE-2023-28342 | Zoho ManageEngine ADSelfService Plus denial of service | 7.5v3.1 | 78.3% | 2023-04-05 | Fix |
| CVE-2023-28069 | Dell Streaming Data Platform open redirect | 6.1CNA v3.1 | 0.4% | 2023-04-05 | Fix |
| CVE-2023-26857 | Dynamic Transaction Queuing System /admin/ajax.php?action=save_uploads arbitrary file upload | 7.2v3.1 | 1.0% | 2023-04-05 | |
| CVE-2023-26856 | Dynamic Transaction Queuing System SQL injection | 7.2v3.1 | 0.7% | 2023-04-05 | |
| CVE-2023-26789 | Veritas Netbackup Opscenter cross-site scripting | 6.1v3.1 | 0.5% | 2023-04-05 | |
| CVE-2023-26536 | Sp*tify Play Button for WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-04-05 | Fix |
| CVE-2023-25330 | Mybatis MyBatis-Plus vulnerable to SQL injection via TenantPlugin | 9.8v3.1 | 1.2% | 2023-04-05 | Fix |
| CVE-2023-24747 | jflyfox jfinal_cms cross-site scripting | 5.4v3.1 | 0.4% | 2023-04-05 | |
| CVE-2023-24720 | Readium-js An arbitrary file upload | 9.8v3.1 | 1.1% | 2023-04-05 | |
| CVE-2023-22660 | Ichitaro way heap-based buffer overflow | 7.8v3.1 | 0.5% | 2023-04-05 | |
| CVE-2023-22291 | Ichitaro memory corruption | 7.8v3.1 | 0.5% | 2023-04-05 | |
| CVE-2023-20153 | Cisco Identity Services Engine command injection | 6.0CNA v3.1 | 0.4% | 2023-04-05 | Fix |
| CVE-2023-20152 | Cisco Identity Services Engine command injection | 6.0CNA v3.1 | 0.4% | 2023-04-05 | Fix |
| CVE-2023-20151 | Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-04-05 | |
| CVE-2023-20150 | Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-04-05 | |
| CVE-2023-20149 | Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-04-05 | |
| CVE-2023-20148 | Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-04-05 | |
| CVE-2023-20147 | Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-04-05 | |
| CVE-2023-20146 | Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-04-05 | |
| CVE-2023-20145 | Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-04-05 | |
| CVE-2023-20144 | Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-04-05 | |
| CVE-2023-20143 | Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-04-05 | |
| CVE-2023-20142 | Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-04-05 | |
| CVE-2023-20141 | Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-04-05 | |
| CVE-2023-20140 | Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-04-05 | |
| CVE-2023-20139 | Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-04-05 | |
| CVE-2023-20138 | Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-04-05 | |
| CVE-2023-20137 | Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-04-05 | |
| CVE-2023-20134 | Cisco Webex Meetings web interface stored cross-site scripting | 5.4CNA v3.1 | 0.5% | 2023-04-05 | Fix |
| CVE-2023-20132 | Cisco Webex Meetings web interface stored cross-site scripting | 5.4CNA v3.1 | 0.4% | 2023-04-05 | Fix |
| CVE-2023-20131 | Cisco Prime Infrastructure and Evolved Programmable Network Manager cross-site scripting | 6.5CNA v3.1 | 0.6% | 2023-04-05 | Fix |
| CVE-2023-20130 | Cisco Prime Infrastructure and Evolved Programmable Network Manager cross-site scripting | 6.5CNA v3.1 | 0.4% | 2023-04-05 | Fix |
| CVE-2023-20129 | Cisco Prime Infrastructure and Evolved Programmable Network Manager cross-site scripting | 6.5CNA v3.1 | 0.9% | 2023-04-05 | Fix |
| CVE-2023-20128 | Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers command injection | 7.2CNA v3.1 | 30.4% | 2023-04-05 | Emerging Threats |
| CVE-2023-20127 | Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager vulnerabilities | 6.5CNA v3.1 | 0.9% | 2023-04-05 | Fix |
| CVE-2023-20124 | Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers remote command execution | 6.5CNA v3.1 | 1.0% | 2023-04-05 | |
| CVE-2023-20123 | Cisco Duo authentication bypass by replay | 6.3CNA v3.1 | 0.2% | 2023-04-05 | Fix |
| CVE-2023-20122 | Cisco Identity Services Engine Software command injection | 6.0CNA v3.1 | 0.2% | 2023-04-05 | Fix |
| CVE-2023-20121 | Cisco Identity Services Engine Software command injection | 6.0CNA v3.1 | 0.2% | 2023-04-05 | Fix |
| CVE-2023-20117 | Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers command injection | 7.2CNA v3.1 | 30.4% | 2023-04-05 | Emerging Threats |
| CVE-2023-20103 | Cisco Secure Network Analytics remote code execution | 4.9CNA v3.1 | 0.9% | 2023-04-05 | Fix |
| CVE-2023-20102 | Cisco Secure Network Analytics remote code execution | 8.8CNA v3.1 | 1.0% | 2023-04-05 | Fix |
| CVE-2023-20096 | Cisco Unified Contact Center Express stored cross-site scripting | 5.4CNA v3.1 | 0.5% | 2023-04-05 | Fix |
| CVE-2023-20073 | Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers arbitrary file upload | 5.3CNA v3.1 | 90.1% | 2023-04-05 | NucleiEmerging ThreatsExploit codeFix |
| CVE-2023-20068 | Cisco Prime Infrastructure reflected cross-site scripting | 6.1CNA v3.0 | 0.5% | 2023-04-05 | Fix |
| CVE-2023-20051 | Cisco Packet DATA Network Gateway IPsec ICMP denial of service | 5.8CNA v3.1 | 0.9% | 2023-04-05 | Fix |
| CVE-2023-20030 | Cisco Identity Services Engine XML external entity injection | 6.0CNA v3.1 | 0.8% | 2023-04-05 | Fix |
| CVE-2023-20023 | Cisco Identity Services Engine privilege escalation | 6.0CNA v3.1 | 0.4% | 2023-04-05 | Fix |
| CVE-2023-20022 | Cisco Identity Services Engine privilege escalation | 6.0CNA v3.1 | 0.4% | 2023-04-05 | Fix |
| CVE-2023-20021 | Cisco Identity Services Engine privilege escalation | 6.0CNA v3.1 | 0.4% | 2023-04-05 | Fix |
| CVE-2023-1887 | Business Logic Errors in thorsten/phpMyFAQ | 4.3NVD v3.1 | 0.7% | 2023-04-05 | Fix |
| CVE-2023-1886 | Authentication bypass by capture-replay in thorsten/phpMyFAQ | 9.8v3.1 | 0.9% | 2023-04-05 | Fix |
| CVE-2023-1885 | Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ | 5.4v3.1 | 0.5% | 2023-04-05 | Fix |
| CVE-2023-1884 | Cross-site scripting (XSS) Generic in thorsten/phpMyFAQ | 6.1v3.1 | 0.4% | 2023-04-05 | Fix |
| CVE-2023-1883 | Improper access control in thorsten/phpMyFAQ | 5.4v3.1 | 0.5% | 2023-04-05 | Fix |
| CVE-2023-1882 | Cross-site scripting (XSS) DOM in thorsten/phpMyFAQ | 5.4NVD v3.1 | 0.5% | 2023-04-05 | Fix |
| CVE-2023-1881 | Cross-site scripting (XSS) Stored in microweber/microweber | 5.4NVD v3.1 | 0.5% | 2023-04-05 | Fix |
| CVE-2023-1880 | Cross-site scripting (XSS) Reflected in thorsten/phpMyFAQ | 6.1NVD v3.1 | 1.6% | 2023-04-05 | NucleiFix |
| CVE-2023-1879 | Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ | 5.4v3.1 | 0.5% | 2023-04-05 | Fix |
| CVE-2023-1878 | Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ | 5.4NVD v3.1 | 0.5% | 2023-04-05 | Fix |
| CVE-2023-1877 | Command injection in microweber/microweber | 9.8v3.1 | 1.8% | 2023-04-05 | Fix |
| CVE-2023-1871 | YourChannel WordPress plugin cross-site request forgery to plugin Language Translation reset | 4.3v3.1 | 0.3% | 2023-04-05 | Fix |
| CVE-2023-1870 | YourChannel WordPress plugin cross-site request forgery to plugin Language Translation update | 4.3v3.1 | 0.3% | 2023-04-05 | Fix |
| CVE-2023-1869 | YourChannel WordPress plugin authenticated (Administrator+) stored cross-site scripting | 4.8v3.1 | 0.5% | 2023-04-05 | Fix |
| CVE-2023-1868 | YourChannel WordPress plugin missing authorization to plugin Cache reset | 5.3v3.1 | 0.6% | 2023-04-05 | Fix |
| CVE-2023-1867 | YourChannel WordPress plugin cross-site request forgery to plugin settings Change | 4.3v3.1 | 0.3% | 2023-04-05 | Fix |
| CVE-2023-1866 | YourChannel WordPress plugin cross-site request forgery to plugin Channel reset | 4.3v3.1 | 0.3% | 2023-04-05 | Fix |
| CVE-2023-1865 | YourChannel WordPress plugin missing authorization to plugin settings reset | 6.5v3.1 | 0.7% | 2023-04-05 | Fix |
| CVE-2023-1860 | Keysight IXIA Hawkeye licenses cross-site scripting | 6.1v3.1 | 0.4% | 2023-04-05 | |
| CVE-2023-1858 | SourceCodester Earnings and Expense Tracker App index.php information disclosure | 7.5v3.1 | 0.6% | 2023-04-05 | |
| CVE-2023-1857 | SourceCodester Online Computer and Laptop Store cross-site scripting | 6.1v3.1 | 0.6% | 2023-04-05 | |
| CVE-2023-1856 | SourceCodester Air Cargo Management System GET parameter track_shipment.php SQL injection | 9.8v3.1 | 0.8% | 2023-04-05 | |
| CVE-2023-1855 | Linux kernel use-after-free | 6.3NVD v3.1 | 0.2% | 2023-04-05 | Fix |
| CVE-2023-1854 | SourceCodester Online Graduate Tracer System session expiration | 9.8v3.1 | 0.9% | 2023-04-05 | |
| CVE-2023-1853 | SourceCodester Online Payroll System employee_edit.php cross-site scripting | 6.1v3.1 | 0.6% | 2023-04-05 | |
| CVE-2023-1852 | SourceCodester Online Payroll System deduction_edit.php cross-site scripting | 6.1v3.1 | 0.6% | 2023-04-05 | |
| CVE-2023-1851 | SourceCodester Online Payroll System employee_add.php cross-site scripting | 6.1v3.1 | 0.6% | 2023-04-05 | |
| CVE-2023-1850 | SourceCodester Online Payroll System login.php SQL injection | 9.8v3.1 | 0.8% | 2023-04-05 | |
| CVE-2023-1849 | SourceCodester Online Payroll System cashadvance_row.php SQL injection | 9.8v3.1 | 0.8% | 2023-04-05 | |
| CVE-2023-1848 | SourceCodester Online Payroll System attendance_row.php SQL injection | 9.8v3.1 | 0.8% | 2023-04-05 | |
| CVE-2023-1847 | SourceCodester Online Payroll System attendance.php SQL injection | 9.8v3.1 | 0.8% | 2023-04-05 | |
| CVE-2023-1846 | SourceCodester Online Payroll System deduction_row.php SQL injection | 9.8v3.1 | 0.8% | 2023-04-05 | |
| CVE-2023-1845 | SourceCodester Online Payroll System employee_row.php SQL injection | 9.8v3.1 | 0.8% | 2023-04-05 | |
| CVE-2023-1838 | Linux kernel use-after-free | 7.1NVD v3.1 | 0.3% | 2023-04-05 | Fix |
| CVE-2023-1788 | Insufficient session expiration in firefly-iii/firefly-iii | 9.8v3.1 | 0.4% | 2023-04-05 | Fix |
| CVE-2023-1787 | GitLab resource exhaustion | 4.3CNA v3.1 | 0.8% | 2023-04-05 | Fix |
| CVE-2023-1782 | Nomad Unauthenticated client Agent HTTP request privilege escalation | 10.0CNA v3.1 | 0.8% | 2023-04-05 | Fix |
| CVE-2023-1758 | Failure to sanitize special elements into a different plane in thorsten/phpMyFAQ | 5.4NVD v3.1 | 0.5% | 2023-04-05 | Fix |
| CVE-2023-1757 | Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ | 5.4NVD v3.1 | 0.5% | 2023-04-05 | Fix |
| CVE-2023-1756 | Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ | 5.4v3.1 | 0.5% | 2023-04-05 | Fix |
| CVE-2023-1733 | GitLab Prometheus server bundled denial of service | 5.8CNA v3.1 | 1.2% | 2023-04-05 | Fix |
| CVE-2023-1710 | GitLab information disclosure | 5.3CNA v3.1 | 0.8% | 2023-04-05 | Fix |
| CVE-2023-1708 | GitLab command injection | 5.7CNA v3.1 | 1.1% | 2023-04-05 | Fix |
| CVE-2023-1582 | Linux race condition | 4.7NVD v3.1 | 0.1% | 2023-04-05 | Fix |
| CVE-2023-1522 | Genetec Security Center Hardware Inventory report SQL injection | 8.8v3.1 | 0.6% | 2023-04-05 | Fix |
| CVE-2023-1417 | GitLab insecure direct object reference | 4.3CNA v3.1 | 0.7% | 2023-04-05 | Fix |
| CVE-2023-1412 | Local privilege escalation vulnerability in WARP's MSI Installer | 7.0CNA v3.1 | 0.3% | 2023-04-05 | Fix |
| CVE-2023-1167 | GitLab improper authorization | 5.3CNA v3.1 | 0.6% | 2023-04-05 | Fix |
| CVE-2023-1098 | GitLab information disclosure | 5.8CNA v3.1 | 0.9% | 2023-04-05 | Fix |
| CVE-2023-1071 | GitLab incorrect authorization | 3.1CNA v3.1 | 0.4% | 2023-04-05 | Fix |
| CVE-2023-0967 | Bhima insecure direct object reference | 6.5v3.1 | 0.7% | 2023-04-05 | |
| CVE-2023-0959 | Bhima improper privilege management | 6.5v3.1 | 0.7% | 2023-04-05 | |
| CVE-2023-0944 | Bhima incorrect permission assignment | 4.3v3.1 | 0.5% | 2023-04-05 | |
| CVE-2023-0842 | xml2js prototype pollution | 5.3v3.1 | 1.4% | 2023-04-05 | Fix |
| CVE-2023-0838 | GitLab information disclosure | 5.5CNA v3.1 | 0.7% | 2023-04-05 | Fix |
| CVE-2023-0670 | Ulearn unrestricted file upload | 7.2v3.1 | 1.0% | 2023-04-05 | |
| CVE-2023-0523 | GitLab cross-site scripting | 5.4CNA v3.1 | 0.6% | 2023-04-05 | Fix |
| CVE-2023-0450 | An issue has been discovered in GitLab affecting all versions starting from 8.1 to 15.8.5, and from 15.9 to 15.9.4, and from 15.10 to 15.10.1. It was possible to add a branch with an ambiguous name that could be used to social engineer users. | 3.7CNA v3.1 | 0.7% | 2023-04-05 | Fix |
| CVE-2023-0382 | Uncontrolled resource consumption in M-Files Server | 6.5CNA v3.1 | 0.8% | 2023-04-05 | Fix |
| CVE-2023-0319 | GitLab incorrect authorization | 5.8CNA v3.1 | 0.7% | 2023-04-05 | Fix |
| CVE-2023-29323 | OpenSMTPD ascii_load_sockaddr function vulnerability | 7.8v3.1 | 0.3% | 2023-04-04 | Fix |
| CVE-2023-29003 | SvelteKit has insufficient cross-site request forgery Protection | 8.8CNA v3.1 | 0.6% | 2023-04-04 | Fix |
| CVE-2023-29000 | Nextcloud Desktop client does not verify received singed certificate in end-to-end encryption | 5.4CNA v3.1 | 0.4% | 2023-04-04 | Fix |
| CVE-2023-28999 | Nextcloud end-to-end encryption missing cryptographic step | 6.9CNA v3.1 | 0.7% | 2023-04-04 | Fix |
| CVE-2023-28998 | Nextcloud Desktop client misbehaves with E2EE when the server returns empty list of metadata keys | 6.7CNA v3.1 | 0.7% | 2023-04-04 | Fix |
| CVE-2023-28997 | Nextcloud Desktop Client end-to-end encryption nonce reuse | 6.7CNA v3.1 | 1.1% | 2023-04-04 | Fix |
| CVE-2023-28853 | Mastodon LDAP login LDAP injection | 7.7CNA v3.1 | 1.3% | 2023-04-04 | Fix |
| CVE-2023-28848 | Nextcloud User OIDC login state cross-site request forgery | 4.8CNA v3.1 | 0.3% | 2023-04-04 | Fix |
| CVE-2023-28842 | Moby/moby's dockerd daemon encrypted overlay network with a single endpoint is unauthenticated | 6.8CNA v3.1 | 1.4% | 2023-04-04 | Fix |
| CVE-2023-28841 | Moby/moby's dockerd daemon encrypted overlay network traffic may be unencrypted | 6.8CNA v3.1 | 0.7% | 2023-04-04 | Fix |
| CVE-2023-28840 | Moby/moby's dockerd daemon encrypted overlay network may be unauthenticated | 7.5CNA v3.1 | 2.6% | 2023-04-04 | Fix |
| CVE-2023-28613 | Samsung Exynos Modem 5300 integer overflow | 9.8v3.1 | 1.2% | 2023-04-04 | Fix |
| CVE-2023-27771 | Wondershare Creative Centerr untrusted search path | 7.8v3.1 | 0.4% | 2023-04-04 | |
| CVE-2023-27770 | Wondershare Edraw-max untrusted search path | 7.8v3.1 | 0.5% | 2023-04-04 | |
| CVE-2023-27769 | Wondershare PDF Reader untrusted search path | 7.8v3.1 | 0.4% | 2023-04-04 | |
| CVE-2023-27768 | Wondershare PDFelement untrusted search path | 7.8v3.1 | 0.4% | 2023-04-04 | |
| CVE-2023-27767 | Wondershare Dr.Fone untrusted search path | 7.8v3.1 | 0.4% | 2023-04-04 | |
| CVE-2023-27766 | Wondershare Anireel untrusted search path | 7.8v3.1 | 0.4% | 2023-04-04 | |
| CVE-2023-27765 | Wondershare Recoverit untrusted search path | 7.8v3.1 | 0.4% | 2023-04-04 | |
| CVE-2023-27764 | Wondershare Repairit untrusted search path | 7.8v3.1 | 0.4% | 2023-04-04 | |
| CVE-2023-27763 | Wondershare Mobiletrans untrusted search path | 7.8v3.1 | 0.4% | 2023-04-04 | |
| CVE-2023-27762 | Wondershare Democreator untrusted search path | 7.8v3.1 | 0.4% | 2023-04-04 | |
| CVE-2023-27761 | Wondershare Uniconverter untrusted search path | 7.8v3.1 | 0.4% | 2023-04-04 | |
| CVE-2023-27760 | Wondershare Filmora untrusted search path | 7.8v3.1 | 0.4% | 2023-04-04 | |
| CVE-2023-27759 | Wondershare Edrawmind untrusted search path | 7.8v3.1 | 0.4% | 2023-04-04 | |
| CVE-2023-27734 | Edb-debugger denial of service | 5.5v3.1 | 0.2% | 2023-04-04 | |
| CVE-2023-27496 | Envoy may crash when a redirect URL without a state param is received in the oauth filter | 6.5CNA v3.1 | 0.8% | 2023-04-04 | Fix |
| CVE-2023-27493 | Envoy doesn't escape HTTP header values | 8.1CNA v3.1 | 0.5% | 2023-04-04 | Fix |
| CVE-2023-27492 | Envoy may crash when a large request body is processed in Lua filter | 4.8CNA v3.1 | 0.7% | 2023-04-04 | Fix |
| CVE-2023-27491 | Envoy forwards invalid Http2/Http3 downstream headers | 5.4CNA v3.1 | 0.9% | 2023-04-04 | Fix |
| CVE-2023-27488 | Envoy gRPC client produces invalid protobuf when an HTTP header with non-UTF8 value is received | 5.4CNA v3.1 | 0.7% | 2023-04-04 | Fix |
| CVE-2023-27487 | Envoy client may fake the header `x-envoy-original-path` | 8.2CNA v3.1 | 0.6% | 2023-04-04 | Fix |
| CVE-2023-27091 | TeaCMS XiaoBingby unauthorized access | 7.2v3.1 | 0.7% | 2023-04-04 | |
| CVE-2023-27089 | Ehuacui-bbs cross-site scripting | 8.2v3.1 | 0.4% | 2023-04-04 | |
| CVE-2023-26991 | swftools use-after-free | 7.8v3.1 | 0.3% | 2023-04-04 | |
| CVE-2023-26976 | Tenda AC6 out-of-bounds write | 7.5v3.1 | 15.9% | 2023-04-04 | Exploit code |
| CVE-2023-26974 | IrfanView memory corruption | 5.5v3.1 | 0.6% | 2023-04-04 | |
| CVE-2023-26921 | Quectel AG550QCN OS command injection | 9.8v3.1 | 2.7% | 2023-04-04 | |
| CVE-2023-26866 | Green Packet Wr-1200 command injection | 9.8v3.1 | 2.3% | 2023-04-04 | Exploit code |
| CVE-2023-26855 | ChurchCRM insufficient randomness | 7.5v3.1 | 0.7% | 2023-04-04 | |
| CVE-2023-26777 | uptime-kuma cross-site scripting | 6.1v3.1 | 0.7% | 2023-04-04 | |
| CVE-2023-26776 | Monitorr cross-site scripting | 6.1v3.1 | 1.2% | 2023-04-04 | |
| CVE-2023-26775 | Monitorr file upload | 7.8v3.1 | 49.4% | 2023-04-04 | |
| CVE-2023-26750 | Yiiframework Yii SQL injection | 9.8v3.1 | 1.8% | 2023-04-04 | |
| CVE-2023-26733 | TinyTIFF buffer overflow | 7.8v3.1 | 0.4% | 2023-04-04 | |
| CVE-2023-26437 | PowerDNS Recursor denial of service | 3.4CNA v3.1 | 0.6% | 2023-04-04 | Fix |
| CVE-2023-25942 | Dell PowerScale OneFS resource exhaustion | 6.5CNA v3.1 | 0.6% | 2023-04-04 | Fix |
| CVE-2023-25941 | Dell PowerScale OneFS incorrect default permissions | 7.8CNA v3.1 | 0.2% | 2023-04-04 | Fix |
| CVE-2023-25940 | Dell PowerScale OneFS link following | 6.7CNA v3.1 | 0.2% | 2023-04-04 | Fix |
| CVE-2023-25356 | Coredial Sipxcom argument injection | 8.8v3.1 | 2.1% | 2023-04-04 | KCV |
| CVE-2023-25355 | Coredial Sipxcom incorrect default permissions | 8.8v3.1 | 2.5% | 2023-04-04 | Exploit codeKCV |
| CVE-2023-25305 | Polymc path traversal | 7.1v3.1 | 0.6% | 2023-04-04 | Fix |
| CVE-2023-25303 | Atlauncher path traversal | 7.1v3.1 | 0.6% | 2023-04-04 | Fix |
| CVE-2023-23977 | Heateor Social Comments WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-04-04 | Fix |
| CVE-2023-23878 | WP Google Map WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-04-04 | Fix |
| CVE-2023-23870 | Responsive Vertical Icon Menu WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-04 | Fix |
| CVE-2023-23821 | Interactive Polish Map WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-04 | Fix |
| CVE-2023-23686 | Simple Staff List WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-04-04 | Fix |
| CVE-2023-23685 | Portfolio WordPress Portfolio plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-04-04 | Fix |
| CVE-2023-1840 | Sp*tify Play Button for WordPress plugin authenticated (Administrator+) stored cross-site scripting | 4.8v3.1 | 0.4% | 2023-04-04 | Fix |
| CVE-2023-1827 | SourceCodester Centralized Covid Vaccination Records System SQL injection | 9.8v3.1 | 0.7% | 2023-04-04 | |
| CVE-2023-1826 | SourceCodester Online Computer and Laptop Store index.php unrestricted upload | 9.8v3.1 | 4.4% | 2023-04-04 | Exploit code |
| CVE-2023-1823 | Google Chrome FedCM inappropriate implementation | 6.5v3.1 | 0.9% | 2023-04-04 | Fix |
| CVE-2023-1822 | Google Chrome Navigation incorrect security UI | 6.5v3.1 | 0.9% | 2023-04-04 | Fix |
| CVE-2023-1821 | Google Chrome WebShare inappropriate implementation | 6.5v3.1 | 0.8% | 2023-04-04 | Fix |
| CVE-2023-1820 | Google Chrome Browser History heap-based buffer overflow | 8.8v3.1 | 1.0% | 2023-04-04 | Fix |
| CVE-2023-1819 | Google Chrome Accessibility out-of-bounds read | 6.5v3.1 | 0.9% | 2023-04-04 | Fix |
| CVE-2023-1818 | Google Chrome Vulkan use-after-free | 8.8v3.1 | 0.9% | 2023-04-04 | Fix |
| CVE-2023-1817 | Google Chrome Intents insufficient policy enforcement | 6.5v3.1 | 1.0% | 2023-04-04 | Fix |
| CVE-2023-1816 | Google Chrome Picture In Picture incorrect security UI | 6.5v3.1 | 0.8% | 2023-04-04 | Fix |
| CVE-2023-1815 | Google Chrome Networking APIs use-after-free | 8.8v3.1 | 0.9% | 2023-04-04 | Fix |
| CVE-2023-1814 | Google Chrome Safe Browsing vulnerability | 6.5v3.1 | 0.9% | 2023-04-04 | Fix |
| CVE-2023-1813 | Google Chrome extensions inappropriate implementation | 6.5v3.1 | 0.7% | 2023-04-04 | Fix |
| CVE-2023-1812 | Google Chrome DOM Bindings out-of-bounds access | 8.8v3.1 | 0.9% | 2023-04-04 | Fix |
| CVE-2023-1811 | Google Chrome Frames use-after-free | 8.8v3.1 | 1.0% | 2023-04-04 | Fix |
| CVE-2023-1810 | Google Chrome Visuals heap-based buffer overflow | 8.8v3.1 | 1.1% | 2023-04-04 | Fix |
| CVE-2023-1768 | Tribe29 Checkmk symmetric agent data encryption fails silently | 5.3v3.1 | 0.9% | 2023-04-04 | Fix |
| CVE-2023-1752 | Nexx Smart Home devices device registration improper authentication | 4.3NVD v3.1 | 0.5% | 2023-04-04 | Fix |
| CVE-2023-1751 | Nexx Smart Home devices WebSocket server vulnerability | 5.3NVD v3.1 | 0.6% | 2023-04-04 | Fix |
| CVE-2023-1750 | Nexx Smart Home devices device API improper access control | 7.1v3.1 | 0.5% | 2023-04-04 | Fix |
| CVE-2023-1749 | Nexx Smart Home devices device API improper access control | 6.5v3.1 | 0.5% | 2023-04-04 | Fix |
| CVE-2023-1748 | Nexx Smart Home devices hard-coded credentials | 10.0v3.1 | 0.8% | 2023-04-04 | Fix |
| CVE-2023-1728 | Unrestricted upload of file with dangerous type in Fernus LMS | 9.8v3.1 | 1.4% | 2023-04-04 | Fix |
| CVE-2023-1671 | Sophos Web Appliance command injection | 9.8CNA v3.1 | 100.0% | 2023-04-04 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2023-0835 | markdown-pdf Local File Read via Server Side XSS | 8.2v3.1 | 0.6% | 2023-04-04 | |
| CVE-2023-0738 | OrangeScrum cross-site scripting | 6.1v3.1 | 0.5% | 2023-04-04 | |
| CVE-2023-0486 | VitalPBX cross-site scripting | 6.1v3.1 | 0.4% | 2023-04-04 | |
| CVE-2023-0480 | VitalPBX cross-site request forgery | 8.8v3.1 | 0.3% | 2023-04-04 | |
| CVE-2023-0357 | Helpy cross-site scripting | 6.1v3.1 | 0.7% | 2023-04-04 | |
| CVE-2023-0325 | Uvdesk vulnerable to stored cross-site scripting (XSS) | 6.1v3.1 | 0.7% | 2023-04-04 | |
| CVE-2023-0265 | Uvdesk remote code execution | 8.8v3.1 | 1.6% | 2023-04-04 | |
| CVE-2023-29218 | Twitter Recommendation Algorithm denial of service | 7.5v3.1 | 1.1% | 2023-04-03 | |
| CVE-2023-28854 | paijp nophp password reset mail handler command injection | 8.0CNA v3.1 | 1.5% | 2023-04-03 | Fix |
| CVE-2023-28851 | Bigfork Silverstripe Form Capture form submissions stored cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-04-03 | Fix |
| CVE-2023-28850 | Pimcore Perspective Editor vulnerable to cross-site scripting in perspective name | 6.1CNA v3.1 | 0.6% | 2023-04-03 | Fix |
| CVE-2023-28837 | Wagtail vulnerable to denial of service via memory exhaustion when uploading large files | 4.9CNA v3.1 | 1.1% | 2023-04-03 | Fix |
| CVE-2023-28836 | Wagtail vulnerable to stored cross-site scripting attack via ModelAdmin views | 6.4CNA v3.1 | 0.8% | 2023-04-03 | Fix |
| CVE-2023-28834 | Full path of data directory exposed to Nextcloud Server users | 3.5CNA v3.1 | 0.8% | 2023-04-03 | Fix |
| CVE-2023-28625 | mod_auth_openidc core dump when OIDCStripCookies is set and an empty Cookie header is supplied | 7.5CNA v3.1 | 1.3% | 2023-04-03 | Fix |
| CVE-2023-26916 | CESNET libyang null pointer dereference | 5.3v3.1 | 1.0% | 2023-04-03 | Fix |
| CVE-2023-26529 | DupeOff WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-03 | |
| CVE-2023-26269 | Apache James server: Privilege escalation through unauthenticated JMX | 7.8v3.1 | 0.7% | 2023-04-03 | Exploit codeFix |
| CVE-2023-26119 | HtmlUnit code injection | 9.8NVD v3.1 | 2.5% | 2023-04-03 | Fix |
| CVE-2023-26112 | configobj ReDoS exploitable by developer using values in a server-side configuration file | 5.9v3.1 | 1.3% | 2023-04-03 | Fix |
| CVE-2023-24724 | Sas Web Administration Interface cross-site scripting | 5.4v3.1 | 0.6% | 2023-04-03 | Fix |
| CVE-2023-1766 | Akbim Panon reflected cross-site scripting | 6.1v3.1 | 0.4% | 2023-04-03 | Fix |
| CVE-2023-1765 | Akbim Computer Panon SQL command improper neutralization | 9.8CNA v3.1 | 0.7% | 2023-04-03 | Fix |
| CVE-2023-1611 | Linux kernel use-after-free | 6.3NVD v3.1 | 0.2% | 2023-04-03 | Fix |
| CVE-2023-1579 | binutils heap-based buffer overflow | 7.8NVD v3.1 | 0.5% | 2023-04-03 | Fix |
| CVE-2023-1377 | Solidres WordPress plugin Multiple reflected XSS | 6.1NVD v3.1 | 0.5% | 2023-04-03 | |
| CVE-2023-1330 | Redirection WordPress plugin redirect creation via CSRF | 6.5NVD v3.1 | 0.3% | 2023-04-03 | Fix |
| CVE-2023-1124 | Shopping Cart and eCommerce Store WordPress plugin Admin+ LFI | 7.2NVD v3.1 | 1.1% | 2023-04-03 | Fix |
| CVE-2023-0977 | Trellix Agent heap-based buffer overflow | 6.7CNA v3.1 | 0.6% | 2023-04-03 | Fix |
| CVE-2023-0975 | Trellix Agent improper preservation of permissions | 8.2CNA v3.1 | 0.2% | 2023-04-03 | Fix |
| CVE-2023-0922 | samba cleartext transmission of sensitive information | 5.9NVD v3.1 | 0.5% | 2023-04-03 | Fix |
| CVE-2023-0820 | User Role by BestWebSoft WordPress plugin privilege escalation via CSRF | 8.8NVD v3.1 | 0.4% | 2023-04-03 | Fix |
| CVE-2023-0614 | samba information disclosure | 6.5NVD v3.1 | 0.6% | 2023-04-03 | Fix |
| CVE-2023-0399 | Image Over Image For WPBakery Page Builder WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-04-03 | Fix |
| CVE-2023-0225 | samba incorrect permission assignment | 4.3NVD v3.1 | 0.7% | 2023-04-03 | Fix |
| CVE-2023-28684 | Jenkins remote-jobs-view-plugin vulnerable to XML external entity attacks | 6.5v3.1 | 0.7% | 2023-04-02 | Fix |
| CVE-2023-28683 | Jenkins Phabricator Differential Plugin vulnerable to XML external entity (XXE) attacks | 8.2v3.1 | 0.6% | 2023-04-02 | Fix |
| CVE-2023-28682 | Jenkins Performance Publisher Plugin vulnerable to XML external entity (XXE) attacks | 8.2v3.1 | 0.6% | 2023-04-02 | Fix |
| CVE-2023-28681 | Jenkins Visual Studio Code Metrics Plugin vulnerable to XML external entity (XXE) attacks | 8.2v3.1 | 0.6% | 2023-04-02 | Fix |
| CVE-2023-28680 | Jenkins Crap4J Plugin vulnerable to XML external entity (XXE) attacks | 7.5v3.1 | 0.8% | 2023-04-02 | Fix |
| CVE-2023-28679 | Jenkins Mashup Portlets Plugin vulnerable to stored cross-site scripting | 5.4v3.1 | 0.6% | 2023-04-02 | Fix |
| CVE-2023-28678 | Jenkins Cppcheck Plugin vulnerable to stored cross-site scripting (XSS) | 5.4v3.1 | 0.5% | 2023-04-02 | Fix |
| CVE-2023-28677 | Jenkins Convert To Pipeline Plugin vulnerable to command injection | 9.8v3.1 | 0.8% | 2023-04-02 | Fix |
| CVE-2023-28676 | Jenkins Convert To Pipeline Plugin vulnerable to cross-site request forgery | 8.8v3.1 | 0.6% | 2023-04-02 | Fix |
| CVE-2023-28675 | Jenkins OctoPerf Load Testing Plugin Plugin missing authorization | 4.3v3.1 | 0.4% | 2023-04-02 | Fix |
| CVE-2023-28674 | Jenkins OctoPerf Load Testing Plugin vulnerable to cross-site request forgery | 8.8v3.1 | 0.4% | 2023-04-02 | Fix |
| CVE-2023-28673 | Jenkins OctoPerf Load Testing Plugin missing permission check allows for ID enumeration | 4.3v3.1 | 0.4% | 2023-04-02 | Fix |
| CVE-2023-28672 | Jenkins OctoPerf Load Testing Plugin vulnerable to credential capture | 6.5v3.1 | 0.5% | 2023-04-02 | Fix |
| CVE-2023-28671 | Jenkins OctoPerf Load Testing Plugin vulnerable to cross-site request forgery | 4.3v3.1 | 0.4% | 2023-04-02 | Fix |
| CVE-2023-28670 | Jenkins Pipeline Aggregator View Plugin vulnerable to cross-site scripting | 5.4v3.1 | 0.5% | 2023-04-02 | Fix |
| CVE-2023-28669 | Jenkins JaCoCo Plugin vulnerable to stored cross-site scripting | 5.4v3.1 | 0.6% | 2023-04-02 | Fix |
| CVE-2023-28668 | Jenkins Role-based Authorization Strategy Plugin grants permissions even after they’ve been disabled | 9.8v3.1 | 0.8% | 2023-04-02 | Fix |
| CVE-2023-27286 | IBM Aspera code execution | 8.4CNA v3.1 | 0.7% | 2023-04-02 | Fix |
| CVE-2023-27284 | IBM Aspera code execution | 8.4CNA v3.1 | 0.7% | 2023-04-02 | Fix |
| CVE-2023-27025 | RuoYi vulnerable to arbitrary file download | 7.5v3.1 | 0.3% | 2023-04-02 | Fix |
| CVE-2023-26283 | IBM WebSphere Application Server cross-site scripting | 5.4CNA v3.1 | 0.4% | 2023-04-02 | Fix |
| CVE-2023-20559 | AMD Ryzen 2000 Series insufficient control flow management | 8.8v3.1 | 0.7% | 2023-04-02 | Fix |
| CVE-2023-20558 | AMD Ryzen 2000 Series insufficient control flow management | 8.8v3.1 | 0.7% | 2023-04-02 | Fix |
| CVE-2023-1800 | sjqzhang go-fastdfs file upload uploa upload path traversal | 9.8v3.1 | 3.5% | 2023-04-02 | Fix |
| CVE-2023-1799 | EyouCMS login.php cross-site scripting | 5.4v3.1 | 0.6% | 2023-04-02 | |
| CVE-2023-1798 | EyouCMS login.php cross-site scripting | 5.4v3.1 | 0.6% | 2023-04-02 | |
| CVE-2023-1797 | Otcms unrestricted upload | 9.8v3.1 | 0.9% | 2023-04-02 | |
| CVE-2023-1796 | SourceCodester Employee Payslip Generator Create News cross-site scripting | 5.4v3.1 | 0.5% | 2023-04-02 | |
| CVE-2023-1795 | SourceCodester Gadget Works Online Ordering System GET parameter index.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-04-02 | |
| CVE-2023-1794 | SourceCodester Police Crime Record Management System casedetails.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-04-02 | |
| CVE-2023-1793 | SourceCodester Police Crime Record Management System GET parameter assigncase.php SQL injection | 9.8v3.1 | 0.7% | 2023-04-02 | |
| CVE-2023-1792 | SourceCodester Simple Mobile Comparison Website GET parameter manage_field.php SQL injection | 9.8v3.1 | 0.7% | 2023-04-02 | |
| CVE-2023-1791 | SourceCodester Simple Task Allocation System manage_user.php SQL injection | 9.8v3.1 | 0.6% | 2023-04-02 | |
| CVE-2023-1603 | Devolutions Server incorrect authorization | 6.5v3.1 | 0.6% | 2023-04-02 | Fix |
| CVE-2023-1580 | Devolutions Gateway logging feature resource exhaustion | 7.5v3.1 | 0.6% | 2023-04-02 | Fix |
| CVE-2023-1574 | Devolutions Remote Desktop Manager information disclosure | 6.5v3.1 | 0.5% | 2023-04-02 | Fix |
| CVE-2023-1202 | Devolutions Remote Desktop Manager incorrect authorization | 6.5v3.1 | 0.4% | 2023-04-02 | Fix |
| CVE-2023-26822 | D-Link Go-rt-ac750 command injection | 9.8v3.1 | 3.4% | 2023-04-01 | |
| CVE-2023-1790 | SourceCodester Simple Task Allocation System index.php information disclosure | 7.5v3.1 | 0.6% | 2023-04-01 | |
| CVE-2023-1789 | Improper input validation in firefly-iii/firefly-iii | 9.8v3.1 | 0.3% | 2023-04-01 | Fix |
| CVE-2023-0208 | NVIDIA DCGM heap-based buffer overflow | 8.4CNA v3.1 | 0.2% | 2023-04-01 | Fix |
| CVE-2023-0198 | NVIDIA vGPU software memory corruption | 6.6CNA v3.1 | 0.3% | 2023-04-01 | Fix |
| CVE-2023-0197 | NVIDIA vGPU software null pointer dereference | 5.5CNA v3.1 | 0.2% | 2023-04-01 | Fix |
| CVE-2023-0195 | NVIDIA vGPU software improper quantity validation | 2.0CNA v3.1 | 0.3% | 2023-04-01 | Fix |
| CVE-2023-0194 | NVIDIA vGPU software improper quantity validation | 2.0CNA v3.1 | 0.4% | 2023-04-01 | Fix |
| CVE-2023-0192 | NVIDIA vGPU software improper privilege management | 4.7CNA v3.1 | 0.1% | 2023-04-01 | Fix |
| CVE-2023-0191 | NVIDIA vGPU software out-of-bounds access | 7.1CNA v3.1 | 0.2% | 2023-04-01 | Fix |
| CVE-2023-0189 | NVIDIA vGPU software untrusted pointer dereference | 8.8CNA v3.1 | 0.3% | 2023-04-01 | Fix |
| CVE-2023-0188 | NVIDIA vGPU software out-of-bounds read | 5.5CNA v3.1 | 0.2% | 2023-04-01 | Fix |
| CVE-2023-0187 | NVIDIA vGPU software out-of-bounds read | 6.1CNA v3.1 | 0.2% | 2023-04-01 | Fix |
| CVE-2023-0186 | NVIDIA vGPU software out-of-bounds write | 6.1CNA v3.1 | 0.2% | 2023-04-01 | Fix |
| CVE-2023-0185 | NVIDIA vGPU software denial of service | 6.7CNA v3.1 | 0.2% | 2023-04-01 | Fix |
| CVE-2023-0183 | NVIDIA vGPU software out-of-bounds write | 7.1CNA v3.1 | 0.2% | 2023-04-01 | Fix |
| CVE-2023-0182 | NVIDIA vGPU software out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2023-04-01 | Fix |
| CVE-2023-0181 | NVIDIA vGPU software improper handling of insufficient permissions | 7.1CNA v3.1 | 0.2% | 2023-04-01 | Fix |
| CVE-2023-0180 | NVIDIA vGPU software out-of-bounds read | 7.1CNA v3.1 | 0.2% | 2023-04-01 | Fix |