CVEs published in March 2023
2,723 vulnerabilities, 268 critical, 14 exploited.
- avast antivirusJiangMin Antivirus IOCTL kvcore.sys 0x222000 denial of service5.5 Medium
- avast antivirusJiangMin Antivirus IOCTL kvcore.sys 0x222010 memory corruption5.3 Medium
- avast antivirusJianming Antivirus IoControlCode kvcore.sys null pointer dereference5.5 Medium
- avast antivirusJianming Antivirus IoControlCode kvcore.sys denial of service5.5 Medium
- avast antivirusJianming Antivirus IoControlCode kvcore.sys memory corruption5.3 Medium
- ubiquiti edgerouter x, ui edgerouter x firmware +1 more** DISPUTED ** A vulnerability has been found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6 and...7.2 High
- ubiquiti edgerouter x, ui edgerouter x firmware +1 more** DISPUTED ** A vulnerability, which was classified as critical, was found in Ubiquiti...7.2 High
- ubiquiti edgerouter x, ui edgerouter x firmware +1 more** DISPUTED ** A vulnerability, which was classified as critical, has been found in Ubiquiti...7.2 High
- dataeaseSQL injection vulnerability due to the keyword blacklist for defending against SQL injection will be bypassed9.8 Critical
label-studioPyPINginx alias path traversal allows unauthenticated attackers to read all files on /label_studio/core/7.5 High- google tensorflowTensorFlow vulnerable to Out-of-Bounds Read in DynamicStitch7.5 High
- google tensorflowTensorFlow vulnerable to seg fault in `tf.raw_ops.Print`7.5 High
- google tensorflowTensorFlow vulnerable to integer overflow in EditDistance7.5 High
- google tensorflowTensorFlow has Null Pointer Error in TensorArrayConcatV27.5 High
- google tensorflowTensorFlow vulnerable to Heap Buffer Overflow in AvgPoolGrad7.5 High
- google tensorflowTensorFlow has Null Pointer Error in SparseSparseMaximum7.5 High
- google tensorflowTensorFlow has Floating Point Exception in AudioSpectrogram7.5 High
- google tensorflowTensorFlow vulnerable to segfault when opening multiframe gif6.5 Medium
- google tensorflowTensorFlow vulnerable to heap out-of-buffer read in the QuantizeAndDequantize operation9.8 Critical
- google tensorflowTensorFlow has Floating Point Exception in AvgPoolGrad with XLA7.5 High
- google tensorflowTensorFlow has Null Pointer Error in QuantizedMatMulWithBiasAndDequantize7.5 High
- google tensorflowTensorFlow has segmentation fault in tfg-translate7.5 High
- google tensorflowTensorFlow has Null Pointer Error in LookupTableImportV27.5 High
- google tensorflowTensorFlow has Floating Point Exception in TensorListSplit with XLA7.5 High
- google tensorflowTensorFlow has Null Pointer Error in RandomShuffle with XLA enable7.5 High
- google tensorflowTensorFlow has Segfault in Bincount with XLA7.5 High
- google tensorflowTensorFlow has null dereference on ParallelConcat with XLA7.5 High
- google tensorflowTensorFlow has double free in Fractional(Max/Avg)Pool8.0 High
- google tensorflowTensorFlow has Floating Point Exception in TFLite in conv kernel7.5 High
- google tensorflowTensorFlow vulnerable to Out-of-Bounds Read in GRUBlockCellGrad7.5 High
- dataeaseDataease file upload interface does not verify permission or file type6.5 Medium
- angular-server-side-configuration project angular-server-side-configurationangular-server-side-configuration information disclosure vulnerability in monorepo with node.js backend9.9 Critical
- denoDeno is vulnerable to interactive `run` permission prompt spoofing via improper ANSI neutralization8.8 High
- rapid7 insightvmRapid7 InsightVM Insufficient Session Expiration5.7 Medium
- apache openofficeApache OpenOffice: Macro URL arbitrary script execution7.8 High
- apache openofficeApache OpenOffice: Empty entry in Java class path7.8 High
dpdkSUSE,dpdk-thunderxSUSE +1 moreSecurity update for dpdkNo scoresleuthkitOSS-FuzzHeap-buffer-overflow in std::__1::enable_if<true, void>::type APFSBtreeNodeIterator<APFSBtreeNode<apfs_oNo scoreharfbuzzOSS-FuzzHeap-buffer-overflow in hb_subset_plan_t::hb_subset_plan_tNo scoreflacOSS-FuzzHeap-use-after-free in flac__analyze_frameNo scorenatscrates.ioNATS TLS certificate common name validation bypassNo scoreasync-natscrates.ioasync-nats vulnerable to TLS certificate common name validation bypassNo scoreopensslcrates.io`openssl` `SubjectAlternativeName` and `ExtendedKeyUsage::other` allow arbitrary file readNo scoreopensslcrates.io`openssl` `X509Extension::new` and `X509Extension::new_nid` null pointer dereferenceNo scoreopensslcrates.io`openssl` `X509NameBuilder::build` returned object is not thread safeNo score- firecracker-microvm versionizeVersionize is lacking bound checks, potentially leading to out of bounds memory access5.7 Medium
- linux kernelA flaw was found in the Linux kernel. A use-after-free may be triggered in asus_kbd_backlight_set...6.8 Medium
- teacms project teacmsXiaoBingBy TeaCMS Article Title cross site scripting3.5 Low
libmicrohttpdMageiaUpdated libmicrohttpd packages fix security vulnerabilityNo scorelibdatetime-timezone-perlDebianlibdatetime-timezone-perl - new timezone databaseNo score- Show moreLoading…