CVEs published in March 2023
2,723 vulnerabilities, 268 critical, 14 exploited.
- huawei emui, harmonyos +1 moreThe SystemUI module has a vulnerability of repeated app restart due to improper parameters....7.5 High
- huawei emui, harmonyos +1 moreThe pgmng module has a vulnerability in serialization/deserialization. Successful exploitation of...7.5 High
- huawei emui, harmonyos +1 moreThe InputMethod module has a vulnerability of serialization/deserialization mismatch. Successful...7.8 High
- hgiga inc. oaklouds, hgiga oaklouds portal +1 moreHGiga Inc. OAKlouds - Arbitrary File Upload9.8 Critical
- adobe photoshopAdobe Photoshop SVG file Use After Free Arbitrary code execution7.8 High
- adobe substance 3d stager, substance3d - stager +1 moreAdobe Substance 3D Stager OBJ File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe substance 3d stager, substance3d - stager +1 moreAdobe Substance 3D Stager OBJ File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe substance 3d stager, substance3d - stager +1 moreAdobe Substance 3D Stager OBJ File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe substance 3d stager, substance3d - stager +1 moreAdobe Substance 3D Stager OBJ File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe substance 3d stager, substance3d - stager +1 moreAdobe Substance 3D Stager SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe substance 3d stager, substance3d - stager +1 moreAdobe Substance 3D Stager SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- adobe substance 3d stager, substance3d - stager +1 moreAdobe Substance 3D Stager SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe substance 3d stager, substance3d - stager +1 moreAdobe Substance 3D Stager SVG File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe substance 3d stager, substance3d - stager +1 moreAdobe Substance 3D Stager SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe substance 3d stager, substance3d - stager +1 moreAdobe Substance 3D Stager SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- adobe substance 3d stager, substance3d - stager +1 moreAdobe Substance 3D Stager SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe substance 3d stager, substance3d - stager +1 moreAdobe Substance 3D Stager PCX File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- adobe substance 3d stager, substance3d - stager +1 moreAdobe Substance 3D Stager OBJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe substance 3d stager, substance3d - stager +1 moreAdobe Substance 3D Stager OBJ File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- adobe substance 3d stager, substance3d - stager +1 moreAdobe Substance 3D Stager FBX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe substance 3d stager, substance3d - stager +1 moreAdobe Substance 3D Stager USDC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- stimulsoft designerIn Stimulsoft Designer (Desktop) 2023.1.5, and 2023.1.4, once an attacker decompiles the...5.5 Medium
- stimulsoft designer, viewer +1 moreCertain Stimulsoft GmbH products are affected by: Remote Code Execution. This affects Stimulsoft...9.8 Critical
- rifartek iot wallRifartek IOT Wall - Reflected XSS5.4 Medium
- rifartek iot wallRifartek IOT Wall - Broken Access Control8.1 High
- hgiga mailsherlock, oaklouds mailsherlock +1 moreHGiga MailSherlock - Broken Access Control5.3 Medium
- hgiga mailsherlock, oaklouds mailsherlock +1 moreHGiga MailSherlock - Command Injection7.2 High
- hgiga mailsherlock, oaklouds mailsherlock +1 moreHGiga MailSherlock - SQL Injection7.2 High
- hgiga mailsherlock, oaklouds mailsherlock +1 moreHGiga MailSherlock - Reflected XSS6.1 Medium
- hgiga powerstation, powerstation firmware +1 moreHGiga PowerStation - Information Leakage9.8 Critical
- hgiga powerstation, powerstation firmware +1 moreHGiga PowerStation - Command Injection8.8 High
- softnext spam sqrSoftnext SPAM SQR - Code Injection7.2 High
- wisdomgarden tronclass ilearnWisdomGarden Tronclass ilearn - Broken Access Control6.5 Medium
- rconfigAn arbitrary file download vulnerability in rConfig v6.8.0 allows attackers to download sensitive...6.5 Medium
- mikrotik routerosAn issue in the bridge2 component of MikroTik RouterOS v6.40.5 allows attackers to cause a Denial...7.5 High
- openfind mail2000Openfind Mail2000 - XSS5.4 Medium
- adobe commerce, magento commerce, magento open source +2 moreAdobe Commerce Incorrect Authorization Security feature bypass4.3 Medium
- adobe commerce, magento commerce, magento open source +2 moreAdobe Commerce Improper Access Control Security feature bypass5.3 Medium
- adobe commerce, magento commerce, magento open source +2 moreAdobe Commerce Stored XSS Arbitrary code execution4.8 Medium
- adobe commerce, magento commerce, magento open source +2 moreAdobe Commerce XML Injection Arbitrary file system read7.5 High
- vmware spring frameworkSpring Framework is vulnerable to security bypass via mvcRequestMatcher pattern mismatch7.5 High
- linagora linagora/twake, twake +1 moreImproper Restriction of Excessive Authentication Attempts in linagora/twake7.8 High
- gpac, gpac gpac/gpac +1 moreHeap-based Buffer Overflow in gpac/gpac7.8 High
- gpac, gpac gpac/gpac +1 moreDenial of Service in gpac/gpac4.8 Medium
- cal cal.com, calcom calcom/cal.com +1 moreImproper Access Control in calcom/cal.com8.8 High
- linux kernelA flaw that boot CPU could be vulnerable for the speculative execution behavior kind of attacks...5.5 Medium
- openstack heat, rdo openstack rdo, red hat openstack platform 13 (queens) +4 more +6 moreInformation leak in api7.4 High
- debian linux, linux kernel, canonical ubuntu linux +6 more +8 moreA slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless...7.1 High
- debian linux, linux kernel, netapp 8300 firmware +13 more +15 moreIn the Linux kernel, pick_next_rt_entity() may return a type confused entry, not detected by the...7.0 High
- haproxyAn information leak vulnerability was discovered in HAProxy 2.1, 2.2 before 2.2.27, 2.3, 2.4...7.5 High
- Show moreLoading…