CVEs published in April 2023
2,411 vulnerabilities, 280 critical, 18 exploited.
- woocommerce icons for features Icons for Features Plugin class-icons-for-features-admin.php redirect 3.5 Low
-
clamavOSS-Fuzz Heap-buffer-overflow in pdf_nextobject No score -
distro-info-dataDebian distro-info-data - database update No score - phpmyfaq, thorsten thorsten/phpmyfaq +1 more Improper Access Control in thorsten/phpmyfaq 6.6 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 more Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq 6.1 Medium
- ibm java, infosphere information server, websphere application server +1 more +3 more IBM Java information disclosure 7.5 High
-
ghostscriptOSS-Fuzz Stack-buffer-overflow in pdfi_read_cff_dict No score -
clamavOSS-Fuzz UNKNOWN READ in cli_html_normalise No score - edneville please Pleaser privilege escalation vulnerability 7.8 High
- campcodes simple student information system, simple student information system project student information system +1 more SourceCodester Simple Student Information System Add New Course cross site scripting 2.4 Low
- dedecms DedeCMS config.php UpDateMemberModCache unrestricted upload 6.3 Medium
- ibm financial transaction manager for swift services, financial transaction manager for multiplatform +1 more IBM Financial Transaction Manager for SWIFT Services cross-site scripting 4.6 Medium
- facebook lexical Anchor tag hrefs in Lexical prior to v0.10.0 would render javascript: URLs, allowing for cross... 6.1 Medium
- ibm spectrum scale container native storage access IBM Spectrum Scale Container Native Storage Access privilege escalation 8.4 High
- control id rhid Control iD RHiD department cross site scripting 3.5 Low
- mlecms MLECMS common.func.php get_url sql injection 6.3 Medium
- crmeb Zhong Bang CRMEB SystemAttachmentServices.php videoUpload unrestricted upload 4.7 Medium
- konghq kong Konga Login API random values 3.1 Low
- ks-soft advanced host monitor ks-soft Advanced Host Monitor rma_active.exe unquoted search path 5.3 Medium
- oretnom23 ac repair and services system SourceCodester AC Repair and Services System manage_booking.php sql injection 6.3 Medium
- vim, vim vim/vim, apple macos +2 more +4 more Use of Out-of-range Pointer Offset in vim/vim 6.8 Medium
- oretnom23 ac repair and services system SourceCodester AC Repair and Services System manage_user.php sql injection 6.3 Medium
- oretnom23 ac repair and services system SourceCodester AC Repair and Services System view_inquiry.php sql injection 6.3 Medium
- oretnom23 ac repair and services system SourceCodester AC Repair and Services System view_booking.php sql injection 6.3 Medium
- oretnom23 ac repair and services system SourceCodester AC Repair and Services System view_service.php sql injection 6.3 Medium
- oretnom23 ac repair and services system SourceCodester AC Repair and Services System view.php sql injection 6.3 Medium
- simple mobile comparison website project mobile comparison website, sourcecodester simple mobile comparison website +1 more SourceCodester Simple Mobile Comparison Website cross site scripting 2.4 Low
- netgear srx5308, srx5308 firmware +1 more Netgear SRX5308 Web Management Interface cross site scripting 4.3 Medium
- netgear srx5308, srx5308 firmware +1 more Netgear SRX5308 Web Management Interface cross site scripting 4.3 Medium
- lenovo thinkagile hx1021 firmware, thinkagile hx1320 firmware, thinkagile hx1321 firmware +107 more +109 more A valid, authenticated administrative user can query a web interface API to reveal the configured... 4.9 Medium
- lenovo drivers management A privilege escalation vulnerability was reported in Lenovo Drivers Management Lenovo Driver... 7.8 High
- lenovo thinkagile hx1021 firmware, thinkagile hx1320 firmware, thinkagile hx1321 firmware +107 more +109 more A valid LDAP user, under specific conditions, will default to read-only permissions when... 5.3 Medium
- netgear srx5308, srx5308 firmware +1 more Netgear SRX5308 Web Management Interface cross site scripting 2.4 Low
- netgear srx5308, srx5308 firmware +1 more Netgear SRX5308 Web Management Interface cross site scripting 2.4 Low
- lenovo thinkagile hx1021 firmware, thinkagile hx1320 firmware, thinkagile hx1321 firmware +107 more +109 more A valid XCC user's local account permissions overrides their active directory permissions under... 7.3 High
- denosaurs emoji Denosaurs emoji has ReDoS vulnerability in `replace` function 5.3 Medium
- lenovo thinkagile hx1021 firmware, thinkagile hx1320 firmware, thinkagile hx1321 firmware +107 more +109 more A valid, authenticated XCC user with read-only permissions can modify custom user roles on other... 6.4 Medium
- aedart ion @aedart/support possibly vulnerable to prototype pollution in metadata record, when using meta decorator 3.7 Low
- netgear srx5308, srx5308 firmware +1 more Netgear SRX5308 Web Management Interface cross site scripting 2.4 Low
- netgear srx5308, srx5308 firmware +1 more Netgear SRX5308 Web Management Interface cross site scripting 2.4 Low
- netgear srx5308, srx5308 firmware +1 more Netgear SRX5308 Web Management Interface cross site scripting 2.4 Low
- netgear srx5308, srx5308 firmware +1 more Netgear SRX5308 Web Management Interface cross site scripting 2.4 Low
- netgear srx5308, srx5308 firmware +1 more Netgear SRX5308 Web Management Interface cross site scripting 2.4 Low
- netgear srx5308, srx5308 firmware +1 more Netgear SRX5308 Web Management Interface cross site scripting 2.4 Low
- netgear srx5308, srx5308 firmware +1 more Netgear SRX5308 Web Management Interface cross site scripting 2.4 Low
- ibm db2, db2 for linux, unix and windows +1 more IBM Db2 denial of service 5.9 Medium
- ibm db2, db2 for linux, unix and windows +1 more IBM Db2 denial of service 7.5 High
- illumina iscan control software, iscan firmware, iseq 100 +19 more +21 more CVE-2023-1968 10.0 Critical
- illumina iscan control software, iscan firmware, iseq 100 +19 more +21 more CVE-2023-1966 7.4 High
- netgear srx5308, srx5308 firmware +1 more Netgear SRX5308 Web Management Interface cross site scripting 2.4 Low
- Show olderLoading…