CVEs published in April 2023
2,411 vulnerabilities, 280 critical, 18 exploited.
- jsishAn issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via...7.5 High
- jsishAn issue found in Jsish v.3.0.11 allows a remote attacker to cause a denial of service via the...7.5 High
- espruinoBuffer Overflow vulnerability found in Espruino 2v05.41 allows an attacker to cause a denial of...7.5 High
- easycorp zentaoCross Site Scripting vulnerability found in Zentao allows a remote attacker to execute arbitrary...6.1 Medium
- fluentd, fluentd fluentd-ui +1 moreFluent Fluentd and Fluent-ui use default password8.8 High
- netgate pfsense, pfsense acme package +1 moreCross Site Scripting vulnerability found in Netgate pfSense 2.4.4 and ACME package v.0.6.3 allows...9.6 Critical
- phpmywindSQL injection vulnerability found in PHPMyWind v.5.6 allows a remote attacker to gain privileges...8.8 High
- publiccmsSQL Injection vulnerability found in PublicCMS v.4.0 allows a remote attacker to execute...9.8 Critical
- publiccmsSQL Injection vulnerability found in San Luan PublicCMS v.4.0 allows a remote attacker to execute...9.8 Critical
- mingsoft mcmsMing-Soft MCMS vulnerable to SQL injection9.8 Critical
- kitesky kitecmsCross Site Scripting vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute...6.1 Medium
- kitesky kitecmsCross Site Scripting vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute...6.1 Medium
- monospace directusDirectus API vulnerable to denial of service6.5 Medium
- kiftd project kiftdCross Site Scripting vulnerability found in KOHGYLW Kiftd v.1.0.18 allows a remote attacker to...6.1 Medium
- ipandao editor.mdPandao Editor.md vulnerable to cross-site scripting (XSS) in editor parameter6.1 Medium
- ipandao editor.mdPandao Editor.md vulnerable to cross-site scripting (XSS) in iframe src parameter6.1 Medium
- f5 njsBuffer Overflow found in Nginx NJS allows a remote attacker to execute arbitrary code via the...9.8 Critical
- espruinoAn issue found in Espruino Espruino 6ea4c0a allows an attacker to execute arbitrrary code via...9.8 Critical
- f5 njsBuffer Overflow vulnerabilty found in Nginx NJS v.0feca92 allows a remote attacker to execute...9.8 Critical
- wide project wideDirectory Traversal vulnerability found in B3log Wide allows a an attacker to escalate privileges...9.8 Critical
- mm-wiki project mm-wikiPhachon mm-wiki Cross Site Request Forgery vulnerability8.8 High
- mm-wiki project mm-wikiPhachon mm-wiki vulnerable to stored cross-site scripting (XSS)5.4 Medium
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 moreHitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5.4 Medium
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 moreHitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information4.3 Medium
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 moreHitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information4.3 Medium
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 moreHitachi Vantara Pentaho Business Analytics Server - Insertion of Sensitive Information into Log File3.8 Low
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 moreHitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')6.3 Medium
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 moreHitachi Vantara Pentaho Business Analytics Server - Improper Restriction of XML External Entity Reference7.1 High
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 moreHitachi Vantara Pentaho Business Analytics Server - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')6.5 Medium
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 moreHitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization8.8 High
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server, pentaho business analytics (ba) server +2 moreHitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization Decisions8.6 High
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 moreHitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')8.8 High
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server +1 moreHitachi Vantara Pentaho Business Analytics Server - Incorrect Permission Assignment for Critical Resource8.8 High
- nophp project nophpnophp vulnerable to shell command injection on httpd user when sending a password-setting mail or mail-login mail8.0 High
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server, pentaho business analytics (ba) server +2 moreHitachi Vantara Pentaho Business Analytics Server - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)8.8 High
- bigfork silverstripe form capture, silverstripe-form-capture +1 moreSilverstripe Form Capture vulnerable to Stored Cross-Site Scripting6.1 Medium
- pimcore perspective editor, perspective-editor +1 morePimcore Perspective Editor vulnerable to Cross-site Scripting in perspective name6.1 Medium
- torchbox wagtailWagtail vulnerable to denial-of-service via memory exhaustion when uploading large files4.9 Medium
- nextcloud server, kiteworks security-advisories +1 moreFull path of data directory exposed to Nextcloud server users3.5 Low
- trellix agentA heap-based overflow vulnerability in Trellix Agent (Windows and Linux) version 5.7.8 and...6.7 Medium
- trellix agentA vulnerability exists in Trellix Agent for Windows version 5.7.8 and earlier, that allows local...8.2 High
- admesh, slic3r libslic3r +1 moreADMesh improper array index validation6.5 Medium
- image over image for wpbakery page builder project over image for wpbakery page builder, unknown image over image for wpbakery page builder +1 moreImage Over Image For WPBakery Page Builder < 3.0 - Contributor+ Stored XSS5.4 Medium
- solidresSolidres <= 0.9.4 - Multiple Reflected XSS6.1 Medium
- inisev redirectionRedirection < 1.1.4 - Redirect Creation via CSRF6.5 Medium
- unknown shopping cart & ecommerce store, wpeasycart wp easycart +1 moreShopping Cart & eCommerce Store < 5.4.3 - Admin+ LFI7.2 High
- bestwebsoft user role, unknown user role by bestwebsoft +1 moreUser Role by BestWebSoft < 1.6.7 - Privilege Escalation via CSRF8.8 High
cycloneddsOSS-FuzzHeap-buffer-overflow in add_complete_typeobjNo scoresimdutfOSS-FuzzHeap-buffer-overflow in unsigned long simdutf::haswell::convert_masked_utf8_to_utf16<No score- akbim panonXSS in Panon6.1 Medium
- Show moreLoading…