CVEs published in April 2023
2,411 vulnerabilities, 280 critical, 18 exploited.
- wondershare recoveritAn issue found in Wondershare Technology Co.,Ltd Recoverit v.10.6.3 allows a remote attacker to...7.8 High
- wondershare repairitAn issue found in Wondershare Technology Co.,Ltd Repairit v.3.5.4 allows a remote attacker to...7.8 High
- wondershare mobiletransAn issue found in Wondershare Technology Co.,Ltd MobileTrans v.4.0.2 allows a remote attacker to...7.8 High
- wondershare democreatorAn issue found in Wondershare Technology Co., Ltd DemoCreator v.6.0.0 allows a remote attacker to...7.8 High
- wondershare uniconverterAn issue found in Wondershare Technology Co., Ltd UniConverter v.14.0.0 allows a remote attacker...7.8 High
- wondershare filmoraAn issue found in Wondershare Technology Co, Ltd Filmora v.12.0.9 allows a remote attacker to...7.8 High
- wondershare edrawmindAn issue found in Wondershare Technology Co, Ltd Edrawmind v.10.0.6 allows a remote attacker to...7.8 High
- edb-debugger project edb-debuggerAn issue found in Eteran edb-debugger v.1.3.0 allows a local attacker to causea denial of service...5.5 Medium
- teacms project teacmsAn unauthorized access issue found in XiaoBingby TeaCMS 2.3.3 allows attackers to escalate...7.2 High
- ehuacui-bbs project ehuacui-bbsCross Site Scripting vulnerability found in Ehuacui BBS allows attackers to cause a denial of...8.2 High
- swftoolsSWFTools v0.9.2 was discovered to contain a stack-use-after-scope in the swf_ReadSWF2 function in...7.8 High
- tenda ac6 firmwareTenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the ssid parameter in...7.5 High
- irfanviewIrfanview v4.62 allows a user-mode write access violation via a crafted JPEG 2000 file starting...5.5 Medium
- quectel ag550qcn firmwareOS Command Injection vulnerability in quectel AG550QCN allows attackers to execute arbitrary...9.8 Critical
- greenpacket ot-235 firmware, wr-1200 firmware +1 moreGreenPacket OH736's WR-1200 Indoor Unit, OT-235 with firmware versions M-IDU-1.6.0.3_V1.1 and MH...9.8 Critical
- churchcrmThe hashing algorithm of ChurchCRM v4.5.3 utilizes a non-random salt value which allows attackers...7.5 High
- uptime kuma project kumaCross Site Scripting vulnerability found in :ouislam Uptime Kuma v.1.19.6 and before allows a...6.1 Medium
- monitorrCross Site Scripting vulnerability found in Monitorr v.1.7.6 allows a remote attacker to execute...6.1 Medium
- monitorrFile Upload vulnerability found in Monitorr v.1.7.6 allows a remote attacker t oexecute arbitrary...7.8 High
- yiiframework yiiWithdrawn: SQL injection in Yii 29.8 Critical
- tinytiff project tinytiffBuffer Overflow vulnerability found in tinyTIFF v.3.0 allows a local attacker to cause a denial...7.8 High
- coredial sipxcomCoreDial sipXcom up to and including 21.04 is vulnerable to Improper Neutralization of Argument...8.8 High
- coredial sipxcomCoreDial sipXcom up to and including 21.04 is vulnerable to Insecure Permissions. A user who has...8.8 High
- polymcPolyMC Launcher <= 1.4.3 is vulnerable to Directory Traversal. A mrpack file can be maliciously crafted to create arbitrary files outside of the installation directory.7.1 High
- atlauncherATLauncher <= 3.4.26.0 is vulnerable to Directory Traversal. A mrpack file can be maliciously crafted to create arbitrary files outside of the installation directory.7.1 High
- sophos web applianceA pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance...9.8 Critical
- markdown-pdf project markdown-pdfmarkdown-pdf 11.0.0 - Local File Read via Server Side XSS8.2 High
- orangescrumOrangeScrum version 2.0.11 allows an external attacker to obtain arbitrary user accounts from the...6.1 Medium
- vitalpbxVitalPBX version 3.2.3-8 allows an unauthenticated external attacker to obtain the instance's...6.1 Medium
- vitalpbxVitalPBX version 3.2.3-8 allows an unauthenticated external attacker to obtain the instance...8.8 High
- helpy.io helpyHelpy version 2.8.0 allows an unauthenticated remote attacker to exploit an XSS stored in the...6.1 Medium
- uvdesk community-skeletonUvdesk vulnerable to stored cross-site scripting (XSS)6.1 Medium
- uvdesk community-skeletonUvdesk remote code execution vulnerability8.8 High
- sophos web applianceA post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older...7.2 High
- gbgplc acuant asureid sentinelAn issue was discovered in Acuant AsureID Sentinel before 5.2.149. It uses the root of the C:...5.5 Medium
- gbgplc acuant asureid sentinelAn issue was discovered in Acuant AsureID Sentinel before 5.2.149. It allows elevation of...7.8 High
- gbgplc acuant acufill sdkAn issue was discovered in Acuant AcuFill SDK before 10.22.02.03. During installation, an EXE...7.8 High
- gbgplc acuant acufill sdkAn issue was discovered in Acuant AcuFill SDK before 10.22.02.03. It is used to install drivers...7.3 High
- gbgplc acuant acufill sdkAn issue was discovered in Acuant AcuFill SDK before 10.22.02.03. It is installed with insecure...7.3 High
- gbgplc acuant acufill sdkAn issue was discovered in Acuant AcuFill SDK before 10.22.02.03. During SDK repair, certutil.exe...6.7 Medium
- gbgplc acuant acufill sdkAn issue was discovered in Acuant AcuFill SDK before 10.22.02.03. During SDK installation,...7.8 High
- gbgplc acuant acufill sdkAn issue was discovered in Acuant AcuFill SDK before 10.22.02.03. Multiple MSI's get executed out...7.5 High
- red-gate sql monitorA Cross Site Scripting (XSS) vulnerability in the web SQL monitor login page in Redgate SQL...6.1 Medium
- kitesky kitecmsFile Upload vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary...7.2 High
- kitesky kitecmsPermissions vulnerability found in KiteCMS allows a remote attacker to execute arbitrary code via...9.8 Critical
- etcdEtcd-io Improper Authentication vulnerability9.8 Critical
- sophos web applianceA reflected XSS via POST vulnerability in report scheduler of Sophos Web Appliance versions older...6.5 Medium
- zend frameworkAn issue found in Zend Framework v.3.1.3 and before allow a remote attacker to execute arbitrary...9.8 Critical
- zblogcn zblogphpCross Site Scripting vulnerability found in ZblogCN ZblogPHP v.1.0 allows a local attacker to...6.1 Medium
- jsishAn issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via...7.5 High
- Show moreLoading…