CVEs published in April 2023
2,411 vulnerabilities, 280 critical, 18 exploited.
- cisco small business rv series router firmware, rv016 firmware, rv042 firmware +4 more +6 moreCisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers Remote Command Execution Vulnerability6.5 Medium
- cisco duo, duo authentication for windows logon and rdp +1 moreCisco Duo Authentication for macOS and Duo Authentication for Windows Logon Offline Credentials Replay Vulnerability6.3 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Evolved Programmable Network Manager, Cisco Identity Services Engine, and Cisco Prime Infrastructure Command Injection Vulnerabilities6.0 Medium
- cisco evolved programmable network manager, identity services engine, prime infrastructure +1 more +3 moreCisco Evolved Programmable Network Manager, Cisco Identity Services Engine, and Cisco Prime Infrastructure Command Injection Vulnerabilities6.0 Medium
- cisco small business rv series router firmware, rv320 firmware, rv325 firmware +2 moreCisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Command Injection Vulnerabilities7.2 High
- cisco secure network analyticsCisco Secure Network Analytics Remote Code Execution Vulnerability4.9 Medium
- cisco secure network analytics, stealthwatch management console 2200 firmware +1 moreCisco Secure Network Analytics Remote Code Execution Vulnerability8.8 High
- cisco unified contact center expressCisco Unified Contact Center Express Stored Cross-Site Scripting Vulnerability5.4 Medium
- cisco small business rv series router firmware, rv340 firmware, rv340w firmware +2 more +4 moreCisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Arbitrary File Upload Vulnerability5.3 Medium
- cisco prime infrastructureCisco Prime Infrastructure Reflected Cross-Site Scripting Vulnerability6.1 Medium
- cisco packet data network gateway, asr 5000 series software +1 moreCisco Packet Data Network Gateway IPsec ICMP Denial of Service Vulnerability5.8 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine XML External Entity Injection Vulnerability6.0 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Privilege Escalation Vulnerabilities6.0 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Privilege Escalation Vulnerabilities6.0 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Privilege Escalation Vulnerabilities6.0 Medium
- contribsys sidekiq, sidekiq sidekiq/sidekiq +1 moreCross-site Scripting (XSS) - Reflected in sidekiq/sidekiq8.3 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreBusiness Logic Errors in thorsten/phpmyfaq8.3 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreAuthentication Bypass by Capture-replay in thorsten/phpmyfaq7.3 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaq6.3 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Generic in thorsten/phpmyfaq4.7 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreImproper Access Control in thorsten/phpmyfaq5.4 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - DOM in thorsten/phpmyfaq8.1 High
- microweber, microweber microweber/microweber +1 moreCross-site Scripting (XSS) - Stored in microweber/microweber7.4 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq8.3 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaq4.7 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaq8.3 High
- microweber, microweber microweber/microweber +1 moreCommand Injection in microweber/microweber6.1 Medium
- debian linux, linux kernel +1 moreA use-after-free flaw was found in xgene_hwmon_remove in drivers/hwmon/xgene-hwmon.c in the...6.3 Medium
- linux kernel, netapp h300s, h410c +3 more +5 moreA use-after-free flaw was found in vhost_net_set_backend in drivers/vhost/net.c in virtio network...7.1 High
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreInsufficient Session Expiration in firefly-iii/firefly-iii5.4 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 15.9 before 15.9.4,...4.3 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreFailure to Sanitize Special Elements into a Different Plane (Special Element Injection) in thorsten/phpmyfaq8.9 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaq8.1 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaq4.7 Medium
- gitlabA denial of service condition exists in the Prometheus server bundled with GitLab affecting all...5.8 Medium
- gitlabA sensitive information disclosure vulnerability in GitLab affecting all versions from 15.0 prior...5.3 Medium
- gitlabAn issue was identified in GitLab CE/EE affecting all versions from 1.0 prior to 15.8.5, 15.9...5.7 Medium
- linux, linux kernel +1 moreA race problem was found in fs/proc/task_mmu.c in the memory management sub-component in the...4.7 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 15.9 before 15.9.4,...4.3 Medium
- gitlabImproper authorization in Gitlab EE affecting all versions from 12.3.0 before 15.8.5, all...5.3 Medium
- gitlabAn information disclosure vulnerability has been discovered in GitLab EE/CE affecting all...5.8 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions from 15.5 before 15.8.5, all...3.1 Low
- imaworldhealth bhimaBhima version 1.27.0 allows an attacker authenticated with normal user permissions to view...6.5 Medium
- imaworldhealth bhimaBhima version 1.27.0 allows a remote attacker to update the privileges of any account registered...6.5 Medium
- imaworldhealth bhimaBhima version 1.27.0 allows an authenticated attacker with regular user permissions to update...4.3 Medium
- xml2js project xml2jsxml2js 0.4.23 - Prototype Pollution5.3 Medium
- gitlabAn issue has been discovered in GitLab affecting versions starting from 15.1 before 15.8.5, 15.9...5.5 Medium
- ulearn project ulearnUlearn version a5a7ca20de859051ea0470542844980a66dfc05d allows an attacker with administrator...7.2 High
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 15.6 before 15.8.5,...5.4 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 8.1 to 15.8.5, and...3.7 Low
- Show moreLoading…