CVEs published in April 2023
2,411 vulnerabilities, 280 critical, 18 exploited.
- google android, linux kernel, mediatek, inc. mt5221, mt6781, mt6789, mt6833, mt6855, mt6877, mt6879, mt6895, mt6983, mt7663, mt7668, mt7902, mt7921, mt8167s, mt8168, mt8169, mt8175, mt8185, mt8362a, mt8365, mt8385, mt8518, mt8532, mt8675, mt8766, mt8768, mt8771, mt8781, mt8786, mt8788, mt8789, mt8791t, mt8797, mt8798 +1 more +3 moreIn wlan, there is a possible out of bounds write due to a missing bounds check. This could lead...6.7 Medium
- google android, mediatek, inc. mt6895, mt6983, mt8188, mt8195, mt8673, mt8795t, mt8798 +1 moreIn isp, there is a possible out of bounds write due to a missing bounds check. This could lead to...6.7 Medium
- arm avalon gpu kernel driver, valhall gpu kernel driver +1 moreAn issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make...3.3 Low
- tailor management system project management systemSQL injection vulnerability found in Tailor Mangement System v.1 allows a remote attacker to...8.8 High
- tailor management system project management systemSQL injection vulnerability found in Tailor Management System v.1 allows a remote attacker to...8.8 High
- tailor management system project management systemSQL injection vulnerability found in Tailor Management System v.1 allows a remote attacker to...8.8 High
- tailor management system project management systemSQL injection vulnerability found in Tailor Management System v.1 allows a remote authenticated...8.8 High
- oisf suricata, pfsense, pfsense suricata package +2 moreDirectory Traversal vulnerability found in Pfsense v.2.1.3 and Pfsense Suricata v.1.4.6 pkg v.1.0...7.5 High
- go standard library html/template, golang go +1 moreBackticks not treated as string delimiters in html/template9.8 Critical
- go standard library go/scanner, golang go +1 moreInfinite loop in parsing in go/scanner7.5 High
- go standard library mime/multipart, net/textproto, golang go +2 moreExcessive resource consumption in net/http, net/textproto and mime/multipart7.5 High
- go standard library net/textproto, golang go +1 moreExcessive memory allocation in net/http and net/textproto7.5 High
- hashicorp nomad, nomad enterprise +1 moreNomad Unauthenticated Client Agent HTTP Request Privilege Escalation10.0 Critical
- genetec security centerSQL Injection in the Hardware Inventory report of Security Center 5.11.2.8.8 High
- wclovers wcfm membership, wcfm membership – woocommerce memberships for multivendor marketplace +1 moreWCFM Membership <= 2.9.10 - Cross-Site Request Forgery6.3 Medium
- wclovers wcfm membership, wcfm membership – woocommerce memberships for multivendor marketplace +1 moreWCFM Membership <= 2.10.0 - Missing Authorization7.3 High
- wclovers wcfm membership, wcfm membership – woocommerce memberships for multivendor marketplace +1 moreWCFM Membership <= 2.10.0 - Unauthenticated Privilege Escalation9.8 Critical
- glpi-project orderOrder GLPI plugin vulnerable to remote code execution from authenticated user8.8 High
- pluginsglpi fieldsFields GLPI plugin vulnerable to unauthorized write access to additional fields6.5 Medium
- glpi-project glpiGLPI vulnerable to stored Cross-site Scripting through dashboard administration4.8 Medium
- glpi-project glpiGLPI vulnerable to SQL injection and Stored XSS via inventory agent request10.0 Critical
- wclovers frontend manager for woocommerce along with bookings subscription listings compatible, wcfm – frontend manager for woocommerce +1 moreWCFM Frontend Manager <= 6.5.13 - Cross-Site Request Forgery6.3 Medium
- wclovers frontend manager for woocommerce along with bookings subscription listings compatible, wcfm – frontend manager for woocommerce along with bookings subscription listings compatible +1 moreThe WCFM Frontend Manager plugin for WordPress is vulnerable to unauthorized modification and...6.3 Medium
- glpi-project glpiGLPI vulnerable to SQL injection through dynamic reports9.6 Critical
- wclovers wcfm marketplace, wcfm marketplace – multivendor marketplace for woocommerce +1 moreWCFM Marketplace <= 3.4.12 - Cross-Site Request Forgery6.3 Medium
- wclovers wcfm marketplace, wcfm marketplace – multivendor marketplace for woocommerce +1 moreWCFM Marketplace <= 3.4.11 - Missing Authorization8.8 High
- glpi-project glpiGLPI vulnerable to stored Cross-site Scripting in external links4.5 Medium
- glpi-project glpiGLPI vulnerable to Privilege Escalation from Technician to Super-Admin8.8 High
- cisco small business rv series router firmware, rv016 firmware, rv042 firmware +5 more +7 moreA vulnerability in the web-based management interface of Cisco Small Business Routers RV016,...6.5 Medium
- glpi-project glpiGLPI vulnerable to Blind Server-Side Request Forgery (SSRF) in RSS feeds3.5 Low
- cloudflare warpLocal Privilege Escalation Vulnerability in WARP's MSI Installer7.0 High
- ichitaro, justsystems ichitaro 2022 +1 moreA buffer overflow vulnerability exists in the Attribute Arena functionality of Ichitaro 2022 1.0...7.8 High
- ichitaro, justsystems ichitaro 2022 +1 moreA use-after-free vulnerability exists within the way Ichitaro Word Processor 2022, version 1.0.1...7.8 High
- ichitaro, justsystems ichitaro 2022 +1 moreA heap-based buffer overflow vulnerability exists in the way Ichitaro version 2022 1.0.1.57600...7.0 High
- ichitaro, justsystems ichitaro 2022 +1 moreAn invalid free vulnerability exists in the Frame stream parser functionality of Ichitaro 2022 1...7.0 High
- glpi-project glpiGLPI vulnerable to account takeover by authenticated user8.1 High
simdutfOSS-FuzzHeap-buffer-overflow in unsigned long simdutf::haswell::convert_masked_utf8_to_utf16<No scoremrubyOSS-FuzzHeap-use-after-free in mrb_str_hash_mNo scorebinutilsOSS-FuzzHeap-use-after-free in filename_cmpNo scoresimdutfOSS-FuzzHeap-buffer-overflow in simdutf::haswell::implementation::convert_utf8_to_utf32No score- plugin yourchannel, pluginbuilders yourchannel: everything you want in a youtube plugin. +1 moreYourChannel <= 1.2.4 - Cross-Site Request Forgery to Plugin Language Translation Reset5.4 Medium
- plugin yourchannel, pluginbuilders yourchannel: everything you want in a youtube plugin. +1 moreYourChannel <= 1.2.4 - Cross-Site Request Forgery to Plugin Language Translation Update4.3 Medium
- plugin yourchannel, pluginbuilders yourchannel: everything you want in a youtube plugin. +1 moreYourChannel <= 1.2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting5.5 Medium
- plugin yourchannel, pluginbuilders yourchannel: everything you want in a youtube plugin. +1 moreYourChannel <= 1.2.3 - Missing Authorization to Plugin Cache Reset6.5 Medium
- plugin yourchannel, pluginbuilders yourchannel: everything you want in a youtube plugin. +1 moreYourChannel <= 1.2.4 - Cross-Site Request Forgery to Plugin Settings Change5.4 Medium
- plugin yourchannel, pluginbuilders yourchannel: everything you want in a youtube plugin. +1 moreYourChannel <= 1.2.4 - Cross-Site Request Forgery to Plugin Channel Reset5.4 Medium
- plugin yourchannel, pluginbuilders yourchannel: everything you want in a youtube plugin. +1 moreYourChannel <= 1.2.3 - Missing Authorization to Plugin Settings Reset6.5 Medium
- bestwebsoft contact form plugin, contact form +1 moreBestWebSoft Contact Form Plugin contact_form.php cntctfrm_check_form cross site scripting3.5 Low
- keysight hawkeye, ixia hawkeye +1 moreKeysight IXIA Hawkeye licenses cross site scripting3.5 Low
skopeoopenSUSESecurity update for skopeoNo score- Show moreLoading…