CVEs published in April 2023
2,411 vulnerabilities, 280 critical, 18 exploited.
- tenda ac5 firmwareTenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the...9.8 Critical
- dlink dir-878 firmwareD-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_495220...9.8 Critical
- dlink dir-878 firmwareD-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_48AF78...9.8 Critical
- dlink dir-878 firmwareD-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_475FB0...9.8 Critical
- dlink dir-882 a1 firmwareD-Link DIR882 DIR882A1_FW110B02 was discovered to contain a stack overflow in the sub_48AC20...9.8 Critical
- supermicro h11dsi-nt firmware, h11dsi firmware, h11dst-b firmware +143 more +145 moreSupermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions.5.5 Medium
- phpminiadmin project phpminiadminphpMiniAdmin cross site scripting3.5 Low
- wpfastestcache wp fastest cache, emrevona wp fastest cache – wordpress cache plugin +1 moreWP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_preload_single_callback'4.3 Medium
- wpfastestcache wp fastest cache, emrevona wp fastest cache – wordpress cache plugin +1 moreWP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_purgecache_varnish_callback'4.3 Medium
- wpfastestcache wp fastest cache, emrevona wp fastest cache – wordpress cache plugin +1 moreWP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_clear_cache_of_allsites_callback'4.3 Medium
- wpfastestcache wp fastest cache, emrevona wp fastest cache – wordpress cache plugin +1 moreWP Fastest Cache <= 1.1.2 - Missing Authorization in 'deleteCssAndJsCacheToolbar'4.3 Medium
- wpfastestcache wp fastest cache, emrevona wp fastest cache – wordpress cache plugin +1 moreWP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'deleteCssAndJsCacheToolbar'4.3 Medium
- wpfastestcache wp fastest cache, emrevona wp fastest cache – wordpress cache plugin +1 moreWP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'deleteCacheToolbar'4.3 Medium
- wpfastestcache wp fastest cache, emrevona wp fastest cache – wordpress cache plugin +1 moreWP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_clear_cache_of_allsites_callback'4.3 Medium
- wpfastestcache wp fastest cache, emrevona wp fastest cache – wordpress cache plugin +1 moreWP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_toolbar_save_settings_callback'4.3 Medium
- wpfastestcache wp fastest cache, emrevona wp fastest cache – wordpress cache plugin +1 moreWP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_remove_cdn_integration_ajax_request_callback'4.3 Medium
- wpfastestcache wp fastest cache, emrevona wp fastest cache – wordpress cache plugin +1 moreWP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_pause_cdn_integration_ajax_request_callback'4.3 Medium
- wpfastestcache wp fastest cache, emrevona wp fastest cache – wordpress cache plugin +1 moreWP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_start_cdn_integration_ajax_request_callback'4.3 Medium
- wpfastestcache wp fastest cache, emrevona wp fastest cache – wordpress cache plugin +1 moreWP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_purgecache_varnish_callback'4.3 Medium
- wpfastestcache wp fastest cache, emrevona wp fastest cache – wordpress cache plugin +1 moreWP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_preload_single_save_settings_callback'4.3 Medium
- wpfastestcache wp fastest cache, emrevona wp fastest cache – wordpress cache plugin +1 moreWP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_preload_single_callback'4.3 Medium
- patriksimek vm2vm2 Sandbox Escape vulnerability10.0 Critical
- intranda goobi viewer core, goobi-viewer-core +1 moreGoobi viewer Core has Cross-Site Scripting Vulnerability in User Nicknames6.1 Medium
- intranda goobi viewer core, goobi-viewer-core +1 moreGoobi viewer Core has Cross-Site Scripting Vulnerability in User Comments6.1 Medium
- intranda goobi viewer core, goobi-viewer-core +1 moreGoobi viewer Core Reflected Cross-Site Scripting Vulnerability Using LOGID Parameter6.1 Medium
- svelte sveltekit, sveltejs kit +1 moreSvelteKit framework has Insufficient CSRF protection for CORS requests8.8 High
- abb my control system (on-premise), my control system +1 moreInformation Disclosure vulnerability in My Control System (on-premise)5.4 Medium
- budibaseBudiBase Server-Side Request Forgery vulnerability6.5 Medium
- webfactory maps widget for google mapsMaps Widget for Google Maps <= 4.24 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4 Medium
- automattic limit login attempts, limit login attempts project login attempts +1 moreLimit Login Attempts <= 1.7.1 - Unauthenticated Stored Cross-Site Scripting7.2 High
mrubyOSS-FuzzHeap-use-after-free in mrb_gc_markNo score- dotonpaper pinpoint booking system, pinpoint booking system +1 moreWordPress Pinpoint Booking System Plugin <= 2.9.9.2.8 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- oceanwp ocean extraWordPress Ocean Extra Plugin <= 2.1.1 is vulnerable to Cross Site Scripting (XSS)5.5 Medium
- codeat glossaryWordPress Glossary Plugin <= 2.1.27 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- material design icons for page builders project design icons for page builders, photon wp material design icons for page builders +1 moreWordPress Material Design Icons for Page Builders Plugin <= 1.4.2 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- e4j s.r.l. vikbooking hotel booking engine & pms, vikwp vikbooking hotel booking engine \& pms +1 moreWordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.5.11 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- lynx technik ag yellowbrik, lynx-technik yellobrik pec 1864 firmware +1 moreYellowbrik PEC-1864 authentication bypass9.8 Critical
- adtribes product feed pro for woocommerceWordPress Product Feed PRO for WooCommerce Plugin <= 12.4.4 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- hasthemes really simple google tag managerWordPress Really Simple Google Tag Manager Plugin <= 1.0.6 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- simple mobile comparison website project mobile comparison website, sourcecodester simple mobile comparison website +1 moreSourceCodester Simple Mobile Comparison Website GET Parameter view_category.php sql injection6.3 Medium
- wpdevart organization chartWordPress Organization chart Plugin <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- bnecreative bne testimonialsWordPress BNE Testimonials Plugin <= 2.0.7 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
conmonSUSESecurity update for conmonNo score- wp for the win bbpress votingWordPress bbPress Voting Plugin <= 2.1.11.0 is vulnerable to Cross-Site Scripting (XSS)5.9 Medium
- kiboko labs namaste! lms, kibokolabs namaste\! lms +1 moreWordPress Namaste! LMS Plugin <= 2.5.9.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- creativethemes blocksy companionWordPress Blocksy Companion Plugin <= 1.8.67 is vulnerable to Cross Site Scripting (XSS)5.5 Medium
- cloudflare warpLocal Privilege Escalation in Cloudflare WARP Installer (Windows)7.0 High
- docker desktopIn Docker Desktop 4.17.x the Artifactory Integration falls back to sending registry credentials over plain HTTP if the HTTPS health check has failed5.9 Medium
- timersys wp popups, wp popups – wordpress popup builder +1 moreWordPress WP Popups Plugin <= 2.1.4.8 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- wpdevart youtube embed, playlist and popup by wpdevart, youtube embed\, playlist and popup +1 moreWordPress YouTube Embed, Playlist and Popup by WpDevArt Plugin <= 2.6.3 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- Show moreLoading…