CVEs published in April 2023
2,411 vulnerabilities, 280 critical, 18 exploited.
- phpgurukul bp monitoring management systemPHPGurukul BP Monitoring Management System Password Recovery password-recovery.php sql injection6.3 Medium
- phpgurukul bp monitoring management systemPHPGurukul BP Monitoring Management System Change Password change-password.php sql injection6.3 Medium
- phpgurukul bp monitoring management systemPHPGurukul BP Monitoring Management System Add New Family Member add-family-member.php cross site scripting3.5 Low
- redpandarpk in Redpanda before 23.1.2 mishandles the redpanda.rpc_server_tls field, leading to (for...4.3 Medium
- gnu screensocket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms...6.5 Medium
- taogogo taocmstaoCMS admin.php code injection6.3 Medium
- sourcecodester survey application system, survey application system project application system +1 moreSourceCodester Survey Application System Add New cross site scripting2.4 Low
- tcpdumpThe SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when...6.5 Medium
- github enterprise serverIncorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling6.5 Medium
- github enterprise serverImproper authentication vulnerability in GitHub Enterprise Server leading to modification of secret gists7.7 High
- oretnom23 online computer and laptop storeSourceCodester Online Computer and Laptop Store Avatar unrestricted upload6.3 Medium
- simple and beautiful shopping cart system project and beautiful shopping cart system, sourcecodester simple and beautiful shopping cart system +1 moreSourceCodester Simple and Beautiful Shopping Cart System login.php sql injection7.3 High
- simple and beautiful shopping cart system project and beautiful shopping cart system, sourcecodester simple and beautiful shopping cart system +1 moreSourceCodester Simple and Beautiful Shopping Cart System delete_user_query.php sql injection6.3 Medium
- phpgurukul bp monitoring management systemPHPGurukul BP Monitoring Management System User Profile Update profile.php sql injection4.7 Medium
- apache software foundation airflow spark provider, apache apache-airflow-providers-apache-spark +1 moreApache Airflow Spark Provider Arbitrary File Read via JDBC7.5 High
- apache airflow hive providerApache Airflow Hive Provider Beeline Remote Command Execution9.8 Critical
- apache software foundation airflow drill provider, apache apache-airflow-providers-apache-drill +1 moreAirflow Apache Drill Provider Arbitrary File Read Vulnerability7.5 High
- implecode product catalog simpleWordPress Product Catalog Simple Plugin <= 1.6.17 is vulnerable to Cross Site Scripting (XSS)7.1 High
- pi websolution product enquiry for woocommerce, woocommerce product catalog, piwebsolution product enquiry for woocommerce +1 moreWordPress Product Enquiry for WooCommerce Plugin <= 2.2.12 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- magic post thumbnail post thumbnail, magic-post-thumbnail magic post thumbnail +1 moreWordPress Magic Post Thumbnail Plugin <= 4.1.10 is vulnerable to Cross Site Scripting (XSS)7.1 High
- property hive propertyhiveWordPress PropertyHive Plugin <= 1.5.46 is vulnerable to Cross Site Scripting (XSS)7.1 High
- cimatti wordpress contact forms, cimatti consulting wordpress contact forms by cimatti +1 moreWordPress Contact Forms by Cimatti Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS)7.1 High
- cimatti wordpress contact forms, cimatti consulting wordpress contact forms by cimatti +1 moreWordPress Contact Forms by Cimatti Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS)7.1 High
ghostscriptOSS-FuzzStack-buffer-overflow in fn_ElIn_evaluateNo score- i thirteen web solution continuous image carousel with lightbox, i13websolution continuous image carosel with lightbox +1 moreWordPress Continuous Image Carousel With Lightbox Plugin <= 1.0.15 is vulnerable to Cross Site Scripting (XSS)7.1 High
libredwgOSS-FuzzGlobal-buffer-overflow in dwg_codepage_dxfstrNo score- robogallery robo gallery, robosoft photo gallery, images, slider in rbs image gallery +1 moreWordPress Robo Gallery Plugin <= 3.2.12 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- marcel pol zeno font resizer, zeno font resizer project font resizer +1 moreWordPress Zeno Font Resizer Plugin <= 1.7.9 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- easy panorama project panorama, leonardo giacone easy panorama +1 moreWordPress Easy Panorama Plugin <= 1.1.4 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- ibm db2 mirror for iIBM Db2 Mirror for i information disclosure4.9 Medium
- ibm tririga application platformIBM TRIRIGA Application Platform cross-site scripting4.6 Medium
- ibm tririga application platformIBM TRIRIGA Application Platform XML external entity injection7.1 High
- ibm sterling order managementIBM Sterling Order Management privilege escalation5.4 Medium
- pi websolution product page shipping calculator for woocommerceWordPress Product page shipping calculator for WooCommerce Plugin <= 1.3.20 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- ibm sterling order managementIBM Sterling Order Management information disclosure5.9 Medium
- fullworks quick paypal paymentsWordPress Quick Paypal Payments Plugin <= 5.7.25 is vulnerable to Cross Site Scripting (XSS)7.1 High
- fullworks quick paypal paymentsWordPress Quick Paypal Payments Plugin <= 5.7.25 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- go prayer wp prayerWordPress WP Prayer Plugin <= 1.9.6 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- wp-buddy google analytics opt-outWordPress Opt-Out for Google Analytics Plugin <= 2.3.4 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- alexgff wpglobus translate options, wpglobus translate options +1 moreWordPress WPGlobus Translate Options Plugin <= 2.1.0 is vulnerable to Cross Site Scripting (XSS)5.8 Medium
- proliz obs, prolizyazilim student affairs information system +1 moreXSS in Proliz OBS5.4 Medium
- jaybee twitch playerWordPress Twitch Player Plugin <= 2.1.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- announce from the dashboard project from the dashboard, gqevu6bsiz announce from the dashboard +1 moreWordPress Announce from the Dashboard Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- auto hide admin bar project hide admin bar, marcel bootsman auto hide admin bar +1 moreWordPress Auto Hide Admin Bar Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- fullworks quick contact formWordPress Quick Contact Form Plugin <= 8.0.3.1 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- albo pretorio on line project pretorio on line, ignazio scimone albo pretorio on line +1 moreWordPress Albo Pretorio Online Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS)7.1 High
- cththemes outdoorWordPress Outdoor Theme <= 3.9.6 is vulnerable to Cross Site Scripting (XSS)7.1 High
- cththemes monolitWordPress Monolit Theme <= 2.0.6 is vulnerable to Cross Site Scripting (XSS)7.1 High
- implecode ecommerce product catalog plugin for wordpress, ecommerce product catalog +1 moreWordPress eCommerce Product Catalog Plugin <= 3.3.4 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- bob arigato autoresponder and newsletterWordPress Arigato Autoresponder and Newsletter Plugin <= 2.7.1.1 is vulnerable to Cross Site Scripting (XSS)7.1 High
- Show moreLoading…