CVEs published in April 2023
2,411 vulnerabilities, 280 critical, 18 exploited.
- lexmark cslbl firmware, cslbn firmware, csnzj firmware +23 more +25 moreCertain Lexmark devices through 2023-02-19 access a Resource By Using an Incompatible Type.9.8 Critical
- allegro bigflowAllegro Tech BigFlow vulnerable to Missing SSL Certificate Validation5.9 Medium
- liveaction livespA cross-site scripting (XSS) vulnerability in LiveAction LiveSP v21.1.2 allows attackers to...5.4 Medium
- openwrt luciLuCI openwrt-22.03 branch git-22.361.69894-438c598 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /openvpn/pageswitch.htm.5.4 Medium
- libtiffA flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted...6.1 Medium
- linux kernelA use-after-free flaw was found in xen_9pfs_front_removet in net/9p/trans_xen.c in Xen transport...4.7 Medium
- cloudbase open vswitch, debian linux, redhat fast datapath +3 more +5 moreA flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will...8.2 High
- apple ipados, ios and ipados, iphone os +2 moreA logic issue was addressed with improved restrictions. This issue is fixed in iOS 16.2 and...2.4 Low
- apple ipados, macos, iphone os +2 moreA logic issue was addressed with improved state management. This issue is fixed in macOS Ventura...7.5 High
- apple macos, iphone os +1 moreA memory corruption issue was addressed with improved state management. This issue is fixed in...9.8 Critical
- apple ipados, macos, iphone os +2 moreA logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13.1...5.5 Medium
- apple macosA memory corruption issue was addressed with improved input validation. This issue is fixed in...7.8 High
- scada-ltsAn privilege escalation issue was discovered in Scada-LTS 2.7.1.1 build 2948559113 allows remote...9.9 Critical
- servicenow, servicenow now platform +1 moreCross-Site Scripting (XSS) vulnerability in ServiceNow UI page assessment_redirect6.1 Medium
- upstreamworks upstream works on finesseA stored Cross-Site Scripting (XSS) vulnerability in the Chat gadget in Upstream Works Agent...5.4 Medium
- apple ios, iphone os +1 moreA logic issue was addressed with improved restrictions. This issue is fixed in iOS 16. A person...2.4 Low
- luaIn Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over...7.5 High
- lldpd project lldpd, fedoraproject fedora +1 moreIn lldpd before 1.0.13, when decoding SONMP packets in the sonmp_decode function, it's possible...7.5 High
- tailor management system project management systemSQL injection vulnerability found in Tailor Mangement System v.1 allows a remote attacker to...8.8 High
- bestwebsoft facebook like button, facebook button +1 moreBestWebSoft Facebook Like Button facebook-button-plugin.php fcbk_bttn_plgn_settings_page cross-site request forgery4.3 Medium
- sandbox theme project theme, turante sandbox theme +1 moreTurante Sandbox Theme functions.php sandbox_body_class cross site scripting3.5 Low
- contus hd flv playerHD FLV PLayer Plugin functions.php hd_update_media sql injection6.3 Medium
- phpgurukul bank locker management systemPHPGurukul Bank Locker Management System Password Reset recovery.php sql injection7.3 High
- phpgurukul bank locker management systemPHPGurukul Bank Locker Management System Search index.php sql injection6.3 Medium
- mayurik best online news portalSourceCodester Best Online News Portal POST Parameter forgot-password.php sql injection7.3 High
- bestwebsoft contact form plugin, contact form +1 moreBestWebSoft Contact Form Plugin bws_menu.php bws_add_menu_render cross site scripting3.5 Low
- bestwebsoft contact formBestWebSoft Contact Form contact_form.php cntctfrm_settings_page cross-site request forgery4.3 Medium
- f5 njsNginx NJS v0.7.10 was discovered to contain a segmentation violation via the function...7.5 High
- f5 njsNginx NJS v0.7.10 was discovered to contain an illegal memcpy via the function njs_vmcode_return...7.5 High
- f5 njsNginx NJS v0.7.10 was discovered to contain a segmentation violation via the function...7.5 High
- f5 njsNginx NJS v0.7.10 was discovered to contain a segmentation violation via the function...7.5 High
- dlink dir-878 firmwareD-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_48d630 function. This...9.8 Critical
- dlink dir878 firmwareD-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_478360 function. This...9.8 Critical
- dlink dir878 firmwareD-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_498308 function. This...9.8 Critical
- exit strategy project strategyExit Strategy Plugin exitpage.php exitpageadmin cross-site request forgery4.3 Medium
- exit strategy project strategyExit Strategy Plugin exitpage.php information disclosure3.5 Low
libdwarfOSS-FuzzHeap-buffer-overflow in _dwarf_memcpy_noswap_bytesNo score- oretnom23 online computer and laptop storeSourceCodester Online Computer and Laptop Store cross site scripting2.4 Low
- oretnom23 online computer and laptop storeSourceCodester Online Computer and Laptop Store sql injection6.3 Medium
- oretnom23 online computer and laptop storeSourceCodester Online Computer and Laptop Store sql injection6.3 Medium
- oretnom23 online computer and laptop storeSourceCodester Online Computer and Laptop Store sql injection6.3 Medium
- oretnom23 online computer and laptop storeSourceCodester Online Computer and Laptop Store Subcategory sql injection6.3 Medium
- oretnom23 online computer and laptop storeSourceCodester Online Computer and Laptop Store Image path traversal5.4 Medium
- online computer and laptop store project computer and laptop store, oretnom23 online computer and laptop store +1 moreSourceCodester Online Computer and Laptop Store User Registration login.php sql injection7.3 High
- oretnom23 online computer and laptop storeSourceCodester Online Computer and Laptop Store manage.php save_inventory sql injection6.3 Medium
- oretnom23 online computer and laptop storeSourceCodester Online Computer and Laptop Store index.php sql injection6.3 Medium
- wpmudev broken link checkerBroken Link Checker Plugin ui_get_action_links cross site scripting3.5 Low
- editorial calendar project calendarEditorial Calendar Plugin edcal.php edcal_filter_where sql injection6.3 Medium
- oretnom23 online computer and laptop storeSourceCodester Online Computer and Laptop Store Product Search ?p=products sql injection6.3 Medium
- oretnom23 online computer and laptop storeSourceCodester Online Computer and Laptop Store brand.php delete_brand sql injection6.3 Medium
- Show moreLoading…