CVEs published in April 2023
2,411 vulnerabilities, 280 critical, 18 exploited.
- ministry of land, infrastructure, transport and tourism, japan national land numerical information data conversion toolNational land numerical information data conversion tool all versions improperly restricts XML...5.5 Medium
- haproxyHTTP request/response smuggling vulnerability in HAProxy version 2.7.0, and 2.6.1 to 2.6.7 allows...7.3 High
- jtekt screen creator advance 2Screen Creator Advance 2 Ver.0.1.1.4 Build01A and earlier is vulnerable to improper restriction...7.8 High
- aten pe8108 firmwareAten PE8108 2.4.232 is vulnerable to Incorrect Access Control. The device allows unauthenticated...5.3 Medium
- aten pe8108 firmwareAten PE8108 2.4.232 is vulnerable to denial of service (DOS).5.3 Medium
- aten pe8108 firmwareAten PE8108 2.4.232 is vulnerable to Incorrect Access Control. The device allows unauthenticated...7.5 High
- aten pe8108 firmwareAten PE8108 2.4.232 is vulnerable to Cross Site Request Forgery (CSRF).4.3 Medium
- aten pe8108 firmwareAten PE8108 2.4.232 is vulnerable to Incorrect Access Control. Restricted users have access to...8.1 High
- aten pe8108 firmwareAten PE8108 2.4.232 is vulnerable to Incorrect Access Control. Restricted users have read access...7.2 High
- buffalo bs-gs2008 firmware, bs-gs2008p firmware, bs-gs2016 firmware +10 more +12 moreImproper access control vulnerability in Buffalo network devices allows a network-adjacent...8.1 High
- buffalo bs-gs2008 firmware, bs-gs2008p firmware, bs-gs2016 firmware +5 more +7 moreStored-cross-site scripting vulnerability in Buffalo network devices allows an attacker with...5.4 Medium
- openwrtLuCI openwrt-22.03 branch git-22.361.69894-438c598 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the component /system/sshkeys.js.5.4 Medium
- contec co.,ltd. conprosys iot gateway products, contec cps-mc341-a1-111 firmware, cps-mc341-adsc1-111 firmware +17 more +19 moreImproper access control vulnerability in CONPROSYS IoT Gateway products allows a remote...4.3 Medium
- seiko epson corporation epson printers/network interface web config, epson esifnw1 firmware, esnsb1 firmware +48 more +50 moreCross-site scripting vulnerability in SEIKO EPSON printers/network interface Web Config allows a...4.8 Medium
- snippet box project boxSnippet-box 1.0.0 is vulnerable to Cross Site Scripting (XSS). Remote attackers can render...6.1 Medium
- arm avalon android gralloc module, bifrost android gralloc module, valhall android gralloc module +2 moreAn issue was discovered in the Arm Android Gralloc Module. A non-privileged user can read a small...3.3 Low
- insyde insydeh2oAn issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. IHISI...8.4 High
- insyde insydeh2oAn issue was discovered in ChipsetSvcSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. There...8.8 High
- insyde insydeh2oAn issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. It is...8.8 High
- insyde insydeh2oAn issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. A malicious...8.8 High
- wolt delivery: food and more, delivery +1 moreAndroid App 'Wolt Delivery: Food and more' version 4.27.2 and earlier uses hard-coded credentials...7.8 High
- elecom wab-matWAB-MAT Ver.5.0.0.8 and earlier starts another program with an unquoted file path. Since a...7.3 High
- debian linux, linux kernel, netapp h300s +12 more +14 moreKernel: use after free bug in btsdio_remove due to race condition7.0 High
- answer, answerdev answerdev/answer +1 morePassword Aging with Long Expiration in answerdev/answer4.6 Medium
- answer, answerdev answerdev/answer +1 moreInsertion of Sensitive Information Into Sent Data in answerdev/answer7.6 High
- answer, answerdev answerdev/answer +1 moreExposure of Sensitive Information Through Metadata in answerdev/answer7.7 High
- arm avalon gpu kernel driver, valhall gpu kernel driver +1 moreAn issue was discovered in the Arm Mali Kernel Driver. A non-privileged user can make improper...3.3 Low
- wacom driverWacom Driver 6.3.46-1 for Windows was discovered to contain an arbitrary file write vulnerability...5.9 Medium
- wacom driverWacom Driver 6.3.46-1 for Windows and lower was discovered to contain an arbitrary file deletion...7.3 High
- treasuredata fluent bitAn issue was discovered in Treasure Data Fluent Bit 1.7.1, a wrong variable is used to get the...7.8 High
- treasuredata fluent bitAn issue was discovered in Treasure Data Fluent Bit 1.7.1, erroneous parsing in...7.8 High
- shipstationThe ShipStation.com plugin 1.1 and earlier for CS-Cart allows remote attackers to insert...3.7 Low
- ghost sqlite3Buffer Overflow vulnerability found in SQLite3 v.3.27.1 and before allows a local attacker to...5.5 Medium
- doyocms project doyocmsCross Site Request Forgery vulnerability found in Milken DoyoCMS v.2.3 allows a remote attacker...8.8 High
- doyocms project doyocmsFile Upload vulnerability found in Milken DoyoCMS v.2.3 allows a remote attacker to execute...9.8 Critical
microcode_ctlTuxCareUpdate of microcode_ctlNo score- silverwaregames, mesosoi silverwaregames-io-issue-tracker +1 moreSilverwareGames.io users with access to the game upload panel are able to edit download links for games uploaded by other developers2.7 Low
glusterfs-clientTuxCare,glusterfs-commonTuxCare,glusterfs-serverTuxCare +2 moreFix CVE(s): CVE-2022-26253No score- ping identity self-service account managerPing Identity Self-Service Account Manager SSAMController.java cross site scripting3.5 Low
- vivwebsolutions dynamic widgetsDynamic Widgets Plugin dynwid_class.php sql injection6.3 Medium
- dpgaspar flask-appbuilderNo Rate Limiting on Login AUTH DB7.5 High
- tpadmin project tpadminyuan1994 tpAdmin Upload.php remote server-side request forgery6.3 Medium
- tpadmin project tpadminyuan1994 tpAdmin Upload.php Upload unrestricted upload6.3 Medium
- oretnom23 online eyewear shopSourceCodester Online Eyewear Shop GET Parameter manage_stock.php sql injection6.3 Medium
- joomunited wp meta seoWP Meta SEO < 4.5.5 - Author+ PHAR Deserialization8.8 High
- fluentforms contact form, unknown contact form plugin +1 moreFluentForms < 4.3.25 - Contributor+ Stored XSS via Custom HTML Form Field5.4 Medium
- unknown all-in-one security (aios), updraftplus all-in-one security +1 moreAll-In-One Security (AIOS) < 5.1.5 - Admin+ Stored XSS4.8 Medium
- keetrax wp tilesWP Tiles <= 1.1.2 - Contributor+ Stored XSS5.4 Medium
- ibenic simple giveawaysSimple Giveaways < 2.45.1 - Admin+ Stored Cross-Site Scripting4.8 Medium
- unknown klaviyo, klaviyo klavio +1 moreKlaviyo <= 3.0.10 - Admin+ Stored XSS4.8 Medium
- Show moreLoading…