CVEs published in April 2023
2,411 vulnerabilities, 280 critical, 18 exploited.
- siemens simatic cp 1242-7 v2, simatic cp 1243-1, simatic cp 1243-1 dnp3 (incl. siplus variants) +47 more +49 moreA vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions), SIMATIC CP 1243-1 ...7.5 High
seamonkeyopenSUSESecurity update for seamonkeyNo score- safe-eval project safe-evalsafe-eval vulnerable to Sandbox Bypass due to improper input sanitization8.8 High
- safe-eval project safe-evalsafe-eval vulnerable to Prototype Pollution via the safeEval function7.5 High
- sap crm (webclient ui), customer relationship management s4fnd, customer relationship management webclient ui +2 moreHTTP Verb Tampering vulnerability in SAP CRM (WebClient UI)5.4 Medium
- sap sapsetup, sapsetup (software installation program) +1 moreDLL Hijacking vulnerability in SapSetup (Software Installation Program)6.7 Medium
- sap netweaver, netweaver (bi cont addon) +1 moreDirectory/Path Traversal vulnerability in SAP NetWeaver.8.7 High
- sap netweaver as for abap (business server pages), netweaver as abap business server pages +1 moreDenial of Service (DOS) in SAP NetWeaver AS for ABAP (Business Server Pages)5.3 Medium
- sap application interface framework (message monitoring), application interface +1 moreCode Injection vulnerability in SAP Application Interface Framework (Message Monitoring)3.7 Low
- sap application interface framework (odata service), application interface framework +1 moreInformation Disclosure vulnerability in SAP Application Interface Framework (ODATA service)3.1 Low
- sap application interface framework (message dashboard), application interface framework, basis +2 more +4 moreCode Injection vulnerability in SAP Application Interface Framework (Message Dashboard)3.7 Low
- sap application interface framework (message dashboard), application interface framework, basis +2 more +4 moreCode Injection vulnerability in SAP Application Interface Framework (Message Dashboard)4.4 Medium
- sap abap platform and sap web dispatcher, web dispatcher, abap platform kernel +2 moreIP filter vulnerability in ABAP Platform and SAP Web Dispatcher5.0 Medium
- sap businessobjects business intelligence platform (promotion management), businessobjects business intelligence +1 moreInformation Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Promotion Management )9.8 Critical
- sap netweaver as for abap and abap platform, netweaver application server abap +1 moreDenial of Service in SAP NetWeaver AS for ABAP and ABAP Platform6.5 Medium
- sap netweaver enterprise portalMissing Authentication check in SAP NetWeaver Enterprise Portal6.5 Medium
- churchcrm crm, sap customer relationship management +1 moreCode Injection vulnerability in SAP CRM6.0 Medium
- sap se gui for html, sap netweaver, netweaver application server abap +2 moreCross-Site Scripting (XSS) vulnerability in SAP GUI for HTML6.1 Medium
- sap diagnostics agent (eventlogservicecollector), diagnostics agent +1 moreMultiple vulnerabilities in SAP Diagnostics Agent (EventLogServiceCollector)10.0 Critical
- sap diagnostics agent (oscommand bridge), diagnostics agent +1 moreMultiple vulnerabilities in SAP Diagnostics Agent (OSCommand Bridge)9.0 Critical
- sap landscape managementInformation Disclosure vulnerability in SAP Landscape Management6.8 Medium
- sap netweaver as java for deploy serviceImproper Access Control in SAP NetWeaver AS Java for Deploy Service5.3 Medium
- sap hcm fiori app my forms (fiori 2.0), hcm fiori app my forms +1 moreMissing Authorization check in SAP HCM Fiori App My Forms (Fiori 2.0)4.3 Medium
- axiosys bento4Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4_TrunAtom:...5.5 Medium
- 3rdmill novi survey, novi survey survey +1 moreNovi Survey before 8.9.43676 allows remote attackers to execute arbitrary code on the server in...9.8 Critical
- hikvision ds-a71024/48/72r,ds-a80624s,ds-a81016s,ds-a72024/72r,ds-a80316s,ds-a82024d, ds-a71024/48r-cvs,ds-a72024/48r-cvs, ds-a71024 firmware +9 more +11 moreSome Hikvision Hybrid SAN/Cluster Storage products have an access control vulnerability which can...9.1 Critical
- tp-link t2600g-28sq firmware, tp-link corporation limited t2600g-28sq +1 moreTP-Link L2 switch T2600G-28SQ firmware versions prior to 'T2600G-28SQ(UN)_V1_1.0.6 Build 20230227...5.7 Medium
- zohocorp manageengine applications managerStored Cross site scripting (XSS) vulnerability in Zoho ManageEngine Applications Manager through...6.1 Medium
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager through 16320 allows the admin user to conduct an XXE attack.6.5 Medium
- microsoft .net, .net 6.0, .net 7.0 +7 more +9 more.NET DLL Hijacking Remote Code Execution Vulnerability7.8 High
- contec co.,ltd. conprosys iot gateway products, contec cps-mc341-a1-111 firmware, cps-mc341-adsc1-111 firmware +17 more +19 moreOS command injection vulnerability in CONPROSYS IoT Gateway products allows a remote...8.8 High
- powerampapp powerampAn issue found in POWERAMP audioplayer build 925 bundle play and build 954 allows a remote...9.8 Critical
- seiko epson corporation epson printers/network interface web config, epson esifnw1 firmware, esnsb1 firmware +118 more +120 moreCross-site request forgery (CSRF) vulnerability in SEIKO EPSON printers/network interface Web...6.5 Medium
- contec co.,ltd. conprosys iot gateway products, contec cps-mc341-a1-111 firmware, cps-mc341-adsc1-111 firmware +17 more +19 moreInadequate encryption strength vulnerability in CONPROSYS IoT Gateway products allows a remote...7.2 High
- dualspace super securityAn issue found in DUALSPACE Super Secuirty v.2.3.7 allows an attacker to cause a denial of...9.8 Critical
- dualspace super securityAn issue found in DUALSPACE Super Secuirty v.2.3.7 allows an attacker to cause a denial of...7.5 High
- gdidees cmsGDidees CMS v3.9.1 and lower was discovered to contain an arbitrary file download vulenrability...7.5 High
- hyper h2, hyper +1 moreh2 vulnerable to denial of service7.5 High
- cesnet libyanglibyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the...7.5 High
- opencatsA stored cross-site scripting (XSS) vulnerability in OpenCATS v0.9.7 allows attackers to execute...5.4 Medium
- opencatsA stored cross-site scripting (XSS) vulnerability in OpenCATS v0.9.7 allows attackers to execute...5.4 Medium
- opencatsA Cross-Site Request Forgery (CSRF) in OpenCATS 0.9.7 allows attackers to force users into...4.3 Medium
- yokogawa centum cs 1000, centum cs 3000, centum cs 3000 entry class +6 more +8 moreCENTUM series provided by Yokogawa Electric Corporation are vulnerable to cleartext storage of...7.8 High
- buffalo bs-gs2008 firmware, bs-gs2008p firmware, bs-gs2016 firmware +14 more +16 moreUse of hard-coded credentials vulnerability in Buffalo network devices allows an attacker to...7.5 High
- ntppraecis_parse in ntpd/refclock_palisade.c in NTP 4.2.8p15 has an out-of-bounds write.6.4 Medium
- ntpmstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a '\0' character.5.6 Medium
- ntpmstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when copying the trailing...5.6 Medium
- ntpmstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a decimal point.5.6 Medium
- ntpmstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write in the cp<cpdec while loop.5.6 Medium
- oxidforge oxid eshopOXID eShop 6.2.x before 6.4.4 and 6.5.x before 6.5.2 allows session hijacking, leading to partial...5.4 Medium
- Show moreLoading…