CVEs published in April 2023
2,411 vulnerabilities, 280 critical, 18 exploited.
- fortinet fortianalyzerAn improper input validation vulnerability [CWE-20] in FortiAnalyzer version 7.2.1 and below,...6.5 Medium
- fortinet fortios, fortiproxy +1 moreA url redirection to untrusted site ('open redirect') in Fortinet FortiOS version 7.2.0 through 7...4.1 Medium
- fortinet fortiadc, fortiweb +1 moreA improper neutralization of special elements used in an os command ('os command injection') in...6.5 Medium
- fortinet fortipresence, fortiproxy +1 moreA missing authentication for critical function vulnerability [CWE-306] in FortiPresence...9.3 Critical
- fortinet forticlient, forticlientwindows +1 moreA relative path traversal vulnerability in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 -...7.1 High
- fortinet forticlient, forticlientwindows +1 moreA incorrect authorization in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 -...7.1 High
- fortinet fortiadc, fortiddos, fortiddos-f +2 moreAn improper neutralization of special elements used in an OS command vulnerability [CWE-78] in...7.1 High
- fortinet fortinac, fortinac-f +1 moreAn exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiNAC...4.8 Medium
- fortinet fortisoarA improper neutralization of special elements used in a template engine vulnerability in Fortinet...7.2 High
- fortinet fortios, fortiproxy +1 moreAn improper neutralization of input during web page generation vulnerability ('Cross-site...8.3 High
- fortinet forticlient, forticlientmac +1 moreA download of code without Integrity check vulnerability [CWE-494] in FortiClientMac version 7.0...6.9 Medium
- mozilla firefox, firefox esr, firefox for android +4 more +6 moreMozilla developers Randell Jesup, Andrew Osmond, Sebastian Hengst, Andrew McCreight, and the...8.8 High
- mozilla firefox, firefox esr, firefox for android +4 more +6 moreA wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result....6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreSimilar to CVE-2023-28163, this time when choosing 'Save Link As', suggested filenames containing...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA newline in a filename could have been used to bypass the file extension security mechanisms...9.8 Critical
- mozilla firefox, firefox esr, firefox for android +4 more +6 moreFirefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be...8.8 High
- mozilla firefox, firefox esr, firefox for android +4 more +6 moreWhen handling the filename directive in the Content-Disposition header, the filename would be...8.8 High
- mozilla firefox, firefox esr, firefox for android +4 more +6 moreAn attacker could cause the memory manager to incorrectly free a pointer that addresses attacker...8.8 High
- mozilla firefox, firefox esr, firefox for android +4 more +6 moreFollowing a Garbage Collector compaction, weak maps may have been accessed before they were...6.5 Medium
- mozilla firefox, firefox esr, firefox for android +4 more +6 moreA website could have obscured the fullscreen notification by using a combination of <code>window...4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file...5.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreAn attacker could have caused an out of bounds memory access using WebGL APIs, leading to memory...9.8 Critical
- mozilla firefox esr, thunderbird +1 moreUnexpected data returned from the Safe Browsing API could have led to memory corruption and a...6.5 Medium
- hitachi vantara pentaho business analytics server, hitachivantara pentaho business analytics +1 moreHitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization5.4 Medium
- hitachi vantara pentaho business analytics server, hitachivantara pentaho business analytics +1 moreHitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Input During Web Page Generation6.5 Medium
- gov.uk govuk tech docsgovuk_tech_docs XSS Vulnerability6.1 Medium
amazon-ssm-agentopenSUSESecurity update for amazon-ssm-agentNo score- ge toolboxstToolboxST Deserialization of Untrusted Configuration Data2.9 Low
- apache inlongApache InLong: SQL injection in apache inLong 1.5.05.3 Medium
- dell powerprotect data manager, ppdm reporting (powerprotect data manager) +1 moreDell PPDM versions 19.12, 19.11 and 19.10, contain an improper access control vulnerability. A...8.8 High
- google libjxlOut of Bounds read in libjxl5.3 Medium
multipartcrates.iomultipart is UnmaintainedNo scoretree_magiccrates.iotree_magic is UnmaintainedNo score- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn telecom service, there is a missing permission check. This could lead to local denial of...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn telecom service, there is a missing permission check. This could lead to local denial of...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn telecom service, there is a missing permission check. This could lead to local denial of...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn vdsp service, there is a missing permission check. This could lead to local denial of service...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn telecom service, there is a missing permission check. This could lead to local denial of...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn telecom service, there is a missing permission check. This could lead to local denial of...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn telecom service, there is a missing permission check. This could lead to local denial of...5.5 Medium
- siemens scalance x200-4p irt, scalance x201-3p irt, scalance x201-3p irt pro +23 more +25 moreA vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE...6.7 Medium
- siemens jt open, jt utilities, jt open toolkit +2 moreA vulnerability has been identified in JT Open (All versions < V11.3.2.0), JT Utilities (All...7.8 High
- siemens polarion almA vulnerability has been identified in Polarion ALM (All versions < V2304.0). The application...5.9 Medium
- siemens siprotec 5 6md85 (cp300), siprotec 5 6md86 (cp300), siprotec 5 6md89 (cp300) +80 more +82 moreA vulnerability has been identified in SIPROTEC 5 6MD85 (CP200) (All versions), SIPROTEC 5 6MD85 ...7.5 High
- siemens cp-8031 master module, cp-8050 master module, cp-8031 firmware +1 more +3 moreA vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050...9.8 Critical
- mendix forgot password, siemens mendix forgot password (mendix 7 compatible), mendix forgot password (mendix 8 compatible) +1 more +3 moreA vulnerability has been identified in Mendix Forgot Password (Mendix 7 compatible) (All versions...5.3 Medium
- siemens tia portal, totally integrated automation portal (tia portal) v15, totally integrated automation portal (tia portal) v16 +2 more +4 moreA vulnerability has been identified in TIA Portal V15 (All versions), TIA Portal V16 (All...7.3 High
- microchip maxview storage manager, siemens simatic ipc1047, simatic ipc1047e +7 more +9 moreA vulnerability has been identified in SIMATIC IPC1047 (All versions), SIMATIC IPC1047E (All...6.2 Medium
- siemens simatic cp 1242-7 v2, simatic cp 1243-1, simatic cp 1243-1 dnp3 (incl. siplus variants) +43 more +45 moreA vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions), SIMATIC CP 1243-1 ...7.5 High
- siemens simatic cp 1242-7 v2, simatic cp 1243-1, simatic cp 1243-1 dnp3 (incl. siplus variants) +45 more +47 moreA vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions), SIMATIC CP 1243-1 ...7.5 High
- Show moreLoading…