CVEs published in April 2023
2,411 vulnerabilities, 280 critical, 18 exploited.
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +22 more +24 moreMicrosoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +22 more +24 moreMicrosoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows Graphics Component Elevation of Privilege Vulnerability7.8 High
- microsoft malware protection engineMicrosoft Defender Denial of Service Vulnerability7.5 High
- microsoft odbc, ole db, odbc driver 17 for sql server +3 more +5 moreMicrosoft ODBC and OLE DB Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreMicrosoft Message Queuing (MSMQ) Remote Code Execution Vulnerability9.8 Critical
- microsoft visual studio codeVisual Studio Code Remote Code Execution Vulnerability7.8 High
- microsoft dynamics 365, dynamics 365 (on-premises) version 9.0, dynamics 365 (on-premises) version 9.1 +2 moreMicrosoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability6.1 Medium
- microsoft send customer voice survey from dynamics 365Microsoft Dynamics 365 Customer Voice Cross-Site Scripting Vulnerability6.1 Medium
- microsoft dynamics 365, dynamics 365 (on-premises) version 9.0, dynamics 365 (on-premises) version 9.1 +2 moreMicrosoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability7.6 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +12 more +14 moreWindows DNS Server Remote Code Execution Vulnerability6.6 Medium
- microsoft azure service connectorAzure Service Connector Security Feature Bypass Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Kernel Denial of Service Vulnerability5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +20 more +22 moreWindows Remote Procedure Call Service (RPCSS) Elevation of Privilege Vulnerability8.8 High
- microsoft raw image extensionRaw Image Extension Remote Code Execution Vulnerability7.8 High
- microsoft raw image extensionRaw Image Extension Remote Code Execution Vulnerability8.4 High
- microsoft sharepoint server, sharepoint enterprise server 2013 service pack 1, sharepoint enterprise server 2016 +4 more +6 moreMicrosoft SharePoint Server Spoofing Vulnerability8.1 High
- microsoft office, 365 apps, 365 apps for enterprise +3 more +5 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows Kernel Elevation of Privilege Vulnerability7.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +18 more +20 moreWindows Error Reporting Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows Network Address Translation (NAT) Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows Secure Channel Denial of Service Vulnerability7.5 High
- microsoft windows 11 version 22h2, windows 11 22h2 +1 moreWin32k Elevation of Privilege Vulnerability7.0 High
- microsoft sql server, sql server 2008 r2 service pack 3 (qfe), sql server 2008 service pack 4 (qfe) +11 more +13 moreMicrosoft SQL Server Remote Code Execution Vulnerability7.3 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreMicrosoft Message Queuing (MSMQ) Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreRemote Procedure Call Runtime Information Disclosure Vulnerability4.3 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreRemote Procedure Call Runtime Remote Code Execution Vulnerability8.8 High
- microsoft edge, edge for android +1 moreMicrosoft Edge (Chromium-based) Tampering Vulnerability3.7 Low
- microsoft edgeMicrosoft Edge (Chromium-based) Security Feature Bypass Vulnerability4.3 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability6.1 Medium
vimMageiaUpdated vim packages fix security vulnerabilityNo score- oretnom23 online computer and laptop storeSourceCodester Online Computer and Laptop Store cross site scripting3.5 Low
- oretnom23 online computer and laptop storeSourceCodester Online Computer and Laptop Store update_order_status sql injection6.3 Medium
- oretnom23 online computer and laptop storeSourceCodester Online Computer and Laptop Store delete_order sql injection6.3 Medium
- devolutions remote desktop managerNo access control for the OTP key on OTP entries4.3 Medium
- devolutions remote desktop managerTwo factor authentication bypass on login in Devolutions Remote Desktop Manager 2022.3.35 and...6.5 Medium
- oretnom23 online computer and laptop storeSourceCodester Online Computer and Laptop Store save_brand sql injection6.3 Medium
- complaint management system project management system, phpgurukul complaint management system +1 moreSourceCodester Complaint Management System POST Parameter check_availability.php sql injection6.3 Medium
- sales tracker management system project tracker management system, sourcecodester sales tracker management system +1 moreSourceCodester Sales Tracker Management System GET Parameter manage_product.php sql injection6.3 Medium
- fortinet fortiauthenticatorAn improper neutralization of script-related HTML tags in a web page vulnerability [CWE-80] in...4.2 Medium
- fortinet fortiosA permissive list of allowed inputs vulnerability [CWE-183] in FortiGate version 7.2.3 and below,...4.1 Medium
- fortinet fortianalyzer, fortimanager +1 moreAn improper certificate validation vulnerability [CWE-295] in FortiAnalyzer and FortiManager 7.2...6.8 Medium
- fortinet fortisandboxA improper neutralization of special elements used in an sql command ('sql injection')...6.2 Medium
- fortinet fortios, fortiproxy +1 moreAn improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet...4.7 Medium
- fortinet fortideceptor, fortisandbox +1 moreA improper privilege management in Fortinet FortiSandbox version 4.2.0 through 4.2.2, 4.0.0...8.3 High
- fortinet forticlient, forticlientwindows +1 moreMultiple vulnerabilities including an incorrect permission assignment for critical resource [CWE...7.3 High
- fortinet fortiwebAn improper neutralization of input during web page generation [CWE-79] in the FortiWeb web...8.0 High
- fortinet fortiadcAn improper neutralization of input during web page generation ('Cross-site Scripting')...3.3 Low
- Show moreLoading…