CVEs published in April 2023
2,411 vulnerabilities, 280 critical, 18 exploited.
- adobe dimensionZDI-CAN-20148: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe dimensionZDI-CAN-20151: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe dimensionZDI-CAN-20155: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe dimensionZDI-CAN-20231: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe dimensionZDI-CAN-20045: Adobe Dimension USD File Parsing Out-Of-Bounds Read Memory leak Vulnerability5.5 Medium
- adobe dimensionAdobe Dimension has an arbitrary address write vulnerability when parsing USDZ files7.8 High
- adobe dimensionZDI-CAN-20284: Adobe Dimension USDZ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe dimensionValidate Your Inputs | Out-of-bounds Read (CWE-125)7.8 High
- arista cloudeos, arista networks eos +1 moreOn affected platforms running Arista CloudEOS an issue in the Software Forwarding Engine (Sfe) can lead to a potential denial of service attack by sending malformed packets to the switch.7.5 High
- arista cloudeos, arista networks eos +1 moreOn affected platforms running Arista CloudEOS a size check bypass issue in the Software Forwarding Engine (Sfe) may allow buffer over reads in later code. Additionally, depending on configured options…6.5 Medium
- arista eosOn affected platforms running Arista EOS with SNMP configured, a specially crafted packet can cause a memory leak in the snmpd process.5.3 Medium
- terminalfourThe Logback component in Terminalfour before 8.3.14.1 allows OS administrators to obtain...4.9 Medium
- google chromeInappropriate implementation in Sandbox in Google Chrome on Windows prior to 112.0.5615.49...8.8 High
- google chromeInsufficient policy enforcement in File System API in Google Chrome prior to 112.0.5615.49...6.5 Medium
- securepoint unified threat managementAn issue was discovered in SecurePoint UTM before 12.2.5.1. The firewall's endpoint at /spcgi.cgi...6.5 Medium
- securepoint unified threat managementAn issue was discovered in SecurePoint UTM before 12.2.5.1. The firewall's endpoint at /spcgi.cgi...7.5 High
- insyde insydeh2oAn issue was discovered in Insyde InsydeH2O with kernel 5.2 through 5.5. The Save State register...7.8 High
- adobe incopyAdobe InCopy SVG file Use After Free Arbitrary code execution7.8 High
- adobe digital editionsZDI-CAN-18255: Adobe Digital Editions PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- chromium libwebpUse after free in libwebp5.3 Medium
- wireshark, debian linux, fedoraproject fedora +2 moreGQUIC dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service...6.3 Medium
- wireshark, debian linux, fedoraproject fedora +2 moreLISP dissector large loop in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of...6.3 Medium
- wireshark, debian linux, fedoraproject fedora +2 moreRPCoRDMA dissector crash in Wireshark 4.0.0 to 4.0.4 and 3.6.0 to 3.6.12 allows denial of service...6.3 Medium
- linux, linux kernel +1 moreA use-after-free flaw was found in ndlc_remove in drivers/nfc/st-nci/ndlc.c in the Linux Kernel....4.7 Medium
- avahi, fedoraproject fedora, redhat enterprise linux +2 moreA vulnerability was found in the avahi library. This flaw allows an unprivileged user to make a...5.5 Medium
- gnu binutilsA potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c....6.5 Medium
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +2 moreA heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum()...5.5 Medium
- linux kernelUse-after-free in tcindex (traffic control index filter) in the Linux Kernel7.8 High
- mozilla thunderbirdOCSP revocation status of recipient certificates was not checked when sending S/Mime encrypted...6.5 Medium
- openbsd libressl, openbsd +1 moreAn issue was discovered in x509/x509_verify.c in LibreSSL before 3.6.1, and in OpenBSD before 7.2...5.3 Medium
- dnnsoftware dotnetnukeAn arbitrary file upload vulnerability in the Digital Assets Manager module of DNN Corp...5.4 Medium
- insyde insydeh2oAn issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. Specially...5.5 Medium
commonmarkerRubyGemsCommonmarker vulnerable to to several quadratic complexity bugs that may lead to denial of serviceNo score- linuxfoundation vitessvitess allows users to create keyspaces that can deny access to already existing keyspaces4.1 Medium
- traefikHTTP header parsing could cause a deny of service7.5 High
- microsoft azure machine learningAzure Machine Learning Information Disclosure Vulnerability6.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 2019 for mac +3 more +5 moreMicrosoft Word Remote Code Execution Vulnerability7.8 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +12 more +14 moreWindows DNS Server Remote Code Execution Vulnerability6.6 Medium
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +12 more +14 moreWindows DNS Server Remote Code Execution Vulnerability6.6 Medium
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +12 more +14 moreWindows DNS Server Remote Code Execution Vulnerability6.6 Medium
- microsoft odbc, ole db, odbc driver 17 for sql server +3 more +5 moreMicrosoft ODBC and OLE DB Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreMicrosoft Message Queuing (MSMQ) Denial of Service Vulnerability7.5 High
- microsoft visual studio 2017 version 15.9 (includes 15.0 - 15.8), visual studio 2019 version 16.11 (includes 16.0 - 16.10), visual studio 2022 version 17.0 +6 more +8 moreVisual Studio Spoofing Vulnerability5.5 Medium
- microsoft visual studio 2017 version 15.9 (includes 15.0 - 15.8), visual studio 2019 version 16.11 (includes 16.0 - 16.10), visual studio 2022 version 17.0 +6 more +8 moreVisual Studio Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft visual studio 2019 version 16.11 (includes 16.0 - 16.10), visual studio 2022 version 17.0, visual studio 2022 version 17.2 +4 more +6 moreVisual Studio Information Disclosure Vulnerability5.5 Medium
- microsoft visual studio 2019 version 16.11 (includes 16.0 - 16.10), visual studio 2022 version 17.0, visual studio 2022 version 17.2 +4 more +6 moreVisual Studio Elevation of Privilege Vulnerability7.8 High
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +12 more +14 moreWindows DNS Server Remote Code Execution Vulnerability6.6 Medium
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +12 more +14 moreWindows DNS Server Remote Code Execution Vulnerability6.6 Medium
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +12 more +14 moreWindows DNS Server Remote Code Execution Vulnerability6.6 Medium
- Show moreLoading…