CVEs published in April 2023
2,411 vulnerabilities, 280 critical, 18 exploited.
- ribose rnpRibose RNP before 0.16.3 may hang when the input is malformed.5.3 Medium
- xmlsoft libxml2, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreAn issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted...6.5 Medium
- intel connmanclient.c in gdhcp in ConnMan through 1.41 could be used by network-adjacent attackers (operating...6.5 Medium
- xmlsoft libxml2, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreIn libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer...6.5 Medium
- automattic woocommerce payments, woopayments +1 moreAn issue in WooCommerce Payments plugin for WordPress (versions 5.6.1 and lower) allows an...9.8 Critical
- tightvncTightVNC before v2.8.75 allows attackers to escalate privileges on the host operating system via...9.0 Critical
- seowonintech swc-5100w firmwareSeowonIntech SWC 5100W WIMAX Bootloader 1.18.19.0, HW 0.0.7.0, and FW 1.11.0.1, 1.9.9.4 are...8.8 High
- liveaction livespA stored HTML injection vulnerability in LiveAction LiveSP v21.1.2 allows attackers to execute...5.4 Medium
- voidtools everythingVoid Tools Everything lower than v1.4.1.1022 was discovered to contain a Regular Expression...5.5 Medium
- mypikpak pikpakThe Android version of pikpak v1.29.2 was discovered to contain an information leak via the debug...3.3 Low
- dlink dsl-3782 firmwareAn issue found in D-Link DSL-3782 v.1.03 allows remote authenticated users to execute arbitrary...8.8 High
- idnovate popup module \(on entering\, exit popup\, add product\) and newsletterPrestashop advancedpopupcreator v1.1.21 to v1.1.24 was discovered to contain a SQL injection...9.8 Critical
- textpatternAn arbitrary file upload vulnerability in the upload plugin of Textpattern v4.8.8 and below...7.2 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-19854: Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-19833: Adobe Acrobat Reader DC PDF Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-20160: Adobe Acrobat Reader DC AcroForm insertItemAt Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-20176: Adobe Acrobat Reader DC AcroForm deleteItemAt Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-19832: Adobe Acrobat Reader DC Doc Object Integer Underflow Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-20227: Adobe Acrobat Reader DC AcroForm addField Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-20274: Adobe Acrobat Reader DC AcroForm removeField Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-20311: Adobe Acrobat Reader DC AcroForm exportAsFDFStr Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-20583: Adobe Acrobat Reader DC Popup Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreZDI-CAN-20712: AnnotsString Object prototype pollution Restrictions Bypass Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreZDI-CAN-20712: Net.HTTP.request Arbitrary Command Execution7.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreZDI-CAN-20712: Net.HTTP.request URL restriction bypass7.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreZDI-CAN-20712: Object Prototype pollution which leads to API Restrictions Bypass7.8 High
- adobe dimensionZDI-CAN-20143: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe substance 3d stager, substance3d - stager +1 moreZDI-CAN-20259: Adobe Substance 3D Stager USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe substance 3d stager, substance3d - stager +1 moreZDI-CAN-20237: Adobe Substance 3D Stager USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- adobe dimensionZDI-CAN-20278: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe dimensionZDI-CAN-20232: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 more[ZS-VR-22-112] Adobe Acrobat Out-of-bounds Read Memory leak5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC for macOS installer (AcroRdrDC_2200220191_MUI.pkg) contains a local privilege escalation vulnerability.7.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAdobe Acrobat parsing PDF Out-of-bounds Write Arbitrary code execution7.8 High
- adobe substance 3d stager, substance3d - stager +1 moreZDI-CAN-20236: Adobe Substance 3D Stager USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe substance 3d stager, substance3d - stager +1 moreZDI-CAN-20234: Adobe Substance 3D Stager USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- adobe substance 3d stager, substance3d - stager +1 moreZDI-CAN-20235: Adobe Substance 3D Stager USD File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe substance 3d stager, substance3d - stager +1 moreZDI-CAN-20256: Adobe Substance 3D Stager USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- adobe substance 3d stager, substance3d - stager +1 moreZDI-CAN-20255: Adobe Substance 3D Stager USDA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe substance 3d stager, substance3d - stager +1 moreZDI-CAN-20258: Adobe Substance 3D Stager USDC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- adobe substance 3d stager, substance3d - stager +1 moreZDI-CAN-20286: Adobe Substance 3D Stager USDZ File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 High
- adobe substance 3d stager, substance3d - stager +1 moreZDI-CAN-20265: Adobe Substance 3D Stager USDC File Parsing Uninitialized Variable Information Disclosure Vulnerability5.5 Medium
- adobe substance 3d stager, substance3d - stager +1 moreZDI-CAN-20266: Adobe Substance 3D Stager USDC File Parsing Uninitialized Variable Information Disclosure Vulnerability5.5 Medium
- adobe substance 3d stager, substance3d - stager +1 moreZDI-CAN-20267: Adobe Substance 3D Stager USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe substance 3d stager, substance3d - stager +1 moreZDI-CAN-20279: Adobe Substance 3D Stager USD File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe substance 3d stager, substance3d - stager +1 moreZDI-CAN-20287: Adobe Substance 3D Stager USDA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe dimensionZDI-CAN-20156: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe dimensionZDI-CAN-20147: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe dimensionZDI-CAN-20150: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe dimensionZDI-CAN-20233: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- Show moreLoading…