CVEs published in April 2023
2,411 vulnerabilities, 280 critical, 18 exploited.
- axiosys bento4Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp4info component.5.5 Medium
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus through 7180 allows for authenticated users to exploit command...7.2 High
- bloofox bloofoxcmsbloofox v0.5.2 was discovered to contain an arbitrary file deletion vulnerability via the...9.1 Critical
- amsystem am presenciaAM Presencia v3.7.3 was discovered to contain a SQL injection vulnerability via the user...9.8 Critical
- mz-automation libiec61850libiec61850 v1.5.1 was discovered to contain a segmentation violation via the function...7.5 High
- blackvue dr750-2ch ir lte firmware, dr750-2ch lte firmware +1 moreBlackVue DR750-2CH LTE v.1.012_2022.10.26 does not employ authenticity check for uploaded...9.8 Critical
- blackvue dr750-2ch ir lte firmware, dr750-2ch lte firmware +1 moreBlackVue DR750-2CH LTE v.1.012_2022.10.26 does not employ authentication in its web server. This...7.5 High
- blackvue dr750-2ch ir lte firmware, dr750-2ch lte firmware +1 moreBlackVue DR750-2CH LTE v.1.012_2022.10.26 was discovered to contain a weak default passphrase...9.8 Critical
- auto dealer management system project dealer management systemAuto Dealer Management System v1.0 was discovered to contain a SQL injection vulnerability.9.8 Critical
- filereplicationpro file replication proDiasoft File Replication Pro 7.5.0 allows attackers to escalate privileges by replacing a...9.8 Critical
- adobe substance 3d designer, substance3d - designer +1 moreZDI-CAN-20318: Adobe Substance 3D Designer DAE File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe substance 3d designer, substance3d - designer +1 moreZDI-CAN-20317: Adobe Substance 3D Designer DAE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe substance 3d designer, substance3d - designer +1 moreZDI-CAN-20316: Adobe Substance 3D Designer USD File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe substance 3d designer, substance3d - designer +1 moreZDI-CAN-20315: Adobe Substance 3D Designer USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe substance 3d designer, substance3d - designer +1 moreZDI-CAN-20314: Adobe Substance 3D Designer USDA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe substance 3d designer, substance3d - designer +1 moreZDI-CAN-20312: Adobe Substance 3D Designer USDC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- adobe substance 3d designer, substance3d - designer +1 moreZDI-CAN-20309: Adobe Substance 3D Designer USD File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe substance 3d designer, substance3d - designer +1 moreZDI-CAN-20313: Adobe Substance 3D Designer USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- adobe substance 3d designer, substance3d - designer +1 moreZDI-CAN-20310: Adobe Substance 3D Designer USDC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability7.8 High
- talend data catalogAll versions of Talend Data Catalog before 8.0-20220907 are potentially vulnerable to XML...5.5 Medium
- talend data catalogAll versions of Talend Data Catalog before 8.0-20230110 are potentially vulnerable to XML...5.5 Medium
- kyocera mobile print, kyocera document solutions, ta triumph-adler gmbh, and olivetti spa mobile print, utax/ta mobileprint, and olivetti mobile print +1 moreKYOCERA Mobile Print' v3.2.0.230119 and earlier, 'UTAX/TA MobilePrint' v3.2.0.230119 and earlier,...5.5 Medium
- arista eosOn affected modular platforms running Arista EOS equipped with both redundant supervisor modules and having the redundancy protocol configured with RPR or SSO, an existing unprivileged user can login…9.3 Critical
- tigergraph enterprise, cloud +1 moreAn issue was discovered in TigerGraph Enterprise Free Edition 3.x. It creates an authentication...8.8 High
- tigergraphAn issue was discovered in TigerGraph Enterprise Free Edition 3.x. Data loading jobs in...6.5 Medium
- tigergraphAn issue was discovered in TigerGraph Enterprise Free Edition 3.x. There is unsecured read access...4.9 Medium
- vmware spring sessionSpring Session session ID can be logged to the standard output stream6.5 Medium
- vmware spring frameworkSpring Framework vulnerable to denial of service6.5 Medium
- nilsteampassnet nilsteampassnet/teampass, teampass +1 moreCross-site Scripting (XSS) - Stored in nilsteampassnet/teampass5.8 Medium
- microweber, microweber microweber/microweber +1 moreCross-site Scripting (XSS) - Generic in microweber/microweber5.3 Medium
- debian linux, linux kernel +1 moreSpectre v2 SMT mitigations problem in Linux kernel5.6 Medium
- protobuf-c project protobuf-cprotobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member.5.5 Medium
- xwiki, xwiki xwiki-platform +1 moreImproper Neutralization of Script-Related HTML Tags (XSS) in the LiveTable Macro8.9 High
- patriksimek vm2vm2 Sandbox escape vulnerability9.8 Critical
- linuxfoundation openfeature, open-feature open-feature-operator +1 moreOpenFeature Operator vulnerable to Cluster-level Privilege Escalation8.1 High
- xwiki, xwiki xwiki-platform +1 moreUnauthenticated user can have information about hidden users on subwikis through uorgsuggest.vm3.7 Low
- xwiki, xwiki xwiki-platform +1 moreorg.xwiki.platform:xwiki-platform-skin-skinx vulnerable to basic Cross-site Scripting by exploiting JSX or SSX plugins9.1 Critical
- xwiki, xwiki xwiki-platform +1 moreorg.xwiki.platform:xwiki-platform-rendering-xwiki vulnerable to stored cross-site scripting via HTML and raw macro10.0 Critical
- xwiki, xwiki xwiki-platform +1 moreURL Redirection to Untrusted Site ('Open Redirect') in org.xwiki.platform:xwiki-platform-oldcore4.7 Medium
- xwiki, xwiki xwiki-platform +1 moreorg.xwiki.platform:xwiki-platform-rendering-macro-rss Cross-site Scripting vulnerability9.1 Critical
- xwiki, xwiki xwiki-commons +1 moreorg.xwiki.commons:xwiki-commons-xml Cross-site Scripting vulnerability9.1 Critical
- xwiki, xwiki xwiki-platform +1 morexwiki-platform-administration-ui vulnerable to privilege escalation9.9 Critical
- xwiki, xwiki xwiki-platform +1 moreorg.xwiki.platform:xwiki-platform-flamingo-theme-ui vulnerable to privilege escalation9.9 Critical
- xwiki, xwiki xwiki-platform +1 moreorg.xwiki.platform:xwiki-platform-flamingo-theme-ui Eval Injection vulnerability10.0 Critical
- xwiki, xwiki xwiki-platform +1 moreorg.xwiki.platform:xwiki-platform-livedata-macro vulnerable to Cross-site Scripting8.9 High
- xwiki, xwiki xwiki-platform +1 moreorg.xwiki.platform:xwiki-platform-oldcore makes Incorrect Use of Privileged APIs with DocumentAuthors9.1 Critical
- xwiki, xwiki xwiki-platform +1 moreorg.xwiki.platform:xwiki-platform-security-authentication-default XSS with authenticated endpoints5.4 Medium
- xwiki, xwiki xwiki-platform +1 moreorg.xwiki.platform:xwiki-platform-panels-ui Eval Injection vulnerability10.0 Critical
- xwiki, xwiki xwiki-platform +1 moreorg.xwiki.platform:xwiki-platform-logging-ui Injection vulnerability9.1 Critical
- xwiki, xwiki xwiki-platform +1 morexwiki.platform:xwiki-platform-panels-ui Eval Injection vulnerability10.0 Critical
- Show moreLoading…