CVEs published in April 2023
2,411 vulnerabilities, 280 critical, 18 exploited.
- autodesk autocad, autocad advance steel, autocad architecture +7 more +9 moreA maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can be used to write...7.8 High
- autodesk autocad, autocad advance steel, autocad architecture +7 more +9 moreA maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can be used to cause...7.8 High
- autodesk autocad, autocad advance steel, autocad architecture +7 more +9 moreA maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can force an Out-of...7.8 High
- export user project user** UNSUPPORTED WHEN ASSIGNED ** The Export User plugin through 2.0 for MyBB allows XSS during the...5.4 Medium
- auto dealer management system project dealer management systemAuto Dealer Management System v1.0 was discovered to contain a cross-site scripting (XSS)...6.1 Medium
- whoapp whoAn issue found in WHOv.1.0.28, v.1.0.30, v.1.0.32 allows an attacker to cause a escalation of...9.8 Critical
- whoapp whoAn issue found in WHOv.1.0.28, v.1.0.30, v.1.0.32 allows an attacker to cause a denial of service...7.5 High
- egostudiogroup super cleanAn issue found in Ego Studio SuperClean v.1.1.9 and v.1.1.5 allows an attacker to gain privileges...7.8 High
- bestools trusted tools free musicSQL injection vulnerability found in Trusted Tools Free Music v.2.1.0.47, v.2.0.0.46, v.1.9.1.45,...7.5 High
- timmystudios change color of keypadDirectory Traversal vulnerability found in T-ME Studios Change Color of Keypad v.1.275.1.277...9.8 Critical
- dualspace lock masterAn issue found in DUALSPACE Lock Master v.2.2.4 allows a local attacker to cause a denial of...7.1 High
- powerampapp powerampAn issue found in POWERAMP 925-bundle-play and Poweramp 954-uni allows a remote attacker to cause...7.5 High
- commscope dg3450 firmwareAn issue was discovered in CommScope Arris DG3450 Cable Gateway AR01.02.056.18_041520_711.NCS.10....6.1 Medium
- commscope dg3450 firmwareAn issue was discovered in DG3450 Cable Gateway AR01.02.056.18_041520_711.NCS.10. The...5.3 Medium
- dualspace space clean \& super cleanerAn issue found in DUALSPACE v.1.1.3 allows a local attacker to gain privileges via the...7.8 High
- pax paydroid, paxtechnology a920 pro +1 morePAX Technology PAX A920 Pro PayDroid 8.1suffers from a Race Condition vulnerability, which allows...7.0 High
- atrocore atropimAtropim 1.5.26 is vulnerable to Directory Traversal.7.5 High
- revive adserverThe login page of Revive Adserver v5.4.1 is vulnerable to brute force attacks.7.5 High
- sync oxygen content fusion, oxygen xml web author +1 moreA directory traversal vulnerability in Oxygen XML Web Author before 25.0.0.3 build 2023021715 and...5.3 Medium
- strongswanstrongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable...9.8 Critical
- mitel micollabA vulnerability in the web conferencing component of Mitel MiCollab through 9.6.2.9 could allow...5.9 Medium
- rails rails-ujsrails-ujs vulnerable to DOM Based Cross-site Scripting contenteditable HTML Elements6.3 Medium
- tigergraph enterprise, cloud +1 moreAn issue was discovered in TigerGraph Enterprise Free Edition 3.x. There is logging of user...4.9 Medium
- froxlor, froxlor froxlor/froxlor +1 moreUnrestricted Upload of File with Dangerous Type in froxlor/froxlor9.1 Critical
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreKernel: udmabuf: improper validation of array index leading to local privilege escalation8.2 High
- timmystudios fast typing keyboardTimmystudios Fast Typing Keyboard v1.275.1.162 allows unauthorized apps to overwrite arbitrary...9.8 Critical
- servicenowThere exists an open redirect within the response list update functionality of ServiceNow. This...5.5 Medium
- liveboxcloud vdeskAn issue was discovered in LIVEBOX Collaboration vDesk through v018. Broken Access Control exists...6.5 Medium
- liveboxcloud vdeskAn issue was discovered in LIVEBOX Collaboration vDesk through v018. Broken Access Control exists...8.8 High
- liveboxcloud vdeskAn issue was discovered in LIVEBOX Collaboration vDesk through v018. An Insecure Direct Object...6.5 Medium
- liveboxcloud vdeskAn issue was discovered in LIVEBOX Collaboration vDesk through v018. A Bypass of Two-Factor...9.8 Critical
- liveboxcloud vdeskAn issue was discovered in LIVEBOX Collaboration vDesk through v018. A Bypass of Two-Factor...9.8 Critical
- liveboxcloud vdeskAn issue was discovered in LIVEBOX Collaboration vDesk through v018. A Cryptographic Issue can...6.5 Medium
- openbsd libressl, openbsd +1 morex509/x509_verify.c in LibreSSL before 3.4.2, and OpenBSD before 7.0 errata 006, allows...9.8 Critical
- authzed spicedbSpiceDB binding metrics port to untrusted networks and can leak command-line flags8.7 High
libredwgOSS-FuzzHeap-buffer-overflow in bit_read_BBNo scoredav1dOSS-FuzzHeap-use-after-free in picture_copy_propsNo scoremyanmar-toolsOSS-FuzzUNKNOWN READ in google_myanmar_tools::ZawgyiDetector::ZawgyiDetectorNo score- canonical apport, ubuntu linux +1 morelocal privilege escalation in apport-cli7.7 High
- colorlib activelloWordPress Activello Theme <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)5.4 Medium
- cyclodev wp notify, zephilou cyklodev wp notify +1 moreWordPress Cyklodev WP Notify Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)4.8 Medium
- apache sling engine, sling +1 moreApache Sling Engine: Include-based XSS8.0 High
spacewalk-javaSUSE,spacewalk-webSUSE +1 moreSecurity update for SUSE Manager Server 4.3No score- atos unify openscape bcf, unify openscape branch, unify openscape session border controller +2 moreAtos Unify OpenScape SBC 10 before 10R3.1.3, OpenScape Branch 10 before 10R3.1.2, and OpenScape...7.2 High
- baidu braftBaidu braft 1.1.2 has a memory leak related to use of the new operator in example/atomic...7.5 High
- tikvTiKV 6.1.2 allows remote attackers to cause a denial of service (fatal error, with RpcStatus...7.5 High
- tikvTiKV 6.1.2 allows remote attackers to cause a denial of service (fatal error) upon an attempt to...7.5 High
- nongnu dmidecodeDmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance...7.1 High
- lmxcmslmxcms v1.4.1 was discovered to contain a SQL injection vulnerability via the setbook parameter...9.8 Critical
- bloofox bloofoxcmsbloofox v0.5.2 was discovered to contain a SQL injection vulnerability via the component /index...8.8 High
- Show moreLoading…