CVEs published in April 2023
2,411 vulnerabilities, 280 critical, 18 exploited.
- eyoucmsEyouCms New Picture cross site scripting2.4 Low
- dedecmsDedeCMS module_main.php GetSystemFile code injection6.3 Medium
container-suseconnectSUSESecurity update for container-suseconnectNo score- campcodes advanced online voting systemCampcodes Advanced Online Voting System config_save.php cross site scripting3.5 Low
- campcodes advanced online voting systemCampcodes Advanced Online Voting System positions_delete.php sql injection6.3 Medium
- campcodes advanced online voting systemCampcodes Advanced Online Voting System candidates_row.php sql injection6.3 Medium
- campcodes advanced online voting systemCampcodes Advanced Online Voting System ballot_down.php sql injection6.3 Medium
- b&r industrial automation vc4Improper Authentication Mechanism in B&R VC4 Visualization9.8 Critical
- campcodes advanced online voting systemCampcodes Advanced Online Voting System positions_row.php sql injection6.3 Medium
- campcodes advanced online voting systemCampcodes Advanced Online Voting System positions_add.php sql injection6.3 Medium
- campcodes advanced online voting systemCampcodes Advanced Online Voting System ballot_up.php sql injection6.3 Medium
- campcodes advanced online voting systemCampcodes Advanced Online Voting System voters_row.php sql injection6.3 Medium
- advanced online voting system project online voting system, campcodes advanced online voting system +1 moreCampcodes Advanced Online Voting System login.php sql injection6.3 Medium
- assaabloy control id idsecure, control id idsecure +1 moreControl iD iDSecure Dispositivos Page cross site scripting3.5 Low
- assaabloy control id rhid, control id rhid +1 moreControl iD RHiD Edit a sql injection6.3 Medium
- datagearDataGear JDBC Server deserialization5.3 Medium
- 201206030 novel-plusnovel-plus sql injection6.3 Medium
- 201206030 novel-plusnovel-plus sql injection6.3 Medium
- eskom water metering software, el terminali \(su okuma\) uygulamalarimiz +1 moreSQLi in Eskom Computer Water Metering Software9.8 Critical
- 201206030 novel-plusnovel-plus sql injection6.3 Medium
- campcodes video sharing websiteCampcodes Video Sharing Website admin_class.php sql injection6.3 Medium
- campcodes video sharing websiteCampcodes Video Sharing Website watch.php sql injection6.3 Medium
- campcodes video sharing websiteCampcodes Video Sharing Website upload.php sql injection6.3 Medium
- campcodes video sharing websiteCampcodes Video Sharing Website signup.php sql injection6.3 Medium
- raylibVersions of the package raysan5/raylib before 4.5.0 are vulnerable to Cross-site Scripting (XSS)...6.1 Medium
- mitsubishi electric india gc-enet-com, mitsubishielectric gc-enet-com firmware +1 moreSignal Handler Race Condition vulnerability in Mitsubishi Electric India GC-ENET-COM whose first...7.5 High
- smartptt scadaSmartPTT SCADA 1.1.0.0 allows remote code execution (when the attacker has administrator...7.2 High
- slims senayan library management systemSENAYAN Library Management System (SLiMS) Bulian v9.5.2 does not strip exif data from uploaded...7.5 High
- aerocms project aerocmsAeroCMS v0.0.1 was discovered to contain multiple stored cross-site scripting (XSS)...5.4 Medium
- iodata wfs-sr03k firmware, wfs-sr03w firmware +1 moreWFS-SR03 v1.0.3 was discovered to contain a command injection vulnerability via the...9.8 Critical
- iodata wfs-sr03k firmware, wfs-sr03w firmware +1 moreWFS-SR03 v1.0.3 was discovered to contain a command injection vulnerability via the...8.8 High
- totolink x18 firmwareTOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability...9.8 Critical
- totolink x18 firmwareTOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability...9.8 Critical
- totolink x18 firmwareTOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain multiple command injection...9.8 Critical
- totolink x18 firmwareTOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability...9.8 Critical
- totolink x18 firmwareTOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability...9.8 Critical
- totolink x18 firmwareTOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability...9.8 Critical
- online pizza ordering project pizza orderingOnline Pizza Ordering v1.0 was discovered to contain an arbitrary file upload vulnerability which...8.8 High
- yoga class registration system project class registration systemYoga Class Registration System 1.0 was discovered to contain a SQL injection vulnerability via...7.5 High
- employee performance evaluation system project performance evaluation systemEmployee Performance Evaluation System v1.0 was discovered to contain an arbitrary file upload...8.8 High
- purchase order management project order managementPurchase Order Management v1.0 was discovered to contain a reflected cross-site scripting (XSS)...6.1 Medium
- purchase order management project order managementPurchase Order Management v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- purchase order management project order managementPurchase Order Management v1.0 was discovered to contain an arbitrary file upload vulnerability...8.8 High
- mp4v2 project mp4v2mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the MP4GetVideoProfileLevel...8.8 High
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via ffi_cb_impl_wpwwwww at src...5.5 Medium
- invisible-island ncurses, siemens ruggedcom rox mx5000, ruggedcom rox mx5000re +12 more +14 morencurses before 6.4 20230408, when used by a setuid application, allows local users to trigger...7.8 High
- shadow project shadow, siemens ruggedcom rox mx5000, ruggedcom rox mx5000re +12 more +14 moreIn Shadow 4.13, it is possible to inject control characters into fields provided to the SUID...3.3 Low
- irssiIrssi 1.3.x and 1.4.x before 1.4.4 has a use-after-free because of use of a stale special...5.3 Medium
- autodesk autocad, autocad advance steel, autocad architecture +7 more +9 moreA maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory...7.8 High
- autodesk autocad, autocad advance steel, autocad architecture +7 more +9 moreA maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory...7.8 High
- Show moreLoading…