CVEs published in April 2023
2,411 vulnerabilities, 280 critical, 18 exploited.
- alextselegidis alextselegidis/easyappointments, easyappointments +1 moreSession Fixation in alextselegidis/easyappointments5.4 Medium
- alextselegidis alextselegidis/easyappointments, easyappointments +1 moreImproper Access Control in alextselegidis/easyappointments5.4 Medium
- alextselegidis alextselegidis/easyappointments, easyappointments +1 moreCross-site Scripting (XSS) - Stored in alextselegidis/easyappointments4.3 Medium
- alextselegidis alextselegidis/easyappointments, easyappointments +1 moreCross-site Scripting (XSS) - Stored in alextselegidis/easyappointments6.8 Medium
- x2engine x2crmX2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a stored cross-site scripting ...5.4 Medium
- x2engine x2crmX2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a reflected cross-site...5.4 Medium
- ieee 802.11, sonicwall soho 250 firmware, soho 250w firmware +27 more +29 moreThe IEEE 802.11 specifications through 802.11ax allow physically proximate attackers to intercept...7.5 High
- rconfigA SQL injection vulnerability in rConfig 3.9.7 exists via lib/ajaxHandlers/ajaxCompareGetCmdDates...8.8 High
- open-xchange ox app suiteOX App Suite before 7.10.6-rev30 allows SSRF because e-mail account discovery disregards the deny...4.3 Medium
- open-xchange ox app suiteOX App Suite before 7.10.6-rev30 allows SSRF because changing a POP3 account disregards the deny...4.3 Medium
- open-xchange ox app suiteOX App Suite before 7.10.6-rev30 allows XSS via an activity tracking adapter defined by jslob.6.1 Medium
- open-xchange ox app suiteOX App Suite before 7.10.6-rev20 allows XSS via upsell ads.6.1 Medium
- janeczku calibre-web, janeczku/calibre-web +1 moreImproper Restriction of Excessive Authentication Attempts in janeczku/calibre-web7.3 High
- kvmtool project kvmtoolkvmtool through 39181fc allows an out-of-bounds write, related to virtio/balloon.c and virtio/pci...8.8 High
- mediawikiAn issue was discovered in the VisualEditor extension in MediaWiki before 1.31.13, and 1.32.x...4.3 Medium
- mediawiki scoreThe Score extension through 0.3.0 for MediaWiki has a remote code execution vulnerability due to...9.8 Critical
- lilypondLilyPond before 2.24 allows attackers to bypass the -dsafe protection mechanism via output-def...8.6 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.11.8, 12 before 12.0...6.5 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.11.8, 12 before 12.0...5.9 Medium
- otrsAn issue was discovered in Open Ticket Request System (OTRS) 6.0.x before 6.0.12. An attacker...6.1 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before...5.4 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before...5.4 Medium
- gitlabAn issue was discovered in GitLab Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11...7.5 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before...5.4 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before...5.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before...9.8 Critical
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before...8.8 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before...4.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before...7.5 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before...7.5 High
- microsoft malware protection platformMicrosoft Defender Security Feature Bypass Vulnerability6.2 Medium
- campcodes online traffic offense management systemCampcodes Online Traffic Offense Management System view_details.php cross site scripting3.5 Low
- campcodes online traffic offense management systemCampcodes Online Traffic Offense Management System Users.phpp cross site scripting3.5 Low
- campcodes online traffic offense management systemCampcodes Online Traffic Offense Management System view_details.php sql injection6.3 Medium
- campcodes online traffic offense management systemCampcodes Online Traffic Offense Management System Master.php sql injection6.3 Medium
- campcodes online traffic offense management systemCampcodes Online Traffic Offense Management System Login.php sql injection7.3 High
- snowflake jdbc, snowflakedb snowflake-jdbc +1 moreSnowflake JDBC vulnerable to command injection via SSO URL authentication7.3 High
- google chrome, couchbase server, debian linux +2 more +4 moreType confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to...8.8 High
- matrix-org matrix-js-sdk, matrix javascript sdk +1 morematrix-js-sdk vulnerable to invisible eavesdropping in group calls5.0 Medium
- apache ofbizApache OFBiz: Arbitrary file reading vulnerability7.5 High
- hewlett packard enterprise hpe oneview global dashboard, hpe oneview global dashboard +1 moreAn HPE OneView Global Dashboard (OVGD) appliance dump may expose OVGD user account credentials5.5 Medium
installation-images-SLEDSUSE,installation-images-SLESSUSE +1 moreSecurity update for tftpboot-installation imagesNo score- forgerock access managementImproper authorization that can lead to account impersonation9.8 Critical
- hewlett packard enterprise (hpe) hpe oneview, hp oneview +1 moreHPE OneView virtual appliance "Migrate server hardware" option may expose sensitive information...5.5 Medium
libredwgOSS-FuzzHeap-buffer-overflow in dwg_encodeNo score- dedecmsDedeCMS select_templets.php path traversal4.3 Medium
binutilsOSS-FuzzHeap-double-free in cache_bcloseNo score- eyoucmsEyouCms HTTP POST Request cross site scripting2.4 Low
- dts electronics redline router, redline router firmware +1 moreAuthentication Bypass in Redline Router9.8 Critical
- dts electronics redline router, redline router firmware +1 moreAuthentication Bypass in Redline Router9.8 Critical
- Show moreLoading…