CVEs published in April 2023
2,411 vulnerabilities, 280 critical, 18 exploited.
- shopware, shopware ag 6 +1 moreImproper Control of Generation of Code in Twig Rendered Views in Shopware8.8 High
- phoenixcontact energy axc pu, phoenix contact energy axc pu (1264327), infobox (1169323 ) +5 more +7 morePHOENIX CONTACT: Directory Traversal Vulnerability in ENERGY AXC PU Web service8.8 High
- apache sparkApache Spark proxy-user privilege escalation from malicious configuration class6.4 Medium
- apache iotdb, apache software foundation iotdb workbench, apache iotdb web workbench +2 moreApache IoTDB Workbench: apache/iotdb-web-workbench: forge the JWTToken to access workbench9.8 Critical
- apache iotdbApache IoTDB grafana-connector Login Bypass Vulnerability9.8 Critical
- asustor admA stack-based buffer overflow vulnerability was found in the ADM7.1 High
- dogecoin node, dogecoin +1 moreRab13s Exploit9.1 Critical
- dlink dir-823g firmwareD-Link DIR823G_V1.0.2B05 was discovered to contain a stack overflow via the NewPassword...9.8 Critical
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX Series: The PFE may crash when a lot of MAC addresses are being learned and aged5.3 Medium
- juniper junos os evolvedJunos OS Evolved: Shell Injection vulnerability in the gNOI server8.8 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In a BGP rib sharding scenario when a route is frequently updated an rpd memory leak will occur7.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: If malformed IPv6 router advertisements are received, memory corruption will occur which causes an rpd crash6.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In a BGP rib sharding scenario an rpd crash will happen shortly after a specific CLI command is issued5.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: In a 6PE scenario upon receipt of a specific IPv6 packet an integrity check fails4.7 Medium
- juniper junos os evolvedJunos OS Evolved: Read access to some confidential user information is possible5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: If a specific traffic rate goes above the DDoS threshold it will lead to an FPC crash7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: The kernel will crash when certain USB devices are inserted4.6 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: In a BBE scenario upon receipt of specific malformed packets from subscribers the process bbe-smgd will crash7.4 High
- juniper junos os evolvedJunos OS Evolved: The 'sysmanctl' shell command allows a local user to gain access to some administrative actions7.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: NFX Series: 'set system ports console insecure' allows root password recovery6.8 Medium
- juniper paragon active assuranceParagon Active Assurance: Enabling the timescaledb enables IP forwarding7.2 High
- juniper junos, juniper networks junos os +1 moreJunos OS: JRR200: Kernel crash upon receipt of a specific packet6.5 Medium
- juniper jdpi-decoder engine, junos, juniper networks junos os +1 more +3 moreJunos OS: SRX Series: Policies that rely on JDPI-Decoder actions may fail open5.3 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An attacker sending genuine BGP packets causes an RPD crash7.5 High
- juniper junos os evolvedJunos OS Evolved: Local low-privileged user with shell access can execute CLI commands as root7.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10002: Failure of storm control feature may lead to Denial of Service6.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Malformed BGP flowspec update causes RPD crash7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: User-controlled input vulnerability in J-Web5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Unauthenticated access vulnerability in J-Web5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: ACX Series: IPv6 firewall filter is not installed in PFE when "from next-header ah" is used5.8 Medium
- juniper junos os evolvedJunos OS Evolved: Docker repository is world-writeable, allowing low-privileged local user to inject files into Docker containers8.2 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10002: PFE wedges and restarts upon receipt of specific malformed packets6.5 Medium
- autodesk fbx sdk, fbx software development kit +1 moreA user may be tricked into opening a malicious FBX file that may exploit a heap buffer overflow...7.8 High
- autodesk fbx sdk, fbx software development kit +1 moreA user may be tricked into opening a malicious FBX file that may exploit a stack buffer overflow...7.8 High
- autodesk fbx sdk, fbx software development kit +1 moreAn Out-Of-Bounds Write Vulnerability in Autodesk® FBX® SDK version 2020 or prior may lead to code...7.8 High
- autodesk maya usdA malicious actor may convince a victim to open a malicious USD file that may trigger an out-of...7.8 High
- autodesk maya usdA malicious actor may convince a victim to open a malicious USD file that may trigger an out-of...7.8 High
- litextension leurlrewriteSQL injection vulnerability found in PrestaShopleurlrewrite v.1.0 and before allow a remote...9.8 Critical
- 71note go-bbsgo-bbs v1 was discovered to contain an arbitrary file download vulnerability via the component ...8.8 High
- dedecmsDedeCMS v5.7.106 was discovered to contain a SQL injection vulnerability via the component /dede...7.2 High
- apng optimizer project optimizerAPNG_Optimizer v1.4 was discovered to contain a buffer overflow via the component /apngopt/ubuntu...7.5 High
- autodesk maya usdA malicious actor may convince a victim to open a malicious USD file that may trigger an...7.8 High
- electra central ac unit, electra-air central ac unit firmware +1 moreElectra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server7.5 High
- electra-air smart kit for split ac, electra osk201 +1 moreElectra Smart Kit for Split AC – Adjacent attacker may cause the unit to load unauthorized FW7.5 High
- electra central ac unit, electra-air central ac unit firmware +1 moreElectra Central AC unit – Easily calculated password7.5 High
- electra central ac unit, electra-air central ac unit firmware +1 moreElectra Central AC unit – Hardcoded Credentials9.8 Critical
- electra central ac unit, electra-air central ac unit firmware +1 moreElectra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW7.5 High
- chatwoot, chatwoot chatwoot/chatwoot +1 moreCross-site Scripting (XSS) - DOM in chatwoot/chatwoot5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10000 Series, PTX1000 Series: The dcpfe process will crash when a malformed ethernet frame is received6.5 Medium
- servicenow, servicenow now platform +1 moreCross-Site Scripting (XSS) vulnerability found on logout functionality6.1 Medium
- Show moreLoading…