CVEs published in April 2023
2,411 vulnerabilities, 280 critical, 18 exploited.
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...4.9 Medium
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...5.3 Medium
- oracle banking paymentsVulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications ...4.6 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...4.9 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security:...7.5 High
- oracle mysql server, fedoraproject fedora, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported...4.9 Medium
- oracle business intelligence, oracle corporation business intelligence enterprise edition +1 moreVulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics ...6.5 Medium
- oracle siebel crm, oracle corporation siebel ui framework +1 moreVulnerability in the Siebel CRM product of Oracle Siebel CRM (component: UI Framework). ...6.5 Medium
- oracle banking virtual account managementVulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial...6.0 Medium
- oracle banking virtual account managementVulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial...6.0 Medium
- oracle banking virtual account managementVulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial...6.1 Medium
- oracle banking virtual account managementVulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial...6.1 Medium
- oracle banking virtual account managementVulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial...5.3 Medium
- oracle banking virtual account managementVulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial...5.3 Medium
- oracle financial services behavior detection platformVulnerability in the Oracle Financial Services Behavior Detection Platform product of Oracle...4.3 Medium
- oracle solaris, oracle corporation solaris operating system +1 moreVulnerability in the Oracle Solaris product of Oracle Systems (component: NSSwitch). Supported...7.0 High
- schneider electric easergy builder installerA CWE-427 - Uncontrolled Search Path Element vulnerability exists that could allow an attacker...6.3 Medium
- checkmk gmbh appliance, tribe29 checkmk, checkmk appliance +2 morePrivilege escalation in Checkmk Appliance8.8 High
- checkmk gmbh appliance, tribe29 checkmk appliance, checkmk appliance firmware +2 moreSite-Passwords in GET parameters5.5 Medium
- schneider electric merten instabus tastermodul 1fach system m 625199, merten instabus tastermodul 2fach system m 625299, merten jalousie-/schaltaktor reg-k/8x/16x/10 m. hb 649908 +11 more +13 moreA CWE-287: Improper Authentication vulnerability exists that could allow a device to be...8.3 High
- schneider electric ecostruxure control expertA CWE-269: Improper Privilege Management vulnerability exists that could cause a local user to...5.5 Medium
- schneider electric ecostruxure control expertA CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause remote...8.8 High
- qualys cloud agentLocal Privilege Escalation6.7 Medium
- qualys cloud agentRace Condition6.7 Medium
- qualys cloud agentNTFS Junction6.7 Medium
- qualys cloud agentExecutable Hijacking6.7 Medium
- air cargo management system project cargo management system, sourcecodester air cargo management system +1 moreSourceCodester Air Cargo Management System cross site scripting2.4 Low
- sourcecodester task reminder system, task reminder system project reminder system +1 moreSourceCodester Task Reminder System sql injection4.7 Medium
- complaint management system project management system, phpgurukul complaint management system +1 moreSourceCodester Complaint Management System POST Parameter editable_ajax.php cross site scripting3.5 Low
- codename065 download managerWordPress Download Manager Plugin <= 3.2.59 is vulnerable to Cross Site Scripting (XSS)7.1 High
helmopenSUSESecurity update for helmNo score- oretnom23 student study center desk management system, student study center desk management system project study center desk management system +1 moreSourceCodester Student Study Center Desk Management System index.php file inclusion5.3 Medium
- denis buka content repeater – custom posts simplified, content-repeater project content-repeater +1 moreWordPress Content Repeater – Custom Posts Simplified Plugin <= 1.1.13 is vulnerable to Cross Site Scripting (XSS)4.8 Medium
- oretnom23 student study center desk management systemSourceCodester Student Study Center Desk Management System manage_student.php sql injection6.3 Medium
- sourcecodester task reminder system, task reminder system project reminder system +1 moreSourceCodester Task Reminder System Master.php sql injection4.7 Medium
- gus sevilla wp clictracker, wp clictracker project clictracker +1 moreWordPress WP Clictracker Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)4.8 Medium
- webhelpagency wha puzzle, wha puzzle +1 moreWordPress WHA Puzzle Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)5.3 Medium
- campcodes online thesis archiving system, online thesis archiving system project thesis archiving system +1 moreCampcodes Online Thesis Archiving System manage_user.php sql injection6.3 Medium
- contact form - repute infosystems arforms form builderWordPress ARForms Form Builder Plugin <= 1.5.5 is vulnerable to Cross Site Scripting (XSS)6.1 Medium
- campcodes online thesis archiving system, online thesis archiving system project thesis archiving system +1 moreCampcodes Online Thesis Archiving System view_curriculum.php sql injection6.3 Medium
- campcodes online thesis archiving system, online thesis archiving system project thesis archiving system +1 moreCampcodes Online Thesis Archiving System view_details.php sql injection6.3 Medium
- campcodes online thesis archiving system, online thesis archiving system project thesis archiving system +1 moreCampcodes Online Thesis Archiving System Master.php sql injection6.3 Medium
- checkmkUnauthorized scheduling of downtimes via REST API4.3 Medium
- campcodes online thesis archiving system, online thesis archiving system project thesis archiving system +1 moreCampcodes Online Thesis Archiving System projects_per_curriculum.php sql injection6.3 Medium
- campcodes online thesis archiving system, online thesis archiving system project thesis archiving system +1 moreCampcodes Online Thesis Archiving System view_department.php sql injection6.3 Medium
firefoxUbuntufirefox regressionsNo score- i13websolution thumbnail carousel sliderThumbnail carousel slider <= 1.1.9 - Reflected Cross-Site Scripting6.1 Medium
- i13websolution responsive filterable portfolioResponsive Filterable Portfolio <= 1.0.19 - Reflected Cross-Site Scripting6.1 Medium
- nuovo spreadsheet-readerA Local File inclusion vulnerability in test.php in spreadsheet-reader 0.5.11 allows remote...7.5 High
- wbce cmsWBCE CMS 1.5.3 has a command execution vulnerability via admin/languages/install.php.7.2 High
- Show moreLoading…