CVEs published in April 2023
2,411 vulnerabilities, 280 critical, 18 exploited.
- discourseHTML injection via topic embedding in Discourse4.2 Medium
- ciliumDebug mode leaks confidential data in Cilium7.2 High
- schneider electric powerlogic hdpm6000, schneider-electric powerlogic hdpm6000 firmware +1 moreA CWE-129: Improper validation of an array index vulnerability exists where a specially...9.8 Critical
- schneider electric conext gateway, insightfacility, insighthome +3 more +5 moreA CWE-20: Improper Input Validation vulnerability exists that could allow an authenticated...7.2 High
- schneider electric apc easy ups online monitoring software (windows 10, 11 windows server 2016, 2019, 2022), easy ups online monitoring software (windows 10, 11 windows server 2016, 2019, 2022), schneider-electric apc easy ups online monitoring software +1 more +3 moreA CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause...7.5 High
- schneider electric apc easy ups online monitoring software (windows 10, 11 windows server 2016, 2019, 2022), easy ups online monitoring software (windows 10, 11 windows server 2016, 2019, 2022), schneider-electric apc easy ups online monitoring software +1 more +3 moreA CWE-78: Improper Handling of Case Sensitivity vulnerability exists that could cause remote...9.8 Critical
- redis, debian linux, fedoraproject fedora +2 more`HINCRBYFLOAT` can be used to crash a redis-server process5.5 Medium
- schneider electric apc easy ups online monitoring software (windows 10, 11 windows server 2016, 2019, 2022), easy ups online monitoring software (windows 10, 11 windows server 2016, 2019, 2022), schneider-electric apc easy ups online monitoring software +1 more +3 moreA CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow...9.8 Critical
- shoppingfeed, shoppingflux module-prestashop +1 moreImproper neutralization in an SQL query in Shoppingfeed9.4 Critical
- schneider electric ecostruxure power monitoring expertA CWE-613: Insufficient Session Expiration vulnerability exists that could allow an attacker...6.7 Medium
- discourseDenial of service via admin theme import route in Discourse2.7 Low
- schneider electric struxureware data center expertA CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS...5.6 Medium
- schneider electric struxureware data center expertA CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site...6.1 Medium
- schneider electric struxureware data center expertA CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site...6.1 Medium
- schneider electric struxureware data center expertA CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists...7.2 High
- schneider electric struxureware data center expertA CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists...7.2 High
- eclipse jetty, debian linux, eclipse jetty.project +4 more +6 moreCookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty2.4 Low
- schneider electric struxureware data center expertA CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command...7.8 High
- schneider electric struxureware data center expertA CWE-862: Missing Authorization vulnerability exists that could allow viewing of unauthorized...8.1 High
- schneider electric struxureware data center expertA CWE-863: Incorrect Authorization vulnerability exists that could allow access to device...8.8 High
- schneider electric struxureware data center expertA CWE-863: Incorrect Authorization vulnerability exists that could allow remote code execution...8.8 High
- eclipse jetty, jetty.project +1 moreOutOfMemoryError for large multipart without filename in Eclipse Jetty5.3 Medium
- schneider electric netbotz 4 - 355/450/455/550/570, schneider-electric netbotz 355 firmware, netbotz 450 firmware +3 more +5 moreA CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that...6.5 Medium
- schneider electric netbotz 4 - 355/450/455/550/570, schneider-electric netbotz 355 firmware, netbotz 450 firmware +3 more +5 moreA CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists...7.5 High
- schneider electric netbotz 4 - 355/450/455/550/570, schneider-electric netbotz 355 firmware, netbotz 450 firmware +3 more +5 moreA CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...7.6 High
- oracle solaris, oracle corporation solaris operating system +1 moreVulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported...3.3 Low
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...6.0 Medium
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...4.6 Medium
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...4.6 Medium
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...3.6 Low
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...4.6 Medium
- oracle user managementVulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Proxy...4.3 Medium
- oracle weblogic serverVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web...7.5 High
- oracle clinical remote data capture, oracle corporation clinical remote data capture option +1 moreVulnerability in the Oracle Clinical Remote Data Capture product of Oracle Health Sciences...6.5 Medium
- oracle corporation peoplesoft enterprise hcm human resources, oracle peoplesoft enterprise human capital management human resources +1 moreVulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft ...5.4 Medium
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...3.2 Low
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...8.2 High
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...6.0 Medium
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...3.8 Low
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...7.8 High
- oracle graalvm, oracle corporation graalvm enterprise edition +1 moreVulnerability in the Oracle GraalVM Enterprise Edition product of Oracle Java SE (component:...5.7 Medium
- oracle solaris, oracle corporation solaris operating system +1 moreVulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported...7.7 High
- oracle solaris, oracle corporation solaris operating system +1 moreVulnerability in the Oracle Solaris product of Oracle Systems (component: Libraries). The...6.5 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...4.9 Medium
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...4.9 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Client programs). ...7.1 High
- oracle weblogic serverVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...7.5 High
- oracle application object libraryVulnerability in the Oracle Application Object Library product of Oracle E-Business Suite ...6.5 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...4.9 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...4.9 Medium
- Show moreLoading…