CVEs published in April 2023
2,411 vulnerabilities, 280 critical, 18 exploited.
- linux kernelA vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA in...7.8 High
- spring boot, vmware spring boot +1 moreSpring Boot Security Bypass with Wildcard Pattern Matching on Cloud Foundry9.8 Critical
- vmware aria operations for logs, cloud foundation +1 moreVMware Aria Operations for Logs contains a command injection vulnerability. A malicious actor...7.2 High
- vmware aria operations for logs, cloud foundation +1 moreVMware Aria Operations for Logs contains a deserialization vulnerability. An unauthenticated,...9.8 Critical
- linux kernelCopy_from_user Spectre-V1 Gadget in Linux Kernel6.5 Medium
- opennetworking onosAn issue was discovered in ONOS 2.5.1. There is an incorrect comparison of paths installed by...5.3 Medium
- opennetworking onosAn issue was discovered in ONOS 2.5.1. An intent with the same source and destination shows the...5.3 Medium
- opennetworking onosAn issue was discovered in ONOS 2.5.1. An intent with a port that is an intermediate point of its...7.5 High
- opennetworking onosAn issue was discovered in ONOS 2.5.1. Modification of an existing intent to have the same source...7.5 High
- opennetworking onosAn issue was discovered in ONOS 2.5.1. An intent with a large port number shows the CORRUPT state...9.8 Critical
- opennetworking onosAn issue was discovered in ONOS 2.5.1. IntentManager attempts to install the IPv6 flow rules of...7.5 High
- opennetworking onosAn issue was discovered in ONOS 2.5.1. An intent with an uppercase letter in a device ID shows...9.8 Critical
- opennetworking onosAn issue was discovered in ONOS 2.5.1. To attack an intent installed by a normal user, a remote...6.5 Medium
- opennetworking onosAn issue was discovered in ONOS 2.5.1. The purge-requested intent remains on the list, but it...7.5 High
- opennetworking onosAn issue was discovered in ONOS 2.5.1. There is an incorrect comparison of flow rules installed...6.5 Medium
- opennetworking onosAn issue was discovered in ONOS 2.5.1. In IntentManager, the install-requested intent (which...7.5 High
- mobicintAn issue in Mobicint Backend for Credit Unions v3 allows attackers to retrieve partial email...5.3 Medium
- avira antivirusA vulnerability within the Avira network protection feature allowed an attacker with local...7.8 High
- avast antivirus, nortonlifelock (gendigital) avg antivirus, avg anti-virus +2 moreAvast and AVG Antivirus for Windows were susceptible to a NULL pointer dereference issue via RPC...5.8 Medium
- avast antivirus, nortonlifelock (gendigital) avg antivirus, avg anti-virus +2 moreAvast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) ...6.5 Medium
- avast antivirus, nortonlifelock (gendigital) avg antivirus, avg anti-virus +2 moreAvast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) ...6.5 Medium
- pay-rails payImproper Neutralization of Script-Related HTML Tags in a Web Page in pay7.1 High
- cloud-hypervisor, cloudhypervisor cloud hypervisor +1 moreMalicious HTTP requests could close arbitrary opening file descriptors in cloud-hypervisor4.0 Medium
- discourse discourse-reactions, reactions +1 moreReaction metadata exposed in private topics in Discourse-reactions4.3 Medium
- drupal core, drupal +1 moreDrupal core - Moderately critical - Access bypass - SA-CORE-2023-0056.5 Medium
- stargate-bukkitStargate-Bukkit improperly handles vehicles causing data duplication.7.5 High
hunspellOSS-FuzzHeap-double-free in HashMgr::~HashMgrNo scoremosquittoOSS-FuzzHeap-use-after-free in dynsec_clients__findNo score- amazon aws-sigv4, awslabs aws-sdk-rust +1 moreAWS SDK for Rust will log AWS credentials when TRACE-level logging is enabled for request sending5.5 Medium
- secomea sitemanager, sitemanager 1129 firmware, sitemanager 1139 firmware +10 more +12 moreFTP Agent forwards traffic on inactive ports to LinkManager2.9 Low
- secomea gatemanagerGateManager debug interface is included in non-debug builds4.9 Medium
- secomea gatemanagerClear-text passwords in configuration files6.1 Medium
- taxopress, stevejburge tag, category, and taxonomy manager – ai autotagger with openai +1 moreTaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting5.5 Medium
- taxopress, stevejburge tag, category, and taxonomy manager – ai autotagger with openai +1 moreTaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting5.5 Medium
- taxopress, stevejburge tag, category, and taxonomy manager – ai autotagger with openai +1 moreTaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting5.5 Medium
- schneider electric legacy modicon premium cpus (tsxp57*), legacy modicon quantum (140cpu65*), modicon m340 cpu (part numbers bmxp34*) +12 more +14 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that...6.5 Medium
- schneider electric legacy modicon premium cpus (tsxp57*), legacy modicon quantum (140cpu65*), modicon m340 cpu (part numbers bmxp34*) +11 more +13 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could...7.5 High
- google chrome, debian linux, fedoraproject fedora +2 moreHeap buffer overflow in sqlite in Google Chrome prior to 112.0.5615.137 allowed a remote attacker...8.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInteger overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who...9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in DevTools in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who...7.5 High
- google chrome, debian linux, fedoraproject fedora +2 moreOut of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreOut of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137...8.8 High
- altran picotcpAltran picoTCP through 1.7.0 allows memory corruption (and subsequent denial of service) because...7.5 High
- powerjobPowerJob vulnerable to Insecure Permissions5.3 Medium
- powerjobPowerJob vulnerable to Incorrect Access Control via the create user/save interface.5.3 Medium
- powerjobPowerJob Incorrect Access Control vulnerability5.3 Medium
- codesector teracopyCode Sector TeraCopy 3.9.7 does not perform proper access validation on the source folder during...5.5 Medium
- ui desktopImproper usage of symmetric encryption in UI Desktop for Windows (Version 0.59.1.71 and earlier)...5.5 Medium
- ui desktopA permission misconfiguration in UI Desktop for Windows (Version 0.59.1.71 and earlier) could...5.5 Medium
- ui desktopA local privilege escalation (LPE) vulnerability in UI Desktop for Windows (Version 0.59.1.71 and...7.8 High
- Show moreLoading…