CVEs published in April 2023
2,411 vulnerabilities, 280 critical, 18 exploited.
- modoboa, modoboa modoboa/modoboa +1 moreImproper Authorization in modoboa/modoboa9.1 Critical
- francoisjacquet francoisjacquet/rosariosis, rosariosis +1 moreImproper Access Control in francoisjacquet/rosariosis4.6 Medium
- shopwareShopware vulnerable to cross-site scripting (XSS)6.1 Medium
- iofinnet tss-libIO FinNet tss-lib vulnerable to replay attacks involving proofs6.8 Medium
- solarwinds platform, orion platform +1 moreSolarWinds Platform Incorrect Input Neutralization Vulnerability6.1 Medium
- solarwinds platform, orion platform +1 moreSolarWinds Platform Local Privilege Escalation Vulnerability7.8 High
- solarwinds platform, orion platform +1 moreSolarWinds Platform Deserialization of Untrusted Data Vulnerability7.2 High
- ribose rnpRibose RNP before 0.15.1 does not implement a required step in a cryptographic algorithm,...7.5 High
- mozilla nunjucksNunjucks autoescape bypass leads to cross site scripting6.1 Medium
- inea me rtu, me rtu firmware +1 moreCVE-2023-213110.0 Critical
- datakit crosscadware, crosscad/ware x64 library 0 +1 moreDatakit CrossCAD/Ware7.8 High
- datakit crosscadware, crosscad/ware x64 library 0 +1 moreDatakit CrossCAD/Ware3.3 Low
- datakit crosscadware, crosscad/ware x64 library 0 +1 moreDatakit CrossCAD/Ware3.3 Low
- datakit crosscadware, crosscad/ware x64 library 0 +1 moreDatakit CrossCAD/Ware3.3 Low
- datakit crosscadware, crosscad/ware x64 library +1 moreCVE-2023-222953.3 Low
- epiph form block, epiphyt form-block +1 moreCross Site Request Forgery due to missing nonce verification in form block6.5 Medium
- xwiki commons, xwiki-commons +1 moreCross-site Scripting in org.xwiki.commons:xwiki-commons-xml9.1 Critical
- fastify csrf-protectionBypass of CSRF protection in the presence of predictable userInfo in @fastify/csrf-protection5.3 Medium
- enalean tuleapCross-site Scripting (XSS) through the name of a color of select box values in tuleap5.9 Medium
- opensslInput buffer over-read in AES-XTS implementation on 64 bit ARM5.9 Medium
- slic3r libslic3rA heap-based buffer overflow vulnerability exists in the TriangleMesh clone functionality of...8.1 High
- apache dolphinschedulerApache DolphinScheduler 3.0.0 to 3.1.1 python gateway has improper authentication4.3 Medium
libheifOSS-FuzzHeap-buffer-overflow in RegionItem::parseNo scorelibvipsOSS-FuzzHeap-buffer-overflow in RegionItem::parseNo score- checkmkRemote Code Execution with Root Privileges via Broad Apache Permissions8.8 High
- checkmk gmbh appliance, tribe29 checkmk appliance, checkmk appliance firmware +2 moreReflected Cross Site Scripting (XSS)6.1 Medium
- snyk advisorThe Snyk Advisor website (https://snyk.io/advisor/) was vulnerable to a stored XSS prior to 28th...4.3 Medium
- mattermostOauth authorization codes do not expire when deauthorizing an oauth2 app6.5 Medium
- m-files desktop, server +1 moreDesktop component allows lateral movement between sessions3.6 Low
- m-files serverUncontrolled Resource Consuption in M-Files Server6.5 Medium
- m-files serverUncontrolled Resource Consuption in M-Files Server7.5 High
- dell display managerDell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder creation...7.3 High
- eslint-detailed-reporter project eslint-detailed-reportermportuga eslint-detailed-reporter template-generator.js renderIssue cross site scripting3.5 Low
- themeist i recommend thisI Recommend This Plugin dot-irecommendthis.php sql injection6.3 Medium
golang-1.11Debiangolang-1.11 - regression updateNo score- judging management system project management systemSourcecodester Judging Management System v1.0 is vulnerable to SQL Injection via /php-jms...9.8 Critical
- powerjobPowerJob vulnerable to remote code execution9.8 Critical
- pretalxpretalx vulnerable to path traversal in HTML export6.5 Medium
- pretalxpretalx allows path traversal in HTML export4.3 Medium
- egostudiogroup super cleanAn issue found in Ego Studio SuperClean v.1.1.9 and v.1.1.5 allows an attacker to gain privileges...5.5 Medium
- sonos one speaker, one firmware, s1 +1 more +3 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...8.8 High
- sonos one speaker, one firmware, s1 +1 more +3 moreThis vulnerability allows network-adjacent attackers to disclose sensitive information on...5.4 Medium
- sonos one speaker, one firmware, s1 +1 more +3 moreThis vulnerability allows network-adjacent attackers to disclose sensitive information on...5.4 Medium
- sonos one speaker, one firmware, s1 +1 more +3 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...8.8 High
- papercut ng, ng/mf, mf +2 moreThis vulnerability allows remote attackers to bypass authentication on affected installations of...8.2 High
- papercut ng, mf/ng, mf +2 moreThis vulnerability allows remote attackers to bypass authentication on affected installations of...9.8 Critical
- teacms project teacmsCross Site Scripting vulnerability found in TeaCMS storage allows attacker to cause a leak of...5.4 Medium
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreAn out-of-bounds write vulnerability was found in the Linux kernel's SLIMpro I2C device driver....6.7 Medium
- azuracast, azuracast azuracast/azuracast +1 moreCross-site Scripting (XSS) - Stored in azuracast/azuracast3.5 Low
- linux, linux kernel +1 moreA null pointer dereference issue was found in the sctp network protocol in net/sctp/stream_sched...5.5 Medium
- Show moreLoading…