CVEs published in April 2023
2,411 vulnerabilities, 280 critical, 18 exploited.
- clusternetClusternet has potential risk which can be leveraged to make a cluster-level privilege escalation6.6 Medium
- kitchen-terraform project kitchen-terraformSensitive Terraform Output Values Printed At Info Logging Level In Kitchen-Terraform3.2 Low
starletteRootDuplicate Advisory: Starlette allows an unauthenticated and remote attacker to specify any number of form fields or files7.5 High- 3ds delmia aprisoUnsafe .NET object deserialization affecting DELMIA Apriso Release 2017 through Release 20228.5 High
- 3ds delmia aprisoServer-Side Request Forgery vulnerability affecting DELMIA Apriso Release 2017 through Release 20227.5 High
- 3ds delmia aprisoReflected Cross-site Scripting vulnerability affecting DELMIA Apriso Release 2017 through Release 20225.4 Medium
- maxtech max-g866ac, max-tech max-g866ac firmware +1 moreMAXTECH MAX-G866ac Remote Management missing authentication9.8 Critical
libavcOSS-FuzzHeap-buffer-overflow in ih264d_get_bits_h264No scorelibheifOSS-FuzzHeap-buffer-overflow in RegionGeometry_Polygon::parseNo score- bytecodealliance wasmtimeWasmtime has Undefined Behavior in Rust runtime functions3.9 Low
- rapid7 velociraptorVelociraptor crashes while parsing some malformed PE or OLE files.3.3 Low
- dream technology micaDream Technology mica Form Object cross site scripting3.5 Low
- bluezBlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability7.1 High
- sourcecodester task reminder system, task reminder system project reminder system +1 moreSourceCodester Task Reminder System Users.php cross site scripting3.5 Low
- sourcecodester task reminder system, task reminder system project reminder system +1 moreSourceCodester Task Reminder System manage_user.php sql injection6.3 Medium
- sourcecodester task reminder system, task reminder system project reminder system +1 moreSourceCodester Task Reminder System manage_reminder.php sql injection6.3 Medium
- campcodes coffee shop pos system, coffee shop pos system project shop pos system +1 moreCampcodes Coffee Shop POS System Users.php cross site scripting3.5 Low
- campcodes coffee shop pos system, coffee shop pos system project shop pos system +1 moreCampcodes Coffee Shop POS System manage_user.php sql injection6.3 Medium
- campcodes coffee shop pos system, coffee shop pos system project shop pos system +1 moreCampcodes Coffee Shop POS System manage_sale.php sql injection6.3 Medium
- campcodes coffee shop pos system, coffee shop pos system project shop pos system +1 moreCampcodes Coffee Shop POS System manage_product.php sql injection6.3 Medium
- campcodes coffee shop pos system, coffee shop pos system project shop pos system +1 moreCampcodes Coffee Shop POS System view_product.php sql injection6.3 Medium
- campcodes coffee shop pos system, coffee shop pos system project shop pos system +1 moreCampcodes Coffee Shop POS System manage_category.php sql injection6.3 Medium
- campcodes coffee shop pos system, coffee shop pos system project shop pos system +1 moreCampcodes Coffee Shop POS System view_category.php sql injection6.3 Medium
- campcodes coffee shop pos system, coffee shop pos system project shop pos system +1 moreCampcodes Coffee Shop POS System view_details.php sql injection6.3 Medium
- campcodes retro basketball shoes online storeCampcodes Retro Basketball Shoes Online Store details.php sql injection6.3 Medium
- campcodes retro basketball shoes online storeCampcodes Retro Basketball Shoes Online Store contactus1.php sql injection6.3 Medium
- campcodes retro basketball shoes online storeCampcodes Retro Basketball Shoes Online Store contactus.php sql injection6.3 Medium
- campcodes retro basketball shoes online storeCampcodes Retro Basketball Shoes Online Store login.php sql injection6.3 Medium
- campcodes retro basketball shoes online storeCampcodes Retro Basketball Shoes Online Store faqs.php sql injection6.3 Medium
- powerjobPowerJob vulnerable to incorrect access control9.8 Critical
- h3c magic r200 firmwareH3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via go parameter...4.9 Medium
- h3c magic r200 firmwareH3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the...4.9 Medium
- h3c magic r200 firmwareH3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via CMD parameter...4.9 Medium
- h3c magic r200 firmwareH3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the...4.9 Medium
- h3c magic r200 firmwareH3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the...4.9 Medium
- h3c magic r200 firmwareH3C Magic R200 R200V100R004 was discovered to contain a stack overflow via the DelvsList...4.9 Medium
- h3c magic r200 firmwareH3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the AddMacList...4.9 Medium
- h3c magic r200 firmwareH3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the...4.9 Medium
- h3c magic r200 firmwareH3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the...4.9 Medium
- h3c magic r200 firmwareH3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the...4.9 Medium
- h3c magic r200 firmwareH3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the...4.9 Medium
- h3c magic r200 firmwareH3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the...4.9 Medium
- h3c magic r200 firmwareH3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the UpdateSnat...4.9 Medium
- axiosys bento4Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42aac component.5.5 Medium
- piwigoSQL injection vulnerability found in Piwigo v.13.5.0 and before allows a remote attacker to...8.8 High
- iofinnet tss-libIO FinNet tss-lib vulnerable to timing attack from non-constant time scalar arithmetic7.5 High
- iofinnet tss-libIO FinNet tss-lib vulnerable to timing attack from non-constant time scalar multiplication9.1 Critical
- progress flowmon packet investigatorIn Progress Flowmon Packet Investigator before 12.1.0, a Flowmon user with access to Flowmon...7.5 High
- progress flowmon osIn Progress Flowmon before 12.2.0, an application endpoint failed to sanitize user-supplied input...6.1 Medium
- modoboa, modoboa modoboa/modoboa +1 moreCross-Site Request Forgery (CSRF) in modoboa/modoboa6.8 Medium
- Show moreLoading…