CVEs published in April 2023
2,411 vulnerabilities, 280 critical, 18 exploited.
- 0mk shortener project shortener, boris kuzmanov 0mk shortener +1 moreWordPress 0mk Shortener Plugin <= 0.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- rarathemes vryasage marketing performance, vryasage marketing performance +1 moreWordPress Marketing Performance Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- ai contact us form project contact us form, karishma arora ai contact us form +1 moreWordPress AI Contact Us Form Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- jason bobich theme blvd responsive google maps, theme blvd responsive google maps project blvd responsive google maps +1 moreWordPress Theme Blvd Responsive Google Maps Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- jason lau user meta manager, user meta manager meta manager +1 moreWordPress User Meta Manager Plugin <= 3.4.9 is vulnerable to Cross Site Scripting (XSS)7.1 High
- olive design wp-olivecartWordPress WP-OliveCart Plugin <= 1.1.3 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- codebangers all in one time clock liteWordPress All in One Time Clock Lite Plugin <= 1.3.320 is vulnerable to Cross Site Scripting (XSS)4.8 Medium
- apptivo business site crm, notfound apptivo business site crm +1 moreWordPress Apptivo Business Site CRM Plugin <= 3.0.12 is vulnerable to Cross Site Scripting (XSS)4.8 Medium
- 1app business formsWordPress 1app Business Forms Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)4.8 Medium
- enterprisedb postgres advanced serverEnterpriseDB EDB Postgres Advanced Server (EPAS) before 14.6.0 logs unredacted passwords in...7.5 High
- collabora kodexplorerkalcaddle KodExplorer cross-site request forgery4.3 Medium
- hansuncms project hansuncmshansunCMS unrestricted upload6.3 Medium
- oretnom23 online eyewear shopSourceCodester Online Eyewear Shop GET Parameter update_status.php sql injection6.3 Medium
- complaint management system project management system, phpgurukul complaint management system +1 moreSourceCodester Complaint Management System POST Parameter registration.php sql injection6.3 Medium
- oretnom23 online computer and laptop storeSourceCodester Online Computer and Laptop Store GET Parameter sql injection6.3 Medium
- podofoPoDoFo PdfXRefStreamParserObject.cpp readXRefStreamEntry heap-based overflow5.3 Medium
python3-librariesOSS-FuzzHeap-buffer-overflow in PyBytes_FromStringAndSizeNo scorespring-bootOSS-FuzzSecurity exception in org.json.JSONArray.writeToNo scorepython3-librariesOSS-FuzzHeap-buffer-overflow in unicode_decode_utf8No score- nvidia cuda toolkitNVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an...5.3 Medium
- nvidia cuda toolkitNVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an...5.3 Medium
- nvidia cuda toolkitNVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an...5.3 Medium
- nvidia cuda toolkitNVIDIA CUDA Toolkit for Linux and Windows contains a vulnerability in cuobjdump, where a division...3.3 Low
- nvidia cuda toolkitNVIDIA CUDA Toolkit SDK for Linux and Windows contains a NULL pointer dereference in cuobjdump,...3.3 Low
- nvidia sbios, dgx servers +1 moreNVIDIA DGX-1 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of...6.0 Medium
- nvidia bmc, dgx servers +1 moreNVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler, where an attacker with the...6.7 Medium
- nvidia bmc, dgx servers +1 moreNVIDIA DGX-1 BMC contains a vulnerability in the SPX REST API, where an attacker with the...7.2 High
- nvidia sbios, dgx servers +1 moreNVIDIA DGX-1 contains a vulnerability in Ofbd in AMI SBIOS, where a preconditioned heap can allow...7.5 High
- nvidia bmc, dgx servers +1 moreNVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler of the AMI MegaRAC BMC , where an...7.8 High
- nvidia sbios, dgx servers +1 moreNVIDIA DGX-1 SBIOS contains a vulnerability in the Uncore PEI module, where authentication of the...8.2 High
- nvidia sbios, dgx servers +1 moreNVIDIA DGX-2 SBIOS contains a vulnerability where an attacker may modify the ServerSetup NVRAM...7.5 High
- nvidia dgx a100 firmware, dgx servers +1 moreNVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of...7.5 High
- nvidia connectx firmwareNVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware,...5.0 Medium
- nvidia connectx firmwareNVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware,...6.5 Medium
- nvidia connectx firmwareNVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware,...5.0 Medium
- nvidia dgx a100 firmware, dgx servers +1 moreNVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of...7.5 High
- nvidia bmc, dgx servers +1 moreNVIDIA DGX-2 SBIOS contains a vulnerability in Bds, where a user with high privileges can cause a...6.7 Medium
- nvidia bmc, dgx servers +1 moreNVIDIA DGX-2 contains a vulnerability in OFBD where a user with high privileges and a pre...7.5 High
- nvidia gpu display driverNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer...6.1 Medium
- nvidia gpu display driverNVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a...5.5 Medium
- nvidia gpu display driverNVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer...8.8 High
- microweber, microweber microweber/microweber +1 moreImproper Privilege Management in microweber/microweber8.8 High
- microweber, microweber microweber/microweber +1 moreExposure of Private Personal Information to an Unauthorized Actor in microweber/microweber7.1 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaq5.4 Medium
- fastify fastify-passport, passport +1 moreCross site request forgery token fixation in fastify-passport6.5 Medium
- fastify fastify-passport, passport +1 moreSession fixation in fastify-passport8.1 High
- devolutions serverInsufficient access control in support ticket feature in Devolutions Server 2023.1.5.0 and below...5.4 Medium
nyholm/psr7PackagistImproper Input Validation in nyholm/psr75.3 Mediumhttpsoft/http-messagePackagistImproper header validation in httpsoft/http-message5.3 Medium- curiosity-org gipsyOS command injection in Gipsy9.8 Critical
- Show moreLoading…