CVEs published in April 2023
2,411 vulnerabilities, 280 critical, 18 exploited.
- riot-os riotRIOT-OS vulnerable to null pointer dereference during fragment forwarding7.5 High
- wp plugins pro super popupWordPress WP Super Popup Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- pakpobox alfred24 click & collect, alfred24 click \& collect project click \& collect +1 moreWordPress alfred24 Click & Collect Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- loginizerWordPress Loginizer Plugin <= 1.7.5 is vulnerable to Cross Site Scripting (XSS)7.1 High
libavcOSS-FuzzHeap-use-after-free in ih264_inter_pred_luma_vert_ssse3No scoregrokOSS-FuzzHeap-double-free in grk::DecompressCodeblock::releaseNo score- jamie poitra m chart, m chart project chart +1 moreWordPress M Chart Plugin <= 1.9.4 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- meinberg ltos, meinbergglobal lantime firmware +1 moreImproper Input Validation in Meinberg LTOS7.2 High
containerized-data-importeropenSUSESecurity update for cdi-apiserver-container, cdi-cloner-container, cdi-controller-container, cdi-importer-container, cdi-operator-container, cdi-uploadproxy-container, cdi-uploadserver-container, cont…No score- jetbrains hubIn JetBrains Hub before 2023.1.15725 SSRF protection in Auth Module integration was missing4.1 Medium
- jetbrains ktorIn JetBrains Ktor before 2.3.0 path traversal in the `resolveResource` method was possible7.5 High
indentopenSUSESecurity update for indentNo scores390-toolsSUSESecurity update for s390-toolsNo scoreindentSUSESecurity update for indentNo score- cern white rabbit switch, home.cern white rabbit switch firmware +1 moreWhite Rabbit Switch - Unauthenticated remote code execution9.8 Critical
- cern white rabbit switch, home.cern white rabbit switch firmware +1 moreWhite Rabbit Switch - Password Disclosure Vulnerability9.8 Critical
- linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +2 more +4 moreAn issue was discovered in drivers/mtd/ubi/cdev.c in the Linux kernel 6.2. There is a divide-by...5.5 Medium
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreAn issue was discovered in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel 6.2. There...5.5 Medium
- linux kernelAn issue was discovered in drivers/bluetooth/hci_ldisc.c in the Linux kernel 6.2. In...4.7 Medium
- linux kernelAn issue was discovered in drivers/tty/n_gsm.c in the Linux kernel 6.2. There is a sleeping...5.5 Medium
- linux kernelAn issue was discovered in drivers/media/test-drivers/vidtv/vidtv_bridge.c in the Linux kernel 6...5.5 Medium
- repetier-serverRepetier Server through 1.4.10 does not have CSRF protection.8.8 High
- repetier-serverRepetier Server through 1.4.10 executes as SYSTEM. This can be leveraged in conjunction with CVE...9.8 Critical
- repetier-serverRepetier Server through 1.4.10 allows ..%5c directory traversal for reading files that contain...7.5 High
- cloverdxCloverDX before 5.17.3 writes passwords to the audit log in certain situations, if the audit log...9.1 Critical
- backdropcms backdrop, backdrop cms +1 moreCross-site Scripting in Backdrop CMS4.8 Medium
- sheetjsPrototype Pollution in sheetJS7.8 High
- medicine tracker system project tracker systemA username enumeration issue was discovered in Medicine Tracker System 1.0. The login...5.3 Medium
- jerryscriptJerryscript commit 1a2c047 was discovered to contain a stack overflow via the component vm_loop...5.5 Medium
- jerryscriptJerryscript commit 1a2c047 was discovered to contain a stack overflow via the component...5.5 Medium
- jerryscriptJerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component...5.5 Medium
- jerryscriptJerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component...5.5 Medium
- tenda ac15 firmwareIn Tenda AC15 V15.03.05.19, the function "sub_8EE8" contains a stack-based buffer overflow...9.8 Critical
- tenda ac15 firmwareIn Tenda AC15 V15.03.05.19, the function "henan_pppoe_user" contains a stack-based buffer...9.8 Critical
- tenda ac15 firmwareIn Tenda AC15 V15.03.05.19, the function "getIfIp" contains a stack-based buffer overflow...9.8 Critical
- tenda ac15 firmwareIn Tenda AC15 V15.03.05.19, the function "xian_pppoe_user" contains a stack-based buffer overflow...9.8 Critical
- tenda ac15 firmwareIn Tenda AC15 V15.03.05.19, The function "xkjs_ver32" contains a stack-based buffer overflow...9.8 Critical
- tenda ac15 firmwareIn Tenda AC15 V15.03.05.19, the function "sub_ED14" contains a stack-based buffer overflow...9.8 Critical
- tenda ac15 firmwareIn Tenda AC15 V15.03.05.19, the function GetValue contains a stack-based buffer overflow...9.8 Critical
- tenda ac15 firmwareTenda AC15 V15.03.05.19 is vulnerable to Buffer Overflow.9.8 Critical
- tenda ac5 firmwareTenda AC5 V15.03.06.28 is vulnerable to Buffer Overflow via the initWebs function.9.8 Critical
- hockeycomputindo bang restoBang Resto 1.0 was discovered to contain multiple SQL injection vulnerabilities via the...8.8 High
- hockeycomputindo bang restoBang Resto 1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via...4.8 Medium
- 3reality 3rsb015bz firmwareThird Reality Smart Blind 1.00.54 contains a denial-of-service vulnerability, which allows a...7.5 High
- yasm project yasmyasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parse_expr5 at ...5.5 Medium
- yasm project yasmyasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parse_expr1 at ...5.5 Medium
- yasm project yasmyasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the component yasm/yasm...5.5 Medium
- mp4v2 project mp4v2mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the mp4v2::impl:...8.8 High
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_ffi_cb_free at src...5.5 Medium
- dawnsparks-node-tesseract project dawnsparks-node-tesseract, huedawn-tesseract project huedawn-tesseract +1 moreRemote code execution in dawnsparks-node-tesseract9.8 Critical
- Show moreLoading…