CVEs published in April 2023
2,411 vulnerabilities, 280 critical, 18 exploited.
- oretnom23 service provider management systemSourceCodester Service Provider Management System Users.php cross site scripting3.5 Low
- pimcorePimcore SQL Injection Vulnerability in Admin Search Find API8.8 High
- oretnom23 service provider management systemSourceCodester Service Provider Management System index.php cross site scripting3.5 Low
- oretnom23 service provider management systemSourceCodester Service Provider Management System manage_user.php sql injection6.3 Medium
openssl-ibmcaUbuntuopenssl-ibmca vulnerabilitiesNo score- oretnom23 service provider management systemSourceCodester Service Provider Management System manage_service.php sql injection6.3 Medium
- oretnom23 service provider management systemSourceCodester Service Provider Management System view_inquiry.php sql injection6.3 Medium
- dena h2oH2O vulnerable to read from uninitialized pointer in the reverse proxy handler8.2 High
wabtOSS-FuzzUNKNOWN WRITE in void std::__1::allocator_traits<std::__1::allocator<wabt::interp::HandlerDesc> >No score- oretnom23 service provider management systemSourceCodester Service Provider Management System improper authorization6.3 Medium
- oretnom23 service provider management systemSourceCodester Service Provider Management System HTTP POST Request sql injection6.3 Medium
conmonSUSESecurity update for conmonNo score- ibm websphere application serverIBM WebSphere Application Server cross-site scripting6.1 Medium
- ibm watson machine learning on cloud pak for dataIBM Watson Machine Learning on Cloud Pak for Data server-side request forgery7.1 High
- ibm db2, db2 for linux, unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows denial of service7.5 High
- 42gears surelock, surelock windows +1 moreBypassing hardening via Unquoted Service path vulnerability7.8 High
- gajshield data security firewall, data security firewall firmware +1 moreDefault Credential Vulnerability in GajShield Data Security Firewall10.0 Critical
fwupdopenSUSESecurity update for fwupdNo score- trustwallet trust wallet browser extension, trust wallet core +1 moreTrust Wallet Core before 3.1.1, as used in the Trust Wallet browser extension before 0.0.183,...5.9 Medium
- serenity serene, startsharp +1 moreInsufficient token expiration in Serenity7.8 High
- serenity serene, startsharp +1 moreUser account enumeration in Serenity5.3 Medium
- serenity serene, startsharp +1 moreCross Site Scripting (XSS) in Serenity6.1 Medium
- dedecmsAn issue in the component /dialog/select_media.php of DedeCMS v5.7.107 allows attackers to...7.5 High
- jflyfox jfinal cmsRemote code execution in JFinal CMS9.8 Critical
- emlogMultiple stored cross-site scripting (XSS) vulnerabilities in Emlog Pro v2.0.3 allows attackers...5.4 Medium
- swftoolsswfrender v0.9.2 was discovered to contain a heap buffer overflow in the function...5.5 Medium
- cpanelAn issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page...5.3 Medium
- lightbend alpakka kafkaLightbend Alpakka Kafka logs credentials on debug level5.5 Medium
- zyxel dx5401-b0 firmwareThe sensitive information exposure vulnerability in the CGI “Export_Log” and the binary “zcmd” in...7.5 High
- zyxel dx5401-b0 firmwareThe buffer overflow vulnerability in the library “libclinkc.so” of the web server “zhttpd” in...9.8 Critical
- moxa miineport e1, miineport e1 firmware +1 moreMoxa MiiNePort E1 - Broken Access Control9.8 Critical
- hyundai gen5w l firmwareAn issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR...7.8 High
- hyundai gen5w l firmwareAn issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR...7.8 High
- hyundai gen5w l firmwareAn issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR...7.8 High
- hyundai gen5w l firmwareAn issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR...7.8 High
- vtech vcs754a firmwareAn issue was discovered in vTech VCS754 version 1.1.1.A before 1.1.1.H, allows attackers to gain...8.8 High
- group-office group officeReflected Cross Site Scripting (XSS) in Intermesh BV Group-Office version 6.6.145, allows...6.1 Medium
- sunnet ctms, sun.net ehrd ctms +1 moreSUNNET CTMS - Path Traversal8.8 High
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - DOM in pimcore/pimcore5.2 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Reflected in pimcore/pimcore4.0 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Generic in pimcore/pimcore7.3 High
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Stored in pimcore/pimcore6.1 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Reflected in pimcore/pimcore6.1 Medium
- pimcore, pimcore pimcore/pimcore +1 moreSQL Injection in pimcore/pimcore7.2 High
- pimcore, pimcore pimcore/pimcore +1 morePath Traversal in pimcore/pimcore5.5 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Generic in pimcore/pimcore5.2 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Stored in pimcore/pimcore4.0 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Stored in pimcore/pimcore6.8 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Stored in pimcore/pimcore5.2 Medium
- changingtec motp, mobile one time password +1 moreChangingTec MOTP - Path Traversal4.9 Medium
- Show moreLoading…