CVEs published in April 2023
2,411 vulnerabilities, 280 critical, 18 exploited.
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service5.1 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability4.3 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service5.9 Medium
- netgear srx5308, srx5308 firmware +1 moreNetgear SRX5308 Web Management Interface cross site scripting2.4 Low
- netgear srx5308, srx5308 firmware +1 moreNetgear SRX5308 Web Management Interface cross site scripting2.4 Low
- ibm maximo asset managementIBM Maximo Asset Management HTML injection5.4 Medium
- netgear srx5308, srx5308 firmware +1 moreNetgear SRX5308 Web Management Interface cross site scripting2.4 Low
- netgear srx5308, srx5308 firmware +1 moreNetgear SRX5308 Web Management Interface cross site scripting2.4 Low
- netgear srx5308, srx5308 firmware +1 moreNetgear SRX5308 denial of service6.5 Medium
- ubiquiti edgerouter x, ui er-x-sfp firmware, er-x firmware +2 moreUbiquiti EdgeRouter X Web Service denial of service7.5 High
- hp inc. designjet and pagewide xl, hp designjet z6 firmware, designjet z6dr firmware +8 more +10 moreCertain DesignJet and PageWide XL TAA compliant models may have risk of potential information...4.6 Medium
- hp laserjet pro, laserjet pro m304-m305 w1a46a firmware, laserjet pro m304-m305 w1a47a firmware +36 more +38 moreCertain HP LaserJet Pro print products are potentially vulnerable to Heap Overflow and/or Remote...9.8 Critical
- ubiquiti edgerouter x, ui er-x-sfp firmware, er-x firmware +2 moreUbiquiti EdgeRouter X Web Management command injection8.6 High
- hp laserjet pro, laserjet pro m304-m305 w1a46a firmware, laserjet pro m304-m305 w1a47a firmware +36 more +38 moreCertain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or...9.8 Critical
- hp laserjet pro, laserjet pro m304-m305 w1a46a firmware, laserjet pro m304-m305 w1a47a firmware +36 more +38 moreCertain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or...9.8 Critical
- edex-ui project edex-uieDEX-UI cross-site websocket hijacking vulnerability enables remote command execution8.3 High
- hp dragonfly folio g3 firmware, elite dragonfly g2 firmware, elite dragonfly g3 firmware +89 more +91 moreA potential security vulnerability has been identified in the system BIOS for certain HP PC...5.5 Medium
- ubiquiti edgerouter x, ui er-x-sfp firmware, er-x firmware +2 moreUbiquiti EdgeRouter X Web Management command injection8.6 High
- gradle build action, gradle-build-action +1 moreGradle Build Action data written to GitHub Actions Cache may expose secrets7.6 High
- ubiquiti edgerouter x, ui er-x-sfp firmware, er-x firmware +2 moreUbiquiti EdgeRouter X Web Management command injection8.6 High
- ubiquiti edgerouter x, ui er-x-sfp firmware, er-x firmware +2 moreUbiquiti EdgeRouter X Web Management command injection8.6 High
- hypr keycloak authenticator extension, keycloak authenticator +1 moreImproper Authentication vulnerability in HYPR Keycloak Authenticator Extension allows...7.2 High
- hypr workforce accessIncorrect Permission Assignment for Critical Resource vulnerability in HYPR Workforce Access on...7.0 High
- ubiquiti edgerouter x, ui er-x-sfp firmware, er-x firmware +2 moreUbiquiti EdgeRouter X Web Management command injection8.6 High
- ubiquiti edgerouter x, ui edgemax edgerouter firmware +1 moreUbiquiti EdgeRouter X Web Management command injection8.6 High
- online dj management system project dj management system, sourcecodester online dj management system +1 moreSourceCodester Online DJ Management System cross site scripting2.4 Low
- online dj management system project dj management system, sourcecodester online dj management system +1 moreSourceCodester Online DJ Management System GET Parameter view_details.php sql injection6.3 Medium
- online dj management system project dj management system, sourcecodester online dj management system +1 moreSourceCodester Online DJ Management System GET Parameter manage_event.php sql injection6.3 Medium
- faculty evaluation system project evaluation system, sourcecodester faculty evaluation system +1 moreSourceCodester Faculty Evaluation System manage_restriction.php sql injection4.7 Medium
- faculty evaluation system project evaluation system, sourcecodester faculty evaluation system +1 moreSourceCodester Faculty Evaluation System sql injection4.7 Medium
- faculty evaluation system project evaluation system, sourcecodester faculty evaluation system +1 moreSourceCodester Faculty Evaluation System manage_academic.php sql injection4.7 Medium
- faculty evaluation system project evaluation system, sourcecodester faculty evaluation system +1 moreSourceCodester Faculty Evaluation System sql injection6.3 Medium
- faculty evaluation system project evaluation system, sourcecodester faculty evaluation system +1 moreSourceCodester Faculty Evaluation System sql injection6.3 Medium
- acronis cyber infrastructureSensitive information disclosure due to CORS misconfiguration. The following products are...3.1 Low
- resort reservation system project reservation system, sourcecodester resort reservation system +1 moreSourceCodester Resort Reservation System registration.php cross site scripting4.3 Medium
- resort reservation system project reservation system, sourcecodester resort reservation system +1 moreSourceCodester Resort Reservation System view_room.php sql injection6.3 Medium
- milesight ms-n1004-uc firmware, ms-n1004-upc firmware, ms-n1008-uc firmware +23 more +25 moreImproper Authorization Vulnerability in Milesight Network Video Recorder (NVR)7.5 High
- milesight ms-n1004-uc firmware, ms-n1004-upc firmware, ms-n1008-uc firmware +23 more +25 moreAuthentication Bypass Vulnerability in Milesight Network Video Recorder (NVR)9.8 Critical
- jetbrains toolbox, toolbox app +1 moreIn JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possible5.2 Medium
- ibm aix, vios +1 moreIBM AIX command execution8.4 High
- ibm safer paymentsIBM Safter Payments information disclosure5.9 Medium
- ibm safer paymentsIBM Safer Payments denial of service5.3 Medium
- ibm safer paymentsIBM Safer Payments denial of service6.5 Medium
- perl, http\ \ +1 moreHTTP::Tiny 0.082, a Perl core module since 5.13.9 and available standalone on CPAN, has an...8.1 High
- gitlab\ \GitLab::API::v4 through 0.26 does not verify TLS certificates when connecting to a GitLab server,...5.9 Medium
- cpanpm project cpanpm, perl +1 moreCPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.8.1 High
- cauldrondevelopment cbangtar/TarFileReader.cpp in Cauldron cbang before bastet-v8.1.17 has a directory traversal during...7.5 High
- pymumu smartdnsSmartDNS through 41 before 56d0332 allows an out-of-bounds write because of a stack-based buffer...9.8 Critical
- talend studioIn Talend Studio before 7.3.1-R2022-10 and 8.x before 8.0.1-R2022-09, microservices allow...7.5 High
- linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreqfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds...7.8 High
- Show moreLoading…