US-CERT Vulnerability Summary for the Week of March 13, 2023

The CISA Vulnerability Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD) in the past week. NVD is sponsored by CISA. In some cases, the vulnerabilities in the bulletin may not yet have assigned CVSS scores. Please visit NVD for updated vulnerability entries, which include CVSS scores once they are available.

Vulnerabilities are based on the Common Vulnerabilities and Exposures (CVE) vulnerability naming standard and are organized according to severity, determined by the Common Vulnerability Scoring System (CVSS) standard. The division of high, medium, and low severities correspond to the following scores:

• High: vulnerabilities with a CVSS base score of 7.0–10.0
• Medium: vulnerabilities with a CVSS base score of 4.0–6.9
• Low: vulnerabilities with a CVSS base score of 0.0–3.9

Entries may include additional information provided by organizations and efforts sponsored by CISA. This information may include identifying information, values, definitions, and related links. Patch information is provided when available. Please note that some of the information in the bulletin is compiled from external, open-source reports and is not a direct result of CISA analysis. 

High Vulnerabilities

Primary Vendor — Product	Description	Published	CVSS Score	Source & Patch Info
kamailio — kamailio	The Kamailio SIP before 5.5.0 server mishandles INVITE requests with duplicated fields and overlength tag, leading to a buffer overflow that crashes the server or possibly have unspecified other impact.	2023-03-15	9.8	CVE-2020-27507 MISC MISC
stoqey — gnuplot	An issue found in Stoqey gnuplot v.0.0.3 and earlier allows attackers to execute arbitrary code via the src/index.ts, plotCallack, child_process, and/or filePath parameter(s).	2023-03-10	9.8	CVE-2021-33360 MISC MISC
qualcomm — ar8035_firmware	Memory corruption due to improper validation of array index in Multi-mode call processor.	2023-03-10	9.8	CVE-2022-33256 MISC
combodo — itop	Combodo iTop is an open source, web-based IT service management platform. Prior to versions 2.7.8 and 3.0.2-1, the reset password token is generated without any randomness parameter. This may lead to account takeover. The issue is fixed in versions 2.7.8 and 3.0.2-1.	2023-03-14	9.8	CVE-2022-39216 MISC MISC MISC
qualcomm — apq8009_firmware	Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.	2023-03-10	9.8	CVE-2022-40515 MISC
qualcomm — apq8009_firmware	Memory corruption in Bluetooth HOST while processing the AVRC_PDU_GET_PLAYER_APP_VALUE_TEXT AVRCP response.	2023-03-10	9.8	CVE-2022-40537 MISC
ibexa — kernel	An issue was discovered in eZ Publish Ibexa Kernel before 7.5.28. Access control based on object state is mishandled.	2023-03-12	9.8	CVE-2022-48367 MISC MISC
10web — map_builder_for_google_maps	The 10Web Map Builder for Google Maps WordPress plugin before 1.0.73 does not properly sanitise and escape some parameters before using them in an SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection	2023-03-13	9.8	CVE-2023-0037 MISC MISC
akuvox — e11_firmware	The Akuvox E11 secure shell (SSH) server is enabled by default and can be accessed by the root user. This password cannot be changed by the user.	2023-03-13	9.8	CVE-2023-0345 MISC
akuvox — e11_firmware	Akuvox E11 uses a weak encryption algorithm for stored passwords and uses a hard-coded password for decryption which could allow the encrypted passwords to be decrypted from the configuration file.	2023-03-13	9.8	CVE-2023-0353 MISC
alpatateknoloji — licensed_warehousing_automation_system	Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in Alpata Licensed Warehousing Automation System allows Command Line Execution through SQL Injection.This issue affects Licensed Warehousing Automation System: through 2023.1.01.	2023-03-10	9.8	CVE-2023-1091 MISC
saysis — starcities	Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in Saysis Starcities allows SQL Injection.This issue affects Starcities: through 1.3.	2023-03-10	9.8	CVE-2023-1198 MISC
froxlor — froxlor	Authentication Bypass by Primary Weakness in GitHub repository froxlor/froxlor prior to 2.0.13.	2023-03-10	9.8	CVE-2023-1307 MISC CONFIRM
online_graduate_tracer_system_project — online_graduate_tracer_system	A vulnerability classified as critical has been found in SourceCodester Online Graduate Tracer System 1.0. Affected is an unknown function of the file admin/adminlog.php. The manipulation of the argument user leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222696.	2023-03-10	9.8	CVE-2023-1308 MISC MISC MISC
online_graduate_tracer_system_project — online_graduate_tracer_system	A vulnerability classified as critical was found in SourceCodester Online Graduate Tracer System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/search_it.php. The manipulation of the argument input leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222697 was assigned to this vulnerability.	2023-03-10	9.8	CVE-2023-1309 MISC MISC MISC
online_graduate_tracer_system_project — online_graduate_tracer_system	A vulnerability, which was classified as critical, has been found in SourceCodester Online Graduate Tracer System 1.0. Affected by this issue is some unknown functionality of the file admin/prof.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-222698 is the identifier assigned to this vulnerability.	2023-03-10	9.8	CVE-2023-1310 MISC MISC MISC
friendly_island_pizza_website_and_ordering_system_project — friendly_island_pizza_website_and_ordering_system	A vulnerability, which was classified as critical, was found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. This affects an unknown part of the file large.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222699.	2023-03-10	9.8	CVE-2023-1311 MISC MISC MISC
lmxcms — lmxcms	A vulnerability has been found in lmxcms 1.41 and classified as critical. Affected by this vulnerability is the function update of the file AcquisiAction.class.php. The manipulation of the argument id with the input -1 and updatexml(0,concat(0x7e,user()),1)# leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222727.	2023-03-10	9.8	CVE-2023-1321 MISC MISC
lmxcms — lmxcms	A vulnerability was found in lmxcms 1.41 and classified as critical. Affected by this issue is the function reply of the file BookAction.class.php. The manipulation of the argument id with the input 1) and updatexml(0,concat(0x7e,user()),1)# leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222728.	2023-03-10	9.8	CVE-2023-1322 MISC MISC
liferea_project — liferea	A vulnerability was found in liferea. It has been rated as critical. Affected by this issue is the function update_job_run of the file src/update.c of the component Feed Enrichment. The manipulation of the argument source with the input |date >/tmp/bad-item-link.txt leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 8d8b5b963fa64c7a2122d1bbfbb0bed46e813e59. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-222848.	2023-03-11	9.8	CVE-2023-1350 MISC MISC MISC
computer_parts_sales_and_inventory_system_project — computer_parts_sales_and_inventory_system	A vulnerability classified as critical has been found in SourceCodester Computer Parts Sales and Inventory System 1.0. This affects an unknown part of the file cust_transac.php. The manipulation of the argument phonenumber leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222849 was assigned to this vulnerability.	2023-03-11	9.8	CVE-2023-1351 MISC MISC MISC
design_and_implementation_of_covid-19_directory_on_vaccination_system_project — design_and_implementation_of_covid-19_directory_on_vaccination_system	A vulnerability, which was classified as critical, has been found in SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System 1.0. This issue affects some unknown processing of the file /admin/login.php. The manipulation of the argument txtusername/txtpassword leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222851.	2023-03-11	9.8	CVE-2023-1352 MISC MISC MISC
simple_bakery_shop_management_system_project — simple_bakery_shop_management_system	A vulnerability, which was classified as critical, has been found in SourceCodester Simple Bakery Shop Management System 1.0. Affected by this issue is some unknown functionality of the component Admin Login. The manipulation of the argument username/password with the input admin’ or 1=1 — leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222860.	2023-03-12	9.8	CVE-2023-1357 MISC MISC
gadget_works_online_ordering_system_project — gadget_works_online_ordering_system	A vulnerability, which was classified as critical, was found in SourceCodester Gadget Works Online Ordering System 1.0. This affects an unknown part of the file /philosophy/admin/login.php of the component POST Parameter Handler. The manipulation of the argument user_email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222861 was assigned to this vulnerability.	2023-03-12	9.8	CVE-2023-1358 MISC MISC MISC
xhcms_project — xhcms	A vulnerability was found in XHCMS 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php of the component POST Parameter Handler. The manipulation of the argument user leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-222874 is the identifier assigned to this vulnerability.	2023-03-13	9.8	CVE-2023-1368 MISC MISC MISC
friendly_island_pizza_website_and_ordering_system_project — friendly_island_pizza_website_and_ordering_system	A vulnerability classified as critical was found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. This vulnerability affects unknown code of the file paypalsuccess.php of the component POST Parameter Handler. The manipulation of the argument cusid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222904.	2023-03-13	9.8	CVE-2023-1378 MISC MISC MISC
online_tours_\&_travels_management_system_project — online_tours_\&_travels_management_system	A vulnerability, which was classified as problematic, was found in SourceCodester Online Tours & Travels Management System 1.0. Affected is an unknown function of the file admin/ab.php. The manipulation of the argument img leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-222978 is the identifier assigned to this vulnerability.	2023-03-14	9.8	CVE-2023-1391 MISC MISC MISC
online_pizza_ordering_system_project — online_pizza_ordering_system	A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. Affected by this vulnerability is the function save_menu. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222979.	2023-03-14	9.8	CVE-2023-1392 MISC MISC MISC
online_graduate_tracer_system_project — online_graduate_tracer_system	A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0. It has been classified as critical. This affects the function mysqli_query of the file bsitemp.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222981 was assigned to this vulnerability.	2023-03-14	9.8	CVE-2023-1394 MISC MISC MISC
microsoft — multiple_products	Remote Procedure Call Runtime Remote Code Execution Vulnerability	2023-03-14	9.8	CVE-2023-21708 MISC
microsoft — multiple_products	HTTP Protocol Stack Remote Code Execution Vulnerability	2023-03-14	9.8	CVE-2023-23392 MISC
microsoft — multiple_products	Microsoft Outlook Elevation of Privilege Vulnerability	2023-03-14	9.8	CVE-2023-23397 MISC
microsoft — multiple_products	Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability	2023-03-14	9.8	CVE-2023-23415 MISC
samsung — exynos_modem_5300_firmware	The Samsung Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T512 baseband modem chipsets do not properly check format types specified by the Session Description Protocol (SDP) module, which can lead to a denial of service.	2023-03-13	9.8	CVE-2023-24033 MISC MISC
netiq — advanced_authentication	Broken access control in Advanced Authentication versions prior to 6.4.1.1 and 6.3.7.2	2023-03-15	9.8	CVE-2023-24468 MISC MISC
art_gallery_management_system_project — art_gallery_management_system	Art Gallery Management System v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter on the enquiry page.	2023-03-15	9.8	CVE-2023-24726 MISC MISC MISC
dlink — dir-867_firmware	OS Command injection vulnerability in D-Link DIR-867 DIR_867_FW1.30B07 allows attackers to execute arbitrary commands via a crafted LocalIPAddress parameter for the SetVirtualServerSettings to HNAP1.	2023-03-13	9.8	CVE-2023-24762 MISC MISC
funadmin — funadmin	Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \controller\auth\Auth.php.	2023-03-10	9.8	CVE-2023-24774 MISC
trendmicro — apex_one	An uncontrolled search path element vulnerability in the Trend Micro Apex One Server installer could allow an attacker to achieve a remote code execution state on affected products.	2023-03-10	9.8	CVE-2023-25143 MISC
prestashop — dpd_france	PrestaShop dpdfrance <6.1.3 is vulnerable to SQL Injection via dpdfrance/ajax.php.	2023-03-13	9.8	CVE-2023-25207 MISC MISC
dlink — dir-820l_firmware	OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload.	2023-03-13	9.8	CVE-2023-25279 MISC MISC
swig-templates_project — swig-templates	An issue was discovered in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to execute arbitrary code via crafted Object.prototype anonymous function.	2023-03-15	9.8	CVE-2023-25344 MISC MISC
samsung — exynos_850_firmware	An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. A heap-based buffer overflow in the 5G MM message codec can occur due to insufficient parameter validation when decoding the Emergency number list.	2023-03-13	9.8	CVE-2023-26072 MISC MISC MISC MISC MISC MISC
samsung — exynos_850_firmware	An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. A heap-based buffer overflow in the 5G MM message codec can occur due to insufficient parameter validation when decoding the extended emergency number list.	2023-03-13	9.8	CVE-2023-26073 MISC MISC MISC MISC MISC MISC
samsung — exynos_850_firmware	An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123.. A heap-based buffer overflow in the 5G MM message codec can occur due to insufficient parameter validation when decoding operator-defined access category definitions.	2023-03-13	9.8	CVE-2023-26074 MISC MISC MISC MISC MISC MISC
samsung — exynos_850_firmware	An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. An intra-object overflow in the 5G MM message codec can occur due to insufficient parameter validation when decoding the Service Area List.	2023-03-10	9.8	CVE-2023-26075 MISC MISC MISC MISC MISC MISC
samsung — exynos_1280_firmware	An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Modem 5300, and Exynos Auto T5123. An intra-object overflow in the 5G SM message codec can occur due to insufficient parameter validation when decoding reserved options.	2023-03-13	9.8	CVE-2023-26076 MISC MISC MISC MISC
moosikay_project — moosikay	E-Commerce System v1.0 ws discovered to contain a SQL injection vulnerability via the id parameter at /admin/delete_user.php.	2023-03-13	9.8	CVE-2023-27052 MISC
tenda — w15e_firmware	Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the wifiFilterListRemark parameter in the modifyWifiFilterRules function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.	2023-03-13	9.8	CVE-2023-27061 MISC
tenda — w15e_firmware	Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the DNSDomainName parameter in the formModifyDnsForward function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.	2023-03-13	9.8	CVE-2023-27063 MISC
bp_monitoring_management_system_project — bp_monitoring_management_system	BP Monitoring Management System v1.0 was discovered to contain a SQL injection vulnerability via the emailid parameter in the login page.	2023-03-14	9.8	CVE-2023-27074 MISC
maddy_project — maddy	maddy is a composable, all-in-one mail server. Starting with version 0.2.0 and prior to version 0.6.3, maddy allows a full authentication bypass if SASL authorization username is specified when using the PLAIN authentication mechanisms. Instead of validating the specified username, it is accepted as is after checking the credentials for the authentication username. maddy 0.6.3 includes the fix for the bug. There are no known workarounds.	2023-03-13	9.8	CVE-2023-27582 MISC MISC MISC MISC
panindex_project — panindex	PanIndex is a network disk directory index. In Panindex prior to version 3.1.3, a hard-coded JWT key `PanIndex` is used. An attacker can use the hard-coded JWT key to sign JWT token and perform any actions as a user with admin privileges. Version 3.1.3 has a patch for the issue. As a workaround, one may change the JWT key in the source code before compiling the project.	2023-03-13	9.8	CVE-2023-27583 MISC MISC MISC
perfree — perfreeblog	An arbitrary file upload vulnerability in the /admin/user/uploadImg component of PerfreeBlog v3.1.1 allows attackers to execute arbitrary code via a crafted JPG file.	2023-03-15	9.8	CVE-2023-27757 MISC
netgear — rax30_firmware	NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a buffer overflow vulnerability in various CGI mechanisms that could allow an attacker to execute arbitrary code on the device.	2023-03-10	9.8	CVE-2023-27852 MISC
netgear — rax30_firmware	NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a format string vulnerability in a SOAP service that could allow an attacker to execute arbitrary code on the device.	2023-03-10	9.8	CVE-2023-27853 MISC
webpack.js — webpack	Webpack 5 before 5.76.0 does not avoid cross-realm object access. ImportParserPlugin.js mishandles the magic comment feature. An attacker who controls a property of an untrusted object can obtain access to the real global object.	2023-03-13	9.8	CVE-2023-28154 MISC MISC
sap — netweaver_application_server_abap	SAP NetWeaver AS for ABAP and ABAP Platform – versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, allows an attacker to exploit insufficient validation of path information provided by users, thus exploiting a directory traversal flaw in an available service to delete system files. In this attack, no data can be read but potentially critical OS files can be deleted making the system unavailable, causing significant impact on both availability and integrity	2023-03-14	9.6	CVE-2023-27501 MISC MISC
akuvox — e11_firmware	The Akuvox E11 libvoice library provides unauthenticated access to the camera capture for image and video. This could allow an attacker to view and record image and video from the camera.	2023-03-13	9.1	CVE-2023-0349 MISC
akuvox — e11_firmware	The Akuvox E11 password recovery webpage can be accessed without authentication, and an attacker could download the device key file. An attacker could then use this page to reset the password back to the default.	2023-03-13	9.1	CVE-2023-0352 MISC
akuvox — e11_firmware	The Akuvox E11 web server can be accessed without any user authentication, and this could allow an attacker to access sensitive information, as well as create and download packet captures with known default URLs.	2023-03-13	9.1	CVE-2023-0354 MISC
siemens — mendix_saml	A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All Versions >= 1.16.4 < 1.17.2), Mendix SAML (Mendix 8 compatible) (All versions >= 2.2.0 < 2.2.3), Mendix SAML (Mendix 9 compatible, New Track) (All versions >= 3.1.9 < 3.2.5), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions >= 3.1.9 < 3.2.5). The affected versions of the module insufficiently verifies the SAML assertions. This could allow unauthenticated remote attackers to bypass authentication and get access to the application.	2023-03-14	9.1	CVE-2023-25957 MISC
ibm — financial_transaction_manager	IBM Financial Transaction Manager 3.2.0 through 3.2.10 could allow an authenticated user to perform unauthorized actions due to improper validation. IBM X-Force ID: 192954.	2023-03-10	8.8	CVE-2020-5002 MISC MISC
qualcomm — apq8009_firmware	Memory corruption in modem due to buffer overflow while processing a PPP packet	2023-03-10	8.8	CVE-2022-33213 MISC
veronalabs — wp_statistics	SQL Injection vulnerability in VeronaLabs WP Statistics plugin <= 13.2.10 versions.	2023-03-13	8.8	CVE-2022-38074 MISC
richplugins — plugin_for_google_reviews	SQL Injection (SQLi) vulnerability in RichPlugins Plugin for Google Reviews plugin <= 2.2.3 versions.	2023-03-15	8.8	CVE-2022-44580 MISC
seerox — wp_dynamic_keywords_injector	Cross-Site Request Forgery (CSRF) vulnerability in Seerox WP Dynamic Keywords Injector plugin <= 2.3.15 versions.	2023-03-14	8.8	CVE-2022-47141 MISC
themeisle — multiple_page_generator	Cross-Site Request Forgery (CSRF) vulnerability in Themeisle Multiple Page Generator Plugin – MPG plugin <= 3.3.9 versions.	2023-03-14	8.8	CVE-2022-47143 MISC
kesz1 — ipblocklist	Cross-Site Request Forgery (CSRF) vulnerability in Kesz1 Technologies ipBlockList plugin <= 1.0 versions.	2023-03-14	8.8	CVE-2022-47147 MISC
piwebsolution — css_js_manager\,_async_javascript\,_defer_render_blocking_css_supports_woocommerce	Cross-Site Request Forgery (CSRF) vulnerability in Pi Websolution CSS JS Manager, Async JavaScript, Defer Render Blocking CSS supports WooCommerce plugin <= 2.4.49 versions.	2023-03-14	8.8	CVE-2022-47154 MISC
supsystic — slider	Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Slider by Supsystic plugin <= 1.8.5 versions.	2023-03-14	8.8	CVE-2022-47155 MISC
dh_-_anti_adblocker_project — dh_-_anti_adblocker	Cross-Site Request Forgery (CSRF) vulnerability in Dannie Herdyawan DH – Anti AdBlocker plugin <= 36 versions.	2023-03-14	8.8	CVE-2022-47162 MISC
voidcoders — void_contact_form_7_widget_for_elementor_page_builder	Cross-Site Request Forgery (CSRF) vulnerability in voidCoders Void Contact Form 7 Widget For Elementor Page Builder plugin <= 2.1.1 versions.	2023-03-13	8.8	CVE-2022-47166 MISC
hmplugin — accept_stripe_donation_-_aidwp	Cross-Site Request Forgery (CSRF) vulnerability in HM Plugin Accept Stripe Donation – AidWP plugin <= 3.1.5 versions.	2023-03-14	8.8	CVE-2022-47422 MISC
my_calendar_project — my_calendar	Cross-Site Request Forgery (CSRF) vulnerability in Joseph C Dolson My Calendar plugin <= 3.3.24.1 versions.	2023-03-15	8.8	CVE-2022-47427 MISC
my_tickets_project — my_tickets	Cross-Site Request Forgery (CSRF) vulnerability in Joseph C Dolson My Tickets plugin <= 1.9.10 versions.	2023-03-13	8.8	CVE-2022-47440 MISC
multi_rating_project — multi_rating	Cross-Site Request Forgery (CSRF) vulnerability in Daniel Powney Multi Rating plugin <= 5.0.5 versions.	2023-03-14	8.8	CVE-2022-47443 MISC
akuvox — e11_firmware	The Akuvox E11 web server backend library allows command injection in the device phone-book contacts functionality. This could allow an attacker to upload files with executable command instructions.	2023-03-13	8.8	CVE-2023-0351 MISC
cm-wp — auto_featured_image	The Auto Featured Image (Auto Post Thumbnail) WordPress plugin before 3.9.16 includes an AJAX endpoint that allows any user with at least Author privileges to upload arbitrary files, such as PHP files. This is caused by incorrect file extension validation.	2023-03-13	8.8	CVE-2023-0477 MISC
netgear — rax30_firmware	NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 is vulnerable to cross-site request forgery attacks on all endpoints due to improperly implemented CSRF protections.	2023-03-10	8.8	CVE-2023-1205 MISC
hashicorp — nomad	HashiCorp Nomad and Nomad Enterprise 1.5.0 allow a job submitter to escalate to management-level privileges using workload identity and task API. Fixed in 1.5.1.	2023-03-14	8.8	CVE-2023-1299 MISC
agentejo — cockpit	Unrestricted Upload of File with Dangerous Type in GitHub repository cockpit-hq/cockpit prior to 2.4.1.	2023-03-10	8.8	CVE-2023-1313 CONFIRM MISC
teacms_project — teacms	A vulnerability classified as critical was found in XiaoBingBy TeaCMS 2.0. Affected by this vulnerability is an unknown functionality of the file /admin/upload. The manipulation leads to path traversal: ‘../filedir’. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222985 was assigned to this vulnerability.	2023-03-14	8.8	CVE-2023-1398 MISC MISC MISC
simple_art_gallery_project — simple_art_gallery	A vulnerability was found in Simple Art Gallery 1.0. It has been declared as critical. This vulnerability affects the function sliderPicSubmit of the file adminHome.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. VDB-223126 is the identifier assigned to this vulnerability.	2023-03-15	8.8	CVE-2023-1415 MISC MISC MISC
avantfax — avantfax	A File Upload vulnerability exists in AvantFAX 3.3.7. An authenticated user can bypass PHP file type validation in FileUpload.php by uploading a specially crafted PHP file.	2023-03-10	8.8	CVE-2023-23328 MISC MISC
microsoft — multiple_products	Windows Bluetooth Driver Elevation of Privilege Vulnerability	2023-03-14	8.8	CVE-2023-23388 MISC
microsoft — multiple_products	Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability	2023-03-14	8.8	CVE-2023-23403 MISC
microsoft — multiple_products	Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability	2023-03-14	8.8	CVE-2023-23406 MISC
microsoft — multiple_products	Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability	2023-03-14	8.8	CVE-2023-23413 MISC
simple_customer_relationship_management_system_project — simple_customer_relationship_management_system	Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the contact parameter in the user profile update function.	2023-03-15	8.8	CVE-2023-24728 MISC MISC MISC
simple_customer_relationship_management_system_project — simple_customer_relationship_management_system	Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the address parameter in the user profile update function.	2023-03-15	8.8	CVE-2023-24729 MISC MISC MISC
simple_customer_relationship_management_system_project — simple_customer_relationship_management_system	Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the company parameter in the user profile update function.	2023-03-15	8.8	CVE-2023-24730 MISC MISC MISC
simple_customer_relationship_management_system_project — simple_customer_relationship_management_system	Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the query parameter in the user profile update function.	2023-03-15	8.8	CVE-2023-24731 MISC MISC MISC
simple_customer_relationship_management_system_project — simple_customer_relationship_management_system	Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the gender parameter in the user profile update function.	2023-03-15	8.8	CVE-2023-24732 MISC MISC MISC
microsoft — multiple_products	Microsoft PostScript and PCL6 Class Printer Driver Elevation of Privilege Vulnerability	2023-03-14	8.8	CVE-2023-24864 MISC
microsoft — multiple_products	Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability	2023-03-14	8.8	CVE-2023-24867 MISC
microsoft — multiple_products	Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability	2023-03-14	8.8	CVE-2023-24868 MISC
microsoft — multiple_products	Windows Bluetooth Service Remote Code Execution Vulnerability	2023-03-14	8.8	CVE-2023-24871 MISC
microsoft — multiple_products	Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability	2023-03-14	8.8	CVE-2023-24872 MISC
microsoft — multiple_products	Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability	2023-03-14	8.8	CVE-2023-24876 MISC
microsoft — multiple_products	Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability	2023-03-14	8.8	CVE-2023-24907 MISC
microsoft — multiple_products	Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability	2023-03-14	8.8	CVE-2023-24909 MISC
microsoft — multiple_products	Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability	2023-03-14	8.8	CVE-2023-24913 MISC
prestashop — advanced_reviews	PrestaShop ws_productreviews < 3.6.2 is vulnerable to SQL Injection.	2023-03-14	8.8	CVE-2023-25206 MISC MISC
sap — business_objects_business_intelligence_platform	In some scenario, SAP Business Objects Business Intelligence Platform (CMC) – versions 420, 430, Program Object execution can lead to code injection vulnerability which could allow an attacker to gain access to resources that are allowed by extra privileges. Successful attack could highly impact the confidentiality, Integrity, and Availability of the system.	2023-03-14	8.8	CVE-2023-25616 MISC MISC
sap — business_objects_business_intelligence_platform	SAP Business Object (Adaptive Job Server) – versions 420, 430, allows remote execution of arbitrary commands on Unix, when program objects execution is enabled, to authenticated users with scheduling rights, using the BI Launchpad, Central Management Console or a custom application based on the public java SDK. Programs could impact the confidentiality, integrity and availability of the system.	2023-03-14	8.8	CVE-2023-25617 MISC MISC
coderex — wp_vr	Cross-Site Request Forgery (CSRF) vulnerability in Rextheme WP VR – 360 Panorama and Virtual Tour Builder For WordPress plugin <= 8.2.7 versions.	2023-03-15	8.8	CVE-2023-25708 MISC
plainware — locatoraid	Cross-Site Request Forgery (CSRF) vulnerability in Plainware Locatoraid Store Locator plugin <= 3.9.11 versions.	2023-03-15	8.8	CVE-2023-25709 MISC
cozmoslabs — client_portal	Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs, Madalin Ungureanu, Antohe Cristian Client Portal – Private user pages and login plugin <= 1.1.8 versions.	2023-03-15	8.8	CVE-2023-25968 MISC
autoaffiliatelinks — auto_affiliate_links	Cross-Site Request Forgery (CSRF) vulnerability in Lucian Apostol Auto Affiliate Links plugin <= 6.3.0.2 versions.	2023-03-13	8.8	CVE-2023-25973 MISC
metagauss — registrationmagic	Cross-Site Request Forgery (CSRF) vulnerability in RegistrationMagic plugin <= 5.1.9.2 versions.	2023-03-13	8.8	CVE-2023-25991 MISC
ibm — mq_certified_container	IBM MQ Certified Container 9.3.0.1 through 9.3.0.3 and 9.3.1.0 through 9.3.1.1 could allow authenticated users with the cluster to be granted administration access to the MQ console due to improper access controls. IBM X-Force ID: 248417.	2023-03-15	8.8	CVE-2023-26284 MISC MISC
struktur — libde265	Libde265 v1.0.11 was discovered to contain a heap buffer overflow via the function derive_collocated_motion_vectors at motion.cc.	2023-03-15	8.8	CVE-2023-27103 MISC
siemens — ruggedcom_crossbow	A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.2). The client query handler of the affected application fails to check for proper permissions for specific write queries. This could allow an authenticated remote attacker to perform unauthorized actions.	2023-03-14	8.8	CVE-2023-27309 MISC
siemens — ruggedcom_crossbow	A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.2). The client query handler of the affected application fails to check for proper permissions when assigning groups to user accounts. This could allow an authenticated remote attacker to assign administrative groups to otherwise non-privileged user accounts.	2023-03-14	8.8	CVE-2023-27310 MISC
siemens — ruggedcom_crossbow	A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3). The audit log form of affected applications is vulnerable to SQL injection. This could allow authenticated remote attackers to execute arbitrary SQL queries on the server database.	2023-03-14	8.8	CVE-2023-27463 MISC
github-slug-action_project — github-slug-action	github-slug-action is a GitHub Action to expose slug value of GitHub environment variables inside of one’s GitHub workflow. Starting in version 4.0.0` and prior to version 4.4.1, this action uses the `github.head_ref` parameter in an insecure way. This vulnerability can be triggered by any user on GitHub on any workflow using the action on pull requests. They just need to create a pull request with a branch name, which can contain the attack payload. This can be used to execute code on the GitHub runners and to exfiltrate any secrets one uses in the CI pipeline. A patched action is available in version 4.4.1. No workaround is available.	2023-03-13	8.8	CVE-2023-27581 MISC MISC MISC MISC
netgear — rax30_firmware	NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a file sharing mechanism that unintentionally allows users with upload permissions to execute arbitrary code on the device.	2023-03-10	8.8	CVE-2023-27851 MISC
sap — netweaver_application_server_for_java	Due to missing authentication check, SAP NetWeaver AS for Java – version 7.50, allows an unauthenticated attacker to attach to an open interface and make use of an open naming and directory API to access services which can be used to perform unauthorized operations affecting users and services across systems. On a successful exploitation, the attacker can read and modify some sensitive information but can also be used to lock up any element or operation of the system making that it unresponsive or unavailable.	2023-03-14	8.6	CVE-2023-23857 MISC MISC
microsoft — multiple_products	Windows Cryptographic Services Remote Code Execution Vulnerability	2023-03-14	8.4	CVE-2023-23416 MISC
ibm — spectrum_scale	A vulnerability in the Spectrum Scale 5.0.5.0 through 5.1.6.1 core component could allow unauthorized access to user data or injection of arbitrary data in the communication protocol. IBM X-Force ID: 191695.	2023-03-15	8.2	CVE-2020-4927 MISC MISC
microsoft — azure_service_fabric	Service Fabric Explorer Spoofing Vulnerability	2023-03-14	8.2	CVE-2023-23383 MISC
microsoft — multiple_products	Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability	2023-03-14	8.1	CVE-2023-23404 MISC
microsoft — multiple_products	Remote Procedure Call Runtime Remote Code Execution Vulnerability	2023-03-14	8.1	CVE-2023-23405 MISC
microsoft — multiple_products	Remote Procedure Call Runtime Remote Code Execution Vulnerability	2023-03-14	8.1	CVE-2023-24869 MISC
microsoft — multiple_products	Remote Procedure Call Runtime Remote Code Execution Vulnerability	2023-03-14	8.1	CVE-2023-24908 MISC
hashicorp — vault	HashiCorp Vault and Vault Enterprise’s approle auth method allowed any authenticated user with access to an approle destroy endpoint to destroy the secret ID of any other role by providing the secret ID accessor. This vulnerability is fixed in Vault 1.13.0, 1.12.4, 1.11.8, 1.10.11 and above.	2023-03-11	8.1	CVE-2023-24999 MISC
cisco — enterprise_nfv_infrastructure_software	A vulnerability in the upgrade signature verification of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, local attacker to provide an unauthentic upgrade file for upload. This vulnerability is due to insufficient cryptographic signature verification of upgrade files. An attacker could exploit this vulnerability by providing an administrator with an unauthentic upgrade file. A successful exploit could allow the attacker to fully compromise the Cisco NFVIS system.	2023-03-10	7.8	CVE-2022-20929 MISC
qualcomm — apq8009_firmware	Memory corruption in WLAN HAL while arbitrary value is passed in WMI UTF command payload.	2023-03-10	7.8	CVE-2022-25655 MISC
qualcomm — apq8009w_firmware	Memory corruption in Modem due to usage of Out-of-range pointer offset in UIM	2023-03-10	7.8	CVE-2022-25694 MISC
qualcomm — apq8009_firmware	Memory corruption in modem due to integer overflow to buffer overflow while handling APDU response	2023-03-10	7.8	CVE-2022-25705 MISC
qualcomm — ar8035_firmware	Memory corruption in modem due to use of out of range pointer offset while processing qmi msg	2023-03-10	7.8	CVE-2022-25709 MISC
qualcomm — aqt1000_firmware	Memory corruption due to improper authentication in Qualcomm IPC while loading unsigned lib in audio PD.	2023-03-10	7.8	CVE-2022-33242 MISC
qualcomm — apq8064au_firmware	Memory corruption in WLAN due to use after free	2023-03-10	7.8	CVE-2022-33245 MISC
qualcomm — aqt1000_firmware	Memory corruption due to stack based buffer overflow in core while sending command from USB of large size.	2023-03-10	7.8	CVE-2022-33260 MISC
qualcomm — aqt1000_firmware	Memory corruption due to buffer copy without checking the size of input in HLOS when input message size is larger than the buffer capacity.	2023-03-10	7.8	CVE-2022-33278 MISC
qualcomm — aqt1000_firmware	Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.	2023-03-10	7.8	CVE-2022-40530 MISC
qualcomm — apq8009_firmware	Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.	2023-03-10	7.8	CVE-2022-40531 MISC
qualcomm — qam8295p_firmware	Memory corruption in Automotive Android OS due to improper validation of array index.	2023-03-10	7.8	CVE-2022-40539 MISC
qualcomm — sd_8_gen1_5g_firmware	Memory corruption due to buffer copy without checking the size of input while loading firmware in Linux Kernel.	2023-03-10	7.8	CVE-2022-40540 MISC
docker — docker_desktop	Docker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container during initialization by tricking a user to open a crafted malicious docker-desktop:// URL.	2023-03-13	7.8	CVE-2023-0628 MISC
openharmony — openharmony	The kernel subsystem function check_permission_for_set_tokenid within OpenHarmony-v3.1.5 and prior versions has an UAF vulnerability which local attackers can exploit this vulnerability to escalate the privilege to root.	2023-03-10	7.8	CVE-2023-22436 MISC
microsoft — multiple_products	Microsoft Excel Remote Code Execution Vulnerability	2023-03-14	7.8	CVE-2023-23399 MISC
microsoft — multiple_products	Windows Media Remote Code Execution Vulnerability	2023-03-14	7.8	CVE-2023-23401 MISC
microsoft — multiple_products	Windows Media Remote Code Execution Vulnerability	2023-03-14	7.8	CVE-2023-23402 MISC
microsoft — multiple_products	Windows HTTP.sys Elevation of Privilege Vulnerability	2023-03-14	7.8	CVE-2023-23410 MISC
microsoft — multiple_products	Windows Accounts Picture Elevation of Privilege Vulnerability	2023-03-14	7.8	CVE-2023-23412 MISC
microsoft — multiple_products	Windows Partition Management Driver Elevation of Privilege Vulnerability	2023-03-14	7.8	CVE-2023-23417 MISC
microsoft — windows_11	Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability	2023-03-14	7.8	CVE-2023-23418 MISC
microsoft — windows_11	Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability	2023-03-14	7.8	CVE-2023-23419 MISC
microsoft — windows_server_2012	Windows Kernel Elevation of Privilege Vulnerability	2023-03-14	7.8	CVE-2023-23420 MISC
microsoft — windows_server_2012	Windows Kernel Elevation of Privilege Vulnerability	2023-03-14	7.8	CVE-2023-23421 MISC
microsoft — windows_server_2012	Windows Kernel Elevation of Privilege Vulnerability	2023-03-14	7.8	CVE-2023-23422 MISC
microsoft — windows_server_2012	Windows Kernel Elevation of Privilege Vulnerability	2023-03-14	7.8	CVE-2023-23423 MISC
draytek — vigor2960_firmware	DrayTek Vigor2960 v1.5.1.4 was discovered to contain a command injection vulnerability via the mainfunction.cgi component.	2023-03-15	7.8	CVE-2023-24229 MISC MISC
microsoft — multiple_products	Windows Graphics Component Elevation of Privilege Vulnerability	2023-03-14	7.8	CVE-2023-24910 MISC
microsoft — onedrive_for_macos	Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability	2023-03-14	7.8	CVE-2023-24930 MISC
trendmicro — apex_one	An improper access control vulnerability in the Trend Micro Apex One agent could allow a local attacker to gain elevated privileges and create arbitrary directories with arbitrary ownership.	2023-03-10	7.8	CVE-2023-25144 MISC MISC
trendmicro — apex_one	A link following vulnerability in the scanning function of Trend Micro Apex One agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.	2023-03-10	7.8	CVE-2023-25145 MISC MISC
trendmicro — apex_one	A security agent link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to quarantine a file, delete the original folder and replace with a junction to an arbitrary location, ultimately leading to an arbitrary file dropped to an arbitrary location. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.	2023-03-10	7.8	CVE-2023-25146 MISC MISC
trendmicro — apex_one	A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to exploit the vulnerability by changing a specific file into a pseudo-symlink, allowing privilege escalation on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.	2023-03-10	7.8	CVE-2023-25148 MISC MISC
webassembly — webassembly	WebAssembly v1.0.29 was discovered to contain a heap overflow via the component component wabt::Node::operator.	2023-03-10	7.8	CVE-2023-27117 MISC
siemens — tecnomatix_plant_simulation	A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20304)	2023-03-14	7.8	CVE-2023-27398 MISC
siemens — tecnomatix_plant_simulation	A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20299, ZDI-CAN-20346)	2023-03-14	7.8	CVE-2023-27399 MISC
siemens — tecnomatix_plant_simulation	A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20300)	2023-03-14	7.8	CVE-2023-27400 MISC
siemens — tecnomatix_plant_simulation	A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20308, ZDI-CAN-20345)	2023-03-14	7.8	CVE-2023-27401 MISC
siemens — tecnomatix_plant_simulation	A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20334)	2023-03-14	7.8	CVE-2023-27402 MISC
siemens — tecnomatix_plant_simulation	A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains a memory corruption vulnerability while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20303, ZDI-CAN-20348)	2023-03-14	7.8	CVE-2023-27403 MISC
siemens — tecnomatix_plant_simulation	A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application is vulnerable to stack-based buffer while parsing specially crafted SPP files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-20433)	2023-03-14	7.8	CVE-2023-27404 MISC
siemens — tecnomatix_plant_simulation	A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-20432)	2023-03-14	7.8	CVE-2023-27405 MISC
siemens — tecnomatix_plant_simulation	A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application is vulnerable to stack-based buffer while parsing specially crafted SPP files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-20449)	2023-03-14	7.8	CVE-2023-27406 MISC
jpegoptim_project — jpegoptim	jpegoptim v1.5.2 was discovered to contain a heap overflow in the optimize function at jpegoptim.c.	2023-03-15	7.8	CVE-2023-27781 MISC
getadmiral — ad_blocking_detector	A vulnerability has been found in Ad Blocking Detector Plugin up to 1.2.1 and classified as problematic. This vulnerability affects unknown code of the file ad-blocking-detector.php. The manipulation leads to information disclosure. The attack can be initiated remotely. Upgrading to version 1.2.2 is able to address this issue. The name of the patch is 3312b9cd79e5710d1e282fc9216a4e5ab31b3d94. It is recommended to upgrade the affected component. VDB-222610 is the identifier assigned to this vulnerability.	2023-03-10	7.5	CVE-2014-125093 MISC MISC MISC MISC
ithemes — backupbuddy	Directory Traversal vulnerability in iThemes BackupBuddy plugin 8.5.8.0 – 8.7.4.1 versions.	2023-03-13	7.5	CVE-2022-31474 MISC MISC
qualcomm — ar8035_firmware	Transient DOS due to reachable assertion in modem during MIB reception and SIB timeout	2023-03-10	7.5	CVE-2022-33244 MISC
qualcomm — ar8035_firmware	Transient DOS due to reachable assertion in modem when network repeatedly sent invalid message container for NR to LTE handover.	2023-03-10	7.5	CVE-2022-33250 MISC
qualcomm — aqt1000_firmware	Transient DOS due to reachable assertion in Modem while processing SIB1 Message.	2023-03-10	7.5	CVE-2022-33254 MISC
qualcomm — ar8035_firmware	Transient DOS in modem due to reachable assertion.	2023-03-10	7.5	CVE-2022-33272 MISC
qualcomm — csr8811_firmware	Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes.	2023-03-10	7.5	CVE-2022-33309 MISC
ajax_search_project — ajax_search	Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ernest Marcinko Ajax Search Lite plugin <= 4.10.3 versions.	2023-03-15	7.5	CVE-2022-38456 MISC
combodo — itop	Combodo iTop is an open source, web-based IT service management platform. Prior to versions 2.7.8 and 3.0.2-1, a user who can log in on iTop is able to take over any account just by knowing the account’s username. This issue is fixed in versions 2.7.8 and 3.0.2-1.	2023-03-14	7.5	CVE-2022-39214 MISC MISC MISC
qualcomm — ar8035_firmware	Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM.	2023-03-10	7.5	CVE-2022-40527 MISC
qualcomm — csr8811_firmware	Transient DOS due to buffer over-read in WLAN while sending a packet to device.	2023-03-10	7.5	CVE-2022-40535 MISC
ibm — mq_appliance	IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS is vulnerable to a denial of service attack caused by specially crafted PCF or MQSC messages. IBM X-Force ID: 240832.	2023-03-10	7.5	CVE-2022-43902 MISC MISC
ivanti — avalanche	An improper authentication vulnerability exists in Avalanche version 6.3.x and below allows unauthenticated attacker to modify properties on specific port.	2023-03-10	7.5	CVE-2022-44574 MISC
wp_csv_to_database_project — wp_csv_to_database	Cross-Site Request Forgery (CSRF) vulnerability in Tips and Tricks HQ, josh401 WP CSV to Database – Insert CSV file content into WordPress plugin <= 2.6 versions.	2023-03-14	7.5	CVE-2022-47163 MISC
akuvox — e11_firmware	Akuvox E11 cloud login is performed through an unencrypted HTTP connection. An attacker could gain access to the Akuvox cloud and device if the MAC address of a device if known.	2023-03-13	7.5	CVE-2023-0346 MISC
akuvox — e11_firmware	Akuvox E11 allows direct SIP calls. No access control is enforced by the SIP servers, which could allow an attacker to contact any device within Akuvox to call any other device.	2023-03-13	7.5	CVE-2023-0348 MISC
akuvox — e11_firmware	Akuvox E11 uses a hard-coded cryptographic key, which could allow an attacker to decrypt sensitive information.	2023-03-13	7.5	CVE-2023-0355 MISC
saysis — starcities	Files or Directories Accessible to External Parties vulnerability in Saysis Starcities allows Collect Data from Common Resource Locations.This issue affects Starcities: through 1.3.	2023-03-10	7.5	CVE-2023-1246 MISC
vim — vim	NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1402.	2023-03-11	7.5	CVE-2023-1355 MISC CONFIRM
online_pizza_ordering_system_project — online_pizza_ordering_system	A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file category.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222871.	2023-03-13	7.5	CVE-2023-1364 MISC MISC MISC
online_pizza_ordering_system_project — online_pizza_ordering_system	A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/ajax.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222872.	2023-03-13	7.5	CVE-2023-1365 MISC MISC MISC
openharmony — openharmony	The kernel subsystem hmdfs within OpenHarmony-v3.1.5 and prior versions has an arbitrary memory accessing vulnerability which network attackers can launch a remote attack to obtain kernel memory data of the target system.	2023-03-10	7.5	CVE-2023-22301 MISC
rocket.chat — rocket.chat	An improper access control vulnerability exists prior to v6 that could allow an attacker to break the E2E encryption of a chat room by a user changing the group key of a chat room.	2023-03-10	7.5	CVE-2023-23911 MISC
microsoft — windows_server_2012	Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability	2023-03-14	7.5	CVE-2023-24856 MISC
microsoft — windows_server_2012	Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability	2023-03-14	7.5	CVE-2023-24857 MISC
microsoft — windows_server_2012	Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability	2023-03-14	7.5	CVE-2023-24858 MISC
microsoft — windows_server_2012	Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability	2023-03-14	7.5	CVE-2023-24859 MISC
dlink — dir-820l_firmware	A stack overflow vulnerability in D-Link DIR820LA1_FW106B02 allows attackers to cause a denial of service via the reserveDHCP_HostName_1.1.1.0 parameter to lan.asp.	2023-03-13	7.5	CVE-2023-25283 MISC MISC
swig-templates_project — swig-templates	Directory traversal vulnerability in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to read arbitrary files via the include or extends tags.	2023-03-15	7.5	CVE-2023-25345 MISC
apache — log4j	** UNSUPPORTED WHEN ASSIGNED ** When using the Chainsaw or SocketAppender components with Log4j 1.x on JRE less than 1.7, an attacker that manages to cause a logging entry involving a specially-crafted (ie, deeply nested) hashmap or hashtable (depending on which logging component is in use) to be processed could exhaust the available memory in the virtual machine and achieve Denial of Service when the object is deserialized. This issue affects Apache Log4j before 2. Affected users are recommended to update to Log4j 2.x. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.	2023-03-10	7.5	CVE-2023-26464 MISC
tenda — w15e_firmware	Tenda V15V1.0 was discovered to contain a buffer overflow vulnerability via the gotoUrl parameter in the formPortalAuth function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.	2023-03-13	7.5	CVE-2023-27062 MISC
tenda — w15e_firmware	Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the index parameter in the formDelDnsForward function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.	2023-03-13	7.5	CVE-2023-27064 MISC
tenda — w15e_firmware	Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the picName parameter in the formDelWewifiPi function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.	2023-03-13	7.5	CVE-2023-27065 MISC
jellyfin — jellyfin	Jellyfin up to v10.7.7 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /Repositories. This vulnerability allows attackers to access network resources and sensitive information via a crafted POST request.	2023-03-10	7.5	CVE-2023-27161 MISC MISC MISC
rack_project — rack	A DoS vulnerability exists in Rack <v3.0.4.2, <v2.2.6.3, <v2.1.4.3 and <v2.0.9.3 within in the Multipart MIME parsing code in which could allow an attacker to craft requests that can be abuse to cause multipart parsing to take longer than expected.	2023-03-10	7.5	CVE-2023-27530 MISC
veeam — backup_\&_replication	Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the backup infrastructure hosts.	2023-03-10	7.5	CVE-2023-27532 MISC
jenkins — jenkins	Jenkins 2.393 and earlier, LTS 2.375.3 and earlier uses the Apache Commons FileUpload library without specifying limits for the number of request parts introduced in version 1.5 for CVE-2023-24998 in hudson.util.MultipartFormDataParser, allowing attackers to trigger a denial of service.	2023-03-10	7.5	CVE-2023-27900 MISC
jenkins — jenkins	Jenkins 2.393 and earlier, LTS 2.375.3 and earlier uses the Apache Commons FileUpload library without specifying limits for the number of request parts introduced in version 1.5 for CVE-2023-24998 in org.kohsuke.stapler.RequestImpl, allowing attackers to trigger a denial of service.	2023-03-10	7.5	CVE-2023-27901 MISC
ibexa — digital_experience_platform	An issue was discovered in eZ Platform Ibexa Kernel before 1.3.26. The Company admin role gives excessive privileges.	2023-03-12	7.2	CVE-2022-48365 MISC MISC MISC MISC
bbraun — battery-pack_sp_with_wifi_firmware	An improper neutralization of directives in dynamically evaluated code vulnerability in the WiFi Battery embedded web server in versions L90/U70 and L92/U92 can be used to gain administrative access to the WiFi communication module. An authenticated user, having access to both the medical device WiFi network (such as a biomedical engineering staff member) and the specific B.Braun Battery Pack SP with WiFi web server credentials, could get administrative (root) access on the infusion pump communication module. This could be used as a vector to start further attacks	2023-03-13	7.2	CVE-2023-0888 MISC MISC
115cms — 115cms	A vulnerability was found in Guizhou 115cms 4.2. It has been classified as problematic. Affected is an unknown function of the file /admin/content/index. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-222738 is the identifier assigned to this vulnerability.	2023-03-10	7.2	CVE-2023-1328 MISC MISC MISC
yoga_class_registration_system_project — yoga_class_registration_system	A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been classified as critical. This affects the function query of the file admin/categories/manage_category.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222873 was assigned to this vulnerability.	2023-03-13	7.2	CVE-2023-1366 MISC MISC MISC
student_study_center_desk_management_system_project — student_study_center_desk_management_system	A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/user/manage_user.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223111.	2023-03-15	7.2	CVE-2023-1407 MISC MISC MISC
microsoft — windows_server	Windows DNS Server Remote Code Execution Vulnerability	2023-03-14	7.2	CVE-2023-23400 MISC
jizhicms — jizhicms	An arbitrary file upload vulnerability in the \admin\c\CommonController.php component of Jizhicms v2.4.5 allows attackers to execute arbitrary code via a crafted phtml file.	2023-03-15	7.2	CVE-2023-27235 MISC
docker — docker_desktop	Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions by setting the Docker host to docker.raw.sock, or npipe:////.pipe/docker_engine_linux on Windows, via the -H (–host) CLI flag or the DOCKER_HOST environment variable and launch containers without the additional hardening features provided by ECI. This would not affect already running containers, nor containers launched through the usual approach (without Docker’s raw socket). The affected functionality is available for Docker Business customers only and assumes an environment where users are not granted local root or Administrator privileges. This issue has been fixed in Docker Desktop 4.17.0. Affected Docker Desktop versions: from 4.13.0 before 4.17.0.	2023-03-13	7.1	CVE-2023-0629 MISC
microsoft — multiple_products	Microsoft Excel Spoofing Vulnerability	2023-03-14	7.1	CVE-2023-23398 MISC
microsoft — multiple_products	Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability	2023-03-14	7.1	CVE-2023-23407 MISC
microsoft — multiple_products	Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability	2023-03-14	7.1	CVE-2023-23414 MISC
microsoft — edge	Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability	2023-03-14	7.1	CVE-2023-24892 MISC
qualcomm — aqt1000_firmware	Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone.	2023-03-10	7	CVE-2022-33257 MISC
microsoft — multiple_products	Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability	2023-03-14	7	CVE-2023-23385 MISC
microsoft — multiple_products	Windows BrokerInfrastructure Service Elevation of Privilege Vulnerability	2023-03-14	7	CVE-2023-23393 MISC
microsoft — multiple_products	Windows Graphics Component Elevation of Privilege Vulnerability	2023-03-14	7	CVE-2023-24861 MISC
jenkins — jenkins	Jenkins 2.393 and earlier, LTS 2.375.3 and earlier creates a temporary file in the default temporary directory with the default permissions for newly created files when uploading a plugin for installation, potentially allowing attackers with access to the Jenkins controller file system to read and write the file before it is used, potentially resulting in arbitrary code execution.	2023-03-10	7	CVE-2023-27899 MISC

Back to top

 

Medium Vulnerabilities

Primary Vendor — Product	Description	Published	CVSS Score	Source & Patch Info
netgear — rax30_firmware	NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a file sharing mechanism that allows users with access to this feature to access arbitrary files on the device.	2023-03-10	6.8	CVE-2023-27850 MISC
google — android	In telephone service, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed.	2023-03-10	6.7	CVE-2022-47461 MISC
google — android	In telephone service, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed.	2023-03-10	6.7	CVE-2022-47462 MISC
mcafee — advanced_threat_defense	A command injection vulnerability in Trellix Intelligent Sandbox CLI for version 5.2 and earlier, allows a local user to inject and execute arbitrary operating system commands using specially crafted strings. This vulnerability is due to insufficient validation of arguments that are passed to specific CLI command. The vulnerability allows the attack	2023-03-13	6.7	CVE-2023-0978 MISC
trendmicro — apex_one	An issue in the Trend Micro Apex One agent could allow an attacker who has previously acquired administrative rights via other means to bypass the protection by using a specifically crafted DLL during a specific update process. Please note: an attacker must first obtain administrative access on the target system via another method in order to exploit this.	2023-03-10	6.7	CVE-2023-25147 MISC
ibm — robotic_process_automation_as_a_service	IBM Robotic Process Automation 21.0.0 – 21.0.7 and 23.0.0 is vulnerable to client-side validation bypass for credential pools. Invalid credential pools may be created as a result. IBM X-Force ID: 242951.	2023-03-15	6.5	CVE-2022-46773 MISC MISC
ibm — manage_application	IBM Manage Application 8.8.0 and 8.9.0 in the IBM Maximo Application Suite is vulnerable to incorrect default permissions which could give access to a user to actions that they should not have access to. IBM X-Force ID: 242953.	2023-03-15	6.5	CVE-2022-46774 MISC MISC
wpgmaps — wp_go_maps	Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability in WP Go Maps (formerly WP Google Maps) plugin <= 9.0.15 versions.	2023-03-14	6.5	CVE-2022-47595 MISC
akuvox — e11_firmware	Akuvox E11 does not ensure that a file extension is associated with the file provided. This could allow an attacker to upload a file to the device by changing the extension of a malicious file to an accepted file type.	2023-03-13	6.5	CVE-2023-0350 MISC
oceanwp — ocean_extra	The Ocean Extra WordPress plugin before 2.1.3 does not ensure that the template to be loaded via a shortcode is actually a template, allowing any authenticated users such as subscriber to retrieve the content of arbitrary posts, such as draft, private or even password protected ones.	2023-03-13	6.5	CVE-2023-0749 MISC
optinmonster — optinmonster	The Popup Builder by OptinMonster WordPress plugin before 2.12.2 does not ensure that the campaign to be loaded via some shortcodes is actually a campaign, allowing any authenticated users such as subscriber to retrieve the content of arbitrary posts, like draft, private or even password protected ones.	2023-03-13	6.5	CVE-2023-0772 MISC
devolutions — devolutions_server	Improper access control in the secure messages feature in Devolutions Server 2022.3.12 and below allows an authenticated attacker that possesses the message UUID to access the data it contains.	2023-03-10	6.5	CVE-2023-1201 MISC
devolutions — remote_desktop_manager	Improper removal of sensitive data in the entry edit feature of Hub Business submodule in Devolutions Remote Desktop Manager PowerShell Module 2022.3.1.5 and earlier allows an authenticated user to access sensitive data on entries that were edited using the affected submodule.	2023-03-10	6.5	CVE-2023-1203 MISC
bumsys_project — bumsys	SQL Injection in GitHub repository unilogies/bumsys prior to v2.0.2.	2023-03-13	6.5	CVE-2023-1361 CONFIRM MISC
ibm — sterling_b2b_integrator	IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.1 could allow a privileged user to obtain sensitive information that could aid in further attacks against the system. IBM X-Force ID: 244364.	2023-03-15	6.5	CVE-2023-22876 MISC MISC
microsoft — multiple_products	Microsoft Excel Denial of Service Vulnerability	2023-03-14	6.5	CVE-2023-23396 MISC
microsoft — multiple_products	Windows Hyper-V Denial of Service Vulnerability	2023-03-14	6.5	CVE-2023-23411 MISC
libelfin_project — libelfin	Libelfin v0.3 was discovered to contain an integer overflow in the load function at elf/mmap_loader.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted elf file.	2023-03-14	6.5	CVE-2023-24180 MISC
microsoft — multiple_products	Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability	2023-03-14	6.5	CVE-2023-24863 MISC
microsoft — multiple_products	Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability	2023-03-14	6.5	CVE-2023-24865 MISC
microsoft — multiple_products	Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability	2023-03-14	6.5	CVE-2023-24866 MISC
microsoft — multiple_products	Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability	2023-03-14	6.5	CVE-2023-24870 MISC
microsoft — onedrive_for_ios	Microsoft OneDrive for iOS Security Feature Bypass Vulnerability	2023-03-14	6.5	CVE-2023-24890 MISC
microsoft — multiple_products	Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability	2023-03-14	6.5	CVE-2023-24906 MISC
microsoft — multiple_products	Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability	2023-03-14	6.5	CVE-2023-24911 MISC
microsoft — dynamics_365	Microsoft Dynamics 365 Information Disclosure Vulnerability	2023-03-14	6.5	CVE-2023-24922 MISC
dlink — dir-820l_firmware	A heap overflow vulnerability in D-Link DIR820LA1_FW106B02 allows attackers to cause a denial of service via the config.log_to_syslog and log_opt_dropPackets parameters to mydlink_api.ccp.	2023-03-15	6.5	CVE-2023-25282 MISC MISC
sap — netweaver_application_server_abap	SAP NetWeaver Application Server for ABAP and ABAP Platform – versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, has multiple vulnerabilities in an unused class for error handling in which an attacker authenticated as a non-administrative user can craft a request with certain parameters which will consume the server’s resources sufficiently to make it unavailable. There is no ability to view or modify any information.	2023-03-14	6.5	CVE-2023-25618 MISC MISC
ibm — robotic_process_automation	IBM Robotic Process Automation 21.0.1 through 21.0.5 is vulnerable to insufficiently protecting credentials. Queue Provider credentials are not obfuscated while editing queue provider details. IBM X-Force ID: 247032.	2023-03-15	6.5	CVE-2023-25680 MISC MISC
online_food_ordering_system_project — online_food_ordering_system	A Cross-Site Request Forgery (CSRF) in Online Food Ordering System v1.0 allows attackers to change user details and credentials via a crafted POST request.	2023-03-14	6.5	CVE-2023-27073 MISC
readtomyshoe_project — readtomyshoe	ReadtoMyShoe, a web app that lets users upload articles and listen to them later, generates an error message containing sensitive information prior to commit 8533b01. If an error occurs when adding an article, the website shows the user an error message. If the error originates from the Google Cloud TTS request, then it will include the full URL of the request. The request URL contains the Google Cloud API key. This has been patched in commit 8533b01. Upgrading should be accompanied by deleting the current GCP API key and issuing a new one. There are no known workarounds.	2023-03-13	6.5	CVE-2023-27587 MISC MISC
microsoft — malware_protection_engine	Microsoft Defender Elevation of Privilege Vulnerability	2023-03-14	6.3	CVE-2023-23389 MISC
a-forms_project — a-forms	A vulnerability, which was classified as problematic, was found in MMDeveloper A Forms Plugin up to 1.4.2. This affects an unknown part of the file a-forms.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.4.3 is able to address this issue. The name of the patch is 3e693197bd69b7173cc16d8d2e0a7d501a2a0b06. It is recommended to upgrade the affected component. The identifier VDB-222609 was assigned to this vulnerability.	2023-03-10	6.1	CVE-2013-10020 MISC MISC MISC
wordpress — debug_bar	A vulnerability was found in dd32 Debug Bar Plugin up to 0.8. It has been declared as problematic. Affected by this vulnerability is the function render of the file panels/class-debug-bar-queries.php. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 0.8.1 is able to address this issue. The name of the patch is 0842af8f8a556bc3e39b9ef758173b0a8a9ccbfc. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-222739.	2023-03-11	6.1	CVE-2013-10021 MISC MISC MISC MISC
mobilevikings — django_ajax_utilities	A vulnerability was found in Mobile Vikings Django AJAX Utilities up to 1.2.1 and classified as problematic. This issue affects the function Pagination of the file django_ajax/static/ajax-utilities/js/pagination.js of the component Backslash Handler. The manipulation of the argument url leads to cross site scripting. The attack may be initiated remotely. The name of the patch is 329eb1dd1580ca1f9d4f95bc69939833226515c9. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-222611.	2023-03-10	6.1	CVE-2017-20182 MISC MISC MISC
hcltech — verse	HCL Verse is susceptible to a Cross Site Scripting (XSS) vulnerability. By tricking a user into clicking a crafted URL, a remote unauthenticated attacker could execute script in a victim’s web browser to perform operations as the victim and/or steal the victim’s cookies, session tokens, or other sensitive information.	2023-03-10	6.1	CVE-2021-27788 MISC
firmanet — customer_relation_manager	Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in Firmanet Software and Technology Customer Relation Manager allows XSS Targeting HTML Attributes.This issue affects Customer Relation Manager: before 2022.03.13.	2023-03-14	6.1	CVE-2021-4195 MISC
ibexa — ez_platform_kernel	An issue was discovered in eZ Platform Ibexa Kernel before 1.3.1.1. An XSS attack can occur because JavaScript code can be uploaded in a .html or .js file.	2023-03-12	6.1	CVE-2021-46875 MISC MISC
firmanet — technology_customer_relation_manager	Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in Firmanet Software and Technology Customer Relation Manager allows Cross-Site Scripting (XSS).This issue affects Customer Relation Manager: before 2022.03.13.	2023-03-14	6.1	CVE-2022-23790 MISC
firmanet — customer_relation_manager	Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in Firmanet Software and Technology Customer Relation Manager allows Cross-Site Scripting (XSS).This issue affects Customer Relation Manager: before 2022.03.13.	2023-03-14	6.1	CVE-2022-23791 MISC
ibm — app_connect_enterprise_certified_container	IBM App Connect Enterprise Certified Container 4.1, 4.2, 5.0, 5.1, 5.2, 6.0, 6.1, 6.2, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 239963.	2023-03-15	6.1	CVE-2022-43874 MISC MISC
siri-informatica — wi400	A cross-site scripting (XSS) vulnerability in the check_login function of SIPE s.r.l WI400 between version 8 and 11 included allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the f parameter.	2023-03-10	6.1	CVE-2022-48111 MISC MISC MISC MISC MISC
sap — netweaver	Due to insufficient encoding of user input, SAP NetWeaver – versions 700, 701, 702, 731, 740, 750, allows an unauthenticated attacker to inject code that may expose sensitive data like user ID and password, which could lead to reflected Cross-Site scripting. These endpoints are normally exposed over the network and successful exploitation can partially impact confidentiality of the application.	2023-03-14	6.1	CVE-2023-0021 MISC MISC
talentyazilim — unis	Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in Talent Software UNIS allows Reflected XSS.This issue affects UNIS: before 28376.	2023-03-15	6.1	CVE-2023-0322 MISC
gigamon — gigavue-os	The help page in GigaVUE-FM, when using GigaVUE-OS software version 5.0 202, does not require an authenticated user. An attacker could enforce a user into inserting malicious JavaScript code into the URI, that could lead to a Reflected Cross site Scripting.	2023-03-10	6.1	CVE-2023-0746 CONFIRM
enhancesoft — osticket	Cross-site Scripting (XSS) – Stored in GitHub repository osticket/osticket prior to v1.16.6.	2023-03-10	6.1	CVE-2023-1320 CONFIRM MISC
hsycms — hsycms	A vulnerability, which was classified as problematic, has been found in Hsycms 3.1. Affected by this issue is some unknown functionality of the file controller\cate.php of the component Add Category Module. The manipulation of the argument title leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-222842 is the identifier assigned to this vulnerability.	2023-03-11	6.1	CVE-2023-1349 MISC MISC MISC
design_and_implementation_of_covid-19_directory_on_vaccination_system_project — design_and_implementation_of_covid-19_directory_on_vaccination_system	A vulnerability, which was classified as problematic, was found in SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System 1.0. Affected is an unknown function of the file verification.php. The manipulation of the argument txtvaccinationID leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222852.	2023-03-11	6.1	CVE-2023-1353 MISC MISC MISC
design_and_implementation_of_covid-19_directory_on_vaccination_system_project — design_and_implementation_of_covid-19_directory_on_vaccination_system	A vulnerability has been found in SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file register.php. The manipulation of the argument txtfullname/txtage/txtaddress/txtphone leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-222853 was assigned to this vulnerability.	2023-03-11	6.1	CVE-2023-1354 MISC MISC MISC
bumsys_project — bumsys	Improper Restriction of Rendered UI Layers or Frames in GitHub repository unilogies/bumsys prior to v2.0.2.	2023-03-13	6.1	CVE-2023-1362 MISC CONFIRM
webhostings — wh_testimonials	The WH Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters such as wh_homepage, wh_text_short, wh_text_full and in versions up to, and including, 3.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.	2023-03-13	6.1	CVE-2023-1372 MISC MISC MISC
yoga_class_registration_system_project — yoga_class_registration_system	A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been declared as problematic. This vulnerability affects the function query of the file admin/user/list.php. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-222982 is the identifier assigned to this vulnerability.	2023-03-14	6.1	CVE-2023-1395 MISC MISC MISC
online_tours_\&_travels_management_system_project — online_tours_\&_travels_management_system	A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file admin/traveller_details.php. The manipulation of the argument address leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222983.	2023-03-14	6.1	CVE-2023-1396 MISC MISC MISC
online_student_management_system_project — online_student_management_system	A vulnerability classified as problematic has been found in SourceCodester Online Student Management System 1.0. Affected is an unknown function of the file profile.php. The manipulation of the argument adminname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222984.	2023-03-14	6.1	CVE-2023-1397 MISC MISC MISC
opennetworking — onos	A cross-site scripting (XSS) vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter of the API documentation dashboard.	2023-03-14	6.1	CVE-2023-24279 MISC MISC MISC
ibm — spectrum_symphony	IBM Spectrum Symphony 7.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 247030.	2023-03-10	6.1	CVE-2023-24975 MISC MISC
sap — content_server	SAP Content Server – version 7.53, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. After successful exploitation, an attacker can read and modify some sensitive information but cannot delete the data.	2023-03-14	6.1	CVE-2023-26457 MISC MISC
my-blog_project — my-blog	Cross Site Scripting vulnerability found in My-Blog allows attackers to cause a denial of service via the Post function.	2023-03-13	6.1	CVE-2023-27093 MISC
icepay — rest_api	A vulnerability was found in ICEPAY REST-API-NET 0.9. It has been declared as problematic. Affected by this vulnerability is the function RestClient of the file Classes/RestClient.cs of the component Checksum Validation. The manipulation leads to improper validation of integrity check value. The attack can be launched remotely. Upgrading to version 1.0 is able to address this issue. The name of the patch is 61f6b8758e5c971abff5f901cfa9f231052b775f. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-222847.	2023-03-12	5.9	CVE-2016-15028 MISC MISC MISC MISC
qualcomm — apq8009_firmware	Information Disclosure in Graphics during GPU context switch.	2023-03-10	5.5	CVE-2022-22075 MISC
hpe — superdome_flex_280_server_firmware	A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 servers. The vulnerability could be locally exploited to allow disclosure of information. HPE has made the following software to resolve the vulnerability in HPE Superdome Flex Servers v3.65.8 and Superdome Flex 280 Servers v1.45.8.	2023-03-10	5.5	CVE-2022-37939 MISC
google — android	In wcn service, there is a possible missing params check. This could lead to local denial of service in wcn service.	2023-03-10	5.5	CVE-2022-47453 MISC
google — android	In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.	2023-03-10	5.5	CVE-2022-47454 MISC
google — android	In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.	2023-03-10	5.5	CVE-2022-47455 MISC
google — android	In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.	2023-03-10	5.5	CVE-2022-47456 MISC
google — android	In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.	2023-03-10	5.5	CVE-2022-47457 MISC
google — android	In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.	2023-03-10	5.5	CVE-2022-47458 MISC
google — android	In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.	2023-03-10	5.5	CVE-2022-47459 MISC
google — android	In gpu device, there is a memory corruption due to a use after free. This could lead to local denial of service in kernel.	2023-03-10	5.5	CVE-2022-47460 MISC
google — android	In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.	2023-03-10	5.5	CVE-2022-47471 MISC
google — android	In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.	2023-03-10	5.5	CVE-2022-47472 MISC
google — android	In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.	2023-03-10	5.5	CVE-2022-47473 MISC
google — android	In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.	2023-03-10	5.5	CVE-2022-47474 MISC
google — android	In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.	2023-03-10	5.5	CVE-2022-47475 MISC
google — android	In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.	2023-03-10	5.5	CVE-2022-47476 MISC
google — android	In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.	2023-03-10	5.5	CVE-2022-47477 MISC
google — android	In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.	2023-03-10	5.5	CVE-2022-47478 MISC
google — android	In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.	2023-03-10	5.5	CVE-2022-47479 MISC
google — android	In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additional execution privileges needed.	2023-03-10	5.5	CVE-2022-47480 MISC
google — android	In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additional execution privileges needed.	2023-03-10	5.5	CVE-2022-47481 MISC
google — android	In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additional execution privileges needed.	2023-03-10	5.5	CVE-2022-47482 MISC
google — android	In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additional execution privileges needed.	2023-03-10	5.5	CVE-2022-47483 MISC
google — android	In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additional execution privileges needed.	2023-03-10	5.5	CVE-2022-47484 MISC
openharmony — openharmony	The ArKUI framework subsystem within OpenHarmony-v3.1.5 and prior versions, OpenHarmony-v3.0.7 and prior versions has an Improper Input Validation vulnerability which local attackers can exploit this vulnerability to send malicious data, causing the current application to crash.	2023-03-10	5.5	CVE-2023-0083 MISC
tgsoft — viragtlt.sys	A vulnerability was found in TG Soft Vir.IT eXplorer 9.4.86.0. It has been rated as problematic. This issue affects some unknown processing in the library VIRAGTLT.sys of the component IoControlCode Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 9.5 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-222875.	2023-03-13	5.5	CVE-2023-1369 MISC MISC MISC MISC MISC
microsoft — office_for_android	Office for Android Spoofing Vulnerability	2023-03-14	5.5	CVE-2023-23391 MISC
microsoft — multiple_products	Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability	2023-03-14	5.5	CVE-2023-23394 MISC
microsoft — multiple_products	Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability	2023-03-14	5.5	CVE-2023-23409 MISC
openharmony — openharmony	Communication Wi-Fi subsystem within OpenHarmony-v3.1.4 and prior versions, OpenHarmony-v3.0.7 and prior versions has a null pointer reference vulnerability which local attackers can exploit this vulnerability to cause the current application to crash.	2023-03-10	5.5	CVE-2023-24465 MISC
microsoft — multiple_products	Windows Secure Channel Denial of Service Vulnerability	2023-03-14	5.5	CVE-2023-24862 MISC
microsoft — onedrive_for_android	Microsoft OneDrive for Android Information Disclosure Vulnerability	2023-03-14	5.5	CVE-2023-24882 MISC
microsoft — onedrive_for_android	Microsoft OneDrive for Android Information Disclosure Vulnerability	2023-03-14	5.5	CVE-2023-24923 MISC
openharmony — openharmony	The bundle management subsystem within OpenHarmony-v3.1.4 and prior versions has a null pointer reference vulnerability which local attackers can exploit this vulnerability to cause a DoS attack to the system when installing a malicious HAP package.	2023-03-10	5.5	CVE-2023-25947 MISC
radare — radare2	radare2 v5.8.3 was discovered to contain a segmentation fault via the component wasm_dis at p/wasm/wasm.c.	2023-03-10	5.5	CVE-2023-27114 MISC MISC
webassembly — webassembly	WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::cat_compute_size.	2023-03-10	5.5	CVE-2023-27115 MISC MISC
webassembly — webassembly	WebAssembly v1.0.29 discovered to contain an abort in CWriter::MangleType.	2023-03-10	5.5	CVE-2023-27116 MISC
webassembly — webassembly	WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::Decompiler::WrapChild.	2023-03-10	5.5	CVE-2023-27119 MISC
connekthq — ajax_load_more	The WordPress Infinite Scroll WordPress plugin before 5.6.0.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.	2023-03-13	5.4	CVE-2022-4466 MISC
pushlabs — video_background	The Video Background WordPress plugin before 2.7.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks	2023-03-13	5.4	CVE-2022-4652 MISC
themelocation — widgets_for_woocommerce_products_on_elementor	The Widgets for WooCommerce Products on Elementor WordPress plugin before 1.0.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks	2023-03-13	5.4	CVE-2022-4661 MISC
codeermeneer — companion_sitemap_generator	The Companion Sitemap Generator WordPress plugin through 4.5.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.	2023-03-13	5.4	CVE-2023-0066 MISC
client_logo_carousel_project — client_logo_carousel	The Client Logo Carousel WordPress plugin through 3.0.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.	2023-03-13	5.4	CVE-2023-0073 MISC
saas.group — juicer	The Juicer WordPress plugin before 1.11 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks	2023-03-13	5.4	CVE-2023-0172 MISC
wpmanageninja — fluentsmtp	The FluentSMTP WordPress plugin before 2.2.3 does not sanitize or escape email content, making it vulnerable to stored cross-site scripting attacks (XSS) when an administrator views the email logs. This exploit requires other plugins to enable users to send emails with unfiltered HTML.	2023-03-13	5.4	CVE-2023-0219 MISC
campaign_url_builder_project — campaign_url_builder	The Campaign URL Builder WordPress plugin before 1.8.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks	2023-03-13	5.4	CVE-2023-0538 MISC
enhancesoft — osticket	Cross-site Scripting (XSS) – Reflected in GitHub repository osticket/osticket prior to v1.16.6.	2023-03-10	5.4	CVE-2023-1315 MISC CONFIRM
enhancesoft — osticket	Cross-site Scripting (XSS) – Stored in GitHub repository osticket/osticket prior to v1.16.6.	2023-03-10	5.4	CVE-2023-1316 CONFIRM MISC
enhancesoft — osticket	Cross-site Scripting (XSS) – Reflected in GitHub repository osticket/osticket prior to v1.16.6.	2023-03-10	5.4	CVE-2023-1317 CONFIRM MISC
enhancesoft — osticket	Cross-site Scripting (XSS) – Generic in GitHub repository osticket/osticket prior to v1.16.6.	2023-03-10	5.4	CVE-2023-1318 MISC CONFIRM
computer_parts_sales_and_inventory_system_project — computer_parts_sales_and_inventory_system	A vulnerability, which was classified as problematic, was found in SourceCodester Computer Parts Sales and Inventory System 1.0. Affected is an unknown function of the component Add User Account. The manipulation of the argument username leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-222870 is the identifier assigned to this vulnerability.	2023-03-13	5.4	CVE-2023-1363 MISC MISC MISC
avantfax — avantfax	A Stored Cross-Site Scripting (XSS) vulnerability exists in AvantFAX 3.3.7. An authenticated low privilege user can inject arbitrary Javascript into their e-mail address which is executed when an administrator logs into AvantFAX to view the admin dashboard. This may result in stealing an administrator’s session cookie and hijacking their session.	2023-03-10	5.4	CVE-2023-23326 MISC MISC
microsoft — dynamics_365	Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability	2023-03-14	5.4	CVE-2023-24879 MISC
microsoft — multiple_products	Windows SmartScreen Security Feature Bypass Vulnerability	2023-03-14	5.4	CVE-2023-24880 MISC
microsoft — dynamics_365	Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability	2023-03-14	5.4	CVE-2023-24891 MISC
microsoft — dynamics_365	Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability	2023-03-14	5.4	CVE-2023-24919 MISC
microsoft — dynamics_365	Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability	2023-03-14	5.4	CVE-2023-24920 MISC
microsoft — dynamics_365	Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability	2023-03-14	5.4	CVE-2023-24921 MISC
totaljs — openplatform	A stored cross-site scripting (XSS) vulnerability in TotalJS OpenPlatform commit b80b09d allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the account name field.	2023-03-14	5.4	CVE-2023-27069 MISC MISC
totaljs — openplatform	A stored cross-site scripting (XSS) vulnerability in TotalJS OpenPlatform commit b80b09d allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the platform name field.	2023-03-14	5.4	CVE-2023-27070 MISC MISC
jenkins — jenkins	Jenkins 2.270 through 2.393 (both inclusive), LTS 2.277.1 through 2.375.3 (both inclusive) does not escape the Jenkins version a plugin depends on when rendering the error message stating its incompatibility with the current version of Jenkins, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide plugins to the configured update sites and have this message shown by Jenkins instances.	2023-03-10	5.4	CVE-2023-27898 MISC
jenkins — update-center2	Jenkins update-center2 3.13 and 3.14 renders the required Jenkins core version on plugin download index pages without sanitization, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide a plugin for hosting.	2023-03-10	5.4	CVE-2023-27905 MISC
ibexa — ez_platform_kernel	An issue was discovered in eZ Publish Ibexa Kernel before 7.5.15.1. The /user/sessions endpoint can be abused to determine account existence.	2023-03-12	5.3	CVE-2021-46876 MISC MISC
akuvox — e11_firmware	The Akuvox E11 Media Access Control (MAC) address, a primary identifier, combined with the Akuvox E11 IP address, could allow an attacker to identify the device on the Akuvox cloud.	2023-03-13	5.3	CVE-2023-0347 MISC
hashicorp — nomad	HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.5.0 did not correctly enforce deny policies applied to a workload’s variables. Fixed in 1.4.6 and 1.5.1.	2023-03-14	5.3	CVE-2023-1296 MISC
sap — netweaver_application_server_java	SAP NetWeaver Application Server Java for Classload Service – version 7.50, does not perform any authentication checks for functionalities that require user identity, resulting in escalation of privileges. This failure has a low impact on confidentiality of the data such that an unassigned user can read non-sensitive server data.	2023-03-14	5.3	CVE-2023-24526 MISC MISC
apache — airflow	Generation of Error Message Containing Sensitive Information vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.5.2.	2023-03-15	5.3	CVE-2023-25695 MISC MISC
roxy-wi — roxy-wi	Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. Versions prior to 6.3.5.0 have a limited path traversal vulnerability. An SSH key can be saved into an unintended location, for example the `/tmp` folder using a payload `../../../../../tmp/test111_dev`. This issue has been fixed in version 6.3.5.0.	2023-03-15	5.3	CVE-2023-25804 MISC
jenkins — jenkins	Jenkins 2.393 and earlier, LTS 2.375.3 and earlier prints an error stack trace on agent-related pages when agent connections are broken, potentially revealing information about Jenkins configuration that is otherwise inaccessible to attackers.	2023-03-10	5.3	CVE-2023-27904 MISC
employee_payslip_generator_system_project — employee_payslip_generator_system	A vulnerability was found in SourceCodester Employee Payslip Generator with Sending Mail 1.2.0 and classified as critical. This issue affects some unknown processing of the file classes/Users.php?f=save of the component New User Creation. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-222863.	2023-03-12	4.9	CVE-2023-1360 MISC MISC MISC
avantfax — avantfax	An Information Disclosure vulnerability exists in AvantFAX 3.3.7. Backups of the AvantFAX sent/received faxes, and database backups are stored using the current date as the filename and hosted on the web server without access controls.	2023-03-10	4.9	CVE-2023-23327 MISC MISC
sap — abap_platform	Due to insufficient input sanitization, SAP ABAP – versions 751, 753, 753, 754, 756, 757, 791, allows an authenticated high privileged user to alter the current session of the user by injecting the malicious database queries over the network and gain access to the unintended data. This may lead to a high impact on the confidentiality and no impact on the availability and integrity of the application.	2023-03-14	4.9	CVE-2023-25615 MISC MISC
flarum — flarum	flarum is a forum software package for building communities. In versions prior to 1.7.0 an admin account which has already been compromised by an attacker may use a vulnerability in the `LESS` parser which can be exploited to read sensitive files on the server through the use of path traversal techniques. An attacker can achieve this by providing an absolute path to a sensitive file in the custom `LESS` setting, which the `LESS` parser will then read. For example, an attacker could use the following code to read the contents of the `/etc/passwd` file on a linux machine. The scope of what files are vulnerable will depend on the permissions given to the running flarum process. The vulnerability has been addressed in version `1.7`. Users should upgrade to this version to mitigate the vulnerability. Users unable to upgrade may mitigate the vulnerability by ensuring that their admin accounts are secured with strong passwords and follow other best practices for account security. Additionally, users can limit the exposure of sensitive files on the server by implementing appropriate file permissions and access controls at the operating system level.	2023-03-10	4.9	CVE-2023-27577 MISC MISC
jetbackup — jetbackup	Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in JetBackup JetBackup – WP Backup, Migrate & Restore plugin <= 1.6.9.0 versions.	2023-03-15	4.8	CVE-2022-34148 MISC
afsanalytics — afs_analytics	Stored Cross-site Scripting (XSS) vulnerability in AFS Analytics plugin <= 4.18 versions.	2023-03-15	4.8	CVE-2022-37402 MISC
ip_vault_-_wp_firewall_project — ip_vault_-_wp_firewall	Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in Paul C. Schroeder IP Vault – WP Firewall plugin <= 1.1 versions.	2023-03-14	4.8	CVE-2022-47171 MISC
kibokolabs — namaste\!_lms	The Namaste! LMS WordPress plugin before 2.6 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).	2023-03-13	4.8	CVE-2023-0844 MISC
pimcore — pimcore	Cross-site Scripting (XSS) – Reflected in GitHub repository pimcore/pimcore prior to 10.5.19.	2023-03-10	4.8	CVE-2023-1312 CONFIRM MISC
enhancesoft — osticket	Cross-site Scripting (XSS) – Stored in GitHub repository osticket/osticket prior to v1.16.6.	2023-03-10	4.8	CVE-2023-1319 MISC CONFIRM
gadget_works_online_ordering_system_project — gadget_works_online_ordering_system	A vulnerability has been found in SourceCodester Gadget Works Online Ordering System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /philosophy/admin/user/controller.php?action=add of the component Add New User. The manipulation of the argument U_NAME leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-222862 is the identifier assigned to this vulnerability.	2023-03-12	4.8	CVE-2023-1359 MISC MISC MISC
solidres — solidres	The Solidres plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘currency_name’ parameter in versions up to, and including, 0.9.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with administrator privileges to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.	2023-03-13	4.8	CVE-2023-1374 MISC MISC MISC
s-mall-ssm_project — s-mall-ssm	Cross site scripting (XSS) vulnerability in xenv S-mall-ssm thru commit 3d9e77f7d80289a30f67aaba1ae73e375d33ef71 on Feb 17, 2020, allows local attackers to execute arbitrary code via the evaluate button.	2023-03-15	4.8	CVE-2023-26912 MISC
halo — halo	An arbitrary file upload vulnerability in Halo up to v1.6.1 allows attackers to execute arbitrary code via a crafted .md file.	2023-03-10	4.8	CVE-2023-27164 MISC MISC MISC
microsoft — azure_hdinsights	Azure Apache Ambari Spoofing Vulnerability	2023-03-14	4.5	CVE-2023-23408 MISC
nvidia — cuda_toolkit	NVIDIA CUDA Toolkit SDK contains a vulnerability in cuobjdump, where a local user running the tool against a malicious binary may cause an out-of-bounds read, which may result in a limited denial of service and limited information disclosure.	2023-03-10	4.4	CVE-2023-0193 MISC
jenkins — jenkins	Jenkins 2.393 and earlier, LTS 2.375.3 and earlier creates a temporary file in the default temporary directory with the default permissions for newly created files when uploading a file parameter through the CLI, potentially allowing attackers with access to the Jenkins controller file system to read and write the file before it is used.	2023-03-10	4.4	CVE-2023-27903 MISC
rapidload — power-up_for_autoptimize	The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the clear_page_cache function in versions up to, and including, 1.7.1. This makes it possible for authenticated attackers with subscriber-level access to delete the plugin’s cache.	2023-03-10	4.3	CVE-2023-1333 MISC MISC
rapidload — power-up_for_autoptimize	The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to unauthorized cache modification due to a missing capability check on the queue_posts function in versions up to, and including, 1.7.1. This makes it possible for authenticated attackers with subscriber-level access to modify the plugin’s cache.	2023-03-10	4.3	CVE-2023-1334 MISC MISC
rapidload — power-up_for_autoptimize	The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to unauthorized plugin settings update due to a missing capability check on the ucss_connect function in versions up to, and including, 1.7.1. This makes it possible for authenticated attackers with subscriber-level access to connect a new license key to the site.	2023-03-10	4.3	CVE-2023-1335 MISC MISC
rapidload — power-up_for_autoptimize	The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to unauthorized settings update due to a missing capability check on the ajax_deactivate function in versions up to, and including, 1.7.1. This makes it possible for authenticated attackers with subscriber-level access to disable caching.	2023-03-10	4.3	CVE-2023-1336 MISC MISC
rapidload — power-up_for_autoptimize	The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check on the clear_uucss_logs function in versions up to, and including, 1.7.1. This makes it possible for authenticated attackers with subscriber-level access to delete plugin log files.	2023-03-10	4.3	CVE-2023-1337 MISC MISC
rapidload — power-up_for_autoptimize	The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to unauthorized cache modification due to a missing capability check on the attach_rule function in versions up to, and including, 1.7.1. This makes it possible for authenticated attackers with subscriber-level access to modify cache rules.	2023-03-10	4.3	CVE-2023-1338 MISC MISC
rapidload — power-up_for_autoptimize	The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to unauthorized settings update due to a missing capability check on the uucss_update_rule function in versions up to, and including, 1.7.1. This makes it possible for authenticated attackers with subscriber-level access to update caching rules.	2023-03-10	4.3	CVE-2023-1339 MISC MISC
rapidload — power-up_for_autoptimize	The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on the clear_uucss_logs function. This makes it possible for unauthenticated attackers to clear plugin logs via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.	2023-03-10	4.3	CVE-2023-1340 MISC MISC
rapidload — power-up_for_autoptimize	The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on the ajax_deactivate function. This makes it possible for unauthenticated attackers to turn off caching via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.	2023-03-10	4.3	CVE-2023-1341 MISC MISC
rapidload — power-up_for_autoptimize	The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on the ucss_connect function. This makes it possible for unauthenticated attackers to connect the site to a new license key via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.	2023-03-10	4.3	CVE-2023-1342 MISC MISC
rapidload — power-up_for_autoptimize	The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on the attach_rule function. This makes it possible for unauthenticated attackers to modify the plugin’s cache via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.	2023-03-10	4.3	CVE-2023-1343 MISC MISC
rapidload — power-up_for_autoptimize	The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on the uucss_update_rule function. This makes it possible for unauthenticated attackers to modify the plugin’s cache via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.	2023-03-10	4.3	CVE-2023-1344 MISC MISC
rapidload — power-up_for_autoptimize	The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on the queue_posts function. This makes it possible for unauthenticated attackers to modify the plugin’s cache via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.	2023-03-10	4.3	CVE-2023-1345 MISC MISC
rapidload — power-up_for_autoptimize	The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on the clear_page_cache function. This makes it possible for unauthenticated attackers to clear the plugin’s cache via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.	2023-03-10	4.3	CVE-2023-1346 MISC MISC
pixelyoursite — pixelyoursite	Cross-Site Request Forgery (CSRF) vulnerability in PixelYourSite PixelYourSite – Your smart PIXEL (TAG) Manager plugin <= 9.3.0 versions.	2023-03-13	4.3	CVE-2023-22700 MISC
a2hosting — a2_optimized	Cross-Site Request Forgery (CSRF) vulnerability in A2 Hosting A2 Optimized WP plugin <= 3.0.4 versions.	2023-03-13	4.3	CVE-2023-23711 MISC
siemens — ruggedcom_crossbow	A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3). The client query handler of the affected application fails to check for proper permissions for specific read queries. This could allow authenticated remote attackers to access data they are not authorized for.	2023-03-14	4.3	CVE-2023-27462 MISC
jenkins — jenkins	Jenkins 2.393 and earlier, LTS 2.375.3 and earlier shows temporary directories related to job workspaces, which allows attackers with Item/Workspace permission to access their contents.	2023-03-10	4.3	CVE-2023-27902 MISC

Back to top

 

Low Vulnerabilities

Primary Vendor — Product	Description	Published	CVSS Score	Source & Patch Info
easyappointments — easyappointments	Code Injection in GitHub repository alextselegidis/easyappointments prior to 1.5.0.	2023-03-13	3.8	CVE-2023-1367 CONFIRM MISC
ibexa — commerce	An issue was discovered in eZ Platform Ibexa Kernel before 1.3.19. It allows determining account existence via a timing attack.	2023-03-12	3.7	CVE-2022-48366 MISC MISC MISC
ibm — robotic_process_automation_as_a_service	IBM Robotic Process Automation 21.0.1 through 21.0.7 and 23.0.0 through 23.0.1 could allow a user with physical access to the system due to session tokens for not being invalidated after a password reset. IBM X-Force ID: 243710.	2023-03-15	3.2	CVE-2023-22591 MISC MISC
microsoft — multiple_products	Microsoft SharePoint Server Spoofing Vulnerability	2023-03-14	3.1	CVE-2023-23395 MISC

Back to top

 

Severity Not Yet Assigned

Primary Vendor — Product	Description	Published	CVSS Score	Source & Patch Info
markdown_edit — markdown_edit	Cross Site Scripting vulnerability found in Markdown Edit allows a remote attacker to execute arbitrary code via the edit parameter of the webpage.	2023-03-16	not yet calculated	CVE-2020-19947 MISC
depositgame — depositgame	An issue found in DepositGame v.1.0 allows an attacker to gain sensitive information via the GetBonusWithdraw and withdraw functions.	2023-03-16	not yet calculated	CVE-2020-22647 MISC
ibm — financial_transaction_manager	IBM Financial Transaction Manager for High Value Payments for Multi-Platform 3.2.0 through 3.2.10 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 183329.	2023-03-15	not yet calculated	CVE-2020-4556 MISC MISC
dell — multiple_products	Dell EMC Unisphere for PowerMax versions before 9.1.0.27, Dell EMC Unisphere for PowerMax Virtual Appliance versions before 9.1.0.27, and PowerMax OS Release 5978 contain an improper certificate validation vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and intercepting the victim’s traffic to view or modify a victim’s data in transit.	2023-03-17	not yet calculated	CVE-2021-21548 MISC
uwamp.exe — uwamp.exe	An issue found in UwAmp v.1.1, 1.2, 1.3, 2.0, 2.1, 2.2, 2.2.1, 3.0.0, 3.0.1, 3.0.2 allows a remote attacker to execute arbitrary code via a crafted DLL.	2023-03-16	not yet calculated	CVE-2021-31637 MISC
wordpress — wordpress	Unauth. Stored Cross-Site Scripting (XSS) vulnerability in WPMU DEV Forminator – Contact Form, Payment Form & Custom Form Builder plugin <= 1.14.11 versions.	2023-03-16	not yet calculated	CVE-2021-36821 MISC
pev — pev	A Buffer Overflow vulnerabilityexists in Pev 0.81 via the pe_exports function from exports.c.. The array offsets_to_Names is dynamically allocated on the stack using exp->NumberOfFunctions as its size. However, the loop uses exp->NumberOfNames to iterate over it and set its components value. Therefore, the loop code assumes that exp->NumberOfFunctions is greater than ordinal at each iteration. This can lead to arbitrary code execution.	2023-03-13	not yet calculated	CVE-2021-45423 MISC
jackson-databind — jackson-databind	jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization.	2023-03-18	not yet calculated	CVE-2021-46877 MISC MISC
octopus_deploy — octopus_server	In affected versions of Octopus Deploy it is possible for a user to view Tagsets without being explicitly assigned permissions to view these items	2023-03-13	not yet calculated	CVE-2022-2258 MISC
octopus_deploy — octopus_server	In affected versions of Octopus Deploy it is possible for a user to view Workerpools without being explicitly assigned permissions to view these items	2023-03-13	not yet calculated	CVE-2022-2259 MISC
abb — multiple_products	Use of Insufficiently Random Values vulnerability in ABB Pulsar Plus System Controller NE843_S, ABB Infinity DC Power Plant.This issue affects Pulsar Plus System Controller NE843_S : comcode 150042936; Infinity DC Power Plant: H5692448 G104 G842 G224L G630-4 G451C(2) G461(2) – comcode 150047415.	2023-03-16	not yet calculated	CVE-2022-26080 MISC
dell — bios_for_poweredge_and_precision	Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.	2023-03-16	not yet calculated	CVE-2022-34406 MISC
dell — bios_for_poweredge_and_precision	Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.	2023-03-16	not yet calculated	CVE-2022-34407 MISC
dell — bios_for_poweredge_and_precision	Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.	2023-03-16	not yet calculated	CVE-2022-34408 MISC
dell — bios_for_poweredge_and_precision	Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.	2023-03-16	not yet calculated	CVE-2022-34409 MISC
dell — bios_for_poweredge_and_precision	Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.	2023-03-16	not yet calculated	CVE-2022-34410 MISC
dell — bios_for_poweredge_and_precision	Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.	2023-03-16	not yet calculated	CVE-2022-34411 MISC
dell — bios_for_poweredge_and_precision	Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.	2023-03-16	not yet calculated	CVE-2022-34412 MISC
dell — bios_for_poweredge_and_precision	Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.	2023-03-16	not yet calculated	CVE-2022-34413 MISC
dell — bios_for_poweredge_and_precision	Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.	2023-03-16	not yet calculated	CVE-2022-34414 MISC
dell — bios_for_poweredge_and_precision	Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.	2023-03-16	not yet calculated	CVE-2022-34415 MISC
dell — bios_for_poweredge_and_precision	Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.	2023-03-16	not yet calculated	CVE-2022-34416 MISC
dell — bios_for_poweredge_and_precision	Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.	2023-03-16	not yet calculated	CVE-2022-34417 MISC
dell — bios_for_poweredge_and_precision	Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.	2023-03-16	not yet calculated	CVE-2022-34418 MISC
dell — bios_for_poweredge_and_precision	Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.	2023-03-16	not yet calculated	CVE-2022-34419 MISC
dell — bios_for_poweredge_and_precision	Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.	2023-03-16	not yet calculated	CVE-2022-34420 MISC
dell — bios_for_poweredge_and_precision	Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.	2023-03-16	not yet calculated	CVE-2022-34421 MISC
dell — bios_for_poweredge_and_precision	Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.	2023-03-16	not yet calculated	CVE-2022-34422 MISC
dell — bios_for_poweredge_and_precision	Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. A local malicious user with high Privileges may potentially exploit this vulnerability to perform arbitrary code execution or cause denial of service.	2023-03-16	not yet calculated	CVE-2022-34423 MISC
wordpress — wordpress	Cross-Site Request Forgery (CSRF) vulnerability in Social Login WP plugin <= 5.0.0.0 versions.	2023-03-16	not yet calculated	CVE-2022-38063 MISC
wordpress — wordpress	Stored Cross-Site Scripting (XSS) vulnerability in ThemeKraft Post Form – Registration Form – Profile Form for User Profiles and Content Forms for User Submissions plugin <= 2.7.5 versions.	2023-03-16	not yet calculated	CVE-2022-38971 MISC
octopus_deploy — octopus_server	In affected versions of Octopus Deploy it is possible for a user to introduce code via offline package creation	2023-03-16	not yet calculated	CVE-2022-4009 MISC
wordpress — wordpress	Cross-Site Scripting (XSS) vulnerability in Dario Curvino Yasr – Yet Another Stars Rating plugin <= 3.1.2 versions.	2023-03-16	not yet calculated	CVE-2022-40699 MISC
wordpress — wordpress	Stored Cross-Site Scripting (XSS) vulnerability in John West Slideshow SE plugin <= 2.5.5 versions.	2023-03-16	not yet calculated	CVE-2022-41554 MISC
tenable — multiple_products	A vulnerability was reported where through modifying the scan variables, an authenticated user in Tenable products, that has Scan Policy Configuration roles, could manipulate audit policy variables to execute arbitrary commands on credentialed scan targets.	2023-03-15	not yet calculated	CVE-2022-4313 MISC
ghost — node-sqlite3	A code execution vulnerability exists in the Statement Bindings functionality of Ghost Foundation node-sqlite3 5.1.1. A specially-crafted Javascript file can lead to arbitrary code execution. An attacker can provide malicious input to trigger this vulnerability.	2023-03-16	not yet calculated	CVE-2022-43441 MISC MISC
wordpress — wordpress	Stored Cross-Site Scripting (XSS) vulnerability in John West Slideshow SE plugin <= 2.5.5 versions.	2023-03-17	not yet calculated	CVE-2022-43461 MISC
eip_stack_group_opener — eip_stack_group_opener	An out-of-bounds write vulnerability exists in the GetAttributeList attribute_count_request functionality of EIP Stack Group OpENer development commit 58ee13c. A specially crafted EtherNet/IP request can lead to an out-of-bounds write, potentially causing the server to crash or allow for remote code execution. An attacker can send a series of EtherNet/IP requests to trigger this vulnerability.	2023-03-16	not yet calculated	CVE-2022-43604 MISC
eip_stack_group_opener — eip_stack_group_opener	An out-of-bounds write vulnerability exists in the SetAttributeList attribute_count_request functionality of EIP Stack Group OpENer development commit 58ee13c. A specially crafted EtherNet/IP request can lead to an out of bounds write, potentially causing the server to crash or allow for remote code execution. An attacker can send a series of EtherNet/IP requests to trigger this vulnerability.	2023-03-16	not yet calculated	CVE-2022-43605 MISC
eip_stack_group_opener — eip_stack_group_opener	A use-of-uninitialized-pointer vulnerability exists in the Forward Open connection_management_entry functionality of EIP Stack Group OpENer development commit 58ee13c. A specially-crafted EtherNet/IP request can lead to use of a null pointer, causing the server to crash. An attacker can send a series of EtherNet/IP requests to trigger this vulnerability.	2023-03-16	not yet calculated	CVE-2022-43606 MISC
suse — opensuse_factory	An Improper Handling of Exceptional Conditions vulnerability in obs-service-go_modules of openSUSE Factory allows attackers that can influence the call to the service to delete files and directories on the system of the victim. This issue affects: SUSE openSUSE Factory obs-service-go_modules versions prior to 0.6.1.	2023-03-15	not yet calculated	CVE-2022-45155 CONFIRM
wordpress — wordpress	Stored Cross-Site Scripting (XSS) vulnerability in Fabian von Allmen WP Calendar plugin <= 1.5.3 versions.	2023-03-17	not yet calculated	CVE-2022-45814 MISC
wordpress — wordpress	Cross-Site Scripting (XSS) vulnerability in Erin Garscadden GC Testimonials plugin <= 1.3.2 versions.	2023-03-17	not yet calculated	CVE-2022-45817 MISC
wordpress — wordpress	Cross-Site Request Forgery (CSRF) vulnerability in Obox Themes Launchpad – Coming Soon & Maintenance Mode plugin <= 1.0.13 versions.	2023-03-17	not yet calculated	CVE-2022-46854 MISC
wordpress — wordpress	Cross-Site Request Forgery (CSRF) vulnerability in Chasil Universal Star Rating plugin <= 2.1.0 version.	2023-03-17	not yet calculated	CVE-2022-46867 MISC
rockwell_automation — modbus_tcp_server_add_on_instructions	Rockwell Automation Modbus TCP Server AOI prior to 2.04.00 is vulnerable to an unauthorized user sending a malformed message that could cause the controller to respond with a copy of the most recent response to the last valid request. If exploited, an unauthorized user could read the connected device’s Modbus TCP Server AOI information.	2023-03-17	not yet calculated	CVE-2023-0027 MISC
eclipse_foundation — business_intelligence_reporting_tool	In Eclipse BIRT, starting from version 2.6.2, the default configuration allowed to retrieve a report from the same host using an absolute HTTP path for the report parameter (e.g. __report=http://xyz.com/report.rptdesign). If the host indicated in the __report parameter matched the HTTP Host header value, the report would be retrieved. However, the Host header can be tampered with on some configurations where no virtual hosts are put in place (e.g. in the default configuration of Apache Tomcat) or when the default host points to the BIRT server. This vulnerability was patched on Eclipse BIRT 4.13.	2023-03-15	not yet calculated	CVE-2023-0100 CONFIRM
general_electric_digital — proficy_ifix	GE Digital Proficy iFIX 2022, GE Digital Proficy iFIX v6.1, and GE Digital Proficy iFIX v6.5 are vulnerable to code injection, which may allow an attacker to insert malicious configuration files in the expected web server execution path and gain full control of the HMI software.	2023-03-16	not yet calculated	CVE-2023-0598 MISC MISC
omron — multiple_products	Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they could overwrite the password. This may lead to disabling UM protections or setting a non-ASCII password (non-keyboard characters) and preventing an engineer from viewing or modifying the user program.	2023-03-16	not yet calculated	CVE-2023-0811 MISC MISC
steptools — v18sp1_ifcmesh_library	STEPTools v18SP1 ifcmesh library (v18.1) is affected due to a null pointer dereference, which could allow an attacker to deny application usage when reading a specially constructed file, resulting in an application crash.	2023-03-13	not yet calculated	CVE-2023-0973 MISC
utarit_information_technologies — persolus	Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in Utarit Information Technologies Persolus allows SQL Injection. This issue affects Persolus: before 2.03.93.	2023-03-17	not yet calculated	CVE-2023-1152 MISC
wordpress — wordpress	The Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the full name value in versions up to, and including, 21.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.	2023-03-17	not yet calculated	CVE-2023-1172 MISC MISC
aveva — plant_scada/telemetry_server	The listed versions of AVEVA Plant SCADA and AVEVA Telemetry Server are vulnerable to an improper authorization exploit which could allow an unauthenticated user to remotely read data, cause denial of service, and tamper with alarm states.	2023-03-16	not yet calculated	CVE-2023-1256 MISC
netgear — rax30_(ax2400)	Netgear RAX30 (AX2400), prior to version 1.0.6.74, was affected by an authentication bypass vulnerability, allowing an unauthenticated attacker to gain administrative access to the device’s web management interface by resetting the admin password.	2023-03-14	not yet calculated	CVE-2023-1327 MISC
sourcecodester — friendly_island_pizza_website_and_ordering_system	A vulnerability was found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. It has been rated as critical. This issue affects some unknown processing of the file addmem.php of the component POST Parameter Handler. The manipulation of the argument firstname leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223127.	2023-03-15	not yet calculated	CVE-2023-1379 MISC MISC MISC
tp-link — archer_ax21_(ax1800)_firmware	TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability in the country form of the /cgi-bin/luci;stok=/locale endpoint on the web management interface. Specifically, the country parameter of the write operation was not sanitized before being used in a call to popen(), allowing an unauthenticated attacker to inject commands, which would be run as root, with a simple POST request.	2023-03-15	not yet calculated	CVE-2023-1389 MISC
linux — kernel	A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipc_link_xmit() hits an unknown state while attempting to parse SKBs, which are not in the queue. Sending two small UDP packets to a system with a UDP bearer results in the CPU utilization for the system to instantly spike to 100%, causing a denial of service condition.	2023-03-16	not yet calculated	CVE-2023-1390 MISC MISC MISC
simple_art_gallery — simple_art_gallery	A vulnerability classified as critical has been found in Simple Art Gallery 1.0. Affected is an unknown function of the file adminHome.php. The manipulation of the argument social_facebook leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223128.	2023-03-15	not yet calculated	CVE-2023-1416 MISC MISC MISC
sourcecodester — friendly_island_pizza_website_and_ordering_system	A vulnerability classified as problematic was found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file cashconfirm.php of the component POST Parameter Handler. The manipulation of the argument transactioncode leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223129 was assigned to this vulnerability.	2023-03-15	not yet calculated	CVE-2023-1418 MISC MISC MISC
mattermost — mattermost	A reflected cross-site scripting vulnerability in the OAuth flow completion endpoints in Mattermost allows an attacker to send AJAX requests on behalf of the victim via sharing a crafted link with a malicious state parameter.	2023-03-15	not yet calculated	CVE-2023-1421 MISC
pimcore — pimcore	Cross-site Scripting (XSS) – Reflected in GitHub repository pimcore/pimcore prior to 10.5.19.	2023-03-16	not yet calculated	CVE-2023-1429 CONFIRM MISC
wordpress — wordpress	The WP Simple Shopping Cart plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.6.3 due to the plugin saving shopping cart data exports in a publicly accessible location (/wp-content/plugins/wordpress-simple-paypal-shopping-cart/includes/admin/). This makes it possible for unauthenticated attackers to view information that should be limited to administrators only and can include data like first name, last name, email, address, IP Address, and more.	2023-03-16	not yet calculated	CVE-2023-1431 MISC MISC
sourcecodester — online_food_ordering_system	A vulnerability was found in SourceCodester Online Food Ordering System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /fos/admin/ajax.php?action=save_settings of the component POST Request Handler. The manipulation leads to improper access controls. The attack may be launched remotely. VDB-223214 is the identifier assigned to this vulnerability.	2023-03-16	not yet calculated	CVE-2023-1432 MISC MISC
sourcecodester — gadget_works_online_ordering_system	A vulnerability was found in SourceCodester Gadget Works Online Ordering System 1.0. It has been classified as problematic. This affects an unknown part of the file admin/products/controller.php?action=add of the component Products Handler. The manipulation of the argument filename leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223215.	2023-03-16	not yet calculated	CVE-2023-1433 MISC MISC MISC
sourcecodester — medicine_tracker_system	A vulnerability, which was classified as critical, has been found in SourceCodester Medicine Tracker System 1.0. This issue affects some unknown processing of the file medicines/view_details.php of the component GET Parameter Handler. The manipulation of the argument GET leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223283.	2023-03-17	not yet calculated	CVE-2023-1439 MISC MISC MISC
sourcecodester — automatic_question_paper_generator_system	A vulnerability, which was classified as critical, was found in SourceCodester Automatic Question Paper Generator System 1.0. Affected is an unknown function of the file users/user/manage_user.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223284.	2023-03-17	not yet calculated	CVE-2023-1440 MISC MISC MISC
sourcecodester — automatic_question_paper_generator_system	A vulnerability has been found in SourceCodester Automatic Question Paper Generator System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin/courses/view_course.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223285 was assigned to this vulnerability.	2023-03-17	not yet calculated	CVE-2023-1441 MISC MISC MISC
qykcms — qykcms	A vulnerability was found in Meizhou Qingyunke QYKCMS 4.3.0. It has been classified as problematic. This affects an unknown part of the file /admin_system/api.php of the component Update Handler. The manipulation of the argument downurl leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223287.	2023-03-17	not yet calculated	CVE-2023-1442 MISC MISC MISC
filseclab — twister_antivirus_8	A vulnerability was found in Filseclab Twister Antivirus 8. It has been declared as problematic. This vulnerability affects unknown code in the library fildds.sys of the component IoControlCode Handler. The manipulation leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223288.	2023-03-17	not yet calculated	CVE-2023-1443 MISC MISC MISC MISC
filseclab — twister_antivirus_8	A vulnerability was found in Filseclab Twister Antivirus 8. It has been rated as critical. This issue affects some unknown processing in the library fildds.sys of the component IoControlCode Handler. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223289 was assigned to this vulnerability.	2023-03-17	not yet calculated	CVE-2023-1444 MISC MISC MISC MISC
filseclab — twister_antivirus_8	A vulnerability classified as problematic has been found in Filseclab Twister Antivirus 8. Affected is an unknown function in the library fildds.sys of the component IoControlCode Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. VDB-223290 is the identifier assigned to this vulnerability.	2023-03-17	not yet calculated	CVE-2023-1445 MISC MISC MISC MISC
watchdog — anti-virus	A vulnerability classified as problematic was found in Watchdog Anti-Virus 1.4.214.0. Affected by this vulnerability is an unknown functionality in the library wsdk-driver.sys of the component IoControlCode Handler. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223291.	2023-03-17	not yet calculated	CVE-2023-1446 MISC MISC MISC MISC
sourcecodester — medicine_tracker_system	A vulnerability, which was classified as problematic, has been found in SourceCodester Medicine Tracker System 1.0. Affected by this issue is some unknown functionality of the file app/?page=medicines/manage_medicine.They. The manipulation of the argument name/description with the input <script>alert(‘2’)</script> leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-223292.	2023-03-17	not yet calculated	CVE-2023-1447 MISC MISC
gpac — gpac	A vulnerability, which was classified as problematic, was found in GPAC 2.3-DEV-rev35-gbbca86917-master. This affects the function gf_m2ts_process_sdt of the file media_tools/mpegts.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The identifier VDB-223293 was assigned to this vulnerability.	2023-03-17	not yet calculated	CVE-2023-1448 MISC MISC MISC MISC
gpac — gpac	A vulnerability has been found in GPAC 2.3-DEV-rev35-gbbca86917-master and classified as problematic. This vulnerability affects the function gf_av1_reset_state of the file media_tools/av_parsers.c. The manipulation leads to double free. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. VDB-223294 is the identifier assigned to this vulnerability.	2023-03-17	not yet calculated	CVE-2023-1449 MISC MISC MISC MISC
mp4v2_trackdump — mp4v2_trackdump	A vulnerability was found in MP4v2 2.1.2 and classified as problematic. This issue affects the function DumpTrack of the file mp4trackdump.cpp. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223295.	2023-03-17	not yet calculated	CVE-2023-1450 MISC MISC MISC MISC
mp4v2_trackdump — mp4v2_trackdump	A vulnerability was found in MP4v2 2.1.2. It has been classified as problematic. Affected is the function mp4v2::impl::MP4Track::GetSampleFileOffset of the file mp4track.cpp. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223296.	2023-03-17	not yet calculated	CVE-2023-1451 MISC MISC MISC MISC
gpac — gpac	A vulnerability was found in GPAC 2.3-DEV-rev35-gbbca86917-master. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file filters/load_text.c. The manipulation leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The identifier VDB-223297 was assigned to this vulnerability.	2023-03-17	not yet calculated	CVE-2023-1452 MISC MISC MISC MISC
watchdog — watchdog_antivirus	A vulnerability was found in Watchdog Anti-Virus 1.4.214.0. It has been rated as critical. Affected by this issue is some unknown functionality in the library wsdk-driver.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. VDB-223298 is the identifier assigned to this vulnerability.	2023-03-17	not yet calculated	CVE-2023-1453 MISC MISC MISC MISC
jeecg_boot_sqli — jeecg_boot_sqli	A vulnerability classified as critical has been found in jeecg-boot 3.5.0. This affects an unknown part of the file jmreport/qurestSql. The manipulation of the argument apiSelectId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223299.	2023-03-17	not yet calculated	CVE-2023-1454 MISC MISC MISC
sourcecodester — online_pizza_ordering_system	A vulnerability classified as critical was found in SourceCodester Online Pizza Ordering System 1.0. This vulnerability affects unknown code of the file admin/ajax.php?action=login2 of the component Login Page. The manipulation of the argument email with the input abc%40qq.com’ AND (SELECT 9110 FROM (SELECT(SLEEP(5)))XSlc) AND ‘jFNl’=’jFNl leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223300.	2023-03-17	not yet calculated	CVE-2023-1455 MISC MISC
sourcecodester — canteen_management_system	A vulnerability was found in SourceCodester Canteen Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file changeUsername.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223304.	2023-03-17	not yet calculated	CVE-2023-1459 MISC MISC MISC
sourcecoderster — online_pizza_ordering_system	A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file admin/ajax.php?action=save_user of the component Password Change Handler. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The identifier VDB-223305 was assigned to this vulnerability.	2023-03-17	not yet calculated	CVE-2023-1460 MISC MISC
sourcecodester — canteen_management_system	A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been declared as critical. This vulnerability affects the function query of the file createCategories.php. The manipulation of the argument categoriesStatus leads to sql injection. The attack can be initiated remotely. VDB-223306 is the identifier assigned to this vulnerability.	2023-03-17	not yet calculated	CVE-2023-1461 MISC MISC MISC
teampass — teampass	Improper Authorization in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23.	2023-03-17	not yet calculated	CVE-2023-1463 CONFIRM MISC
sourcecodester — medicine_tracker_system	A vulnerability, which was classified as critical, was found in SourceCodester Medicine Tracker System 1.0. This affects an unknown part of the file Users.php?f=save_user. The manipulation of the argument firstname/middlename/lastname/username/password leads to improper authentication. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-223311.	2023-03-17	not yet calculated	CVE-2023-1464 MISC MISC
sourcecodester — student_study_center_desk_management_system	A vulnerability was found in SourceCodester Student Study Center Desk Management System 1.0. It has been rated as critical. This issue affects the function view_student of the file admin/?page=students/view_student. The manipulation of the argument id with the input 3′ AND (SELECT 2100 FROM (SELECT(SLEEP(5)))FWlC) AND ‘butz’=’butz leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223325 was assigned to this vulnerability.	2023-03-17	not yet calculated	CVE-2023-1466 MISC MISC
sourcecodester — student_study_center_desk_management_system	A vulnerability classified as critical has been found in SourceCodester Student Study Center Desk Management System 1.0. Affected is an unknown function of the file Master.php?f=delete_img of the component POST Parameter Handler. The manipulation of the argument path with the input C%3A%2Ffoo.txt leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-223326 is the identifier assigned to this vulnerability.	2023-03-17	not yet calculated	CVE-2023-1467 MISC MISC
sourcecodester — student_study_center_desk_management_system	A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/?page=reports&date_from=2023-02-17&date_to=2023-03-17 of the component Report Handler. The manipulation of the argument date_from/date_to leads to sql injection. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-223327.	2023-03-17	not yet calculated	CVE-2023-1468 MISC MISC
wordpress — wordpress	The WP Express Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘pec_coupon[code]’ parameter in versions up to, and including, 2.2.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with administrator-level access to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Note: This can potentially be exploited by lower-privileged users if the `Admin Dashboard Access Permission` setting it set for those users to access the dashboard.	2023-03-17	not yet calculated	CVE-2023-1469 MISC MISC
wordpress — wordpress	The eCommerce Product Catalog plugin for WordPress is vulnerable to Stored Cross-Site Scripting via some of its settings parameters in versions up to, and including, 3.3.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.	2023-03-17	not yet calculated	CVE-2023-1470 MISC MISC
wordpress — wordpress	The WP Popup Banners plugin for WordPress is vulnerable to SQL Injection via the ‘banner_id’ parameter in versions up to, and including, 1.2.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers with minimal permissions, such as a subscrber, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.	2023-03-17	not yet calculated	CVE-2023-1471 MISC MISC MISC
wordpress — wordpress	The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to missing or incorrect nonce validation on its AJAX actions. This makes it possible for unauthenticated attackers to invoke those functions, via forged request granted they can trick a site administrator into performing an action such as clicking on a link. Actions include resetting the API key, accessing or deleting log files, and deleting cache among others.	2023-03-17	not yet calculated	CVE-2023-1472 MISC MISC
sourcecodester — automatic_question_paper_generator_system	A vulnerability classified as critical was found in SourceCodester Automatic Question Paper Generator System 1.0. This vulnerability affects unknown code of the file users/question_papers/manage_question_paper.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223336.	2023-03-17	not yet calculated	CVE-2023-1474 MISC MISC MISC
sourcecodester — canteen_management_system	A vulnerability, which was classified as critical, has been found in SourceCodester Canteen Management System 1.0. This issue affects the function query of the file createuser.php. The manipulation of the argument uemail leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223337 was assigned to this vulnerability.	2023-03-17	not yet calculated	CVE-2023-1475 MISC MISC MISC
sourcecodester — monitoring_of_students_cyber_accounts_system	A vulnerability classified as critical has been found in SourceCodester Simple Music Player 1.0. Affected is an unknown function of the file save_music.php. The manipulation of the argument filename leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-223362 is the identifier assigned to this vulnerability.	2023-03-18	not yet calculated	CVE-2023-1479 MISC MISC MISC
sourcecodester — monitoring_of_students_cyber_accounts_system	A vulnerability classified as critical was found in SourceCodester Monitoring of Students Cyber Accounts System 1.0. Affected by this vulnerability is an unknown functionality of the file login.php of the component POST Parameter Handler. The manipulation of the argument un leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223363.	2023-03-18	not yet calculated	CVE-2023-1480 MISC MISC MISC
sourcecodester — monitoring_of_students_cyber_accounts_system	A vulnerability, which was classified as problematic, has been found in SourceCodester Monitoring of Students Cyber Accounts System 1.0. Affected by this issue is some unknown functionality of the file modules/balance/index.php?view=balancelist of the component POST Parameter Handler. The manipulation of the argument id with the input “><script>alert(111)</script> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223364.	2023-03-18	not yet calculated	CVE-2023-1481 MISC MISC MISC
hkcms — hkcms	A vulnerability, which was classified as problematic, was found in HkCms 2.2.4.230206. This affects an unknown part of the file /admin.php/appcenter/local.html?type=addon of the component External Plugin Handler. The manipulation leads to code injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223365 was assigned to this vulnerability.	2023-03-18	not yet calculated	CVE-2023-1482 MISC MISC MISC
xiaobingby — teacms	A vulnerability has been found in XiaoBingBy TeaCMS up to 2.0.2 and classified as critical. This vulnerability affects unknown code of the file /admin/getallarticleinfo. The manipulation of the argument searchInfo leads to sql injection. The attack can be initiated remotely. VDB-223366 is the identifier assigned to this vulnerability.	2023-03-18	not yet calculated	CVE-2023-1483 MISC MISC MISC
xzjie — cms	A vulnerability was found in xzjie cms up to 1.0.3 and classified as critical. This issue affects some unknown processing of the file /api/upload. The manipulation of the argument uploadFile leads to unrestricted upload. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-223367.	2023-03-18	not yet calculated	CVE-2023-1484 MISC MISC MISC
sourcecodester — young_entrepreneur_e-negosyo_system	A vulnerability classified as problematic has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. This affects an unknown part of the file /bsenordering/index.php of the component GET Parameter Handler. The manipulation of the argument category with the input <script>alert(222)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223371.	2023-03-18	not yet calculated	CVE-2023-1485 MISC MISC MISC
lespeed — wisecleaner_wise_force_deleter	A vulnerability classified as problematic was found in Lespeed WiseCleaner Wise Force Deleter 1.5.3.54. This vulnerability affects unknown code in the library WiseUnlock64.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223372.	2023-03-18	not yet calculated	CVE-2023-1486 MISC MISC MISC MISC
lespeed — wisecleaner_wise_system_monitor	A vulnerability, which was classified as problematic, has been found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54. This issue affects some unknown processing in the library WiseHDInfo64.dll of the component IoControlCode Handler. The manipulation leads to denial of service. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-223373 was assigned to this vulnerability.	2023-03-18	not yet calculated	CVE-2023-1487 MISC MISC MISC MISC
lespeed — wisecleaner_wise_system_monitor	A vulnerability, which was classified as problematic, was found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54. Affected is an unknown function in the library WiseHDInfo64.dll of the component IoControlCode Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. VDB-223374 is the identifier assigned to this vulnerability.	2023-03-18	not yet calculated	CVE-2023-1488 MISC MISC MISC MISC
lespeed — wisecleaner_wise_system_monitor	A vulnerability has been found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54 and classified as critical. Affected by this vulnerability is an unknown functionality in the library WiseHDInfo64.dll of the component IoControlCode Handler. The manipulation leads to improper access controls. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223375.	2023-03-18	not yet calculated	CVE-2023-1489 MISC MISC MISC MISC
max_secure — anti_virus_plus	A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1 and classified as critical. Affected by this issue is some unknown functionality in the library SDActMon.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223376.	2023-03-18	not yet calculated	CVE-2023-1490 MISC MISC MISC MISC
max_secure — anti_virus_plus	A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1. It has been classified as critical. This affects an unknown part in the library MaxCryptMon.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier VDB-223377 was assigned to this vulnerability.	2023-03-18	not yet calculated	CVE-2023-1491 MISC MISC MISC MISC
max_secure — anti_virus_plus	A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1. It has been declared as problematic. This vulnerability affects unknown code in the library MaxProc64.sys of the component IoControlCode Handler. The manipulation of the argument SystemBuffer leads to denial of service. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. VDB-223378 is the identifier assigned to this vulnerability.	2023-03-18	not yet calculated	CVE-2023-1492 MISC MISC MISC MISC
max_secure — anti_virus_plus	A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1. It has been rated as problematic. This issue affects some unknown processing in the library MaxProctetor64.sys of the component IoControlCode Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223379.	2023-03-18	not yet calculated	CVE-2023-1493 MISC MISC MISC MISC
ibos — ibos	A vulnerability classified as critical has been found in IBOS 4.5.5. Affected is an unknown function of the file ApiController.php. The manipulation of the argument emailids leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223380.	2023-03-18	not yet calculated	CVE-2023-1494 MISC MISC MISC
samsung_mobile — multiple_mobile_devices	Improper access control vulnerability in Call application prior to SMR Mar-2023 Release 1 allows local attackers to access sensitive information without proper permission.	2023-03-16	not yet calculated	CVE-2023-21449 MISC
samsung_mobile — multiple_mobile_devices	Improper usage of implicit intent in Bluetooth prior to SMR Mar-2023 Release 1 allows attacker to get MAC address of connected device.	2023-03-16	not yet calculated	CVE-2023-21452 MISC
samsung_mobile — multiple_mobile_devices	Improper input validation vulnerability in SoftSim TA prior to SMR Mar-2023 Release 1 allows local attackers access to protected data.	2023-03-16	not yet calculated	CVE-2023-21453 MISC
samsung_mobile — multiple_mobile_devices	Improper authorization in Samsung Keyboard prior to SMR Mar-2023 Release 1 allows physical attacker to access users text history on the lockscreen.	2023-03-16	not yet calculated	CVE-2023-21454 MISC
samsung_mobile — exynos	Improper authorization implementation in Exynos baseband prior to SMR Mar-2023 Release 1 allows incorrect handling of unencrypted message.	2023-03-16	not yet calculated	CVE-2023-21455 MISC
samsung_mobile  — multiple_mobile_devices	Path traversal vulnerability in Galaxy Themes Service prior to SMR Mar-2023 Release 1 allows attacker to access arbitrary file with system uid.	2023-03-16	not yet calculated	CVE-2023-21456 MISC
samsung_mobile  — multiple_mobile_devices	Improper access control vulnerability in Bluetooth prior to SMR Mar-2023 Release 1 allows attackers to send file via Bluetooth without related permission.	2023-03-16	not yet calculated	CVE-2023-21457 MISC
samsung_mobile — multiple_mobile_devices	Improper privilege management vulnerability in PhoneStatusBarPolicy in System UI prior to SMR Mar-2023 Release 1 allows attacker to turn off Do not disturb via unprotected intent.	2023-03-16	not yet calculated	CVE-2023-21458 MISC
samsung_mobile  — multiple_mobile_devices	Use after free vulnerability in decon driver prior to SMR Mar-2023 Release 1 allows attackers to cause memory access fault.	2023-03-16	not yet calculated	CVE-2023-21459 MISC
samsung_mobile  — multiple_mobile_devices	Improper authentication in SecSettings prior to SMR Mar-2023 Release 1 allows attacker to reset the setting.	2023-03-16	not yet calculated	CVE-2023-21460 MISC
samsung_mobile — multiple_mobile_devices	Improper authorization vulnerability in AutoPowerOnOffConfirmDialog in Settings prior to SMR Mar-2023 Release 1 allows local attacker to turn device off via unprotected activity.	2023-03-16	not yet calculated	CVE-2023-21461 MISC
samsung_mobile — multiple_mobile_devices	The sensitive information exposure vulnerability in Quick Share Agent prior to versions 3.5.14.18 in Android 12 and 3.5.16.20 in Android 13 allows to local attacker to access MAC address without related permission.	2023-03-16	not yet calculated	CVE-2023-21462 MISC
samsung_mobile — multiple_mobile_devices	Improper access control vulnerability in MyFiles application prior to versions 12.2.09.0 in Android 11, 13.1.03.501 in Android 12 and 14.1.03.0 in Android 13 allows local attacker to get sensitive information of secret mode in Samsung Internet application with specific conditions.	2023-03-16	not yet calculated	CVE-2023-21463 MISC
samsung_mobile — multiple_mobile_devices	Improper access control in Samsung Calendar prior to versions 12.4.02.9000 in Android 13 and 12.3.08.2000 in Android 12 allows local attacker to configure improper status.	2023-03-16	not yet calculated	CVE-2023-21464 MISC
samsung_mobile — bixby_touch	Improper access control vulnerability in BixbyTouch prior to version 3.2.02.5 in China models allows untrusted applications access local files.	2023-03-16	not yet calculated	CVE-2023-21465 MISC
zoom_video_communications — multiple_products	Zoom for Windows clients before version 5.13.3, Zoom Rooms for Windows clients before version 5.13.5 and Zoom VDI for Windows clients before 5.13.1 contain an information disclosure vulnerability. A recent update to the Microsoft Edge WebView2 runtime used by the affected Zoom clients, transmitted text to Microsoft’s online Spellcheck service instead of the local Windows Spellcheck. Updating Zoom remediates this vulnerability by disabling the feature. Updating Microsoft Edge WebView2 Runtime to at least version 109.0.1481.0 and restarting Zoom remediates this vulnerability by updating Microsoft’s telemetry behavior.	2023-03-16	not yet calculated	CVE-2023-22880 MISC
zoom_video_communications — zoom	Zoom clients before version 5.13.5 contain a STUN parsing vulnerability. A malicious actor could send specially crafted UDP traffic to a victim Zoom client to remotely cause the client to crash, causing a denial of service.	2023-03-16	not yet calculated	CVE-2023-22881 MISC
zoom_video_communications — zoom	Zoom clients before version 5.13.5 contain a STUN parsing vulnerability. A malicious actor could send specially crafted UDP traffic to a victim Zoom client to remotely cause the client to crash, causing a denial of service.	2023-03-16	not yet calculated	CVE-2023-22882 MISC
zoom_video_communications — zoom	Zoom Client for IT Admin Windows installers before version 5.13.5 contain a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability in an attack chain during the installation process to escalate their privileges to the SYSTEM user.	2023-03-16	not yet calculated	CVE-2023-22883 MISC
seamax — sa-wr915nd	SA-WR915ND router firmware v17.35.1 was discovered to be vulnerable to code execution.	2023-03-16	not yet calculated	CVE-2023-23150 MISC MISC
discourse — discourse	Discourse is an open-source discussion platform. Prior to version 3.0.1 of the `stable` branch and version 3.1.0.beta2 of the `beta` and `tests-passed` branches, the count of topics displayed for a tag is a count of all regular topics regardless of whether the topic is in a read restricted category or not. As a result, any users can technically poll a sensitive tag to determine if a new topic is created in a category which the user does not have excess to. In version 3.0.1 of the `stable` branch and version 3.1.0.beta2 of the `beta` and `tests-passed` branches, the count of topics displayed for a tag defaults to only counting regular topics which are not in read restricted categories. Staff users will continue to see a count of all topics regardless of the topic’s category read restrictions.	2023-03-17	not yet calculated	CVE-2023-23622 MISC MISC MISC MISC MISC
discourse — discourse	Discourse is an open-source messaging platform. In versions 3.0.1 and prior on the `stable` branch and versions 3.1.0.beta2 and prior on the `beta` and `tests-passed` branches, the count of personal messages displayed for a tag is a count of all personal messages regardless of whether the personal message is visible to a given user. As a result, any users can technically poll a sensitive tag to determine if a new personal message is created even if the user does not have access to the personal message. In the patched versions, the count of personal messages tagged with a given tag is hidden by default. To revert to the old behaviour of displaying the count of personal messages for a given tag, an admin may enable the `display_personal_messages_tag_counts` site setting.	2023-03-16	not yet calculated	CVE-2023-23935 MISC MISC
census — squidex	Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting (XSS) vulnerability.	2023-03-18	not yet calculated	CVE-2023-24278 MISC MISC
temenos — t24	Incorrect access control in Temenos T24 Release 20 allows attackers to gain unauthorized access to sensitive information via a crafted POST request to HELPTEXT.MAINMENU.	2023-03-13	not yet calculated	CVE-2023-24368 MISC
dell — bios	Dell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious user with administrator privileges could potentially exploit this vulnerability to perform arbitrary code execution.	2023-03-16	not yet calculated	CVE-2023-24571 MISC
mcafee — total_protection	McAfee Total Protection prior to 16.0.50 allows attackers to elevate user privileges due to Improper Link Resolution via registry keys. This could enable a user with lower privileges to execute unauthorized tasks.	2023-03-13	not yet calculated	CVE-2023-24577 MISC MISC
mcafee — total_protection	McAfee Total Protection prior to 16.0.49 allows attackers to elevate user privileges due to DLL sideloading. This could enable a user with lower privileges to execute unauthorized tasks.	2023-03-13	not yet calculated	CVE-2023-24578 MISC MISC
mcafee — total_protection	McAfee Total Protection prior to 16.0.51 allows attackers to trick a victim into uninstalling the application via the command prompt.	2023-03-13	not yet calculated	CVE-2023-24579 MISC MISC
vx_search — vx_search	VX Search v13.8 and v14.7 was discovered to contain an unquoted service path vulnerability which allows attackers to execute arbitrary commands at elevated privileges via a crafted executable file.	2023-03-16	not yet calculated	CVE-2023-24671 MISC MISC
centralite — pearl_thermostat	A vulnerability in Centralite Pearl Thermostat 0x04075010 allows attackers to cause a Denial of Service (DoS) via a crafted Zigbee message.	2023-03-17	not yet calculated	CVE-2023-24678 MISC MISC
ofcms — ofcms	An issue found in Ofcms v.1.1.4 allows a remote attacker to to escalate privileges via the respwd method in SysUserController.	2023-03-16	not yet calculated	CVE-2023-24760 MISC MISC
jcg-cn — jhr-n916r	Command execution vulnerability was discovered in JHR-N916R router firmware version<=21.11.1.1483.	2023-03-16	not yet calculated	CVE-2023-24795 MISC
prestashop — prestashop	PrestaShop is an open source e-commerce web application that, prior to version 8.0.1, is vulnerable to cross-site request forgery (CSRF). When authenticating users, PrestaShop preserves session attributes. Because this does not clear CSRF tokens upon login, this might enable same-site attackers to bypass the CSRF protection mechanism by performing an attack similar to a session-fixation. The problem is fixed in version 8.0.1.	2023-03-13	not yet calculated	CVE-2023-25170 MISC
discourse — discourse	Discourse is an open-source discussion platform. Prior to version 3.0.1 of the `stable` branch and version 3.1.0.beta2 of the `beta` and `tests-passed` branches, a maliciously crafted URL can be included in a user’s full name field to to carry out cross-site scripting attacks on sites with a disabled or overly permissive CSP (Content Security Policy). Discourse’s default CSP prevents this vulnerability. The vulnerability is patched in version 3.0.1 of the `stable` branch and version 3.1.0.beta2 of the `beta` and `tests-passed` branches. As a workaround, enable and/or restore your site’s CSP to the default one provided with Discourse.	2023-03-17	not yet calculated	CVE-2023-25172 MISC MISC MISC MISC MISC
gfi — kerio_connect	An issue was discovered in GFI Kerio Connect 9.4.1 patch 1 (fixed in 10.0.0). There is a stack-based Buffer Overflow in the webmail component’s 2FASetup function via an authenticated request with a long primaryEMailAddress field to the webmail/api/jsonrpc URI.	2023-03-15	not yet calculated	CVE-2023-25267 MISC MISC
d-link — dir820la1_fw105b03	OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp.	2023-03-16	not yet calculated	CVE-2023-25280 MISC MISC
d-link — dir820la1_fw105b03	A stack overflow vulnerability exists in pingV4Msg component in D-Link DIR820LA1_FW105B03, allows attackers to cause a denial of service via the nextPage parameter to ping.ccp.	2023-03-16	not yet calculated	CVE-2023-25281 MISC MISC
roxy-wi — roxy-wi	Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. Versions prior to 6.3.6.0 don’t correctly neutralize `dir/../filename` sequences, such as `/etc/nginx/../passwd`, allowing an actor to gain information about a server. Version 6.3.6.0 has a patch for this issue.	2023-03-13	not yet calculated	CVE-2023-25802 MISC MISC
roxy-wi — roxy-wi	Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. Versions prior to 6.3.5.0 have a directory traversal vulnerability that allows the inclusion of server-side files. This issue is fixed in version 6.3.5.0.	2023-03-13	not yet calculated	CVE-2023-25803 MISC
discourse — discourse	Discourse is an open-source discussion platform. Between versions 3.1.0.beta2 and 3.1.0.beta3 of the `tests-passed` branch, editing or responding to a chat message containing malicious content could lead to a cross-site scripting attack. This issue is patched in version 3.1.0.beta3 of the `tests-passed` branch. There are no known workarounds.	2023-03-17	not yet calculated	CVE-2023-26040 MISC MISC
arm-software — aarch64cryptolib	The armv8_dec_aes_gcm_full() API of Arm AArch64cryptolib before 86065c6 fails to the verify the authentication tag of AES-GCM protected data, leading to a man-in-the-middle attack. This occurs because of an improperly initialized variable.	2023-03-15	not yet calculated	CVE-2023-26084 MISC
collection.js — collection.js	Versions of the package collection.js before 6.8.1 are vulnerable to Prototype Pollution via the extend function in Collection.js/dist/node/iterators/extend.js.	2023-03-18	not yet calculated	CVE-2023-26113 MISC MISC MISC MISC MISC
sitecore_xp/xm — sitecore_xp/xm	An issue was discovered in Sitecore XP/XM 10.3. As an authenticated Sitecore user, a unrestricted language file upload vulnerability exists the can lead to direct code execution on the content management (CM) server.	2023-03-14	not yet calculated	CVE-2023-26262 MISC MISC
sap_se — netweaver_as for abap and abap_platform	Due to improper input controls In SAP NetWeaver AS for ABAP and ABAP Platform – versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, an attacker authenticated as a non-administrative user can craft a request which will trigger the application server to send a request to an arbitrary URL which can reveal, modify or make unavailable non-sensitive information, leading to low impact on Confidentiality, Integrity and Availability.	2023-03-14	not yet calculated	CVE-2023-26459 MISC MISC
sap_se — netweaver_application_server_for_java	Cache Management Service in SAP NetWeaver Application Server for Java – version 7.50, does not perform any authentication checks for functionalities that require user identity	2023-03-14	not yet calculated	CVE-2023-26460 MISC MISC
sap_se — netweaver	SAP NetWeaver allows (SAP Enterprise Portal) – version 7.50, allows an authenticated attacker with sufficient privileges to access the XML parser which can submit a crafted XML file which when parsed will enable them to access but not modify sensitive files and data. It allows the attacker to view sensitive data which is owned by certain privileges.	2023-03-14	not yet calculated	CVE-2023-26461 MISC MISC
kubevirt — kubevirt	KubeVirt is a virtual machine management add-on for Kubernetes. In versions 0.59.0 and prior, if a malicious user has taken over a Kubernetes node where virt-handler (the KubeVirt node-daemon) is running, the virt-handler service account can be used to modify all node specs. This can be misused to lure-in system-level-privileged components which can, for instance, read all secrets on the cluster, or can exec into pods on other nodes. This way, a compromised node can be used to elevate privileges beyond the node until potentially having full privileged access to the whole cluster. The simplest way to exploit this, once a user could compromise a specific node, is to set with the virt-handler service account all other nodes to unschedulable and simply wait until system-critical components with high privileges appear on its node. No patches are available as of time of publication. As a workaround, gatekeeper users can add a webhook which will block the `virt-handler` service account to modify the spec of a node.	2023-03-15	not yet calculated	CVE-2023-26484 MISC MISC
propius_machineselector — propius_machineselector	A Hard Coded Admin Credentials issue in the Web-UI Admin Panel in Propius MachineSelector 6.6.0 and 6.6.1 allows remote attackers to gain access to the admin panel Propiusadmin.php, which allows taking control of the affected system.	2023-03-14	not yet calculated	CVE-2023-26511 MISC
liblouis — liblouis	Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the lou_logFile function at logginc.c endpoint.	2023-03-16	not yet calculated	CVE-2023-26767 MISC MISC
liblouis — liblouis	Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the compileTranslationTable.c and lou_setDataPath functions.	2023-03-16	not yet calculated	CVE-2023-26768 MISC MISC
liblouis — liblouis	Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to cause a denial of service via the resolveSubtable function at compileTranslationTabel.c.	2023-03-16	not yet calculated	CVE-2023-26769 MISC MISC MISC
kirin — fortress_machine	SQL Injection vulnerability found in Kirin Fortress Machine v.1.7-2020-0610 allows attackers to execute arbitrary code via the /admin.php?controller=admin_commonuser parameter.	2023-03-16	not yet calculated	CVE-2023-26784 MISC MISC
onekeyadmin — onekeyadmin	onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Member List module.	2023-03-16	not yet calculated	CVE-2023-26951 MISC
wondershare_dr.fone — wondershare_dr.fone	Wondershare Dr.Fone v12.9.6 was discovered to contain weak permissions for the service WsDrvInst. This vulnerability allows attackers to escalate privileges via modifying or overwriting the executable.	2023-03-13	not yet calculated	CVE-2023-27010 MISC MISC
qibosoft — qibocms	Qibosoft QiboCMS v7 was discovered to contain a remote code execution (RCE) vulnerability via the Get_Title function at label_set_rs.php	2023-03-16	not yet calculated	CVE-2023-27037 MISC
simple_image_gallery — simple_image_gallery	Simple Image Gallery v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the username parameter.	2023-03-16	not yet calculated	CVE-2023-27040 MISC
school_registration_and_fee_system — school_registration_and_fee_system	School Registration and Fee System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at/bilal final/edit_user.php.	2023-03-16	not yet calculated	CVE-2023-27041 MISC
churchcrm — churchcrm	A cross-site scripting (XSS) vulnerability in the Edit Group function of ChurchCRM v4.5.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Edit Group Name text field.	2023-03-16	not yet calculated	CVE-2023-27059 MISC
dreamer_cms — dreamer_cms	Permissions vulnerability found in isoftforce Dreamer CMS v.4.0.1 allows local attackers to obtain sensitive information via the AttachmentController parameter.	2023-03-16	not yet calculated	CVE-2023-27084 MISC MISC
hippo4j — hippo4j	Insecure Permissions vulnerability found in OpenGoofy Hippo4j v.1.4.3 allows attacker toescalate privileges via the AddUser method of the UserController function in Tenant Management module.	2023-03-16	not yet calculated	CVE-2023-27095 MISC
libde265 — libde265	Libde265 v1.0.11 was discovered to contain a segmentation violation via the function decoder_context::process_slice_segment_header at decctx.cc.	2023-03-15	not yet calculated	CVE-2023-27102 MISC
typecho — typecho	Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute arbitrary code via an arbitrarily supplied URL parameter.	2023-03-16	not yet calculated	CVE-2023-27130 MISC MISC
typecho — typecho	Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute arbitrary code viathe Post Editorparameter.	2023-03-16	not yet calculated	CVE-2023-27131 MISC
jizhicms — jizhicms	A Cross-Site Request Forgery (CSRF) in /Sys/index.html of Jizhicms v2.4.5 allows attackers to arbitrarily make configuration changes within the application.	2023-03-15	not yet calculated	CVE-2023-27234 MISC
tenda — ax3	Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the shareSpeed parameter at /goform/WifiGuestSet.	2023-03-15	not yet calculated	CVE-2023-27239 MISC
tenda — ax3	Tenda AX3 V16.03.12.11 was discovered to contain a command injection vulnerability via the lanip parameter at /goform/AdvSetLanip.	2023-03-15	not yet calculated	CVE-2023-27240 MISC
online_book_store_project — online_book_store_project	Online Book Store Project v1.0 is vulnerable to SQL Injection via /bookstore/bookPerPub.php.	2023-03-16	not yet calculated	CVE-2023-27250 MISC
netgate — pfsense	A command injection vulnerability in the function restore_rrddata() of Netgate pfSense v2.7.0 allows authenticated attackers to execute arbitrary commands via manipulating the contents of an XML file supplied to the component config.xml.	2023-03-17	not yet calculated	CVE-2023-27253 MISC MISC
sap — netweaver_as_java	SAP NetWeaver AS Java (Object Analyzing Service) – version 7.50, does not perform necessary authorization checks, allowing an unauthenticated attacker to attach to an open interface and make use of an open naming and directory API to access a service which will enable them to access but not modify server settings and data with no effect on availability., resulting in escalation of privileges.	2023-03-14	not yet calculated	CVE-2023-27268 MISC MISC
sap — netweaver_application_server	SAP NetWeaver Application Server for ABAP and ABAP Platform – versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, allows an attacker with non-administrative authorizations to exploit a directory traversal flaw in an available service to overwrite the system files. In this attack, no data can be read but potentially critical OS files can be overwritten making the system unavailable.	2023-03-14	not yet calculated	CVE-2023-27269 MISC MISC
sap — netweaver_application_server	SAP NetWeaver Application Server for ABAP and ABAP Platform – versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, has multiple vulnerabilities in a class for test purposes in which an attacker authenticated as a non-administrative user can craft a request with certain parameters, which will consume the server’s resources sufficiently to make it unavailable. There is no ability to view or modify any information.	2023-03-14	not yet calculated	CVE-2023-27270 MISC MISC
sap — businessobjects_business_intelligence_platform	In SAP BusinessObjects Business Intelligence Platform (Web Services) – versions 420, 430, an attacker can control a malicious BOE server, forcing the application server to connect to its own admintools, leading to a high impact on availability.	2023-03-14	not yet calculated	CVE-2023-27271 MISC MISC
streamlit — streamlit	Streamlit, software for turning data scripts into web applications, had a cross-site scripting (XSS) vulnerability in versions 0.63.0 through 0.80.0. Users of hosted Streamlit app(s) were vulnerable to a reflected XSS vulnerability. An attacker could craft a malicious URL with Javascript payloads to a Streamlit app. The attacker could then trick the user into visiting the malicious URL and, if successful, the server would render the malicious javascript payload as-is, leading to XSS. Version 0.81.0 contains a patch for this vulnerability.	2023-03-16	not yet calculated	CVE-2023-27494 MISC MISC
sap — host_agent	SAP Host Agent (SAPOSCOL) – version 7.22, allows an unauthenticated attacker with network access to a server port assigned to the SAP Start Service to submit a crafted request which results in a memory corruption error. This error can be used to reveal but not modify any technical information about the server. It can also make a particular service temporarily unavailable	2023-03-14	not yet calculated	CVE-2023-27498 MISC MISC
sap — saprsbro	An attacker with non-administrative authorizations can exploit a directory traversal flaw in program SAPRSBRO to over-write system files. In this attack, no data can be read but potentially critical OS files can be over-written making the system unavailable.	2023-03-14	not yet calculated	CVE-2023-27500 MISC MISC
codeigniter — shield	CodeIgniter Shield provides authentication and authorization for the CodeIgniter 4 PHP framework. An improper implementation was found in the password storage process. All hashed passwords stored in Shield v1.0.0-beta.3 or earlier are easier to crack than expected due to the vulnerability. Therefore, they should be removed as soon as possible. If an attacker gets (1) the user’s hashed password by Shield, and (2) the hashed password (SHA-384 hash without salt) from somewhere, the attacker may easily crack the user’s password. Upgrade to Shield v1.0.0-beta.4 or later to fix this issue. After upgrading, all users’ hashed passwords should be updated (saved to the database). There are no known workarounds.	2023-03-13	not yet calculated	CVE-2023-27580 MISC MISC MISC MISC MISC MISC
pjsip — pjsip	PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications that use PJSIP DNS resolver. It doesn’t affect PJSIP users who do not utilise PJSIP DNS resolver. This vulnerability is related to CVE-2022-24793. A patch is available as commit `d1c5e4d` in the `master` branch. A workaround is to disable DNS resolution in PJSIP config (by setting `nameserver_count` to zero) or use an external resolver implementation instead.	2023-03-14	not yet calculated	CVE-2023-27585 MISC MISC MISC MISC
hasura — graphql_engine	Hasura is an open-source product that provides users GraphQL or REST APIs. A path traversal vulnerability has been discovered within Hasura GraphQL Engine prior to versions 1.3.4, 2.55.1, 2.20.1, and 2.21.0-beta1. Projects running on Hasura Cloud were not vulnerable. Self-hosted Hasura Projects with deployments that are publicly exposed and not protected by a WAF or other HTTP protection layer should be upgraded to version 1.3.4, 2.55.1, 2.20.1, or 2.21.0-beta1 to receive a patch.	2023-03-14	not yet calculated	CVE-2023-27588 MISC MISC MISC MISC MISC MISC
minio — minio	Minio is a Multi-Cloud Object Storage framework. Starting with RELEASE.2020-12-23T02-24-12Z and prior to RELEASE.2023-03-13T19-46-17Z, a user with `consoleAdmin` permissions can potentially create a user that matches the root credential `accessKey`. Once this user is created successfully, the root credential ceases to work appropriately. The issue is patched in RELEASE.2023-03-13T19-46-17Z. There are ways to work around this via adding higher privileges to the disabled root user via `mc admin policy set`.	2023-03-14	not yet calculated	CVE-2023-27589 MISC MISC
rizin — rizin	Rizin is a UNIX-like reverse engineering framework and command-line toolset. In version 0.5.1 and prior, converting a GDB registers profile file into a Rizin register profile can result in a stack-based buffer overflow when the `name`, `type`, or `groups` fields have longer values than expected. Users opening untrusted GDB registers files (e.g. with the `drpg` or `arpg` commands) are affected by this flaw. Commit d6196703d89c84467b600ba2692534579dc25ed4 contains a patch for this issue. As a workaround, review the GDB register profiles before loading them with `drpg`/`arpg` commands.	2023-03-14	not yet calculated	CVE-2023-27590 MISC MISC MISC MISC MISC
miniflux — miniflux	Miniflux is a feed reader. Prior to version 2.0.43, an unauthenticated user can retrieve Prometheus metrics from a publicly reachable Miniflux instance where the `METRICS_COLLECTOR` configuration option is enabled and `METRICS_ALLOWED_NETWORKS` is set to `127.0.0.1/8` (the default). A patch is available in Miniflux 2.0.43. As a workaround, set `METRICS_COLLECTOR` to `false` (default) or run Miniflux behind a trusted reverse-proxy.	2023-03-17	not yet calculated	CVE-2023-27591 MISC MISC MISC MISC
miniflux — miniflux	Miniflux is a feed reader. Since v2.0.25, Miniflux will automatically proxy images served over HTTP to prevent mixed content errors. When an outbound request made by the Go HTTP client fails, the `html.ServerError` is returned unescaped without the expected Content Security Policy header added to valid responses. By creating an RSS feed item with the inline description containing an `<img>` tag with a `srcset` attribute pointing to an invalid URL like `http:a<script>alert(1)</script>`, we can coerce the proxy handler into an error condition where the invalid URL is returned unescaped and in full. This results in JavaScript execution on the Miniflux instance as soon as the user is convinced (e.g. by a message in the alt text) to open the broken image. An attacker can execute arbitrary JavaScript in the context of a victim Miniflux user when they open a broken image in a crafted RSS feed. This can be used to perform actions on the Miniflux instance as that user and gain administrative access to the Miniflux instance if it is reachable and the victim is an administrator. A patch is available in version 2.0.43. As a workaround sisable image proxy; default value is `http-only`.	2023-03-17	not yet calculated	CVE-2023-27592 MISC MISC MISC MISC MISC MISC MISC
cilium — cilium	Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.11.15, 1.12.8, and 1.13.1, an attacker with access to a Cilium agent pod can write to `/opt/cni/bin` due to a `hostPath` mount of that directory in the agent pod. By replacing the CNI binary with their own malicious binary and waiting for the creation of a new pod on the node, the attacker can gain access to the underlying node. The issue has been fixed and the fix is available on versions 1.11.15, 1.12.8, and 1.13.1. Some workarounds are available. Kubernetes RBAC should be used to deny users and service accounts `exec` access to Cilium agent pods. In cases where a user requires `exec` access to Cilium agent pods, but should not have access to the underlying node, no workaround is possible.	2023-03-17	not yet calculated	CVE-2023-27593 MISC MISC MISC MISC MISC MISC
cilium — cilium	Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.11.15, 1.12.8, and 1.13.1, under specific conditions, Cilium may misattribute the source IP address of traffic to a cluster, identifying external traffic as coming from the host on which Cilium is running. As a consequence, network policies for that cluster might be bypassed, depending on the specific network policies enabled. This issue only manifests when Cilium is routing IPv6 traffic and NodePorts are used to route traffic to pods. IPv6 and endpoint routes are both disabled by default. The problem has been fixed and is available on versions 1.11.15, 1.12.8, and 1.13.1. As a workaround, disable IPv6 routing.	2023-03-17	not yet calculated	CVE-2023-27594 MISC MISC MISC MISC
cilium — cilium	Cilium is a networking, observability, and security solution with an eBPF-based dataplane. In version 1.13.0, when Cilium is started, there is a short period when Cilium eBPF programs are not attached to the host. During this period, the host does not implement any of Cilium’s featureset. This can cause disruption to newly established connections during this period due to the lack of Load Balancing, or can cause Network Policy bypass due to the lack of Network Policy enforcement during the window. This vulnerability impacts any Cilium-managed endpoints on the node (such as Kubernetes Pods), as well as the host network namespace (including Host Firewall). This vulnerability is fixed in Cilium 1.13.1 or later. Cilium releases 1.12.x, 1.11.x, and earlier are not affected. There are no known workarounds.	2023-03-17	not yet calculated	CVE-2023-27595 MISC MISC MISC
opensips — opensips	OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.8 and 3.2.5, OpenSIPS crashes when a malformed SDP body is sent multiple times to an OpenSIPS configuration that makes use of the `stream_process` function. This issue was discovered during coverage guided fuzzing of the function `codec_delete_except_re`. By abusing this vulnerability, an attacker is able to crash the server. It affects configurations containing functions that rely on the affected code, such as the function `codec_delete_except_re`. This issue has been fixed in version 3.1.8 and 3.2.5.	2023-03-15	not yet calculated	CVE-2023-27596 MISC MISC
opensips — opensips	OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.8 and 3.2.5, when a specially crafted SIP message is processed by the function `rewrite_ruri`, a crash occurs due to a segmentation fault. This issue causes the server to crash. It affects configurations containing functions that make use of the affected code, such as the function `setport`. This issue has been fixed in version 3.1.8 and 3.2.5.	2023-03-15	not yet calculated	CVE-2023-27597 MISC MISC
opensips — opensips	OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.7 and 3.2.4, sending a malformed `Via` header to OpenSIPS triggers a segmentation fault when the function `calc_tag_suffix` is called. A specially crafted `Via` header, which is deemed correct by the parser, will pass uninitialized strings to the function `MD5StringArray` which leads to the crash. Abuse of this vulnerability leads to Denial of Service due to a crash. Since the uninitialized string points to memory location `0x0`, no further exploitation appears to be possible. No special network privileges are required to perform this attack, as long as the OpenSIPS configuration makes use of functions such as `sl_send_reply` or `sl_gen_totag` that trigger the vulnerable code. This issue has been fixed in versions 3.1.7 and 3.2.4.	2023-03-15	not yet calculated	CVE-2023-27598 MISC MISC MISC
opensips — opensips	OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.7 and 3.2.4, when the function `append_hf` handles a SIP message with a malformed To header, a call to the function `abort()` is performed, resulting in a crash. This is due to the following check in `data_lump.c:399` in the function `anchor_lump`. An attacker abusing this vulnerability will crash OpenSIPS leading to Denial of Service. It affects configurations containing functions that make use of the affected code, such as the function `append_hf`. This issue has been fixed in versions 3.1.7 and 3.2.4.	2023-03-15	not yet calculated	CVE-2023-27599 MISC MISC MISC
opensips — opensips	OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.7 and 3.2.4, OpenSIPS crashes when a malformed SDP body is received and is processed by the `delete_sdp_line` function in the sipmsgops module. This issue can be reproduced by calling the function with an SDP body that does not terminate by a line feed (i.e. `\n`). The vulnerability was found while performing black-box fuzzing against an OpenSIPS server running a configuration that made use of the functions `codec_delete_except_re` and `codec_delete_re`. The same issue was also discovered while performing coverage guided fuzzing on the function `codec_delete_except_re`. The crash happens because the function `delete_sdp_line` expects that an SDP line is terminated by a line feed (`\n`). By abusing this vulnerability, an attacker is able to crash the server. It affects configurations containing functions that rely on the affected code, such as the function `codec_delete_except_re`. Due to the sanity check that is performed in the `del_lump` function, exploitation of this issue will generate an `abort` in the lumps processing function, resulting in a Denial of Service. This issue is patched in versions 3.1.7 and 3.2.4.	2023-03-15	not yet calculated	CVE-2023-27600 MISC MISC MISC MISC
opensips — opensips	OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.7 and 3.2.4, OpenSIPS crashes when a malformed SDP body is received and is processed by the `delete_sdp_line` function in the sipmsgops module. This issue can be reproduced by calling the function with an SDP body that does not terminate by a line feed (i.e. `\n`). The vulnerability was found while performing black-box fuzzing against an OpenSIPS server running a configuration that made use of the functions `codec_delete_except_re` and `codec_delete_re`. The same issue was also discovered while performing coverage guided fuzzing on the function `codec_delete_except_re`. The crash happens because the function `delete_sdp_line` expects that an SDP line is terminated by a line feed (`\n`): By abusing this vulnerability, an attacker is able to crash the server. It affects configurations containing functions that rely on the affected code, such as the function `codec_delete_except_re`. Due to the sanity check that is performed in the `del_lump` function, exploitation of this issue will generate an `abort` in the lumps processing function, resulting in a Denial of Service. This issue has been fixed in versions 3.1.7 and 3.2.4.	2023-03-15	not yet calculated	CVE-2023-27601 MISC MISC MISC MISC
dedecms — dedecms	SQL injection vulnerability found in DedeCMS v.5.7.106 allows a remote attacker to execute arbitrary code via the rank_* parameter in the /dede/group_store.php endpoint.	2023-03-16	not yet calculated	CVE-2023-27707 MISC
dedecms — dedecms	SQL injection vulnerability found in DedeCMS v.5.7.106 allows a remote attacker to execute arbitrary code via the rank_* parameter in the /dedestory_catalog.php endpoint.	2023-03-16	not yet calculated	CVE-2023-27709 MISC
typecho — typecho	Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute arbitrary code via the Comment Manager /admin/manage-comments.php component.	2023-03-16	not yet calculated	CVE-2023-27711 MISC MISC
tcpreplay — tcprewrite	An issue found in TCPreplay tcprewrite v.4.4.3 allows a remote attacker to cause a denial of service via the tcpedit_dlt_cleanup function at plugins/dlt_plugins.c.	2023-03-16	not yet calculated	CVE-2023-27783 MISC MISC
tcpreplay — tcpreplay	An issue found in TCPReplay v.4.4.3 allows a remote attacker to cause a denial of service via the read_hexstring function at the utils.c:309 endpoint.	2023-03-16	not yet calculated	CVE-2023-27784 MISC
tcpreplay — tcpprep	An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse endpoints function.	2023-03-16	not yet calculated	CVE-2023-27785 MISC
tcpprep — tcpprep	An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the macinstring function.	2023-03-16	not yet calculated	CVE-2023-27786 MISC MISC
tcpprep — tcpprep	An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse_list function at the list.c:81 endpoint.	2023-03-16	not yet calculated	CVE-2023-27787 MISC
tcpreplay — tcprewrite	An issue found in TCPrewrite v.4.4.3 allows a remote attacker to cause a denial of service via the ports2PORT function at the portmap.c:69 endpoint.	2023-03-16	not yet calculated	CVE-2023-27788 MISC
tcpprep — tcpprep	An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the cidr2cidr function at the cidr.c:178 endpoint.	2023-03-16	not yet calculated	CVE-2023-27789 MISC MISC
ibm — aspera_faspex	IBM Aspera Faspex 5.0.4 could allow an authenticated user to change other user’s credentials due to improper access controls. IBM X-Force ID: 249847.	2023-03-16	not yet calculated	CVE-2023-27875 MISC MISC
sap — solution_manager_and_abap_managed_systems	An attacker authenticated as a user with a non-administrative role and a common remote execution authorization in SAP Solution Manager and ABAP managed systems (ST-PI) – versions 2088_1_700, 2008_1_710, 740, can use a vulnerable interface to execute an application function to perform actions which they would not normally be permitted to perform. Depending on the function executed, the attack can read or modify any user or application data and can make the application unavailable.	2023-03-14	not yet calculated	CVE-2023-27893 MISC MISC
sap — businessobjects_business_intelligence_platform	SAP BusinessObjects Business Intelligence Platform (Web Services) – versions 420, 430, allows an attacker to inject arbitrary values as CMS parameters to perform lookups on the internal network which is otherwise not accessible externally. On successful exploitation, attacker can scan internal network to determine internal infrastructure for further attacks like remote file inclusion, retrieve server files, bypass firewall and force the vulnerable server to execute malicious requests, resulting in sensitive information disclosure. This causes limited impact on confidentiality of data.	2023-03-14	not yet calculated	CVE-2023-27894 MISC MISC
sap — authenticator_for_android	SAP Authenticator for Android – version 1.3.0, allows the screen to be captured, if an authorized attacker installs a malicious app on the mobile device. The attacker could extract the currently views of the OTP and the secret OTP alphanumeric token during the token setup. On successful exploitation, an attacker can read some sensitive information but cannot modify and delete the data.	2023-03-14	not yet calculated	CVE-2023-27895 MISC MISC
sap — businessobjects_business_intelligence_platform	In SAP BusinessObjects Business Intelligence Platform – version 420, 430, an attacker can control a malicious BOE server, forcing the application server to connect to its own CMS, leading to a high impact on availability.	2023-03-14	not yet calculated	CVE-2023-27896 MISC MISC
opensips — opensips	OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Versions prior to 3.1.7 and 3.2.4 have a potential issue in `msg_translator.c:2628` which might lead to a server crash. This issue was found while fuzzing the function `build_res_buf_from_sip_req` but could not be reproduced against a running instance of OpenSIPS. This issue could not be exploited against a running instance of OpenSIPS since no public function was found to make use of this vulnerable code. Even in the case of exploitation through unknown vectors, it is highly unlikely that this issue would lead to anything other than Denial of Service. This issue has been fixed in versions 3.1.7 and 3.2.4.	2023-03-15	not yet calculated	CVE-2023-28095 MISC MISC MISC
opensips — opensips	OpenSIPS, a Session Initiation Protocol (SIP) server implementation, has a memory leak starting in the 2.3 branch and priot to versions 3.1.8 and 3.2.5. The memory leak was detected in the function `parse_mi_request` while performing coverage-guided fuzzing. This issue can be reproduced by sending multiple requests of the form `{“jsonrpc”: “2.0”,”method”: “log_le`. This malformed message was tested against an instance of OpenSIPS via FIFO transport layer and was found to increase the memory consumption over time. To abuse this memory leak, attackers need to reach the management interface (MI) which typically should only be exposed on trusted interfaces. In cases where the MI is exposed to the internet without authentication, abuse of this issue will lead to memory exhaustion which may affect the underlying system’s availability. No authentication is typically required to reproduce this issue. On the other hand, memory leaks may occur in other areas of OpenSIPS where the cJSON library is used for parsing JSON objects. The issue has been fixed in versions 3.1.8 and 3.2.5.	2023-03-15	not yet calculated	CVE-2023-28096 MISC MISC MISC
opensips — opensips	OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.9 and 3.2.6, a malformed SIP message containing a large _Content-Length_ value and a specially crafted Request-URI causes a segmentation fault in OpenSIPS. This issue occurs when a large amount of shared memory using the `-m` flag was allocated to OpenSIPS, such as 10 GB of RAM. On the test system, this issue occurred when shared memory was set to `2362` or higher. This issue is fixed in versions 3.1.9 and 3.2.6. The only workaround is to guarantee that the Content-Length value of input messages is never larger than `2147483647`.	2023-03-15	not yet calculated	CVE-2023-28097 MISC MISC MISC
opensips — opensips	OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.7 and 3.2.4, a specially crafted Authorization header causes OpenSIPS to crash or behave in an unexpected way due to a bug in the function `parse_param_name()` . This issue was discovered while performing coverage guided fuzzing of the function parse_msg. The AddressSanitizer identified that the issue occurred in the function `q_memchr()` which is being called by the function `parse_param_name()`. This issue may cause erratic program behaviour or a server crash. It affects configurations containing functions that make use of the affected code, such as the function `www_authorize()` . Versions 3.1.7 and 3.2.4 contain a fix.	2023-03-15	not yet calculated	CVE-2023-28098 MISC MISC MISC
opensips — opensips	OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.9 and 3.2.6, if `ds_is_in_list()` is used with an invalid IP address string (`NULL` is illegal input), OpenSIPS will attempt to print a string from a random address (stack garbage), which could lead to a crash. All users of `ds_is_in_list()` without the `$si` variable as 1st parameter could be affected by this vulnerability to a larger, lesser or no extent at all, depending if the data passed to the function is a valid IPv4 or IPv6 address string or not. Fixes will are available starting with the 3.1.9 and 3.2.6 minor releases. There are no known workarounds.	2023-03-15	not yet calculated	CVE-2023-28099 MISC MISC MISC
flatpak — flatpak	Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4 contain a vulnerability similar to CVE-2017-5226, but using the `TIOCLINUX` ioctl command instead of `TIOCSTI`. If a Flatpak app is run on a Linux virtual console such as `/dev/tty1`, it can copy text from the virtual console and paste it into the command buffer, from which the command might be run after the Flatpak app has exited. Ordinary graphical terminal emulators like xterm, gnome-terminal and Konsole are unaffected. This vulnerability is specific to the Linux virtual consoles `/dev/tty1`, `/dev/tty2` and so on. A patch is available in versions 1.10.8, 1.12.8, 1.14.4, and 1.15.4. As a workaround, don’t run Flatpak on a Linux virtual console. Flatpak is primarily designed to be used in a Wayland or X11 graphical environment.	2023-03-16	not yet calculated	CVE-2023-28100 MISC MISC MISC
flatpak — flatpak	Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.8, 1.12.8, 1.14.4, and 1.15.4, if an attacker publishes a Flatpak app with elevated permissions, they can hide those permissions from users of the `flatpak(1)` command-line interface by setting other permissions to crafted values that contain non-printable control characters such as `ESC`. A fix is available in versions 1.10.8, 1.12.8, 1.14.4, and 1.15.4. As a workaround, use a GUI like GNOME Software rather than the command-line interface, or only install apps whose maintainers you trust.	2023-03-16	not yet calculated	CVE-2023-28101 MISC MISC MISC MISC
silverstripe — silverstripe_graphql	`silverstripe/graphql` serves Silverstripe data as GraphQL representations. In versions 4.2.2 and 4.1.1, an attacker could use a specially crafted graphql query to execute a denial of service attack against a website which has a publicly exposed graphql endpoint. This mostly affects websites with particularly large/complex graphql schemas. Users should upgrade to `silverstripe/graphql` 4.2.3 or 4.1.2 to remedy the vulnerability.	2023-03-16	not yet calculated	CVE-2023-28104 MISC MISC MISC MISC
go-used-util — go-used-util	go-used-util has commonly used utility functions for Go. Versions prior to 0.0.34 have a ZipSlip issue when using fsutil package to unzip files. When users use `zip.Unzip` to unzip zip files from a malicious attacker, they may be vulnerable to path traversal. The issue has been fixed in version 0.0.34. There are no known workarounds.	2023-03-16	not yet calculated	CVE-2023-28105 MISC MISC
pimcore — pimcore	Pimcore is an open source data and experience management platform. Prior to version 10.5.19, an attacker can use cross-site scripting to send a malicious script to an unsuspecting user. Users may upgrade to version 10.5.19 to receive a patch or, as a workaround, apply the patch manually.	2023-03-16	not yet calculated	CVE-2023-28106 MISC MISC MISC MISC
discourse — discourse	Discourse is an open-source discussion platform. Prior to version 3.0.2 of the `stable` branch and version 3.1.0.beta3 of the `beta` and `tests-passed` branches, a user logged as an administrator can request backups multiple times, which will eat up all the connections to the DB. If this is done on a site using multisite, then it can affect the whole cluster. The vulnerability is patched in version 3.0.2 of the `stable` branch and version 3.1.0.beta3 of the `beta` and `tests-passed` branches. There are no known workarounds.	2023-03-17	not yet calculated	CVE-2023-28107 MISC MISC MISC MISC MISC
pimcore — pimcore	Pimcore is an open source data and experience management platform. Prior to version 10.5.19, quoting is not done properly in UUID DAO model. There is the theoretical possibility to inject custom SQL if the developer is using this methods with input data and not doing proper input validation in advance and so relies on the auto-quoting being done by the DAO class. Users should update to version 10.5.19 to receive a patch or, as a workaround, apply the patch manually.	2023-03-16	not yet calculated	CVE-2023-28108 MISC MISC MISC
docker — docker	Play With Docker is a browser-based Docker playground. Versions 0.0.2 and prior are vulnerable to domain hijacking. Because CORS configuration was not correct, an attacker could use `play-with-docker.com` as an example and set the origin header in an http request as `evil-play-with-docker.com`. The domain would echo in response header, which successfully bypassed the CORS policy and retrieved basic user information. This issue has been fixed in commit ed82247c9ab7990ad76ec2bf1498c2b2830b6f1a. There are no known workarounds.	2023-03-16	not yet calculated	CVE-2023-28109 MISC MISC
jumpserver — jumpserver	Jumpserver is a popular open source bastion host, and Koko is a Jumpserver component that is the Go version of coco, refactoring coco’s SSH/SFTP service and Web Terminal service. Prior to version 2.28.8, using illegal tokens to connect to a Kubernetes cluster through Koko can result in the execution of dangerous commands that may disrupt the Koko container environment and affect normal usage. The vulnerability has been fixed in v2.28.8.	2023-03-16	not yet calculated	CVE-2023-28110 MISC MISC
discourse — discourse	Discourse is an open-source discussion platform. Prior to version 3.1.0.beta3 of the `beta` and `tests-passed` branches, attackers are able to bypass Discourse’s server-side request forgery (SSRF) protection for private IPv4 addresses by using a IPv4-mapped IPv6 address. The issue is patched in the latest beta and tests-passed version of Discourse. version 3.1.0.beta3 of the `beta` and `tests-passed` branches. There are no known workarounds.	2023-03-17	not yet calculated	CVE-2023-28111 MISC MISC MISC
discourse — discourse	Discourse is an open-source discussion platform. Prior to version 3.1.0.beta3 of the `beta` and `tests-passed` branches, some user provided URLs were being passed to FastImage without SSRF protection. Insufficient protections could enable attackers to trigger outbound network connections from the Discourse server to private IP addresses. This affects any site running the `tests-passed` or `beta` branches versions 3.1.0.beta2 and prior. This issue is patched in version 3.1.0.beta3 of the `beta` and `tests-passed` branches. There are no known workarounds.	2023-03-17	not yet calculated	CVE-2023-28112 MISC MISC MISC
warp-tech — russh	russh is a Rust SSH client and server library. Starting in version 0.34.0 and prior to versions 0.36.2 and 0.37.1, Diffie-Hellman key validation is insufficient, which can lead to insecure shared secrets and therefore breaks confidentiality. Connections between a russh client and server or those of a russh peer with some other misbehaving peer are most likely to be problematic. These may vulnerable to eavesdropping. Most other implementations reject such keys, so this is mainly an interoperability issue in such a case. This issue is fixed in versions 0.36.2 and 0.37.1	2023-03-16	not yet calculated	CVE-2023-28113 MISC MISC MISC CONFIRM MISC MISC
knp_labs — snappy	Snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page. Prior to version 1.4.2, Snappy is vulnerable to PHAR deserialization due to a lack of checking on the protocol before passing it into the `file_exists()` function. If an attacker can upload files of any type to the server he can pass in the phar:// protocol to unserialize the uploaded file and instantiate arbitrary PHP objects. This can lead to remote code execution especially when snappy is used with frameworks with documented POP chains like Laravel/Symfony vulnerable developer code. If a user can control the output file from the `generateFromHtml()` function, it will invoke deserialization. This vulnerability is capable of remote code execution if Snappy is used with frameworks or developer code with vulnerable POP chains. It has been fixed in version 1.4.2.	2023-03-17	not yet calculated	CVE-2023-28115 MISC MISC MISC MISC MISC MISC
contiki-ng — contiki-ng	Contiki-NG is an open-source, cross-platform operating system for internet of things (IoT) devices. In versions 4.8 and prior, an out-of-bounds write can occur in the BLE L2CAP module of the Contiki-NG operating system. The network stack of Contiki-NG uses a global buffer (packetbuf) for processing of packets, with the size of PACKETBUF_SIZE. In particular, when using the BLE L2CAP module with the default configuration, the PACKETBUF_SIZE value becomes larger then the actual size of the packetbuf. When large packets are processed by the L2CAP module, a buffer overflow can therefore occur when copying the packet data to the packetbuf. The vulnerability has been patched in the “develop” branch of Contiki-NG, and will be included in release 4.9. The problem can be worked around by applying the patch manually.	2023-03-17	not yet calculated	CVE-2023-28116 MISC MISC
kdab — hotspot	KDAB Hotspot 1.3.x and 1.4.x through 1.4.1, in a non-default configuration, allows privilege escalation because of race conditions involving symlinks and elevate_perf_privileges.sh chown calls.	2023-03-14	not yet calculated	CVE-2023-28144 MISC MISC
netgear — nighthawk_wifi6_(rax30)	When uploading a firmware image to a Netgear Nighthawk Wifi6 Router (RAX30), a hidden “forceFWUpdate” parameter may be provided to force the upgrade to complete and bypass certain validation checks. End users can use this to upload modified, unofficial, and potentially malicious firmware to the device.	2023-03-15	not yet calculated	CVE-2023-28337 MISC
netgear — nighthawk_wifi6_(rax30)	Any request send to a Netgear Nighthawk Wifi6 Router (RAX30)’s web service containing a “Content-Type” of “multipartboundary=” will result in the request body being written to “/tmp/mulipartFile” on the device itself. A sufficiently large file will cause device resources to be exhausted, resulting in the device becoming unusable until it is rebooted.	2023-03-15	not yet calculated	CVE-2023-28338 MISC
openbsd — opendoas	OpenDoas through 6.8.2, when TIOCSTI is available, allows privilege escalation because of sharing a terminal with the original session. NOTE: TIOCSTI is unavailable in OpenBSD 6.0 and later, and can be made unavailable in the Linux kernel 6.2 and later.	2023-03-14	not yet calculated	CVE-2023-28339 MISC
altenergy_power_systems — control_software_c1.2.5	OS command injection affects Altenergy Power Control Software C1.2.5 via shell metacharacters in the index.php/management/set_timezone timezone parameter, because of set_timezone in models/management_model.php.	2023-03-14	not yet calculated	CVE-2023-28343 MISC MISC
stellarium — stellarium	In Stellarium through 1.2, attackers can write to files that are typically unintended, such as ones with absolute pathnames or .. directory traversal.	2023-03-15	not yet calculated	CVE-2023-28371 MISC MISC MISC
dnsmasq_by_simon_kelley — dnsmasq	An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.	2023-03-15	not yet calculated	CVE-2023-28450 MISC MISC MISC MISC
array_networks — apv_products	A command injection vulnerability was discovered in Array Networks APV products. A remote attacker can send a crafted packet after logging into the affected appliance as an administrator, resulting in arbitrary shell code execution. This is fixed in 8.6.1.262 or newer and 10.4.2.93 or newer.	2023-03-15	not yet calculated	CVE-2023-28460 MISC
array_networks — ag_series_and_vxag	Array Networks Array AG Series and vxAG (9.4.0.481 and earlier) allow remote code execution. An attacker can browse the filesystem on the SSL VPN gateway using a flags attribute in an HTTP header without authentication. The product could then be exploited through a vulnerable URL. The 2023-03-09 vendor advisory stated “a new Array AG release with the fix will be available soon.”	2023-03-15	not yet calculated	CVE-2023-28461 MISC
linux — kernel	do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race condition (with a resultant use-after-free or NULL pointer dereference).	2023-03-16	not yet calculated	CVE-2023-28466 MISC
sudo — sudo	Sudo before 1.9.13 does not escape control characters in log messages.	2023-03-16	not yet calculated	CVE-2023-28486 MISC MISC
sudo — sudo	Sudo before 1.9.13 does not escape control characters in sudoreplay output.	2023-03-16	not yet calculated	CVE-2023-28487 MISC MISC
openssh — openssh	ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints.	2023-03-17	not yet calculated	CVE-2023-28531 MISC
misp — misp	js/event-graph.js in MISP before 2.4.169 allows XSS via event-graph node tooltips.	2023-03-18	not yet calculated	CVE-2023-28606 MISC MISC
misp — misp	js/event-graph.js in MISP before 2.4.169 allows XSS via the event-graph relationship tooltip.	2023-03-18	not yet calculated	CVE-2023-28607 MISC MISC
ansible_semaphore — ansible_semaphore	api/auth.go in Ansible Semaphore before 2.8.89 mishandles authentication.	2023-03-18	not yet calculated	CVE-2023-28609 MISC MISC

Back to top

 

 

---

A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.

If you like the site, please support us on “Patreon” or “Buy Me A Coffee” using the buttons below

---

 To keep up to date follow us on the below channels.