CVEs published March 19, 2023
14 CVEs were published on March 19, 2023: 3 critical, 5 high. Browse them by severity, product and exploitation status.
- Published
- 14
- Critical
- 3
- High
- 5
- Medium
- 5
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- code-projects Simple Art Gallery
- 2
- code-projects Responsive Hotel Site
- 1
- imgproxy/imgproxy · github.com/imgproxy/imgproxy +2
- 1
- RockOA
- 1
- SourceCodester Simple and Nice Shopping Cart Script
- 1
Critical 3
- CVE-2023-26805Tenda W20E v15.11.0.6 (US_W20EV4.0br_v15.11.0.6(1068_1546_841)_CN_TDC) is vulnerable to Buffer Overflow via function formIPMacBindModify.
- CVE-2023-26806Tenda W20E v15.11.0.6(US_W20EV4.0br_v15.11.0.6(1068_1546_841 is vulnerable to Buffer Overflow via function formSetSysTime,
- CVE-2023-26905An issue was discovered in Alphaware - Simple E-Commerce System v1.0.
High 5
- CVE-2022-48422ONLYOFFICE Docs through 7.3 on certain Linux distributions allows local users to gain privileges via a Trojan horse libgcc_s.so.1 in the…
- CVE-2022-48423In the Linux kernel before 6.1.3, fs/ntfs3/record.c does not validate resident attribute names.
- CVE-2022-48424In the Linux kernel before 6.1.3, fs/ntfs3/inode.c does not validate the attribute name offset.
- CVE-2022-48425In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before replaying logs.
- CVE-2023-28617org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file…
Medium, low and unrated 6
- CVE-2023-1501RockOA acloudCosAction.php.SQL runAction unrestricted uploadRockOA
- CVE-2023-1500code-projects Simple Art Gallery adminHome.php cross site scriptingcode-projects Simple Art Gallery
- CVE-2023-1499code-projects Simple Art Gallery adminHome.php sql injectioncode-projects Simple Art Gallery
- CVE-2023-1498code-projects Responsive Hotel Site Newsletter Log messages.php sql injectioncode-projects Responsive Hotel Site
- CVE-2023-1497SourceCodester Simple and Nice Shopping Cart Script uploaderm.php unrestricted uploadSourceCodester Simple and Nice Shopping Cart Script
- CVE-2023-1496Cross-site Scripting (XSS) - Reflected in imgproxy/imgproxyimgproxy/imgproxy · github.com/imgproxy/imgproxy +2