CVEs published April 22, 2023
31 CVEs were published on April 22, 2023: 0 critical, 11 high. Browse them by severity, product and exploitation status.
- Published
- 31
- Critical
- 0
- High
- 11
- Medium
- 18
- Low
- 2
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- NVIDIA DGX servers
- 11
- NVIDIA CUDA Toolkit
- 5
- NVIDIA ConnectX Firmware
- 3
- NVIDIA GPU Display Driver
- 3
- microweber/microweber
- 2
- hansunCMS
- 1
- kalcaddle KodExplorer
- 1
- PoDoFo
- 1
- SourceCodester Complaint Management System
- 1
- SourceCodester Online Computer and Laptop Store
- 1
High 11
- CVE-2023-25507NVIDIA DGX-1 BMC contains a vulnerability in the SPX REST API, where an attacker with the appropriate level of authorization can inject…NVIDIA DGX servers
- CVE-2023-25506NVIDIA DGX-1 contains a vulnerability in Ofbd in AMI SBIOS, where a preconditioned heap can allow a user with elevated privileges to cause…NVIDIA DGX servers
- CVE-2023-25505NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler of the AMI MegaRAC BMC , where an attacker with the appropriate level of…NVIDIA DGX servers
- CVE-2023-0209NVIDIA DGX-1 SBIOS contains a vulnerability in the Uncore PEI module, where authentication of the code executed by SSA is missing, which…NVIDIA DGX servers
- CVE-2023-0207NVIDIA DGX-2 SBIOS contains a vulnerability where an attacker may modify the ServerSetup NVRAM variable at runtime by executing privileged…NVIDIA DGX servers
- CVE-2023-0206NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of SMRAM by exploiting the NVME SMM API.NVIDIA DGX servers
- CVE-2023-0202NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of SMRAM by exploiting the GenericSio and…NVIDIA DGX servers
- CVE-2023-0200NVIDIA DGX-2 contains a vulnerability in OFBD where a user with high privileges and a pre-conditioned heap can cause an access beyond a…NVIDIA DGX servers
- CVE-2023-0184NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler which may lead to denial of…NVIDIA GPU Display Driver
- CVE-2023-2239Exposure of Private Personal Information to an Unauthorized Actor in microweber/microwebermicroweber/microweber
- CVE-2023-2240Improper Privilege Management in microweber/microwebermicroweber/microweber
Medium, low and unrated 20
- CVE-2022-4944kalcaddle KodExplorer cross-site request forgerykalcaddle KodExplorer
- CVE-2023-2245hansunCMS unrestricted uploadhansunCMS
- CVE-2023-2244SourceCodester Online Eyewear Shop GET Parameter update_status.php sql injectionSourceCodester Online Eyewear Shop
- CVE-2023-2243SourceCodester Complaint Management System POST Parameter registration.php sql injectionSourceCodester Complaint Management System
- CVE-2023-2242SourceCodester Online Computer and Laptop Store GET Parameter sql injectionSourceCodester Online Computer and Laptop Store
- CVE-2023-2241PoDoFo PdfXRefStreamParserObject.cpp readXRefStreamEntry heap-based overflowPoDoFo
- CVE-2023-25514NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by…NVIDIA CUDA Toolkit
- CVE-2023-25513NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by…NVIDIA CUDA Toolkit
- CVE-2023-25512NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds memory read…NVIDIA CUDA Toolkit
- CVE-2023-25511NVIDIA CUDA Toolkit for Linux and Windows contains a vulnerability in cuobjdump, where a division-by-zero error may enable a user to cause…NVIDIA CUDA Toolkit
- CVE-2023-25510NVIDIA CUDA Toolkit SDK for Linux and Windows contains a NULL pointer dereference in cuobjdump, where a local user running the tool…NVIDIA CUDA Toolkit
- CVE-2023-25509NVIDIA DGX-1 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of service, and escalation of privileges.NVIDIA DGX servers
- CVE-2023-25508NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler, where an attacker with the appropriate level of authorization can upload…NVIDIA DGX servers
- CVE-2023-0205NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can exploit…NVIDIA ConnectX Firmware
- CVE-2023-0204NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can cause improper…NVIDIA ConnectX Firmware
- CVE-2023-0203NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can exploit…NVIDIA ConnectX Firmware
- CVE-2023-0201NVIDIA DGX-2 SBIOS contains a vulnerability in Bds, where a user with high privileges can cause a write beyond the bounds of an indexable…NVIDIA DGX servers
- CVE-2023-0199NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds write…NVIDIA GPU Display Driver
- CVE-2023-0190NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a NULL pointer dereference may lead to denial…NVIDIA GPU Display Driver
- CVE-2023-1875Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq