# CVEs published 2023-03-14

161 CVEs were published on March 14, 2023: 13 critical, 70 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2023-28005](https://cve.now/CVE-2023-28005.md): A vulnerability in Trend Micro Endpoint Encryption Full Disk Encryption version 6.0.0.3204 and below could allow an attacker with physical a (CVSS 6.8, Trend Micro Endpoint Encryption Full Disk Encryption)
- [CVE-2023-27590](https://cve.now/CVE-2023-27590.md): Rizin has stack-based buffer overflow when parsing GDB registers profile files (CVSS 7.8, rizinorg rizin)
- [CVE-2023-27589](https://cve.now/CVE-2023-27589.md): Minio vulnerable to denial of access by an admin privileged user for root credential (CVSS 6.5, minio)
- [CVE-2023-27588](https://cve.now/CVE-2023-27588.md): Unauthenticated path traversal vulnerability in Hasura GraphQL Engine (CVSS 7.5, hasura graphql-engine)
- [CVE-2023-24892](https://cve.now/CVE-2023-24892.md): Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability (CVSS 8.2, Microsoft Edge)
- [CVE-2023-24890](https://cve.now/CVE-2023-24890.md): Microsoft OneDrive for iOS Security Feature Bypass Vulnerability (CVSS 6.5, Microsoft OneDrive for iOS)
- [CVE-2023-24880](https://cve.now/CVE-2023-24880.md): Windows SmartScreen Security Feature Bypass Vulnerability (CVSS 4.4, KEV, Microsoft Windows)
- [CVE-2023-24876](https://cve.now/CVE-2023-24876.md): Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2023-24913](https://cve.now/CVE-2023-24913.md): Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2023-24872](https://cve.now/CVE-2023-24872.md): Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2023-24871](https://cve.now/CVE-2023-24871.md): Windows Bluetooth Service Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows Server · Microsoft Windows)
- [CVE-2023-24911](https://cve.now/CVE-2023-24911.md): Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability (CVSS 4.3, Microsoft Windows)
- [CVE-2023-24870](https://cve.now/CVE-2023-24870.md): Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2023-24910](https://cve.now/CVE-2023-24910.md): Windows Graphics Component Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows · Microsoft Office 2019 for Mac +3)
- [CVE-2023-24909](https://cve.now/CVE-2023-24909.md): Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2023-24869](https://cve.now/CVE-2023-24869.md): Remote Procedure Call Runtime Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2023-24908](https://cve.now/CVE-2023-24908.md): Remote Procedure Call Runtime Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2023-24868](https://cve.now/CVE-2023-24868.md): Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2023-24907](https://cve.now/CVE-2023-24907.md): Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2023-24867](https://cve.now/CVE-2023-24867.md): Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2023-24906](https://cve.now/CVE-2023-24906.md): Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2023-24866](https://cve.now/CVE-2023-24866.md): Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2023-24865](https://cve.now/CVE-2023-24865.md): Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2023-24864](https://cve.now/CVE-2023-24864.md): Microsoft PostScript and PCL6 Class Printer Driver Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2023-24863](https://cve.now/CVE-2023-24863.md): Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2023-24862](https://cve.now/CVE-2023-24862.md): Windows Secure Channel Denial of Service Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2023-24861](https://cve.now/CVE-2023-24861.md): Windows Graphics Component Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2023-24859](https://cve.now/CVE-2023-24859.md): Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2023-24858](https://cve.now/CVE-2023-24858.md): Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2023-24857](https://cve.now/CVE-2023-24857.md): Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2023-23423](https://cve.now/CVE-2023-23423.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-23422](https://cve.now/CVE-2023-23422.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-23421](https://cve.now/CVE-2023-23421.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-23420](https://cve.now/CVE-2023-23420.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-23419](https://cve.now/CVE-2023-23419.md): Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-23418](https://cve.now/CVE-2023-23418.md): Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-23417](https://cve.now/CVE-2023-23417.md): Windows Partition Management Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-23416](https://cve.now/CVE-2023-23416.md): Windows Cryptographic Services Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-23415](https://cve.now/CVE-2023-23415.md): Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2023-23414](https://cve.now/CVE-2023-23414.md): Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability (CVSS 7.1, Microsoft Windows)
- [CVE-2023-23413](https://cve.now/CVE-2023-23413.md): Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2023-23412](https://cve.now/CVE-2023-23412.md): Windows Accounts Picture Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-23411](https://cve.now/CVE-2023-23411.md): Windows Hyper-V Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2023-23410](https://cve.now/CVE-2023-23410.md): Windows HTTP.sys Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-23409](https://cve.now/CVE-2023-23409.md): Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2023-23408](https://cve.now/CVE-2023-23408.md): Azure Apache Ambari Spoofing Vulnerability (CVSS 4.5, Microsoft Azure HDInsight)
- [CVE-2023-23407](https://cve.now/CVE-2023-23407.md): Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability (CVSS 7.1, Microsoft Windows)
- [CVE-2023-23406](https://cve.now/CVE-2023-23406.md): Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2023-23405](https://cve.now/CVE-2023-23405.md): Remote Procedure Call Runtime Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2023-23404](https://cve.now/CVE-2023-23404.md): Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2023-23402](https://cve.now/CVE-2023-23402.md): Windows Media Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-23401](https://cve.now/CVE-2023-23401.md): Windows Media Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-23400](https://cve.now/CVE-2023-23400.md): Windows DNS Server Remote Code Execution Vulnerability (CVSS 7.2, Microsoft Windows Server)
- [CVE-2023-21708](https://cve.now/CVE-2023-21708.md): Remote Procedure Call Runtime Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2023-24891](https://cve.now/CVE-2023-24891.md): Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability (CVSS 5.4, Microsoft Dynamics 365 (on-premises))
- [CVE-2023-24930](https://cve.now/CVE-2023-24930.md): Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft OneDrive for MacOS Installer)
- [CVE-2023-24882](https://cve.now/CVE-2023-24882.md): Microsoft OneDrive for Android Information Disclosure Vulnerability (CVSS 5.5, Microsoft OneDrive for Android)
- [CVE-2023-24923](https://cve.now/CVE-2023-24923.md): Microsoft OneDrive for Android Information Disclosure Vulnerability (CVSS 5.5, Microsoft OneDrive for Android)
- [CVE-2023-24922](https://cve.now/CVE-2023-24922.md): Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability (CVSS 6.5, Microsoft Dynamics 365 (on-premises))
- [CVE-2023-24921](https://cve.now/CVE-2023-24921.md): Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability (CVSS 5.4, Microsoft Dynamics 365 (on-premises))
- [CVE-2023-24920](https://cve.now/CVE-2023-24920.md): Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability (CVSS 5.4, Microsoft Dynamics 365 (on-premises))
- [CVE-2023-24879](https://cve.now/CVE-2023-24879.md): Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability (CVSS 5.4, Microsoft Dynamics 365 (on-premises))
- [CVE-2023-24919](https://cve.now/CVE-2023-24919.md): Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability (CVSS 5.4, Microsoft Dynamics 365 (on-premises))
- [CVE-2023-24856](https://cve.now/CVE-2023-24856.md): Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2023-23403](https://cve.now/CVE-2023-23403.md): Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2023-23399](https://cve.now/CVE-2023-23399.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Office · Microsoft 365 Apps for Enterprise +1)
- [CVE-2023-23398](https://cve.now/CVE-2023-23398.md): Microsoft Excel Spoofing Vulnerability (CVSS 7.1, Microsoft Office · Microsoft 365 Apps for Enterprise +1)
- [CVE-2023-23397](https://cve.now/CVE-2023-23397.md): Microsoft Outlook Elevation of Privilege Vulnerability (CVSS 9.8, KEV, Microsoft Office LTSC · Microsoft Outlook +2)
- [CVE-2023-23396](https://cve.now/CVE-2023-23396.md): Microsoft Excel Denial of Service Vulnerability (CVSS 6.5, Microsoft Office Online Server · Microsoft Office Web Apps…)
- [CVE-2023-23395](https://cve.now/CVE-2023-23395.md): Microsoft SharePoint Server Spoofing Vulnerability (CVSS 3.1, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2023-23394](https://cve.now/CVE-2023-23394.md): Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2023-23393](https://cve.now/CVE-2023-23393.md): Windows BrokerInfrastructure Service Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2023-23392](https://cve.now/CVE-2023-23392.md): HTTP Protocol Stack Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows Server · Microsoft Windows)
- [CVE-2023-23391](https://cve.now/CVE-2023-23391.md): Office for Android Spoofing Vulnerability (CVSS 5.5, Microsoft Office for Android)
- [CVE-2023-23389](https://cve.now/CVE-2023-23389.md): Microsoft Defender Elevation of Privilege Vulnerability (CVSS 6.3, Microsoft Malware Protection Engine)
- [CVE-2023-23388](https://cve.now/CVE-2023-23388.md): Windows Bluetooth Driver Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2023-23385](https://cve.now/CVE-2023-23385.md): Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2023-23383](https://cve.now/CVE-2023-23383.md): Service Fabric Explorer Spoofing Vulnerability (CVSS 8.2, Microsoft Azure Service Fabric 9.0 for Linux · Microsoft… +2)
- [CVE-2022-39216](https://cve.now/CVE-2022-39216.md): Combodo iTop's weak password reset token leads to account takeover (CVSS 7.4, Combodo iTop)
- [CVE-2022-39214](https://cve.now/CVE-2022-39214.md): Authenticated users of Combodo iTop can take over any account (CVSS 9.6, Combodo iTop)
- [CVE-2023-1397](https://cve.now/CVE-2023-1397.md): SourceCodester Online Student Management System profile.php cross site scripting (CVSS 3.5, SourceCodester Online Student Management System)
- [CVE-2023-25596](https://cve.now/CVE-2023-25596.md): Authenticated Sensitive Information Disclosure in ClearPass Policy Manager (CVSS 4.5, Hewlett Packard Enterprise (HPE) Aruba ClearPass Policy Man…)
- [CVE-2023-25595](https://cve.now/CVE-2023-25595.md): Sensitive Information Disclosure in ClearPass OnGuard Ubuntu Agent (CVSS 5.5, Hewlett Packard Enterprise (HPE) Aruba ClearPass Policy Man…)
- [CVE-2023-25594](https://cve.now/CVE-2023-25594.md): Authorization Bypass Leading to Privilege Escalation in ClearPass Policy Manager Web-Based Management Interface (CVSS 6.3, Hewlett Packard Enterprise (HPE) Aruba ClearPass Policy Man…)
- [CVE-2023-25593](https://cve.now/CVE-2023-25593.md): Reflected Cross Site Scripting Vulnerabilities (XSS) in ClearPass Policy Manager Web-Based Management Interface (CVSS 7.1, Hewlett Packard Enterprise (HPE) Aruba ClearPass Policy Man…)
- [CVE-2023-25592](https://cve.now/CVE-2023-25592.md): Reflected Cross Site Scripting Vulnerabilities (XSS) in ClearPass Policy Manager Web-Based Management Interface (CVSS 7.1, Hewlett Packard Enterprise (HPE) Aruba ClearPass Policy Man…)
- [CVE-2023-25591](https://cve.now/CVE-2023-25591.md): Authenticated Information Disclosure in ClearPass Policy Manager Web-Based Management Interface (CVSS 7.6, Hewlett Packard Enterprise (HPE) Aruba ClearPass Policy Man…)
- [CVE-2023-25590](https://cve.now/CVE-2023-25590.md): Local Privilege Escalation in ClearPass OnGuard Linux Agent (CVSS 7.8, Hewlett Packard Enterprise (HPE) Aruba ClearPass Policy Man…)
- [CVE-2023-1299](https://cve.now/CVE-2023-1299.md): Nomad Job Submitter Privilege Escalation Using Workload Identity (CVSS 7.4, HashiCorp Nomad · github.com/hashicorp/nomad)
- [CVE-2023-1296](https://cve.now/CVE-2023-1296.md): Nomad ACLs Can Not Deny Access to Workload's Own Variables (CVSS 2.7, HashiCorp Nomad · github.com/hashicorp/nomad)
- [CVE-2023-25589](https://cve.now/CVE-2023-25589.md): Unauthenticated Arbitrary User Creation Leads to Complete System Compromise (CVSS 9.8, Hewlett Packard Enterprise (HPE) Aruba ClearPass Policy Man…)
- [CVE-2023-1398](https://cve.now/CVE-2023-1398.md): XiaoBingBy TeaCMS upload path traversal (CVSS 6.3, XiaoBingBy TeaCMS)
- [CVE-2023-1396](https://cve.now/CVE-2023-1396.md): SourceCodester Online Tours & Travels Management System traveller\_details.php cross site scripting (CVSS 3.5, SourceCodester Online Tours & Travels Management System)
- [CVE-2023-1395](https://cve.now/CVE-2023-1395.md): SourceCodester Yoga Class Registration System list.php query cross site scripting (CVSS 3.5, SourceCodester Yoga Class Registration System)
- [CVE-2023-1394](https://cve.now/CVE-2023-1394.md): SourceCodester Online Graduate Tracer System bsitemp.php mysqli\_query sql injection (CVSS 6.3, SourceCodester Online Graduate Tracer System)
- [CVE-2023-1392](https://cve.now/CVE-2023-1392.md): SourceCodester Online Pizza Ordering System save\_menu unrestricted upload (CVSS 6.3, SourceCodester Online Pizza Ordering System)
- [CVE-2023-1391](https://cve.now/CVE-2023-1391.md): SourceCodester Online Tours & Travels Management System ab.php unrestricted upload (CVSS 4.7, SourceCodester Online Tours & Travels Management System)
- [CVE-2023-27463](https://cve.now/CVE-2023-27463.md): A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \< V5.3). (CVSS 8.8, Siemens RUGGEDCOM CROSSBOW)
- [CVE-2023-27462](https://cve.now/CVE-2023-27462.md): A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \< V5.3). (CVSS 3.1, Siemens RUGGEDCOM CROSSBOW)
- [CVE-2023-27406](https://cve.now/CVE-2023-27406.md): A vulnerability has been identified in Tecnomatix Plant Simulation (All versions \< V2201.0006). (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-27405](https://cve.now/CVE-2023-27405.md): A vulnerability has been identified in Tecnomatix Plant Simulation (All versions \< V2201.0006). (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-27404](https://cve.now/CVE-2023-27404.md): A vulnerability has been identified in Tecnomatix Plant Simulation (All versions \< V2201.0006). (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-27403](https://cve.now/CVE-2023-27403.md): A vulnerability has been identified in Tecnomatix Plant Simulation (All versions \< V2201.0006). (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-27402](https://cve.now/CVE-2023-27402.md): A vulnerability has been identified in Tecnomatix Plant Simulation (All versions \< V2201.0006). (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-27401](https://cve.now/CVE-2023-27401.md): A vulnerability has been identified in Tecnomatix Plant Simulation (All versions \< V2201.0006). (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-27400](https://cve.now/CVE-2023-27400.md): A vulnerability has been identified in Tecnomatix Plant Simulation (All versions \< V2201.0006). (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-27399](https://cve.now/CVE-2023-27399.md): A vulnerability has been identified in Tecnomatix Plant Simulation (All versions \< V2201.0006). (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-27398](https://cve.now/CVE-2023-27398.md): A vulnerability has been identified in Tecnomatix Plant Simulation (All versions \< V2201.0006). (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-27310](https://cve.now/CVE-2023-27310.md): A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \< V5.2). (CVSS 6.6, Siemens RUGGEDCOM CROSSBOW)
- [CVE-2023-27309](https://cve.now/CVE-2023-27309.md): A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions \< V5.2). (CVSS 5.0, Siemens RUGGEDCOM CROSSBOW)
- [CVE-2023-25957](https://cve.now/CVE-2023-25957.md): A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions \>= V1.16.4 \< V1.17.3), Mendix SAML (Mendix 8 compatib (CVSS 9.1, Siemens Mendix SAML)
- [CVE-2022-47143](https://cve.now/CVE-2022-47143.md): WordPress Multiple Page Generator Plugin – MPG Plugin \<= 3.3.9 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Themeisle Multiple Page Generator Plugin – MPG)
- [CVE-2022-47141](https://cve.now/CVE-2022-47141.md): WordPress WP Dynamic Keywords Injector Plugin \<= 2.3.15 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Seerox WP Dynamic Keywords Injector)
- [CVE-2022-47422](https://cve.now/CVE-2022-47422.md): WordPress WordPress Stripe Donation and Payment Plugin Plugin \<= 3.1.5 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, HM Plugin Accept Stripe Donation – AidWP)
- [CVE-2022-47147](https://cve.now/CVE-2022-47147.md): WordPress ipBlockList Plugin \<= 1.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Kesz1 Technologies ipBlockList)
- [CVE-2022-47443](https://cve.now/CVE-2022-47443.md): WordPress Multi Rating Plugin \<= 5.0.5 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Daniel Powney Multi Rating)
- [CVE-2022-23791](https://cve.now/CVE-2022-23791.md): XSS in Firmanet Software and Technology Customer Relation Manager (CVSS 6.1, Firmanet Software and Technology Customer Relation Manager)
- [CVE-2022-23790](https://cve.now/CVE-2022-23790.md): XSS in Firmanet Software and Technology Customer Relation Manager (CVSS 6.1, Firmanet Software and Technology Customer Relation Manager)
- [CVE-2021-4195](https://cve.now/CVE-2021-4195.md): XSS in Firmanet Software and Technology Customer Relation Manager (CVSS 6.1, Firmanet Software and Technology Customer Relation Manager)
- [CVE-2022-47154](https://cve.now/CVE-2022-47154.md): WordPress CSS JS Manager Plugin \<= 2.4.49 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Pi Websolution CSS JS Manager, Async JavaScript, Defer Rend…)
- [CVE-2022-47155](https://cve.now/CVE-2022-47155.md): WordPress Slider by Supsystic Plugin \<= 1.8.5 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Slider by Supsystic)
- [CVE-2022-47162](https://cve.now/CVE-2022-47162.md): WordPress DH – Anti AdBlocker Plugin \<= 36 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Dannie Herdyawan DH – Anti AdBlocker)
- [CVE-2022-47163](https://cve.now/CVE-2022-47163.md): WordPress WP CSV to Database Plugin \<= 2.6 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 3.1, Tips and Tricks HQ, josh401 WP CSV to Database – Insert CSV…)
- [CVE-2022-47171](https://cve.now/CVE-2022-47171.md): WordPress IP Vault – WP Firewall Plugin \<= 1.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Paul C. Schroeder IP Vault – WP Firewall)
- [CVE-2022-47595](https://cve.now/CVE-2022-47595.md): WordPress WP Google Maps Plugin \<= 9.0.15 is vulnerable to Path Traversal (CVSS 4.9, WP Go Maps)
- [CVE-2023-27895](https://cve.now/CVE-2023-27895.md): Information Disclosure vulnerability in SAP Authenticator for Android (CVSS 6.1, SAP Authenticator for Android)
- [CVE-2023-27893](https://cve.now/CVE-2023-27893.md): Arbitrary Code Execution in SAP Solution Manager and ABAP managed systems (ST-PI) (CVSS 8.8, SAP Solution Manager and ABAP managed systems)
- [CVE-2023-27501](https://cve.now/CVE-2023-27501.md): Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform (CVSS 8.7, SAP NetWeaver AS for ABAP and ABAP Platform)
- [CVE-2023-27500](https://cve.now/CVE-2023-27500.md): Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform (CVSS 9.6, NetWeaver AS for ABAP and ABAP Platform)
- [CVE-2023-27498](https://cve.now/CVE-2023-27498.md): Memory Corruption vulnerability in SAP Host Agent (SAPOSCOL) (CVSS 7.2, Host Agent)
- [CVE-2023-27894](https://cve.now/CVE-2023-27894.md): Sensitive Information Disclosure in the SAP BusinessObjects Business Intelligence platform (CVSS 5.0, SAP BusinessObjects Business Intelligence Platform)
- [CVE-2023-27896](https://cve.now/CVE-2023-27896.md): Server Side Request Forgery (SSRF) in the SAP BusinessObjects Business Intelligence platform (CVSS 6.5, SAP BusinessObjects Business Intelligence Platform)
- [CVE-2023-27271](https://cve.now/CVE-2023-27271.md): Server Side Request Forgery (SSRF) in the SAP BusinessObjects Business Intelligence platform (CVSS 6.5, SAP BusinessObjects Business Intelligence Platform)
- [CVE-2023-27270](https://cve.now/CVE-2023-27270.md): Denial of Service (DoS) in SAP NetWeaver AS for ABAP and ABAP Platform (CVSS 6.5, SAP NetWeaver Application Server for ABAP and ABAP Platform)
- [CVE-2023-27269](https://cve.now/CVE-2023-27269.md): Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform (CVSS 9.6, SAP NetWeaver Application Server for ABAP and ABAP Platform)
- [CVE-2023-27268](https://cve.now/CVE-2023-27268.md): Improper Access Control in SAP NetWeaver AS Java (Object Analyzing Service) (CVSS 5.3, SAP NetWeaver AS Java)
- [CVE-2023-26461](https://cve.now/CVE-2023-26461.md): XML External Entity (XXE) vulnerability in SAP NetWeaver (SAP Enterprise Portal) (CVSS 6.8, NetWeaver)
- [CVE-2023-26460](https://cve.now/CVE-2023-26460.md): Improper Access Control in SAP NetWeaver AS Java (Cache Management Service) (CVSS 5.3, SAP NetWeaver AS for Java)
- [CVE-2023-26457](https://cve.now/CVE-2023-26457.md): Cross-Site Scripting (XSS) vulnerability in SAP Content Server (CVSS 6.1, SAP Content Server)
- [CVE-2023-25618](https://cve.now/CVE-2023-25618.md): Denial of Service (DoS) vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform (CVSS 6.5, SAP NetWeaver AS for ABAP and ABAP Platform)
- [CVE-2023-26459](https://cve.now/CVE-2023-26459.md): Server Side Request Forgery (SSRF) vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform (CVSS 7.4, SAP NetWeaver AS for ABAP and ABAP Platform)
- [CVE-2023-25617](https://cve.now/CVE-2023-25617.md): OS Command Execution vulnerability in SAP Business Objects Business Intelligence Platform (Adaptive Job Server) (CVSS 9.0, SAP Business Objects · sap-ai-sdk-base)
- [CVE-2023-25616](https://cve.now/CVE-2023-25616.md): Code Injection vulnerability in SAP Business Objects Business Intelligence Platform (CMC) (CVSS 9.9, SAP Business Objects Business Intelligence Platform)
- [CVE-2023-25615](https://cve.now/CVE-2023-25615.md): SQL Injection vulnerability in SAP ABAP Platform (CVSS 6.8, SAP ABAP Platform)
- [CVE-2023-24526](https://cve.now/CVE-2023-24526.md): Improper Access Control in SAP NetWeaver AS Java (Classload Service) (CVSS 5.3, SAP NetWeaver AS Java for Classload Service)
- [CVE-2023-23857](https://cve.now/CVE-2023-23857.md): Improper Access Control in SAP NetWeaver AS for Java (CVSS 9.9, SAP NetWeaver AS for Java)
- [CVE-2023-0021](https://cve.now/CVE-2023-0021.md): Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver (CVSS 6.1, SAP\_SE SAP NetWeaver)
- [CVE-2023-1327](https://cve.now/CVE-2023-1327.md): Netgear RAX30 (AX2400), prior to version 1.0.6.74, was affected by an authentication bypass vulnerability, allowing an unauthenticated attac (no CVSS, Netgear RAX30)
- [CVE-2023-24180](https://cve.now/CVE-2023-24180.md): Libelfin v0.3 was discovered to contain an integer overflow in the load function at elf/mmap\_loader.cc. (no CVSS)
- [CVE-2023-24279](https://cve.now/CVE-2023-24279.md): A cross-site scripting (XSS) vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbi (no CVSS, org.onosproject:onos-archetypes)
- [CVE-2023-25206](https://cve.now/CVE-2023-25206.md): PrestaShop ws\_productreviews \< 3.6.2 is vulnerable to SQL Injection. (no CVSS)
- [CVE-2023-26262](https://cve.now/CVE-2023-26262.md): An issue was discovered in Sitecore XP/XM 10.3. (CVSS 7.2)
- [CVE-2023-26511](https://cve.now/CVE-2023-26511.md): A Hard Coded Admin Credentials issue in the Web-UI Admin Panel in Propius MachineSelector 6.6.0 and 6.6.1 allows remote attackers to gain ac (CVSS 9.8)
- [CVE-2023-27069](https://cve.now/CVE-2023-27069.md): A stored cross-site scripting (XSS) vulnerability in TotalJS OpenPlatform commit b80b09d allows attackers to execute arbitrary web scripts o (CVSS 5.4)
- [CVE-2023-27070](https://cve.now/CVE-2023-27070.md): A stored cross-site scripting (XSS) vulnerability in TotalJS OpenPlatform commit b80b09d allows attackers to execute arbitrary web scripts o (CVSS 5.4)
- [CVE-2023-27073](https://cve.now/CVE-2023-27073.md): A Cross-Site Request Forgery (CSRF) in Online Food Ordering System v1.0 allows attackers to change user details and credentials via a crafte (CVSS 6.5)
- [CVE-2023-27074](https://cve.now/CVE-2023-27074.md): BP Monitoring Management System v1.0 was discovered to contain a SQL injection vulnerability via the emailid parameter in the login page. (no CVSS)
- [CVE-2023-27585](https://cve.now/CVE-2023-27585.md): PJSIP is a free and open source multimedia communication library written in C. (CVSS 7.5, pjsip pjproject)
- [CVE-2023-28144](https://cve.now/CVE-2023-28144.md): KDAB Hotspot 1.3.x and 1.4.x through 1.4.1, in a non-default configuration, allows privilege escalation because of race conditions involving (CVSS 7.0)
- [CVE-2023-28339](https://cve.now/CVE-2023-28339.md): OpenDoas through 6.8.2, when TIOCSTI is available, allows privilege escalation because of sharing a terminal with the original session. (CVSS 8.8)
- [CVE-2023-28343](https://cve.now/CVE-2023-28343.md): OS command injection affects Altenergy Power Control Software C1.2.5 via shell metacharacters in the index.php/management/set\_timezone timez (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-03-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.