# CVEs published 2023-03-16

106 CVEs were published on March 16, 2023: 13 critical, 43 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2023-1436](https://cve.now/CVE-2023-1436.md): Infinite recursion in Jettison leads to denial of service when creating a crafted JSONArray (CVSS 5.9, jettison · org.codehaus.jettison:jettison)
- [CVE-2023-27494](https://cve.now/CVE-2023-27494.md): Streamlit Cross-site Scripting vulnerability (CVSS 5.9, streamlit)
- [CVE-2023-23935](https://cve.now/CVE-2023-23935.md): Presence of restricted personal Discourse messages may be leaked if tagged with a tag (CVSS 3.5, discourse)
- [CVE-2022-43605](https://cve.now/CVE-2022-43605.md): An out-of-bounds write vulnerability exists in the SetAttributeList attribute\_count\_request functionality of EIP Stack Group OpENer developm (CVSS 10.0, EIP Stack Group OpENer)
- [CVE-2022-43604](https://cve.now/CVE-2022-43604.md): An out-of-bounds write vulnerability exists in the GetAttributeList attribute\_count\_request functionality of EIP Stack Group OpENer developm (CVSS 10.0, EIP Stack Group OpENer)
- [CVE-2022-43441](https://cve.now/CVE-2022-43441.md): A code execution vulnerability exists in the Statement Bindings functionality of Ghost Foundation node-sqlite3 5.1.1. (CVSS 8.1, Ghost Foundation node-sqlite3 · sqlite3)
- [CVE-2022-43606](https://cve.now/CVE-2022-43606.md): A use-of-uninitialized-pointer vulnerability exists in the Forward Open connection\_management\_entry functionality of EIP Stack Group OpENer (CVSS 7.5, EIP Stack Group OpENer)
- [CVE-2023-0598](https://cve.now/CVE-2023-0598.md): GE Digital Proficy Code Injection (CVSS 7.8, GE Digital Proficy iFIX)
- [CVE-2023-1256](https://cve.now/CVE-2023-1256.md): CVE-2023-1256 (CVSS 9.8, AVEVA Plant SCADA · AVEVA Telemetry Server)
- [CVE-2023-0811](https://cve.now/CVE-2023-0811.md): Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. (CVSS 9.1, Omron CJ1M SYSMAC CJ-series · Omron CJ1M SYSMAC CS-series +1)
- [CVE-2023-28109](https://cve.now/CVE-2023-28109.md): Play With Docker vulnerable to Authorization Bypass Through User-Controlled Key (CVSS 6.5, play-with-docker · github.com/play-with-docker/play-with-do…)
- [CVE-2023-28108](https://cve.now/CVE-2023-28108.md): Pimcore has improper quoting of columns when calling methods "getByUuid" & "exists" on UUID Model (CVSS 7.9, pimcore · pimcore/pimcore)
- [CVE-2023-28106](https://cve.now/CVE-2023-28106.md): Pimcore vulnerable to Cross-site Scripting in UrlSlug Data type (CVSS 6.1, pimcore · pimcore/pimcore)
- [CVE-2023-28105](https://cve.now/CVE-2023-28105.md): Go-huge-util vulnerable to path traversal when unzipping files (CVSS 8.8, dablelv go-huge-util · github.com/dablelv/go-huge-util)
- [CVE-2023-28110](https://cve.now/CVE-2023-28110.md): JumpServer Koko vulnerable to Command Injection for Kubernetes Connection (CVSS 5.7, jumpserver)
- [CVE-2023-28101](https://cve.now/CVE-2023-28101.md): Flatpak metadata with ANSI control codes can cause misleading terminal output (CVSS 5.0, flatpak)
- [CVE-2023-28100](https://cve.now/CVE-2023-28100.md): TIOCLINUX can send commands outside sandbox if running on a virtual console (CVSS 10.0, flatpak)
- [CVE-2023-28104](https://cve.now/CVE-2023-28104.md): silverstripe/graphql Denial of Service vulnerability (CVSS 7.5, silverstripe-graphql · silverstripe/graphql)
- [CVE-2021-36821](https://cve.now/CVE-2021-36821.md): WordPress Forminator plugin \<= 1.14.11 - Stored Cross-Site Scripting (XSS) vulnerability (CVSS 7.1, WPMU DEV Forminator)
- [CVE-2023-1433](https://cve.now/CVE-2023-1433.md): SourceCodester Gadget Works Online Ordering System Products unrestricted upload (CVSS 4.7, SourceCodester Gadget Works Online Ordering System)
- [CVE-2022-26080](https://cve.now/CVE-2022-26080.md): Easily guessable session ID's in NE843 Pulsar Plus Controller (CVSS 6.3, ABB Pulsar Plus System Controller NE843\_S · ABB Infinity DC…)
- [CVE-2023-1432](https://cve.now/CVE-2023-1432.md): SourceCodester Online Food Ordering System POST Request access control (CVSS 7.3, SourceCodester Online Food Ordering System)
- [CVE-2023-27875](https://cve.now/CVE-2023-27875.md): IBM Aspera Faspex improper access controls (CVSS 7.5, IBM Aspera Faspex)
- [CVE-2023-1431](https://cve.now/CVE-2023-1431.md): The WP Simple Shopping Cart plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.6.3 due (CVSS 5.3, wptipsntricks WordPress Simple Shopping Cart)
- [CVE-2022-34423](https://cve.now/CVE-2022-34423.md): Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. (CVSS 7.5, Dell PowerEdge Platform)
- [CVE-2022-34422](https://cve.now/CVE-2022-34422.md): Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. (CVSS 7.5, Dell PowerEdge Platform)
- [CVE-2022-34421](https://cve.now/CVE-2022-34421.md): Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. (CVSS 7.5, Dell PowerEdge Platform)
- [CVE-2022-34420](https://cve.now/CVE-2022-34420.md): Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. (CVSS 7.5, Dell PowerEdge Platform)
- [CVE-2022-34419](https://cve.now/CVE-2022-34419.md): Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. (CVSS 7.5, Dell PowerEdge Platform)
- [CVE-2022-34418](https://cve.now/CVE-2022-34418.md): Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. (CVSS 7.5, Dell PowerEdge Platform)
- [CVE-2022-34417](https://cve.now/CVE-2022-34417.md): Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. (CVSS 7.5, Dell PowerEdge Platform)
- [CVE-2022-34416](https://cve.now/CVE-2022-34416.md): Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. (CVSS 7.5, Dell PowerEdge Platform)
- [CVE-2022-34415](https://cve.now/CVE-2022-34415.md): Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. (CVSS 7.5, Dell PowerEdge Platform)
- [CVE-2022-34414](https://cve.now/CVE-2022-34414.md): Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. (CVSS 7.5, Dell PowerEdge Platform)
- [CVE-2022-34413](https://cve.now/CVE-2022-34413.md): Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. (CVSS 7.5, Dell PowerEdge Platform)
- [CVE-2022-34412](https://cve.now/CVE-2022-34412.md): Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. (CVSS 7.5, Dell PowerEdge Platform)
- [CVE-2022-34411](https://cve.now/CVE-2022-34411.md): Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. (CVSS 7.5, Dell PowerEdge Platform)
- [CVE-2022-34410](https://cve.now/CVE-2022-34410.md): Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. (CVSS 7.5, Dell PowerEdge Platform)
- [CVE-2022-34409](https://cve.now/CVE-2022-34409.md): Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. (CVSS 7.5, Dell PowerEdge Platform)
- [CVE-2022-34408](https://cve.now/CVE-2022-34408.md): Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. (CVSS 7.5, Dell PowerEdge Platform)
- [CVE-2022-34407](https://cve.now/CVE-2022-34407.md): Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. (CVSS 7.5, Dell PowerEdge Platform)
- [CVE-2022-34406](https://cve.now/CVE-2022-34406.md): Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. (CVSS 7.5, Dell PowerEdge Platform)
- [CVE-2023-24571](https://cve.now/CVE-2023-24571.md): Dell BIOS contains an Improper Input Validation vulnerability. (CVSS 7.5, Dell Embedded Box PC 3000 , CPG BIOS)
- [CVE-2022-41554](https://cve.now/CVE-2022-41554.md): WordPress Slideshow SE Plugin \<= 2.5.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 4.8, John West Slideshow SE)
- [CVE-2022-40699](https://cve.now/CVE-2022-40699.md): WordPress Yet Another Stars Rating Plugin \<= 3.1.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.4, Dario Curvino Yasr – Yet Another Stars Rating)
- [CVE-2022-38971](https://cve.now/CVE-2022-38971.md): WordPress BuddyForms Plugin \<= 2.7.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 4.7, ThemeKraft Post Form – Registration Form – Profile Form for…)
- [CVE-2022-38063](https://cve.now/CVE-2022-38063.md): WordPress Social Login WP Plugin \<= 5.0.0.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Social Login WP)
- [CVE-2020-19947](https://cve.now/CVE-2020-19947.md): Cross Site Scripting vulnerability found in Markdown Edit allows a remote attacker to execute arbitrary code via the edit parameter of the w (CVSS 9.6)
- [CVE-2020-22647](https://cve.now/CVE-2020-22647.md): An issue found in DepositGame v.1.0 allows an attacker to gain sensitive information via the GetBonusWithdraw and withdraw functions. (CVSS 9.1)
- [CVE-2021-31637](https://cve.now/CVE-2021-31637.md): An issue found in UwAmp v.1.1, 1.2, 1.3, 2.0, 2.1, 2.2, 2.2.1, 3.0.0, 3.0.1, 3.0.2 allows a remote attacker to execute arbitrary code via a (CVSS 7.8)
- [CVE-2022-4009](https://cve.now/CVE-2022-4009.md): In affected versions of Octopus Deploy it is possible for a user to introduce code via offline package creation (CVSS 8.8, Octopus Deploy Octopus Server)
- [CVE-2023-1390](https://cve.now/CVE-2023-1390.md): A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. (CVSS 7.5, Linux kernel)
- [CVE-2023-1429](https://cve.now/CVE-2023-1429.md): Cross-site Scripting (XSS) - Reflected in pimcore/pimcore (CVSS 4.0, pimcore/pimcore)
- [CVE-2023-21449](https://cve.now/CVE-2023-21449.md): Improper access control vulnerability in Call application prior to SMR Mar-2023 Release 1 allows local attackers to access sensitive informa (CVSS 4.0, Samsung Mobile Devices)
- [CVE-2023-21452](https://cve.now/CVE-2023-21452.md): Improper usage of implicit intent in Bluetooth prior to SMR Mar-2023 Release 1 allows attacker to get MAC address of connected device. (CVSS 3.3, Samsung Mobile Devices)
- [CVE-2023-21453](https://cve.now/CVE-2023-21453.md): Improper input validation vulnerability in SoftSim TA prior to SMR Mar-2023 Release 1 allows local attackers access to protected data. (CVSS 6.0, Samsung Mobile Devices)
- [CVE-2023-21454](https://cve.now/CVE-2023-21454.md): Improper authorization in Samsung Keyboard prior to SMR Mar-2023 Release 1 allows physical attacker to access users text history on the lock (CVSS 2.4, Samsung Mobile Devices)
- [CVE-2023-21455](https://cve.now/CVE-2023-21455.md): Improper authorization implementation in Exynos baseband prior to SMR Mar-2023 Release 1 allows incorrect handling of unencrypted message. (CVSS 5.9, Samsung Mobile Devices)
- [CVE-2023-21456](https://cve.now/CVE-2023-21456.md): Path traversal vulnerability in Galaxy Themes Service prior to SMR Mar-2023 Release 1 allows attacker to access arbitrary file with system u (CVSS 9.0, Samsung Mobile Devices)
- [CVE-2023-21457](https://cve.now/CVE-2023-21457.md): Improper access control vulnerability in Bluetooth prior to SMR Mar-2023 Release 1 allows attackers to send file via Bluetooth without relat (CVSS 4.1, Samsung Mobile Devices)
- [CVE-2023-21458](https://cve.now/CVE-2023-21458.md): Improper privilege management vulnerability in PhoneStatusBarPolicy in System UI prior to SMR Mar-2023 Release 1 allows attacker to turn off (CVSS 6.2, Samsung Mobile Devices)
- [CVE-2023-21459](https://cve.now/CVE-2023-21459.md): Use after free vulnerability in decon driver prior to SMR Mar-2023 Release 1 allows attackers to cause memory access fault. (CVSS 5.0, Samsung Mobile Devices)
- [CVE-2023-21460](https://cve.now/CVE-2023-21460.md): Improper authentication in SecSettings prior to SMR Mar-2023 Release 1 allows attacker to reset the setting. (CVSS 4.4, Samsung Mobile Devices)
- [CVE-2023-21461](https://cve.now/CVE-2023-21461.md): Improper authorization vulnerability in AutoPowerOnOffConfirmDialog in Settings prior to SMR Mar-2023 Release 1 allows local attacker to tur (CVSS 4.0, Samsung Mobile Devices)
- [CVE-2023-21462](https://cve.now/CVE-2023-21462.md): The sensitive information exposure vulnerability in Quick Share Agent prior to versions 3.5.14.18 in Android 12 and 3.5.16.20 in Android 13 (CVSS 4.2, Samsung Mobile Quick Share Agent)
- [CVE-2023-21463](https://cve.now/CVE-2023-21463.md): Improper access control vulnerability in MyFiles application prior to versions 12.2.09.0 in Android 11, 13.1.03.501 in Android 12 and 14.1.0 (CVSS 4.0, Samsung Mobile MyFiles)
- [CVE-2023-21464](https://cve.now/CVE-2023-21464.md): Improper access control in Samsung Calendar prior to versions 12.4.02.9000 in Android 13 and 12.3.08.2000 in Android 12 allows local attacke (CVSS 4.0, Samsung Mobile Samsung Calendar)
- [CVE-2023-21465](https://cve.now/CVE-2023-21465.md): Improper access control vulnerability in BixbyTouch prior to version 3.2.02.5 in China models allows untrusted applications access local fil (CVSS 5.5, Samsung Mobile Bixby Touch)
- [CVE-2023-22880](https://cve.now/CVE-2023-22880.md): Information Disclosure in Zoom for Windows Clients (CVSS 6.8, Zoom Video Communications Zoom for Windows · Zoom Video… +1)
- [CVE-2023-22881](https://cve.now/CVE-2023-22881.md): Denial of Service in Zoom Clients (CVSS 6.5, Zoom Video Communications Zoom (for Android, iOS, Linux, ma…)
- [CVE-2023-22882](https://cve.now/CVE-2023-22882.md): Denial of Service in Zoom Clients (CVSS 6.5, Zoom Video Communications Zoom (for Android, iOS, Linux, ma…)
- [CVE-2023-22883](https://cve.now/CVE-2023-22883.md): Local Privilege Escalation in Zoom for Windows Installers (CVSS 7.2, Zoom Video Communications Zoom Client for Meetings for IT A…)
- [CVE-2023-23150](https://cve.now/CVE-2023-23150.md): SA-WR915ND router firmware v17.35.1 was discovered to be vulnerable to code execution. (CVSS 9.8)
- [CVE-2023-24671](https://cve.now/CVE-2023-24671.md): VX Search v13.8 and v14.7 was discovered to contain an unquoted service path vulnerability which allows attackers to execute arbitrary comma (no CVSS)
- [CVE-2023-24760](https://cve.now/CVE-2023-24760.md): An issue found in Ofcms v.1.1.4 allows a remote attacker to to escalate privileges via the respwd method in SysUserController. (no CVSS)
- [CVE-2023-24795](https://cve.now/CVE-2023-24795.md): Command execution vulnerability was discovered in JHR-N916R router firmware version\<=21.11.1.1483. (no CVSS)
- [CVE-2023-25280](https://cve.now/CVE-2023-25280.md): OS Command injection vulnerability in D-Link DIR820LA1\_FW105B03 allows attackers to escalate privileges to root via a crafted payload with t (CVSS 9.8, KEV)
- [CVE-2023-25281](https://cve.now/CVE-2023-25281.md): A stack overflow vulnerability exists in pingV4Msg component in D-Link DIR820LA1\_FW105B03, allows attackers to cause a denial of service via (no CVSS)
- [CVE-2023-26767](https://cve.now/CVE-2023-26767.md): Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the lou\_logFile function (no CVSS)
- [CVE-2023-26768](https://cve.now/CVE-2023-26768.md): Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the compileTranslationTab (CVSS 7.5)
- [CVE-2023-26769](https://cve.now/CVE-2023-26769.md): Buffer Overflow vulnerability found in Liblouis Lou\_Trace v.3.24.0 allows a remote attacker to cause a denial of service via the resolveSubt (no CVSS)
- [CVE-2023-26784](https://cve.now/CVE-2023-26784.md): SQL Injection vulnerability found in Kirin Fortress Machine v.1.7-2020-0610 allows attackers to execute arbitrary code via the /admin.php?co (no CVSS)
- [CVE-2023-26951](https://cve.now/CVE-2023-26951.md): onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Member List module. (no CVSS)
- [CVE-2023-27037](https://cve.now/CVE-2023-27037.md): Qibosoft QiboCMS v7 was discovered to contain a remote code execution (RCE) vulnerability via the Get\_Title function at label\_set\_rs.php (no CVSS)
- [CVE-2023-27040](https://cve.now/CVE-2023-27040.md): Simple Image Gallery v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the username parameter. (CVSS 9.8)
- [CVE-2023-27041](https://cve.now/CVE-2023-27041.md): School Registration and Fee System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at/bilal final/edit\_use (CVSS 9.8)
- [CVE-2023-27059](https://cve.now/CVE-2023-27059.md): A cross-site scripting (XSS) vulnerability in the Edit Group function of ChurchCRM v4.5.3 allows attackers to execute arbitrary web scripts (CVSS 7.8)
- [CVE-2023-27084](https://cve.now/CVE-2023-27084.md): Permissions vulnerability found in isoftforce Dreamer CMS v.4.0.1 allows local attackers to obtain sensitive information via the AttachmentC (CVSS 5.3)
- [CVE-2023-27095](https://cve.now/CVE-2023-27095.md): Insecure Permissions vulnerability found in OpenGoofy Hippo4j v.1.4.3 allows attacker toescalate privileges via the AddUser method of the Us (CVSS 6.5, cn.hippo4j:hippo4j-core)
- [CVE-2023-27130](https://cve.now/CVE-2023-27130.md): Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute arbitrary code via an arbitrarily supplied U (CVSS 4.8)
- [CVE-2023-27131](https://cve.now/CVE-2023-27131.md): Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute arbitrary code viathe Post Editorparameter. (CVSS 4.8)
- [CVE-2023-27250](https://cve.now/CVE-2023-27250.md): Online Book Store Project v1.0 is vulnerable to SQL Injection via /bookstore/bookPerPub.php. (CVSS 9.8)
- [CVE-2023-27707](https://cve.now/CVE-2023-27707.md): SQL injection vulnerability found in DedeCMS v.5.7.106 allows a remote attacker to execute arbitrary code via the rank\_\* parameter in the /d (CVSS 7.2)
- [CVE-2023-27709](https://cve.now/CVE-2023-27709.md): SQL injection vulnerability found in DedeCMS v.5.7.106 allows a remote attacker to execute arbitrary code via the rank\_\* parameter in the /d (CVSS 7.2)
- [CVE-2023-27711](https://cve.now/CVE-2023-27711.md): Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute arbitrary code via the Comment Manager /admi (CVSS 4.8)
- [CVE-2023-27783](https://cve.now/CVE-2023-27783.md): An issue found in TCPreplay tcprewrite v.4.4.3 allows a remote attacker to cause a denial of service via the tcpedit\_dlt\_cleanup function at (CVSS 7.5)
- [CVE-2023-27784](https://cve.now/CVE-2023-27784.md): An issue found in TCPReplay v.4.4.3 allows a remote attacker to cause a denial of service via the read\_hexstring function at the utils.c:309 (CVSS 7.5)
- [CVE-2023-27785](https://cve.now/CVE-2023-27785.md): An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse endpoints function. (CVSS 7.5)
- [CVE-2023-27786](https://cve.now/CVE-2023-27786.md): An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the macinstring function. (CVSS 7.5)
- [CVE-2023-27787](https://cve.now/CVE-2023-27787.md): An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse\_list function at the list.c:81 endpoin (CVSS 7.5)
- [CVE-2023-27788](https://cve.now/CVE-2023-27788.md): An issue found in TCPrewrite v.4.4.3 allows a remote attacker to cause a denial of service via the ports2PORT function at the portmap.c:69 e (CVSS 7.5)
- [CVE-2023-27789](https://cve.now/CVE-2023-27789.md): An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the cidr2cidr function at the cidr.c:178 endpoin (CVSS 7.5)
- [CVE-2023-28113](https://cve.now/CVE-2023-28113.md): russh may use insecure Diffie-Hellman keys (CVSS 5.9, warp-tech russh · russh)
- [CVE-2023-28155](https://cve.now/CVE-2023-28155.md): The Request package through 2.88.1 for Node.js allows a bypass of SSRF mitigations via an attacker-controller server that does a cross-proto (no CVSS, request · @cypress/request)
- [CVE-2023-28486](https://cve.now/CVE-2023-28486.md): Sudo before 1.9.13 does not escape control characters in log messages. (no CVSS)
- [CVE-2023-28487](https://cve.now/CVE-2023-28487.md): Sudo before 1.9.13 does not escape control characters in sudoreplay output. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-03-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.