CVEs published March 18, 2023
23 CVEs were published on March 18, 2023: 1 critical, 3 high.
- Published
- 23
- Critical
- 1
- High
- 3
- Medium
- 16
- Low
- 3
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- Max Secure Anti Virus Plus
- 4
- Lespeed WiseCleaner Wise System Monitor
- 3
- SourceCodester Monitoring of Students Cyber Accounts System
- 2
- collection.js
- 1
- com.fasterxml.jackson.core:jackson-databind
- 1
- github.com/ansible-semaphore/semaphore
- 1
- HkCms
- 1
- IBOS
- 1
- Lespeed WiseCleaner Wise Force Deleter
- 1
- Rebuild
- 1
Critical 1
High 3
- CVE-2023-1489Lespeed WiseCleaner Wise System Monitor IoControlCode WiseHDInfo64.dll 0x9C402088 access controlLespeed WiseCleaner Wise System Monitor
- CVE-2023-26113Versions of the package collection.js before 6.8.1 are vulnerable to Prototype Pollution via the extend function in Collection.js/dist/node/collection.js
- CVE-2021-46877jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient com.fasterxml.jackson.core:jackson-databind
Medium, low and unrated 19
- CVE-2023-1495Rebuild list queryListOfConfig sql injectionRebuild
- CVE-2023-1494IBOS ApiController.php sql injectionIBOS
- CVE-2023-1493Max Secure Anti Virus Plus IoControlCode MaxProctetor64.sys 0x220019 denial of serviceMax Secure Anti Virus Plus
- CVE-2023-1492Max Secure Anti Virus Plus IoControlCode MaxProc64.sys 0x220019 denial of serviceMax Secure Anti Virus Plus
- CVE-2023-1491Max Secure Anti Virus Plus IoControlCode MaxCryptMon.sys 0x220020 access controlMax Secure Anti Virus Plus
- CVE-2023-1490Max Secure Anti Virus Plus IoControlCode SDActMon.sys 0x220020 access controlMax Secure Anti Virus Plus
- CVE-2023-1488Lespeed WiseCleaner Wise System Monitor IoControlCode WiseHDInfo64.dll 0x9C40A0E0 denial of serviceLespeed WiseCleaner Wise System Monitor
- CVE-2023-1487Lespeed WiseCleaner Wise System Monitor IoControlCode WiseHDInfo64.dll 0x9C40A0E0 denial of serviceLespeed WiseCleaner Wise System Monitor
- CVE-2023-1486Lespeed WiseCleaner Wise Force Deleter IoControlCode WiseUnlock64.sys 0x220004 access controlLespeed WiseCleaner Wise Force Deleter
- CVE-2023-1485SourceCodester Young Entrepreneur E-Negosyo System GET Parameter index.php cross site scriptingSourceCodester Young Entrepreneur E-Negosyo System
- CVE-2023-1484xzjie cms upload unrestricted uploadxzjie cms
- CVE-2023-1483XiaoBingBy TeaCMS getallarticleinfo sql injectionXiaoBingBy TeaCMS
- CVE-2023-1482HkCms External Plugin code injectionHkCms
- CVE-2023-1481SourceCodester Monitoring of Students Cyber Accounts System POST Parameter cross site scriptingSourceCodester Monitoring of Students Cyber Accounts System
- CVE-2023-1480SourceCodester Monitoring of Students Cyber Accounts System POST Parameter login.php sql injectionSourceCodester Monitoring of Students Cyber Accounts System
- CVE-2023-1479SourceCodester Simple Music Player save_music.php unrestricted uploadSourceCodester Simple Music Player
- CVE-2023-24278Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting (XSS) vulnerability.
- CVE-2023-28606js/event-graph.js in MISP before 2.4.169 allows XSS via event-graph node tooltips.
- CVE-2023-28607js/event-graph.js in MISP before 2.4.169 allows XSS via the event-graph relationship tooltip.