# CVEs published 2023-03-25

13 CVEs were published on March 25, 2023: 0 critical, 3 high. Days are UTC.

- [CVE-2023-1635](https://cve.now/CVE-2023-1635.md): OTCMS apiRun.php AutoRun cross site scripting (CVSS 3.5, OTCMS)
- [CVE-2023-1634](https://cve.now/CVE-2023-1634.md): OTCMS URL Parameter info\_deal.php UseCurl server-side request forgery (CVSS 6.3, OTCMS)
- [CVE-2016-15030](https://cve.now/CVE-2016-15030.md): Arno0x TwoFactorAuth login.php redirect (CVSS 3.5, Arno0x TwoFactorAuth)
- [CVE-2015-10097](https://cve.now/CVE-2015-10097.md): grinnellplans-php read.php interface\_disp\_page sql injection (CVSS 6.3, grinnellplans-php)
- [CVE-2023-1631](https://cve.now/CVE-2023-1631.md): JiangMin Antivirus IOCTL kvcore.sys 0x222010 null pointer dereference (CVSS 5.5, JiangMin Antivirus)
- [CVE-2023-1630](https://cve.now/CVE-2023-1630.md): JiangMin Antivirus IOCTL kvcore.sys 0x222000 denial of service (CVSS 5.5, JiangMin Antivirus)
- [CVE-2023-1629](https://cve.now/CVE-2023-1629.md): JiangMin Antivirus IOCTL kvcore.sys 0x222010 memory corruption (CVSS 5.3, JiangMin Antivirus)
- [CVE-2023-1628](https://cve.now/CVE-2023-1628.md): Jianming Antivirus IoControlCode kvcore.sys null pointer dereference (CVSS 5.5, Jianming Antivirus)
- [CVE-2023-1627](https://cve.now/CVE-2023-1627.md): Jianming Antivirus IoControlCode kvcore.sys denial of service (CVSS 5.5, Jianming Antivirus)
- [CVE-2023-1626](https://cve.now/CVE-2023-1626.md): Jianming Antivirus IoControlCode kvcore.sys memory corruption (CVSS 5.3, Jianming Antivirus)
- [CVE-2023-1456](https://cve.now/CVE-2023-1456.md): A vulnerability, which was classified as critical, has been found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6. (CVSS 7.2, Ubiquiti EdgeRouter X)
- [CVE-2023-1457](https://cve.now/CVE-2023-1457.md): A vulnerability, which was classified as critical, was found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6. (CVSS 7.2, Ubiquiti EdgeRouter X)
- [CVE-2023-1458](https://cve.now/CVE-2023-1458.md): A vulnerability has been found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6 and classified as critical. (CVSS 7.2, Ubiquiti EdgeRouter X)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-03-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.