CVEs published March 26, 2023
15 CVEs were published on March 26, 2023: 2 critical, 0 high.
- Published
- 15
- Critical
- 2
- High
- 0
- Medium
- 9
- Low
- 0
- Unrated
- 4
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- IObit Malware Fighter
- 9
- redis
- 2
Critical 2
- CVE-2023-26801LB-LINK BL-AC1900_2.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a com
- CVE-2023-26802An issue in the component /network_config/nsg_masq.cgi of DCN (Digital China Networks) DCBI-Netlog-LAB v1.0 allows attackers to bypass authe
Medium, low and unrated 13
- CVE-2023-1646IObit Malware Fighter IOCTL IMFCameraProtect.sys 0x8018E004 stack-based overflowIObit Malware Fighter
- CVE-2023-1645IObit Malware Fighter IOCTL IMFCameraProtect.sys 0x8018E008 denial of serviceIObit Malware Fighter
- CVE-2023-1644IObit Malware Fighter IOCTL IMFCameraProtect.sys 0x8018E010 denial of serviceIObit Malware Fighter
- CVE-2023-1643IObit Malware Fighter IOCTL ImfHpRegFilter.sys 0x8001E040 denial of serviceIObit Malware Fighter
- CVE-2023-1642IObit Malware Fighter IOCTL ObCallbackProcess.sys 0x222040 denial of serviceIObit Malware Fighter
- CVE-2023-1641IObit Malware Fighter IOCTL ObCallbackProcess.sys 0x222018 denial of serviceIObit Malware Fighter
- CVE-2023-1640IObit Malware Fighter IOCTL ObCallbackProcess.sys 0x222010 denial of serviceIObit Malware Fighter
- CVE-2023-1639IObit Malware Fighter IOCTL ImfRegistryFilter.sys 0x8001E04C denial of serviceIObit Malware Fighter
- CVE-2023-1638IObit Malware Fighter IOCTL ImfRegistryFilter.sys 0x8001E040 denial of serviceIObit Malware Fighter
- CVE-2023-26800Ruijie Networks RG-EW1200 Wireless Routers EW_3.0(1)B11P204 was discovered to contain a command injetion vulnerability via the params.path p
- CVE-2023-27796RG-EW1200G PRO Wireless Routers EW_3.0(1)B11P204, RG-EW1800GX PRO Wireless Routers EW_3.0(1)B11P204, and RG-EW3200GX PRO Wireless Routers EW
- CVE-2023-28858redis-py before 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to redis
- CVE-2023-28859redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and canredis