# CVEs published 2023-03-28

148 CVEs were published on March 28, 2023: 16 critical, 83 high. Days are UTC.

- [CVE-2023-1682](https://cve.now/CVE-2023-1682.md): Xunrui CMS Install.txt direct request (CVSS 4.3, Xunrui CMS)
- [CVE-2023-1681](https://cve.now/CVE-2023-1681.md): Xunrui CMS test.php information disclosure (CVSS 4.3, Xunrui CMS)
- [CVE-2023-1679](https://cve.now/CVE-2023-1679.md): DriverGenius IOCTL mydrivers64.sys 0x9C40A108 memory corruption (CVSS 5.3, DriverGenius)
- [CVE-2023-1678](https://cve.now/CVE-2023-1678.md): DriverGenius IOCTL mydrivers64.sys 0x9C40A0E0 memory corruption (CVSS 5.3, DriverGenius)
- [CVE-2023-1677](https://cve.now/CVE-2023-1677.md): DriverGenius IOCTL mydrivers64.sys 0x9c402084 denial of service (CVSS 5.5, DriverGenius)
- [CVE-2023-1676](https://cve.now/CVE-2023-1676.md): DriverGenius IOCTL mydrivers64.sys 0x9C402088 memory corruption (CVSS 7.8, DriverGenius)
- [CVE-2023-1675](https://cve.now/CVE-2023-1675.md): SourceCodester School Registration and Fee System GET Parameter edit\_stud.php sql injection (CVSS 6.3, SourceCodester School Registration and Fee System)
- [CVE-2023-1518](https://cve.now/CVE-2023-1518.md): CP Plus KVMS Pro versions 2.01.0.T.190521 and prior are vulnerable to sensitive credentials being leaked because they are insufficiently p (CVSS 7.8, CP Plus KVMS Pro)
- [CVE-2022-36060](https://cve.now/CVE-2022-36060.md): Prototype pollution in matrix-react-sdk (CVSS 8.2, matrix-org matrix-react-sdk · matrix-react-sdk)
- [CVE-2023-28103](https://cve.now/CVE-2023-28103.md): Prototype pollution in matrix-react-sdk (CVSS 8.2, matrix-org matrix-react-sdk · matrix-react-sdk)
- [CVE-2023-1516](https://cve.now/CVE-2023-1516.md): RoboDK versions 5.5.3 and prior contain an insecure permission assignment to critical directories vulnerability, which could allow a local (CVSS 7.9, RoboDK)
- [CVE-2023-28427](https://cve.now/CVE-2023-28427.md): Prototype pollution in matrix-js-sdk (CVSS 8.2, matrix-org matrix-js-sdk · matrix-js-sdk)
- [CVE-2022-36059](https://cve.now/CVE-2022-36059.md): Prototype pollution in matrix-js-sdk (CVSS 8.2, matrix-org matrix-js-sdk · matrix-js-sdk)
- [CVE-2023-1674](https://cve.now/CVE-2023-1674.md): SourceCodester School Registration and Fee System POST Parameter login.php sql injection (CVSS 7.3, SourceCodester School Registration and Fee System)
- [CVE-2023-28631](https://cve.now/CVE-2023-28631.md): Attacker controlled data in AST nodes is not validated in comrak (CVSS 5.3, kivikakk comrak · comrak)
- [CVE-2023-28626](https://cve.now/CVE-2023-28626.md): Quadratic runtime when parsing Markdown in comrak (CVSS 5.3, kivikakk comrak · comrak)
- [CVE-2023-28712](https://cve.now/CVE-2023-28712.md): CVE-2023-28712 (CVSS 8.2, ProPump and Controls Osprey Pump Controller)
- [CVE-2023-28718](https://cve.now/CVE-2023-28718.md): CVE-2023-28718 (CVSS 7.1, ProPump and Controls Osprey Pump Controller)
- [CVE-2023-28398](https://cve.now/CVE-2023-28398.md): CVE-2023-28398 (CVSS 9.8, ProPump and Controls Osprey Pump Controller)
- [CVE-2023-27286](https://cve.now/CVE-2023-27286.md): IBM Aspera code execution (CVSS 8.4, IBM Aspera)
- [CVE-2023-28447](https://cve.now/CVE-2023-28447.md): Cross site scripting vulnerability in Javascript escaping in smarty/smarty (CVSS 7.1, smarty-php smarty · smarty/smarty)
- [CVE-2023-27284](https://cve.now/CVE-2023-27284.md): IBM Aspera code execution (CVSS 8.4, IBM Aspera)
- [CVE-2023-28648](https://cve.now/CVE-2023-28648.md): CVE-2023-28648 (CVSS 7.5, ProPump and Controls Osprey Pump Controller)
- [CVE-2023-27394](https://cve.now/CVE-2023-27394.md): CVE-2023-27394 (CVSS 9.8, ProPump and Controls Osprey Pump Controller)
- [CVE-2023-27886](https://cve.now/CVE-2023-27886.md): CVE-2023-27886 (CVSS 9.8, ProPump and Controls Osprey Pump Controller)
- [CVE-2023-28654](https://cve.now/CVE-2023-28654.md): CVE-2023-28654 (CVSS 9.8, ProPump and Controls Osprey Pump Controller)
- [CVE-2023-28637](https://cve.now/CVE-2023-28637.md): DataEase AWS redshift data source exists for remote code execution vulnerability (CVSS 8.0, dataease)
- [CVE-2023-28375](https://cve.now/CVE-2023-28375.md): CVE-2023-28375 (CVSS 7.5, ProPump and Controls Osprey Pump Controller)
- [CVE-2023-28395](https://cve.now/CVE-2023-28395.md): CVE-2023-28395 (CVSS 8.3, ProPump and Controls Osprey Pump Controller)
- [CVE-2023-0775](https://cve.now/CVE-2023-0775.md): Bluetooth LE Invalid prepare write request command leads to denial of service (CVSS 6.5, silabs.com GSDK)
- [CVE-2023-0466](https://cve.now/CVE-2023-0466.md): Certificate policy check not enabled (CVSS 5.3, OpenSSL)
- [CVE-2023-0465](https://cve.now/CVE-2023-0465.md): Invalid certificate policies in leaf certificates are silently ignored (CVSS 5.3, OpenSSL)
- [CVE-2022-3685](https://cve.now/CVE-2022-3685.md): SDM600 software privilege level (CVSS 7.5, Hitachi Energy SDM600)
- [CVE-2022-3686](https://cve.now/CVE-2022-3686.md): SDM600 API permission check (CVSS 4.8, Hitachi Energy SDM600)
- [CVE-2022-3684](https://cve.now/CVE-2022-3684.md): SDM600 endpoint vulnerability (CVSS 7.5, Hitachi Energy SDM600)
- [CVE-2023-28326](https://cve.now/CVE-2023-28326.md): Apache OpenMeetings: allows user impersonation (CVSS 9.8, Apache Software Foundation Apache OpenMeetings · org.apache…)
- [CVE-2022-3683](https://cve.now/CVE-2022-3683.md): SDM600 API web services authorization validation (CVSS 7.7, Hitachi Energy SDM600)
- [CVE-2022-3682](https://cve.now/CVE-2022-3682.md): SDM600 file permission validation (CVSS 9.9, Hitachi Energy SDM600)
- [CVE-2023-25197](https://cve.now/CVE-2023-25197.md): apache fineract: SQL injection vulnerability in certain procedure calls (no CVSS, Apache Software Foundation apache fineract)
- [CVE-2023-25196](https://cve.now/CVE-2023-25196.md): Apache Fineract: SQL injection vulnerability (no CVSS, Apache Software Foundation Apache Fineract)
- [CVE-2023-25195](https://cve.now/CVE-2023-25195.md): Apache Fineract: SSRF template type vulnerability in certain authenticated users (CVSS 8.1, Apache Software Foundation Apache Fineract)
- [CVE-2023-25704](https://cve.now/CVE-2023-25704.md): WordPress Interactive SVG Image Map Builder Plugin \<= 1.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Mehjabin Orthi Interactive SVG Image Map Builder)
- [CVE-2022-47170](https://cve.now/CVE-2022-47170.md): WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Plugin \<= 1.5.48 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Unlimited Elements For Elementor)
- [CVE-2022-46863](https://cve.now/CVE-2022-46863.md): WordPress Quick Event Manager Plugin \<= 9.6.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Fullworks Quick Event Manager)
- [CVE-2022-46855](https://cve.now/CVE-2022-46855.md): WordPress Responsive Pricing Table Plugin \<= 5.1.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, WP Darko Responsive Pricing Table)
- [CVE-2022-46848](https://cve.now/CVE-2022-46848.md): WordPress Visualizer Plugin \<= 3.9.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Themeisle Visualizer: Tables and Charts Manager for WordPre…)
- [CVE-2022-45831](https://cve.now/CVE-2022-45831.md): WordPress Image Hover Effects - Caption Hover with Carousel Plugin \<= 2.8 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, biplob018 Image Hover Effects for Elementor with Lightbox a…)
- [CVE-2022-45825](https://cve.now/CVE-2022-45825.md): WordPress WPComplete Plugin \<= 2.9.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, iThemes WPComplete)
- [CVE-2020-8889](https://cve.now/CVE-2020-8889.md): The ShipStation.com plugin 1.0 for CS-Cart allows remote attackers to obtain sensitive information (via action=export) because a typo result (CVSS 7.5)
- [CVE-2022-0194](https://cve.now/CVE-2022-0194.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. (CVSS 9.8, Netatalk)
- [CVE-2022-0650](https://cve.now/CVE-2022-0650.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 2 (CVSS 6.8, TP-Link TL-WR940N)
- [CVE-2022-1229](https://cve.now/CVE-2022-1229.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.2.034. (CVSS 7.8, Bentley MicroStation CONNECT)
- [CVE-2022-1230](https://cve.now/CVE-2022-1230.md): This vulnerability allows local attackers to execute arbitrary code on affected installations of Samsung Galaxy S21 prior to 4.5.40.5 phones (CVSS 3.9, Samsung Galaxy S21)
- [CVE-2022-23121](https://cve.now/CVE-2022-23121.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. (CVSS 9.8, Netatalk)
- [CVE-2022-23122](https://cve.now/CVE-2022-23122.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. (CVSS 9.8, Netatalk)
- [CVE-2022-23123](https://cve.now/CVE-2022-23123.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk. (CVSS 5.3, Netatalk)
- [CVE-2022-23124](https://cve.now/CVE-2022-23124.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk. (CVSS 5.3, Netatalk)
- [CVE-2022-23125](https://cve.now/CVE-2022-23125.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. (CVSS 9.8, Netatalk)
- [CVE-2022-24352](https://cve.now/CVE-2022-24352.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 prior to 211210 r (CVSS 8.8, TP-Link AC1750)
- [CVE-2022-24353](https://cve.now/CVE-2022-24353.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 1.1.4 Build 20211 (CVSS 8.8, TP-Link AC1750)
- [CVE-2022-24672](https://cve.now/CVE-2022-24672.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 (CVSS 8.8, Canon imageCLASS MF644Cdw)
- [CVE-2022-24673](https://cve.now/CVE-2022-24673.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. (CVSS 8.8, Canon imageCLASS MF644Cdw)
- [CVE-2022-24674](https://cve.now/CVE-2022-24674.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 (CVSS 8.8, Canon imageCLASS MF644Cdw)
- [CVE-2022-24907](https://cve.now/CVE-2022-24907.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. (CVSS 7.8, Foxit PDF Reader)
- [CVE-2022-24908](https://cve.now/CVE-2022-24908.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. (CVSS 7.8, Foxit PDF Reader)
- [CVE-2022-24972](https://cve.now/CVE-2022-24972.md): This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR940N 3.20.1 (CVSS 6.5, TP-Link TL-WR940N)
- [CVE-2022-24973](https://cve.now/CVE-2022-24973.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 2 (CVSS 6.8, TP-Link TL-WR940N)
- [CVE-2022-45460](https://cve.now/CVE-2022-45460.md): Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431119.12001.130000.0000 (CVSS 9.8)
- [CVE-2022-46387](https://cve.now/CVE-2022-46387.md): ConEmu through 220807 and Cmder before 1.3.21 report the title of the terminal, including control characters, which allows an attacker to ch (CVSS 9.8)
- [CVE-2022-46397](https://cve.now/CVE-2022-46397.md): FP.io VPP (Vector Packet Processor) 22.10, 22.06, 22.02, 21.10, 21.06, 21.01, 20.09, 20.05, 20.01, 19.08, and 19.04 Generates a Predictable (CVSS 7.5)
- [CVE-2022-47529](https://cve.now/CVE-2022-47529.md): Insecure Win32 memory objects in Endpoint Windows Agents in RSA NetWitness Platform before 12.2 allow local and admin Windows user accounts (no CVSS)
- [CVE-2023-20903](https://cve.now/CVE-2023-20903.md): This disclosure regards a vulnerability related to UAA refresh tokens and external identity providers.Assuming that an external identity pro (CVSS 4.3, Cloud Foundry)
- [CVE-2023-23330](https://cve.now/CVE-2023-23330.md): amano Xparc parking solutions 7.1.3879 was discovered to be vulnerable to local file inclusion. (CVSS 7.5)
- [CVE-2023-24304](https://cve.now/CVE-2023-24304.md): Improper input validation in the PDF.dll plugin of IrfanView v4.60 allows attackers to execute arbitrary code via opening a crafted PDF file (CVSS 7.8)
- [CVE-2023-24308](https://cve.now/CVE-2023-24308.md): A potential memory vulnerability due to insufficient input validation in PDFXEditCore.x64.dll in PDF-XChange Editor version 9.3 by Tracker S (CVSS 7.8)
- [CVE-2023-25260](https://cve.now/CVE-2023-25260.md): Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Local File Inclusion. (CVSS 7.5)
- [CVE-2023-25262](https://cve.now/CVE-2023-25262.md): Stimulsoft GmbH Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Server Side Request Forgery (SSRF). (CVSS 7.5)
- [CVE-2023-25721](https://cve.now/CVE-2023-25721.md): Veracode Scan Jenkins Plugin before 23.3.19.0, when the "Connect using proxy" option is enabled and configured with proxy credentials and wh (CVSS 6.5, com.veracode.jenkins:veracode-scan)
- [CVE-2023-25722](https://cve.now/CVE-2023-25722.md): A credential-leak issue was discovered in related Veracode products before 2023-03-27. (CVSS 5.5, com.veracode.jenkins:veracode-scan)
- [CVE-2023-25879](https://cve.now/CVE-2023-25879.md): ZDI-CAN-19389: Adobe Dimension OBJ File Improper Input Validation Remote Code Execution (CVSS 7.8, Adobe Dimension)
- [CVE-2023-25880](https://cve.now/CVE-2023-25880.md): ZDI-CAN-19412: Adobe Dimension GLTF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2023-25881](https://cve.now/CVE-2023-25881.md): ZDI-CAN-19390: Adobe Dimension OBJ File Improper Input Validation Remote Code Execution (CVSS 7.8, Adobe Dimension)
- [CVE-2023-25882](https://cve.now/CVE-2023-25882.md): ZDI-CAN-19385: Adobe Dimension OBJ File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2023-25883](https://cve.now/CVE-2023-25883.md): ZDI-CAN-19386: Adobe Dimension FBX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2023-25884](https://cve.now/CVE-2023-25884.md): ZDI-CAN-19411: Adobe Dimension GLTF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2023-25885](https://cve.now/CVE-2023-25885.md): ZDI-CAN-19480: Adobe Dimension USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2023-25886](https://cve.now/CVE-2023-25886.md): ZDI-CAN-19452: Adobe Dimension USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2023-25887](https://cve.now/CVE-2023-25887.md): ZDI-CAN-19450: Adobe Dimension USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2023-25888](https://cve.now/CVE-2023-25888.md): ZDI-CAN-19451: Adobe Dimension USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2023-25889](https://cve.now/CVE-2023-25889.md): ZDI-CAN-19466: Adobe Dimension USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2023-25890](https://cve.now/CVE-2023-25890.md): ZDI-CAN-19493: Adobe Dimension USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2023-25891](https://cve.now/CVE-2023-25891.md): ZDI-CAN-19542: Adobe Dimension USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2023-25892](https://cve.now/CVE-2023-25892.md): ZDI-CAN-19523: Adobe Dimension USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2023-25893](https://cve.now/CVE-2023-25893.md): ZDI-CAN-19539: Adobe Dimension USD File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2023-25894](https://cve.now/CVE-2023-25894.md): ZDI-CAN-19543: Adobe Dimension USD File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2023-25895](https://cve.now/CVE-2023-25895.md): ZDI-CAN-19540: Adobe Dimension USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2023-25896](https://cve.now/CVE-2023-25896.md): ZDI-CAN-19541: Adobe Dimension USD File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2023-25897](https://cve.now/CVE-2023-25897.md): ZDI-CAN-19520: Adobe Dimension USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2023-25898](https://cve.now/CVE-2023-25898.md): ZDI-CAN-19521: Adobe Dimension USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2023-25899](https://cve.now/CVE-2023-25899.md): ZDI-CAN-19522: Adobe Dimension USD File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2023-25900](https://cve.now/CVE-2023-25900.md): ZDI-CAN-19559: Adobe Dimension USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2023-25901](https://cve.now/CVE-2023-25901.md): ZDI-CAN-19508: Adobe Dimension USD File Improper Input Validation Remote Code Execution Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2023-25902](https://cve.now/CVE-2023-25902.md): ZDI-CAN-19560: Adobe Dimension USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2023-25903](https://cve.now/CVE-2023-25903.md): Adobe Dimension USDZ files Integer Overflow or Wraparound Arbitrary code execution (CVSS 7.8, Adobe Dimension)
- [CVE-2023-25904](https://cve.now/CVE-2023-25904.md): Adobe Dimension Out-of-bounds Read USDZ file Arbitrary code execution (CVSS 7.8, Adobe Dimension)
- [CVE-2023-25905](https://cve.now/CVE-2023-25905.md): ZDI-CAN-20031: Adobe Dimension OBJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2023-25906](https://cve.now/CVE-2023-25906.md): ZDI-CAN-20046: Adobe Dimension USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2023-25907](https://cve.now/CVE-2023-25907.md): ZDI-CAN-20216: Adobe Dimension USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2023-26071](https://cve.now/CVE-2023-26071.md): An issue was discovered in MCUBO ICT through 10.12.4 (aka 6.0.2). (CVSS 7.5)
- [CVE-2023-26327](https://cve.now/CVE-2023-26327.md): ZDI-CAN-20217: Adobe Dimension GLTF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2023-26328](https://cve.now/CVE-2023-26328.md): ZDI-CAN-20212: Adobe Dimension USD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2023-26329](https://cve.now/CVE-2023-26329.md): ZDI-CAN-20213: Adobe Dimension OBJ File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2023-26330](https://cve.now/CVE-2023-26330.md): ZDI-CAN-20146: Adobe Dimension USD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2023-26331](https://cve.now/CVE-2023-26331.md): ZDI-CAN-20145: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2023-26332](https://cve.now/CVE-2023-26332.md): ZDI-CAN-20144: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2023-26333](https://cve.now/CVE-2023-26333.md): ZDI-CAN-20214: Adobe Dimension USDC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2023-26334](https://cve.now/CVE-2023-26334.md): ZDI-CAN-20149: Adobe Dimension USD File Parsing Uninitialized Pointer Information Disclosure Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2023-26335](https://cve.now/CVE-2023-26335.md): ZDI-CAN-20215: Adobe Dimension USDC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2023-26336](https://cve.now/CVE-2023-26336.md): ZDI-CAN-20275: Adobe Dimension USD File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2023-26337](https://cve.now/CVE-2023-26337.md): ZDI-CAN-20285: Adobe Dimension USDA File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Adobe Dimension)
- [CVE-2023-26338](https://cve.now/CVE-2023-26338.md): ZDI-CAN-19410: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Dimension)
- [CVE-2023-26339](https://cve.now/CVE-2023-26339.md): ZDI-CAN-19388: Adobe Dimension OBJ File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Dimension)
- [CVE-2023-26340](https://cve.now/CVE-2023-26340.md): ZDI-CAN-19387: Adobe Dimension OBJ File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Dimension)
- [CVE-2023-26341](https://cve.now/CVE-2023-26341.md): ZDI-CAN-19391: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Dimension)
- [CVE-2023-26342](https://cve.now/CVE-2023-26342.md): ZDI-CAN-19413: Adobe Dimension GLB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Dimension)
- [CVE-2023-26343](https://cve.now/CVE-2023-26343.md): ZDI-CAN-19465: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Dimension)
- [CVE-2023-26344](https://cve.now/CVE-2023-26344.md): ZDI-CAN-19467: Adobe Dimension USD File Access of Uninitialized Pointer Information Disclosure Vulnerability (CVSS 5.5, Adobe Dimension)
- [CVE-2023-26345](https://cve.now/CVE-2023-26345.md): ZDI-CAN-19494: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Dimension)
- [CVE-2023-26346](https://cve.now/CVE-2023-26346.md): ZDI-CAN-19495: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Dimension)
- [CVE-2023-26348](https://cve.now/CVE-2023-26348.md): ZDI-CAN-19518: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Dimension)
- [CVE-2023-26349](https://cve.now/CVE-2023-26349.md): ZDI-CAN-20218: Adobe Dimension USDZ File Parsing Use-After-Free Information Disclosure Vulnerability (CVSS 5.5, Adobe Dimension)
- [CVE-2023-26350](https://cve.now/CVE-2023-26350.md): ZDI-CAN-19510: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Dimension)
- [CVE-2023-26351](https://cve.now/CVE-2023-26351.md): ZDI-CAN-19507: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Dimension)
- [CVE-2023-26352](https://cve.now/CVE-2023-26352.md): ZDI-CAN-19509: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Dimension)
- [CVE-2023-26353](https://cve.now/CVE-2023-26353.md): ZDI-CAN-19511: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Dimension)
- [CVE-2023-26354](https://cve.now/CVE-2023-26354.md): ZDI-CAN-19519: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Dimension)
- [CVE-2023-26355](https://cve.now/CVE-2023-26355.md): ZDI-CAN-19512: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Dimension)
- [CVE-2023-26356](https://cve.now/CVE-2023-26356.md): ZDI-CAN-19506: Adobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Dimension)
- [CVE-2023-26923](https://cve.now/CVE-2023-26923.md): Musescore 3.0 to 4.0.1 has a stack buffer overflow vulnerability that occurs when reading misconfigured midi files. (CVSS 7.0)
- [CVE-2023-27008](https://cve.now/CVE-2023-27008.md): A Cross-site scripting (XSS) vulnerability in the function encrypt\_password() in login.tmpl.php in ATutor 2.2.1 allows remote attackers to i (CVSS 6.1)
- [CVE-2023-27229](https://cve.now/CVE-2023-27229.md): TOTOlink A7100RU V7.4cu.2313\_B20191024 was discovered to contain a command injection vulnerability via the upBw parameter at /setting/setWan (CVSS 9.8)
- [CVE-2023-27231](https://cve.now/CVE-2023-27231.md): TOTOlink A7100RU V7.4cu.2313\_B20191024 was discovered to contain a command injection vulnerability via the downBw parameter at /setting/setW (CVSS 9.8)
- [CVE-2023-27232](https://cve.now/CVE-2023-27232.md): TOTOlink A7100RU V7.4cu.2313\_B20191024 was discovered to contain a command injection vulnerability via the wanStrategy parameter at /setting (CVSS 9.8)
- [CVE-2023-27246](https://cve.now/CVE-2023-27246.md): An arbitrary file upload vulnerability in the Virtual Disk of MK-Auth 23.01K4.9 allows attackers to execute arbitrary code via uploading a c (CVSS 8.8)
- [CVE-2023-27247](https://cve.now/CVE-2023-27247.md): Cynet Client Agent v4.6.0.8010 allows attackers with Administrator rights to disable the EDR functions by disabling process privilege tokens (CVSS 4.4)
- [CVE-2023-27700](https://cve.now/CVE-2023-27700.md): MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /accessory/picdel.html. (CVSS 8.1)
- [CVE-2023-27701](https://cve.now/CVE-2023-27701.md): MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /database/sqldel.html. (CVSS 8.1)
- [CVE-2023-27821](https://cve.now/CVE-2023-27821.md): Databasir v1.0.7 was discovered to contain a remote code execution (RCE) vulnerability via the mockDataScript parameter. (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-03-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.