CVEs published March 29, 2023
232 CVEs were published on March 29, 2023: 18 critical, 123 high.
- Published
- 232
- Critical
- 18
- High
- 123
- Medium
- 52
- Low
- 34
- Unrated
- 5
- Now in CISA KEV
- 0
- Fix available
- 31
Most affected products
- PDF-XChange Editor
- 27
- Bentley MicroStation CONNECT
- 22
- Foxit PDF Reader
- 19
- D-Link DIR-1935
- 15
- Ivanti Avalanche
- 13
- CorelDRAW Graphics Suite
- 9
- Rocket Software UniData · Rocket Software UniVerse
- 9
- NETGEAR R6700v3
- 7
- AVEVA Edge
- 6
- Centreon
- 6
Critical 18
- CVE-2023-28507Memory exhaustion in LZ4 decompression in UniRPC daemonRocket Software UniData · Rocket Software UniVerse
- CVE-2023-28504Stack buffer overflow in UniRPC library functionRocket Software UniData · Rocket Software UniVerse
- CVE-2023-28503Authentication bypass in UniRPC's udadmin serviceRocket Software UniData · Rocket Software UniVerse
- CVE-2023-28502Stack buffer overflow in UniRPC's udadmin_server serviceRocket Software UniData · Rocket Software UniVerse
- CVE-2023-28501Heap buffer overflow in unirpcdRocket Software UniData · Rocket Software UniVerse
- CVE-2022-2825This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0.Kepware KEPServerEX
- CVE-2022-2848This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0.Kepware KEPServerEX
- CVE-2022-36971This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.2.3490.Ivanti Avalanche
- CVE-2022-36972This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490.Ivanti Avalanche
- CVE-2022-36973This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490.Ivanti Avalanche
- CVE-2022-36974This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.2.3490.Ivanti Avalanche
- CVE-2022-36975This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490.Ivanti Avalanche
- CVE-2022-36976This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490.Ivanti Avalanche
- CVE-2022-36977This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.2.3490.Ivanti Avalanche
- CVE-2022-36978This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.2.3490.Ivanti Avalanche
- CVE-2022-36980This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490.Ivanti Avalanche
- CVE-2022-43634This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk.Netatalk
- CVE-2023-26968In Atrocore 1.5.25, the Create Import Feed option with glyphicon-glyphicon-paperclip function is vulnerable to Unauthenticated File upload.
High 123
- CVE-2023-28509Weak encryption in UniRPC protocolRocket Software UniData · Rocket Software UniVerse
- CVE-2023-28506Stack buffer overflow in UniRPC serviceRocket Software UniData · Rocket Software UniVerse
- CVE-2023-28505Buffer overflow in UniRPC library functionRocket Software UniData · Rocket Software UniVerse
- CVE-2023-1656When the LDAP connector is started with StartTLS configured, LDAP BIND credentials are transmitted insecurely, prior to establishing the TLS connection.ForgeRock OpenIDM and Java Remote Connector Server
- CVE-2023-22705WordPress Welcart e-Commerce Plugin <= 2.8.10 is vulnerable to Cross Site Scripting (XSS)Collne Welcart e-Commerce
- CVE-2022-47603WordPress Responsive Image Gallery, Gallery Album Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)wpdevart Gallery – Image and Video Gallery with Thumbnails
- CVE-2022-45355WordPress WP Pipes Plugin <= 1.33 is vulnerable to SQL Injection (SQLi)ThimPress WP Pipes
- CVE-2023-27489Stored cross site scripting via SVG file upload in Kiwi TCMSkiwitcms Kiwi · kiwitcms
- CVE-2022-47444WordPress ProfilePress Plugin <= 4.4.1 is vulnerable to Cross Site Scripting (XSS)ProfilePress Membership Team Paid Membership Plugin, Ecomme…
- CVE-2022-47433WordPress Multi Rating Plugin <= 5.0.5 is vulnerable to Cross Site Scripting (XSS)Daniel Powney Multi Rating
- CVE-2023-0213Local Elevation of Privilege in M-FilesM-Files
- CVE-2023-1509GMAce <= 1.5.2 - Cross-Site Request Forgery to Arbitrary File Modification (Creation/Overwrite/Deletion)gmdragonx GMAce
- CVE-2017-6894A vulnerability exists in FlexNet Manager Suite releases 2015 R2 SP3 and earlier (including FlexNet Manager Platform 9.2 and earlier) that a
- CVE-2019-8963A Denial of Service (DoS) vulnerability was discovered in FlexNet Publisher's lmadmin 11.16.5, when doing a crafted POST request on lmadmin
- CVE-2020-14140When Xiaomi router firmware is updated in 2020, there is an unauthenticated API that can reveal WIFI password vulnerability.Xiaomi Multiple Devices
- CVE-2022-2560This vulnerability allows remote attackers to delete arbitrary files on affected installations of EnterpriseDT CompleteFTP 22.1.0 Server.EnterpriseDT CompleteFTP
- CVE-2022-2561This vulnerability allows remote attackers to execute arbitrary code on affected installations of OPC Labs QuickOPC 2022.1.OPC Labs QuickOPC
- CVE-2022-27641This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.9NETGEAR R6700v3
- CVE-2022-27643This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.9NETGEAR R6700v3
- CVE-2022-27645This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers.NETGEAR R6700v3
- CVE-2022-27646This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.9NETGEAR R6700v3
- CVE-2022-27647This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.9NETGEAR R6700v3
- CVE-2022-27648This vulnerability allows remote attackers to execute arbitrary code on affected installations of KOYO Screen Creator 0.1.1.1.KOYO Screen Creator
- CVE-2022-28300This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation 10.16.02.034 CONNECT.Bentley MicroStation
- CVE-2022-28301This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34.Bentley MicroStation CONNECT
- CVE-2022-28302This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34.Bentley MicroStation CONNECT
- CVE-2022-28303This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.16.02.022.Bentley View
- CVE-2022-28304This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034.Bentley MicroStation CONNECT
- CVE-2022-28305This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034.Bentley MicroStation CONNECT
- CVE-2022-28306This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034.Bentley MicroStation CONNECT
- CVE-2022-28307This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.16.02.022.Bentley View
- CVE-2022-28310This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034.Bentley MicroStation CONNECT
- CVE-2022-28311This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034.Bentley MicroStation CONNECT
- CVE-2022-28314This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34.Bentley MicroStation CONNECT
- CVE-2022-28315This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34.Bentley MicroStation CONNECT
- CVE-2022-28316This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34.Bentley MicroStation CONNECT
- CVE-2022-28317This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34.Bentley MicroStation CONNECT
- CVE-2022-28318This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34.Bentley MicroStation CONNECT
- CVE-2022-28319This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034.Bentley MicroStation CONNECT
- CVE-2022-28320This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.16.02.022.Bentley View
- CVE-2022-28641This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34.Bentley MicroStation CONNECT
- CVE-2022-28642This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34.Bentley MicroStation CONNECT
- CVE-2022-28643This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34.Bentley MicroStation CONNECT
- CVE-2022-28644This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34.Bentley MicroStation CONNECT
- CVE-2022-28646This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.2.034.Bentley MicroStation CONNECT
- CVE-2022-28647This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.2.034.Bentley MicroStation CONNECT
- CVE-2022-28685This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802AVEVA Edge
- CVE-2022-28686This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802AVEVA Edge
- CVE-2022-28687This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802AVEVA Edge
- CVE-2022-28688This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802AVEVA Edge
- CVE-2022-3093This vulnerability allows physical attackers to execute arbitrary code on affected Tesla vehicles.Tesla Model
- CVE-2022-3210This vulnerability allows network-adjacent attackers to execute arbitrary commands on affected installations of D-Link DIR-2150 4.0.1 routerD-Link DIR-2150
- CVE-2022-36970This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 20.0 Build: 4201.2111.1802.0000AVEVA Edge
- CVE-2022-36979This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490.Ivanti Avalanche
- CVE-2022-36981This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.3.101.Ivanti Avalanche
- CVE-2022-36983This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche.Ivanti Avalanche
- CVE-2022-37012This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation OPC UA C+Unified Automation OPC UA C++ Demo Server
- CVE-2022-37013This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation OPC UA C+Unified Automation OPC UA C++ Demo Server
- CVE-2022-37349This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor.PDF-XChange Editor
- CVE-2022-37350This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor.PDF-XChange Editor
- CVE-2022-37354This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor.PDF-XChange Editor
- CVE-2022-37355This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor.PDF-XChange Editor
- CVE-2022-37356This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor.PDF-XChange Editor
- CVE-2022-37357This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor.PDF-XChange Editor
- CVE-2022-37358This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor.PDF-XChange Editor
- CVE-2022-37359This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor.PDF-XChange Editor
- CVE-2022-37362This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor.PDF-XChange Editor
- CVE-2022-37363This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor.PDF-XChange Editor
- CVE-2022-37364This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor.PDF-XChange Editor
- CVE-2022-37365This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor.PDF-XChange Editor
- CVE-2022-37366This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor.PDF-XChange Editor
- CVE-2022-37367This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor.PDF-XChange Editor
- CVE-2022-37369This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor.PDF-XChange Editor
- CVE-2022-37371This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor.PDF-XChange Editor
- CVE-2022-37372This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor.PDF-XChange Editor
- CVE-2022-37374This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor.PDF-XChange Editor
- CVE-2022-37377This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor 11.1.1.53537;.Foxit PDF Editor
- CVE-2022-37378This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor 11.1.1.53537.Foxit PDF Editor
- CVE-2022-37381This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader.Foxit PDF Reader
- CVE-2022-37384This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537.Foxit PDF Reader
- CVE-2022-37385This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537.Foxit PDF Reader
- CVE-2022-37387This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.2.53575.Foxit PDF Reader
- CVE-2022-37388This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.2.53575.Foxit PDF Reader
- CVE-2022-37389This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.2.53575.Foxit PDF Reader
- CVE-2022-37390This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.2.53575.Foxit PDF Reader
- CVE-2022-37391This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.2.53575.Foxit PDF Reader
- CVE-2022-3787A vulnerability was found in the device-mapper-multipath.device-mapper-multipath
- CVE-2022-42424This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon.Centreon
- CVE-2022-42425This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon.Centreon
- CVE-2022-42426This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon.Centreon
- CVE-2022-42427This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon.Centreon
- CVE-2022-42428This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon.Centreon
- CVE-2022-42429This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon.Centreon
- CVE-2022-42430This vulnerability allows local attackers to escalate privileges on affected Tesla vehicles.Tesla Model
- CVE-2022-42431This vulnerability allows local attackers to escalate privileges on affected Tesla vehicles.Tesla Model
- CVE-2022-43608This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.03 Canon imageCLASS MF644Cdw
- CVE-2022-43609This vulnerability allows remote attackers to execute arbitrary code on affected installations of IronCAD.IronCAD
- CVE-2022-43613This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506.CorelDRAW Graphics Suite
- CVE-2022-43614This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506.CorelDRAW Graphics Suite
- CVE-2022-43616This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506.CorelDRAW Graphics Suite
- CVE-2022-43617This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506.CorelDRAW Graphics Suite
- CVE-2022-43618This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506.CorelDRAW Graphics Suite
- CVE-2022-43620This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-1935 1.03 routers.D-Link DIR-1935
- CVE-2022-43621This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-1935 1.03 routers.D-Link DIR-1935
- CVE-2022-43622This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers.D-Link DIR-1935
- CVE-2022-43630This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers.D-Link DIR-1935
- CVE-2022-43636This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of TP-Link TL-WR940N 6_211111 3.20.1TP-Link TL-WR940N
- CVE-2022-43637This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 12.0.1.12430.Foxit PDF Reader
- CVE-2022-43638This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 12.0.1.12430.Foxit PDF Reader
- CVE-2022-43639This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 12.0.1.12430.Foxit PDF Reader
- CVE-2022-43642This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers.D-Link DIR-825
- CVE-2022-43643This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers.D-Link DIR-825
- CVE-2022-43644This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers.D-Link DIR-825
- CVE-2022-43645This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers.D-Link DIR-825
- CVE-2022-43646This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers.D-Link DIR-825
- CVE-2022-43647This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers.D-Link DIR-825
- CVE-2022-43648This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 1.20B03 routers.D-Link DIR-3040
- CVE-2022-43649This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 12.0.2.12465.Foxit PDF Reader
- CVE-2022-48434libavcodec/pthread_frame.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which al
- CVE-2023-0664A flaw was found in the QEMU Guest Agent service for Windows.QEMU
- CVE-2023-0836An information leak vulnerability was discovered in HAProxy 2.1, 2.2 before 2.2.27, 2.3, 2.4 before 2.4.21, 2.5 before 2.5.11, 2.6 before 2.HAProxy
- CVE-2023-1652A use-after-free flaw was found in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel.Linux Kernel
- CVE-2023-26984An issue in the password reset function of Peppermint v0.2.4 allows attackers to access the emails and passwords of the Tickets page via a c
Medium, low and unrated 91
- CVE-2023-28508Heap corruption in UniRPC serviceRocket Software UniData · Rocket Software UniVerse
- CVE-2022-47602WordPress WP Table Manager Plugin <= 3.5.2 is vulnerable to Cross Site Scripting (XSS)JoomUnited WP Table Manager
- CVE-2022-47607WordPress Usersnap Plugin <= 4.16 is vulnerable to Cross Site Scripting (XSS)Usersnap
- CVE-2022-47610WordPress Simple Image Popup Plugin <= 1.3.6 is vulnerable to Cross Site Scripting (XSS)Mr Digital Simple Image Popup
- CVE-2022-47613WordPress AI ChatBot Plugin <= 4.3.0 is vulnerable to Cross Site Scripting (XSS)QuantumCloud AI ChatBot
- CVE-2023-25809rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runcopencontainers runc · github.com/opencontainers/runc
- CVE-2023-28642AppArmor bypass with symlinked /proc in runcopencontainers runc · github.com/opencontainers/runc
- CVE-2023-1550NGINX Agent vulnerability CVE-2023-1550F5 NGINX Agent
- CVE-2023-26292Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSGForcepoint Cloud Security Gateway · Forcepoint Web Security
- CVE-2023-26291Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSGForcepoint Cloud Security Gateway · Forcepoint Web Security
- CVE-2023-26290Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSGForcepoint Cloud Security Gateway · Forcepoint Web Security
- CVE-2022-47596WordPress Media Library Categories Plugin <= 1.9.9 is vulnerable to Cross Site Scripting (XSS)Jeffrey-WP Media Library Categories
- CVE-2023-1575Mega Main Menu <= 2.2.2 - Authenticated (Administrator+) Cross-Site ScriptingMegaMain Mega Main Menu
- CVE-2023-1680Xunrui CMS main.html information disclosureXunrui CMS
- CVE-2023-1663Authenticated Resources Accessible via Forced BrowsingSynopsys Coverity
- CVE-2023-23861WordPress GMAce Plugin <= 1.5.2 is vulnerable to Cross Site Request Forgery (CSRF)German Mesky GMAce
- CVE-2022-47438WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.3 is vulnerable to Cross Site Scripting (XSS)WpDevArt Booking calendar, Appointment Booking System
- CVE-2023-28158Apache Archiva privilege escalationApache Software Foundation Apache Archiva · org.apache.arch…
- CVE-2022-38077WordPress Popup Anything Plugin <= 2.2.1 is vulnerable to Cross Site Request Forgery (CSRF)WP OnlineSupport, Essential Plugin Popup Anything – A Marke…
- CVE-2022-48433In JetBrains IntelliJ IDEA before 2023.1 the NTLM hash could leak through an API method used in the IntelliJ IDEA built-in web server.JetBrains IntelliJ IDEA
- CVE-2022-48432In JetBrains IntelliJ IDEA before 2023.1 the bundled version of Chromium wasn't sandboxed.JetBrains IntelliJ IDEA
- CVE-2022-48431In JetBrains IntelliJ IDEA before 2023.1 in some cases, Gradle and Maven projects could be imported without the “Trust Project” confirmationJetBrains IntelliJ IDEA
- CVE-2022-48430In JetBrains IntelliJ IDEA before 2023.1 file content could be disclosed via an external stylesheet path in Markdown preview.JetBrains IntelliJ IDEA
- CVE-2023-1690SourceCodester Earnings and Expense Tracker App cross site scriptingSourceCodester Earnings and Expense Tracker App
- CVE-2023-1689SourceCodester Earnings and Expense Tracker App cross site scriptingSourceCodester Earnings and Expense Tracker App
- CVE-2023-1688SourceCodester Earnings and Expense Tracker App cross site scriptingSourceCodester Earnings and Expense Tracker App
- CVE-2023-1687SourceCodester Simple Task Allocation System cross site scriptingSourceCodester Simple Task Allocation System
- CVE-2023-1686SourceCodester Young Entrepreneur E-Negosyo System GET Parameter index.php cross site scriptingSourceCodester Young Entrepreneur E-Negosyo System
- CVE-2023-1685HadSky Installation Interface index.php command injectionHadSky
- CVE-2023-23355QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances), QVRQNAP Systems QTS · QNAP Systems QuTS hero +2
- CVE-2023-1684HadSky unrestricted uploadHadSky
- CVE-2023-1683Xunrui CMS system_log.html information disclosureXunrui CMS
- CVE-2021-41526A vulnerability has been reported in the windows installer (MSI) built with InstallScript custom action.
- CVE-2022-1274A flaw was found in Keycloak in the execute-actions-email endpoint.keycloak · org.keycloak:keycloak-services
- CVE-2022-27597QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances)QNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2022-27598QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances)QNAP Systems QTS · QNAP Systems QuTS hero
- CVE-2022-27642This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91NETGEAR R6700v3
- CVE-2022-27644This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGNETGEAR R6700v3
- CVE-2022-28308This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.16.02.022.Bentley View
- CVE-2022-28309This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.16.02.022.Bentley View
- CVE-2022-28312This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16Bentley MicroStation CONNECT
- CVE-2022-28313This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16Bentley MicroStation CONNECT
- CVE-2022-28645This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16Bentley MicroStation CONNECT
- CVE-2022-36969This vulnerability allows remote attackers to disclose sensitive information on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2AVEVA Edge
- CVE-2022-36982This vulnerability allows remote attackers to read arbitrary files on affected installations of Ivanti Avalanche 6.3.3.101.Ivanti Avalanche
- CVE-2022-37351This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor.PDF-XChange Editor
- CVE-2022-37352This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor.PDF-XChange Editor
- CVE-2022-37353This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor.PDF-XChange Editor
- CVE-2022-37360This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor.PDF-XChange Editor
- CVE-2022-37361This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor.PDF-XChange Editor
- CVE-2022-37368This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor.PDF-XChange Editor
- CVE-2022-37370This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor.PDF-XChange Editor
- CVE-2022-37373This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor.PDF-XChange Editor
- CVE-2022-37375This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor.PDF-XChange Editor
- CVE-2022-37376This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Editor 11.1.1.53537.Foxit PDF Editor
- CVE-2022-37379This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537.Foxit PDF Reader
- CVE-2022-37380This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537.Foxit PDF Reader
- CVE-2022-37382This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537.Foxit PDF Reader
- CVE-2022-37383This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537.Foxit PDF Reader
- CVE-2022-37386This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.2.53575.Foxit PDF Reader
- CVE-2022-42432This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kernel 6.0-rc2.Linux Kernel
- CVE-2022-42433This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR841N TL-WR841N(US)_TP-Link TL-WR841N
- CVE-2022-43610This vulnerability allows remote attackers to disclose sensitive information on affected installations of Corel CorelDRAW Graphics Suite 23.CorelDRAW Graphics Suite
- CVE-2022-43611This vulnerability allows remote attackers to disclose sensitive information on affected installations of Corel CorelDRAW Graphics Suite 23.CorelDRAW Graphics Suite
- CVE-2022-43612This vulnerability allows remote attackers to disclose sensitive information on affected installations of Corel CorelDRAW Graphics Suite 23.CorelDRAW Graphics Suite
- CVE-2022-43615This vulnerability allows remote attackers to disclose sensitive information on affected installations of Corel CorelDRAW Graphics Suite 23.CorelDRAW Graphics Suite
- CVE-2022-43619This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers.D-Link DIR-1935
- CVE-2022-43623This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers.D-Link DIR-1935
- CVE-2022-43624This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers.D-Link DIR-1935
- CVE-2022-43625This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers.D-Link DIR-1935
- CVE-2022-43626This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers.D-Link DIR-1935
- CVE-2022-43627This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers.D-Link DIR-1935
- CVE-2022-43628This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers.D-Link DIR-1935
- CVE-2022-43629This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers.D-Link DIR-1935
- CVE-2022-43631This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers.D-Link DIR-1935
- CVE-2022-43632This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers.D-Link DIR-1935
- CVE-2022-43633This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers.D-Link DIR-1935
- CVE-2022-43635This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR940N 6_2111TP-Link TL-WR940N
- CVE-2022-43640This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 12.0.1.12430.Foxit PDF Reader
- CVE-2022-43641This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 12.0.1.12430.Foxit PDF Reader
- CVE-2022-43650This vulnerability allows remote attackers to disclose sensitive information on affected installations of RARLAB WinRAR 6.11.0.0.RARLAB WinRAR
- CVE-2022-44368NASM v2.16 was discovered to contain a null pointer deference in the NASM component
- CVE-2022-44369NASM 2.16 (development) is vulnerable to 476: Null Pointer Dereference via output/outaout.c.
- CVE-2022-44370NASM v2.16 was discovered to contain a heap buffer overflow in the component quote_for_pmake() asm/nasm.c:856
- CVE-2023-1701Cross-site Scripting (XSS) - Reflected in pimcore/pimcorepimcore/pimcore
- CVE-2023-1702Cross-site Scripting (XSS) - Generic in pimcore/pimcorepimcore/pimcore
- CVE-2023-1703Cross-site Scripting (XSS) - Generic in pimcore/pimcorepimcore/pimcore
- CVE-2023-1704Cross-site Scripting (XSS) - Stored in pimcore/pimcorepimcore/pimcore
- CVE-2023-26982Trudesk v1.2.6 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Tags parameter under the Create Ticke
- CVE-2023-27167Suprema BioStar 2 v2.8.16 was discovered to contain a SQL injection vulnerability via the values parameter at /users/absence?search_month=1.
- CVE-2023-28892Malwarebytes AdwCleaner 8.4.0 runs as Administrator and performs an insecure file delete operation on C:\AdwCleaner\Logs\AdwCleaner_Debug.lo