# CVEs published 2023-03-29

232 CVEs were published on March 29, 2023: 18 critical, 123 high. Days are UTC.

- [CVE-2023-28509](https://cve.now/CVE-2023-28509.md): Weak encryption in UniRPC protocol (CVSS 7.5, Rocket Software UniData · Rocket Software UniVerse)
- [CVE-2023-28508](https://cve.now/CVE-2023-28508.md): Heap corruption in UniRPC service (no CVSS, Rocket Software UniData · Rocket Software UniVerse)
- [CVE-2023-28507](https://cve.now/CVE-2023-28507.md): Memory exhaustion in LZ4 decompression in UniRPC daemon (CVSS 9.8, Rocket Software UniData · Rocket Software UniVerse)
- [CVE-2023-28506](https://cve.now/CVE-2023-28506.md): Stack buffer overflow in UniRPC service (CVSS 8.8, Rocket Software UniData · Rocket Software UniVerse)
- [CVE-2023-28505](https://cve.now/CVE-2023-28505.md): Buffer overflow in UniRPC library function (CVSS 8.1, Rocket Software UniData · Rocket Software UniVerse)
- [CVE-2023-28504](https://cve.now/CVE-2023-28504.md): Stack buffer overflow in UniRPC library function (CVSS 9.8, Rocket Software UniData · Rocket Software UniVerse)
- [CVE-2023-28503](https://cve.now/CVE-2023-28503.md): Authentication bypass in UniRPC's udadmin service (CVSS 9.8, Rocket Software UniData · Rocket Software UniVerse)
- [CVE-2023-28502](https://cve.now/CVE-2023-28502.md): Stack buffer overflow in UniRPC's udadmin\_server service (CVSS 9.8, Rocket Software UniData · Rocket Software UniVerse)
- [CVE-2023-1656](https://cve.now/CVE-2023-1656.md): When the LDAP connector is started with StartTLS configured, LDAP BIND credentials are transmitted insecurely, prior to establishing the TLS connection. (CVSS 7.5, ForgeRock OpenIDM and Java Remote Connector Server)
- [CVE-2023-28501](https://cve.now/CVE-2023-28501.md): Heap buffer overflow in unirpcd (CVSS 9.8, Rocket Software UniData · Rocket Software UniVerse)
- [CVE-2023-22705](https://cve.now/CVE-2023-22705.md): WordPress Welcart e-Commerce Plugin \<= 2.8.10 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Collne Welcart e-Commerce)
- [CVE-2022-47602](https://cve.now/CVE-2022-47602.md): WordPress WP Table Manager Plugin \<= 3.5.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, JoomUnited WP Table Manager)
- [CVE-2022-47603](https://cve.now/CVE-2022-47603.md): WordPress Responsive Image Gallery, Gallery Album Plugin \<= 2.0.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, wpdevart Gallery – Image and Video Gallery with Thumbnails)
- [CVE-2022-47607](https://cve.now/CVE-2022-47607.md): WordPress Usersnap Plugin \<= 4.16 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Usersnap)
- [CVE-2022-47610](https://cve.now/CVE-2022-47610.md): WordPress Simple Image Popup Plugin \<= 1.3.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Mr Digital Simple Image Popup)
- [CVE-2022-47613](https://cve.now/CVE-2022-47613.md): WordPress AI ChatBot Plugin \<= 4.3.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, QuantumCloud AI ChatBot)
- [CVE-2022-45355](https://cve.now/CVE-2022-45355.md): WordPress WP Pipes Plugin \<= 1.33 is vulnerable to SQL Injection (SQLi) (CVSS 8.2, ThimPress WP Pipes)
- [CVE-2023-27489](https://cve.now/CVE-2023-27489.md): Stored cross site scripting via SVG file upload in Kiwi TCMS (CVSS 7.6, kiwitcms Kiwi · kiwitcms)
- [CVE-2023-25809](https://cve.now/CVE-2023-25809.md): rootless: \`/sys/fs/cgroup\` is writable when cgroupns isn't unshared in runc (CVSS 5.0, opencontainers runc · github.com/opencontainers/runc)
- [CVE-2023-28642](https://cve.now/CVE-2023-28642.md): AppArmor bypass with symlinked /proc in runc (CVSS 6.1, opencontainers runc · github.com/opencontainers/runc)
- [CVE-2023-1550](https://cve.now/CVE-2023-1550.md): NGINX Agent vulnerability CVE-2023-1550 (CVSS 5.5, F5 NGINX Agent)
- [CVE-2023-26292](https://cve.now/CVE-2023-26292.md): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG (CVSS 6.1, Forcepoint Cloud Security Gateway · Forcepoint Web Security)
- [CVE-2023-26291](https://cve.now/CVE-2023-26291.md): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG (CVSS 6.1, Forcepoint Cloud Security Gateway · Forcepoint Web Security)
- [CVE-2023-26290](https://cve.now/CVE-2023-26290.md): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Cloud Security Gateway (CSG (CVSS 6.1, Forcepoint Cloud Security Gateway · Forcepoint Web Security)
- [CVE-2022-47596](https://cve.now/CVE-2022-47596.md): WordPress Media Library Categories Plugin \<= 1.9.9 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Jeffrey-WP Media Library Categories)
- [CVE-2023-1575](https://cve.now/CVE-2023-1575.md): Mega Main Menu \<= 2.2.2 - Authenticated (Administrator+) Cross-Site Scripting (CVSS 5.5, MegaMain Mega Main Menu)
- [CVE-2023-1680](https://cve.now/CVE-2023-1680.md): Xunrui CMS main.html information disclosure (CVSS 4.3, Xunrui CMS)
- [CVE-2023-1663](https://cve.now/CVE-2023-1663.md): Authenticated Resources Accessible via Forced Browsing (CVSS 6.5, Synopsys Coverity)
- [CVE-2023-23861](https://cve.now/CVE-2023-23861.md): WordPress GMAce Plugin \<= 1.5.2 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, German Mesky GMAce)
- [CVE-2022-47444](https://cve.now/CVE-2022-47444.md): WordPress ProfilePress Plugin \<= 4.4.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, ProfilePress Membership Team Paid Membership Plugin, Ecomme…)
- [CVE-2022-47438](https://cve.now/CVE-2022-47438.md): WordPress Booking calendar, Appointment Booking System Plugin \<= 3.2.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, WpDevArt Booking calendar, Appointment Booking System)
- [CVE-2022-47433](https://cve.now/CVE-2022-47433.md): WordPress Multi Rating Plugin \<= 5.0.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Daniel Powney Multi Rating)
- [CVE-2023-28158](https://cve.now/CVE-2023-28158.md): Apache Archiva privilege escalation (CVSS 6.5, Apache Software Foundation Apache Archiva · org.apache.arch…)
- [CVE-2022-38077](https://cve.now/CVE-2022-38077.md): WordPress Popup Anything Plugin \<= 2.2.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, WP OnlineSupport, Essential Plugin Popup Anything – A Marke…)
- [CVE-2022-48433](https://cve.now/CVE-2022-48433.md): In JetBrains IntelliJ IDEA before 2023.1 the NTLM hash could leak through an API method used in the IntelliJ IDEA built-in web server. (CVSS 6.1, JetBrains IntelliJ IDEA)
- [CVE-2022-48432](https://cve.now/CVE-2022-48432.md): In JetBrains IntelliJ IDEA before 2023.1 the bundled version of Chromium wasn't sandboxed. (CVSS 5.2, JetBrains IntelliJ IDEA)
- [CVE-2022-48431](https://cve.now/CVE-2022-48431.md): In JetBrains IntelliJ IDEA before 2023.1 in some cases, Gradle and Maven projects could be imported without the “Trust Project” confirmation (CVSS 4.5, JetBrains IntelliJ IDEA)
- [CVE-2022-48430](https://cve.now/CVE-2022-48430.md): In JetBrains IntelliJ IDEA before 2023.1 file content could be disclosed via an external stylesheet path in Markdown preview. (CVSS 5.5, JetBrains IntelliJ IDEA)
- [CVE-2023-1690](https://cve.now/CVE-2023-1690.md): SourceCodester Earnings and Expense Tracker App cross site scripting (CVSS 3.5, SourceCodester Earnings and Expense Tracker App)
- [CVE-2023-0213](https://cve.now/CVE-2023-0213.md): Local Elevation of Privilege in M-Files (CVSS 8.8, M-Files)
- [CVE-2023-1509](https://cve.now/CVE-2023-1509.md): GMAce \<= 1.5.2 - Cross-Site Request Forgery to Arbitrary File Modification (Creation/Overwrite/Deletion) (CVSS 8.8, gmdragonx GMAce)
- [CVE-2023-1689](https://cve.now/CVE-2023-1689.md): SourceCodester Earnings and Expense Tracker App cross site scripting (CVSS 3.5, SourceCodester Earnings and Expense Tracker App)
- [CVE-2023-1688](https://cve.now/CVE-2023-1688.md): SourceCodester Earnings and Expense Tracker App cross site scripting (CVSS 3.5, SourceCodester Earnings and Expense Tracker App)
- [CVE-2023-1687](https://cve.now/CVE-2023-1687.md): SourceCodester Simple Task Allocation System cross site scripting (CVSS 3.5, SourceCodester Simple Task Allocation System)
- [CVE-2023-1686](https://cve.now/CVE-2023-1686.md): SourceCodester Young Entrepreneur E-Negosyo System GET Parameter index.php cross site scripting (CVSS 3.5, SourceCodester Young Entrepreneur E-Negosyo System)
- [CVE-2023-1685](https://cve.now/CVE-2023-1685.md): HadSky Installation Interface index.php command injection (CVSS 6.3, HadSky)
- [CVE-2023-23355](https://cve.now/CVE-2023-23355.md): QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances), QVR (CVSS 6.6, QNAP Systems QTS · QNAP Systems QuTS hero +2)
- [CVE-2023-1684](https://cve.now/CVE-2023-1684.md): HadSky unrestricted upload (CVSS 4.7, HadSky)
- [CVE-2023-1683](https://cve.now/CVE-2023-1683.md): Xunrui CMS system\_log.html information disclosure (CVSS 4.3, Xunrui CMS)
- [CVE-2017-6894](https://cve.now/CVE-2017-6894.md): A vulnerability exists in FlexNet Manager Suite releases 2015 R2 SP3 and earlier (including FlexNet Manager Platform 9.2 and earlier) that a (CVSS 7.8)
- [CVE-2019-8963](https://cve.now/CVE-2019-8963.md): A Denial of Service (DoS) vulnerability was discovered in FlexNet Publisher's lmadmin 11.16.5, when doing a crafted POST request on lmadmin (CVSS 7.5)
- [CVE-2020-14140](https://cve.now/CVE-2020-14140.md): When Xiaomi router firmware is updated in 2020, there is an unauthenticated API that can reveal WIFI password vulnerability. (CVSS 7.5, Xiaomi Multiple Devices)
- [CVE-2021-41526](https://cve.now/CVE-2021-41526.md): A vulnerability has been reported in the windows installer (MSI) built with InstallScript custom action. (no CVSS)
- [CVE-2022-1274](https://cve.now/CVE-2022-1274.md): A flaw was found in Keycloak in the execute-actions-email endpoint. (no CVSS, keycloak · org.keycloak:keycloak-services)
- [CVE-2022-2560](https://cve.now/CVE-2022-2560.md): This vulnerability allows remote attackers to delete arbitrary files on affected installations of EnterpriseDT CompleteFTP 22.1.0 Server. (CVSS 8.2, EnterpriseDT CompleteFTP)
- [CVE-2022-2561](https://cve.now/CVE-2022-2561.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of OPC Labs QuickOPC 2022.1. (CVSS 7.8, OPC Labs QuickOPC)
- [CVE-2022-27597](https://cve.now/CVE-2022-27597.md): QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances) (CVSS 2.7, QNAP Systems QTS · QNAP Systems QuTS hero)
- [CVE-2022-27598](https://cve.now/CVE-2022-27598.md): QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances) (CVSS 2.7, QNAP Systems QTS · QNAP Systems QuTS hero)
- [CVE-2022-27641](https://cve.now/CVE-2022-27641.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120\_10.0.9 (CVSS 8.8, NETGEAR R6700v3)
- [CVE-2022-27642](https://cve.now/CVE-2022-27642.md): This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120\_10.0.91 (CVSS 6.3, NETGEAR R6700v3)
- [CVE-2022-27643](https://cve.now/CVE-2022-27643.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120\_10.0.9 (CVSS 8.8, NETGEAR R6700v3)
- [CVE-2022-27644](https://cve.now/CVE-2022-27644.md): This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETG (CVSS 5.0, NETGEAR R6700v3)
- [CVE-2022-27645](https://cve.now/CVE-2022-27645.md): This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers. (CVSS 8.8, NETGEAR R6700v3)
- [CVE-2022-27646](https://cve.now/CVE-2022-27646.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120\_10.0.9 (CVSS 8.0, NETGEAR R6700v3)
- [CVE-2022-27647](https://cve.now/CVE-2022-27647.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120\_10.0.9 (CVSS 8.0, NETGEAR R6700v3)
- [CVE-2022-27648](https://cve.now/CVE-2022-27648.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of KOYO Screen Creator 0.1.1.1. (CVSS 7.8, KOYO Screen Creator)
- [CVE-2022-2825](https://cve.now/CVE-2022-2825.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. (CVSS 9.8, Kepware KEPServerEX)
- [CVE-2022-28300](https://cve.now/CVE-2022-28300.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation 10.16.02.034 CONNECT. (CVSS 7.8, Bentley MicroStation)
- [CVE-2022-28301](https://cve.now/CVE-2022-28301.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. (CVSS 7.8, Bentley MicroStation CONNECT)
- [CVE-2022-28302](https://cve.now/CVE-2022-28302.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. (CVSS 7.8, Bentley MicroStation CONNECT)
- [CVE-2022-28303](https://cve.now/CVE-2022-28303.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.16.02.022. (CVSS 7.8, Bentley View)
- [CVE-2022-28304](https://cve.now/CVE-2022-28304.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. (CVSS 7.8, Bentley MicroStation CONNECT)
- [CVE-2022-28305](https://cve.now/CVE-2022-28305.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. (CVSS 7.8, Bentley MicroStation CONNECT)
- [CVE-2022-28306](https://cve.now/CVE-2022-28306.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. (CVSS 7.8, Bentley MicroStation CONNECT)
- [CVE-2022-28307](https://cve.now/CVE-2022-28307.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.16.02.022. (CVSS 7.8, Bentley View)
- [CVE-2022-28308](https://cve.now/CVE-2022-28308.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.16.02.022. (CVSS 3.3, Bentley View)
- [CVE-2022-28309](https://cve.now/CVE-2022-28309.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.16.02.022. (CVSS 3.3, Bentley View)
- [CVE-2022-28310](https://cve.now/CVE-2022-28310.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. (CVSS 7.8, Bentley MicroStation CONNECT)
- [CVE-2022-28311](https://cve.now/CVE-2022-28311.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. (CVSS 7.8, Bentley MicroStation CONNECT)
- [CVE-2022-28312](https://cve.now/CVE-2022-28312.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16 (CVSS 3.3, Bentley MicroStation CONNECT)
- [CVE-2022-28313](https://cve.now/CVE-2022-28313.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16 (CVSS 3.3, Bentley MicroStation CONNECT)
- [CVE-2022-28314](https://cve.now/CVE-2022-28314.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. (CVSS 7.8, Bentley MicroStation CONNECT)
- [CVE-2022-28315](https://cve.now/CVE-2022-28315.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. (CVSS 7.8, Bentley MicroStation CONNECT)
- [CVE-2022-28316](https://cve.now/CVE-2022-28316.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. (CVSS 7.8, Bentley MicroStation CONNECT)
- [CVE-2022-28317](https://cve.now/CVE-2022-28317.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. (CVSS 7.8, Bentley MicroStation CONNECT)
- [CVE-2022-28318](https://cve.now/CVE-2022-28318.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. (CVSS 7.8, Bentley MicroStation CONNECT)
- [CVE-2022-28319](https://cve.now/CVE-2022-28319.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.034. (CVSS 7.8, Bentley MicroStation CONNECT)
- [CVE-2022-28320](https://cve.now/CVE-2022-28320.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.16.02.022. (CVSS 7.8, Bentley View)
- [CVE-2022-2848](https://cve.now/CVE-2022-2848.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. (CVSS 9.1, Kepware KEPServerEX)
- [CVE-2022-28641](https://cve.now/CVE-2022-28641.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. (CVSS 7.8, Bentley MicroStation CONNECT)
- [CVE-2022-28642](https://cve.now/CVE-2022-28642.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. (CVSS 7.8, Bentley MicroStation CONNECT)
- [CVE-2022-28643](https://cve.now/CVE-2022-28643.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. (CVSS 7.8, Bentley MicroStation CONNECT)
- [CVE-2022-28644](https://cve.now/CVE-2022-28644.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. (CVSS 7.8, Bentley MicroStation CONNECT)
- [CVE-2022-28645](https://cve.now/CVE-2022-28645.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16 (CVSS 3.3, Bentley MicroStation CONNECT)
- [CVE-2022-28646](https://cve.now/CVE-2022-28646.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.2.034. (CVSS 7.8, Bentley MicroStation CONNECT)
- [CVE-2022-28647](https://cve.now/CVE-2022-28647.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.2.034. (CVSS 7.8, Bentley MicroStation CONNECT)
- [CVE-2022-28685](https://cve.now/CVE-2022-28685.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802 (CVSS 7.8, AVEVA Edge)
- [CVE-2022-28686](https://cve.now/CVE-2022-28686.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802 (CVSS 7.8, AVEVA Edge)
- [CVE-2022-28687](https://cve.now/CVE-2022-28687.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802 (CVSS 7.8, AVEVA Edge)
- [CVE-2022-28688](https://cve.now/CVE-2022-28688.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802 (CVSS 7.8, AVEVA Edge)
- [CVE-2022-3093](https://cve.now/CVE-2022-3093.md): This vulnerability allows physical attackers to execute arbitrary code on affected Tesla vehicles. (CVSS 7.6, Tesla Model)
- [CVE-2022-3210](https://cve.now/CVE-2022-3210.md): This vulnerability allows network-adjacent attackers to execute arbitrary commands on affected installations of D-Link DIR-2150 4.0.1 router (CVSS 8.8, D-Link DIR-2150)
- [CVE-2022-36969](https://cve.now/CVE-2022-36969.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2 (CVSS 5.5, AVEVA Edge)
- [CVE-2022-36970](https://cve.now/CVE-2022-36970.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 20.0 Build: 4201.2111.1802.0000 (CVSS 7.8, AVEVA Edge)
- [CVE-2022-36971](https://cve.now/CVE-2022-36971.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.2.3490. (CVSS 9.8, Ivanti Avalanche)
- [CVE-2022-36972](https://cve.now/CVE-2022-36972.md): This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490. (CVSS 9.1, Ivanti Avalanche)
- [CVE-2022-36973](https://cve.now/CVE-2022-36973.md): This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490. (CVSS 9.1, Ivanti Avalanche)
- [CVE-2022-36974](https://cve.now/CVE-2022-36974.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.2.3490. (CVSS 9.8, Ivanti Avalanche)
- [CVE-2022-36975](https://cve.now/CVE-2022-36975.md): This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490. (CVSS 9.1, Ivanti Avalanche)
- [CVE-2022-36976](https://cve.now/CVE-2022-36976.md): This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490. (CVSS 9.1, Ivanti Avalanche)
- [CVE-2022-36977](https://cve.now/CVE-2022-36977.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.2.3490. (CVSS 9.8, Ivanti Avalanche)
- [CVE-2022-36978](https://cve.now/CVE-2022-36978.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.2.3490. (CVSS 9.8, Ivanti Avalanche)
- [CVE-2022-36979](https://cve.now/CVE-2022-36979.md): This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490. (CVSS 7.5, Ivanti Avalanche)
- [CVE-2022-36980](https://cve.now/CVE-2022-36980.md): This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490. (CVSS 9.4, Ivanti Avalanche)
- [CVE-2022-36981](https://cve.now/CVE-2022-36981.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.3.101. (CVSS 8.8, Ivanti Avalanche)
- [CVE-2022-36982](https://cve.now/CVE-2022-36982.md): This vulnerability allows remote attackers to read arbitrary files on affected installations of Ivanti Avalanche 6.3.3.101. (CVSS 6.5, Ivanti Avalanche)
- [CVE-2022-36983](https://cve.now/CVE-2022-36983.md): This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche. (CVSS 7.5, Ivanti Avalanche)
- [CVE-2022-37012](https://cve.now/CVE-2022-37012.md): This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation OPC UA C+ (CVSS 7.5, Unified Automation OPC UA C++ Demo Server)
- [CVE-2022-37013](https://cve.now/CVE-2022-37013.md): This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Unified Automation OPC UA C+ (CVSS 7.5, Unified Automation OPC UA C++ Demo Server)
- [CVE-2022-37349](https://cve.now/CVE-2022-37349.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-37350](https://cve.now/CVE-2022-37350.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-37351](https://cve.now/CVE-2022-37351.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-37352](https://cve.now/CVE-2022-37352.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-37353](https://cve.now/CVE-2022-37353.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-37354](https://cve.now/CVE-2022-37354.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-37355](https://cve.now/CVE-2022-37355.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-37356](https://cve.now/CVE-2022-37356.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-37357](https://cve.now/CVE-2022-37357.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-37358](https://cve.now/CVE-2022-37358.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-37359](https://cve.now/CVE-2022-37359.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-37360](https://cve.now/CVE-2022-37360.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-37361](https://cve.now/CVE-2022-37361.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-37362](https://cve.now/CVE-2022-37362.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-37363](https://cve.now/CVE-2022-37363.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-37364](https://cve.now/CVE-2022-37364.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-37365](https://cve.now/CVE-2022-37365.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-37366](https://cve.now/CVE-2022-37366.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-37367](https://cve.now/CVE-2022-37367.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-37368](https://cve.now/CVE-2022-37368.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-37369](https://cve.now/CVE-2022-37369.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-37370](https://cve.now/CVE-2022-37370.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-37371](https://cve.now/CVE-2022-37371.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-37372](https://cve.now/CVE-2022-37372.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-37373](https://cve.now/CVE-2022-37373.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-37374](https://cve.now/CVE-2022-37374.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-37375](https://cve.now/CVE-2022-37375.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-37376](https://cve.now/CVE-2022-37376.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Editor 11.1.1.53537. (CVSS 3.3, Foxit PDF Editor)
- [CVE-2022-37377](https://cve.now/CVE-2022-37377.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor 11.1.1.53537;. (CVSS 7.8, Foxit PDF Editor)
- [CVE-2022-37378](https://cve.now/CVE-2022-37378.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Editor 11.1.1.53537. (CVSS 7.8, Foxit PDF Editor)
- [CVE-2022-37379](https://cve.now/CVE-2022-37379.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. (CVSS 3.3, Foxit PDF Reader)
- [CVE-2022-37380](https://cve.now/CVE-2022-37380.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. (CVSS 3.3, Foxit PDF Reader)
- [CVE-2022-37381](https://cve.now/CVE-2022-37381.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. (CVSS 7.8, Foxit PDF Reader)
- [CVE-2022-37382](https://cve.now/CVE-2022-37382.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. (CVSS 3.3, Foxit PDF Reader)
- [CVE-2022-37383](https://cve.now/CVE-2022-37383.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.1.53537. (CVSS 3.3, Foxit PDF Reader)
- [CVE-2022-37384](https://cve.now/CVE-2022-37384.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. (CVSS 7.8, Foxit PDF Reader)
- [CVE-2022-37385](https://cve.now/CVE-2022-37385.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. (CVSS 7.8, Foxit PDF Reader)
- [CVE-2022-37386](https://cve.now/CVE-2022-37386.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 11.2.2.53575. (CVSS 3.3, Foxit PDF Reader)
- [CVE-2022-37387](https://cve.now/CVE-2022-37387.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.2.53575. (CVSS 7.8, Foxit PDF Reader)
- [CVE-2022-37388](https://cve.now/CVE-2022-37388.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.2.53575. (CVSS 7.8, Foxit PDF Reader)
- [CVE-2022-37389](https://cve.now/CVE-2022-37389.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.2.53575. (CVSS 7.8, Foxit PDF Reader)
- [CVE-2022-37390](https://cve.now/CVE-2022-37390.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.2.53575. (CVSS 7.8, Foxit PDF Reader)
- [CVE-2022-37391](https://cve.now/CVE-2022-37391.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.2.53575. (CVSS 7.8, Foxit PDF Reader)
- [CVE-2022-3787](https://cve.now/CVE-2022-3787.md): A vulnerability was found in the device-mapper-multipath. (CVSS 7.8, device-mapper-multipath)
- [CVE-2022-42424](https://cve.now/CVE-2022-42424.md): This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. (CVSS 7.2, Centreon)
- [CVE-2022-42425](https://cve.now/CVE-2022-42425.md): This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. (CVSS 7.2, Centreon)
- [CVE-2022-42426](https://cve.now/CVE-2022-42426.md): This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. (CVSS 7.2, Centreon)
- [CVE-2022-42427](https://cve.now/CVE-2022-42427.md): This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. (CVSS 7.2, Centreon)
- [CVE-2022-42428](https://cve.now/CVE-2022-42428.md): This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. (CVSS 7.2, Centreon)
- [CVE-2022-42429](https://cve.now/CVE-2022-42429.md): This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. (CVSS 7.2, Centreon)
- [CVE-2022-42430](https://cve.now/CVE-2022-42430.md): This vulnerability allows local attackers to escalate privileges on affected Tesla vehicles. (CVSS 8.8, Tesla Model)
- [CVE-2022-42431](https://cve.now/CVE-2022-42431.md): This vulnerability allows local attackers to escalate privileges on affected Tesla vehicles. (CVSS 8.8, Tesla Model)
- [CVE-2022-42432](https://cve.now/CVE-2022-42432.md): This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kernel 6.0-rc2. (CVSS 5.1, Linux Kernel)
- [CVE-2022-42433](https://cve.now/CVE-2022-42433.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR841N TL-WR841N(US)\_ (CVSS 6.4, TP-Link TL-WR841N)
- [CVE-2022-43608](https://cve.now/CVE-2022-43608.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.03 (CVSS 8.8, Canon imageCLASS MF644Cdw)
- [CVE-2022-43609](https://cve.now/CVE-2022-43609.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of IronCAD. (CVSS 7.8, IronCAD)
- [CVE-2022-43610](https://cve.now/CVE-2022-43610.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Corel CorelDRAW Graphics Suite 23. (CVSS 3.3, CorelDRAW Graphics Suite)
- [CVE-2022-43611](https://cve.now/CVE-2022-43611.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Corel CorelDRAW Graphics Suite 23. (CVSS 3.3, CorelDRAW Graphics Suite)
- [CVE-2022-43612](https://cve.now/CVE-2022-43612.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Corel CorelDRAW Graphics Suite 23. (CVSS 3.3, CorelDRAW Graphics Suite)
- [CVE-2022-43613](https://cve.now/CVE-2022-43613.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. (CVSS 7.8, CorelDRAW Graphics Suite)
- [CVE-2022-43614](https://cve.now/CVE-2022-43614.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. (CVSS 7.8, CorelDRAW Graphics Suite)
- [CVE-2022-43615](https://cve.now/CVE-2022-43615.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Corel CorelDRAW Graphics Suite 23. (CVSS 3.3, CorelDRAW Graphics Suite)
- [CVE-2022-43616](https://cve.now/CVE-2022-43616.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. (CVSS 7.8, CorelDRAW Graphics Suite)
- [CVE-2022-43617](https://cve.now/CVE-2022-43617.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. (CVSS 7.8, CorelDRAW Graphics Suite)
- [CVE-2022-43618](https://cve.now/CVE-2022-43618.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Corel CorelDRAW Graphics Suite 23.5.0.506. (CVSS 7.8, CorelDRAW Graphics Suite)
- [CVE-2022-43619](https://cve.now/CVE-2022-43619.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. (CVSS 6.8, D-Link DIR-1935)
- [CVE-2022-43620](https://cve.now/CVE-2022-43620.md): This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-1935 1.03 routers. (CVSS 8.8, D-Link DIR-1935)
- [CVE-2022-43621](https://cve.now/CVE-2022-43621.md): This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-1935 1.03 routers. (CVSS 8.8, D-Link DIR-1935)
- [CVE-2022-43622](https://cve.now/CVE-2022-43622.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. (CVSS 8.8, D-Link DIR-1935)
- [CVE-2022-43623](https://cve.now/CVE-2022-43623.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. (CVSS 6.8, D-Link DIR-1935)
- [CVE-2022-43624](https://cve.now/CVE-2022-43624.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. (CVSS 6.8, D-Link DIR-1935)
- [CVE-2022-43625](https://cve.now/CVE-2022-43625.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. (CVSS 6.8, D-Link DIR-1935)
- [CVE-2022-43626](https://cve.now/CVE-2022-43626.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. (CVSS 6.8, D-Link DIR-1935)
- [CVE-2022-43627](https://cve.now/CVE-2022-43627.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. (CVSS 6.8, D-Link DIR-1935)
- [CVE-2022-43628](https://cve.now/CVE-2022-43628.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. (CVSS 6.8, D-Link DIR-1935)
- [CVE-2022-43629](https://cve.now/CVE-2022-43629.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. (CVSS 6.8, D-Link DIR-1935)
- [CVE-2022-43630](https://cve.now/CVE-2022-43630.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. (CVSS 8.8, D-Link DIR-1935)
- [CVE-2022-43631](https://cve.now/CVE-2022-43631.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. (CVSS 6.8, D-Link DIR-1935)
- [CVE-2022-43632](https://cve.now/CVE-2022-43632.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. (CVSS 6.8, D-Link DIR-1935)
- [CVE-2022-43633](https://cve.now/CVE-2022-43633.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 1.03 routers. (CVSS 6.8, D-Link DIR-1935)
- [CVE-2022-43634](https://cve.now/CVE-2022-43634.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. (CVSS 9.8, Netatalk)
- [CVE-2022-43635](https://cve.now/CVE-2022-43635.md): This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR940N 6\_2111 (CVSS 6.5, TP-Link TL-WR940N)
- [CVE-2022-43636](https://cve.now/CVE-2022-43636.md): This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of TP-Link TL-WR940N 6\_211111 3.20.1 (CVSS 7.5, TP-Link TL-WR940N)
- [CVE-2022-43637](https://cve.now/CVE-2022-43637.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 12.0.1.12430. (CVSS 7.8, Foxit PDF Reader)
- [CVE-2022-43638](https://cve.now/CVE-2022-43638.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 12.0.1.12430. (CVSS 7.8, Foxit PDF Reader)
- [CVE-2022-43639](https://cve.now/CVE-2022-43639.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 12.0.1.12430. (CVSS 7.8, Foxit PDF Reader)
- [CVE-2022-43640](https://cve.now/CVE-2022-43640.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 12.0.1.12430. (CVSS 3.3, Foxit PDF Reader)
- [CVE-2022-43641](https://cve.now/CVE-2022-43641.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 12.0.1.12430. (CVSS 3.3, Foxit PDF Reader)
- [CVE-2022-43642](https://cve.now/CVE-2022-43642.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. (CVSS 8.8, D-Link DIR-825)
- [CVE-2022-43643](https://cve.now/CVE-2022-43643.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. (CVSS 8.8, D-Link DIR-825)
- [CVE-2022-43644](https://cve.now/CVE-2022-43644.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. (CVSS 8.8, D-Link DIR-825)
- [CVE-2022-43645](https://cve.now/CVE-2022-43645.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. (CVSS 8.8, D-Link DIR-825)
- [CVE-2022-43646](https://cve.now/CVE-2022-43646.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. (CVSS 8.8, D-Link DIR-825)
- [CVE-2022-43647](https://cve.now/CVE-2022-43647.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. (CVSS 8.8, D-Link DIR-825)
- [CVE-2022-43648](https://cve.now/CVE-2022-43648.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 1.20B03 routers. (CVSS 8.8, D-Link DIR-3040)
- [CVE-2022-43649](https://cve.now/CVE-2022-43649.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 12.0.2.12465. (CVSS 7.8, Foxit PDF Reader)
- [CVE-2022-43650](https://cve.now/CVE-2022-43650.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of RARLAB WinRAR 6.11.0.0. (CVSS 2.5, RARLAB WinRAR)
- [CVE-2022-44368](https://cve.now/CVE-2022-44368.md): NASM v2.16 was discovered to contain a null pointer deference in the NASM component (CVSS 5.5)
- [CVE-2022-44369](https://cve.now/CVE-2022-44369.md): NASM 2.16 (development) is vulnerable to 476: Null Pointer Dereference via output/outaout.c. (CVSS 5.5)
- [CVE-2022-44370](https://cve.now/CVE-2022-44370.md): NASM v2.16 was discovered to contain a heap buffer overflow in the component quote\_for\_pmake() asm/nasm.c:856 (no CVSS)
- [CVE-2022-48434](https://cve.now/CVE-2022-48434.md): libavcodec/pthread\_frame.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which al (CVSS 8.1)
- [CVE-2023-0664](https://cve.now/CVE-2023-0664.md): A flaw was found in the QEMU Guest Agent service for Windows. (CVSS 7.8, QEMU)
- [CVE-2023-0836](https://cve.now/CVE-2023-0836.md): An information leak vulnerability was discovered in HAProxy 2.1, 2.2 before 2.2.27, 2.3, 2.4 before 2.4.21, 2.5 before 2.5.11, 2.6 before 2. (CVSS 7.5, HAProxy)
- [CVE-2023-1652](https://cve.now/CVE-2023-1652.md): A use-after-free flaw was found in nfsd4\_ssc\_setup\_dul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel. (CVSS 7.1, Linux Kernel)
- [CVE-2023-1701](https://cve.now/CVE-2023-1701.md): Cross-site Scripting (XSS) - Reflected in pimcore/pimcore (CVSS 4.0, pimcore/pimcore)
- [CVE-2023-1702](https://cve.now/CVE-2023-1702.md): Cross-site Scripting (XSS) - Generic in pimcore/pimcore (CVSS 4.0, pimcore/pimcore)
- [CVE-2023-1703](https://cve.now/CVE-2023-1703.md): Cross-site Scripting (XSS) - Generic in pimcore/pimcore (CVSS 5.3, pimcore/pimcore)
- [CVE-2023-1704](https://cve.now/CVE-2023-1704.md): Cross-site Scripting (XSS) - Stored in pimcore/pimcore (CVSS 5.1, pimcore/pimcore)
- [CVE-2023-26968](https://cve.now/CVE-2023-26968.md): In Atrocore 1.5.25, the Create Import Feed option with glyphicon-glyphicon-paperclip function is vulnerable to Unauthenticated File upload. (CVSS 9.8)
- [CVE-2023-26982](https://cve.now/CVE-2023-26982.md): Trudesk v1.2.6 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Tags parameter under the Create Ticke (CVSS 5.4)
- [CVE-2023-26984](https://cve.now/CVE-2023-26984.md): An issue in the password reset function of Peppermint v0.2.4 allows attackers to access the emails and passwords of the Tickets page via a c (CVSS 8.1)
- [CVE-2023-27167](https://cve.now/CVE-2023-27167.md): Suprema BioStar 2 v2.8.16 was discovered to contain a SQL injection vulnerability via the values parameter at /users/absence?search\_month=1. (CVSS 6.5)
- [CVE-2023-28892](https://cve.now/CVE-2023-28892.md): Malwarebytes AdwCleaner 8.4.0 runs as Administrator and performs an insecure file delete operation on C:\\AdwCleaner\\Logs\\AdwCleaner\_Debug.lo (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-03-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.