CVEs published April 6, 2023
111 CVEs were published on April 6, 2023: 7 critical, 15 high. 1 is now in CISA KEV.
- Published
- 111
- Critical
- 7
- High
- 15
- Medium
- 85
- Low
- 3
- Unrated
- 1
- Now in CISA KEV
- 1
- Fix available
- 11
Most affected products
- emrevona WP Fastest Cache – WordPress Cache Plugin
- 14
- MediaTek MT5221, MT6781, MT6789, MT6833, MT6855, MT6877, MT…
- 6
- MediaTek MT5221, MT6879, MT6895, MT6983, MT7902, MT7921, MT…
- 4
- MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…
- 4
- intranda goobi-viewer-core · io.goobi.viewer:viewer-core
- 3
- MediaTek MT6580, MT6735, MT6737, MT6739, MT6753, MT6761, MT…
- 2
- MediaTek MT6789, MT6855, MT6879, MT6895, MT6983, MT8673, MT…
- 2
- MediaTek MT6879, MT6895, MT6983, MT8781
- 2
- ABB My Control System
- 1
- AdTribes.io Product Feed PRO for WooCommerce
- 1
Critical 7
- CVE-2023-29017vm2 Sandbox Escape vulnerabilitypatriksimek vm2 · vm2
- CVE-2023-24538Backticks not treated as string delimiters in html/templateGo standard library html/template · stdlib
- CVE-2023-0750Yellowbrik PEC-1864 authentication bypassLynx Technik AG Yellowbrik
- CVE-2023-28500A Java insecure deserialization vulnerability in Adobe LiveCycle ES4 version 11.0 and earlier allows unauthenticated remote attackers to gai
- CVE-2023-29473webservice in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attac
- CVE-2023-29474inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attack
- CVE-2023-29475inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attack
High 15
- CVE-2023-29008SvelteKit framework has Insufficient CSRF protection for CORS requestssveltejs kit · @sveltejs/kit
- CVE-2023-24537Infinite loop in parsing in go/scannerGo standard library go/scanner · stdlib
- CVE-2023-24534Excessive memory allocation in net/http and net/textprotoGo standard library net/textproto · stdlib
- CVE-2023-24536Excessive resource consumption in net/http, net/textproto and mime/multipartGo standard library mime/multipart · Go standard library… +1
- CVE-2023-1912Limit Login Attempts <= 1.7.1 - Unauthenticated Stored Cross-Site Scriptingautomattic Limit Login Attempts
- CVE-2023-0652Local Privilege Escalation in Cloudflare WARP Installer (Windows)Cloudflare WARP
- CVE-2023-25542 Dell Trusted Device Agent, versions prior to 5.3.0, contain(s) an improper installation permissions vulnerability.Dell Trusted Device Client
- CVE-2023-23979WordPress Quick Event Manager Plugin <= 9.7.4 is vulnerable to Cross Site Scripting (XSS)Fullworks Quick Event Manager
- CVE-2020-19678Directory Traversal vulnerability found in Pfsense v.2.1.3 and Pfsense Suricata v.1.4.6 pkg v.1.0.1 allows a remote attacker to obtain sensi
- CVE-2020-36071SQL injection vulnerability found in Tailor Management System v.1 allows a remote authenticated attacker to execute arbitrary code via the c
- CVE-2020-36072SQL injection vulnerability found in Tailor Management System v.1 allows a remote attacker to execute arbitrary code via the id parameter.
- CVE-2020-36073SQL injection vulnerability found in Tailor Management System v.1 allows a remote attacker to execute arbitrary code via the detail paramete
- CVE-2020-36074SQL injection vulnerability found in Tailor Mangement System v.1 allows a remote attacker to execute arbitrary code via the title parameter.
- CVE-2023-20655In mmsdk, there is a possible escalation of privilege due to a parcel format mismatch.MediaTek MT2715, MT6580, MT6735, MT6737, MT6739, MT6753, MT…
- CVE-2023-29421An issue was discovered in libbzip3.a in bzip3 before 1.2.3.
Medium, low and unrated 89
- CVE-2014-125094phpMiniAdmin cross site scriptingphpMiniAdmin
- CVE-2023-1928WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_preload_single_callback'emrevona WP Fastest Cache – WordPress Cache Plugin
- CVE-2023-1929WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_purgecache_varnish_callback'emrevona WP Fastest Cache – WordPress Cache Plugin
- CVE-2023-1930WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_clear_cache_of_allsites_callback'emrevona WP Fastest Cache – WordPress Cache Plugin
- CVE-2023-1931WP Fastest Cache <= 1.1.2 - Missing Authorization in 'deleteCssAndJsCacheToolbar'emrevona WP Fastest Cache – WordPress Cache Plugin
- CVE-2023-1927WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'deleteCssAndJsCacheToolbar'emrevona WP Fastest Cache – WordPress Cache Plugin
- CVE-2023-1926WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'deleteCacheToolbar'emrevona WP Fastest Cache – WordPress Cache Plugin
- CVE-2023-1925WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_clear_cache_of_allsites_callback'emrevona WP Fastest Cache – WordPress Cache Plugin
- CVE-2023-1924WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_toolbar_save_settings_callback'emrevona WP Fastest Cache – WordPress Cache Plugin
- CVE-2023-1923WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_remove_cdn_integration_ajax_request_callback'emrevona WP Fastest Cache – WordPress Cache Plugin
- CVE-2023-1922WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_pause_cdn_integration_ajax_request_callback'emrevona WP Fastest Cache – WordPress Cache Plugin
- CVE-2023-1921WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_start_cdn_integration_ajax_request_callback'emrevona WP Fastest Cache – WordPress Cache Plugin
- CVE-2023-1920WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_purgecache_varnish_callback'emrevona WP Fastest Cache – WordPress Cache Plugin
- CVE-2023-1919WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_preload_single_save_settings_callback'emrevona WP Fastest Cache – WordPress Cache Plugin
- CVE-2023-1918WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_preload_single_callback'emrevona WP Fastest Cache – WordPress Cache Plugin
- CVE-2023-29016Goobi viewer Core has Cross-Site Scripting Vulnerability in User Nicknamesintranda goobi-viewer-core · io.goobi.viewer:viewer-core
- CVE-2023-29015Goobi viewer Core has Cross-Site Scripting Vulnerability in User Comments intranda goobi-viewer-core · io.goobi.viewer:viewer-core
- CVE-2023-29014Goobi viewer Core Reflected Cross-Site Scripting Vulnerability Using LOGID Parameterintranda goobi-viewer-core · io.goobi.viewer:viewer-core
- CVE-2023-0580Information Disclosure vulnerability in My Control System (on-premise)ABB My Control System
- CVE-2023-29010BudiBase Server-Side Request Forgery vulnerabilitybudibase
- CVE-2023-1913Maps Widget for Google Maps <= 4.24 - Authenticated (Administrator+) Stored Cross-Site Scriptingwebfactory Maps Widget for Google Maps
- CVE-2023-25062WordPress Pinpoint Booking System Plugin <= 2.9.9.2.8 is vulnerable to Cross Site Scripting (XSS)PINPOINT.WORLD Pinpoint Booking System
- CVE-2023-23891WordPress Ocean Extra Plugin <= 2.1.1 is vulnerable to Cross Site Scripting (XSS)OceanWP Ocean Extra
- CVE-2023-24378WordPress Glossary Plugin <= 2.1.27 is vulnerable to Cross Site Scripting (XSS)Codeat Glossary
- CVE-2023-24374WordPress Material Design Icons for Page Builders Plugin <= 1.4.2 is vulnerable to Cross Site Scripting (XSS)Photon WP Material Design Icons for Page Builders
- CVE-2023-24396WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.5.11 is vulnerable to Cross Site Scripting (XSS)E4J s.r.l. VikBooking Hotel Booking Engine & PMS
- CVE-2022-46793WordPress Product Feed PRO for WooCommerce Plugin <= 12.4.4 is vulnerable to Cross Site Request Forgery (CSRF)AdTribes.io Product Feed PRO for WooCommerce
- CVE-2023-23801WordPress Really Simple Google Tag Manager Plugin <= 1.0.6 is vulnerable to Cross Site Request Forgery (CSRF)HasThemes Really Simple Google Tag Manager
- CVE-2023-1908SourceCodester Simple Mobile Comparison Website GET Parameter view_category.php sql injectionSourceCodester Simple Mobile Comparison Website
- CVE-2023-24387WordPress Organization chart Plugin <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)WPdevart Organization chart
- CVE-2023-24411WordPress BNE Testimonials Plugin <= 2.0.7 is vulnerable to Cross Site Scripting (XSS)Kerry Kline BNE Testimonials
- CVE-2023-24403WordPress bbPress Voting Plugin <= 2.1.11.0 is vulnerable to Cross-Site Scripting (XSS)WP For The Win bbPress Voting
- CVE-2023-24383WordPress Namaste! LMS Plugin <= 2.5.9.1 is vulnerable to Cross Site Scripting (XSS)Kiboko Labs Namaste! LMS
- CVE-2023-23898WordPress Blocksy Companion Plugin <= 1.8.67 is vulnerable to Cross Site Scripting (XSS)CreativeThemes Blocksy Companion
- CVE-2023-1802In Docker Desktop 4.17.x the Artifactory Integration falls back to sending registry credentials over plain HTTP if the HTTPS health check has failedDocker Desktop
- CVE-2023-24003WordPress WP Popups Plugin <= 2.1.4.8 is vulnerable to Cross Site Scripting (XSS)Timersys WP Popups – WordPress Popup builder
- CVE-2023-24002WordPress YouTube Embed, Playlist and Popup by WpDevArt Plugin <= 2.6.3 is vulnerable to Cross Site Scripting (XSS)YouTube Embed, Playlist and Popup by WpDevArt
- CVE-2023-24004WordPress Image and Video Lightbox, Image PopUp Plugin <= 2.1.5 is vulnerable to Cross Site Scripting (XSS)WPdevart Image and Video Lightbox, Image PopUp
- CVE-2023-24006WordPress WP Terms Popup – Terms and Conditions and Privacy Policy WordPress Popups Plugin <= 2.6.0 is vulnerable to Cross Site Scripting (XSS)Link Software WP Terms Popup
- CVE-2023-24001WordPress Modal Dialog Plugin <= 3.5.9 is vulnerable to Cross Site Scripting (XSS)Yannick Lefebvre Modal Dialog
- CVE-2023-23996WordPress ProfilePress Plugin <= 4.5.3 is vulnerable to Cross Site Scripting (XSS)ProfilePress Membership Team ProfilePress
- CVE-2023-23998WordPress VikRentCar Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)E4J s.r.l. VikRentCar Car Rental Management System
- CVE-2023-23980WordPress MailOptin Plugin <= 1.2.54.0 is vulnerable to Cross Site Scripting (XSS)MailOptin Popup Builder Team MailOptin
- CVE-2023-28046 Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder deletion vulnerability during uninstallation A local lDell Display Manager
- CVE-2023-23972WordPress Social Like Box and Page by WpDevArt Plugin <= 0.8.39 is vulnerable to Cross Site Scripting (XSS)Smplug-in Social Like Box and Page by WpDevArt
- CVE-2023-23987WordPress User Registration Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS)WPEverest User Registration
- CVE-2023-23971WordPress WP Time Slots Booking Form Plugin <= 1.1.81 is vulnerable to Cross Site Scripting (XSS)CodePeople WP Time Slots Booking Form
- CVE-2023-23815WordPress Multi-column Tag Map Plugin <= 17.0.24 is vulnerable to Cross Site Scripting (XSS)Alan Jackson Multi-column Tag Map
- CVE-2023-23982WordPress WPFrom Email Plugin <= 1.8.8 is vulnerable to Cross Site Scripting (XSS)WPGear.Pro WPFrom Email
- CVE-2023-23981WordPress Conversational Forms for ChatBot Plugin <= 1.1.6 is vulnerable to Cross Site Scripting (XSS)QuantumCloud Conversational Forms for ChatBot
- CVE-2022-32599In rpmb, there is a possible out of bounds write due to a logic error.MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…
- CVE-2022-46781An issue was discovered in the Arm Mali GPU Kernel Driver.
- CVE-2023-20652In keyinstall, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…
- CVE-2023-20653In keyinstall, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…
- CVE-2023-20654In keyinstall, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…
- CVE-2023-20656In geniezone, there is a possible out of bounds write due to a logic error.MediaTek MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT…
- CVE-2023-20657In mtee, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6580, MT6735, MT6737, MT6739, MT6753, MT6761, MT…
- CVE-2023-20658In isp, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6895, MT6983, MT8188, MT8195, MT8673, MT8795T, M…
- CVE-2023-20659In wlan, there is a possible out of bounds write due to a missing bounds check.MediaTek MT5221, MT6781, MT6789, MT6833, MT6855, MT6877, MT…
- CVE-2023-20660In wlan, there is a possible out of bounds read due to an integer overflow.MediaTek MT5221, MT6879, MT6895, MT6983, MT7902, MT7921, MT…
- CVE-2023-20661In wlan, there is a possible out of bounds write due to an integer overflow.MediaTek MT5221, MT6879, MT6895, MT6983, MT7902, MT7921, MT…
- CVE-2023-20662In wlan, there is a possible out of bounds write due to an integer overflow.MediaTek MT5221, MT6879, MT6895, MT6983, MT7902, MT7921, MT…
- CVE-2023-20663In wlan, there is a possible out of bounds write due to an integer overflow.MediaTek MT5221, MT6879, MT6895, MT6983, MT7902, MT7921, MT…
- CVE-2023-20664In gz, there is a possible double free due to a use after free.MediaTek MT6580, MT6735, MT6737, MT6739, MT6753, MT6761, MT…
- CVE-2023-20665In ril, there is a possible out of bounds read due to a missing bounds check.MediaTek MT6739, MT6761, MT6762, MT6763, MT6765, MT6768, MT…
- CVE-2023-20666In display drm, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6789, MT6855, MT6895, MT6983, MT8188, MT8195, MT…
- CVE-2023-20670In audio, there is a possible out of bounds write due to a missing bounds check.MediaTek MT2715, MT6580, MT6739, MT6761, MT6765, MT6768, MT…
- CVE-2023-20674In wlan, there is a possible out of bounds read due to a missing bounds check.MediaTek MT5221, MT6781, MT6789, MT6833, MT6855, MT6877, MT…
- CVE-2023-20675In wlan, there is a possible out of bounds read due to a missing bounds check.MediaTek MT5221, MT6781, MT6789, MT6833, MT6855, MT6877, MT…
- CVE-2023-20676In wlan, there is a possible out of bounds read due to a missing bounds check.MediaTek MT5221, MT6781, MT6789, MT6833, MT6855, MT6877, MT…
- CVE-2023-20677In wlan, there is a possible out of bounds read due to a missing bounds check.MediaTek MT5221, MT6781, MT6789, MT6833, MT6855, MT6877, MT…
- CVE-2023-20679In wlan, there is a possible out of bounds read due to a missing bounds check.MediaTek MT5221, MT6781, MT6789, MT6833, MT6855, MT6877, MT…
- CVE-2023-20680In adsp, there is a possible out of bounds write due to improper input validation.MediaTek MT6779, MT6781, MT6785, MT6833, MT6853, MT6873, MT…
- CVE-2023-20681In adsp, there is a possible out of bounds write due to improper input validation.MediaTek MT6886, MT6895, MT6983, MT6985, MT8365, MT8771, MT…
- CVE-2023-20682In wlan, there is a possible out of bounds write due to an integer overflow.MediaTek MT5221, MT6580, MT6735, MT6765, MT6768, MT6771, MT…
- CVE-2023-20684In vdec, there is a possible use after free due to a race condition.MediaTek MT6789, MT6855, MT6879, MT6895, MT6983, MT8673, MT…
- CVE-2023-20685In vdec, there is a possible use after free due to a race condition.MediaTek MT6789, MT6855, MT6879, MT6895, MT6983, MT8673, MT…
- CVE-2023-20686In display drm, there is a possible double free due to a race condition.MediaTek MT6879, MT6895, MT6983, MT8781
- CVE-2023-20687In display drm, there is a possible double free due to a race condition.MediaTek MT6879, MT6895, MT6983, MT8781
- CVE-2023-20688In power, there is a possible out of bounds read due to a missing bounds check.MediaTek MT2715, MT6580, MT6731, MT6735, MT6737, MT6739, MT…
- CVE-2023-22985Sourcecodester Simple Guestbook Management System version 1 is vulnerable to Cross Site Scripting (XSS) via Name, Referrer, Location, and Co
- CVE-2023-26083Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver a
- CVE-2023-29415An issue was discovered in libbzip3.a in bzip3 before 1.3.0.
- CVE-2023-29416An issue was discovered in libbzip3.a in bzip3 before 1.3.0.
- CVE-2023-29417An issue was discovered in libbzip3.a in bzip3 1.2.2.
- CVE-2023-29418An issue was discovered in libbzip3.a in bzip3 before 1.2.3.
- CVE-2023-29419An issue was discovered in libbzip3.a in bzip3 before 1.2.3.
- CVE-2023-29420An issue was discovered in libbzip3.a in bzip3 before 1.2.3.
- CVE-2023-29465SageMath FlintQS 1.0 relies on pathnames under TMPDIR (typically world-writable), which (for example) allows a local user to overwrite files