# CVEs published 2023-04-06

111 CVEs were published on April 6, 2023: 7 critical, 15 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2014-125094](https://cve.now/CVE-2014-125094.md): phpMiniAdmin cross site scripting (CVSS 3.5, phpMiniAdmin)
- [CVE-2023-1928](https://cve.now/CVE-2023-1928.md): WP Fastest Cache \<= 1.1.2 - Missing Authorization in 'wpfc\_preload\_single\_callback' (CVSS 4.3, emrevona WP Fastest Cache – WordPress Cache Plugin)
- [CVE-2023-1929](https://cve.now/CVE-2023-1929.md): WP Fastest Cache \<= 1.1.2 - Missing Authorization in 'wpfc\_purgecache\_varnish\_callback' (CVSS 4.3, emrevona WP Fastest Cache – WordPress Cache Plugin)
- [CVE-2023-1930](https://cve.now/CVE-2023-1930.md): WP Fastest Cache \<= 1.1.2 - Missing Authorization in 'wpfc\_clear\_cache\_of\_allsites\_callback' (CVSS 4.3, emrevona WP Fastest Cache – WordPress Cache Plugin)
- [CVE-2023-1931](https://cve.now/CVE-2023-1931.md): WP Fastest Cache \<= 1.1.2 - Missing Authorization in 'deleteCssAndJsCacheToolbar' (CVSS 4.3, emrevona WP Fastest Cache – WordPress Cache Plugin)
- [CVE-2023-1927](https://cve.now/CVE-2023-1927.md): WP Fastest Cache \<= 1.1.2 - Cross-Site Request Forgery via 'deleteCssAndJsCacheToolbar' (CVSS 4.3, emrevona WP Fastest Cache – WordPress Cache Plugin)
- [CVE-2023-1926](https://cve.now/CVE-2023-1926.md): WP Fastest Cache \<= 1.1.2 - Cross-Site Request Forgery via 'deleteCacheToolbar' (CVSS 4.3, emrevona WP Fastest Cache – WordPress Cache Plugin)
- [CVE-2023-1925](https://cve.now/CVE-2023-1925.md): WP Fastest Cache \<= 1.1.2 - Cross-Site Request Forgery via 'wpfc\_clear\_cache\_of\_allsites\_callback' (CVSS 4.3, emrevona WP Fastest Cache – WordPress Cache Plugin)
- [CVE-2023-1924](https://cve.now/CVE-2023-1924.md): WP Fastest Cache \<= 1.1.2 - Cross-Site Request Forgery via 'wpfc\_toolbar\_save\_settings\_callback' (CVSS 4.3, emrevona WP Fastest Cache – WordPress Cache Plugin)
- [CVE-2023-1923](https://cve.now/CVE-2023-1923.md): WP Fastest Cache \<= 1.1.2 - Cross-Site Request Forgery via 'wpfc\_remove\_cdn\_integration\_ajax\_request\_callback' (CVSS 4.3, emrevona WP Fastest Cache – WordPress Cache Plugin)
- [CVE-2023-1922](https://cve.now/CVE-2023-1922.md): WP Fastest Cache \<= 1.1.2 - Cross-Site Request Forgery via 'wpfc\_pause\_cdn\_integration\_ajax\_request\_callback' (CVSS 4.3, emrevona WP Fastest Cache – WordPress Cache Plugin)
- [CVE-2023-1921](https://cve.now/CVE-2023-1921.md): WP Fastest Cache \<= 1.1.2 - Cross-Site Request Forgery via 'wpfc\_start\_cdn\_integration\_ajax\_request\_callback' (CVSS 4.3, emrevona WP Fastest Cache – WordPress Cache Plugin)
- [CVE-2023-1920](https://cve.now/CVE-2023-1920.md): WP Fastest Cache \<= 1.1.2 - Cross-Site Request Forgery via 'wpfc\_purgecache\_varnish\_callback' (CVSS 4.3, emrevona WP Fastest Cache – WordPress Cache Plugin)
- [CVE-2023-1919](https://cve.now/CVE-2023-1919.md): WP Fastest Cache \<= 1.1.2 - Cross-Site Request Forgery via 'wpfc\_preload\_single\_save\_settings\_callback' (CVSS 4.3, emrevona WP Fastest Cache – WordPress Cache Plugin)
- [CVE-2023-1918](https://cve.now/CVE-2023-1918.md): WP Fastest Cache \<= 1.1.2 - Cross-Site Request Forgery via 'wpfc\_preload\_single\_callback' (CVSS 4.3, emrevona WP Fastest Cache – WordPress Cache Plugin)
- [CVE-2023-29017](https://cve.now/CVE-2023-29017.md): vm2 Sandbox Escape vulnerability (CVSS 10.0, patriksimek vm2 · vm2)
- [CVE-2023-29016](https://cve.now/CVE-2023-29016.md): Goobi viewer Core has Cross-Site Scripting Vulnerability in User Nicknames (CVSS 6.1, intranda goobi-viewer-core · io.goobi.viewer:viewer-core)
- [CVE-2023-29015](https://cve.now/CVE-2023-29015.md): Goobi viewer Core has Cross-Site Scripting Vulnerability in User Comments (CVSS 6.1, intranda goobi-viewer-core · io.goobi.viewer:viewer-core)
- [CVE-2023-29014](https://cve.now/CVE-2023-29014.md): Goobi viewer Core Reflected Cross-Site Scripting Vulnerability Using LOGID Parameter (CVSS 6.1, intranda goobi-viewer-core · io.goobi.viewer:viewer-core)
- [CVE-2023-29008](https://cve.now/CVE-2023-29008.md): SvelteKit framework has Insufficient CSRF protection for CORS requests (CVSS 8.8, sveltejs kit · @sveltejs/kit)
- [CVE-2023-0580](https://cve.now/CVE-2023-0580.md): Information Disclosure vulnerability in My Control System (on-premise) (CVSS 5.4, ABB My Control System)
- [CVE-2023-29010](https://cve.now/CVE-2023-29010.md): BudiBase Server-Side Request Forgery vulnerability (CVSS 6.5, budibase)
- [CVE-2023-24537](https://cve.now/CVE-2023-24537.md): Infinite loop in parsing in go/scanner (CVSS 7.5, Go standard library go/scanner · stdlib)
- [CVE-2023-24538](https://cve.now/CVE-2023-24538.md): Backticks not treated as string delimiters in html/template (CVSS 9.8, Go standard library html/template · stdlib)
- [CVE-2023-24534](https://cve.now/CVE-2023-24534.md): Excessive memory allocation in net/http and net/textproto (CVSS 7.5, Go standard library net/textproto · stdlib)
- [CVE-2023-24536](https://cve.now/CVE-2023-24536.md): Excessive resource consumption in net/http, net/textproto and mime/multipart (CVSS 7.5, Go standard library mime/multipart · Go standard library… +1)
- [CVE-2023-1913](https://cve.now/CVE-2023-1913.md): Maps Widget for Google Maps \<= 4.24 - Authenticated (Administrator+) Stored Cross-Site Scripting (CVSS 4.4, webfactory Maps Widget for Google Maps)
- [CVE-2023-1912](https://cve.now/CVE-2023-1912.md): Limit Login Attempts \<= 1.7.1 - Unauthenticated Stored Cross-Site Scripting (CVSS 7.2, automattic Limit Login Attempts)
- [CVE-2023-25062](https://cve.now/CVE-2023-25062.md): WordPress Pinpoint Booking System Plugin \<= 2.9.9.2.8 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, PINPOINT.WORLD Pinpoint Booking System)
- [CVE-2023-23891](https://cve.now/CVE-2023-23891.md): WordPress Ocean Extra Plugin \<= 2.1.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.5, OceanWP Ocean Extra)
- [CVE-2023-24378](https://cve.now/CVE-2023-24378.md): WordPress Glossary Plugin \<= 2.1.27 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Codeat Glossary)
- [CVE-2023-24374](https://cve.now/CVE-2023-24374.md): WordPress Material Design Icons for Page Builders Plugin \<= 1.4.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Photon WP Material Design Icons for Page Builders)
- [CVE-2023-24396](https://cve.now/CVE-2023-24396.md): WordPress VikBooking Hotel Booking Engine & PMS Plugin \<= 1.5.11 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, E4J s.r.l. VikBooking Hotel Booking Engine & PMS)
- [CVE-2023-0750](https://cve.now/CVE-2023-0750.md): Yellowbrik PEC-1864 authentication bypass (CVSS 9.8, Lynx Technik AG Yellowbrik)
- [CVE-2022-46793](https://cve.now/CVE-2022-46793.md): WordPress Product Feed PRO for WooCommerce Plugin \<= 12.4.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, AdTribes.io Product Feed PRO for WooCommerce)
- [CVE-2023-23801](https://cve.now/CVE-2023-23801.md): WordPress Really Simple Google Tag Manager Plugin \<= 1.0.6 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, HasThemes Really Simple Google Tag Manager)
- [CVE-2023-1908](https://cve.now/CVE-2023-1908.md): SourceCodester Simple Mobile Comparison Website GET Parameter view\_category.php sql injection (CVSS 6.3, SourceCodester Simple Mobile Comparison Website)
- [CVE-2023-24387](https://cve.now/CVE-2023-24387.md): WordPress Organization chart Plugin \<= 1.4.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, WPdevart Organization chart)
- [CVE-2023-24411](https://cve.now/CVE-2023-24411.md): WordPress BNE Testimonials Plugin \<= 2.0.7 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Kerry Kline BNE Testimonials)
- [CVE-2023-24403](https://cve.now/CVE-2023-24403.md): WordPress bbPress Voting Plugin \<= 2.1.11.0 is vulnerable to Cross-Site Scripting (XSS) (CVSS 5.9, WP For The Win bbPress Voting)
- [CVE-2023-24383](https://cve.now/CVE-2023-24383.md): WordPress Namaste! LMS Plugin \<= 2.5.9.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Kiboko Labs Namaste! LMS)
- [CVE-2023-23898](https://cve.now/CVE-2023-23898.md): WordPress Blocksy Companion Plugin \<= 1.8.67 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.5, CreativeThemes Blocksy Companion)
- [CVE-2023-0652](https://cve.now/CVE-2023-0652.md): Local Privilege Escalation in Cloudflare WARP Installer (Windows) (CVSS 7.0, Cloudflare WARP)
- [CVE-2023-1802](https://cve.now/CVE-2023-1802.md): In Docker Desktop 4.17.x the Artifactory Integration falls back to sending registry credentials over plain HTTP if the HTTPS health check has failed (CVSS 5.9, Docker Desktop)
- [CVE-2023-24003](https://cve.now/CVE-2023-24003.md): WordPress WP Popups Plugin \<= 2.1.4.8 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Timersys WP Popups – WordPress Popup builder)
- [CVE-2023-24002](https://cve.now/CVE-2023-24002.md): WordPress YouTube Embed, Playlist and Popup by WpDevArt Plugin \<= 2.6.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, YouTube Embed, Playlist and Popup by WpDevArt)
- [CVE-2023-24004](https://cve.now/CVE-2023-24004.md): WordPress Image and Video Lightbox, Image PopUp Plugin \<= 2.1.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, WPdevart Image and Video Lightbox, Image PopUp)
- [CVE-2023-24006](https://cve.now/CVE-2023-24006.md): WordPress WP Terms Popup – Terms and Conditions and Privacy Policy WordPress Popups Plugin \<= 2.6.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Link Software WP Terms Popup)
- [CVE-2023-24001](https://cve.now/CVE-2023-24001.md): WordPress Modal Dialog Plugin \<= 3.5.9 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Yannick Lefebvre Modal Dialog)
- [CVE-2023-23996](https://cve.now/CVE-2023-23996.md): WordPress ProfilePress Plugin \<= 4.5.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, ProfilePress Membership Team ProfilePress)
- [CVE-2023-23998](https://cve.now/CVE-2023-23998.md): WordPress VikRentCar Plugin \<= 1.3.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, E4J s.r.l. VikRentCar Car Rental Management System)
- [CVE-2023-23980](https://cve.now/CVE-2023-23980.md): WordPress MailOptin Plugin \<= 1.2.54.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, MailOptin Popup Builder Team MailOptin)
- [CVE-2023-25542](https://cve.now/CVE-2023-25542.md): Dell Trusted Device Agent, versions prior to 5.3.0, contain(s) an improper installation permissions vulnerability. (CVSS 7.0, Dell Trusted Device Client)
- [CVE-2023-28046](https://cve.now/CVE-2023-28046.md): Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder deletion vulnerability during uninstallation A local l (CVSS 6.6, Dell Display Manager)
- [CVE-2023-23972](https://cve.now/CVE-2023-23972.md): WordPress Social Like Box and Page by WpDevArt Plugin \<= 0.8.39 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Smplug-in Social Like Box and Page by WpDevArt)
- [CVE-2023-23987](https://cve.now/CVE-2023-23987.md): WordPress User Registration Plugin \<= 2.3.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, WPEverest User Registration)
- [CVE-2023-23979](https://cve.now/CVE-2023-23979.md): WordPress Quick Event Manager Plugin \<= 9.7.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Fullworks Quick Event Manager)
- [CVE-2023-23971](https://cve.now/CVE-2023-23971.md): WordPress WP Time Slots Booking Form Plugin \<= 1.1.81 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, CodePeople WP Time Slots Booking Form)
- [CVE-2023-23815](https://cve.now/CVE-2023-23815.md): WordPress Multi-column Tag Map Plugin \<= 17.0.24 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Alan Jackson Multi-column Tag Map)
- [CVE-2023-23982](https://cve.now/CVE-2023-23982.md): WordPress WPFrom Email Plugin \<= 1.8.8 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, WPGear.Pro WPFrom Email)
- [CVE-2023-23981](https://cve.now/CVE-2023-23981.md): WordPress Conversational Forms for ChatBot Plugin \<= 1.1.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, QuantumCloud Conversational Forms for ChatBot)
- [CVE-2020-19678](https://cve.now/CVE-2020-19678.md): Directory Traversal vulnerability found in Pfsense v.2.1.3 and Pfsense Suricata v.1.4.6 pkg v.1.0.1 allows a remote attacker to obtain sensi (CVSS 7.5)
- [CVE-2020-36071](https://cve.now/CVE-2020-36071.md): SQL injection vulnerability found in Tailor Management System v.1 allows a remote authenticated attacker to execute arbitrary code via the c (CVSS 8.8)
- [CVE-2020-36072](https://cve.now/CVE-2020-36072.md): SQL injection vulnerability found in Tailor Management System v.1 allows a remote attacker to execute arbitrary code via the id parameter. (CVSS 8.8)
- [CVE-2020-36073](https://cve.now/CVE-2020-36073.md): SQL injection vulnerability found in Tailor Management System v.1 allows a remote attacker to execute arbitrary code via the detail paramete (CVSS 8.8)
- [CVE-2020-36074](https://cve.now/CVE-2020-36074.md): SQL injection vulnerability found in Tailor Mangement System v.1 allows a remote attacker to execute arbitrary code via the title parameter. (CVSS 8.8)
- [CVE-2022-32599](https://cve.now/CVE-2022-32599.md): In rpmb, there is a possible out of bounds write due to a logic error. (CVSS 6.7, MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…)
- [CVE-2022-46781](https://cve.now/CVE-2022-46781.md): An issue was discovered in the Arm Mali GPU Kernel Driver. (CVSS 3.3)
- [CVE-2023-20652](https://cve.now/CVE-2023-20652.md): In keyinstall, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…)
- [CVE-2023-20653](https://cve.now/CVE-2023-20653.md): In keyinstall, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…)
- [CVE-2023-20654](https://cve.now/CVE-2023-20654.md): In keyinstall, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…)
- [CVE-2023-20655](https://cve.now/CVE-2023-20655.md): In mmsdk, there is a possible escalation of privilege due to a parcel format mismatch. (CVSS 7.8, MediaTek MT2715, MT6580, MT6735, MT6737, MT6739, MT6753, MT…)
- [CVE-2023-20656](https://cve.now/CVE-2023-20656.md): In geniezone, there is a possible out of bounds write due to a logic error. (CVSS 6.7, MediaTek MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT…)
- [CVE-2023-20657](https://cve.now/CVE-2023-20657.md): In mtee, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT6580, MT6735, MT6737, MT6739, MT6753, MT6761, MT…)
- [CVE-2023-20658](https://cve.now/CVE-2023-20658.md): In isp, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT6895, MT6983, MT8188, MT8195, MT8673, MT8795T, M…)
- [CVE-2023-20659](https://cve.now/CVE-2023-20659.md): In wlan, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT5221, MT6781, MT6789, MT6833, MT6855, MT6877, MT…)
- [CVE-2023-20660](https://cve.now/CVE-2023-20660.md): In wlan, there is a possible out of bounds read due to an integer overflow. (CVSS 4.4, MediaTek MT5221, MT6879, MT6895, MT6983, MT7902, MT7921, MT…)
- [CVE-2023-20661](https://cve.now/CVE-2023-20661.md): In wlan, there is a possible out of bounds write due to an integer overflow. (CVSS 6.7, MediaTek MT5221, MT6879, MT6895, MT6983, MT7902, MT7921, MT…)
- [CVE-2023-20662](https://cve.now/CVE-2023-20662.md): In wlan, there is a possible out of bounds write due to an integer overflow. (CVSS 6.7, MediaTek MT5221, MT6879, MT6895, MT6983, MT7902, MT7921, MT…)
- [CVE-2023-20663](https://cve.now/CVE-2023-20663.md): In wlan, there is a possible out of bounds write due to an integer overflow. (CVSS 6.7, MediaTek MT5221, MT6879, MT6895, MT6983, MT7902, MT7921, MT…)
- [CVE-2023-20664](https://cve.now/CVE-2023-20664.md): In gz, there is a possible double free due to a use after free. (CVSS 6.7, MediaTek MT6580, MT6735, MT6737, MT6739, MT6753, MT6761, MT…)
- [CVE-2023-20665](https://cve.now/CVE-2023-20665.md): In ril, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, MediaTek MT6739, MT6761, MT6762, MT6763, MT6765, MT6768, MT…)
- [CVE-2023-20666](https://cve.now/CVE-2023-20666.md): In display drm, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT6789, MT6855, MT6895, MT6983, MT8188, MT8195, MT…)
- [CVE-2023-20670](https://cve.now/CVE-2023-20670.md): In audio, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT2715, MT6580, MT6739, MT6761, MT6765, MT6768, MT…)
- [CVE-2023-20674](https://cve.now/CVE-2023-20674.md): In wlan, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, MediaTek MT5221, MT6781, MT6789, MT6833, MT6855, MT6877, MT…)
- [CVE-2023-20675](https://cve.now/CVE-2023-20675.md): In wlan, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, MediaTek MT5221, MT6781, MT6789, MT6833, MT6855, MT6877, MT…)
- [CVE-2023-20676](https://cve.now/CVE-2023-20676.md): In wlan, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, MediaTek MT5221, MT6781, MT6789, MT6833, MT6855, MT6877, MT…)
- [CVE-2023-20677](https://cve.now/CVE-2023-20677.md): In wlan, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, MediaTek MT5221, MT6781, MT6789, MT6833, MT6855, MT6877, MT…)
- [CVE-2023-20679](https://cve.now/CVE-2023-20679.md): In wlan, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, MediaTek MT5221, MT6781, MT6789, MT6833, MT6855, MT6877, MT…)
- [CVE-2023-20680](https://cve.now/CVE-2023-20680.md): In adsp, there is a possible out of bounds write due to improper input validation. (CVSS 6.7, MediaTek MT6779, MT6781, MT6785, MT6833, MT6853, MT6873, MT…)
- [CVE-2023-20681](https://cve.now/CVE-2023-20681.md): In adsp, there is a possible out of bounds write due to improper input validation. (CVSS 6.7, MediaTek MT6886, MT6895, MT6983, MT6985, MT8365, MT8771, MT…)
- [CVE-2023-20682](https://cve.now/CVE-2023-20682.md): In wlan, there is a possible out of bounds write due to an integer overflow. (CVSS 6.7, MediaTek MT5221, MT6580, MT6735, MT6765, MT6768, MT6771, MT…)
- [CVE-2023-20684](https://cve.now/CVE-2023-20684.md): In vdec, there is a possible use after free due to a race condition. (CVSS 6.4, MediaTek MT6789, MT6855, MT6879, MT6895, MT6983, MT8673, MT…)
- [CVE-2023-20685](https://cve.now/CVE-2023-20685.md): In vdec, there is a possible use after free due to a race condition. (CVSS 6.4, MediaTek MT6789, MT6855, MT6879, MT6895, MT6983, MT8673, MT…)
- [CVE-2023-20686](https://cve.now/CVE-2023-20686.md): In display drm, there is a possible double free due to a race condition. (CVSS 6.4, MediaTek MT6879, MT6895, MT6983, MT8781)
- [CVE-2023-20687](https://cve.now/CVE-2023-20687.md): In display drm, there is a possible double free due to a race condition. (CVSS 6.4, MediaTek MT6879, MT6895, MT6983, MT8781)
- [CVE-2023-20688](https://cve.now/CVE-2023-20688.md): In power, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, MediaTek MT2715, MT6580, MT6731, MT6735, MT6737, MT6739, MT…)
- [CVE-2023-22985](https://cve.now/CVE-2023-22985.md): Sourcecodester Simple Guestbook Management System version 1 is vulnerable to Cross Site Scripting (XSS) via Name, Referrer, Location, and Co (CVSS 6.1)
- [CVE-2023-26083](https://cve.now/CVE-2023-26083.md): Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver a (CVSS 3.3, KEV)
- [CVE-2023-28500](https://cve.now/CVE-2023-28500.md): A Java insecure deserialization vulnerability in Adobe LiveCycle ES4 version 11.0 and earlier allows unauthenticated remote attackers to gai (CVSS 9.8)
- [CVE-2023-29415](https://cve.now/CVE-2023-29415.md): An issue was discovered in libbzip3.a in bzip3 before 1.3.0. (CVSS 6.5)
- [CVE-2023-29416](https://cve.now/CVE-2023-29416.md): An issue was discovered in libbzip3.a in bzip3 before 1.3.0. (CVSS 6.5)
- [CVE-2023-29417](https://cve.now/CVE-2023-29417.md): An issue was discovered in libbzip3.a in bzip3 1.2.2. (no CVSS)
- [CVE-2023-29418](https://cve.now/CVE-2023-29418.md): An issue was discovered in libbzip3.a in bzip3 before 1.2.3. (CVSS 6.5)
- [CVE-2023-29419](https://cve.now/CVE-2023-29419.md): An issue was discovered in libbzip3.a in bzip3 before 1.2.3. (CVSS 6.5)
- [CVE-2023-29420](https://cve.now/CVE-2023-29420.md): An issue was discovered in libbzip3.a in bzip3 before 1.2.3. (CVSS 6.5)
- [CVE-2023-29421](https://cve.now/CVE-2023-29421.md): An issue was discovered in libbzip3.a in bzip3 before 1.2.3. (CVSS 8.8)
- [CVE-2023-29465](https://cve.now/CVE-2023-29465.md): SageMath FlintQS 1.0 relies on pathnames under TMPDIR (typically world-writable), which (for example) allows a local user to overwrite files (CVSS 5.5)
- [CVE-2023-29473](https://cve.now/CVE-2023-29473.md): webservice in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attac (CVSS 9.8)
- [CVE-2023-29474](https://cve.now/CVE-2023-29474.md): inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attack (CVSS 9.8)
- [CVE-2023-29475](https://cve.now/CVE-2023-29475.md): inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attack (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-04-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.