CVEs published April 9, 2023
15 CVEs were published on April 9, 2023: 3 critical, 6 high.
- Published
- 15
- Critical
- 3
- High
- 6
- Medium
- 4
- Low
- 2
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- PHPGurukul Bank Locker Management System
- 2
- BestWebSoft Contact Form
- 1
- BestWebSoft Contact Form Plugin
- 1
- BestWebSoft Facebook Like Button
- 1
- HD FLV PLayer Plugin
- 1
- SourceCodester Best Online News Portal
- 1
- Turante Sandbox Theme
- 1
Critical 3
- CVE-2023-27718D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_498308 function.
- CVE-2023-27719D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_478360 function.
- CVE-2023-27720D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_48d630 function.
High 6
- CVE-2023-1964PHPGurukul Bank Locker Management System Password Reset recovery.php sql injectionPHPGurukul Bank Locker Management System
- CVE-2023-1962SourceCodester Best Online News Portal POST Parameter forgot-password.php sql injectionSourceCodester Best Online News Portal
- CVE-2023-27727Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njs_function_frame at src/njs_function.h.
- CVE-2023-27728Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njs_dump_is_recursive at src/njs_vmcode.c.
- CVE-2023-27729Nginx NJS v0.7.10 was discovered to contain an illegal memcpy via the function njs_vmcode_return at src/njs_vmcode.c.
- CVE-2023-27730Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njs_lvlhsh_find at src/njs_lvlhsh.c.
Medium, low and unrated 6
- CVE-2012-10012BestWebSoft Facebook Like Button facebook-button-plugin.php fcbk_bttn_plgn_settings_page cross-site request forgeryBestWebSoft Facebook Like Button
- CVE-2009-10004Turante Sandbox Theme functions.php sandbox_body_class cross site scriptingTurante Sandbox Theme
- CVE-2012-10011HD FLV PLayer Plugin functions.php hd_update_media sql injectionHD FLV PLayer Plugin
- CVE-2023-1963PHPGurukul Bank Locker Management System Search index.php sql injectionPHPGurukul Bank Locker Management System
- CVE-2014-125095BestWebSoft Contact Form Plugin bws_menu.php bws_add_menu_render cross site scriptingBestWebSoft Contact Form Plugin
- CVE-2012-10010BestWebSoft Contact Form contact_form.php cntctfrm_settings_page cross-site request forgeryBestWebSoft Contact Form