CVEs published April 22, 2023
31 CVEs were published on April 22, 2023: 0 critical, 11 high.
- Published
- 31
- Critical
- 0
- High
- 11
- Medium
- 18
- Low
- 2
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- NVIDIA DGX servers
- 11
- NVIDIA CUDA Toolkit
- 5
- NVIDIA ConnectX Firmware
- 3
- NVIDIA GPU Display Driver
- 3
- microweber/microweber
- 2
- hansunCMS
- 1
- kalcaddle KodExplorer
- 1
- PoDoFo
- 1
- SourceCodester Complaint Management System
- 1
- SourceCodester Online Computer and Laptop Store
- 1
High 11
- CVE-2023-25507NVIDIA DGX-1 BMC contains a vulnerability in the SPX REST API, where an attacker with the appropriate level of authorization can inject arbiNVIDIA DGX servers
- CVE-2023-25506NVIDIA DGX-1 contains a vulnerability in Ofbd in AMI SBIOS, where a preconditioned heap can allow a user with elevated privileges to cause aNVIDIA DGX servers
- CVE-2023-25505NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler of the AMI MegaRAC BMC , where an attacker with the appropriate level of authoNVIDIA DGX servers
- CVE-2023-0209NVIDIA DGX-1 SBIOS contains a vulnerability in the Uncore PEI module, where authentication of the code executed by SSA is missing, which mayNVIDIA DGX servers
- CVE-2023-0207NVIDIA DGX-2 SBIOS contains a vulnerability where an attacker may modify the ServerSetup NVRAM variable at runtime by executing privileged cNVIDIA DGX servers
- CVE-2023-0206NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of SMRAM by exploiting the NVME SMM API.NVIDIA DGX servers
- CVE-2023-0202NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of SMRAM by exploiting the GenericSio and LegacNVIDIA DGX servers
- CVE-2023-0200NVIDIA DGX-2 contains a vulnerability in OFBD where a user with high privileges and a pre-conditioned heap can cause an access beyond a buffNVIDIA DGX servers
- CVE-2023-0184NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler which may lead to denial of servicNVIDIA GPU Display Driver
- CVE-2023-2239Exposure of Private Personal Information to an Unauthorized Actor in microweber/microwebermicroweber/microweber
- CVE-2023-2240Improper Privilege Management in microweber/microwebermicroweber/microweber
Medium, low and unrated 20
- CVE-2022-4944kalcaddle KodExplorer cross-site request forgerykalcaddle KodExplorer
- CVE-2023-2245hansunCMS unrestricted uploadhansunCMS
- CVE-2023-2244SourceCodester Online Eyewear Shop GET Parameter update_status.php sql injectionSourceCodester Online Eyewear Shop
- CVE-2023-2243SourceCodester Complaint Management System POST Parameter registration.php sql injectionSourceCodester Complaint Management System
- CVE-2023-2242SourceCodester Online Computer and Laptop Store GET Parameter sql injectionSourceCodester Online Computer and Laptop Store
- CVE-2023-2241PoDoFo PdfXRefStreamParserObject.cpp readXRefStreamEntry heap-based overflowPoDoFo
- CVE-2023-25514NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by trickiNVIDIA CUDA Toolkit
- CVE-2023-25513NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by trickiNVIDIA CUDA Toolkit
- CVE-2023-25512NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds memory read byNVIDIA CUDA Toolkit
- CVE-2023-25511NVIDIA CUDA Toolkit for Linux and Windows contains a vulnerability in cuobjdump, where a division-by-zero error may enable a user to cause aNVIDIA CUDA Toolkit
- CVE-2023-25510NVIDIA CUDA Toolkit SDK for Linux and Windows contains a NULL pointer dereference in cuobjdump, where a local user running the tool against NVIDIA CUDA Toolkit
- CVE-2023-25509NVIDIA DGX-1 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of service, and escalation of privileges.NVIDIA DGX servers
- CVE-2023-25508NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler, where an attacker with the appropriate level of authorization can upload and NVIDIA DGX servers
- CVE-2023-0205NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can exploit insufficNVIDIA ConnectX Firmware
- CVE-2023-0204NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can cause improper hNVIDIA ConnectX Firmware
- CVE-2023-0203NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can exploit insufficNVIDIA ConnectX Firmware
- CVE-2023-0201NVIDIA DGX-2 SBIOS contains a vulnerability in Bds, where a user with high privileges can cause a write beyond the bounds of an indexable reNVIDIA DGX servers
- CVE-2023-0199NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds write can NVIDIA GPU Display Driver
- CVE-2023-0190NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a NULL pointer dereference may lead to denial oNVIDIA GPU Display Driver
- CVE-2023-1875Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq