# CVEs published 2023-04-22 31 CVEs were published on April 22, 2023: 0 critical, 11 high. Days are UTC. - [CVE-2022-4944](https://cve.now/CVE-2022-4944.md): kalcaddle KodExplorer cross-site request forgery (CVSS 4.3, kalcaddle KodExplorer) - [CVE-2023-2245](https://cve.now/CVE-2023-2245.md): hansunCMS unrestricted upload (CVSS 6.3, hansunCMS) - [CVE-2023-2244](https://cve.now/CVE-2023-2244.md): SourceCodester Online Eyewear Shop GET Parameter update\_status.php sql injection (CVSS 6.3, SourceCodester Online Eyewear Shop) - [CVE-2023-2243](https://cve.now/CVE-2023-2243.md): SourceCodester Complaint Management System POST Parameter registration.php sql injection (CVSS 6.3, SourceCodester Complaint Management System) - [CVE-2023-2242](https://cve.now/CVE-2023-2242.md): SourceCodester Online Computer and Laptop Store GET Parameter sql injection (CVSS 6.3, SourceCodester Online Computer and Laptop Store) - [CVE-2023-2241](https://cve.now/CVE-2023-2241.md): PoDoFo PdfXRefStreamParserObject.cpp readXRefStreamEntry heap-based overflow (CVSS 5.3, PoDoFo) - [CVE-2023-25514](https://cve.now/CVE-2023-25514.md): NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by tricki (CVSS 5.3, NVIDIA CUDA Toolkit) - [CVE-2023-25513](https://cve.now/CVE-2023-25513.md): NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by tricki (CVSS 5.3, NVIDIA CUDA Toolkit) - [CVE-2023-25512](https://cve.now/CVE-2023-25512.md): NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds memory read by (CVSS 5.3, NVIDIA CUDA Toolkit) - [CVE-2023-25511](https://cve.now/CVE-2023-25511.md): NVIDIA CUDA Toolkit for Linux and Windows contains a vulnerability in cuobjdump, where a division-by-zero error may enable a user to cause a (CVSS 3.3, NVIDIA CUDA Toolkit) - [CVE-2023-25510](https://cve.now/CVE-2023-25510.md): NVIDIA CUDA Toolkit SDK for Linux and Windows contains a NULL pointer dereference in cuobjdump, where a local user running the tool against (CVSS 3.3, NVIDIA CUDA Toolkit) - [CVE-2023-25509](https://cve.now/CVE-2023-25509.md): NVIDIA DGX-1 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of service, and escalation of privileges. (CVSS 6.0, NVIDIA DGX servers) - [CVE-2023-25508](https://cve.now/CVE-2023-25508.md): NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler, where an attacker with the appropriate level of authorization can upload and (CVSS 6.7, NVIDIA DGX servers) - [CVE-2023-25507](https://cve.now/CVE-2023-25507.md): NVIDIA DGX-1 BMC contains a vulnerability in the SPX REST API, where an attacker with the appropriate level of authorization can inject arbi (CVSS 7.2, NVIDIA DGX servers) - [CVE-2023-25506](https://cve.now/CVE-2023-25506.md): NVIDIA DGX-1 contains a vulnerability in Ofbd in AMI SBIOS, where a preconditioned heap can allow a user with elevated privileges to cause a (CVSS 7.5, NVIDIA DGX servers) - [CVE-2023-25505](https://cve.now/CVE-2023-25505.md): NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler of the AMI MegaRAC BMC , where an attacker with the appropriate level of autho (CVSS 7.8, NVIDIA DGX servers) - [CVE-2023-0209](https://cve.now/CVE-2023-0209.md): NVIDIA DGX-1 SBIOS contains a vulnerability in the Uncore PEI module, where authentication of the code executed by SSA is missing, which may (CVSS 8.2, NVIDIA DGX servers) - [CVE-2023-0207](https://cve.now/CVE-2023-0207.md): NVIDIA DGX-2 SBIOS contains a vulnerability where an attacker may modify the ServerSetup NVRAM variable at runtime by executing privileged c (CVSS 7.5, NVIDIA DGX servers) - [CVE-2023-0206](https://cve.now/CVE-2023-0206.md): NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of SMRAM by exploiting the NVME SMM API. (CVSS 7.5, NVIDIA DGX servers) - [CVE-2023-0205](https://cve.now/CVE-2023-0205.md): NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can exploit insuffic (CVSS 5.0, NVIDIA ConnectX Firmware) - [CVE-2023-0204](https://cve.now/CVE-2023-0204.md): NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can cause improper h (CVSS 6.5, NVIDIA ConnectX Firmware) - [CVE-2023-0203](https://cve.now/CVE-2023-0203.md): NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can exploit insuffic (CVSS 5.0, NVIDIA ConnectX Firmware) - [CVE-2023-0202](https://cve.now/CVE-2023-0202.md): NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of SMRAM by exploiting the GenericSio and Legac (CVSS 7.5, NVIDIA DGX servers) - [CVE-2023-0201](https://cve.now/CVE-2023-0201.md): NVIDIA DGX-2 SBIOS contains a vulnerability in Bds, where a user with high privileges can cause a write beyond the bounds of an indexable re (CVSS 6.7, NVIDIA DGX servers) - [CVE-2023-0200](https://cve.now/CVE-2023-0200.md): NVIDIA DGX-2 contains a vulnerability in OFBD where a user with high privileges and a pre-conditioned heap can cause an access beyond a buff (CVSS 7.5, NVIDIA DGX servers) - [CVE-2023-0199](https://cve.now/CVE-2023-0199.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds write can (CVSS 6.1, NVIDIA GPU Display Driver) - [CVE-2023-0190](https://cve.now/CVE-2023-0190.md): NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a NULL pointer dereference may lead to denial o (CVSS 5.5, NVIDIA GPU Display Driver) - [CVE-2023-0184](https://cve.now/CVE-2023-0184.md): NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler which may lead to denial of servic (CVSS 8.8, NVIDIA GPU Display Driver) - [CVE-2023-1875](https://cve.now/CVE-2023-1875.md): Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq (CVSS 5.4, thorsten/phpmyfaq) - [CVE-2023-2239](https://cve.now/CVE-2023-2239.md): Exposure of Private Personal Information to an Unauthorized Actor in microweber/microweber (CVSS 7.1, microweber/microweber) - [CVE-2023-2240](https://cve.now/CVE-2023-2240.md): Improper Privilege Management in microweber/microweber (CVSS 8.8, microweber/microweber) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2023-04-22 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.