# CVEs published 2023-04-24

113 CVEs were published on April 24, 2023: 26 critical, 33 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2023-30629](https://cve.now/CVE-2023-30629.md): Vyper's raw\_call with outsize=0 and revert\_on\_failure=False returns incorrect success value (CVSS 7.5, vyperlang vyper · vyper)
- [CVE-2023-30628](https://cve.now/CVE-2023-30628.md): Kiwi TCMS has command injection vulnerability in changelog.yml CI workflow (CVSS 8.8, kiwitcms Kiwi · kiwitcms)
- [CVE-2023-30623](https://cve.now/CVE-2023-30623.md): Arbitrary command injection in embano1/wip (CVSS 8.8, embano1 wip)
- [CVE-2023-30627](https://cve.now/CVE-2023-30627.md): jellyfin-web has a stored cross-site scripting vulnerability in devices.js (CVSS 9.1, jellyfin-web)
- [CVE-2023-30626](https://cve.now/CVE-2023-30626.md): Jellyfin vulnerable to directory traversal and file write causing arbitrary code execution (CVSS 8.8, jellyfin · Jellyfin.Controller)
- [CVE-2023-29530](https://cve.now/CVE-2023-29530.md): Laminas Diactoros vulnerable to HTTP Multiline Header Termination (CVSS 7.5, laminas-diactoros · laminas/laminas-diactoros)
- [CVE-2023-2257](https://cve.now/CVE-2023-2257.md): Authentication Bypass in Hub Business integration in Devolutions Workspace Desktop 2023.1.1.3 and earlier on Windows and macOS allows an att (CVSS 6.1, Devolutions Workspace Desktop)
- [CVE-2023-1414](https://cve.now/CVE-2023-1414.md): WP VR \< 8.3.0 - Subscriber+ Arbitrary Tour Update (CVSS 4.3, WP VR)
- [CVE-2023-1623](https://cve.now/CVE-2023-1623.md): Custom Post Type UI \< 1.13.5 - Debug Info Sending via CSRF (CVSS 6.5, Custom Post Type UI)
- [CVE-2023-0418](https://cve.now/CVE-2023-0418.md): Video Central for WordPress \<= 1.3.0 - Contributor+ Stored XSS (CVSS 5.4, Video Central for WordPress)
- [CVE-2023-1435](https://cve.now/CVE-2023-1435.md): Ajax Search Lite Pro \< 4.26.2 - Multiple Reflected Cross-Site Scripting (CVSS 6.1, Ajax Search Pro)
- [CVE-2023-0424](https://cve.now/CVE-2023-0424.md): MS-Reviews \<= 1.5 - Subscriber+ Stored XSS (CVSS 5.4, MS-Reviews)
- [CVE-2023-1624](https://cve.now/CVE-2023-1624.md): WPCode Lite \< 2.0.9 - Arbitrary Log File Deletion via CSRF (CVSS 6.5, WPCode)
- [CVE-2023-1126](https://cve.now/CVE-2023-1126.md): WP FEvents Book \<= 0.46 - Subscriber+ Stored XSS (CVSS 5.4, WP FEvents Book)
- [CVE-2023-0388](https://cve.now/CVE-2023-0388.md): Random Text \<= 0.3.0 - Subscriber+ SQLi (CVSS 8.8, Random Text)
- [CVE-2023-1324](https://cve.now/CVE-2023-1324.md): Easy Forms for MailChimp \< 6.8.8 - Reflected XSS (CVSS 6.1, Easy Forms for Mailchimp)
- [CVE-2023-0276](https://cve.now/CVE-2023-0276.md): Weaver Xtreme Theme Support \< 6.2.7 - Contributor+ Stored XSS (CVSS 5.4, Weaver Xtreme Theme Support)
- [CVE-2023-1129](https://cve.now/CVE-2023-1129.md): WP FEvents Book \<= 0.46 - Subscriber+ Arbitrary Booking Manipulation via IDOR (CVSS 6.5, WP FEvents Book)
- [CVE-2023-1020](https://cve.now/CVE-2023-1020.md): Steveas WP Live Chat Shoutbox \<= 1.4.2 - Unauthenticated SQLi (CVSS 9.8, Steveas WP Live Chat Shoutbox)
- [CVE-2023-0899](https://cve.now/CVE-2023-0899.md): Steveas WP Live Chat Shoutbox \<= 1.4.2 - Unauthenticated Stored XSS (CVSS 6.1, Steveas WP Live Chat Shoutbox)
- [CVE-2023-1420](https://cve.now/CVE-2023-1420.md): Ajax Search Lite \< 4.11.1, Pro \< 4.26.2 - Reflected Cross-Site Scripting (CVSS 6.1, Ajax Search Lite · Ajax Search Pro)
- [CVE-2023-0420](https://cve.now/CVE-2023-0420.md): Custom Post Type and Taxonomy GUI Manager \<= 1.1 - Stored XSS via CSRF (CVSS 4.8, Custom Post Type and Taxonomy GUI Manager)
- [CVE-2012-10014](https://cve.now/CVE-2012-10014.md): Kau-Boy Backend Localization Plugin backend\_localization.php localize\_backend cross site scripting (CVSS 3.5, Kau-Boy Backend Localization Plugin)
- [CVE-2012-10013](https://cve.now/CVE-2012-10013.md): Kau-Boy Backend Localization Plugin backend\_localization.php cross site scripting (CVSS 3.5, Kau-Boy Backend Localization Plugin)
- [CVE-2022-41612](https://cve.now/CVE-2022-41612.md): WordPress Similar Posts Plugin \<= 3.1.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Shareaholic Similar Posts)
- [CVE-2023-30613](https://cve.now/CVE-2023-30613.md): Kiwi TCMS unrestricted file upload vulnerability (CVSS 8.1, kiwitcms Kiwi · kiwitcms)
- [CVE-2023-30544](https://cve.now/CVE-2023-30544.md): Kiwi TCMS may allow user to update email address to unverified one (CVSS 3.9, kiwitcms Kiwi · kiwitcms)
- [CVE-2023-26494](https://cve.now/CVE-2023-26494.md): lorawan-stack has open redirect vulnerability (CVSS 6.1, TheThingsNetwork lorawan-stack · go.thethings.network/lo… +1)
- [CVE-2023-30622](https://cve.now/CVE-2023-30622.md): Clusternet has potential risk which can be leveraged to make a cluster-level privilege escalation (CVSS 6.6, clusternet · github.com/clusternet/clusternet)
- [CVE-2023-30776](https://cve.now/CVE-2023-30776.md): Apache Superset: Database connection password leak (CVSS 4.9, Apache Software Foundation Apache Superset · apache-superset)
- [CVE-2023-27524](https://cve.now/CVE-2023-27524.md): Apache Superset: Session validation vulnerability when using provided default SECRET\_KEY (CVSS 8.9, KEV, Apache Software Foundation Apache Superset · superset +1)
- [CVE-2023-24823](https://cve.now/CVE-2023-24823.md): RIOT-OS vulnerable to Packet Type Confusion during IPHC send (CVSS 9.8, RIOT-OS RIOT)
- [CVE-2023-24822](https://cve.now/CVE-2023-24822.md): RIOT-OS vulnerable to Null Pointer dereference during IPHC encoding (CVSS 7.5, RIOT-OS RIOT)
- [CVE-2023-24821](https://cve.now/CVE-2023-24821.md): RIOT-OS vulnerable to Integer Underflow during defragmentation (CVSS 7.5, RIOT-OS RIOT)
- [CVE-2023-24820](https://cve.now/CVE-2023-24820.md): RIOT-OS vulnerable to Integer Underflow during IPHC receive (CVSS 7.5, RIOT-OS RIOT)
- [CVE-2023-24819](https://cve.now/CVE-2023-24819.md): RIOT-OS vulnerable to Buffer Overflow during IPHC receive (CVSS 9.8, RIOT-OS RIOT)
- [CVE-2023-24818](https://cve.now/CVE-2023-24818.md): RIOT-OS vulnerable to null pointer dereference during fragment forwarding (CVSS 7.5, RIOT-OS RIOT)
- [CVE-2022-47598](https://cve.now/CVE-2022-47598.md): WordPress WP Super Popup Plugin \<= 1.1.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, WP Plugins Pro WP Super Popup)
- [CVE-2022-47158](https://cve.now/CVE-2022-47158.md): WordPress alfred24 Click & Collect Plugin \<= 1.1.7 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Pakpobox alfred24 Click & Collect)
- [CVE-2022-45084](https://cve.now/CVE-2022-45084.md): WordPress Loginizer Plugin \<= 1.7.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Softaculous Loginizer)
- [CVE-2023-23892](https://cve.now/CVE-2023-23892.md): WordPress M Chart Plugin \<= 1.9.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Jamie Poitra M Chart)
- [CVE-2023-1731](https://cve.now/CVE-2023-1731.md): Improper Input Validation in Meinberg LTOS (CVSS 7.2, Meinberg LTOS)
- [CVE-2022-48477](https://cve.now/CVE-2022-48477.md): In JetBrains Hub before 2023.1.15725 SSRF protection in Auth Module integration was missing (CVSS 4.1, JetBrains Hub)
- [CVE-2022-48476](https://cve.now/CVE-2022-48476.md): In JetBrains Ktor before 2.3.0 path traversal in the \`resolveResource\` method was possible (CVSS 7.5, JetBrains Ktor)
- [CVE-2023-22577](https://cve.now/CVE-2023-22577.md): White Rabbit Switch - Password Disclosure Vulnerability (CVSS 9.8, CERN White Rabbit Switch)
- [CVE-2023-22581](https://cve.now/CVE-2023-22581.md): White Rabbit Switch - Unauthenticated remote code execution (CVSS 9.8, CERN White Rabbit Switch)
- [CVE-2022-28354](https://cve.now/CVE-2022-28354.md): In the Active Threads Plugin 1.3.0 for MyBB, the activethreads.php date parameter is vulnerable to XSS when setting a time period. (CVSS 6.1)
- [CVE-2023-2006](https://cve.now/CVE-2023-2006.md): A race condition was found in the Linux kernel's RxRPC network protocol, within the processing of RxRPC bundles. (CVSS 7.0, Linux kernel's RxRPC network protocol)
- [CVE-2023-2007](https://cve.now/CVE-2023-2007.md): The specific flaw exists within the DPT I2O Controller driver. (no CVSS, Linux kernel's DPT I2O Controller driver)
- [CVE-2023-2019](https://cve.now/CVE-2023-2019.md): A flaw was found in the Linux kernel's netdevsim device driver, within the scheduling of events. (CVSS 4.4, Linux kernel's netdevsim device driver)
- [CVE-2023-2250](https://cve.now/CVE-2023-2250.md): A flaw was found in the Open Cluster Management (OCM) when a user have access to the worker nodes which has the cluster-manager-registration (CVSS 6.7, MCE)
- [CVE-2023-2251](https://cve.now/CVE-2023-2251.md): Uncaught Exception in eemeli/yaml (CVSS 7.5, eemeli/yaml · yaml)
- [CVE-2023-2258](https://cve.now/CVE-2023-2258.md): Improper Neutralization of Formula Elements in a CSV File in alfio-event/alf.io (CVSS 8.8, alfio-event/alf.io)
- [CVE-2023-2259](https://cve.now/CVE-2023-2259.md): Improper Neutralization of Special Elements Used in a Template Engine in alfio-event/alf.io (CVSS 9.1, alfio-event/alf.io)
- [CVE-2023-2260](https://cve.now/CVE-2023-2260.md): Authorization Bypass Through User-Controlled Key in alfio-event/alf.io (CVSS 8.8, alfio-event/alf.io)
- [CVE-2023-22913](https://cve.now/CVE-2023-22913.md): A post-authentication command injection vulnerability in the “account\_operator.cgi” CGI program of Zyxel USG FLEX series firmware versions 4 (CVSS 8.1, Zyxel USG FLEX series firmware · Zyxel VPN series firmware)
- [CVE-2023-22914](https://cve.now/CVE-2023-22914.md): A path traversal vulnerability in the “account\_print.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50 through 5.35, and VPN (CVSS 7.2, Zyxel USG FLEX series firmware · Zyxel VPN series firmware)
- [CVE-2023-22915](https://cve.now/CVE-2023-22915.md): A buffer overflow vulnerability in the “fbwifi\_forward.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50 through 5.35, USG FL (CVSS 7.5, Zyxel USG FLEX series firmware · Zyxel USG FLEX 50(W) fi… +2)
- [CVE-2023-22916](https://cve.now/CVE-2023-22916.md): The configuration parser of Zyxel ATP series firmware versions 5.10 through 5.35, USG FLEX series firmware versions 5.00 through 5.35, USG F (CVSS 8.1, Zyxel ATP series firmware · Zyxel USG FLEX series firmwa… +3)
- [CVE-2023-22917](https://cve.now/CVE-2023-22917.md): A buffer overflow vulnerability in the “sdwan\_iface\_ipc” binary of Zyxel ATP series firmware versions 5.10 through 5.32, USG FLEX series fir (CVSS 7.5, Zyxel ATP series firmware · Zyxel USG FLEX series firmwa… +3)
- [CVE-2023-22918](https://cve.now/CVE-2023-22918.md): A post-authentication information exposure vulnerability in the CGI program of Zyxel ATP series firmware versions 4.32 through 5.35, USG FLE (CVSS 6.5, Zyxel ATP series firmware · Zyxel USG FLEX series firmwa… +6)
- [CVE-2023-25131](https://cve.now/CVE-2023-25131.md): Use of default password vulnerability in CyberPower PowerPanel Business (CVSS 9.4, CyberPower PowerPanel Business Local / Remote · CyberPower…)
- [CVE-2023-25132](https://cve.now/CVE-2023-25132.md): Unrestricted upload of file with dangerous type vulnerability in CyberPower PowerPanel Business (CVSS 9.1, CyberPower PowerPanel Business Local / Remote · CyberPower…)
- [CVE-2023-25133](https://cve.now/CVE-2023-25133.md): Improper privilege management vulnerability in CyberPower PowerPanel Business (CVSS 9.1, CyberPower PowerPanel Business Local / Remote · CyberPower…)
- [CVE-2023-26059](https://cve.now/CVE-2023-26059.md): An issue was discovered in Nokia NetAct before 22 SP1037. (CVSS 6.8)
- [CVE-2023-26060](https://cve.now/CVE-2023-26060.md): An issue was discovered in Nokia NetAct before 22 FP2211. (CVSS 6.8)
- [CVE-2023-26061](https://cve.now/CVE-2023-26061.md): An issue was discovered in Nokia NetAct before 22 FP2211. (CVSS 6.8)
- [CVE-2023-26097](https://cve.now/CVE-2023-26097.md): An issue was discovered in Telindus Apsal 3.14.2022.235 b. (CVSS 8.4)
- [CVE-2023-26099](https://cve.now/CVE-2023-26099.md): An issue was discovered in Telindus Apsal 3.14.2022.235 b. (CVSS 4.4)
- [CVE-2023-26865](https://cve.now/CVE-2023-26865.md): SQL injection vulnerability found in PrestaShop bdroppy v.2.2.12 and before allowing a remote attacker to gain privileges via the BdroppyCro (CVSS 9.8)
- [CVE-2023-27848](https://cve.now/CVE-2023-27848.md): broccoli-compass v0.2.4 was discovered to contain a remote code execution (RCE) vulnerability via the child\_process function. (CVSS 9.8, broccoli-compass)
- [CVE-2023-27849](https://cve.now/CVE-2023-27849.md): rails-routes-to-json v1.0.0 was discovered to contain a remote code execution (RCE) vulnerability via the child\_process function. (CVSS 9.8)
- [CVE-2023-27990](https://cve.now/CVE-2023-27990.md): The cross-site scripting (XSS) vulnerability in Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 (CVSS 4.8, Zyxel ATP series firmware · Zyxel USG FLEX series firmwa… +3)
- [CVE-2023-27991](https://cve.now/CVE-2023-27991.md): The post-authentication command injection vulnerability in the CLI command of Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX (CVSS 8.8, Zyxel ATP series firmware · Zyxel USG FLEX series firmwa… +3)
- [CVE-2023-28131](https://cve.now/CVE-2023-28131.md): A vulnerability in the expo.io framework allows an attacker to take over accounts and steal credentials on an application/website that confi (CVSS 9.6, Expo.io Expo AuthSession module · expo)
- [CVE-2023-28484](https://cve.now/CVE-2023-28484.md): In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. (CVSS 6.5)
- [CVE-2023-29469](https://cve.now/CVE-2023-29469.md): An issue was discovered in libxml2 before 2.10.4. (CVSS 6.5)
- [CVE-2023-29479](https://cve.now/CVE-2023-29479.md): Ribose RNP before 0.16.3 may hang when the input is malformed. (CVSS 5.3)
- [CVE-2023-29480](https://cve.now/CVE-2023-29480.md): Ribose RNP before 0.16.3 sometimes lets secret keys remain unlocked after use. (CVSS 7.5)
- [CVE-2023-29566](https://cve.now/CVE-2023-29566.md): huedawn-tesseract 0.3.3 and dawnsparks-node-tesseract 0.4.0 to 0.4.1 was discovered to contain a remote code execution (RCE) vulnerability v (CVSS 9.8, dawnsparks-node-tesseract)
- [CVE-2023-29570](https://cve.now/CVE-2023-29570.md): Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs\_ffi\_cb\_free at src/mjs\_ffi.c. (CVSS 5.5)
- [CVE-2023-29578](https://cve.now/CVE-2023-29578.md): mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the mp4v2::impl::MP4StringProperty::~MP4StringProperty() function at src/m (CVSS 8.8)
- [CVE-2023-29579](https://cve.now/CVE-2023-29579.md): yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the component yasm/yasm+0x43b466 in vsprintf. (no CVSS)
- [CVE-2023-29582](https://cve.now/CVE-2023-29582.md): yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parse\_expr1 at /nasm/nasm-parse.c. (no CVSS)
- [CVE-2023-29583](https://cve.now/CVE-2023-29583.md): yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the function parse\_expr5 at /nasm/nasm-parse.c. (CVSS 6.2)
- [CVE-2023-29780](https://cve.now/CVE-2023-29780.md): Third Reality Smart Blind 1.00.54 contains a denial-of-service vulnerability, which allows a remote attacker to send malicious Zigbee messag (CVSS 7.5)
- [CVE-2023-29848](https://cve.now/CVE-2023-29848.md): Bang Resto 1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the itemName parameter in the admin/menu.php (CVSS 4.8)
- [CVE-2023-29849](https://cve.now/CVE-2023-29849.md): Bang Resto 1.0 was discovered to contain multiple SQL injection vulnerabilities via the btnMenuItemID, itemID, itemPrice, menuID, staffID, o (CVSS 8.8)
- [CVE-2023-30368](https://cve.now/CVE-2023-30368.md): Tenda AC5 V15.03.06.28 is vulnerable to Buffer Overflow via the initWebs function. (CVSS 9.8)
- [CVE-2023-30369](https://cve.now/CVE-2023-30369.md): Tenda AC15 V15.03.05.19 is vulnerable to Buffer Overflow. (CVSS 9.8)
- [CVE-2023-30370](https://cve.now/CVE-2023-30370.md): In Tenda AC15 V15.03.05.19, the function GetValue contains a stack-based buffer overflow vulnerability. (CVSS 9.8)
- [CVE-2023-30371](https://cve.now/CVE-2023-30371.md): In Tenda AC15 V15.03.05.19, the function "sub\_ED14" contains a stack-based buffer overflow vulnerability. (CVSS 9.8)
- [CVE-2023-30372](https://cve.now/CVE-2023-30372.md): In Tenda AC15 V15.03.05.19, The function "xkjs\_ver32" contains a stack-based buffer overflow vulnerability. (CVSS 9.8)
- [CVE-2023-30373](https://cve.now/CVE-2023-30373.md): In Tenda AC15 V15.03.05.19, the function "xian\_pppoe\_user" contains a stack-based buffer overflow vulnerability. (CVSS 9.8)
- [CVE-2023-30375](https://cve.now/CVE-2023-30375.md): In Tenda AC15 V15.03.05.19, the function "getIfIp" contains a stack-based buffer overflow vulnerability. (CVSS 9.8)
- [CVE-2023-30376](https://cve.now/CVE-2023-30376.md): In Tenda AC15 V15.03.05.19, the function "henan\_pppoe\_user" contains a stack-based buffer overflow vulnerability. (CVSS 9.8)
- [CVE-2023-30378](https://cve.now/CVE-2023-30378.md): In Tenda AC15 V15.03.05.19, the function "sub\_8EE8" contains a stack-based buffer overflow vulnerability. (CVSS 9.8)
- [CVE-2023-30406](https://cve.now/CVE-2023-30406.md): Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component ecma\_find\_named\_property at /base/ecma-helpe (CVSS 5.5)
- [CVE-2023-30408](https://cve.now/CVE-2023-30408.md): Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component build/bin/jerry. (CVSS 5.5)
- [CVE-2023-30410](https://cve.now/CVE-2023-30410.md): Jerryscript commit 1a2c047 was discovered to contain a stack overflow via the component ecma\_op\_function\_construct at /operations/ecma-funct (CVSS 5.5)
- [CVE-2023-30414](https://cve.now/CVE-2023-30414.md): Jerryscript commit 1a2c047 was discovered to contain a stack overflow via the component vm\_loop at /jerry-core/vm/vm.c. (CVSS 5.5)
- [CVE-2023-30458](https://cve.now/CVE-2023-30458.md): A username enumeration issue was discovered in Medicine Tracker System 1.0. (CVSS 5.3)
- [CVE-2023-30533](https://cve.now/CVE-2023-30533.md): SheetJS Community Edition before 0.19.3 allows Prototype Pollution via a crafted file. (CVSS 7.8, xlsx)
- [CVE-2023-31045](https://cve.now/CVE-2023-31045.md): A stored Cross-site scripting (XSS) issue in Text Editors and Formats in Backdrop CMS before 1.24.2 allows remote attackers to inject arbitr (CVSS 4.8, backdrop/backdrop)
- [CVE-2023-31056](https://cve.now/CVE-2023-31056.md): CloverDX before 5.17.3 writes passwords to the audit log in certain situations, if the audit log is enabled and single sign-on is not employ (CVSS 9.1)
- [CVE-2023-31059](https://cve.now/CVE-2023-31059.md): Repetier Server through 1.4.10 allows ..%5c directory traversal for reading files that contain credentials, as demonstrated by connectionLos (CVSS 7.5)
- [CVE-2023-31060](https://cve.now/CVE-2023-31060.md): Repetier Server through 1.4.10 executes as SYSTEM. (CVSS 9.8)
- [CVE-2023-31061](https://cve.now/CVE-2023-31061.md): Repetier Server through 1.4.10 does not have CSRF protection. (CVSS 8.8)
- [CVE-2023-31081](https://cve.now/CVE-2023-31081.md): An issue was discovered in drivers/media/test-drivers/vidtv/vidtv\_bridge.c in the Linux kernel 6.2. (CVSS 5.5)
- [CVE-2023-31082](https://cve.now/CVE-2023-31082.md): An issue was discovered in drivers/tty/n\_gsm.c in the Linux kernel 6.2. (no CVSS)
- [CVE-2023-31083](https://cve.now/CVE-2023-31083.md): An issue was discovered in drivers/bluetooth/hci\_ldisc.c in the Linux kernel 6.2. (no CVSS)
- [CVE-2023-31084](https://cve.now/CVE-2023-31084.md): An issue was discovered in drivers/media/dvb-core/dvb\_frontend.c in the Linux kernel 6.2. (CVSS 5.5)
- [CVE-2023-31085](https://cve.now/CVE-2023-31085.md): An issue was discovered in drivers/mtd/ubi/cdev.c in the Linux kernel 6.2. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-04-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.