# CVEs published 2023-04-26

56 CVEs were published on April 26, 2023: 10 critical, 20 high. Days are UTC.

- [CVE-2023-2297](https://cve.now/CVE-2023-2297.md): Profile Builder – User Profile & User Registration Forms \<= 3.9.0 - Insecure Password Reset Mechanism (CVSS 9.8, cozmoslabs User Profile Builder – Beautiful User Registrati…)
- [CVE-2023-1786](https://cve.now/CVE-2023-1786.md): sensitive data exposure in cloud-init logs (CVSS 5.5, Canonical cloud-init)
- [CVE-2022-45876](https://cve.now/CVE-2022-45876.md): CVE-2022-45876 (CVSS 5.5, VISAM VBASE)
- [CVE-2023-30846](https://cve.now/CVE-2023-30846.md): typed-rest-client vulnerable to potential leak of authentication data to 3rd parties (CVSS 9.1, microsoft typed-rest-client · typed-rest-client)
- [CVE-2023-30845](https://cve.now/CVE-2023-30845.md): ESPv2 vulnerable to JWT authentication bypass via \`X-HTTP-Method-Override\` header (CVSS 8.2, GoogleCloudPlatform esp-v2)
- [CVE-2023-30843](https://cve.now/CVE-2023-30843.md): Payload's hidden fields can be leaked on readable collections (CVSS 7.4, payloadcms payload · payload)
- [CVE-2022-45456](https://cve.now/CVE-2022-45456.md): Denial of service due to unauthenticated API endpoint. (CVSS 3.3, Acronis Agent)
- [CVE-2023-28009](https://cve.now/CVE-2023-28009.md): HCL Workload Automation is vulnerable to XML External Entity (XXE) Injection (CVSS 6.5, HCL Software Workload Automation)
- [CVE-2023-28008](https://cve.now/CVE-2023-28008.md): HCL Workload Automation is vulnerable to XML External Entity (XXE) Injection (CVSS 7.1, HCL Software Workload Automation)
- [CVE-2023-27559](https://cve.now/CVE-2023-27559.md): IBM Db2 denial of service (CVSS 5.3, IBM Db2 for Linux, UNIX and Windows)
- [CVE-2023-30841](https://cve.now/CVE-2023-30841.md): Ironic and ironic-inspector deployed within Baremetal Operator may expose as ConfigMaps (CVSS 6.0, metal3-io baremetal-operator · github.com/metal3-io/baremet…)
- [CVE-2023-30546](https://cve.now/CVE-2023-30546.md): Contiki-NG has off-by-one error in Antelope DBMS (CVSS 9.8, contiki-ng)
- [CVE-2023-0458](https://cve.now/CVE-2023-0458.md): Spectre V1 Gadget in do\_prlimit in the Linux Kernel (CVSS 5.3, Linux Kernel)
- [CVE-2023-29268](https://cve.now/CVE-2023-29268.md): TIBCO Spotfire Statistics Services Unrestricted File Upload Vulnerability (CVSS 9.8, TIBCO Software TIBCO Spotfire Statistics Services)
- [CVE-2023-22729](https://cve.now/CVE-2023-22729.md): Silverstripe Framework has open redirect vulnerability on CMSSecurity relogin screen (CVSS 5.4, silverstripe-framework · silverstripe/framework)
- [CVE-2023-22728](https://cve.now/CVE-2023-22728.md): Silverstripe Framework has missing permission check of canView in GridFieldPrintButton (CVSS 4.3, silverstripe-framework · silverstripe/framework)
- [CVE-2023-1387](https://cve.now/CVE-2023-1387.md): Grafana is an open-source platform for monitoring and observability. (CVSS 4.2, Grafana)
- [CVE-2023-29257](https://cve.now/CVE-2023-29257.md): IBM Db2 code execution (CVSS 7.2, IBM Db2 for Linux, UNIX and Windows)
- [CVE-2023-26286](https://cve.now/CVE-2023-26286.md): IBM AIX privilege escalation (CVSS 8.4, IBM AIX)
- [CVE-2023-2273](https://cve.now/CVE-2023-2273.md): Rapid7 Insight Agent Directory Traversal (CVSS 5.8, Rapid7 Insight Agent)
- [CVE-2023-2294](https://cve.now/CVE-2023-2294.md): UCMS Column Configuration saddpost.php cross site scripting (CVSS 3.5, UCMS)
- [CVE-2022-36769](https://cve.now/CVE-2022-36769.md): IBM Cloud Pak for Data file upload (CVSS 7.2, IBM Cloud Pak for Data)
- [CVE-2022-41739](https://cve.now/CVE-2022-41739.md): IBM Spectrum Scale privilege escalation (CVSS 7.9, IBM Spectrum Scale Container Native Storage Access)
- [CVE-2020-36070](https://cve.now/CVE-2020-36070.md): Insecure Permission vulnerability found in Yoyager v.1.4 and before allows a remote attacker to execute arbitrary code via a crafted .php fi (CVSS 9.8, tcg/voyager)
- [CVE-2022-25273](https://cve.now/CVE-2022-25273.md): Drupal core's form API has a vulnerability where certain contributed or custom modules' forms may be vulnerable to improper input validation (CVSS 7.5, Drupal Core · drupal/core)
- [CVE-2022-25274](https://cve.now/CVE-2022-25274.md): Drupal 9.3 implemented a generic entity access API for entity revisions. (CVSS 5.4, Drupal Core · drupal/core)
- [CVE-2022-25275](https://cve.now/CVE-2022-25275.md): In some situations, the Image module does not correctly check access to image files not stored in the standard public files directory when g (CVSS 7.5, Drupal Core · drupal/core)
- [CVE-2022-25276](https://cve.now/CVE-2022-25276.md): The Media oEmbed iframe route does not properly validate the iframe domain setting, which allows embeds to be displayed in the context of th (CVSS 6.1, Drupal Core · drupal/core)
- [CVE-2022-25277](https://cve.now/CVE-2022-25277.md): Drupal core sanitizes filenames with dangerous extensions upon upload (reference: SA-CORE-2020-012) and strips leading and trailing dots fro (CVSS 7.2, Drupal Core · drupal/core)
- [CVE-2022-25278](https://cve.now/CVE-2022-25278.md): Under certain circumstances, the Drupal core form API evaluates form element access incorrectly. (CVSS 6.5, Drupal Core · drupal/core)
- [CVE-2022-27978](https://cve.now/CVE-2022-27978.md): Tooljet v1.6 does not properly handle missing values in the API, allowing attackers to arbitrarily reset passwords via a crafted HTTP reques (CVSS 7.5)
- [CVE-2022-27979](https://cve.now/CVE-2022-27979.md): A cross-site scripting (XSS) vulnerability in ToolJet v1.6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload (CVSS 5.4)
- [CVE-2022-39989](https://cve.now/CVE-2022-39989.md): An issue was discovered in Fighting Cock Information System 1.0, which uses default credentials, but does not force nor prompt the administr (CVSS 9.8)
- [CVE-2022-44232](https://cve.now/CVE-2022-44232.md): libming 0.4.8 0.4.8 is vulnerable to Buffer Overflow. (CVSS 7.5)
- [CVE-2023-2291](https://cve.now/CVE-2023-2291.md): Static credentials exist in the PostgreSQL data used in ManageEngine Access Manager Plus (AMP) build 4309, ManageEngine Password Manager Pro (CVSS 7.8, Zoho ManageEngine Multiple Products)
- [CVE-2023-2307](https://cve.now/CVE-2023-2307.md): Cross-Site Request Forgery (CSRF) in builderio/qwik (CVSS 4.7, builderio/qwik · @builder.io/qwik-city)
- [CVE-2023-24796](https://cve.now/CVE-2023-24796.md): Password vulnerability found in Vinga WR-AC1200 81.102.1.4370 and before allows a remote attacker to execute arbitrary code via the password (CVSS 9.8)
- [CVE-2023-26567](https://cve.now/CVE-2023-26567.md): Sangoma FreePBX 1805 through 2302 (when obtained as a ,.ISO file) places AMPDBUSER, AMPDBPASS, AMPMGRUSER, and AMPMGRPASS in the list of glo (CVSS 8.1)
- [CVE-2023-26930](https://cve.now/CVE-2023-26930.md): Buffer Overflow vulnerability found in XPDF v.4.04 allows an attacker to cause a Denial of Service via the PDFDoc malloc in the pdftotext.cc (no CVSS)
- [CVE-2023-27107](https://cve.now/CVE-2023-27107.md): Incorrect access control in the runReport function of MyQ Solution Print Server before 8.2 Patch 32 and Central Server before 8.2 Patch 22 a (CVSS 8.8)
- [CVE-2023-29442](https://cve.now/CVE-2023-29442.md): Zoho ManageEngine Applications Manager before 16400 allows proxy.html DOM XSS. (CVSS 6.1)
- [CVE-2023-29443](https://cve.now/CVE-2023-29443.md): Zoho ManageEngine ServiceDesk Plus before 14105, ServiceDesk Plus MSP before 14200, SupportCenter Plus before 14200, and AssetExplorer befor (CVSS 4.9)
- [CVE-2023-29596](https://cve.now/CVE-2023-29596.md): Buffer Overflow vulnerability found in ByronKnoll Cmix v.19 allows an attacker to execute arbitrary code and cause a denial of service via t (CVSS 7.8)
- [CVE-2023-29835](https://cve.now/CVE-2023-29835.md): Insecure Permission vulnerability found in Wondershare Dr.Fone v.12.9.6 allows a remote attacker to escalate privileges via the service perm (CVSS 7.8)
- [CVE-2023-29836](https://cve.now/CVE-2023-29836.md): Cross Site Scripting vulnerability found in Exelysis Unified Communication Solutions (EUCS) v.1.0 allows a remote attacker to execute arbitr (CVSS 6.1)
- [CVE-2023-30112](https://cve.now/CVE-2023-30112.md): Medicine Tracker System in PHP 1.0.0 is vulnerable to SQL Injection. (CVSS 7.5)
- [CVE-2023-30210](https://cve.now/CVE-2023-30210.md): OURPHP \<= 7.2.0 is vulnerable to Cross Site Scripting (XSS) via ourphp\_tz.php. (CVSS 6.1)
- [CVE-2023-30211](https://cve.now/CVE-2023-30211.md): OURPHP \<= 7.2.0 is vulnerable to SQL Injection. (CVSS 9.8)
- [CVE-2023-30212](https://cve.now/CVE-2023-30212.md): OURPHP \<= 7.2.0 is vulnerale to Cross Site Scripting (XSS) via /client/manage/ourphp\_out.php. (CVSS 6.1)
- [CVE-2023-30265](https://cve.now/CVE-2023-30265.md): CLTPHP \<=6.0 is vulnerable to Directory Traversal. (CVSS 6.5)
- [CVE-2023-30266](https://cve.now/CVE-2023-30266.md): CLTPHP \<=6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type. (CVSS 8.8)
- [CVE-2023-30267](https://cve.now/CVE-2023-30267.md): CLTPHP \<=6.0 is vulnerable to Cross Site Scripting (XSS) via application/home/controller/Changyan.php. (CVSS 6.1)
- [CVE-2023-30269](https://cve.now/CVE-2023-30269.md): CLTPHP \<=6.0 is vulnerable to Improper Input Validation via application/admin/controller/Template.php. (CVSS 8.1)
- [CVE-2023-30280](https://cve.now/CVE-2023-30280.md): Buffer Overflow vulnerability found in Netgear R6900 v.1.0.2.26, R6700v3 v.1.0.4.128, R6700 v.1.0.0.26 allows a remote attacker to execute a (CVSS 9.8)
- [CVE-2023-30363](https://cve.now/CVE-2023-30363.md): vConsole v3.15.0 was discovered to contain a prototype pollution due to incorrect key and value resolution in setOptions in core.ts. (CVSS 9.8, vconsole)
- [CVE-2023-31250](https://cve.now/CVE-2023-31250.md): Drupal core - Moderately critical - Access bypass - SA-CORE-2023-005 (CVSS 6.5, Drupal Core · drupal/core)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-04-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.