# CVEs published 2023-04-28

111 CVEs were published on April 28, 2023: 11 critical, 30 high. Days are UTC.

- [CVE-2023-2412](https://cve.now/CVE-2023-2412.md): SourceCodester AC Repair and Services System manage\_user.php sql injection (CVSS 6.3, SourceCodester AC Repair and Services System)
- [CVE-2023-2411](https://cve.now/CVE-2023-2411.md): SourceCodester AC Repair and Services System view\_inquiry.php sql injection (CVSS 6.3, SourceCodester AC Repair and Services System)
- [CVE-2023-2410](https://cve.now/CVE-2023-2410.md): SourceCodester AC Repair and Services System view\_booking.php sql injection (CVSS 6.3, SourceCodester AC Repair and Services System)
- [CVE-2023-2409](https://cve.now/CVE-2023-2409.md): SourceCodester AC Repair and Services System view\_service.php sql injection (CVSS 6.3, SourceCodester AC Repair and Services System)
- [CVE-2023-2408](https://cve.now/CVE-2023-2408.md): SourceCodester AC Repair and Services System view.php sql injection (CVSS 6.3, SourceCodester AC Repair and Services System)
- [CVE-2023-2397](https://cve.now/CVE-2023-2397.md): SourceCodester Simple Mobile Comparison Website cross site scripting (CVSS 2.4, SourceCodester Simple Mobile Comparison Website)
- [CVE-2023-2396](https://cve.now/CVE-2023-2396.md): Netgear SRX5308 Web Management Interface cross site scripting (CVSS 4.3, Netgear SRX5308)
- [CVE-2023-2395](https://cve.now/CVE-2023-2395.md): Netgear SRX5308 Web Management Interface cross site scripting (CVSS 4.3, Netgear SRX5308)
- [CVE-2023-25495](https://cve.now/CVE-2023-25495.md): A valid, authenticated administrative user can query a web interface API to reveal the configured LDAP client password used by XCC to authen (CVSS 4.9, Lenovo XClarity Controller)
- [CVE-2023-25496](https://cve.now/CVE-2023-25496.md): A privilege escalation vulnerability was reported in Lenovo Drivers Management Lenovo Driver Manager that could allow a local user to execut (CVSS 7.8, Lenovo Drivers Management)
- [CVE-2023-29056](https://cve.now/CVE-2023-29056.md): A valid LDAP user, under specific conditions, will default to read-only permissions when authenticating into XCC. (CVSS 5.3, Lenovo XClarity Controller)
- [CVE-2023-2394](https://cve.now/CVE-2023-2394.md): Netgear SRX5308 Web Management Interface cross site scripting (CVSS 2.4, Netgear SRX5308)
- [CVE-2023-2393](https://cve.now/CVE-2023-2393.md): Netgear SRX5308 Web Management Interface cross site scripting (CVSS 2.4, Netgear SRX5308)
- [CVE-2023-29057](https://cve.now/CVE-2023-29057.md): A valid XCC user's local account permissions overrides their active directory permissions under specific configurations. (CVSS 7.3, Lenovo XClarity Controller)
- [CVE-2023-30858](https://cve.now/CVE-2023-30858.md): Denosaurs emoji has ReDoS vulnerability in \`replace\` function (CVSS 5.3, denosaurs emoji)
- [CVE-2023-29058](https://cve.now/CVE-2023-29058.md): A valid, authenticated XCC user with read-only permissions can modify custom user roles on other user accounts and the user trespass message (CVSS 6.4, Lenovo XClarity Controller)
- [CVE-2023-30857](https://cve.now/CVE-2023-30857.md): @aedart/support possibly vulnerable to prototype pollution in metadata record, when using meta decorator (CVSS 3.7, aedart ion · @aedart/support)
- [CVE-2023-2392](https://cve.now/CVE-2023-2392.md): Netgear SRX5308 Web Management Interface cross site scripting (CVSS 2.4, Netgear SRX5308)
- [CVE-2023-2391](https://cve.now/CVE-2023-2391.md): Netgear SRX5308 Web Management Interface cross site scripting (CVSS 2.4, Netgear SRX5308)
- [CVE-2023-2390](https://cve.now/CVE-2023-2390.md): Netgear SRX5308 Web Management Interface cross site scripting (CVSS 2.4, Netgear SRX5308)
- [CVE-2023-2389](https://cve.now/CVE-2023-2389.md): Netgear SRX5308 Web Management Interface cross site scripting (CVSS 2.4, Netgear SRX5308)
- [CVE-2023-2388](https://cve.now/CVE-2023-2388.md): Netgear SRX5308 Web Management Interface cross site scripting (CVSS 2.4, Netgear SRX5308)
- [CVE-2023-2387](https://cve.now/CVE-2023-2387.md): Netgear SRX5308 Web Management Interface cross site scripting (CVSS 2.4, Netgear SRX5308)
- [CVE-2023-2386](https://cve.now/CVE-2023-2386.md): Netgear SRX5308 Web Management Interface cross site scripting (CVSS 2.4, Netgear SRX5308)
- [CVE-2023-26022](https://cve.now/CVE-2023-26022.md): IBM Db2 denial of service (CVSS 5.9, IBM DB2 for Linux, UNIX and Windows)
- [CVE-2023-26021](https://cve.now/CVE-2023-26021.md): IBM Db2 denial of service (CVSS 7.5, IBM DB2 for Linux, UNIX and Windows)
- [CVE-2023-1968](https://cve.now/CVE-2023-1968.md): CVE-2023-1968 (CVSS 10.0, Illumina iScan Control Software · Illumina MiniSeq Contr… +9)
- [CVE-2023-1966](https://cve.now/CVE-2023-1966.md): CVE-2023-1966 (CVSS 7.4, Illumina iScan Control Software · Illumina MiniSeq Contr… +9)
- [CVE-2023-2385](https://cve.now/CVE-2023-2385.md): Netgear SRX5308 Web Management Interface cross site scripting (CVSS 2.4, Netgear SRX5308)
- [CVE-2023-27555](https://cve.now/CVE-2023-27555.md): IBM Db2 denial of service (CVSS 5.1, IBM DB2 for Linux, UNIX and Windows)
- [CVE-2023-29334](https://cve.now/CVE-2023-29334.md): Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVSS 4.3, Microsoft Edge)
- [CVE-2023-25930](https://cve.now/CVE-2023-25930.md): IBM Db2 denial of service (CVSS 5.9, IBM DB2 for Linux, UNIX and Windows)
- [CVE-2023-2384](https://cve.now/CVE-2023-2384.md): Netgear SRX5308 Web Management Interface cross site scripting (CVSS 2.4, Netgear SRX5308)
- [CVE-2023-2383](https://cve.now/CVE-2023-2383.md): Netgear SRX5308 Web Management Interface cross site scripting (CVSS 2.4, Netgear SRX5308)
- [CVE-2023-27864](https://cve.now/CVE-2023-27864.md): IBM Maximo Asset Management HTML injection (CVSS 5.4, IBM Maximo Asset Management)
- [CVE-2023-2382](https://cve.now/CVE-2023-2382.md): Netgear SRX5308 Web Management Interface cross site scripting (CVSS 2.4, Netgear SRX5308)
- [CVE-2023-2381](https://cve.now/CVE-2023-2381.md): Netgear SRX5308 Web Management Interface cross site scripting (CVSS 2.4, Netgear SRX5308)
- [CVE-2023-2380](https://cve.now/CVE-2023-2380.md): Netgear SRX5308 denial of service (CVSS 6.5, Netgear SRX5308)
- [CVE-2023-2379](https://cve.now/CVE-2023-2379.md): Ubiquiti EdgeRouter X Web Service denial of service (CVSS 7.5, Ubiquiti EdgeRouter X)
- [CVE-2023-1526](https://cve.now/CVE-2023-1526.md): Certain DesignJet and PageWide XL TAA compliant models may have risk of potential information disclosure if the hard disk drive is physicall (CVSS 4.6, HP DesignJet and PageWide XL)
- [CVE-2023-27973](https://cve.now/CVE-2023-27973.md): Certain HP LaserJet Pro print products are potentially vulnerable to Heap Overflow and/or Remote Code Execution. (CVSS 9.8, HP LaserJet Pro)
- [CVE-2023-2378](https://cve.now/CVE-2023-2378.md): Ubiquiti EdgeRouter X Web Management command injection (CVSS 8.6, Ubiquiti EdgeRouter X)
- [CVE-2023-27972](https://cve.now/CVE-2023-27972.md): Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Remote Code Execution. (CVSS 9.8, HP LaserJet Pro)
- [CVE-2023-27971](https://cve.now/CVE-2023-27971.md): Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Elevation of Privilege. (CVSS 9.8, HP LaserJet Pro)
- [CVE-2023-30856](https://cve.now/CVE-2023-30856.md): eDEX-UI cross-site websocket hijacking vulnerability enables remote command execution (CVSS 8.3, GitSquared edex-ui)
- [CVE-2022-31643](https://cve.now/CVE-2022-31643.md): A potential security vulnerability has been identified in the system BIOS for certain HP PC products which may allow loss of integrity. (CVSS 5.5, HP PC BIOS)
- [CVE-2023-30854](https://cve.now/CVE-2023-30854.md): WWBN AVideo vulnerable to OS Command Injection (CVSS 8.8, WWBN AVideo · wwbn/avideo)
- [CVE-2023-2377](https://cve.now/CVE-2023-2377.md): Ubiquiti EdgeRouter X Web Management command injection (CVSS 8.6, Ubiquiti EdgeRouter X)
- [CVE-2023-30853](https://cve.now/CVE-2023-30853.md): Gradle Build Action data written to GitHub Actions Cache may expose secrets (CVSS 7.6, gradle-build-action)
- [CVE-2023-2376](https://cve.now/CVE-2023-2376.md): Ubiquiti EdgeRouter X Web Management command injection (CVSS 8.6, Ubiquiti EdgeRouter X)
- [CVE-2023-2375](https://cve.now/CVE-2023-2375.md): Ubiquiti EdgeRouter X Web Management command injection (CVSS 8.6, Ubiquiti EdgeRouter X)
- [CVE-2023-1477](https://cve.now/CVE-2023-1477.md): Improper Authentication vulnerability in HYPR Keycloak Authenticator Extension allows Authentication Abuse.This issue affects HYPR Keycloak (CVSS 7.2, HYPR Keycloak Authenticator Extension)
- [CVE-2023-0834](https://cve.now/CVE-2023-0834.md): Incorrect Permission Assignment for Critical Resource vulnerability in HYPR Workforce Access on MacOS allows Privilege Escalation.This issue (CVSS 7.0, HYPR Workforce Access)
- [CVE-2023-2374](https://cve.now/CVE-2023-2374.md): Ubiquiti EdgeRouter X Web Management command injection (CVSS 8.6, Ubiquiti EdgeRouter X)
- [CVE-2023-2373](https://cve.now/CVE-2023-2373.md): Ubiquiti EdgeRouter X Web Management command injection (CVSS 8.6, Ubiquiti EdgeRouter X)
- [CVE-2023-2372](https://cve.now/CVE-2023-2372.md): SourceCodester Online DJ Management System cross site scripting (CVSS 2.4, SourceCodester Online DJ Management System)
- [CVE-2023-2371](https://cve.now/CVE-2023-2371.md): SourceCodester Online DJ Management System GET Parameter view\_details.php sql injection (CVSS 6.3, SourceCodester Online DJ Management System)
- [CVE-2023-2370](https://cve.now/CVE-2023-2370.md): SourceCodester Online DJ Management System GET Parameter manage\_event.php sql injection (CVSS 6.3, SourceCodester Online DJ Management System)
- [CVE-2023-2369](https://cve.now/CVE-2023-2369.md): SourceCodester Faculty Evaluation System manage\_restriction.php sql injection (CVSS 4.7, SourceCodester Faculty Evaluation System)
- [CVE-2023-2368](https://cve.now/CVE-2023-2368.md): SourceCodester Faculty Evaluation System sql injection (CVSS 4.7, SourceCodester Faculty Evaluation System)
- [CVE-2023-2367](https://cve.now/CVE-2023-2367.md): SourceCodester Faculty Evaluation System manage\_academic.php sql injection (CVSS 4.7, SourceCodester Faculty Evaluation System)
- [CVE-2023-2366](https://cve.now/CVE-2023-2366.md): SourceCodester Faculty Evaluation System sql injection (CVSS 6.3, SourceCodester Faculty Evaluation System)
- [CVE-2023-2365](https://cve.now/CVE-2023-2365.md): SourceCodester Faculty Evaluation System sql injection (CVSS 6.3, SourceCodester Faculty Evaluation System)
- [CVE-2023-2360](https://cve.now/CVE-2023-2360.md): Sensitive information disclosure due to CORS misconfiguration. (CVSS 3.1, Acronis Cyber Infrastructure)
- [CVE-2023-2364](https://cve.now/CVE-2023-2364.md): SourceCodester Resort Reservation System registration.php cross site scripting (CVSS 4.3, SourceCodester Resort Reservation System)
- [CVE-2023-2363](https://cve.now/CVE-2023-2363.md): SourceCodester Resort Reservation System view\_room.php sql injection (CVSS 6.3, SourceCodester Resort Reservation System)
- [CVE-2023-30467](https://cve.now/CVE-2023-30467.md): Improper Authorization Vulnerability in Milesight Network Video Recorder (NVR) (CVSS 7.5, Milesight NVR MS-Nxxxx-xxG · Milesight NVR MS-Nxxxx-xxE +3)
- [CVE-2023-30466](https://cve.now/CVE-2023-30466.md): Authentication Bypass Vulnerability in Milesight Network Video Recorder (NVR) (CVSS 9.8, Milesight NVR MS-Nxxxx-xxG · Milesight NVR MS-Nxxxx-xxE +3)
- [CVE-2022-48481](https://cve.now/CVE-2022-48481.md): In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possible (CVSS 5.2, JetBrains Toolbox App)
- [CVE-2023-28528](https://cve.now/CVE-2023-28528.md): IBM AIX command execution (CVSS 8.4, IBM AIX)
- [CVE-2023-27557](https://cve.now/CVE-2023-27557.md): IBM Safter Payments information disclosure (CVSS 5.9, IBM Safer Payments)
- [CVE-2020-4729](https://cve.now/CVE-2020-4729.md): IBM Safer Payments denial of service (CVSS 5.3, IBM Safer Payments)
- [CVE-2023-27556](https://cve.now/CVE-2023-27556.md): IBM Safer Payments denial of service (CVSS 6.5, IBM Safer Payments)
- [CVE-2020-21643](https://cve.now/CVE-2020-21643.md): Cross Site Scripting (XSS) vulnerability in HongCMS 3.0 allows attackers to run arbitrary code via the callback parameter to /ajax/myshop. (CVSS 6.1)
- [CVE-2020-23647](https://cve.now/CVE-2020-23647.md): Cross Site Scripting (XSS) vulnerability in BoxBilling 4.19, 4.19.1, 4.20, and 4.21 allows remote attackers to run arbitrary code via the me (CVSS 6.1)
- [CVE-2022-38583](https://cve.now/CVE-2022-38583.md): On versions of Sage 300 2017 - 2022 (6.4.x - 6.9.x) which are setup in a "Windows Peer-to-Peer Network" or "Client Server Network" configura (CVSS 7.8)
- [CVE-2022-41397](https://cve.now/CVE-2022-41397.md): The optional Web Screens and Global Search features for Sage 300 through version 2022 use a hard-coded 40-byte blowfish key ("LandlordPassKe (CVSS 9.8)
- [CVE-2022-41398](https://cve.now/CVE-2022-41398.md): The optional Global Search feature for Sage 300 through version 2022 uses a set of hard-coded credentials for the accompanying Apache Solr i (CVSS 7.5)
- [CVE-2022-41399](https://cve.now/CVE-2022-41399.md): The optional Web Screens feature for Sage 300 through version 2022 uses a hard-coded 40-byte blowfish key ("PASS\_KEY") to encrypt and decryp (CVSS 7.5)
- [CVE-2022-41400](https://cve.now/CVE-2022-41400.md): Sage 300 through 2022 uses a hard-coded 40-byte blowfish key to encrypt and decrypt user passwords and SQL connection strings stored in ISAM (CVSS 9.8)
- [CVE-2023-2356](https://cve.now/CVE-2023-2356.md): Relative Path Traversal in mlflow/mlflow (CVSS 10.0, mlflow/mlflow · mlflow)
- [CVE-2023-2361](https://cve.now/CVE-2023-2361.md): Cross-site Scripting (XSS) - Stored in pimcore/pimcore (CVSS 6.3, pimcore/pimcore)
- [CVE-2023-24269](https://cve.now/CVE-2023-24269.md): An arbitrary file upload vulnerability in the plugin upload function of Textpattern v4.8.8 allows attackers to execute arbitrary code via a (CVSS 8.8)
- [CVE-2023-26781](https://cve.now/CVE-2023-26781.md): SQL injection vulnerability in mccms 2.6 allows remote attackers to run arbitrary SQL commands via Author Center -\>Reader Comments -\>Search. (CVSS 9.8)
- [CVE-2023-26782](https://cve.now/CVE-2023-26782.md): An issue discovered in mccms 2.6.1 allows remote attackers to cause a denial of service via Backend management interface -\>System Configurat (CVSS 6.5)
- [CVE-2023-26813](https://cve.now/CVE-2023-26813.md): SQL injection vulnerability in com.xnx3.wangmarket.plugin.dataDictionary.controller.DataDictionaryPluginController.java in wangmarket CMS 4. (CVSS 9.8)
- [CVE-2023-28471](https://cve.now/CVE-2023-28471.md): Concrete CMS (previously concrete5) in versions 9.0 through 9.1.3 is vulnerable to Stored XSS via a container name. (CVSS 5.4, concrete5/concrete5)
- [CVE-2023-28472](https://cve.now/CVE-2023-28472.md): Concrete CMS (previously concrete5) versions 8.5.12 and below, and 9.0 through 9.1.3 does not have Secure and HTTP only attributes set for c (no CVSS, concrete5/concrete5)
- [CVE-2023-28473](https://cve.now/CVE-2023-28473.md): Concrete CMS (previously concrete5) versions 8.5.12 and below, and 9.0 through 9.1.3 is vulnerable to possible Auth bypass in the jobs secti (no CVSS, concrete5/concrete5)
- [CVE-2023-28474](https://cve.now/CVE-2023-28474.md): Concrete CMS (previously concrete5) in versions 9.0 through 9.1.3 is vulnerable to Stored XSS on Saved Presets on search. (no CVSS, concrete5/concrete5)
- [CVE-2023-28475](https://cve.now/CVE-2023-28475.md): Concrete CMS (previously concrete5) versions 8.5.12 and below, and versions 9.0 through 9.1.3 is vulnerable to Reflected XSS on the Reply fo (no CVSS, concrete5/concrete5)
- [CVE-2023-28476](https://cve.now/CVE-2023-28476.md): Concrete CMS (previously concrete5) in versions 9.0 through 9.1.3 is vulnerable to Stored XSS on Tags on uploaded files. (no CVSS, concrete5/concrete5)
- [CVE-2023-28477](https://cve.now/CVE-2023-28477.md): Concrete CMS (previously concrete5) versions 8.5.12 and below, and 9.0 through 9.1.3 is vulnerable to stored XSS on API Integrations via the (CVSS 5.5, concrete5/concrete5)
- [CVE-2023-28819](https://cve.now/CVE-2023-28819.md): Concrete CMS (previously concrete5) versions 8.5.12 and below, 9.0.0 through 9.0.2 is vulnerable to Stored XSS in uploaded file and folder n (CVSS 3.5, concrete5/concrete5)
- [CVE-2023-28820](https://cve.now/CVE-2023-28820.md): Concrete CMS (previously concrete5) before 9.1 is vulnerable to stored XSS in RSS Displayer via the href attribute because the link element (CVSS 2.0, concrete5/concrete5)
- [CVE-2023-28821](https://cve.now/CVE-2023-28821.md): Concrete CMS (previously concrete5) before 9.1 did not have a rate limit for password resets. (CVSS 5.3, concrete5/concrete5)
- [CVE-2023-28882](https://cve.now/CVE-2023-28882.md): Trustwave ModSecurity 3.0.5 through 3.0.8 before 3.0.9 allows a denial of service (worker crash and unresponsiveness) because some inputs ca (CVSS 7.5)
- [CVE-2023-29815](https://cve.now/CVE-2023-29815.md): mccms v2.6.3 is vulnerable to Cross Site Request Forgery (CSRF). (CVSS 8.8)
- [CVE-2023-30024](https://cve.now/CVE-2023-30024.md): The MagicJack device, a VoIP solution for internet phone calls, contains a hidden NAND flash memory partition allowing unauthorized read/wri (no CVSS)
- [CVE-2023-30123](https://cve.now/CVE-2023-30123.md): wuzhicms v4.1.0 is vulnerable to Cross Site Scripting (XSS) in the Member Center, Account Settings. (CVSS 5.4)
- [CVE-2023-30125](https://cve.now/CVE-2023-30125.md): EyouCms V1.6.1-UTF8-sp1 is vulnerable to Cross Site Scripting (XSS). (CVSS 6.1)
- [CVE-2023-30405](https://cve.now/CVE-2023-30405.md): A cross-site scripting (XSS) vulnerability in Aigital Wireless-N Repeater Mini\_Router v0.131229 allows attackers to execute arbitrary web sc (CVSS 5.4)
- [CVE-2023-30454](https://cve.now/CVE-2023-30454.md): An issue was discovered in ebankIT before 7. (CVSS 6.1)
- [CVE-2023-30455](https://cve.now/CVE-2023-30455.md): An issue was discovered in ebankIT before 7. (CVSS 7.5)
- [CVE-2023-31436](https://cve.now/CVE-2023-31436.md): qfq\_change\_class in net/sched/sch\_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQ\_MIN\_LMAX (CVSS 7.8)
- [CVE-2023-31444](https://cve.now/CVE-2023-31444.md): In Talend Studio before 7.3.1-R2022-10 and 8.x before 8.0.1-R2022-09, microservices allow unauthenticated access to the Jolokia endpoint of (CVSS 7.5)
- [CVE-2023-31470](https://cve.now/CVE-2023-31470.md): SmartDNS through 41 before 56d0332 allows an out-of-bounds write because of a stack-based buffer overflow in the \_dns\_encode\_domain function (CVSS 9.8)
- [CVE-2023-31483](https://cve.now/CVE-2023-31483.md): tar/TarFileReader.cpp in Cauldron cbang before bastet-v8.1.17 has a directory traversal during extraction that allows the attacker to create (CVSS 7.5)
- [CVE-2023-31484](https://cve.now/CVE-2023-31484.md): CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. (CVSS 8.1)
- [CVE-2023-31485](https://cve.now/CVE-2023-31485.md): GitLab::API::v4 through 0.26 does not verify TLS certificates when connecting to a GitLab server, enabling machine-in-the-middle attacks. (CVSS 5.9)
- [CVE-2023-31486](https://cve.now/CVE-2023-31486.md): HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where u (CVSS 8.1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-04-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.