CVEs published April 29, 2023
13 CVEs were published on April 29, 2023: 0 critical, 2 high.
- Published
- 13
- Critical
- 0
- High
- 2
- Medium
- 8
- Low
- 3
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- Control iD RHiD
- 1
- DedeCMS
- 1
- IBM Financial Transaction Manager for SWIFT Services
- 1
- IBM Java
- 1
- IBM Spectrum Scale Container Native Storage Access
- 1
- Konga
- 1
- ks-soft Advanced Host Monitor
- 1
- Meta Platforms Lexical
- 1
- MLECMS
- 1
- SourceCodester AC Repair and Services System
- 1
High 2
Medium, low and unrated 11
- CVE-2023-2425SourceCodester Simple Student Information System Add New Course cross site scriptingSourceCodester Simple Student Information System
- CVE-2023-2424DedeCMS config.php UpDateMemberModCache unrestricted uploadDedeCMS
- CVE-2022-43871IBM Financial Transaction Manager for SWIFT Services cross-site scriptingIBM Financial Transaction Manager for SWIFT Services
- CVE-2023-30792Anchor tag hrefs in Lexical prior to v0.10.0 would render javascript: URLs, allowing for cross-site scripting on link clicks in cases where Meta Platforms Lexical
- CVE-2023-2421Control iD RHiD department cross site scriptingControl iD RHiD
- CVE-2023-2420MLECMS common.func.php get_url sql injectionMLECMS
- CVE-2023-2419Zhong Bang CRMEB SystemAttachmentServices.php videoUpload unrestricted uploadZhong Bang CRMEB
- CVE-2023-2418Konga Login API random valuesKonga
- CVE-2023-2417ks-soft Advanced Host Monitor rma_active.exe unquoted search pathks-soft Advanced Host Monitor
- CVE-2023-2413SourceCodester AC Repair and Services System manage_booking.php sql injectionSourceCodester AC Repair and Services System
- CVE-2023-2426Use of Out-of-range Pointer Offset in vim/vimvim/vim