# CVEs published 2023-04-29

13 CVEs were published on April 29, 2023: 0 critical, 2 high. Days are UTC.

- [CVE-2023-30441](https://cve.now/CVE-2023-30441.md): IBM Java information disclosure (CVSS 7.5, IBM Java)
- [CVE-2023-2425](https://cve.now/CVE-2023-2425.md): SourceCodester Simple Student Information System Add New Course cross site scripting (CVSS 2.4, SourceCodester Simple Student Information System)
- [CVE-2023-2424](https://cve.now/CVE-2023-2424.md): DedeCMS config.php UpDateMemberModCache unrestricted upload (CVSS 6.3, DedeCMS)
- [CVE-2022-43871](https://cve.now/CVE-2022-43871.md): IBM Financial Transaction Manager for SWIFT Services cross-site scripting (CVSS 4.6, IBM Financial Transaction Manager for SWIFT Services)
- [CVE-2023-30792](https://cve.now/CVE-2023-30792.md): Anchor tag hrefs in Lexical prior to v0.10.0 would render javascript: URLs, allowing for cross-site scripting on link clicks in cases where (CVSS 6.1, Meta Platforms Lexical)
- [CVE-2022-41736](https://cve.now/CVE-2022-41736.md): IBM Spectrum Scale Container Native Storage Access privilege escalation (CVSS 8.4, IBM Spectrum Scale Container Native Storage Access)
- [CVE-2023-2421](https://cve.now/CVE-2023-2421.md): Control iD RHiD department cross site scripting (CVSS 3.5, Control iD RHiD)
- [CVE-2023-2420](https://cve.now/CVE-2023-2420.md): MLECMS common.func.php get\_url sql injection (CVSS 6.3, MLECMS)
- [CVE-2023-2419](https://cve.now/CVE-2023-2419.md): Zhong Bang CRMEB SystemAttachmentServices.php videoUpload unrestricted upload (CVSS 4.7, Zhong Bang CRMEB)
- [CVE-2023-2418](https://cve.now/CVE-2023-2418.md): Konga Login API random values (CVSS 3.1, Konga)
- [CVE-2023-2417](https://cve.now/CVE-2023-2417.md): ks-soft Advanced Host Monitor rma\_active.exe unquoted search path (CVSS 5.3, ks-soft Advanced Host Monitor)
- [CVE-2023-2413](https://cve.now/CVE-2023-2413.md): SourceCodester AC Repair and Services System manage\_booking.php sql injection (CVSS 6.3, SourceCodester AC Repair and Services System)
- [CVE-2023-2426](https://cve.now/CVE-2023-2426.md): Use of Out-of-range Pointer Offset in vim/vim (CVSS 6.8, vim/vim)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-04-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.