CVE List - 2023 / April
Showing 1501 - 1600 of 2302 CVEs for April 2023 (Page 16 of 24)
| CVE ID | Date | Title |
|---|---|---|
| CVE-2023-21982 | 2023-04-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component:... |
| CVE-2023-21984 | 2023-04-18 | Vulnerability in the Oracle Solaris product of Oracle Systems (component:... |
| CVE-2023-21985 | 2023-04-18 | Vulnerability in the Oracle Solaris product of Oracle Systems (component:... |
| CVE-2023-21986 | 2023-04-18 | Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle... |
| CVE-2023-21987 | 2023-04-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization... |
| CVE-2023-21988 | 2023-04-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization... |
| CVE-2023-21989 | 2023-04-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization... |
| CVE-2023-21990 | 2023-04-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization... |
| CVE-2023-21991 | 2023-04-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization... |
| CVE-2023-21992 | 2023-04-18 | Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of... |
| CVE-2023-21993 | 2023-04-18 | Vulnerability in the Oracle Clinical Remote Data Capture product of... |
| CVE-2023-21996 | 2023-04-18 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion... |
| CVE-2023-21997 | 2023-04-18 | Vulnerability in the Oracle User Management product of Oracle E-Business... |
| CVE-2023-21998 | 2023-04-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization... |
| CVE-2023-21999 | 2023-04-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization... |
| CVE-2023-22000 | 2023-04-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization... |
| CVE-2023-22001 | 2023-04-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization... |
| CVE-2023-22002 | 2023-04-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization... |
| CVE-2023-22003 | 2023-04-18 | Vulnerability in the Oracle Solaris product of Oracle Systems (component:... |
| CVE-2022-43376 | 2023-04-18 | A CWE-79: Improper Neutralization of Input During Web Page Generation... |
| CVE-2022-43377 | 2023-04-18 | A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists... |
| CVE-2022-43378 | 2023-04-18 | A CWE-1021: Improper Restriction of Rendered UI Layers or Frames... |
| CVE-2023-26048 | 2023-04-18 | OutOfMemoryError for large multipart without filename in Eclipse Jetty |
| CVE-2023-25547 | 2023-04-18 | A CWE-863: Incorrect Authorization vulnerability exists that could allow remote... |
| CVE-2023-25548 | 2023-04-18 | A CWE-863: Incorrect Authorization vulnerability exists that could allow access... |
| CVE-2023-25552 | 2023-04-18 | A CWE-862: Missing Authorization vulnerability exists that could allow viewing... |
| CVE-2023-25554 | 2023-04-18 | A CWE-78: Improper Neutralization of Special Elements used in an... |
| CVE-2023-26049 | 2023-04-18 | Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty |
| CVE-2023-25549 | 2023-04-18 | A CWE-94: Improper Control of Generation of Code ('Code Injection')... |
| CVE-2023-25550 | 2023-04-18 | A CWE-94: Improper Control of Generation of Code ('Code Injection')... |
| CVE-2023-25551 | 2023-04-18 | A CWE-79: Improper Neutralization of Input During Web Page Generation... |
| CVE-2023-25553 | 2023-04-18 | A CWE-79: Improper Neutralization of Input During Web Page Generation... |
| CVE-2023-25555 | 2023-04-18 | A CWE-78: Improper Neutralization of Special Elements used in an... |
| CVE-2023-28440 | 2023-04-18 | Denial of service via admin theme import route in Discourse |
| CVE-2023-28003 | 2023-04-18 | A CWE-613: Insufficient Session Expiration vulnerability exists that could allow... |
| CVE-2023-28839 | 2023-04-18 | Improper neutralization in an SQL query in Shoppingfeed |
| CVE-2023-29411 | 2023-04-18 | A CWE-306: Missing Authentication for Critical Function vulnerability exists that... |
| CVE-2023-28856 | 2023-04-18 | `HINCRBYFLOAT` can be used to crash a redis-server process |
| CVE-2023-29412 | 2023-04-18 | CWE-78: Improper Neutralization of Special Elements used in an OS... |
| CVE-2023-29413 | 2023-04-18 | A CWE-306: Missing Authentication for Critical Function vulnerability exists that... |
| CVE-2023-29410 | 2023-04-18 | A CWE-20: Improper Input Validation vulnerability exists that could allow... |
| CVE-2023-28004 | 2023-04-18 | A CWE-129: Improper validation of an array index vulnerability exists... |
| CVE-2023-29002 | 2023-04-18 | Debug mode leaks confidential data in Cilium |
| CVE-2023-29196 | 2023-04-18 | HTML injection via topic embedding in Discourse |
| CVE-2023-30538 | 2023-04-18 | Stored Cross-site Scripting via improper sanitization of svg files in Discourse |
| CVE-2023-30608 | 2023-04-18 | Parser contains an inefficient regular expression in sqlparse |
| CVE-2023-30606 | 2023-04-18 | Multisite denial of service through unsanitized dynamic dispatch to SiteSetting in Discourse |
| CVE-2023-30552 | 2023-04-18 | SQL injection in sql/instance.py endpoint in Archery - GHSL-2022-101 |
| CVE-2023-30553 | 2023-04-18 | Multiple SQL injections in sql_api/api_workflow.py endpoint in Archery - GHSL-2022-102 |
| CVE-2023-30554 | 2023-04-18 | SQL injection in sql_api/api_workflow.py endpoint in Archery - GHSL-2022-103 |
| CVE-2023-30555 | 2023-04-18 | SQL injection in sql_optimize.py explain method in Archery - GHSL-2022-108 |
| CVE-2023-30556 | 2023-04-18 | SQL injection in sql_optimize.py optimize_sqltuningadvisor method in Archery - GHSL-2022-107 |
| CVE-2023-30557 | 2023-04-18 | SQL injection in data_dictionary.py table_info method in Archery - GHSL-2022-106 |
| CVE-2023-30558 | 2023-04-18 | Multiple SQL injections in sql/data_dictionary.py table_list method in Archery - GHSL-2022-105 |
| CVE-2023-30605 | 2023-04-18 | Multiple SQL injections in sql/instance.py param_edit method in Archery - GHSL-2022-104 |
| CVE-2023-29527 | 2023-04-18 | Code injection from account through AWM view sheet in xwiki platform |
| CVE-2023-29526 | 2023-04-18 | Async and display macro allow displaying and interacting with any document in restricted mode |
| CVE-2023-29525 | 2023-04-18 | Privilege escalation from view right on XWiki.Notifications.Code.LegacyNotificationAdministration in xwiki-platform |
| CVE-2023-29524 | 2023-04-18 | Code injection from account through XWiki.SchedulerJobSheet in xwiki-platform |
| CVE-2023-29523 | 2023-04-18 | Code injection in display method used in user profiles in xwiki-platform |
| CVE-2023-29518 | 2023-04-18 | Code injection from view right using Invitation.InvitationCommon in xwiki-platform |
| CVE-2023-29519 | 2023-04-18 | Code injection in org.xwiki.platform:xwiki-platform-attachment-ui |
| CVE-2023-29520 | 2023-04-18 | Page render failure due to broken translations in xwiki-platform |
| CVE-2023-29521 | 2023-04-18 | Code injection from account/view through VFS Tree macro in xwiki-platform |
| CVE-2023-29522 | 2023-04-18 | Code injection from view right on XWiki.ClassSheet in xwiki-platform |
| CVE-2023-29510 | 2023-04-18 | Code injection via unescaped translations in xwiki-platform |
| CVE-2023-29512 | 2023-04-18 | Code injection in xwiki-platform-web-templates |
| CVE-2023-29513 | 2023-04-18 | Users can be created even when registration is disabled without validation via the template macro in xwiki-platform |
| CVE-2023-29514 | 2023-04-18 | Code injection in template provider administration in xwiki-platform |
| CVE-2023-29515 | 2023-04-18 | Cross-site scripting (XSS) in xwiki-platform |
| CVE-2023-29516 | 2023-04-18 | Code injection from view right on XWiki.AttachmentSelector in xwiki-platform |
| CVE-2023-29517 | 2023-04-18 | Exposure of Sensitive Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-office-viewer |
| CVE-2021-0872 | 2023-04-19 | In PVRSRVBridgeRGXKickVRDM of the PowerVR kernel driver, a missing size... |
| CVE-2021-0873 | 2023-04-19 | In PVRSRVBridgeRGXKickRS of the PowerVR kernel driver, a missing size... |
| CVE-2021-0874 | 2023-04-19 | In PVRSRVBridgeDevicememHistorySparseChange of the PowerVR kernel driver, a missing size... |
| CVE-2021-0875 | 2023-04-19 | In PVRSRVBridgeChangeSparseMem of the PowerVR kernel driver, a missing size... |
| CVE-2021-0876 | 2023-04-19 | In PVRSRVBridgePhysmemNewRamBackedLockedPMR of the PowerVR kernel driver, a missing size... |
| CVE-2021-0878 | 2023-04-19 | In PVRSRVBridgeServerSyncGetStatus of the PowerVR kernel driver, a missing size... |
| CVE-2021-0879 | 2023-04-19 | In PVRSRVBridgeRGXTDMSubmitTransfer of the PowerVR kernel driver, a missing size... |
| CVE-2021-0880 | 2023-04-19 | In PVRSRVBridgeRGXKickTA3D of the PowerVR kernel driver, a missing size... |
| CVE-2021-0881 | 2023-04-19 | In PVRSRVBridgeRGXKickCDM of the PowerVR kernel driver, a missing size... |
| CVE-2021-0882 | 2023-04-19 | In PVRSRVBridgeRGXKickSync of the PowerVR kernel driver, a missing size... |
| CVE-2021-0883 | 2023-04-19 | In PVRSRVBridgeCacheOpQueue of the PowerVR kernel driver, a missing size... |
| CVE-2021-0884 | 2023-04-19 | In PVRSRVBridgePhysmemImportSparseDmaBuf of the PowerVR kernel driver, a missing size... |
| CVE-2021-0885 | 2023-04-19 | In PVRSRVBridgeSyncPrimOpTake of the PowerVR kernel driver, a missing size... |
| CVE-2021-33970 | 2023-04-19 | Buffer Overflow vulnerability in Qihoo 360 Chrome v13.0.2170.0 allows attacker... |
| CVE-2021-33971 | 2023-04-19 | Qihoo 360 (https://www.360.cn/) Qihoo 360 Safeguard (https://www.360.cn/) Qihoo 360 Total... |
| CVE-2021-33972 | 2023-04-19 | Buffer Overflow vulnerability in Qihoo 360 Safe Browser v13.0.2170.0 allows... |
| CVE-2021-33973 | 2023-04-19 | Buffer Overflow vulnerability in Qihoo 360 Safe guard v12.1.0.1004, v12.1.0.1005,... |
| CVE-2021-33974 | 2023-04-19 | Qihoo 360 (https://www.360.cn/) Qihoo 360 Safeguard (https://www.360.cn/) Qihoo 360 Chrome... |
| CVE-2021-33975 | 2023-04-19 | Buffer Overflow vulnerability in Qihoo 360 Total Security v10.8.0.1060 and... |
| CVE-2022-2507 | 2023-04-19 | In affected versions of Octopus Deploy it is possible to... |
| CVE-2023-1382 | 2023-04-19 | A data race flaw was found in the Linux kernel,... |
| CVE-2023-20862 | 2023-04-19 | In Spring Security, versions 5.7.x prior to 5.7.8, versions 5.8.x... |
| CVE-2023-20909 | 2023-04-19 | In multiple functions of RunningTasks.java, there is a possible privilege... |
| CVE-2023-20935 | 2023-04-19 | In deserialize of multiple files, there is a possible out... |
| CVE-2023-20941 | 2023-04-19 | In acc_ctrlrequest_composite of f_accessory.c, there is a possible out of... |
| CVE-2023-20950 | 2023-04-19 | In AlarmManagerActivity of AlarmManagerActivity.java, there is a possible way to... |
| CVE-2023-20967 | 2023-04-19 | In avdt_scb_hdl_pkt_no_frag of avdt_scb_act.cc, there is a possible out of... |
| CVE-2023-21080 | 2023-04-19 | In register_notification_rsp of btif_rc.cc, there is a possible out of... |