Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: April 2023

82 records · 18 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2022-27665
    34Monitor

    Reflected XSS (via AngularJS sandbox escape expressions) exists in Progress Ipswitch WS_FTP Server 8.6.0.

    MediumCVSS 6.1Proof of conceptEPSS 33%

    progress · ws ftp serverApr 3, 2023

  • CVE-2022-43769
    87Now

    Hitachi Vantara Pentaho Business Analytics Server - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)

    HighCVSS 7.2KEVWeaponizedEPSS 97%

    hitachi · vantara pentaho business analytics serverApr 3, 2023

  • CVE-2022-43773
    42Plan

    Hitachi Vantara Pentaho Business Analytics Server - Incorrect Permission Assignment for Critical Resource

    HighCVSS 8.8No exploitEPSS 22%

    hitachi · vantara pentaho business analytics serverApr 3, 2023

  • CVE-2022-43771
    33Monitor

    Hitachi Vantara Pentaho Business Analytics Server - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

    MediumCVSS 6.5No exploitEPSS 23%

    hitachi · vantara pentaho business analytics serverApr 3, 2023

  • CVE-2022-43938
    43Plan

    Hitachi Vantara Pentaho Business Analytics Server - Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')

    HighCVSS 8.8No exploitEPSS 26%

    hitachi · vantara pentaho business analytics serverApr 3, 2023

  • CVE-2022-43939
    97Now

    Hitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization Decisions

    CriticalCVSS 9.8KEVWeaponizedEPSS 92%

    hitachi · vantara pentaho business analytics serverApr 3, 2023

  • CVE-2023-24724
    21Monitor

    A stored cross site scripting (XSS) vulnerability was discovered in the user management module of the SAS 9.4 Admin Console, due to insuffic

    MediumCVSS 5.4No exploitEPSS 0%

    sas · web administration interfaceApr 3, 2023

  • CVE-2023-26976
    35Monitor

    Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function.

    HighCVSS 7.5Proof of conceptEPSS 15%

    tenda · ac6 firmwareApr 3, 2023

  • CVE-2023-1671
    99Now

    A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    sophos · web applianceApr 4, 2023

  • CVE-2023-26750
    40Plan

    SQL injection vulnerability found in Yii Framework Yii 2 Framework before v.2.0.47 allows the a remote attacker to execute arbitrary code vi

    CriticalCVSS 9.8No exploitEPSS 1%

    yiiframework · yiiApr 4, 2023

  • CVE-2023-26775
    46Plan

    File Upload vulnerability found in Monitorr v.1.7.6 allows a remote attacker t oexecute arbitrary code via a crafted file upload to the asse

    HighCVSS 7.8No exploitEPSS 49%

    monitorr · monitorrApr 4, 2023

  • CVE-2023-29374
    51Plan

    In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec met

    CriticalCVSS 9.8No exploitEPSS 39%

    langchain · langchainApr 4, 2023

  • CVE-2023-20073
    66This week

    Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Arbitrary File Upload Vulnerability

    CriticalCVSS 9.8Proof of conceptEPSS 90%

    cisco · rv340 firmwareApr 5, 2023

  • CVE-2023-20128
    37Monitor

    Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Command Injection Vulnerabilities

    HighCVSS 7.2No exploitEPSS 30%

    cisco · rv320 firmwareApr 5, 2023

  • CVE-2023-20117
    37Monitor

    Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Command Injection Vulnerabilities

    HighCVSS 7.2No exploitEPSS 30%

    cisco · rv320 firmwareApr 5, 2023

  • CVE-2023-28342
    54Plan

    Zoho ManageEngine ADSelfService Plus before 6218 allows anyone to conduct a Denial-of-Service attack via the Mobile App Authentication API.

    HighCVSS 7.5No exploitEPSS 78%

    zohocorp · manageengine adselfservice plusApr 5, 2023

  • CVE-2023-26083
    43Plan

    Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver a

    LowCVSS 3.3KEVWeaponizedEPSS 1%

    arm · 5th gen gpu architecture kernel driverApr 6, 2023

  • CVE-2023-29017
    58Plan

    vm2 Sandbox Escape vulnerability

    CriticalCVSS 9.8Proof of conceptEPSS 63%

    vm2 project · vm2Apr 6, 2023

  • CVE-2023-0156
    25Monitor

    All-In-One Security (AIOS) < 5.1.5 - Admin+ Arbitrary File/Folder Access via Traversal

    MediumCVSS 4.9Proof of conceptEPSS 19%

    updraftplus · all-in-one securityApr 10, 2023

  • CVE-2023-0157
    29Monitor

    All-In-One Security (AIOS) < 5.1.5 - Admin+ Stored XSS

    MediumCVSS 4.8Proof of conceptEPSS 32%

    updraftplus · all-in-one securityApr 10, 2023

  • CVE-2023-28205
    73This week

    A use after free issue was addressed with improved memory management.

    HighCVSS 8.8KEVWeaponizedEPSS 27%

    apple · safariApr 10, 2023

  • CVE-2023-28206
    71This week

    An out-of-bounds write issue was addressed with improved input validation.

    HighCVSS 8.6KEVWeaponizedEPSS 23%

    apple · ipadosApr 10, 2023

  • CVE-2023-26067
    43Plan

    Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 of 4).

    HighCVSS 8.1Proof of conceptEPSS 37%

    lexmark · cxtpc firmwareApr 10, 2023

  • CVE-2023-26068
    60This week

    Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4).

    CriticalCVSS 9.8WeaponizedEPSS 11%

    lexmark · cxtpc firmwareApr 10, 2023

  • CVE-2023-27076
    46Plan

    Command injection vulnerability found in Tenda G103 v.1.0.0.5 allows attacker to execute arbitrary code via a the language parameter.

    CriticalCVSS 9.8No exploitEPSS 22%

    tenda · g103 firmwareApr 10, 2023

  • CVE-2023-28341
    54Plan

    Stored Cross site scripting (XSS) vulnerability in Zoho ManageEngine Applications Manager through 16340 allows an unauthenticated user to in

    MediumCVSS 6.1No exploitEPSS 98%

    zohocorp · manageengine applications managerApr 10, 2023

  • CVE-2023-27267
    36Monitor

    Multiple vulnerabilities in SAP Diagnostics Agent (OSCommand Bridge)

    HighCVSS 8.1No exploitEPSS 14%

    sap · diagnostics agentApr 10, 2023

  • CVE-2023-28765
    43Plan

    Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Promotion Management )

    CriticalCVSS 9.8No exploitEPSS 14%

    sap · businessobjects business intelligenceApr 10, 2023

  • CVE-2023-29186
    33Monitor

    Directory/Path Traversal vulnerability in SAP NetWeaver.

    MediumCVSS 6.5No exploitEPSS 23%

    sap · netweaverApr 11, 2023

  • CVE-2023-29492
    70This week

    Novi Survey before 8.9.43676 allows remote attackers to execute arbitrary code on the server in the context of the service account.

    CriticalCVSS 9.8KEVWeaponizedEPSS 2%

    3rdmill · novi surveyApr 11, 2023

  • CVE-2023-27179
    48Plan

    GDidees CMS v3.9.1 and lower was discovered to contain an arbitrary file download vulenrability via the filename parameter at /_admin/imgdow

    HighCVSS 7.5Proof of conceptEPSS 60%

    gdidees · gdidees cmsApr 11, 2023

  • CVE-2023-21554
    68This week

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

    CriticalCVSS 9.8WeaponizedEPSS 95%

    microsoft · windows 10 1607Apr 11, 2023

  • CVE-2023-21769
    57Plan

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

    HighCVSS 7.5No exploitEPSS 88%

    microsoft · windows 10 1607Apr 11, 2023

  • CVE-2023-28218
    32Monitor

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

    HighCVSS 7.0Proof of conceptEPSS 12%

    microsoft · windows 10 1507Apr 11, 2023

  • CVE-2023-28219
    36Monitor

    Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

    HighCVSS 8.1No exploitEPSS 14%

    microsoft · windows 10 1507Apr 11, 2023

  • CVE-2023-28220
    36Monitor

    Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

    HighCVSS 8.1No exploitEPSS 14%

    microsoft · windows 10 1507Apr 11, 2023

  • CVE-2023-28229
    59Plan

    Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

    HighCVSS 7.0KEVWeaponizedEPSS 1%

    microsoft · windows 10 1507Apr 11, 2023

  • CVE-2023-28231
    46Plan

    DHCP Server Service Remote Code Execution Vulnerability

    HighCVSS 8.8Proof of conceptEPSS 36%

    microsoft · windows server 2008Apr 11, 2023

  • CVE-2023-28252
    76This week

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    HighCVSS 7.8KEVWeaponizedEPSS 48%

    microsoft · windows 10 1507Apr 11, 2023

  • CVE-2023-28302
    58Plan

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

    HighCVSS 7.5No exploitEPSS 92%

    microsoft · windows 10 1607Apr 11, 2023

  • CVE-2023-27826
    39Monitor

    SeowonIntech SWC 5100W WIMAX Bootloader 1.18.19.0, HW 0.0.7.0, and FW 1.11.0.1, 1.9.9.4 are vulnerable to OS Command Injection.

    HighCVSS 8.8Proof of conceptEPSS 11%

    seowonintech · swc-5100w firmwareApr 12, 2023

  • CVE-2023-28121
    65This week

    An issue in WooCommerce Payments plugin for WordPress (versions 5.6.1 and lower) allows an unauthenticated attacker to send requests on beha

    CriticalCVSS 9.8WeaponizedEPSS 87%

    automattic · woocommerce paymentsApr 12, 2023

  • CVE-2023-20118
    74This week

    A vulnerability in the web-based management interface of Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Routers

    HighCVSS 7.2KEVWeaponizedEPSS 54%

    cisco · rv016 firmwareApr 13, 2023

  • CVE-2023-29084
    57Plan

    Zoho ManageEngine ADManager Plus before 7181 allows for authenticated users to exploit command injection via Proxy settings.

    HighCVSS 7.2WeaponizedEPSS 98%

    zohocorp · manageengine admanager plusApr 13, 2023

  • CVE-2023-2034
    56Plan

    Unrestricted Upload of File with Dangerous Type in froxlor/froxlor

    HighCVSS 8.8No exploitEPSS 71%

    froxlor · froxlorApr 13, 2023

  • CVE-2023-29804
    40Plan

    WFS-SR03 v1.0.3 was discovered to contain a command injection vulnerability via the sys_smb_pwdmod function.

    HighCVSS 8.8No exploitEPSS 17%

    iodata · wfs-sr03w firmwareApr 14, 2023

  • CVE-2022-47501
    33Monitor

    Apache OFBiz: Arbitrary file reading vulnerability

    HighCVSS 7.5Proof of conceptEPSS 10%

    apache · ofbizApr 14, 2023

  • CVE-2023-2033
    77This week

    Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted

    HighCVSS 8.8KEVWeaponizedEPSS 40%

    google · chromeApr 14, 2023

  • CVE-2022-38841
    38Monitor

    Linksys AX3200 1.1.00 is vulnerable to OS command injection by authenticated users via shell metacharacters to the diagnostics traceroute pa

    HighCVSS 8.8Proof of conceptEPSS 10%

    linksys · e8450 firmwareApr 15, 2023

  • CVE-2021-33990
    43Plan

    Liferay Portal 6.2.5 allows Command=FileUpload&Type=File&CurrentFolder=/ requests when frmfolders.html exists.

    CriticalCVSS 9.8Proof of conceptEPSS 11%

    liferay · liferay portalApr 16, 2023

  • CVE-2023-29509
    58Plan

    org.xwiki.platform:xwiki-platform-flamingo-theme-ui Eval Injection vulnerability

    HighCVSS 8.8No exploitEPSS 75%

    xwiki · xwikiApr 16, 2023

  • CVE-2023-30547
    62This week

    Sandbox Escape in vm2

    CriticalCVSS 10.0Proof of conceptEPSS 72%

    vm2 project · vm2Apr 17, 2023

  • CVE-2023-21931
    55Plan

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

    HighCVSS 7.5Proof of conceptEPSS 82%

    oracle · weblogic serverApr 18, 2023

  • CVE-2023-21932
    41Plan

    Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: OXI).

    HighCVSS 7.2No exploitEPSS 44%

    oracle · hospitality opera 5 property servicesApr 18, 2023

  • CVE-2023-29516
    55Plan

    Code injection from view right on XWiki.AttachmentSelector in xwiki-platform

    HighCVSS 8.8No exploitEPSS 65%

    xwiki · xwikiApr 18, 2023

  • CVE-2023-29524
    58Plan

    Code injection from account through XWiki.SchedulerJobSheet in xwiki-platform

    HighCVSS 8.8No exploitEPSS 75%

    xwiki · xwikiApr 18, 2023

  • CVE-2023-29525
    58Plan

    Privilege escalation from view right on XWiki.Notifications.Code.LegacyNotificationAdministration in xwiki-platform

    HighCVSS 8.8No exploitEPSS 77%

    xwiki · xwikiApr 18, 2023

  • CVE-2023-2136
    70This week

    Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to pote

    CriticalCVSS 9.6KEVWeaponizedEPSS 5%

    google · chromeApr 19, 2023

  • CVE-2023-22621
    49Plan

    Strapi through 4.5.5 allows authenticated Server-Side Template Injection (SSTI) that can be exploited to execute arbitrary code on the serve

    HighCVSS 7.2Proof of conceptEPSS 70%

    strapi · strapiApr 19, 2023

  • CVE-2023-22894
    50Plan

    Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting the query filter.

    MediumCVSS 4.9KEVWeaponizedEPSS 3%

    strapi · strapiApr 19, 2023

  • CVE-2023-27350
    99Now

    This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914).

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    papercut · papercut mfApr 20, 2023

  • CVE-2023-27351
    83Now

    This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914).

    HighCVSS 7.5KEVWeaponizedEPSS 78%

    papercut · papercut mfApr 20, 2023

  • CVE-2023-20864
    60This week

    VMware Aria Operations for Logs contains a deserialization vulnerability.

    CriticalCVSS 9.8Proof of conceptEPSS 70%

    vmware · aria operations for logsApr 20, 2023

  • CVE-2023-28458
    40Plan

    pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature).

    MediumCVSS 4.3WeaponizedEPSS 3%

    pretalx · pretalxApr 20, 2023

  • CVE-2023-28459
    40Plan

    pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature).

    MediumCVSS 6.5WeaponizedEPSS 6%

    pretalx · pretalxApr 20, 2023

  • CVE-2023-2227
    49Plan

    Improper Authorization in modoboa/modoboa

    CriticalCVSS 9.1Proof of conceptEPSS 44%

    modoboa · modoboaApr 21, 2023

  • CVE-2023-26876
    40Plan

    SQL injection vulnerability found in Piwigo v.13.5.0 and before allows a remote attacker to execute arbitrary code via the filter_user_id pa

    HighCVSS 8.8WeaponizedEPSS 9%

    piwigo · piwigoApr 21, 2023

  • CVE-2023-28131
    45Plan

    A vulnerability in the expo.io framework allows an attacker to take over accounts and steal credentials on an application/website that confi

    CriticalCVSS 9.6No exploitEPSS 23%

    expo · expo software development kitApr 24, 2023

  • CVE-2023-27524
    98Now

    Apache Superset: Session validation vulnerability when using provided default SECRET_KEY

    CriticalCVSS 9.8KEVWeaponizedEPSS 97%

    apache · supersetApr 24, 2023

  • CVE-2023-28771
    99Now

    Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    zyxel · atp100 firmwareApr 24, 2023

  • CVE-2023-29552
    79This week

    The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services.

    HighCVSS 7.5KEVWeaponizedEPSS 63%

    netapp · smi-s providerApr 25, 2023

  • CVE-2021-23186
    34Monitor

    A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to access and

    HighCVSS 8.7No exploitEPSS 0%

    odoo · odooApr 25, 2023

  • CVE-2021-44547
    36Monitor

    A sandboxing issue in Odoo Community 15.0 and Odoo Enterprise 15.0 allows authenticated administrators to executed arbitrary code, leading t

    CriticalCVSS 9.1No exploitEPSS 0%

    odoo · odooApr 25, 2023

  • CVE-2023-25652
    46Plan

    "git apply --reject" partially-controlled arbitrary file write

    HighCVSS 7.5No exploitEPSS 51%

    git-scm · gitApr 25, 2023

  • CVE-2023-28769
    60This week

    The buffer overflow vulnerability in the library “libclinkc.so” of the web server “zhttpd” in Zyxel DX5401-B0 firmware versions prior to V5.

    CriticalCVSS 9.8WeaponizedEPSS 5%

    zyxel · dx5401-b0 firmwareApr 27, 2023

  • CVE-2023-28770
    60This week

    The sensitive information exposure vulnerability in the CGI “Export_Log” and the binary “zcmd” in Zyxel DX5401-B0 firmware versions prior to

    HighCVSS 7.5WeaponizedEPSS 57%

    zyxel · dx5401-b0 firmwareApr 27, 2023

  • CVE-2023-25437
    39Monitor

    An issue was discovered in vTech VCS754 version 1.1.1.A before 1.1.1.H, allows attackers to gain escalated privileges and gain sensitive inf

    HighCVSS 8.8No exploitEPSS 14%

    vtech · vcs754a firmwareApr 27, 2023

  • CVE-2023-29489
    44Plan

    An issue was discovered in cPanel before 11.109.9999.116.

    MediumCVSS 6.1Proof of conceptEPSS 65%

    cpanel · cpanelApr 27, 2023

  • CVE-2023-28384
    48Plan

    mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system comman

    HighCVSS 8.8WeaponizedEPSS 44%

    myscada · myproApr 27, 2023

  • CVE-2023-28400
    42Plan

    mySCADA myPRO versions 8.26.0 and prior has parameters which an authenticated user could exploit to inject arbitrary operating system comman

    HighCVSS 8.8No exploitEPSS 24%

    myscada · myproApr 27, 2023

  • CVE-2023-28528
    40Plan

    IBM AIX command execution

    HighCVSS 7.8WeaponizedEPSS 1%

    ibm · viosApr 27, 2023

  • CVE-2023-30405
    30Monitor

    A cross-site scripting (XSS) vulnerability in Aigital Wireless-N Repeater Mini_Router v0.131229 allows attackers to execute arbitrary web sc

    MediumCVSS 5.4No exploitEPSS 29%

    aigital · wireless-n repeater mini router firmwareApr 28, 2023