CVEs published in March 2023
16 tracked CVEs from 8 vendors had their first vendor advisory published in March 2023: 2 critical, 7 high. Newest first.
2 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2023-1550Medium
NGINX: Insertion of Sensitive Information into log file vulnerability in NGINX Agent.
F5 · 1 advisory - Added
QTS: vulnerability has been reported to affect QNAP operating systems.
QNAP · 1 advisory - Added
QTS: vulnerability has been reported to affect QNAP operating systems.
QNAP · 1 advisory - Added
CVE-2023-23355Medium
QTS: OS command injection vulnerability has been reported to affect QNAP operating systems.
QNAP · 1 advisory - Added
CVE-2023-1458High
EdgeRouter: vulnerability has been found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6 and classified as critical.
Ubiquiti · 1 advisory - Added
CVE-2023-1457High
EdgeRouter: vulnerability, which was classified as critical, was found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6.
Ubiquiti · 1 advisory - Added
CVE-2023-1456High
EdgeRouter: vulnerability, which was classified as critical, has been found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6.
Ubiquiti · 1 advisory - Added
CVE-2023-24329High
Python Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2023-27100Critical
Improper restriction of excessive authentication attempts in the SSHGuard component of Netgate pfSense Plus software v22.05.1…
pfSense · 1 advisory - Added
CVE-2023-27253High
command injection vulnerability in the function restore_rrddata of Netgate pfSense v2.7.0
pfSense · 1 advisory - Added
CVE-2023-24908High
Remote Procedure Call Runtime Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2022-42476High
relative path traversal vulnerability [CWE-23] vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.8, FortiOS 6.4.0 through 6.4.11, FortiOS 6.2.0 through 6.2.12, FortiProxy 7.2.0 through 7.2.1, FortiProxy 7.0.0 through 7.0.7, FortiProxy 2.0.0 through 2.0.11, FortiProxy 1.2 all versions, FortiProxy 01.02 all versions, FortiProxy 1.1 all versions, FortiProxy 01.01 all versions allows privileged VDOM administrators to escalate their privileges to super admin of the box via crafted CLI requests
Fortinet · 1 advisory - Added
CVE-2023-25139Critical
GNU C Library (glibc) Vulnerability in NetApp Products
NetApp · 1 advisory - Added
Multiple stored XSS vulnerabilities in Sophos Connect versions older than 2.2.90 allow Javascript code to run in the local UI
Sophos · 1 advisory - Added
CVE-2022-48310Medium
Sophos Connect: information disclosure vulnerability
Sophos · 1 advisory - Added
CVE-2022-48309Medium
CSRF vulnerability allows malicious websites to retrieve logs and technical support archives in Sophos Connect versions older…
Sophos · 1 advisory