CVEs published in April 2023
19 tracked CVEs from 7 vendors had their first vendor advisory published in April 2023: 4 critical, 13 high, 1 in CISA KEV. Newest first.
1 more from this month is covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2023-2379High
EdgeRouter: vulnerability classified as critical has been found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6.
Ubiquiti · 1 advisory - Added
CVE-2023-2378High
EdgeRouter: flaw has been found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6.
Ubiquiti · 1 advisory - Added
CVE-2023-2377High
EdgeRouter: vulnerability was detected in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6.
Ubiquiti · 1 advisory - Added
CVE-2023-2376High
EdgeRouter: security vulnerability has been detected in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6.
Ubiquiti · 1 advisory - Added
CVE-2023-2375High
EdgeRouter: weakness has been identified in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6.
Ubiquiti · 1 advisory - Added
CVE-2023-2374High
EdgeRouter: security flaw has been discovered in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6.
Ubiquiti · 1 advisory - Added
CVE-2023-2373High
EdgeRouter: vulnerability was identified in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6.
Ubiquiti · 1 advisory - Added
CVE-2023-21971Medium
MySQL Connector/J Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2023-28131Critical
vulnerability in the expo.io framework
Check Point · 1 advisory - Added
CVE-2023-27534High
cURL/libcURL Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2023-27533High
cURL/libcURL Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2023-28531Critical
OpenSSH Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2023-23384High
Microsoft SQL Server Remote Code Execution Vulnerability
MS Server · 1 advisory - Added
CVE-2023-1989High
Kernel: use after free bug in btsdio_remove due to race condition
NetApp, Red Hat · 2 advisories - Added
CVE-2020-19678High
Directory Traversal vulnerability found in Pfsense v.2.1.3 and Pfsense Suricata v.1.4.6 pkg v.1.0.1
pfSense · 1 advisory - Added
CVE-2020-21487Critical
Cross Site Scripting vulnerability found in Netgate pfSense 2.4.4 and ACME package v.0.6.3
pfSense · 1 advisory - Added
CVE-2023-1671CriticalCISA KEV
Sophos Web Appliance Command Injection Vulnerability
Sophos · 1 advisory - Added
CVE-2022-4934High
post-auth command injection vulnerability in the exception wizard of Sophos Web Appliance older than version 4.3.10.4
Sophos · 1 advisory - Added
CVE-2020-36692Medium
reflected XSS via POST vulnerability in report scheduler of Sophos Web Appliance versions older than 4.3.10.4
Sophos · 1 advisory