Archive

25 April 2023

Vulnerabilities first published on this day (UTC), newest first.

← March 2023 2023 / April /25 May 2023 →

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 10.0

CVE-2023-30839 Public exploit

PrestaShop vulnerable to SQL filter bypass leading to arbitrary write requests using "SQL Manager"

PrestaShop is an Open Source e-commerce web application. Versions prior to 8.0.4 and 1.7.8.9 contain a SQL filtering vulnerability. A BO user can write, update, and delete in the database, even without having specific rights. PrestaShop 8.0.4 and 1.7.8.9 cont…

PrestaShop PrestaShop prestashop/prestashop Web / CMS Packagist

Apr 25, 2023
Critical 9.8

CVE-2023-28771 Exploited Public exploit EPSS 99%

Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware ver…

Zyxel USG FLEX series firmware ATP series firmware VPN series Firmware Network devices

Apr 25, 2023
KEV May 31, 2023