Skip to content
OpenAdvisories

Archive

April 2023

Vulnerabilities first published in this month (UTC), newest first.

← March 2023 2023 / April May 2023 →
  1. 119
  2. 211
  3. 346
  4. 4165
  5. 5139
  6. 6111
  7. 799
  8. 820
  9. 915
  10. 1078
  11. 11239
  12. 12105
  13. 1342
  14. 14111
  15. 1565
  16. 1638
  17. 1786
  18. 18191
  19. 1994
  20. 2054
  21. 2161
  22. 2231
  23. 2326
  24. 24114
  25. 2599
  26. 2659
  27. 2772
  28. 28111
  29. 2913
  30. 303
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-28771 Exploited Public exploit EPSS 99%

    Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware ver…

    Zyxel USG FLEX series firmware ATP series firmware VPN series Firmware Network devices
    KEV May 31, 2023
  • High 8.9
    CVE-2023-27524 Exploited Public exploit Scanner template EPSS 98%

    Apache Superset: Session validation vulnerability when using provided default SECRET_KEY

    Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered the default configured SECRET_KEY according to installation instructions allow for an attacker to authenticate and access unauthorized resour…

    Apache Software Foundation Apache Superset apache-superset PyPI
    KEV Jan 8, 2024
  • Critical 9.8
    CVE-2023-27350 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Bu…

    PaperCut NG
    KEV Apr 21, 2023
  • High 7.2
    CVE-2023-22894 Exploited Public exploit

    Strapi leaking sensitive user information by filtering on private fields

    Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting the query filter. The attacker can filter users by columns that contain sensitive information and infer a value from API responses. If the …

    @strapi/strapi npm
    KEV Oct 8, 2026
  • High 8.8
    CVE-2023-2033 Exploited Public exploit EPSS 41%

    Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap cor…

    Google Chrome chromium qt5-qtwebengine Browsers Debian Alpine
    KEV Apr 17, 2023
  • High 7.8
    CVE-2023-28252 Exploited · Ransomware Public exploit EPSS 49%

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Apr 11, 2023
  • High 7.0
    CVE-2023-28229 Exploited Public exploit

    Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

    Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Oct 4, 2023
  • High 8.8
    CVE-2023-28205 Exploited Public exploit EPSS 27%

    A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 …

    Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu
    KEV Apr 10, 2023
  • High 8.6
    CVE-2023-28206 Exploited Public exploit EPSS 23%

    An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.5…

    Apple macOS iOS and iPadOS macOS iOS
    KEV Apr 10, 2023
  • Low 3.3
    CVE-2023-26083 Exploited Public exploit

    Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifros…

    KEV Apr 7, 2023
  • Critical 9.8
    CVE-2023-1671 Exploited Public exploit Scanner template EPSS 100%

    A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.1…

    Sophos Sophos Web Appliance Network devices
    KEV Nov 16, 2023
  • High 8.6
    CVE-2022-43939 Exploited Public exploit Scanner template EPSS 92%

    Hitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization Decisions

    Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x contain security restrictions using non-canonical URLs which can be circumvented.

    Hitachi Vantara Pentaho Business Analytics Server
    KEV Mar 3, 2025
  • High 8.8
    CVE-2022-43769 Exploited Public exploit Scanner template EPSS 98%

    Hitachi Vantara Pentaho Business Analytics Server - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)

    Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow certain web services to set property values which contain Spring templates that are interpreted downstream.

    Hitachi Vantara Pentaho Business Analytics Server
    KEV Mar 3, 2025