Archive

April 2023

Vulnerabilities first published in this month (UTC), newest first.

← March 2023 2023 / April May 2023 →

All Critical High Medium Low Exploited only Public exploit

58 results · Clear filters · Feed

High 7.8

CVE-2023-28252 Exploited · Ransomware Public exploit EPSS 49%

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Windows Common Log File System Driver Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 11, 2023
KEV Apr 11, 2023
High 8.1

CVE-2023-28244 Public exploit

Windows Kerberos Elevation of Privilege Vulnerability

Windows Kerberos Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Apr 11, 2023
High 8.8

CVE-2023-28231 Public exploit EPSS 37%

DHCP Server Service Remote Code Execution Vulnerability

DHCP Server Service Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows

Apr 11, 2023
High 7.0

CVE-2023-28229 Exploited Public exploit

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

Windows CNG Key Isolation Service Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 11, 2023
KEV Oct 4, 2023
High 8.1

CVE-2023-28288 Public exploit

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition

Apr 11, 2023
High 7.8

CVE-2023-28285 Public exploit

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC for Mac 2021 Microsoft Office 2019 for Mac

Apr 11, 2023
High 7.0

CVE-2023-28218 Public exploit EPSS 12%

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 11, 2023
High 7.5

CVE-2023-27179 Public exploit Scanner template EPSS 61%

GDidees CMS v3.9.1 and lower was discovered to contain an arbitrary file download vulenrability via the filename parame…

Apr 11, 2023
High 7.3

CVE-2023-25950 Public exploit

HTTP request/response smuggling vulnerability in HAProxy version 2.7.0, and 2.6.1 to 2.6.7 allows a remote attacker to …

HAProxy HAProxy haproxy Debian

Apr 11, 2023
High 7.3

CVE-2022-38604 Public exploit

Wacom Driver 6.3.46-1 for Windows and lower was discovered to contain an arbitrary file deletion vulnerability.

Apr 11, 2023
High 8.8

CVE-2023-28205 Exploited Public exploit EPSS 27%

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 …

Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu

Apr 10, 2023
KEV Apr 10, 2023
High 8.6

CVE-2023-28206 Exploited Public exploit EPSS 23%

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.5…

Apple macOS iOS and iPadOS macOS iOS

Apr 10, 2023
KEV Apr 10, 2023
High 8.1

CVE-2023-26067 Public exploit Scanner template EPSS 38%

Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 of 4).

Apr 10, 2023
High 8.8

CVE-2023-25355 Public exploit

CoreDial sipXcom up to and including 21.04 is vulnerable to Insecure Permissions. A user who has the ability to run com…

Apr 4, 2023
High 7.5

CVE-2023-26976 Public exploit EPSS 16%

Tenda AC6 v15.03.05.09_multi was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting…

Apr 4, 2023
High 8.6

CVE-2022-43939 Exploited Public exploit Scanner template EPSS 92%

Hitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization Decisions

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x contain security restrictions using non-canonical URLs which can be circumvented.

Hitachi Vantara Pentaho Business Analytics Server

Apr 3, 2023
KEV Mar 3, 2025
High 8.8

CVE-2022-43769 Exploited Public exploit Scanner template EPSS 98%

Hitachi Vantara Pentaho Business Analytics Server - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)

Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow certain web services to set property values which contain Spring templates that are interpreted downstream.

Hitachi Vantara Pentaho Business Analytics Server

Apr 3, 2023
KEV Mar 3, 2025
High 7.8

CVE-2023-26269 Public exploit

Apache James server: Privilege escalation through unauthenticated JMX

Apache James server version 3.7.3 and earlier provides a JMX management service without authentication by default. This allows privilege escalation by a malicious local user. Administrators are advised to disable JMX, or set up a JMX password. Note that versi…

Apache Software Foundation Apache James server org.apache.james:javax-mail-extension Maven

Apr 3, 2023