CVEs published in February 2023
2,729 vulnerabilities, 255 critical, 10 exploited.
- lastyard last yardIn Last Yard 22.09.8-1, the cookie can be stolen via via unencrypted traffic.5.3 Medium
- lastyard last yardLast Yard 22.09.8-1 does not enforce HSTS headers9.8 Critical
- google android, unisoc (shanghai) technologies co., ltd. sc9863a/sc9832e/sc7731e/t610/t310/t606/t760/t610/t618/t606/t612/t616/t760/t770/t820/s8000 +1 moreIn cmd services, there is a OS command injection issue due to missing permission check. This...6.7 Medium
- murasoftware mura cmsA vulnerability in the Remember Me function of Mura CMS before v10.0.580 allows attackers to...9.8 Critical
- masacmsA vulnerability in the Remember Me function of Masa CMS v7.2, 7.3, and 7.4-beta allows attackers...9.8 Critical
- keking kkfileviewkkFileView v4.1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the...6.1 Medium
- dotcmsAn issue was discovered in dotCMS core 4.x through 22.10.2. An authenticated directory traversal...6.5 Medium
- dotcmsAn issue was discovered in dotCMS core 5.3.8.5 through 5.3.8.15 and 21.03 through 22.10.1. A...8.8 High
- schneider electric apc easy ups online monitoring software, easy ups online monitoring software +1 moreA CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause local privilege...7.8 High
- schneider electric apc easy ups online monitoring software, easy ups online monitoring software +1 moreA CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could...7.8 High
- schneider electric apc easy ups online monitoring software, easy ups online monitoring software +1 moreA CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could cause...9.8 Critical
- schneider electric apc easy ups online monitoring software, easy ups online monitoring software +1 moreA CWE-306: Missing Authentication for Critical Function The software does not perform any...9.8 Critical
- gitlab dast api scannerA sensitive information leak issue has been discovered in all versions of DAST API scanner from 1...5.0 Medium
- schneider electric ecostruxure power commissionA CWE-285: Improper Authorization vulnerability exists that could cause unauthorized access to...7.8 High
- dotcmsIn dotCMS 5.x-22.06, it is possible to call the TempResource multiple times, each time requesting...5.3 Medium
- dotcmsIn dotCMS 5.x-22.06, TempFileAPI allows a user to create a temporary file based on a passed in...6.5 Medium
- qualcomm apq8096au firmware, ar8031 firmware, ar8035 firmware +60 more +62 moreAccess of uninitialized pointer in Bluetooth HOST7.3 High
- qualcomm apq8096au firmware, aqt1000 firmware, ar9380 firmware +155 more +157 moreImproper access control in Qualcomm IPC8.4 High
- qualcomm apq8096au firmware, mdm9628 firmware, msm8996au firmware +27 more +29 moreUse after free in Trusted Application Environment6.7 Medium
- notepad-plus-plus notepad\+\+Notepad++ v8.4.1 was discovered to contain a stack overflow via the component Finder::add().5.5 Medium
- infineon cypress bluetooth mesh software development kitCypress : https://www.infineon.com/ Cypress Bluetooth Mesh SDK BSA0107_05.01.00-BX8-AMESH-08 is...8.2 High
- infineon cypress bluetooth mesh software development kitCypress : https://www.infineon.com/ Cypress Bluetooth Mesh SDK BSA0107_05.01.00-BX8-AMESH-08 is...8.2 High
- bestechnic bluetooth mesh software development kitIn Bestechnic Bluetooth Mesh SDK (BES2300) V1.0, a buffer overflow vulnerability can be triggered...8.2 High
- schneider electric igss data server (igssdataserver.exe), schneider-electric interactive graphical scada system +1 moreA CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a...9.8 Critical
- schneider electric igss data server (igssdataserver.exe), schneider-electric interactive graphical scada system +1 moreA CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer...9.8 Critical
- google androidIn createTrack of AudioFlinger.cpp, there is a possible way to record audio without a privacy...6.7 Medium
- google androidIn multiple files, there is a possible way to preserve WiFi settings due to residual data after a...5.5 Medium
- google androidIn addAutomaticZenRule of ZenModeHelper.java, there is a possible persistent denial of service...5.5 Medium
- schneider electric legacy modicon quantum, modicon m340 cpu (part numbers bmxp34*), modicon m580 cpu (part numbers bmep* and bmeh*) +44 more +46 moreA CWE-200: Information Exposure vulnerability exists that could cause the exposure of sensitive...7.5 High