CVEs published in February 2023
2,729 vulnerabilities, 255 critical, 10 exploited.
- reason-jose project reason-josereason-jose ignores signature checks5.9 Medium
- linux kernelThe Linux kernel through 6.1.9 has a Use-After-Free in bigben_remove in drivers/hid/hid-bigbenff...4.6 Medium
- nosh chartingsystem project chartingsystemNOSH 4a5cfdb allows remote authenticated users to execute PHP arbitrary code via the "practice...8.8 High
- djangoproject django, debian linux +1 moreDjango contains Uncontrolled Resource Consumption via cached header7.5 High
- open5gsDue to insufficient length validation in the Open5GS GTP library versions prior to versions 2.4...7.5 High
- lmxcmslmxcms v1.41 was discovered to contain an arbitrary file deletion vulnerability via BackdbAction...6.5 Medium
- ftdms project ftdmsAn arbitrary file upload vulnerability in Ftdms v3.1.6 allows attackers to execute arbitrary code...7.2 High
- selfwealthSelfwealth iOS mobile App 3.3.1 is vulnerable to Sensitive key disclosure. The application...7.5 High
- selfwealthSelfwealth iOS mobile App 3.3.1 is vulnerable to Insecure App Transport Security (ATS) Settings.7.5 High
- connectwise automateConnectwise Automate 2022.11 is vulnerable to Cleartext authentication. Authentication is being...5.9 Medium
- connectwiseConnectwise Control 22.8.10013.8329 is vulnerable to Cross Origin Resource Sharing (CORS).6.1 Medium
- connectwiseIn Connectwise Control 22.8.10013.8329, the login page does not implement HSTS headers therefore...5.3 Medium
- connectwise automateConnectwise Automate 2022.11 is vulnerable to Clickjacking. The login screen can be iframed and...6.1 Medium
- zohocorp manageengine servicedesk plusCross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via the comment...6.1 Medium
- zohocorp manageengine servicedesk plusCross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 13 via the comment...6.1 Medium
- zohocorp manageengine supportcenter plusOS Command injection vulnerability in Support Center Plus 11 via Executor in Action when creating...9.8 Critical
- zohocorp manageengine assetexplorerCross Site Scripting (XSS) vulnerability in Zoho Asset Explorer 6.9 via the credential name when...6.1 Medium
- zohocorp manageengine servicedesk plusCross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via embedding...6.1 Medium
- zohocorp manageengine servicedesk plusCross site scripting (XSS) vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via PO in the...6.1 Medium
- google androidIn s2mpg11_pmic_probe of s2mpg11-regulator.c, there is a possible out of bounds read due to a...5.5 Medium
- google androidIn dropFramesUntilIframe of AAVCAssembler.cpp, there is a possible out of bounds read due to a...7.5 High
- google androidIn onStart of BluetoothSwitchPreferenceController.java, there is a possible permission bypass due...9.8 Critical
- google androidIn phNciNfc_MfCreateXchgDataHdr of phNxpExtns_MifareStd.cpp, there is a possible out of bounds...7.8 High
- google androidIn run of ChooseTypeAndAccountActivity.java, there is a possible escalation of privilege due to...7.8 High
- google androidIn clearApplicationUserData of ActivityManagerService.java, there is a possible way to remove...7.8 High
- google androidIn the Android operating system, there is a possible way to replace a boot partition due to...7.8 High
- google androidIn multiple functions of looper_backed_event_loop.cpp, there is a possible way to corrupt memory...7.8 High
- google androidIn binder_transaction_buffer_release of binder.c, there is a possible use after free due to...7.8 High
- google androidIn several functions of the Android Linux kernel, there is a possible way to corrupt memory due...7.8 High
- google androidIn resolveAttributionSource of ServiceUtilities.cpp, there is a possible way to disable the...7.8 High
- google androidIn several functions of MediaCodec.cpp, there is a possible way to corrupt memory due to a use...7.8 High
- google androidIn onCreatePreferences of EditInfoFragment.java, there is a possible way to read contacts...3.3 Low
- vmware vrealize operationsVMware vRealize Operations (vROps) contains a CSRF bypass vulnerability. A malicious user could...8.8 High
- google android, mediatek, inc. mt6735, mt6737, mt6739, mt6753, mt6757, mt6761, mt6763, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6855, mt6873, mt6877, mt6879, mt6885, mt6889, mt6893, mt6895, mt6983 +1 moreIn ged, there is a possible out of bounds write due to an integer overflow. This could lead to...6.7 Medium
- wallabag, wallabag wallabag/wallabag +1 moreImproper Authorization in wallabag/wallabag5.4 Medium
- wallabag, wallabag wallabag/wallabag +1 moreImproper Authorization in wallabag/wallabag6.5 Medium
- microweber, microweber microweber/microweber +1 moreCross-site Scripting (XSS) - DOM in microweber/microweber6.3 Medium
- projectsend, projectsend projectsend/projectsend +1 moreCross-site Scripting (XSS) - Stored in projectsend/projectsend7.2 High
- ampache, ampache ampache/ampache +1 moreCross-site Scripting (XSS) - Reflected in ampache/ampache9.3 Critical
- linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreA use-after-free flaw was found in qdisc_graft in net/sched/sch_api.c in the Linux Kernel due to...4.7 Medium
- trend micro apex oneA file upload vulnerability in exists in Trend Micro Apex One server build 11110. Using a...9.1 Critical
- tenable nessus, tenable.io, tenable.sc +2 moreAs part of our Security Development Lifecycle, a potential privilege escalation issue was...8.8 High
- orangescrumOrangeScrum version 2.0.11 allows an authenticated external attacker to delete arbitrary local...8.1 High
- lmxcmslmxcms v1.41 was discovered to contain an arbitrary file read vulnerability via TemplateAction...4.9 Medium
- seacmsSeacms v12.7 was discovered to contain a remote code execution (RCE) vulnerability via the ip...7.2 High
- maccmsmaccms10 2021.1000.2000 is vulnerable to Server-side request forgery (SSRF).8.8 High
- serinf fast checkinSerenissima Informatica Fast Checkin version v1.0 is vulnerable to Unauthenticated SQL Injection.9.8 Critical
- serinf fast checkinAn arbitrary file write vulnerability in Serenissima Informatica Fast Checkin v1.0 allows...9.8 Critical
- serinf fast checkinSerenissima Informatica Fast Checkin 1.0 is vulnerable to Directory Traversal.7.5 High
- lastyard last yardLast Yard 22.09.8-1 is vulnerable to Cross-origin resource sharing (CORS).7.5 High
- Show moreLoading…