CVEs published in February 2023
2,729 vulnerabilities, 255 critical, 10 exploited.
- dst-admin project dst-admindst-admin sendBroadcast command injection6.3 Medium
- dst-admin project dst-admindst-admin masterConsole command injection6.3 Medium
- dst-admin project dst-admindst-admin kickPlayer command injection6.3 Medium
- dst-admin project dst-admindst-admin cavesConsole command injection6.3 Medium
libredwgOSS-FuzzHeap-buffer-overflow in bit_read_BBNo scoreboringsslOSS-FuzzHeap-use-after-free in sk_numNo score- estsoft alyacA denial of service vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.8...5.0 Medium
- servmask all-in-one wp migrationAll-in-One WP Migration < 7.63 - Unauthenticated Reflected XSS4.7 Medium
- employee leaves management system project leaves management system, phpgurukul employee leaves management system +1 morePHPGurukul Employee Leaves Management System changepassword.php weak password3.7 Low
- trendnet tew-652brp, tew-652brp firmware +1 moreTRENDnet TEW-652BRP Web Interface ping.ccp command injection7.2 High
- trendnet tew-652brp, tew-652brp firmware +1 moreTRENDnet TEW-652BRP Web Management Interface get_set.ccp cross site scripting2.4 Low
- trendnet tew-811dru, tew-811dru firmware +1 moreTRENDnet TEW-811DRU Web Interface command injection7.2 High
- trendnet tew-811dru, tew-811dru firmware +1 moreTRENDnet TEW-811DRU Web Management Interface wan.asp memory corruption6.5 Medium
- mitsubishi electric got2000 series gt25 model, got2000 series gt27 model, mitsubishi electric corporation gt softgot2000 +2 more +4 moreAuthentication Bypass by Spoofing vulnerability in Mitsubishi Electric Corporation GOT2000 Series...6.8 Medium
- mitsubishi electric got2000 series gt25 model, got2000 series gt27 model, mitsubishi electric corporation gt softgot2000 +2 more +4 moreImproper Restriction of Rendered UI Layers or Frames vulnerability in Mitsubishi Electric...6.1 Medium
- mitsubishi electric corporation melfa f series controller cr750-02vd-1 of rv-2f-d, melfa f series controller cr750-02vd-1 of rv-2fb-d, melfa f series controller cr750-02vd-1 of rv-2fl-d +492 more +494 moreAuthentication Bypass Vulnerability in Robot Controller of MELFA SD/SQ series and F-series7.5 High
- switcherapi switcher client, switcher-client-master +1 moreSwitcher Client contains Regular Expression Denial of Service (ReDoS)8.6 High
- wwbn avideoAVideo contains Command injection when embedding a video link9.8 Critical
- clockwork web project webClockwork Web contains a Cross-Site Request Forgery Vulnerability with Rails < 5.26.5 Medium
- in2code femanagerBroken Access Control in 3rd party TYPO3 extension "femanager"8.6 High
- in2code femanagerBroken Access Control in 3rd party TYPO3 extension "femanager"8.6 High
- trendnet tv-ip651wi firmwareThe use of the cyclic redundancy check (CRC) algorithm for integrity check during firmware update...5.9 Medium
- ui af-2x firmwareThe use of the cyclic redundancy check (CRC) algorithm for integrity check during firmware update...5.9 Medium
- netgear d6100 firmware, dgn1000v3 firmware, r8900 firmware +6 more +8 moreAn exploitable firmware modification vulnerability was discovered in WNR612v2 Wireless Routers...7.4 High
- squidex squidex/squidex, squidex.io squidex +1 moreImproper Handling of Additional Special Element in squidex/squidex5.4 Medium
- squidex squidex/squidex, squidex.io squidex +1 moreCross-Site Request Forgery (CSRF) in squidex/squidex6.8 Medium
- dedecmsDedeCMS v5.7.97 was discovered to contain a cross-site scripting (XSS) vulnerability in the...5.4 Medium
- tenda w20e firmwareTenda W20E v15.11.0.6 was discovered to contain multiple stack overflows in the function...9.8 Critical
- ruoyiRuoYi up to v4.7.5 was discovered to contain a SQL injection vulnerability via the component ...9.8 Critical
- totolink n200re-v5 firmwareA vulnerability in TOTOLINK N200RE_v5 firmware V9.3.5u.6139 allows unauthenticated attackers to...9.8 Critical
- easyone crmEasyone CRM v5.50.02 was discovered to contain a SQL Injection vulnerability via the text...9.8 Critical
- mengnai aapanel host systemMonnai aaPanel host system v1.5 contains an access control issue which allows attackers to...9.8 Critical
- 202-ecommerce administrative mandatePrestaShop module, totadministrativemandate before v1.7.1 was discovered to contain a SQL injection vulnerability.8.1 High
- tecrail responsive filemanagerAn issue in Tecrail Responsive FileManager v9.9.5 and below allows attackers to bypass the file...8.8 High
- dlink dir-846 firmwareD-Link DIR-846 Firmware FW100A53DBR was discovered to contain a remote command execution (RCE)...8.8 High
- microsoft pesign, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in pesign. The pesign package provides a systemd service used to start the...5.5 Medium
- mremotengAn issue in mRemoteNG v1.76.20 allows attackers to escalate privileges via a crafted executable...7.8 High
- rapid7 metasploit, metasploit pro +1 moreRapid7 Metasploit Pro Stored XSS6.1 Medium
- rapid7 insightvm, nexpose +1 moreRapid7 Nexpose Certificate Validation Issue5.3 Medium
- joomla joomla\!, joomla! project cms +1 more[20230102] - Core - Missing ACL checks for com_actionlogs4.3 Medium
- joomla joomla\!, joomla! project cms +1 more[20230101] - Core - CSRF within post-installation messages6.3 Medium
- landis+gyr e850 (zmq200), landisgyr e850 firmware +1 moreAll versions of Landis+Gyr E850 (ZMQ200) are vulnerable to CWE-784: Reliance on Cookies Without...3.9 Low
- karim salman kraken.io image optimizerKraken.io Image Optimizer <= 2.6.8 - Missing Authorization to Authenticated (Subscriber+) Plugin Options Update6.5 Medium
- sensiolabs symfonySymfony storing cookie headers in HttpCache5.9 Medium
- sensiolabs symfonySymfony vulnerable to Session Fixation of CSRF tokens6.3 Medium
- ibm cloud pak for business automationIBM Cloud Pak for Business Automation information disclosure4.0 Medium
- atlassian jira service management server, jira service management, jira service management data center +2 moreAn authentication vulnerability was discovered in Jira Service Management Server and Data Center...9.4 Critical
- f5 big-ip, big-ip spk, big-ip access policy manager +12 more +14 moreBIG-IP Virtual Edition vulnerability7.5 High
- f5 big-ip, big-ip advanced web application firewall, big-ip application security manager +2 moreBIG-IP Advanced WAF and ASM vulnerability7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreBIG-IP SIP profile vulnerability7.5 High
- Show moreLoading…