CVEs published in February 2023
2,729 vulnerabilities, 255 critical, 10 exploited.
- teradek slice firmware** UNSUPPORTED WHEN ASSIGNED ** Cross Site Scripting (XSS) vulnerability in Teradek Slice 1st...5.4 Medium
- asus rt-ac68u firmwareDirectory Traversal vulnerability in Cloud Disk in ASUS RT-AC68U router firmware version before 3...9.1 Critical
- asus rt-ac68u firmwareSQL injection vulnerability in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4...7.5 High
- asus rt-ac68u firmwareIncorrect Access Control issue discoverd in Cloud Disk in ASUS RT-AC68U router firmware version...9.1 Critical
- fcitx 5 project 5Buffer Overflow vulnerability in fcitx5 5.0.8 allows attackers to cause a denial of service via...7.5 High
- jeecgInsecure Permissions issue in jeecg-boot7.5 High
- jeecgInsecure Permissions issue in jeecg-boot7.5 High
- jeecgInsecure Permissions issue in jeecg-boot7.5 High
- modern honey network project honey networkIncorrect Access Control vulnerability in Modern Honey Network commit...6.5 Medium
- yzmcmsCross Site Scripting (XSS) vulnerability in yzmcms 6.1 allows attackers to steal user cookies via...5.4 Medium
- thedaylightstudio fuel cmsCross Site Request Forgery vulnerability in FUEL-CMS 1.4.13 allows remote attackers to run...8.8 High
- thedaylightstudio fuel cmsCross Site Request Forgery vulnerability in FUEL-CMS 1.4.13 allows remote attackers to run...8.8 High
- kitesky kitecmsIncorrect Access Control issue discovered in KiteCMS 1.1 allows remote attackers to view...7.5 High
- tpcms project tpcmsCross Site Scripting (XSS) vulnerability in tpcms 3.2 allows remote attackers to run arbitrary...5.4 Medium
- tpcms project tpcmsIncorrect Access Control issue discovered in tpcms 3.2 allows remote attackers to view sensitive...7.5 High
- gurock testrailCross Site Scripting (XSS) vulnerability in Gurock TestRail before 7.1.2 allows remote...5.4 Medium
- cesanta mjsBuffer Overflow vulnerability in Cesanta mJS 1.26 allows remote attackers to cause a denial of...5.5 Medium
- portfoliocms project portfoliocmsRace condition vulnerability discovered in portfolioCMS 1.0 allows remote attackers to run...8.1 High
- native-php-cms project native-php-cmsSQL injection vulnerability in native-php-cms 1.0 allows remote attackers to run arbitrary SQL...9.8 Critical
- xpdfreader xpdfBuffer Overflow vulnerability in pdfimages in xpdf 4.03 allows attackers to crash the application...7.5 High
- liballeg allegroBuffer Overflow vulnerability in Allegro through 5.2.6 allows attackers to cause a denial of...6.5 Medium
- jizhicmsSQL injection vulnerability in JIZHICMS 1.9.5 allows attackers to run arbitrary SQL commands via...9.8 Critical
- txjia imcatCross Site Request Forgery (CSRF) vulnerability in imcat 5.4 allows remote attackers to gain...8.8 High
- txjia imcatCross Site Request Forgery vulnerability in imcat 5.4 allows remote attackers to escalate...8.8 High
- jocms project jocmsSQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands...9.1 Critical
- jocms project jocmsSQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands...9.1 Critical
- jocms project jocmsSQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands...7.5 High
- jocms project jocmsSQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands...9.1 Critical
- phpwcmsFile Upload vulnerability in phpwcms 1.9.25 allows remote attackers to run arbitrary code via...8.8 High
- phpwcmsDirectory traversal vulnerability in phpcms 1.9.25 allows remote attackers to delete arbitrary...5.4 Medium
- phpwcmsAn issue discovered in phpwcms 1.9.25 allows remote attackers to run arbitrary code via DB user...9.8 Critical
- delta electronics dopsoftCVE-2023-01247.8 High
- delta electronics dopsoftCVE-2023-01237.8 High
- delta electronics cncsoft, delta industrial automation screeneditor +1 moreCVE-2022-46347.8 High
- hcl software leap, hcltech hcl leap +1 moreAn open redirect to malicious sites affects HCL Leap8.2 High
- multilaser re057, re170, re057 firmware +1 more +3 moreMultilaser RE057/RE170 Backup File param.file.tgz information disclosure5.3 Medium
- ibm tivoli workload schedulerIBM Tivoli Workload Scheduler XML external entity injection7.1 High
- ibm tivoli workload schedulerIBM Tivoli Workload Scheduler XML external entity injection10.0 Critical
- pimcoreMissing file upload type validation in pimcore/pimcore8.2 High
- openzeppelin contracts, cairo-contracts +1 moreOpenZeppelin Contracts for Cairo is vulnerable to signature validation bypass6.4 Medium
- joomsky js help desk, js help desk help desk +1 moreWordPress JS Help Desk plugin <= 2.7.1 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- lauri karisola / wp trio conditional shipping for woocommerceWordPress Conditional Shipping for WooCommerce Plugin <= 2.3.1 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- unknown wp mail logWordPress WP Mail Log Plugin <= 1.0.1 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- devscred exclusive addons for elementorWordPress Exclusive Addons Elementor Plugin <= 2.6.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- dell enterprise sonic os, enterprise sonic distribution +1 moreDell Enterprise SONiC OS, 3.5.3, 4.0.0, 4.0.1, 4.0.2, contains an "Uncontrolled Resource...7.5 High
- sunshinephotocart sunshine photo cartWordPress Sunshine Photo Cart Plugin <= 2.9.13 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- magneticlab homepage pop-upWordPress Homepage Pop-up Plugin <= 1.2.5 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- standalonetech terawallet, terawallet – for woocommerce +1 moreWordPress TeraWallet – For WooCommerce Plugin <= 1.3.24 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- fastcms project fastcmsFastCMS Template Management unrestricted upload5.3 Medium
- yafnet, yetanotherforum yaf.net +1 moreYAFNET Signature cross site scripting3.5 Low
- Show moreLoading…