CVEs published in February 2023
2,729 vulnerabilities, 255 critical, 10 exploited.
- totolink ca300-poe firmwareTOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the...9.8 Critical
- totolink ca300-poe firmwareTOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the...9.8 Critical
- totolink ca300-poe firmwareTOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the...9.8 Critical
- totolink ca300-poe firmwareTOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the...9.8 Critical
- totolink ca300-poe firmwareTOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the...9.8 Critical
- totolink ca300-poe firmwareTOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the...9.8 Critical
- totolink ca300-poe firmwareTOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the...9.8 Critical
- progress ws ftp serverIn Progress WS_FTP Server before 8.8, it is possible for a host administrator to elevate their...7.2 High
- jellyfinJellyfin Web Cross-Site Scripting (XSS) via Playlist Name5.4 Medium
- jellyfinJellyfin Web Cross-Site Scripting (XSS) via Collection Name5.4 Medium
- apple ipados, macos, safari +4 more +6 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2,...8.8 High
- apple ipados, macos, safari +4 more +6 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2,...8.8 High
- json-parser project json-parserBuffer OverFlow Vulnerability in Barenboim json-parser master and v1.1.0 fixed in v1.1.1 allows...9.8 Critical
- mojojson project mojojsonAn issue was found in MojoJson v1.2.3 allows attackers to execute arbitary code via the destroy...9.8 Critical
- mojojson project mojojsonBuffer OverFlow Vulnerability in MojoJson v1.2.3 allows an attacker to execute arbitrary code via...9.8 Critical
- kodiA heap buffer overflow vulnerability in Kodi Home Theater Software up to 19.5 allows attackers to...4.6 Medium
- jflyfox jfinal cmsjfinal_cms 5.1.0 is vulnerable to Cross Site Scripting (XSS).6.1 Medium
- vmware workstationVMware Workstation contains an arbitrary file deletion vulnerability. A malicious actor with...8.4 High
- debian linux, linux kernel, netapp active iq unified manager +5 more +7 moreIncorrect indirect branch prediction barrier in the Linux Kernel4.7 Medium
- wavlink wl-wn530h4 firmwareAn access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN530H4 M30H4.V5030...7.5 High
- nomachineAn issue in NoMachine before v8.2.3 allows attackers to execute arbitrary commands via a crafted ...5.3 Medium
- zammadInsufficient privilege verification in Zammad v5.3.0 allows an authenticated attacker to perform...4.3 Medium
- zammadAn issue in the component /api/v1/mentions of Zammad v5.3.0 allows authenticated attackers with...4.3 Medium
- zammadA vulnerability in Zammad v5.3.0 allows attackers to execute arbitrary code or escalate...9.8 Critical
- gin-vue-admin project gin-vue-adminPath Traversal in gin-vue-admin7.5 High
- creativeitem academy lmsA Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows attackers to arbitrarily...8.8 High
- creativeitem academy lmsA Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows an attacker to arbitrarily...4.8 Medium
- creativeitem academy lmsA Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows a discount coupon to be...4.3 Medium
- nvs365 nvs-365-v01 firmwareNVS365 V01 is vulnerable to Incorrect Access Control. After entering a wrong password, the url...7.5 High
- talend remote engine gen 2XML External Entity (XXE) vulnerability in Talend Remote Engine Gen 2 before R2022-09.7.8 High
- json.h project json.hCVE-2022-45496 affecting package suitesparse 7.11.0-17.8 High
- json.h project json.hCVE-2022-45493 affecting package suitesparse 7.11.0-17.8 High
- json.h project json.hCVE-2022-45492 affecting package suitesparse 7.11.0-17.8 High
- json.h project json.hCVE-2022-45491 affecting package suitesparse 7.11.0-17.8 High
- wepa print awayWEPA Print Away does not verify that a user has authorization to access documents before...6.5 Medium
- wepa print awayWEPA Print Away is vulnerable to a stored XSS. It does not properly sanitize uploaded filenames,...6.3 Medium
- apple ipados, macos, safari +2 more +4 moreA use after free issue was addressed with improved memory management. This issue is fixed in...8.8 High
- biltema baby camera firmware, ip camera firmware +1 moreInsecure direct object references (IDOR) in the web server of Biltema IP and Baby Camera Software...7.5 High
- cloudfoundry diego, cf-deployment +1 moreStarting with diego-release 2.55.0 and up to 2.69.0, and starting with CF Deployment 17.1 and up...9.1 Critical
- memcachedBuffer Overflow vulnerability in authfile.c memcached 1.6.9 allows attackers to cause a denial of...5.5 Medium
- vimium project vimiumUniversal Cross Site Scripting (UXSS) vulnerability in Vimium Extension 1.66 and earlier allows...6.1 Medium
- automadCross site scripting in automad/automad5.4 Medium
- hdfgroup hdf5Buffer Overflow vulnerability in HDFGroup hdf5-h5dump 1.12.0 through 1.13.0 allows attackers to...7.5 High
- pbootcmsSQL injection vulnerability in route of PbootCMS 3.0.5 allows remote attackers to run arbitrary...9.8 Critical
- teradek sphere, sphere firmware +1 more** UNSUPPORTED WHEN ASSIGNED ** Cross Site Scripting (XSS) vulnerability in Teradek Sphere all...5.4 Medium
- teradke cube pro firmware, cube firmware +1 more** UNSUPPORTED WHEN ASSIGNED ** Cross Site Scripting (XSS) vulnerability in Teradek Cube and Cube...5.4 Medium
- teradek brik firmware** UNSUPPORTED WHEN ASSIGNED ** Cross Site Scripting (XSS) vulnerability in Teradek Brik firmware...5.4 Medium
- teradek bond pro firmware, bond 2 firmware, bond firmware +2 more** UNSUPPORTED WHEN ASSIGNED ** Cross Site Scripting (XSS) vulnerability in Teradek Bond, Bond 2...5.4 Medium
- teradek vidiu mini firmware, vidiu firmware +1 more** UNSUPPORTED WHEN ASSIGNED ** Cross Site Scripting (XSS) vulnerability in Teradek VidiU / VidiU...5.4 Medium
- teradek clip firmware** UNSUPPORTED WHEN ASSIGNED ** Cross Site Scripting (XSS) vulnerability in Teradek Clip all...5.4 Medium
- Show moreLoading…