CVEs published in February 2023
2,729 vulnerabilities, 255 critical, 10 exploited.
- google android, mediatek, inc. mt6833, mt6853, mt6873, mt6877, mt6885, mt6893, mt8768, mt8786, mt8791, mt8797 +1 moreIn ccu, there is a possible out of bounds read due to a logic error. This could lead to local...4.4 Medium
- google android, mediatek, inc. mt6761, mt6765, mt6768, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6855, mt6873, mt6877, mt6879, mt6883, mt6885, mt6889, mt6893, mt6895, mt6983, mt8168, mt8365, mt8675 +1 moreIn display drm, there is a possible use after free due to a race condition. This could lead to...6.4 Medium
- google android, mediatek, inc. mt6765, mt6768, mt8786 +1 moreIn ccu, there is a possible memory corruption due to a race condition. This could lead to local...6.4 Medium
- google android, mediatek, inc. mt6879, mt6895, mt6983 +1 moreIn apusys, there is a possible out of bounds read due to a missing bounds check. This could lead...4.4 Medium
- google android, mediatek, inc. mt6580, mt6731, mt6735, mt6737, mt6739, mt6753, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt8185, mt8321, mt8385, mt8666, mt8667, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8791t, mt8797 +1 moreIn keyinstall, there is a possible out of bounds read due to a missing bounds check. This could...4.4 Medium
- google android, mediatek, inc. mt6735, mt6737, mt6739, mt6753, mt6757, mt6761, mt6763, mt6765, mt6768, mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6855, mt6873, mt6877, mt6879, mt6885, mt6889, mt6893, mt6895, mt6983, mt8167, mt8362a +1 moreIn ged, there is a possible out of bounds write due to a missing bounds check. This could lead to...6.7 Medium
- gnu c library, glibc, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreA vulnerability was found in GNU C Library 2.38. It has been declared as critical. This...4.6 Medium
- linux kernelA memory leak flaw and potential divide by zero and Integer overflow was found in the Linux...5.5 Medium
- mozilla thunderbirdCertificate OCSP revocation status was not checked when verifying S/Mime signatures. Mail signed...6.5 Medium
- hp deskjet 2540 a9u23b firmware**UNSUPPORTED WHEN ASSIGNED** Cross Site Scripting (XSS) in HP Deskjet 2540 series printer...9.0 Critical
- wavlink wl-wn530hg4 firmwareAn access control issue in Wavlink WL-WN530HG4 M30HG4.V5030.201217 allows unauthenticated...7.5 High
- wavlink wl-wn533a8 firmwareAn access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN533A8 M33A8.V5030...7.5 High
- softrSoftr v2.0 was discovered to contain a HTML injection vulnerability via the Work Space Name...5.4 Medium
- pycdc project pycdcpycdc commit 44a730f3a889503014fec94ae6e62d8401cb75e5 was discovered to contain a stack overflow...9.8 Critical
- wfs another edenThe components wfshbr64.sys and wfshbr32.sys in Another Eden before v3.0.20 and before v2.14.200...7.8 High
- nvs365 nvs-365-v01 firmwareIn NVS365 V01, the background network test function can trigger command execution.9.8 Critical
- apple ipados, ios and ipados, iphone os +2 moreA spoofing issue existed in the handling of URLs. This issue was addressed with improved input...4.3 Medium
- apple ipados, macos, safari +3 more +5 moreA spoofing issue existed in the handling of URLs. This issue was addressed with improved input...4.3 Medium
- bticino door entry for hometouchBTicino Door Entry HOMETOUCH for iOS 1.4.2 was discovered to be missing an SSL certificate.5.9 Medium
- gzwhir ezeipezEIP v5.3.0(0649) was discovered to contain a cross-site scripting (XSS) vulnerability.6.1 Medium
- talend esb runtimeSQL Injection vulnerability in Talend ESB Runtime 7.3.1-R2022-09-RT thru 8.0.1-R2022-10-RT when...7.2 High
- crmebCRMEB 4.4.4 is vulnerable to Any File download.7.5 High
- imagemagickImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g.,...6.5 Medium
- imagemagickImageMagick 7.1.0-49 is vulnerable to Denial of Service. When it parses a PNG image (e.g., for...6.5 Medium
- couchbase serverAn issue was discovered in Couchbase Server 6.5.x and 6.6.x before 6.6.6, 7.x before 7.0.5, and 7...8.1 High
- couchbase serverAn issue was discovered in Couchbase Server 7.x before 7.0.5 and 7.1.x before 7.1.2. A crafted...4.9 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreThe issue was addressed with improved UI handling. This issue is fixed in iOS 16.2 and iPadOS 16...4.7 Medium
- mediatek mt5221 firmware, mt7603 firmware, mt7613 firmware +20 more +22 moreIn Wi-Fi driver, there is a possible system crash due to null pointer dereference. This could...7.5 High
- mediatek mt5221 firmware, mt7603 firmware, mt7613 firmware +28 more +30 moreIn Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This...6.7 Medium
- mediatek mt5221 firmware, mt7603 firmware, mt7613 firmware +28 more +30 moreIn Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This...6.7 Medium
- mediatek mt5221 firmware, mt7603 firmware, mt7613 firmware +28 more +30 moreIn Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This...6.7 Medium
- google android, mediatek, inc. mt6879, mt6895, mt6983 +1 moreIn ccd, there is a possible use after free due to a race condition. This could lead to local...6.4 Medium
- google android, mediatek, inc. mt6879, mt6895, mt6983 +1 moreIn ccd, there is a possible memory corruption due to a race condition. This could lead to local...6.4 Medium
- google android, mediatek, inc. mt6762, mt6765, mt6768, mt6769, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt8385, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn widevine, there is a possible out of bounds read due to an incorrect bounds check. This could...4.4 Medium
- caddyserver caddyOpen Redirect in Caddy6.1 Medium
- westerndigital my cloud osWestern Digital My Cloud devices before OS5 do not use cryptographically signed Firmware upgrade...9.8 Critical
- westerndigital my cloud osWestern Digital My Cloud devices before OS5 allow REST API access by low-privileged accounts, as...8.8 High
- westerndigital my cloud osWestern Digital My Cloud devices before OS5 have a nobody account with a blank password.9.8 Critical
- mediatek en7528 firmware, en7580 firmware, mediatek, inc. en7528, en7580 +2 moreIn Boa, there is a possible escalation of privilege due to a stack buffer overflow. This could...9.8 Critical
- mediatek en7528 firmware, en7580 firmware, mediatek, inc. en7528, en7580 +2 moreIn Boa, there is a possible escalation of privilege due to a missing permission check. This could...9.8 Critical
- mediatek en7528 firmware, en7580 firmware, mediatek, inc. en7528, en7580 +2 moreIn Boa, there is a possible information disclosure due to a missing permission check. This could...7.5 High
- mediatek en7528 firmware, en7580 firmware, mediatek, inc. en7528, en7580 +2 moreIn Config Manager, there is a possible command injection due to improper input validation. This...9.8 Critical
- mediatek en7528 firmware, en7580 firmware, mediatek, inc. en7528, en7580 +2 moreIn Config Manager, there is a possible command injection due to improper input validation. This...9.8 Critical
- mediatek en7528 firmware, en7580 firmware, mediatek, inc. en7528, en7580 +2 moreIn Config Manager, there is a possible command injection due to improper input validation. This...9.8 Critical
- gimmie project gimmieGimmie Plugin trigger_ratethread.php sql injection5.5 Medium
- gimmie project gimmieGimmie Plugin trigger_referral.php sql injection5.5 Medium
- daschtour matomo-mediawiki-extension, mediawiki matomo +1 moreDaSchTour matomo-mediawiki-extension Username Piwik.hooks.php cross site scripting2.6 Low
c-blosc2OSS-FuzzHeap-use-after-free in ZSTD_freeDDictNo scorephpOSS-FuzzHeap-buffer-overflow in lex_scanNo score- apache ageApache AGE: Python and Golang drivers allow data manipulation and exposure due to SQL injection8.1 High
- Show moreLoading…