CVEs published in February 2023
2,729 vulnerabilities, 255 critical, 10 exploited.
- zyxel atp series firmware, usg flex series firmware, vpn series firmware +26 more +28 moreA post-authentication command injection vulnerability in the CLI command of Zyxel ZyWALL/USG...7.2 High
- terra-master terramaster operating system, terramaster os +1 moreTerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative...7.5 High
- opensuse pastepaste: XSS on the image upload function4.3 Medium
- ravencoinAn issue discovered in src/wallet/wallet.cpp in Ravencoin Core 4.3.2.1 and earlier allows...7.5 High
- dogecoinAn issue discovered in src/wallet/wallet.cpp in Dogecoin Project Dogecoin Core 1.14.3 and earlier...7.5 High
- adminlte.io adminlteDirectory Traversal vulnerability in AdminLTE 3.1.0 allows remote attackers to gain escalated...9.8 Critical
- unified intents ab remote, unifiedremote unified remote +1 moreBecause the web management interface for Unified Intents' Unified Remote solution does not itself...9.8 Critical
- ibm app connect enterpriseIBM App Connect Enterprise denial of service4.9 Medium
- ibm app connect enterprise, app connect enterprise certified container +1 moreIBM App Connect Enterprise information disclosure6.8 Medium
- nextcloud desktop, kiteworks security-advisories +1 moreSelf reflected HTML injection in Desktop client5.4 Medium
- nextcloud mail, kiteworks security-advisories +1 moreBlind SSRF via server URL input in the Nextcloud Mail app5.0 Medium
- ibm watson knowledge catalog on cloud pak for data, watson knowledge catalog on-prem +1 moreIBM Watson Knowledge Catalog on Cloud Pak SQL injection8.6 High
- wangguard project wangguardWangGuard Plugin WGG User List wangguard-user-info.php wangguard_users_info cross site scripting3.5 Low
- tinymighty wikiseotinymighty WikiSEO Meta Property Tag WikiSEO.body.php modifyHTML cross site scripting3.5 Low
- unknown ppwp, passwordprotectwp password protect wordpress +1 morePPWP – WordPress Password Protect Page < 1.8.6 - Contributor+ Stored XSS in Shortcode5.4 Medium
- ajay contextual related postsContextual Related Posts < 3.3.1 - Contributor+ Stored XSS5.4 Medium
- realmag777 husky, pluginus husky - products filter professional for woocommerce +1 moreWOOF - Products Filter for WooCommerce < 1.3.2 - Admin+ PHP Object Injection7.2 High
- unknown wc vendors marketplaceWC Vendors Marketplace < 2.4.5 - Contributor+ Stored XSS5.4 Medium
- rafflepress giveaways and contests by rafflepressGiveaways and Contests by RafflePress < 1.11.3 - Contributor+ Stored XSS5.4 Medium
- simple tooltips project tooltips, unknown simple tooltips +1 moreSimple Tooltips < 2.1.4 - Contributor+ Stored XSS via Shortcode5.4 Medium
- extendthemes materialis companionMaterialis Companion < 1.3.40 - Contributor+ Stored XSS via Shortcode5.4 Medium
- pdf.js viewer project viewer, unknown pdf.js viewer +1 morePDF.js Viewer < 2.1.8 - Contributor+ Stored XSS via Shortcode5.4 Medium
- unknown jquery t(-) countdown widget, twinpictures jquery t\(-\) countdown widget +1 morejQuery T(-) Countdown Widget < 2.3.24 - Contributor+ Stored XSS5.4 Medium
- unknown restaurant menu, oracle restaurant menu - food ordering system - table reservation +1 moreRestaurant Menu < 2.3.6 - Contributor+ Stored XSS via Shortcode5.4 Medium
- flexible captcha project captcha, unknown flexible captcha +1 moreFlexible Captcha <= 4.1 - Contributor+ Stored XSS5.4 Medium
- mapsmarker leaflet maps marker, unknown leaflet maps marker (google maps, openstreetmap, bing maps) +1 moreLeaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) < 3.12.7 - Contributor+ Stored XSS via Shortcode5.4 Medium
- happyforms, happyforms form builder to get in touch with visitors, grow your email list and collect payments — happyforms +1 moreHappyforms < 1.22.0 - Contributor+ Stored XSS5.4 Medium
- monsterinsightsMonsterInsights < 8.12.1 - Contributor+ Stored XSS5.4 Medium
- pickplugins breadcrumbBreadcrumb < 1.5.33 - Contributor+ Stored XSS via Shortcode5.4 Medium
- cloak front end email project front end email, unknown cloak front end email +1 moreCloak Front End Email < 1.9.2 - Contributor+ Stored XSS5.4 Medium
- naver map project map, unknown naver map +1 moreNaver Map <= 1.1.0 - Contributor+ Stored XSS5.4 Medium
- bplugins html5 audio playerHtml5 Audio Player < 2.1.12 - Contributor+ Stored XSS5.4 Medium
- unknown ean for woocommerceEAN for WooCommerce < 4.4.3 - Contributor+ Stored XSS5.4 Medium
- siteground security, unknown siteground security +1 moreSiteGround Security < 1.3.1 - Admin+ SQLi8.8 High
- unknown drag & drop sales funnel builder for wordpress, getwpfunnels drag \& drop sales funnel builder +1 moreWPFunnels < 2.6.9 - Contributor+ Stored XSS5.4 Medium
- unknown post category image with grid and slider, essentialplugin download post category image with grid and slider +1 morePost Category Image With Grid and Slider < 1.4.8 - Contributor+ Stored XSS via Shortcode5.4 Medium
- unknown wordpreziWordPrezi < 0.9 - Contributor+ Strored XSS5.4 Medium
- exactmetricsExactMetrics < 7.12.1 - Contributor+ Stored XSS5.4 Medium
- unknown vimeo video autoplay automute, vimeo video autoplay automute project video autoplay automute +1 moreVimeo Video Autoplay Automute <= 1.0 - Contributor+ Stored XSS5.4 Medium
- unknown pdf generator for wordpressPDF Generator for WordPress < 1.1.2 - Reflected XSS6.1 Medium
- unknown event manager and tickets selling plugin for woocommerce, mage-people event manager and tickets selling for woocommerce +1 moreEvent Manager and Tickets Selling Plugin for WooCommerce < 3.8.0 - Contributor+ Stored XSS5.4 Medium
- unknown wp show posts, wp show posts project show posts +1 moreWP Show Posts < 1.1.4 - Contributor+ Stored XSS5.4 Medium
- plugin yourchannel, unknown yourchannel: everything you want in a youtube plugin. +1 moreYourChannel < 1.2.2 - Subscriber+ Stored XSS5.4 Medium
- a3rev page view countPage View Count < 2.6.1 - Contributor+ Stored XSS5.4 Medium
- unknown ibtanaIbtana – WordPress Website Builder < 1.1.8.8 - Contributor+ Stored XSS via Shortcode5.4 Medium
- unknown gallery factory liteGallery Factory Lite <= 2.0.0 - Contributor+ Stored XSS5.4 Medium
- themeum tutor lmsTutor LMS < 2.0.10 - Reflected Cross-Site Scripting6.1 Medium
- unknown hide my wpHide My WP < 6.2.9 - Unauthenticated SQLi9.8 Critical
- codection clean loginClean Login < 1.13.7 - Contributor+ Stored XSS via Shortcode5.4 Medium
- plugin yourchannel, unknown yourchannel: everything you want in a youtube plugin. +1 moreYourChannel: Everything you want in a YouTube plugin < 1.2.3 - Contributor+ Stored XSS via Shortcode5.4 Medium
- Show moreLoading…