CVEs published in February 2023
2,729 vulnerabilities, 255 critical, 10 exploited.
- moxa sds-3008 series industrial ethernet switch, sds-3008-t firmware, sds-3008 firmware +2 moreA stored cross-site scripting vulnerability exists in the web application functionality of Moxa...4.3 Medium
- moxa sds-3008 series industrial ethernet switch, sds-3008-t firmware, sds-3008 firmware +2 moreA denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series...5.3 Medium
- moxa sds-3008 series industrial ethernet switch, sds-3008-t firmware, sds-3008 firmware +2 moreAn information disclosure vulnerability exists in the web application functionality of Moxa SDS...5.3 Medium
els-defineTuxCareUpdate of alt-phpNo scorelibgit2OSS-FuzzHeap-buffer-overflow in git_oid_raw_cmpNo scorekimageformatsOSS-FuzzIndex-out-of-bounds in LibRaw::apply_tiffNo score- medical certificate generator app project certificate generator app, sourcecodester medical certificate generator app +1 moreSourceCodester Medical Certificate Generator App function.php delete_record sql injection5.5 Medium
- custom-content-width project custom-content-widthCustom-Content-Width custom-content-width.php register_settings cross site scripting2.6 Low
- openseamap online chartOpenSeaMap online_chart index.php init cross site scripting3.5 Low
- dell command \| intel vpro out of band, command intel vpro out of band (dciv) +1 moreDell Command Intel vPro Out of Band, versions prior to 4.3.1, contain an Improper Authorization...7.0 High
- medical certificate generator app project certificate generator app, sourcecodester medical certificate generator app +1 moreSourceCodester Medical Certificate Generator App manage_record.php sql injection6.3 Medium
- nvidia geforce experienceNVIDIA GeForce Experience contains a vulnerability in the NVContainer component, where a user...5.0 Medium
- nvidia geforce experienceNVIDIA GeForce Experience contains an uncontrolled search path vulnerability in all its client...6.8 Medium
- nvidia geforce experienceNVIDIA GeForce Experience contains a vulnerability in the installer, where a user installing the...8.2 High
- anchore syftCredential disclosure in syft when SYFT_ATTEST_PASSWORD environment variable set in syft6.5 Medium
advancecompMageiaUpdated advancecomp packages fix security vulnerabilityNo scoretigervncMageiaUpdated tigervnc packages fix security vulnerabilityNo score- michaelrsweet pdfioDenial Of Service when opening a corrupt PDF file in pdfio5.3 Medium
- simple sales management system project sales management systemCross site scripting (XSS) vulnerability in sourcecodester oretnom23 sales management system 1.0,...6.1 Medium
- invoiceplaneCross Site Scripting (XSS) vulnerability in InvoicePlane 1.6 via filter_product input to file...6.1 Medium
- wallabag, wallabag wallabag/wallabag +1 moreCross-site Scripting (XSS) - Stored in wallabag/wallabag4.6 Medium
- wallabag, wallabag wallabag/wallabag +1 moreCross-Site Request Forgery (CSRF) in wallabag/wallabag6.5 Medium
- google chromeInteger overflow in Core in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who...7.5 High
- google chromeInsufficient policy enforcement in DevTools in Google Chrome prior to 110.0.5481.77 allowed a...6.5 Medium
- google chromeType confusion in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who...8.8 High
- google chromeType confusion in Data Transfer in Google Chrome prior to 110.0.5481.77 allowed a remote attacker...8.8 High
- google chromeHeap buffer overflow in WebUI in Google Chrome prior to 110.0.5481.77 allowed a remote attacker...8.8 High
- google chromeInappropriate implementation in Download in Google Chrome prior to 110.0.5481.77 allowed a remote...6.5 Medium
- google chromeUse after free in GPU in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to...8.8 High
- google chromeOut of bounds read in WebRTC in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to...8.8 High
- google chromeInappropriate implementation in Full screen mode in Google Chrome on Android prior to 110.0.5481...6.5 Medium
- google chromeType confusion in V8 in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to...8.8 High
- x.org x server, fedoraproject fedora, redhat enterprise linux +16 more +18 moreA vulnerability was found in X.Org. This issue occurs due to a dangling pointer in...7.8 High
- openssl, stormshield management center +1 moreNULL dereference during PKCS7 data verification7.5 High
- openssl, siemens bfcclient, ruggedcom ape1808 +9 more +11 moreX.400 address type confusion in X.509 GeneralName7.4 High
- opensslNULL dereference validating DSA public key7.5 High
- openssl, stormshield management center +1 moreInvalid pointer dereference in d2i_PKCS7 functions7.5 High
- openssl, siemens scalance w1750d (jp), scalance w1750d (row) +6 more +8 moreUse-after-free following BIO_new_NDEF7.5 High
- gnu less, fedoraproject fedora +1 moreIn GNU Less before 609, crafted data can result in "less -R" not filtering ANSI escape sequences...7.5 High
- zyxel nwa110ax firmware, nwa210ax firmware, wax510d firmware +3 more +5 moreAn improper check for unusual conditions in Zyxel NWA110AX firmware verisons prior to 6.50(ABTG.0...4.3 Medium
- edimax br-6428ns firmwareCommand Injection vulnerability in Edimax Technology Co., Ltd. Wireless Router N300 Firmware...8.8 High
- schlix cmsInsecure Permission vulnerability in Schlix Web Inc SCHLIX CMS 2.2.7-2 allows attacker to upload...8.8 High
- zyxel nbg-418n v2 firmware, nbg-418n firmware +1 moreA cross-site scripting (XSS) vulnerability in Zyxel NBG-418N v2 firmware versions prior to V1.00...6.1 Medium
- microchip rn4870 firmwareAn issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can...6.5 Medium
- microchip rn4870 firmwareAn issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can...6.5 Medium
- microchip rn4870 firmwareAn issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can...5.3 Medium
- openssl, siemens scalance w1750d (jp), scalance w1750d (row) +6 more +8 moreDouble free after calling PEM_read_bio_ex7.5 High
- openssl, siemens scalance w1750d (jp), scalance w1750d (row) +8 more +10 moreTiming Oracle in RSA Decryption5.9 Medium
- opensslX.509 Name Constraints Read Buffer Overflow4.9 Medium
- microchip dt100112 firmware, nordicsemi nrf5340-dk firmware +1 moreNordic Semiconductor, Microchip Technology NRF5340-DK DT100112 was discovered to contain an issue...6.5 Medium
- Show moreLoading…