CVEs published in February 2023
2,729 vulnerabilities, 255 critical, 10 exploited.
- delta electronics diascreenCVE-2023-02507.8 High
- delta electronics diascreenCVE-2023-02497.8 High
- argoproj argo cd, argo-cd +1 moreArgo CD leaks repository credentials in user-facing error messages and in logs6.3 Medium
- discourseRegular expression denial of service via installing themes via git in discourse6.5 Medium
- ibm mqIBM MQ information disclosure4.0 Medium
- awordpresslife formulaRegular Expression Denial of Service (ReDoS) Vulnerability5.5 Medium
- group arge energy and control systems smartpower webCross-site Scripting in Smartpower Web5.4 Medium
- freebsdGELI silently omits the keyfile if read from stdin6.5 Medium
- open-telemetry opentelemetry-go-contrib, linuxfoundation opentelemetry-go contrib +1 moreDoS vulnerability for high cardinality metrics in opentelemetry-go-contrib7.5 High
- group arge energy and control systems smartpower webSQL Injection in Smartpower Web8.8 High
- group arge energy and control systems smartpower webSQL Injection in Smartpower Web8.8 High
- nextcloud richdocuments, kiteworks security-advisories +1 moreDocument content of files can be obtained through Collabora for files of other users5.8 Medium
- ibm api connectIBM API Connect security bypass5.3 Medium
- helmgetHostByName Function Information Disclosure4.3 Medium
- ibm cloud pak for multicloud management monitoringIBM Cloud Pak for Multicloud Management Monitoring privilege escalation7.5 High
- group arge energy and control systems smartpower webLocal File Inclusion in Smartpower Web9.8 Critical
- ibm elastic storage system, spectrum scale +1 moreIBM Spectrum Scale denial of service6.5 Medium
- group arge energy and control systems smartpower webCross-site Scripting in Smartpower Web6.1 Medium
- ibm sterling secure proxyIBM Sterling Secure Proxy HOST header injection4.6 Medium
- hashicorp boundaryBoundary Workers Store Rotated Credentials in Plaintext Even When a Key Management Service Configured5.0 Medium
- group arge energy and control systems smartpower webCross-site Scripting in Smartpower Web5.4 Medium
- ibm sterling external authentication server, sterling secure proxy +1 moreIBM Sterling External Authentication Server information disclosure2.3 Low
- pterodactyl wingsSymbolic Link (Symlink) Following in github.com/pterodactyl/wings8.4 High
- tinacms, ssw tinacms\/cli +1 moreSensitive Information leak via Script File in TinaCMS8.6 High
ckbcrates.ioNervos CKB vulnerable to low-resource flood DDoS attacks through network messageNo scoreckbcrates.ioNervos CKB calculation of program load cycles may be missed when executing in resume modeNo score- ibm infosphere information serverIBM Infosphere Information Server cross-site scripting4.6 Medium
- mrpack-install project mrpack-installmrpack-install vulnerable to path traversal with dependency7.8 High
- palo alto networks cortex xsoar, fedoraproject fedora +1 moreCortex XSOAR: Local File Disclosure Vulnerability in the Cortex XSOAR Server6.5 Medium
- palo alto networks cortex xdr agentCortex XDR Agent: Product Disruption by Local Windows User5.5 Medium
- palo alto networks cortex xdr agentCortex XDR Agent: Cleartext Exposure of Agent Admin Password6.0 Medium
- group arge energy and control systems smartpower webServer-Side Request Forgery in Smartpower Web6.5 Medium
- seosamba, seosamba for wordpress webmasters +1 moreWordPress SeoSamba for WordPress Webmasters Plugin <= 1.0.5 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- netatalkThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...9.8 Critical
- b&r industrial automation aprol, br-automation industrial automation aprol +1 moreDoS in APROLs Tbase server7.5 High
- b&r industrial automation aprol, br-automation industrial automation aprol +1 moreBuffer overflow when changing configuration on Tbase Server9.8 Critical
- b&r industrial automation aprol, br-automation industrial automation aprol +1 moreLack of checking preconditions in APROL7.5 High
- b&r industrial automation aprol, br-automation industrial automation aprol +1 moreMemory leak when receiving messages in APROL Tbase server7.5 High
- b&r industrial automation aprol, br-automation industrial automation aprol +1 moreLack of authentication when managing APROL database9.4 Critical
- unknown yellow yard searchbarYellow Yard Searchbar < 2.8.2 - Reflected Cross-Site Scripting6.1 Medium
- wickedplugins wicked folders, wicked folders – folder organizer for pages, posts, and custom post types +1 moreWicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_edit_folder5.4 Medium
- wickedplugins wicked folders, wicked folders – folder organizer for pages, posts, and custom post types +1 moreWicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_state5.4 Medium
- wickedplugins wicked folders, wicked folders – folder organizer for pages, posts, and custom post types +1 moreWicked Folders <= 2.18.16 - Missing Authorization via ajax_unassign_folders5.4 Medium
- wickedplugins wicked folders, wicked folders – folder organizer for pages, posts, and custom post types +1 moreWicked Folders <= 2.18.16 - Missing Authorization on ajax_clone_folder5.4 Medium
- wickedplugins wicked folders, wicked folders – folder organizer for pages, posts, and custom post types +1 moreWicked Folders <= 2.18.16 - Missing Authorization via ajax_save_state5.4 Medium
- wickedplugins wicked folders, wicked folders – folder organizer for pages, posts, and custom post types +1 moreWicked Folders <= 2.18.16 - Missing Authorization via ajax_delete_folder5.4 Medium
- wickedplugins wicked folders, wicked folders – folder organizer for pages, posts, and custom post types +1 moreWicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_clone_folder5.4 Medium
- wickedplugins wicked folders, wicked folders – folder organizer for pages, posts, and custom post types +1 moreWicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_add_folder5.4 Medium
- wickedplugins wicked folders, wicked folders – folder organizer for pages, posts, and custom post types +1 moreWicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_unassign_folders5.4 Medium
- wickedplugins wicked folders, wicked folders – folder organizer for pages, posts, and custom post types +1 moreWicked Folders <= 2.18.16 - Missing Authorization on ajax_save_folder_order5.4 Medium
- Show moreLoading…