CVEs published in February 2023
2,729 vulnerabilities, 255 critical, 10 exploited.
- eclipse vert.x-web, vert-x3 vertx-web +1 moreDisclosure of classpath resources on Windows when mounted on a wildcard route in vertx-web4.8 Medium
- yugabyte yugabytedbRemote Code Execution7.2 High
- yugabytedb anywhere, yugabyte yugabytedb managed +1 moreArbitrary File Write in High Availability Backup Upload6.7 Medium
- yugabyte yugabytedb managed, yugabytedb anywhere +1 moreServer-Side Request Forgery6.8 Medium
- glorylion jfinaloaglorylion JFinalOA SysOrg.java sql injection6.3 Medium
- group arge energy and control systems smartpower web, gruparge smartpower +1 moreSQL Injection in Smartpower Web9.8 Critical
- checkmkPrivilege escalation via manipulated unixcat executable8.8 High
- qualcomm aqt1000 firmware, ar8031 firmware, ar8035 firmware +226 more +228 moreBuffer copy without checking size of input in WLAN Firmware9.8 Critical
- qualcomm csr8811 firmware, ipq5010 firmware, ipq5018 firmware +57 more +59 moreUncontrolled resource consumption in WLAN Firmware.7.5 High
- qualcomm apq8009 firmware, apq8017 firmware, apq8064au firmware +293 more +295 moreBuffer over-read in WLAN Firmware.7.5 High
- qualcomm csr8811 firmware, ipq5010 firmware, ipq5018 firmware +94 more +96 moreImproper input validation in WLAN Host7.5 High
- qualcomm csr8811 firmware, ipq5010 firmware, ipq5018 firmware +95 more +97 moreImproper input validation in WLAN Host7.5 High
- qualcomm csr8811 firmware, ipq5010 firmware, ipq5018 firmware +92 more +94 moreBuffer over-read in WLAN Host7.5 High
- qualcomm ar8035 firmware, ar9380 firmware, csr8811 firmware +129 more +131 moreBuffer over-read in WLAN7.5 High
- qualcomm ar9380 firmware, csr8811 firmware, ipq4019 firmware +72 more +74 moreStack based buffer overflow in WLAN9.8 Critical
- qualcomm aqt1000 firmware, ar8031 firmware, ar8035 firmware +241 more +243 moreBuffer copy without checking size of input in modem8.4 High
- qualcomm apq8096au firmware, aqt1000 firmware, ar8031 firmware +243 more +245 moreBuffer over-read in WLAN8.2 High
- qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +160 more +162 moreInteger overflow to buffer overflow in User Identity Module7.8 High
- qualcomm apq8096au firmware, aqt1000 firmware, msm8996au firmware +40 more +42 moreUse of out-of-range pointer offset in Audio6.7 Medium
- qualcomm apq8009 firmware, apq8009w firmware, apq8017 firmware +199 more +201 moreConfiguration weakness in modem7.8 High
- qualcomm aqt1000 firmware, ar8035 firmware, qam8295p firmware +109 more +111 moreBuffer copy without checking size of input in Hypervisor9.3 Critical
- qualcomm ar8031 firmware, csra6620 firmware, csra6640 firmware +19 more +21 moreBuffer over-read in Modem8.2 High
- qualcomm sd 8 gen1 5g firmware, ssg2115p firmware, ssg2125p firmware +12 more +14 moreBuffer over-read in Trusted Execution Environment6.8 Medium
- qualcomm qam8295p firmware, qca6574a firmware, qca6574au firmware +16 more +18 moreImproper Input Validation in Automotive6.0 Medium
- qualcomm ar8031 firmware, csra6620 firmware, csra6640 firmware +33 more +35 moreBuffer Over-read in MODEM8.2 High
- qualcomm ar8031 firmware, csra6620 firmware, csra6640 firmware +32 more +34 moreNull Pointer Dereference in MODEM7.5 High
- qualcomm ar8031 firmware, csra6620 firmware, csra6640 firmware +33 more +35 moreLoop with Unreachable Exit Condition in MODEM7.5 High
- qualcomm ar8031 firmware, csra6620 firmware, csra6640 firmware +33 more +35 moreNull Pointer Dereference in MODEM7.5 High
- qualcomm ar8031 firmware, csra6620 firmware, csra6640 firmware +31 more +33 moreBuffer Over-read in MODEM8.2 High
- qualcomm ar8031 firmware, csra6620 firmware, csra6640 firmware +28 more +30 moreImproper Input Validation in MODEM9.8 Critical
- qualcomm ar8031 firmware, csra6620 firmware, csra6640 firmware +32 more +34 moreBuffer Over-read in MODEM8.2 High
- churchcrmChurchCRM 4.5.3 and below was discovered to contain a stored cross-site scripting (XSS)...5.4 Medium
- mojoportalAn issue in Mojoportal v2.7.0.0 and below allows an authenticated attacker to list all css files...4.3 Medium
- mojoportalAn issue in Mojoportal v2.7.0.0 allows an unauthenticated attacker to register a new user even if...5.3 Medium
- mojoportalMojoportal v2.7.0.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability...5.4 Medium
- churchcrmAn issue in the CSV Import function of ChurchCRM v4.5.3 and below allows attackers to execute...4.8 Medium
- churchcrmChurchCRM v4.5.3 and below was discovered to contain a SQL injection vulnerability via the Event...7.2 High
- churchcrmChurchCRM v4.5.3 and below was discovered to contain a SQL injection vulnerability via the EID...7.2 High
- mojoportalMojoportal v2.7 was discovered to contain an authenticated XML external entity (XXE) injection...8.8 High
- mojoportalA reflected cross-site scripting (XSS) vulnerability in the FileDialog.aspx component of...6.1 Medium
- ui er-10x firmware, er-12 firmware, er-12p firmware +7 more +9 moreA vulnerability, found in EdgeRouters Version 2.0.9-hotfix.5 and earlier and UniFi Security...8.8 High
- wallix bastion access managerWALLIX Access Manager 3.x through 4.0.x allows a remote attacker to access sensitive information.7.5 High
- expressionengineIn ExpressionEngine before 7.2.6, remote code execution can be achieved by an authenticated...8.8 High
- brave adblock-listsPrior to commit 51867e0d15a6d7f80d5b714fd0e9976b9c160bb0, https://github.com/brave/adblock-lists...6.1 Medium
- samsung android, samsung mobile devices +1 moreA Stack-based overflow vulnerability in IpcRxEmbmsSessionList in SECRIL prior to Android S(12)...6.7 Medium
- samsung mobile one hand operation +, samsung one hand operation \+ +1 moreMissing Authorization vulnerability in One Hand Operation + prior to version 6.1.21 allows multi...2.3 Low
- samsung cloudPath traversal vulnerability in Samsung Cloud prior to version 5.3.0.32 allows attacker to access...5.7 Medium
- samsung cloudImproper access control vulnerabilities in Samsung Cloud prior to version 5.3.0.32 allows local...4.0 Medium
- samsung android, samsung mobile myfiles +1 moreImproper input validation in MyFiles prior to version 12.2.09 in Android R(11), 13.1.03.501 in...6.2 Medium
- samsung android, samsung mobile the patch adds proper access control to use explicit intent. +1 moreImproper access control vulnerability in MyFiles prior to versions 12.2.09 in Android R(11), 13.1...5.5 Medium
- Show moreLoading…