CVEs published in February 2023
2,729 vulnerabilities, 255 critical, 10 exploited.
- struktur libde265, debian linux +1 morelibde265 v1.0.10 was discovered to contain a NULL pointer dereference in the...5.5 Medium
- struktur libde265, debian linux +1 morelibde265 v1.0.10 was discovered to contain a NULL pointer dereference in the...5.5 Medium
- struktur libde265, debian linux +1 morelibde265 v1.0.10 was discovered to contain a NULL pointer dereference in the...5.5 Medium
- struktur libde265, debian linux +1 morelibde265 v1.0.10 was discovered to contain a NULL pointer dereference in the mc_chroma function...6.5 Medium
- dlink dir-605l firmwareD-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the...9.8 Critical
- dlink dir-605l firmwareD-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the...9.8 Critical
- dlink dir-605l firmwareD-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the...9.8 Critical
- dlink dir-605l firmwareD-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the...9.8 Critical
- dlink dir-605l firmwareD-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the...9.8 Critical
- dlink dir-605l firmwareD-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the...8.8 High
- dlink dir-605l firmwareD-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the...8.8 High
- dlink dir-605l firmwareD-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the...8.8 High
- dlink dir-605l firmwareD-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the...8.8 High
- dlink dir-605l firmwareD-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the...8.8 High
- inventory management system project management systemA stored cross-site scripting (XSS) vulnerability in the component php-inventory-management...4.8 Medium
- inventory management system project management systemA stored cross-site scripting (XSS) vulnerability in the component /php-inventory-management...4.8 Medium
- inventory management system project management systemA stored cross-site scripting (XSS) vulnerability in the component /php-inventory-management...4.8 Medium
- inventory management system project management systemA stored cross-site scripting (XSS) vulnerability in the component /php-inventory-management...4.8 Medium
- formwork project formworkFormwork Cross-site Scripting (XSS) from Page title field4.8 Medium
- farsight provide serverCross Site Scripting (XSS) vulnerability in Provide server 14.4 allows attackers to execute...6.1 Medium
- phpgurukul art gallery management systemArt Gallery Management System Project v1.0 was discovered to contain a SQL injection...9.8 Critical
- phpgurukul art gallery management systemArt Gallery Management System Project v1.0 was discovered to contain a SQL injection...9.8 Critical
- phpgurukul art gallery management systemA reflected cross-site scripting (XSS) vulnerability in Art Gallery Management System Project v1...6.1 Medium
- modoboa, modoboa modoboa/modoboa +1 moreAuthentication Bypass by Primary Weakness in modoboa/modoboa8.6 High
- ampache, ampache ampache/ampache +1 moreSQL Injection in ampache/ampache7.2 High
- struktur libde265Libde265 1.0.9 has a heap buffer overflow vulnerability in de265_image::set_SliceAddrRS(int, int,...7.8 High
- struktur libde265Libde265 1.0.9 is vulnerable to Buffer Overflow in ff_hevc_put_hevc_qpel_pixels_8_sse7.8 High
- sierrawireless aleosAcemanager in ALEOS before version 4.16 allows a user with valid credentials to reconfigure the...4.9 Medium
- sierrawireless aleosAcemanager in ALEOS before version 4.16 allows a user with valid credentials to manipulate the IP...8.8 High
- keystorage global facilities management softwareHardcoded credentials in Global Facilities Management Software (GFMS) Version 3 software...9.1 Critical
- apsystems ecu-r firmwareCommand injection in the administration interface in APSystems ECU-R version 5203 allows a remote...9.8 Critical
- averydennison monarch printer m9855 firmwareAvery Dennison Monarch Printer M9855 is vulnerable to Cross Site Scripting (XSS).6.1 Medium
- elwsc kasago ipv4, kasago ipv4 light, kasago ipv6\/v4 dual +2 more +4 moreKASAGO TCP/IP stack provided by Zuken Elmic generates ISNs(Initial Sequence Number) for TCP...9.1 Critical
- postgresql, fedoraproject fedora, redhat enterprise linux +3 more +5 moreIn PostgreSQL, a modified, unauthenticated server can send an unterminated string during the...3.7 Low
tzdataTuxCare,tzdata-javaTuxCare +1 moreUpdate of tzdataNo scoretzdataTuxCare,tzdata-javaTuxCare +1 moreUpdate of tzdataNo score- orangelab imagemagick engineImageMagick Engine <= 1.7.5 - Cross-Site Request Forgery to PHAR Deserialization8.8 High
tzdataTuxCare,tzdata-javaTuxCare +1 moreUpdate of tzdataNo scoretzdataTuxCare,tzdata-javaTuxCare +1 moreUpdate of tzdataNo score- dimtion shaarlierdimtion Shaarlier Tag TagsSource.java createTag sql injection5.5 Medium
- ipfs go-unixfsDenial of service in HAMT Decoding in go-unixfs5.9 Medium
- ipfs go-bitfieldDenial of service when feeding malformed size arguments in go-bitfield5.9 Medium
- johnson controls system configuration tool (sct), johnsoncontrols metasys system configuration tool +1 moreSensitive Cookie in HTTPS Session Without 'Secure' Attribute in System Configuration Tool (SCT)7.5 High
- johnson controls system configuration tool (sct), johnsoncontrols metasys system configuration tool +1 moreSensitive cookie without 'HttpOnly' flag in System Configuration Tool (SCT)7.5 High
- ipfs go-unixfsnodeHAMT Decoding Panics in github.com/ipfs/go-unixfsnode5.9 Medium
bottlerocket/update-operatorcrates.iobottlerocket dependency openssl is vulnerable to dereferenced null pointersNo scorebottlerocket/update-operatorcrates.iobottlerocket dependency openssl has a double free vulnerabilityNo scorebottlerocket/update-operatorcrates.iobottlerocket dependency openssl has a double free vulnerabilityNo scorebottlerocket/update-operatorcrates.iobottlerocket dependency openssl is vulnerable to read buffer overflow via X.509 verificationNo scorebottlerocket/update-operatorcrates.iobottlerocket dependency openssl provides streaming of ASN.1 data via a BIONo score- Show moreLoading…