CVEs published in February 2023
2,729 vulnerabilities, 255 critical, 10 exploited.
- libtiffLibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers...6.8 Medium
- libtiffLibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools...6.8 Medium
- libtiffLibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers...6.8 Medium
- libtiffLibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers...6.8 Medium
- libtiffLibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers...6.8 Medium
- libtiffLibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools...6.8 Medium
- libtiffLibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers...6.8 Medium
- libtiffLibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers...6.8 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 before 15...4.3 Medium
- sunlogin sunflowerSunlogin Sunflower Simplified (aka Sunflower Simple and Personal) 1.0.1.43315 is vulnerable to a...9.8 Critical
- netgear mr60 firmware, ms60 firmware, r6900p firmware +3 more +5 moreNETGEAR Nighthawk WiFi Mesh systems and routers are affected by a stack-based buffer overflow...9.8 Critical
- ckeditorCross-site scripting in CKEditor56.1 Medium
- genymotion desktopGenymotion Desktop v3.3.2 was discovered to contain a DLL hijacking vulnerability that allows...7.8 High
- playsmsA type juggling vulnerability in the component /auth/fn.php of PlaySMS v1.4.5 and earlier allows...9.8 Critical
- os4ed opensisOpen Solutions for Education, Inc openSIS Community Edition v8.0 and earlier is vulnerable to SQL...6.5 Medium
- comfast cf-wr610n firmwareImproper Input Validation in Comfast router CF-WR6110N V2.3.1 allows a remote attacker on the...8.8 High
- comfast cf-wr610n firmwareIncorrect Access Control in Comfast router CF-WR6110N V2.3.1 allows a remote attacker on the same...5.4 Medium
- vsourz advanced cf7 dbVsourz Digital Advanced Contact form 7 DB Versions 1.7.2 and 1.9.1 is vulnerable to Cross Site...6.1 Medium
- fujifilm driver distributorDriver Distributor v2.2.3.1 and earlier contains a vulnerability where passwords are stored in a...7.5 High
- gitlabA Cross Site Request Forgery issue has been discovered in GitLab CE/EE affecting all versions...6.4 Medium
- microchip syncserver s650 firmwareMicrochip Technology (Microsemi) SyncServer S650 was discovered to contain a command injection...9.8 Critical
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 14.3 before 15...4.3 Medium
- gitlabA lack of length validation in GitLab CE/EE affecting all versions from 12.4 before 15.6.7, 15.7...6.5 Medium
- kong lua-multipart, konghq multipart +1 moreKong lua-multipart multipart.lua is_header redos3.5 Low
- khanacademy simple-markdownsimple-markdown simple-markdown.js redos4.3 Medium
- khanacademy simple-markdownsimple-markdown simple-markdown.js redos4.3 Medium
- atwellpub resend welcome email plugin, resend welcome email project welcome email +1 moreatwellpub Resend Welcome Email Plugin resend-welcome-email.php send_welcome_email_url cross site scripting3.5 Low
- mayurik best online news portalSourceCodester Best Online News Portal check_availability.php information exposure3.7 Low
- mayurik best online news portalSourceCodester Best Online News Portal Login Page sql injection7.3 High
- cisco iox, 807 industrial integrated services router firmware, 809 industrial integrated services router firmware +7 more +9 moreCisco IOx Application Hosting Environment Command Injection Vulnerability7.2 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaq8.3 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreWeak Password Requirements in thorsten/phpmyfaq7.1 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCode Injection in thorsten/phpmyfaq6.5 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaq8.3 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreUncaught Exception in thorsten/phpmyfaq7.6 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCommand Injection in thorsten/phpmyfaq8.1 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCode Injection in thorsten/phpmyfaq8.1 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Generic in thorsten/phpmyfaq8.1 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Generic in thorsten/phpmyfaq8.4 High
- shopex ecshopEcShop PHP File template.php unrestricted upload4.7 Medium
- tenda ac23, ac23 firmware +1 moreTenda AC23 httpd formGetSysToolDDNS out-of-bounds write7.2 High
- canteen management system project management system, sourcecodester canteen management system +1 moreSourceCodester Canteen Management System removeOrder.php query sql injection6.3 Medium
cacheable-requestRoot,@rootio/cacheable-requestRoot +1 moreWithdrawn: cacheable-request depends on http-cache-semantics, which is vulnerable to Regular Expression Denial of Service7.5 High- agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 moreImproper Restriction of Rendered UI Layers or Frames in cockpit-hq/cockpit4.0 Medium
- dlink dwl-2600ap firmwareA command injection vulnerability in the firmware_update command, in the device's restricted...7.8 High
- cisco firepower threat defense software, utd snort ips engine software +1 moreMultiple Cisco products are affected by a vulnerability in the Snort detection engine that could...5.8 Medium
- ls1intum artemis java test sandboxArtemis Java Test Sandbox Libary Load Escape8.2 High
- datahubServer-Side Request Forgery in DataHub7.5 High
- datahub-project datahubDeserialization of untrusted data in DataHub7.5 High
- datahubSystem account impersonation in DataHub8.2 High
- Show moreLoading…