CVEs published in February 2023
2,729 vulnerabilities, 255 critical, 10 exploited.
- croover rich table of contentsRich Table of Contents < 1.3.9 - Contributor+ Stored XSS5.4 Medium
- templatesnext toolkit, unknown templatesnext toolkit +1 moreTemplatesNext ToolKit < 3.2.8 - Contributor+ Stored XSS via Shortcode5.4 Medium
- responsive gallery grid project gallery grid, unknown responsive gallery grid +1 moreResponsive Gallery Grid < 2.3.9 - Contributor+ Stored XSS5.4 Medium
- getlasso simple urlsSimple URLs < 115 - Multiple Reflected XSS6.1 Medium
- scott paterson easy paypal buy now buttonEasy PayPal Buy Now Button < 1.7.4 - Contributor+ Stored XSS in Shortcode5.4 Medium
- givewpGiveWP < 2.24.0 - Contributor+ Stored XSS5.4 Medium
- nenad-obradovic extensive vc addons for wpbakery page builderExtensive VC Addons for WPBakery page builder < 1.9.1 - Unauthenticated RCE7.5 High
- unknown yamaps for wordpress plugin, yamaps project yamaps +1 moreYaMaps for WordPress Plugin < 0.6.26 - Contributor+ Stored XSS5.4 Medium
- themify portfolio post, themifyme themify portfolio post +1 moreThemify Portfolio Post < 1.2.2 - Contributor+ Stored XSS5.4 Medium
- unknown youtube channel gallery, youtube channel gallery project channel gallery +1 moreYoutube Channel Gallery <= 2.4 - Contributor+ Stored XSS via Shortcode5.4 Medium
- armandofiore fl3r feelboxFL3R FeelBox <= 8.1 - Unauthenticated SQLi9.8 Critical
- rebelcode spotlight social feeds, unknown spotlight social feeds [block, shortcode, and widget] +1 moreSpotlight Social Feeds < 1.4.3 - Contributor+ Stored XSS5.4 Medium
- unknown widget shortcode, widget shortcode project shortcode +1 moreWidget Shortcode <= 0.3.5 - Contributor+ Stored XSS5.4 Medium
cortex-m-rtcrates.ioMiscompilation in cortex-m-rt 0.7.1 and 0.7.2No score- bosswerk inverter, inverter firmware +1 moreDeye/Revolt/Bosswerk Inverter Access Point Setting hard-coded password3.9 Low
- acronis agent, cyber protect 15, cyber protect home office +1 more +3 moreLocal privilege escalation due to incomplete uninstallation cleanup. The following products are...6.6 Medium
- acronis agent, cyber protect 15, cyber protect +2 moreSensitive information disclosure due to insecure folder permissions. The following products are...2.2 Low
- dell unisphere for powermax, evasa provider virtual appliance, solutions enabler virtual appliance +1 more +3 moreDell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 10.0.0.5...6.9 Medium
- dell command \| intel vpro out of band, command update (dcu) +1 moreDell Command | Intel vPro Out of Band, versions before 4.4.0, contain an arbitrary folder delete...4.7 Medium
- dell command \| integration suite for system center, command integration suite for system center (dcis) +1 moreDell Command | Integration Suite for System Center, versions before 6.4.0 contain an arbitrary...4.7 Medium
- glance project glancePath traversal vulnerability in glance6.5 Medium
- phpmyadminCross-site Scripting vulnerability in drag-and-drop upload of phpMyAdmin5.4 Medium
- connectwise controlConnectWise Control before 22.9.10032 (formerly known as ScreenConnect) fails to validate user...8.8 High
- connectwise controlThe cryptographic code signing process and controls on ConnectWise Control through 22.9.10032 ...9.8 Critical
- ruckuswireless ruckus wireless admin, commscope ruckus smartzone firmware, ruckus wireless multiple products +1 more +3 moreRuckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET...9.8 Critical
- bgerpbgERP v22.31 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via...6.1 Medium
- pimcoreSameSite Attribute vulnerability in pimCore8.8 High
- zippy zstoreZstore v6.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the...6.1 Medium
- oretnom23 online food ordering systemFood Ordering System v2.0 was discovered to contain a SQL injection vulnerability via the email...7.5 High
- oretnom23 online food ordering systemAn arbitrary file upload vulnerability in the component /fos/admin/ajax.php of Food Ordering...9.8 Critical
- redpandaRedpanda before 22.3.12 discloses cleartext AWS credentials. The import functionality in the rpk...5.5 Medium
- ureport project ureportArbitrary file deletion in ureport9.1 Critical
- slims project slimsSLIMS v9.5.2 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via...6.1 Medium
- chikoi project chikoiChiKoi v1.0 was discovered to contain a SQL injection vulnerability via the load_file function.9.8 Critical
- mitel micontact center businessThe ccmweb component of Mitel MiContact Center Business server 9.2.2.0 through 9.4.1.0 could...7.5 High
- ichiranusa ichiran, betrend corporation and ichiran inc. ichiran app for ios and ichiran app for android +1 moreIchiran App for iOS versions prior to 3.1.0 and Ichiran App for Android versions prior to 3.1.0...5.9 Medium
- akindo sushiro co., ltd. sushiro app for android, akindo-sushiro hong kong sushiro, singapore sushiro +3 more +5 moreSUSHIRO App for Android outputs sensitive information to the log file, which may result in an...7.5 High
- jtekt screen creator advance 2Use-after free vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier...7.8 High
- jtekt screen creator advance 2Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and...7.8 High
- jtekt screen creator advance 2Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and...7.8 High
- jtekt screen creator advance 2Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and...7.8 High
- jtekt screen creator advance 2Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and...7.8 High
- jtekt screen creator advance 2Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and...7.8 High
- jtekt screen creator advance 2Out-of-bound write vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and...7.8 High
- gpac, gpac gpac/gpac +1 moreHeap-based Buffer Overflow in gpac/gpac7.8 High
- gpac, gpac gpac/gpac +1 moreOff-by-one Error in gpac/gpac7.1 High
- gpac, gpac gpac/gpac +1 moreBuffer Over-read in gpac/gpac7.3 High
- btcpayserver, btcpayserver btcpayserver/btcpayserver +1 moreCross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver8.8 High
- libtiffLibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers...6.8 Medium
- libtiffLibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers...6.8 Medium
- Show moreLoading…