CVEs published in February 2023
2,729 vulnerabilities, 255 critical, 10 exploited.
- marmelab ra-ui-materialui, react-admin +1 moreReact-Admin vulnerable to Cross-Site-Scripting attack on `<RichTextField>`5.4 Medium
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server vulnerable to SSRF via filter bypass due to lax checking on IPs5.3 Medium
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server's missing rate limiting on password reset functionality allows sending lots of emails3.7 Low
- nextcloud mail, kiteworks security-advisories +1 moreIDOR Vulnerability in Nextcloud Mail4.1 Medium
KernelLinuxipv6: raw: Deduct extension header length in rawv6_push_pending_framesNo scoreKernelLinuxnetfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.No scoreKernelLinuxnfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()No scoreKernelLinuxregulator: da9211: Use irq handler when readyNo scoreKernelLinuxusb: xhci: Check endpoint is valid before dereferencing itNo scoreKernelLinuxf2fs: let's avoid panic if extent_tree is not createdNo scoreKernelLinuxnilfs2: fix general protection fault in nilfs_btree_insert()No scoreKernelLinuxgsmi: fix null-deref in gsmi_get_variableNo scoreKernelLinuxusb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()No scoreKernelLinuxHID: intel_ish-hid: Add check for ishtp_dma_tx_mapNo scoreKernelLinuxEDAC/highbank: Fix memory leak in highbank_mc_probe()No scoreKernelLinuxnet: nfc: Fix use-after-free in local_cleanup()No scoreKernelLinuxwifi: rndis_wlan: Prevent buffer overflow in rndis_query_oidNo scoreKernelLinuxnet: mdio: validate parameter addr in mdiobus_get_phy()No scoreKernelLinuxusb: gadget: f_fs: Prevent race during ffs_ep0_queue_waitNo scoreKernelLinuxnet: mlx5: eliminate anonymous module_init & module_exitNo scoreKernelLinuxdmaengine: Fix double increment of client_count in dma_chan_get()No scoreKernelLinuxHID: betop: check shape of output reportsNo scoreKernelLinuxw1: fix WARNING after calling w1_process()No scoreKernelLinuxtracing: Make sure trace_printk() can output as soon as it can be usedNo scoreKernelLinuxnetrom: Fix use-after-free of a listening socket.No scoreKernelLinuxx86/i8259: Mark legacy PIC interrupts with IRQ_LEVELNo scoreKernelLinuxdrm/virtio: Fix GEM handle creation UAFNo scoreKernelLinuxipv6: raw: Deduct extension header length in rawv6_push_pending_framesNo scoreKernelLinuxnetfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.No scoreKernelLinuxnfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame()No scoreKernelLinuxregulator: da9211: Use irq handler when readyNo scoreKernelLinuxefi: fix NULL-deref in init error pathNo scoreKernelLinuxf2fs: let's avoid panic if extent_tree is not createdNo scoreKernelLinuxusb: xhci: Check endpoint is valid before dereferencing itNo scoreKernelLinuxAdd exception protection processing for vd in axi_chan_handle_err functionNo scoreKernelLinuxnilfs2: fix general protection fault in nilfs_btree_insert()No scoreKernelLinuxxhci: Fix null pointer dereference when host diesNo scoreKernelLinuxgsmi: fix null-deref in gsmi_get_variableNo scoreKernelLinuxusb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate()No scoreKernelLinuxHID: intel_ish-hid: Add check for ishtp_dma_tx_mapNo scoreKernelLinuxEDAC/highbank: Fix memory leak in highbank_mc_probe()No scoreKernelLinuxbpf: Fix pointer-leak due to insufficient speculative store bypass mitigationNo scoreKernelLinuxnet: nfc: Fix use-after-free in local_cleanup()No scoreKernelLinuxwifi: rndis_wlan: Prevent buffer overflow in rndis_query_oidNo scoreKernelLinuxnet: mdio: validate parameter addr in mdiobus_get_phy()No scoreKernelLinuxusb: gadget: f_fs: Prevent race during ffs_ep0_queue_waitNo scoreKernelLinuxnet: mlx5: eliminate anonymous module_init & module_exitNo scoreKernelLinuxdmaengine: Fix double increment of client_count in dma_chan_get()No scoreKernelLinuxHID: betop: check shape of output reportsNo scoreKernelLinuxw1: fix WARNING after calling w1_process()No score- Show moreLoading…