CVEs published in February 2023
2,729 vulnerabilities, 255 critical, 10 exploited.
- siemens jt open, jt utilities, jt open toolkit +2 moreA vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All...7.8 High
- siemens jt open, jt utilities, parasolid +5 more +7 moreA vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All...7.8 High
- siemens tia multiuser server v14, tia multiuser server v15, tia project-server +3 more +5 moreA vulnerability has been identified in TIA Multiuser Server V14 (All versions), TIA Multiuser...6.7 Medium
- siemens sipass integrated ac5102 (acc-g2), sipass integrated acc-ap, sipass integrated ac5102 \(acc-g2\) firmware +1 more +3 moreA vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V2.85.44...7.8 High
- djangoproject django, debian linux +1 moreResource exhaustion in Django7.5 High
- foliovision fv flowplayer video player, fv flowplayer video player flowplayer video player +1 moreWordPress FV Flowplayer Video Player Plugin <= 7.5.30.7212 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- orchestrated corona virus (covid-19) banner & live data, corona virus \(covid-19\) banner \& live data +1 moreWordPress Corona Virus (COVID-19) Banner & Live Data Plugin <= 1.7.0.6 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- sap netweaver as abap (bsp framework), netweaver application server abap +1 moreSAP NetWeaver AS ABAP (BSP Framework) application - versions 700, 701, 702, 731, 740, 750, 751,...6.1 Medium
- sap businessobjects business intelligence platform (cmc), businessobjects business intelligence platform +1 moreSAP BusinessObjects Business Intelligence Platform (CMC) - versions 420, 430, allows an...8.4 High
- sap netweaver as abap (business server pages application), netweaver as abap business server pages +1 moreDue to lack of proper input validation, BSP application (CRM_BSP_FRAME) - versions 700, 701, 702,...6.1 Medium
- sap fiori, fiori apps 1.0 for travel management in sap erp (my travel requests) +1 moreSAP Fiori apps for Travel Management in SAP ERP (My Travel Requests) - version 600, allows an...6.5 Medium
- sap s4fnd, crm (webclient ui), customer relationship management webclient ui +2 moreSAP CRM WebClient UI - versions WEBCUIF 748, 800, 801, S4FND 102, 103, does not sufficiently...4.3 Medium
- sap s/4 hana (map treasury correspondence format data), s\/4hana +1 moreSAP S/4 HANA Map Treasury Correspondence Format Data does not perform necessary authorization...6.5 Medium
- sap host agent, host agent service +1 moreAn attacker authenticated as a non-admin user with local access to a server port assigned to the...8.8 High
- sap netweaver as abap (bsp framework), netweaver application server abap +1 moreDue to insufficient input sanitization, SAP NetWeaver AS ABAP (Business Server Pages) - versions...6.1 Medium
- sap netweaver as abap (bsp framework), netweaver as abap business server pages +1 moreDue to insufficient input sanitization, SAP NetWeaver AS ABAP (BSP Framework) - versions 700, 701...6.1 Medium
- sap netweaver as for abap and abap platform, netweaver application server abap +1 moreSAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756,...6.1 Medium
- sap netweaver as for abap and abap platform, netweaver application server abap +1 moreSAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756,...6.1 Medium
- sap se netweaver as for abap and abap platform, sap netweaver application server abap +1 moreDue to insufficient input validation, SAP NetWeaver AS for ABAP and ABAP Platform - versions 740,...6.1 Medium
- sap business objects business intelligence platform, sap se businessobjects business intelligence (web intelligence ui) +1 moreIn SAP BusinessObjects Business Intelligence (Web Intelligence user interface) - version 430,...4.3 Medium
- sap solution managerSAP Solution Manager - version 720, allows an authenticated attacker to redirect users to a...6.5 Medium
- sap netweaver as abap and abap platform, netweaver application server abap +1 moreSAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740,...3.8 Low
- sap netweaver application server for abap and abap platform, netweaver application server abap +1 moreAn unauthenticated attacker in AP NetWeaver Application Server for ABAP and ABAP Platform -...6.1 Medium
- sap solution managerSAP Solution Manager (System Monitoring) - version 720, does not sufficiently encode user...6.1 Medium
- sap business planning and consolidationSAP Business Planning and Consolidation - versions 200, 300, allows an attacker with business...5.4 Medium
- sap solution manager (bsp application), solution manager +1 moreSAP Solution Manager (BSP Application) - version 720, allows an authenticated attacker to craft a...6.5 Medium
- sap solution manager (bsp application), solution manager +1 moreSAP Solution Manager (BSP Application) - version 720, allows an authenticated attacker to craft a...6.5 Medium
- sap businessobjects business intelligence platformSAP BusinessObjects Business Intelligence platform - versions 420, 430, allows an authenticated...8.5 High
- sap se grc (process control), sap grc process control +1 moreIn SAP GRC (Process Control) - versions GRCFND_A V1200, GRCFND_A V8100, GRCPINW V1100_700,...6.5 Medium
- cozmoslabs profile builder, user profile builder – beautiful user registration forms, user profiles & user role editor +1 moreProfile Builder – User Profile & User Registration Forms <= 3.9.0 - Sensitive Information Disclosure via Shortcode6.5 Medium
sgx-dcap-quote-verify-pythonPyPIVulnerable OpenSSL included in sgx-dcap-quote-verify-pythonNo score- onekey mini firmware, touch firmware +1 moreOnekey Touch devices through 4.0.0 and Onekey Mini devices through 2.10.0 allow man-in-the-middle...4.2 Medium
- haproxy, debian linux +1 moreHAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are...9.1 Critical
- ureport project ureportXML External Entity Reference in ureport7.8 High
- totolink ca300-poe firmwareTOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the...9.8 Critical
- totolink ca300-poe firmwareTOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the...9.8 Critical
- totolink ca300-poe firmwareTOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the...9.8 Critical
- southrivertech titan ftp serverAn issue was discovered in TitanFTP through 1.94.1205. The move-file function has a path...8.8 High
- planex communications inc. wired/wireless lan pan/tilt network camera cs-wmv02g, planex cs-wmv02g firmware +1 more** UNSUPPORTED WHEN ASSIGNED ** Reflected cross-site scripting vulnerability in Wired/Wireless...6.1 Medium
- planex communications inc. wired/wireless lan pan/tilt network camera cs-wmv02g, planex cs-wmv02g firmware +1 more** UNSUPPORTED WHEN ASSIGNED ** Cross-site request forgery (CSRF) vulnerability in Wired/Wireless...8.8 High
- planex cs-wmv02g, planex communications inc. wired/wireless lan pan/tilt network camera cs-wmv02g +1 more** UNSUPPORTED WHEN ASSIGNED ** Stored cross-site scripting vulnerability in Wired/Wireless LAN...5.2 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Stored in pimcore/pimcore6.3 Medium
- sonicwall email securitySonicWall Email Security contains a vulnerability that could permit a remote unauthenticated...5.3 Medium
- gnu gnutls, debian linux, fedoraproject fedora +7 more +9 moreA timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS....7.4 High
- tibco hawk, operational intelligence hawk redtail +1 moreTIBCO Operational Intelligence Hawk Redtail Credential Exposure Vulnerability6.8 Medium
- relx firco compliance linkLexisNexis Firco Compliance Link 3.7 allows CSRF.8.8 High
- mrubyAn Untrusted Pointer Dereference was discovered in function mrb_vm_exec in mruby before 3.1.0-rc....7.5 High
- dompdf, dompdf dompdf/dompdf +1 morePHAR Deserialization in dompdf/dompdf9.8 Critical
- juju2143 walrusircjuju2143 WalrusIRC parser.js parseLinks cross site scripting3.5 Low
- udx stateless media pluginUDX Stateless Media Plugin class-settings.php setup_wizard_interface cross site scripting3.5 Low
- Show moreLoading…