CVEs published in February 2023
2,729 vulnerabilities, 255 critical, 10 exploited.
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +3 more +5 moreWindows Installer Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreMicrosoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreMicrosoft ODBC Driver Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreMicrosoft ODBC Driver Remote Code Execution Vulnerability8.8 High
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 23 +2 more +4 moreMicrosoft Exchange Server Remote Code Execution Vulnerability8.8 High
- microsoft azure machine learningAzure Machine Learning Compute Instance Information Disclosure Vulnerability6.5 Medium
- microsoft defender for iotMicrosoft Defender for IoT Elevation of Privilege Vulnerability7.8 High
- microsoft print 3dPrint 3D Remote Code Execution Vulnerability7.8 High
- microsoft edge chromium, edge for android +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability8.3 High
- microsoft dynamics 365, dynamics 365 (on-premises) version 9.0, dynamics 365 (on-premises) version 9.1 +2 moreMicrosoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability5.4 Medium
- microsoft dynamics 365, dynamics 365 (on-premises) version 9.0, dynamics 365 (on-premises) version 9.1 +2 moreMicrosoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability6.5 Medium
- microsoft dynamics 365, dynamics 365 (on-premises) version 9.0, dynamics 365 (on-premises) version 9.1 +2 moreMicrosoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability5.4 Medium
- microsoft dynamics 365, dynamics 365 (on-premises) version 9.0, dynamics 365 (on-premises) version 9.1 +2 moreMicrosoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability5.4 Medium
- microsoft sql server integration services for visual studio 2019, sql server integration services for visual studio 2022, sql server 2019 integration services +1 more +3 moreMicrosoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability7.3 High
- microsoft onenote, onenote for android +1 moreMicrosoft OneNote Elevation of Privilege Vulnerability6.5 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Tampering Vulnerability5.3 Medium
- microsoft sql server, sql server 2008 r2 service pack 3 (qfe), sql server 2008 service pack 4 (qfe) +11 more +13 moreMicrosoft ODBC Driver for SQL Server Remote Code Execution Vulnerability7.8 High
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 23 +2 more +4 moreMicrosoft Exchange Server Remote Code Execution Vulnerability8.8 High
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 23 +2 more +4 moreMicrosoft Exchange Server Remote Code Execution Vulnerability8.8 High
- microsoft sql server, sql server 2012 for x64-based systems service pack 4 (qfe), sql server 2012 service pack 4 (qfe) +9 more +11 moreMicrosoft SQL Server Remote Code Execution Vulnerability8.8 High
- microsoft sql server, sql server 2014 service pack 3 (cu 4), sql server 2014 service pack 3 (gdr) +7 more +9 moreMicrosoft ODBC Driver for SQL Server Remote Code Execution Vulnerability7.8 High
- microsoft dynamics 365, dynamics 365 (on-premises) version 9.0, dynamics 365 (on-premises) version 9.1 +2 moreMicrosoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability6.5 Medium
- microsoft power bi report server, power bi report server - january 2023 +1 morePower BI Report Server Spoofing Vulnerability8.2 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability4.3 Medium
- microsoft azure app service on azure stack hub, azure app service on azure stack +1 moreAzure App Service on Azure Stack Hub Elevation of Privilege Vulnerability8.7 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreMicrosoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability8.8 High
- microsoft sql server, sql server 2008 r2 service pack 3 (qfe), sql server 2008 service pack 4 (qfe) +11 more +13 moreMicrosoft SQL Server Remote Code Execution Vulnerability7.8 High
- gitGit's `git apply` overwriting paths outside the working tree6.2 Medium
- gitGit vulnerable to local clone-based data exfiltration with non-local transports5.5 Medium
- gss-ntlmssp project gss-ntlmsspGSS-NTLMSSP vulnerable to out-of-bounds read when decoding target information7.5 High
- gss-ntlmssp project gss-ntlmsspGSS-NTLMSSP vulnerable to memory leak when parsing usernames7.5 High
- gss-ntlmssp project gss-ntlmsspGSS-NTLMSSP vulnerable to incorrect free when decoding target information7.5 High
- gss-ntlmssp project gss-ntlmsspGSS-NTLMSSP vulnerable to memory corruption when decoding UTF16 strings6.5 Medium
- gss-ntlmssp project gss-ntlmsspGSS-NTLMSSP vulnerable to multiple out-of-bounds reads when decoding NTLM fields5.9 Medium
- splunk, splunk enterprise, cloud platform +2 moreSPL Command Safeguards Bypass via the ‘map’ SPL Command in Splunk Enterprise8.1 High
- splunk, splunk enterprise, cloud platform +2 morePermissions Validation Failure in the ‘sendemail’ REST API Endpoint in Splunk Enterprise4.3 Medium
- splunk, splunk enterprise, cloud platform +2 moreUnnecessary File Extensions Allowed by Lookup Table Uploads in Splunk Enterprise4.3 Medium
- splunk add-on builder, cloudconnect sdk, cloudconnect software development kit +2 moreModular Input REST API Requests Connect via HTTP after Certificate Validation Failure in Splunk Add-on Builder and Splunk CloudConnect SDK4.8 Medium
- splunk, splunk enterprise, cloud platform +2 morePersistent Cross-Site Scripting through the ‘module’ Tag in a View in Splunk Enterprise8.0 High
- splunk, splunk enterprise +1 moreCross-Site Request Forgery in the ‘ssg/kvstore_client’ REST Endpoint in Splunk Enterprise5.4 Medium
- splunk, splunk enterprise, cloud platform +2 moreAuthenticated Blind Server Side Request Forgery via the ‘search_listener’ Search Parameter in Splunk Enterprise6.3 Medium
- splunk, splunk enterprise, cloud platform +2 morePersistent Cross-Site Scripting through a Base64-encoded Image in a View in Splunk Enterprise8.0 High
- splunk, splunk enterprise, cloud platform +2 moreImproperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon6.5 Medium
- splunk, splunk enterprise, cloud platform +2 moreSPL Command Safeguards Bypass via the ‘display.page.search.patterns.sensitivity’ Search Parameter in Splunk Enterprise8.1 High
- splunk, splunk enterprise, cloud platform +2 more‘createrss’ External Search Command Overwrites Existing RSS Feeds in Splunk Enterprise4.3 Medium
- splunk, splunk enterprise, cloud platform +2 moreSPL Command Safeguards Bypass via the ‘pivot’ SPL Command in Splunk Enterprise7.3 High
- splunk, splunk enterprise, cloud platform +2 moreSPL Command Safeguards Bypass via the ‘collect’ SPL Command Aliases in Splunk Enterprise6.3 Medium
- backstage, linuxfoundation backstage catalog-model, backstage core-components +1 more +3 moreBackstage has XSS Vulnerability in Software Catalog6.8 Medium
- easynasEasyNAS backup.pl system os command injection5.3 Medium
- dell unity, emc unity operating environment, emc unity xt operating environment +1 more +3 moreDell EMC Unity versions before 5.2.0.0.5.173 , use(es) broken cryptographic algorithm. A remote...5.9 Medium
- Show moreLoading…