CVEs published in February 2023
2,729 vulnerabilities, 255 critical, 10 exploited.
- solarwinds server & application monitor (sam), server and application monitor +1 moreDisable NTLM: SAM 2022.47.5 High
- solarwinds platform, orion platform +1 moreSolarWinds Platform Deserialization of Untrusted Data Vulnerability7.2 High
- solarwinds platform, orion platform +1 moreSolarWinds Platform Directory Traversal Vulnerability7.8 High
- solarwinds platform, orion platform +1 moreSolarWinds Platform Deserialization of Untrusted Data Vulnerability7.2 High
- solarwinds platform, orion platform +1 moreSolarWinds Platform Deserialization of Untrusted Data Vulnerability7.2 High
- artica pfms pandora fms, pandora fms fms +1 moreReflected Cross Site Scripting in Search Functionality of Module Library6.4 Medium
- artica pfms pandora fms, pandora fms fms +1 moreStored cross-site scripting vulnerability in create event section7.6 High
- amperecomputing ampere altra firmware, ampere altra max firmware +1 moreIn Ampere AltraMax and Ampere Altra before 2.10c, improper access controls allows the OS to...9.8 Critical
- xpdfreader xpdfStack overflow vulnerability in function gmalloc in goo/gmem.cc in xpdf 4.04, allows local...5.5 Medium
- xpdfreader xpdfStack overflow vulnerability in function Dict::find in xpdf/Dict.cc in xpdf 4.04, allows local...5.5 Medium
- screencheck badgemakerInformation Disclosure in Authentication Component of ScreenCheck BadgeMaker 2.6.2.0 application...7.5 High
- discuz discuzxCross site scripting (XSS) vulnerability in DiscuzX 3.4 allows attackers to execute arbitrary...6.1 Medium
- artica pfms pandora fms, pandora fms fms +1 moreStored cross-site scripting vulnerability in the reporting dashboard module6.5 Medium
- artica pfms pandora fms, pandora fms fms +1 moreStored cross-site scripting vulnerability in network maps editor feature6.1 Medium
- opensuse supportutils, suse linux enterprise server 12, linux enterprise server 15 +1 more +3 moresupportconfig does not remove passwords in /etc/iscsi/iscsid.conf and /etc/target/lio_setup.sh4.4 Medium
- asus armoury crateASUS EC Tool driver (aka d.sys) 1beb15c90dcf7a5234ed077833a0a3e900969b60be1d04fcebce0a9f8994bdbb,...7.8 High
- media-server project media-serverUse After Free (UAF) vulnerability in ireader media-server before commit...7.5 High
- niter niterforumAn issue was discovered in NiterForum version 2.5.0-beta in /src/main/java/cn/niter/forum/api...8.8 High
- ehoney project ehoneySQL Injection vulnerability in Ehoney version 2.0.0 in models/protocol.go and models/images.go,...7.2 High
- rttys project rttysrttys SQL Injection vulnerability8.8 High
- solarwinds platform, orion platform +1 moreSolarWinds Platform Deserialization of Untrusted Data Vulnerability7.2 High
- insyde insydeh2oAn issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the...7.0 High
- insyde insydeh2oAn issue was discovered in Insyde InsydeH2O with kernel 5.1 through 5.5. DMA attacks on the...7.0 High
- insyde insydeh2oAn issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the...7.0 High
- insyde insydeh2oAn issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the...7.0 High
- insyde insydeh2oAn issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the...7.0 High
- insyde insydeh2oAn issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the...7.0 High
- insyde insydeh2oAn issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the...7.0 High
- insyde insydeh2oAn issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the...7.0 High
- insyde insydeh2oAn issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the...7.0 High
- insyde insydeh2oAn issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. The IhisiDxe...7.0 High
- insyde insydeh2oAn issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the...7.0 High
- insyde insydeh2oAn issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the...7.0 High
- dataeaseSQL Injection vulnerability in dataease before 1.2.0, allows attackers to gain sensitive...7.5 High
- seopanel seo panelSQL Injection vulnerability in SEO Panel 4.9.0 in api/user.api.php in function getUserName in the...7.5 High
- cms-corephp project cms-corephpSQL Injection vulnerability in nitinparashar30 cms-corephp through commit...9.8 Critical
- baijiacms project baijiacmsCross Site Request Forgery (CSRF) vulnerability in baijiacms 4.1.4, allows attackers to change...6.5 Medium
- altran picotcp, picotcp-ng +1 moreDouble Free vulnerability in virtualsquare picoTCP v1.7.0 and picoTCP-NG v2.1 in modules...9.8 Critical
- uqcmsSQL Injection vulnerability in file home\controls\cart.class.php in UQCMS 2.1.3, allows attackers...9.8 Critical
- kliqqi cmsSQL Injection vulnerability in Kliqqi-CMS 2.0.2 in admin/admin_update_module_widgets.php in...9.8 Critical
- kimaiCross-site Scripting in kimai/kimai9.6 Critical
phpmyadminMageiaUpdated phpmyadmin packages fix security vulnerabilityNo score- encode starletteMultipartParser DOS with too many fields or files in Starlette Framework7.5 High
- git-for-windows git, git for windows project for windows +1 moreGit for Windows' installer is susceptible to DLL side loading attacks7.3 High
- git-for-windows git, git for windows project for windows +1 moregitk can inadvertently call executables in the worktree8.6 High
- microsoft dynamics 365, dynamics 365 unified service desk +1 moreMicrosoft Dynamics Unified Service Desk Remote Code Execution Vulnerability8.0 High
- microsoft visual studio 2013 update 5, visual studio 2015 update 3, visual studio 2017 version 15.9 (includes 15.0 - 15.8) +7 more +9 moreVisual Studio Remote Code Execution Vulnerability7.8 High
- microsoft windows, office for android, office for ios +32 more +34 moreWindows Graphics Component Remote Code Execution Vulnerability7.8 High
- microsoft visual studio 2013 update 5, visual studio 2015 update 3, visual studio 2017 version 15.9 (includes 15.0 - 15.8) +7 more +9 moreVisual Studio Remote Code Execution Vulnerability7.8 High
- microsoft .net, .net 6.0, .net 7.0 +19 more +21 more.NET and Visual Studio Remote Code Execution Vulnerability7.8 High
- Show moreLoading…