CVEs published in February 2023
2,729 vulnerabilities, 255 critical, 10 exploited.
- neo4j apoc, awesome procedures on cyper +1 moreXML External Entity (XXE) vulnerability in apoc.import.graphml5.9 Medium
- eternal terminal project terminalIn Eternal Terminal 6.2.1, TelemetryService uses fixed paths in /tmp. For example, a local...6.3 Medium
- github enterprise serverPath traversal in GitHub Enterprise Server leading to arbitrary file reading when building a GitHub Pages site6.5 Medium
- gpac, gpac gpac/gpac +1 moreHeap-based Buffer Overflow in gpac/gpac7.8 High
- modoboa installer, modoboa/modoboa-installer +1 moreImproper Restriction of Excessive Authentication Attempts in modoboa/modoboa-installer7.8 High
- mapos map-osMultiple Cross Site Scripting (XSS) vulnerabilities in Mapos 4.39.0 allow attackers to execute...6.1 Medium
- mapos map-osMultiple Cross Site Scripting (XSS) vulnerabilities in Mapos 4.39.0 allow attackers to execute...6.1 Medium
- mapos map-osMultiple Cross Site Scripting (XSS) vulnerabilities in Mapos 4.39.0 allow attackers to execute...6.1 Medium
- mapos map-osMultiple Cross Site Scripting (XSS) vulnerabilities in Mapos 4.39.0 allow attackers to execute...6.1 Medium
- palantir sls-loggingIt was discovered that the sls-logging was not verifying hostnames in TLS certificates due to a...6.3 Medium
- palantir magritte-ftp, foundry magritte +1 moreIt was discovered that the Magritte-ftp was not verifying hostnames in TLS certificates due to a...6.3 Medium
- palantir gotham chat irc, gotham chat irc helper +1 moreGotham Chat IRC help does not validate hostnames in TLS certificates5.7 Medium
- tianjie cpe906-3, cpe906-3 firmware +1 moreTIANJIE CPE906-3 is vulnerable to password disclosure. This is present on Software Version WEB5...7.5 High
- sscms siteserver cmsSiteServerCMS 7.1.3 sscms has a file read vulnerability.4.9 Medium
- ricoh im 2500 firmware, im 2702 firmware, im 3000 firmware +74 more +76 moreRicoh mp_c4504ex devices with firmware 1.06 mishandle credentials.9.1 Critical
- acer aspire e5-475g firmwareStack overflow vulnerability in Aspire E5-475G 's BIOS firmware, in the FpGui module, a second...7.8 High
- qaelum doseQaelum DOSE 18.08 through 21.1 before 21.2 allows Directory Traversal via the loadimages name...4.3 Medium
- palantir gothamPalantir Gotham included an endpoint that would log arbitrary sized zip files.5.3 Medium
- palantir gothamPalantir Gotham included an endpoint that would log arbitrary sized payloads.5.3 Medium
- palantir gothamPalantir Gotham included an unauthenticated endpoint that listed all active usernames in the platform with an active session.5.3 Medium
- palantir atlasdbIt was discovered that the sls-logging was not verifying hostnames in TLS certificates due to a...6.3 Medium
- flatcoreCross site scripting (XSS) vulnerability in flatCore-CMS 2.2.15 allows attackers to execute...5.4 Medium
- intel xeon gold 5315y firmware, xeon gold 5317 firmware, xeon gold 5318h firmware +50 more +52 moreImproper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged...3.2 Low
- mozilla firefox, firefox esr +1 moreThe Raccoon attack is a timing attack on DHE ciphersuites inherit in the TLS specification. To...5.9 Medium
- mozilla firefox for ios, firefox mobile +1 moreScanning a QR code that contained a javascript: URL would have resulted in the Javascript being...6.1 Medium
- netgear wndr3700v2, wndr3700 firmware +1 moreNetgear WNDR3700v2 Web Interface denial of service2.7 Low
- netgear wndr3700v2, wndr3700 firmware +1 moreNetgear WNDR3700v2 Web Interface command injection4.7 Medium
- netgear wndr3700v2, wndr3700 firmware +1 moreNetgear WNDR3700v2 Web Management Interface denial of service5.3 Medium
pimcore/pimcorePackagistCross Site Scripting (XSS) in Model\DataObject\Data\UrlSlugNo score- ls electric xbc-dn32u, ls-electric xbc-dn32u firmware +1 moreCVE-2023-228079.8 Critical
- ls electric xbc-dn32u, ls-electric xbc-dn32u firmware +1 moreCVE-2023-228067.5 High
- ls electric xbc-dn32u, ls-electric xbc-dn32u firmware +1 moreCVE-2023-228056.5 Medium
- ls electric xbc-dn32u, ls-electric xbc-dn32u firmware +1 moreCVE-2023-228049.1 Critical
- ls electric xbc-dn32u, ls-electric xbc-dn32u firmware +1 moreCVE-2023-228037.5 High
- ls electric xbc-dn32u, ls-electric xbc-dn32u firmware +1 moreCVE-2023-01037.5 High
- ls electric xbc-dn32u, ls-electric xbc-dn32u firmware +1 moreCVE-2023-01029.1 Critical
- starlite-api starliteStarlite DoS vulnerability when parsing multipart request body7.5 High
- gpacGPAC reframe_mp3.c mp3_dmx_process heap-based overflow6.3 Medium
- phpcrazy project phpcrazyPHPCrazy cross site scripting3.5 Low
libxml2OSS-FuzzHeap-buffer-overflow in xmlParseTryOrFinishNo score- apache shenyuApache ShenYu Admin ultra vires8.8 High
- usememos memosCross Site Scripting in usememos/memos5.4 Medium
- jenkins azure credentials, jenkins project azure credentials plugin +1 moreMissing Authorization in Jenkins Azure Credentials Plugin6.5 Medium
- jenkins azure credentials, jenkins project azure credentials plugin +1 moreCross-Site Request Forgery in Jenkins Azure Credentials Plugin8.8 High
- jenkins azure credentials, jenkins project azure credentials plugin +1 moreMissing Authorization in Jenkins Azure Credentials Plugin4.3 Medium
- jenkins email extension, jenkins project email extension plugin +1 moreSandbox escape in Jenkins Email Extension Plugin9.9 Critical
- jenkins email extension, jenkins project email extension plugin +1 moreCross-site Scripting in Jenkins Email Extension Plugin5.4 Medium
- jenkins email extension, jenkins project email extension plugin +1 moreCross-site Scripting in Jenkins Email Extension Plugin5.4 Medium
- jenkins project pipeline: build step plugin, jenkins pipeline\ +1 moreCross-site Scripting in Jenkins Pipeline: Build Step Plugin5.4 Medium
- jenkins junit, jenkins project junit plugin +1 moreCross-site Scripting in Jenkins JUnit Plugin5.4 Medium
- Show moreLoading…