CVEs published in February 2023
2,729 vulnerabilities, 255 critical, 10 exploited.
- fortinet fortinacMultiple improper neutralization of input during web page generation ('Cross-site Scripting')...5.8 Medium
- fortinet fortinac, fortinac-f +1 moreAn improper authorization vulnerability [CWE-285] in Fortinet FortiNAC version 9.4.0 through 9.4...8.6 High
- fortinet fortiwebA relative path traversal vulnerability [CWE-23] in FortiWeb version 7.0.1 and below, 6.4 all...4.7 Medium
- fortinet fortiwebMultiple improper neutralization of special elements used in an OS Command ('OS Command Injection...6.6 Medium
- fortinet fortiwebA stack-based buffer overflow vulnerability [CWE-121] in the CA sign functionality of FortiWeb...6.3 Medium
- fortinet fortiwebA stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and earlier, 6.4...6.3 Medium
- fortinet fortiwebA stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and below, 6.4...6.1 Medium
- fortinet fortiwebA heap-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb version 6...7.1 High
- fortinet fortiwebA use of externally-controlled format string in Fortinet FortiWeb version 7.0.0 through 7.0.1,...6.5 Medium
- fortinet fortiwebA relative path traversal in Fortinet FortiWeb version 7.0.0 through 7.0.2, FortiWeb version 6.3...5.6 Medium
- fortinet fortiwebA stack-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, Fortinet FortiWeb...7.6 High
- fortinet fortiwebA stack-based buffer overflow in Fortinet FortiWeb 6.4 all versions, FortiWeb versions 6.3.17 and...7.4 High
- fortinet fortiwebMultiple stack-based buffer overflow vulnerabilities [CWE-121] in the proxy daemon of FortiWeb 5...9.3 Critical
- fortinet fortiwebA condition for session fixation vulnerability [CWE-384] in the session management of FortiWeb...8.5 High
- fortinet fortiwebA path traversal vulnerability [CWE-23] in the API of FortiWeb 7.0.0 through 7.0.1, 6.3.0 through...5.0 Medium
- fortinet fortios, fortiproxy, fortiswitch +1 more +3 moreAn improper verification of cryptographic signature vulnerability [CWE-347] in FortiWeb 6.4 all...4.1 Medium
- fortinet fortiwebA relative path traversal vulnerability [CWE-23] in FortiWeb 7.0.0 through 7.0.1, 6.3.6 through 6...6.2 Medium
- fortinet fortiwebAn improper neutralization of special elements used in an os command ('OS Command Injection') ...8.6 High
- fortinet fortiportalAn insertion of sensitive information into log file vulnerability [CWE-532] in the FortiPortal...4.1 Medium
- fortinet fortios, fortiproxy, fortiswitchmanager +2 moreA relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2,...8.6 High
ca-certificatesTuxCareUpdate of ca-certificatesNo scorenssTuxCare,nss-develTuxCare,nss-pkcs11-develTuxCare +8 more +10 moreUpdate of nssNo score- argoproj argo cd, argo-cd +1 moreArgo CD users with any cluster secret update access may update out-of-bounds cluster secrets9.1 Critical
- nodejs node.js, undici +1 moreCRLF Injection in Nodejs ‘undici’ via host6.5 Medium
- nodejs undiciUndici vulnerable to Regular Expression Denial of Service in Headers7.5 High
- joomla!, joomla joomla\!, joomla! project cms +2 more[20230201] - Core - Improper access check in webservice endpoints5.3 Medium
- cisco identity services engine, identity services engine software +1 moreA vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE)...6.1 Medium
- cisco nexus dashboardA vulnerability in the web-based management interface of Cisco Nexus Dashboard could allow an...6.1 Medium
- cisco asyncos, secure web appliance +1 moreA vulnerability in the scanning engines of Cisco AsyncOS Software for Cisco Secure Web Appliance,...5.3 Medium
- clamav, cisco secure endpoint, secure endpoint private cloud +1 more +3 moreOn Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A...5.3 Medium
- cisco secure email, email security appliance +1 moreVulnerability in the CLI of Cisco Secure Email Gateway could allow an authenticated, remote...6.0 Medium
- cisco secure email, secure email and web manager, email security appliance +2 moreA vulnerability in the Web UI and administrative CLI of the Cisco Secure Email Gateway (ESA) and...6.5 Medium
- cisco nexus dashboardA vulnerability in the DNS functionality of Cisco Nexus Dashboard Software could allow an...7.5 High
- clamav, cisco secure endpoint, secure endpoint private cloud administration portal +4 more +6 moreCVE-2023-20032 affecting package clamav for versions less than 0.105.2-19.8 Critical
- wago 852-111\/000-001 firmware, unmanaged switch 852-111/000-001 +1 moreWAGO: Exposure of configuration interface in unmanaged switches9.1 Critical
com.schibsted.security:strongbox-sdkMavenPrivilege escalation in StrongboxNo score- feathers-sequalize sequelize.js, sequelizejs sequelize +1 moreSequalize - Unsafe fall-through in getWhereConditions9.9 Critical
- feathers-sequalize sequelize.js, sequelizejs sequelize +1 moreSequalize - Default support for “raw attributes” when using parentheses10.0 Critical
- feathers-sequalize sequelize.js, sequelizejs sequelize +1 moreSequalize - Bad query filtering leading to SQL errors5.3 Medium
- containerdcontainerd supplementary groups are not set up properly5.3 Medium
- containerdcontainerd OCI image importer memory exhaustion6.2 Medium
- netmodule nsrw, router software +1 morePath Traversal in NetModule NSRW7.2 High
- netmodule nsrw, router software +1 moreAuthenticated Command Injection in NetModule NSRW7.2 High
- phpArray overrun in common path resolve code7.5 High
- phpDoS vulnerability when parsing multipart request body7.5 High
- citrix workspace app for windows, workspace +1 morePrivilege Escalation on the system running a vulnerable version of Citrix Workspace app for Windows7.8 High
- citrix workspace app for windows, workspace +1 moreA malicious user can cause log files to be written to a directory that they do not have permission to write to.5.5 Medium
- citrix virtual apps and desktopsPrivilege Escalation to NT AUTHORITY\SYSTEM on the vulnerable VDA7.8 High
- totolink a7100ru firmwareTOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection...9.8 Critical
- totolink a7100ru firmwareTOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection...9.8 Critical
- Show moreLoading…