CVEs published in February 2023
2,729 vulnerabilities, 255 critical, 10 exploited.
- b3log vditorvditor vulnerable to Cross-site Scripting6.1 Medium
- npm textangulartextAngular text editor vulnerable to Cross-site Scripting6.1 Medium
- erxesErxes vulnerable to Cross-site Scripting6.1 Medium
- countly countly-server, count countly server +1 morecountly-server vulnerable to Cross-site Scripting5.4 Medium
- mind-elixir project mind-elixirjQuery MiniColors vulnerable to Cross-site Scripting6.1 Medium
- jquery-minicolors project jquery-minicolors, npm @claviska/jquery-minicolors +1 morejQuery MiniColors vulnerable to Cross-site Scripting6.1 Medium
- octoboxOctobox ReDoS vulnerability7.5 High
- moby hyperkitMoby HyperKit uninitialized memory use in virtio-sock pci_vtsock_proc_tx7.1 High
- doomsider shadowdoomsider shadow denial of service2.5 Low
- java-xmlbuilder project java-xmlbuilderjava-xmlbuilder xml external entity reference5.5 Medium
- buddystream project buddystream, madgicweb buddystream plugin +1 moremadgicweb BuddyStream Plugin ShareBox.php cross site scripting3.5 Low
- bdtask pharmacy management system, pharmacy management system project management system +1 morecodeprojects Pharmacy Management System Avatar Image add.php unrestricted upload6.3 Medium
- oretnom23 simple customer relationship management systemSourceCodester Simple Customer Relationship Management System login.php sql injection7.3 High
- auto dealer management system project dealer management system, sourcecodester auto dealer management system +1 moreSourceCodester Auto Dealer Management System Users.php access control6.3 Medium
- auto dealer management system project dealer management system, sourcecodester auto dealer management system +1 moreSourceCodester Auto Dealer Management System sql injection6.3 Medium
- kareadita kareadita/kavita, kavitareader kavita +1 moreMissing Authentication for Critical Function in kareadita/kavita8.1 High
- pixelfed, pixelfed pixelfed/pixelfed +1 moreImproper Authorization in pixelfed/pixelfed4.3 Medium
- auto dealer management system project dealer management system, sourcecodester auto dealer management system +1 moreSourceCodester Auto Dealer Management System sql injection4.7 Medium
- auto dealer management system project dealer management system, sourcecodester auto dealer management system +1 moreSourceCodester Auto Dealer Management System sql injection4.7 Medium
libgit2OSS-FuzzHeap-buffer-overflow in set_dataNo scorehdf5OSS-FuzzHeap-buffer-overflow in H5O__fsinfo_decodeNo scorelibuclOSS-FuzzHeap-buffer-overflow in ucl_object_dtor_unref_singleNo scorehdf5OSS-FuzzHeap-buffer-overflow in H5C__load_cache_imageNo scorehdf5OSS-FuzzHeap-buffer-overflow in H5SM_deleteNo scorelibavcOSS-FuzzHeap-buffer-overflow in isvcd_interlyr_motion_mode_pred_dyadicNo scoreperfettoOSS-FuzzHeap-buffer-overflow in perfetto::trace_processor::TrackEventParser::ParseTrackDescriptorNo score- online pizza ordering system project pizza ordering system, sourcecodester online pizza ordering system +1 moreSourceCodester Online Pizza Ordering System GET Parameter view_prod.php sql injection6.3 Medium
- cxasm notepad--cxasm notepad-- Directory Comparison denial of service3.3 Low
- xoslab easy file lockerXoslab Easy File Locker xlkfs.sys MessageNotifyCallback denial of service5.5 Medium
- filseclab twister antivirusFilseclab Twister Antivirus IoControlCode ffsmon.sys 0x220017 denial of service4.4 Medium
- online pizza ordering system project pizza ordering system, sourcecodester online pizza ordering system +1 moreSourceCodester Online Pizza Ordering System POST Parameter ajax.php delete_category missing authentication7.3 High
- employee task management system project task management system, sourcecodester employee task management system +1 moreSourceCodester Employee Task Management System changePasswordForEmployee.php improper authentication7.3 High
- employee task management system project task management system, sourcecodester employee task management system +1 moreSourceCodester Employee Task Management System task-details.php sql injection6.3 Medium
- employee task management system project task management system, sourcecodester employee task management system +1 moreSourceCodester Employee Task Management System edit-task.php sql injection5.0 Medium
- code-projects simple food ordering system, simple food ordering system project food ordering system +1 moreSourceCodester Simple Food Ordering System process_order.php cross site scripting3.5 Low
- hewlett packard enterprise (hpe) hpe oneview for vmware vcenter,, hp oneview for vmware vcenter +1 moreHPE OneView for VMware vCenter, in certain circumstances, may disclose the “HPE OneView” Username...5.5 Medium
- pixelfed, pixelfed pixelfed/pixelfed +1 moreExposure of Sensitive Information to an Unauthorized Actor in pixelfed/pixelfed5.3 Medium
- mozilla thunderbirdIf a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly...6.5 Medium
- intern record system project record systemCross Site Scripting (XSS) vulnerability in Intern Record System version 1.0 in /intern...5.4 Medium
github.com/edgelesssys/constellationGo,github.com/edgelesssys/constellation/v2Go +1 moreUser data in TPM attestation vulnerable to MITMNo score- nethackNetHack Call command buffer overflow5.5 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM information disclosure5.9 Medium
- ibm infosphere information serverIBM InfoSphere Information Server information disclosure7.5 High
- ibm sterling b2b integrator standard edition, sterling b2b integrator +1 moreIBM Sterling B2B Integrator Standard Edition improper access control4.3 Medium
- ibm sterling b2b integrator standard edition, sterling b2b integrator +1 moreIBM Sterling B2B Integrator Standard Edition cross-site scripting4.6 Medium
- ibm sterling b2b integrator standard edition, sterling b2b integrator +1 moreIBM Sterling B2B Integrator Standard Edition improper access control6.3 Medium
- ibm maximo asset management, maximo application suite +1 moreIBM Maximo Asset Management information disclosure5.3 Medium
- craftercms, craftercms crafter cms +1 moreImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Crafter Studio5.7 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 for Linux, UNIX and Windows information disclosure6.2 Medium
- wow-company wp coder, wpcalc wp coder – insert & manage code snippets +1 moreWP Coder – add custom html, css and js code <= 2.5.3 - Authenticated (Admin+) SQL Injection7.2 High
- Show moreLoading…