CVEs published in February 2023
2,729 vulnerabilities, 255 critical, 10 exploited.
- unknown wp private message, apusthemes wp private messaging +1 moreWP Private Message < 1.0.6 - Private Message Disclosure via IDOR4.3 Medium
- opening hours project hours, unknown opening hours +1 moreOpening Hours <= 2.3.0 - Contributor+ Stored XSS via Shortcode5.4 Medium
- embedsocialEmbedSocial < 1.1.28 - Contributor+ Stored XSS5.4 Medium
- unknown product slider and carousel with category for woocommerce, essentialplugin product slider and carousel with category with woocommerce +1 moreProduct Slider and Carousel with Category for WooCommerce < 2.8 - Contributor+ Stored XSS via Shortcode5.4 Medium
- ithemes backupbuddyBackupBuddy < 8.8.3 - Multiple Reflected Cross-Site Scripting6.1 Medium
- presscustomizr hueman addonsHueman Addons <= 2.3.3 - Contributor+ Stored XSS via Shortcode5.4 Medium
- embedsocial embedstoriesEmbedStories < 0.7.5 - Contributor+ Stored XSS5.4 Medium
- unknown login logout menuLogin Logout Menu <= 1.3.3 - Contributor+ Stored XSS in Shortcode5.4 Medium
- gsplugins gs products slider, unknown gs products slider for woocommerce +1 moreGS Products Slider for WooCommerce < 1.5.9 - Contributor+ Stored XSS5.4 Medium
- gs plugins portfolio for envato, gsplugins gs portfolio for envato +1 moreGS Portfolio for Envato < 1.4.0 - Contributor+ Stored XSS5.4 Medium
- unknown video sidebar widgets, video sidebar widgets project sidebar widgets +1 moreDownload Video Sidebar Widgets <= 6.1 - Contributor+ Stored XSS via Shortcode5.4 Medium
- unknown wp responsive testimonials slider and widget, wp responsive testimonials slider and widget project responsive testimonials slider and widget +1 moreWP Responsive Testimonials Slider And Widget <= 1.5 - Contributor+ Stored XSS5.4 Medium
- post views count project views count, unknown post views count (support caching plugins!) +1 morePost Views Count <= 3.0.2 - Contributor+ Stored XSS in Shortcode5.4 Medium
- unknown greenshiftGreenshift < 5.0 - Contributor+ Stored XSS5.4 Medium
- devowl real media library, real media library: media library folder & file manager +1 moreReal Media Library < 4.18.29 - Author+ Stored XSS5.4 Medium
- bootstrap shortcodes project shortcodes, unknown bootstrap shortcodes +1 moreBootstrap Shortcodes <= 3.4.0 - Contributor+ Stored XSS via Shortcode5.4 Medium
- timed content project content, unknown timed content +1 moreTimed Content < 2.73 - Contributor+ Stored XSS5.4 Medium
- hijiri intuitive custom post order, intuitive custom post order project custom post order +1 moreIntuitive Custom Post Order < 3.1.4 - Subscriber+ Arbitrary Menu Order Update4.3 Medium
- livecomposer page builder: live composer, blueastral page builder\ +1 morePage Builder: Live Composer < 1.5.23 - Contributor+ Stored XSS via Shortcode5.4 Medium
- bootstrapped easy affiliate linksEasy Affiliate Links < 3.7.1 - Contributor+ Stored XSS5.4 Medium
- hastech shoplentorShopLentor < 2.5.4 - Contributor+ Stored XSS5.4 Medium
- brainstorm force spectraSpectra < 1.15.0 - Contributor+ Stored Cross-Side Scripting5.4 Medium
- unknown wp font awesome, wp font awesome project font awesome +1 moreWP Font Awesome < 1.7.9 - Contributor+ Stored XSS5.4 Medium
- easy digital downloads digital downloads, sandhillsdev easy digital downloads +1 moreEasy Digital Downloads < 3.1.0.5 - Contributor+ Stored XSS5.4 Medium
- libimobiledevice libplistUIKit0 libplist XML xplist.c plist_from_xml xml external entity reference5.5 Medium
- dell multifunction printer e525w driver and software suiteDell Multifunction Printer E525w Driver and Software Suite, versions prior to 1.047.2022, A05,...7.8 High
- cention-chatserver project cention-chatservercention-chatserver InternalChatProtocol.fe _formatBody cross site scripting3.5 Low
- php-saml-sp project php-saml-spphp-saml-sp before 1.1.1 and 2.x before 2.1.1 allows reading arbitrary files as the webserver...6.5 Medium
- afl\+\+ project afl\+\+In AFL++ 4.05c, the CmpLog component uses the current working directory to resolve and execute...7.3 High
- borg project borgThe Borg theme before 1.1.19 for Backdrop CMS does not sufficiently sanitize path arguments that...5.3 Medium
- gluster glusterfsIn Gluster GlusterFS 11.0, there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based...7.5 High
- nic knot resolverKnot Resolver before 5.6.0 enables attackers to consume its resources, launching amplification...7.5 High
- linux kernelafu_mmio_region_get_by_offset in drivers/fpga/dfl-afu-region.c in the Linux kernel through 6.1.12...7.8 High
- axcoraAn access control issue in Axcora POS #0~gitf77ec09 allows unauthenticated attackers to execute...9.8 Critical
- totolink a7100ru firmwareTOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability.9.8 Critical
- go-redrock tutortracMultiple stored cross-site scripting (XSS) vulnerabilities in Redrock Software TutorTrac before...5.4 Medium
- chamberlain myqA lack of rate limiting on the password reset endpoint of Chamberlain myQ v5.222.0.32277 (on iOS)...9.8 Critical
- libreswan, debian linux +1 moreLibreswan 4.9 allows remote attackers to cause a denial of service (assert failure and daemon...6.5 Medium
- axis 207w firmwareA Vulnerability was discovered in Axis 207W network camera. There is a reflected XSS...6.1 Medium
- zyxel lte3316-m604, lte3316-m604 firmware, lte3202-m437 firmware +2 moreA security misconfiguration vulnerability exists in the Zyxel LTE3316-M604 firmware version V2.00...9.8 Critical
- vmware carbon black app controlVMware Carbon Black App Control 8.7.x prior to 8.7.8, 8.8.x prior to 8.8.6, and 8.9.x.prior to 8...7.2 High
- vmware vrealize orchestrator, vrealize automation +1 moreVMware vRealize Orchestrator contains an XML External Entity (XXE) vulnerability. A malicious...8.8 High
- answer, answerdev answerdev/answer +1 moreCross-site Scripting (XSS) - Stored in answerdev/answer6.3 Medium
- php, fedora, red hat enterprise linux 6 +5 more +7 morePotential buffer overflow in php_cli_server_startup_workers6.2 Medium
- gluster glusterfsIn Gluster GlusterFS 11.0, there is an xlators/cluster/dht/src/dht-common.c dht_setxattr_mds_cbk...7.5 High
- prolink2u prs1841 firmwareProlink router PRS1841 was discovered to contain hardcoded credentials for its Telnet and FTP...9.8 Critical
- tuition management system project management systemSQL Injection Vulnerability in tanujpatra228 Tution Management System (TMS) via the email...9.8 Critical
- znfit home improvement erp management systemSQL Injection vulnerability in znfit Home improvement ERP management system V50_20220207,v42...9.8 Critical
- elastic kibanaAn open redirect issue was discovered in Kibana that could lead to a user being redirected to an...6.1 Medium
- hyperHyperium Hyper before 0.14.19 does not allow for customization of the max_header_list_size method...7.5 High
- Show moreLoading…