CVEs published in February 2023
2,729 vulnerabilities, 255 critical, 10 exploited.
- aztech wmb250ac firmwareAztech WMB250AC Mesh Routers Firmware Version 016 2020 is vulnerable to PHP Type Juggling in file...9.8 Critical
- tibco businessconnectTIBCO BusinessConnect Stored XSS Vulnerability7.3 High
- tibco ebx add-onsTIBCO EBX Add-ons Cross Site Scripting (XSS) Vulnerability8.7 High
- tibco ebx, product and service catalog powered by tibco ebx +1 moreTIBCO EBX Cross Site Scripting (XSS) Vulnerability8.7 High
- instantdeveloper rd3File upload vulnerability in Instantdeveloper RD3 22.0.8500, allows attackers to execute...9.8 Critical
- netgate pfsensepfSense CE through 2.6.0 and pfSense Plus before 22.05 allow XSS in the WebGUI via URL Table...6.1 Medium
- octopus serverIn affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which...7.5 High
- freeimage project freeimageBuffer Overflow vulnerability in Freeimage v3.18.0 allows attacker to cause a denial of service...5.5 Medium
- geoserverUnfiltered SQL Injection Vulnerabilities in Geoserver9.8 Critical
- geotoolsUnfiltered SQL Injection in Geotools9.8 Critical
- nautobotRemote code execution in Jinja2 template rendering in Nautobot7.5 High
- louislam uptime-kumaPersistent Cross site scripting (XSS) in Uptime Kuma6.3 Medium
- louislam uptime-kumaPersistent Cross site scripting (XSS) through description in status page in Uptime Kuma6.3 Medium
- go standard library mime/multipart, golang go +1 moreExcessive resource consumption in mime/multipart7.5 High
- minioAllowed DELETE on resources on object locked buckets under Governance mode in Minio6.5 Medium
- instedd pollitInSTEDD Pollit tour_controller.rb TourController Privilege Escalation6.3 Medium
- mayurik best pos management systemSourceCodester Best POS Management System sql injection6.3 Medium
- mayurik best pos management systemSourceCodester Best POS Management System cross site scripting3.5 Low
- mayurik best pos management systemSourceCodester Best POS Management System Image save_settings unrestricted upload4.7 Medium
- artisanworkshop japanized for woocommerceJapanized For WooCommerce <= 2.5.4 - Reflected Cross-Site Scripting6.1 Medium
- mongodb inc .net/c# driver, mongodb c\# driver +1 moreDeserializing compromised object with MongoDB .NET/C# Driver may cause remote code execution6.6 Medium
- codiadCodiad process.php saveJSON information disclosure3.1 Low
- gopistolet project gopistoletGoPistolet MTA denial of service3.5 Low
- irontec klear-libraryirontec klear-library BaseController.php _prepareWhere sql injection5.5 Medium
- harrys dynosaur-railsharrystech Dynosaur-Rails application_controller.rb basic_auth improper authentication6.3 Medium
- ibm infosphere information serverIBM InfoSphere Information Server cross-site scripting4.6 Medium
- hitachi energy gms600, pwc600, reb500 +22 more +24 moreIEC 61850 MMS-Server Vulnerability in multiple Hitachi Energy Products5.9 Medium
librawOSS-FuzzHeap-buffer-overflow in LibRaw_buffer_datastream::scanf_oneNo scorehdf5OSS-FuzzHeap-buffer-overflow in H5O__mtime_new_encodeNo scoreghostscriptOSS-FuzzStack-buffer-overflow in pdfi_read_cff_dictNo scoreca-certificatesTuxCareUpdate of ca-certificatesNo scorenssTuxCare,nss-develTuxCare,nss-pkcs11-develTuxCare +2 more +4 moreUpdate of nssNo score- music gallery site project gallery site, sourcecodester music gallery site +1 moreSourceCodester Music Gallery Site GET Request music_list.php sql injection6.3 Medium
- tp-link archer c50TP-Link Archer C50 Web Management Interface denial of service6.5 Medium
- dolphinphp project dolphinphpDolphinPHP Incomplete Fix CVE-2021-46097 common.php os command injection6.3 Medium
- aerin loan comparison, loan comparison project comparison +1 moreLoan Comparison < 1.5.2 - Reflected XSS via shortcode6.1 Medium
- smg-webdesign shortcode for font awesomeShortcode for Font Awesome < 1.4.1 - Contributor+ Stored XSS5.4 Medium
- unknown wp dark modeWP Dark Mode < 4.0.0 - Contributor+ Stored XSS in Shortcode5.4 Medium
- easy social box project social box, unknown easy social box / page plugin +1 moreEasy Social Box <= 4.1.2 - Contributor+ Stored XSS via Shortcode5.4 Medium
- hastech shoplentorShopLentor < 2.5.4 - PHP Object Injection9.8 Critical
- hijiri intuitive custom post order, intuitive custom post order project custom post order +1 moreIntuitive Custom Post Order < 3.1.4 - Arbitrary Menu Order Update via CSRF4.3 Medium
- unknown markup (json-ld) structured in schema.org, terakoya markup \(json-ld\) structured in schema.org +1 moreMarkup <= 4.8.1 - Contributor+ Stored XSS via Shortcode5.4 Medium
- kainelabs youzifyYouzify < 1.2.2 - Contributor+ Stored XSS5.4 Medium
- aerin loan comparisonLoan Comparison < 1.5.3 - Contributor+ Stored XSS via shortcode5.4 Medium
- gsplugins gs filterable portfolioGS Filterable Portfolio < 1.6.1 - Contributor+ Stored XSS5.4 Medium
- unknown video.jsVideo.js - HTML5 Video Player for WordPress <= 4.5.0 - Contributor+ Stored XSS via Shortcode5.4 Medium
- bob watu quizWatu Quiz < 3.3.8.3 - Admin+ Stored XSS4.8 Medium
- bob watu quizWatu Quiz < 3.3.8.2 - Reflected XSS6.1 Medium
- simple file downloader project file downloader, unknown simple file downloader +1 moreSimple File Downloader <= 1.0.4 - Contributor+ Stored XSS via Shortcode5.4 Medium
- gsplugins gs books showcaseGS Books Showcase < 1.3.1 - Contributor+ Stored XSS5.4 Medium
- Show moreLoading…