CVEs published in February 2023
2,729 vulnerabilities, 255 critical, 10 exploited.
- google chromeUse after free in Prompts in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to...8.8 High
- google chromeInteger overflow in PDF in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to...8.8 High
- google chromeUse after free in WebRTC in Google Chrome on Windows prior to 110.0.5481.177 allowed a remote...8.8 High
- google chromeUse after free in Video in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to...8.8 High
- google chromeHeap buffer overflow in Video in Google Chrome prior to 110.0.5481.177 allowed a remote attacker...8.8 High
- google chromeUse after free in Vulkan in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to...8.8 High
- google chromeUse after free in SwiftShader in Google Chrome prior to 110.0.5481.177 allowed a remote attacker...8.8 High
- google chromeUse after free in Web Payments API in Google Chrome on Android prior to 110.0.5481.177 allowed a...8.8 High
- oretnom23 online eyewear shopSourceCodester Online Eyewear Shop cross site scripting2.4 Low
- misskeyCross site scripting (XSS) vulnerability using authentication callback in Misskey7.1 High
- misskeyCross site scripting (XSS) vulnerability using url preview in Misskey7.1 High
- misskeySQL injection of notes/search-by-tag8.8 High
- misskeyCross site scripting (XSS) of ActivityPub URI in misskey7.1 High
- opennms horizon, meridian +1 moreUnauthenticated, stored XSS in display of alarm reduction-key6.7 Medium
- sales tracker management system project tracker management system, sourcecodester sales tracker management system +1 moreSourceCodester Sales Tracker Management System view_product.php sql injection5.0 Medium
- nextcloud server, kiteworks security-advisories +1 moreDirectory traversal in Nextcloud server6.0 Medium
- sequelizeSQL Injection via replacements in sequelize10.0 Critical
- music gallery site project gallery site, sourcecodester music gallery site +1 moreSourceCodester Music Gallery Site POST Request Users.php access control7.3 High
- music gallery site project gallery site, sourcecodester music gallery site +1 moreSourceCodester Music Gallery Site GET Request Master.php sql injection6.3 Medium
- music gallery site project gallery site, sourcecodester music gallery site +1 moreSourceCodester Music Gallery Site GET Request view_music_details.php sql injection6.3 Medium
- seacmsSeaCMS Picture Management config.ftp.php deserialization4.7 Medium
- ibm sterling b2b integrator standard edition, sterling b2b integrator +1 moreIBM Sterling B2B Integrator Standard Edition cross-site scripting4.6 Medium
- ibm spectrum virtualizeIBM Spectrum Virtualize privilege escalation6.3 Medium
- ibm spectrum virtualizeIBM Spectrum Virtualize information disclosure6.5 Medium
- linuxfoundation zoweImperative Local Command Injection allows Activity Masking3.3 Low
- hybrid software cloudflowCloudflow - Local File Inclusion Vulnerability8.3 High
- hybrid software cloudflowCloudflow - Unauthenticated file upload vulnerability9.8 Critical
- devolutions serverImproper access controls on entries in Devolutions Server 2022.3.12 and earlier could allow an...6.5 Medium
- devolutions serverImproper access controls on some API endpoints in Devolutions Server 2022.3.12 and earlier could...8.8 High
- devolutions serverInsufficient input sanitization in the documentation feature of Devolutions Server 2022.3.12 and...8.8 High
mariadb-10.3Ubuntu,mariadb-10.6Ubuntu +1 moremariadb-10.3, mariadb-10.6 regressionNo scorelibavcOSS-FuzzUse-of-uninitialized-value in isvcd_interpolate_residual_sse42No score- nhn toast ui chartNHN TOAST UI Chart Legend cross site scripting3.5 Low
- mono-project mono, debian linux +1 moreThe mono package before 6.8.0.105+dfsg-3.3 for Debian allows arbitrary code execution because the...8.8 High
- tibco businessconnectTIBCO BusinessConnect Reflected XSS Vulnerability7.3 High
- typechotypecho 1.1/17.10.30 was discovered to contain a remote code execution (RCE) vulnerability via...9.8 Critical
- zetacomponents mvctoolsMvcTools 6d48cd6830fc1df1d8c9d61caa1805fd6a1b7737 was discovered to contain a code execution...9.8 Critical
- hour of code python 2015 project of code python 2015hour_of_code_python_2015 commit 520929797b9ca43bb818b2e8f963fb2025459fa3 was discovered to...9.8 Critical
- h3c a210-g firmwareAn access control issue in H3C A210-G A210-GV100R005 allows attackers to authenticate without a...9.8 Critical
- cellinx nvt web serverCellinx NVT v1.0.6.002b is vulnerable to local file disclosure.7.5 High
- tp-link tl-wr940n firmwareTP-Link router TL-WR940N V6 3.19.1 Build 180119 uses a deprecated MD5 algorithm to hash the admin...7.5 High
- linux kernelAn issue was discovered in the Linux kernel through 6.2.0-rc2. drivers/tty/vcc.c has a race...5.7 Medium
- open-emr openemrA Path Traversal in setup.php in OpenEMR < 7.0.0 allows remote unauthenticated users to read...7.5 High
- open-emr openemrA Local File Inclusion (LFI) vulnerability in interface/forms/LBF/new.php in OpenEMR < 7.0.0...8.8 High
- open-emr openemrA Reflected Cross-site scripting (XSS) vulnerability in interface/forms/eye_mag/php...5.4 Medium
- modoboa, modoboa modoboa/modoboa +1 moreCross-site Scripting (XSS) - Reflected in modoboa/modoboa4.8 Medium
- flatpress, flatpressblog flatpressblog/flatpress +1 morePath Traversal in flatpressblog/flatpress8.1 High
- linux kernelUse-after-free vulnerability in the Linux Kernel7.8 High
- online student admission system project student admission systemOnline Student Admission System in PHP Free Source Code 1.0 was discovered to contain a SQL...9.8 Critical
- aztech wmb250ac firmwareAztech WMB250AC Mesh Routers Firmware Version 016 2020 devices improperly manage sessions, which...8.8 High
- Show moreLoading…