CVEs published in February 2023
2,729 vulnerabilities, 255 critical, 10 exploited.
- opennms horizon, meridian +1 moreMultiple stored and reflected Cross-site Scripting in webapp6.7 Medium
- mainwp matomo extension, motomo +1 moreWordPress MainWP Matomo Extension Plugin <= 4.0.4 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- opennms horizon, meridian +1 moreStealing Cookies using Reflected XSS via graph results6.7 Medium
- opennms horizon, meridian +1 moreCross-site scripting in outage/list.htm5.8 Medium
openscOSS-FuzzHeap-buffer-overflow in sc_hsm_write_efNo scorelibavcOSS-FuzzHeap-buffer-overflow in isvcd_reflayer_construction_dyadicNo scoreradare2OSS-FuzzHeap-buffer-overflow in load_bufferNo score- sdd computer software sdd-baroSQLi in SDD-Baro9.8 Critical
- sourcecodester yoga class registration system, yoga class registration system project class registration system +1 moreSourceCodester Yoga Class Registration System Add Class Entry sql injection6.3 Medium
- sourcecodester yoga class registration system, yoga class registration system project class registration system +1 moreSourceCodester Yoga Class Registration System Delete User sql injection6.3 Medium
- sourcecodester yoga class registration system, yoga class registration system project class registration system +1 moreSourceCodester Yoga Class Registration System Status Update update_status.php sql injection6.3 Medium
- apache software foundation sling, apache sling i18n +1 moreApache Sling does not allow to handle i18n content in a secure way6.5 Medium
- ntn information technologies online services software, online services project services +1 moreMultiple SQL Injection on NTN Information Technologies' Online Services software9.8 Critical
mariadb-10.3Debianmariadb-10.3 - bugfix updateNo score- cerebrate-project cerebrateCerebrate 1.12 does not properly consider organisation_id during creation of API keys.9.1 Critical
- thingsboardThingsBoard 3.4.1 could allow a remote attacker to gain elevated privileges because hard-coded...8.1 High
- themekraft buddyformsThe BuddyForms WordPress plugin, in versions prior to 2.7.8, was affected by an unauthenticated...9.8 Critical
- wpdeveloper reviewxThe 'rx_export_review' action in the ReviewX WordPress Plugin version < 1.6.4, is affected by an...8.8 High
- judging management system project management systemJudging Management System 1.0 was discovered to contain an arbitrary file upload vulnerability...8.1 High
- tenda ax3 firmwareTenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the timeType function at ...9.8 Critical
- clash project clashClash for Windows v0.20.12 was discovered to contain a remote code execution (RCE) vulnerability...9.8 Critical
- ui unifi dream machine pro firmwareUbiquiti Networks UniFi Dream Machine Pro v7.2.95 allows attackers to bypass domain restrictions...9.8 Critical
- nodejs node, node.js, debian linux +2 moreAn untrusted search path vulnerability exists in Node.js. <19.6.1, <18.14.1, <16.19.1, and <14.21...4.2 Medium
- nodejs node, node.js +1 moreA cryptographic vulnerability exists in Node.js <19.2.0, <18.14.1, <16.19.1, <14.21.3 that in...7.5 High
- nodejs node, node.js +1 moreA privilege escalation vulnerability exists in Node.js <19.6.1, <18.14.1, <16.19.1 and <14.21.3...7.5 High
- rocket.chatA prototype pollution vulnerability exists in Rocket.Chat server <5.2.0 that could allow an...8.8 High
- korenix jetwave 2111 firmware, jetwave 2111l firmware, jetwave 2114 firmware +12 more +14 moreKorenix JetWave 4200 Series 1.3.0 and JetWave 3200 Series 1.6.0 are vulnerable to Denial of...6.5 Medium
- korenix jetwave 2111 firmware, jetwave 2111l firmware, jetwave 2114 firmware +12 more +14 moreKorenix Jetwave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command...8.8 High
- korenix jetwave 2111 firmware, jetwave 2111l firmware, jetwave 2114 firmware +12 more +14 moreKorenix JetWave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command...8.8 High
- cisco nx-os system software in aci mode, nx-os +1 moreCisco Nexus 9000 Series Fabric Switches in ACI Mode Link Layer Discovery Protocol Memory Leak Denial of Service Vulnerability7.4 High
- cisco nx-os software, nx-os +1 moreCisco NX-OS Software CLI Command Injection Vulnerability4.4 Medium
- cisco fxos, unified computing system (managed), ucs 6200 firmware +10 more +12 moreCisco FXOS Software and UCS Manager Software Configuration Backup Static Key Vulnerability6.3 Medium
- cisco unified computing system (managed), firepower extensible operating system, ucs 6200 firmware +10 more +12 moreCisco Firepower 4100 Series, Firepower 9300 Security Appliances, and UCS Fabric Interconnects Command Injection Vulnerability6.0 Medium
- cisco unified computing system (managed), nexus 93180yc-fx3 firmware, nexus 93180yc-fx3s firmware +4 more +6 moreCisco Nexus 9300-FX3 Series Fabric Extender for UCS Fabric Interconnects Authentication Bypass Vulnerability5.3 Medium
- cisco application policy infrastructure controller, application policy infrastructure controller (apic), cloud network controller +2 moreCisco Application Policy Infrastructure Controller and Cisco Cloud Network Controller Cross-Site Request Forgery Vulnerability8.8 High
- linux kernelA flaw possibility of memory leak in the Linux kernel cpu_entry_area mapping of X86 CPU data to...5.5 Medium
- quarkus, redhat build of quarkus +1 moreCross-site Scripting in Quarkus6.1 Medium
- thingsboardThingsBoard 3.4.1 could allow a remote authenticated attacker to achieve Vertical Privilege...8.8 High
- squaredup dashboard serverSquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows XSS (issue 2 of 2).5.4 Medium
- squaredup dashboard serverSquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows XSS (issue 1 of 2).6.1 Medium
- squaredup dashboard serverSquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows open redirection. (The issue was...6.1 Medium
- red hat undertow, redhat build of quarkus, integration camel for spring boot +7 more +9 moreUndertow client not checking server identity presented by server certificate in https connections7.5 High
- newspaperclub pdf infoCode injection in pdf_info9.8 Critical
- gnupgGnuPG can be made to spin on a relatively small input by (for example) crafting a public key with...3.3 Low
- executable books markdown-it-pymarkdown-it-py crash on null assertions3.3 Low
- executable books markdown-it-pymarkdown-it-py CLI crash on invalid UTF-8 characters3.3 Low
- hewlett packard enterprise (hpe) hpe serviceguard for linux, hpe serviceguard for linux +1 moreUnauthenticated server side request forgery in HPE Serviceguard Manager9.8 Critical
- hewlett packard enterprise (hpe) hpe serviceguard for linux, hpe serviceguard for linux +1 morePre-auth memory corruption in HPE Serviceguard9.8 Critical
- hewlett packard enterprise (hpe) hpe serviceguard for linux, hpe serviceguard for linux +1 moreUnauthenticated Java deserialization vulnerability in Serviceguard Manager9.8 Critical
- weintek easybuilder pro, easybuilder pro cmt +1 moreThe listed versions for Weintek EasyBuilder Pro are vulnerable to a ZipSlip attack caused by...9.3 Critical
- Show moreLoading…