CVEs published in February 2023
2,729 vulnerabilities, 255 critical, 10 exploited.
- apache software foundation airflow google provider, apache apache-airflow-providers-google +1 moreApache Airflow Google Provider: Google Cloud Sql Provider Denial Of Service7.5 High
- apache software foundation airflow google provider, apache apache-airflow-providers-google +1 moreApache Airflow Google Provider: Google Cloud Sql Provider Remote Command Execution9.8 Critical
- bg-tek coslat firewall, coslat bx5s1d3 firmware, coslat bx5s1d4 firmware +6 more +8 moreUnauthenticated Remote Code Execution on COSLAT Firewall9.8 Critical
- vox2png project vox2pngvox2png vox2png.c heap-based overflow5.3 Medium
- draytek vigor 2960, vigor2960 firmware +1 moreDrayTek Vigor 2960 Web Management Interface mainfunction.cgi sub_1DF14 path traversal6.5 Medium
- avast antivirus, filseclab twister antivirus +1 moreTwister Antivirus IoControlCode filmfd.sys 0x801120E4 denial of service5.5 Medium
- avast antivirus, filseclab twister antivirus +1 moreTwister Antivirus IoControlCode filmfd.sys 0x801120E4 access control5.3 Medium
- medical certificate generator app project certificate generator app, sourcecodester medical certificate generator app +1 moreSourceCodester Medical Certificate Generator App New Record cross site scripting3.5 Low
- jp1016 markdown-electronJP1016 Markdown-Electron code injection5.3 Medium
- marktextMarkText WSH JScript code injection5.3 Medium
- typoraTypora WSH JScript code injection5.3 Medium
- muyucmsMuYuCMS index.php path traversal4.3 Medium
- sales tracker management system project tracker management system, sourcecodester sales tracker management system +1 moreSourceCodester Sales Tracker Management System cross-site request forgery4.3 Medium
- alphaware simple e-commerce system project simple e-commerce system, sourcecodester alphaware simple e-commerce system +1 moreSourceCodester Alphaware Simple E-Commerce System Payment summary.php access control6.5 Medium
- moosikay e-commerce system project e-commerce system, sourcecodester moosikay e-commerce system +1 moreSourceCodester Moosikay E-Commerce System POST Parameter order.php sql injection7.3 High
- rangy project rangyrangy vulnerable to Prototype Pollution7.5 High
- abb infinity dc power plant, ne843 s, pulsar plus system controller ne843 s +2 moreCross Site Scripting vulnerability in NE843 Pulsar Plus Controller4.6 Medium
- struktur libheifThere is a vulnerability in the strided image data parsing code in the emscripten wrapper for...7.8 High
- bstek uruleAn XML External Entity (XXE) vulnerability in urule v2.1.7 allows attackers to execute arbitrary...9.8 Critical
- mz-automation lib60870An issue was discovered in lib60870 v2.3.2. There is a memory leak in lib60870/lib60870-C...5.5 Medium
- shirasagi project shirasagiStored cross-site scripting vulnerability in Theme switching function of SHIRASAGI v1.16.2 and...4.8 Medium
- shirasagi project shirasagiStored cross-site scripting vulnerability in Schedule function of SHIRASAGI v1.16.2 and earlier...5.4 Medium
- unilogies unilogies/bumsys, business management system project management system +1 moreCross-site Scripting (XSS) - Stored in unilogies/bumsys5.4 Medium
- francoisjacquet francoisjacquet/rosariosis, rosariosis +1 moreExposure of Sensitive Information to an Unauthorized Actor in francoisjacquet/rosariosis8.1 High
- schneider electric clearscada, ecostruxure geo scada expert 2019, ecostruxure geo scada expert 2020 +1 more +3 moreA CWE-117: Improper Output Neutralization for Logs vulnerability exists that could cause the...5.3 Medium
- quarkusRestEasy Reactive implementation of Quarkus allows Creation of Temporary File With Insecure Permissions3.3 Low
- paypal braintree\/sanitize-url@braintree/sanitize-url Cross-site Scripting vulnerability6.1 Medium
- swftoolsttftool v0.9.2 was discovered to contain a segmentation violation via the readU16 function at ttf.c.5.5 Medium
- ecdh project ecdhecdh vulnerable to Exposure of Resource to Wrong Sphere7.5 High
- txjia imcatAn issue found in Peacexie Imcat v5.4 allows attackers to execute arbitrary code via the...9.8 Critical
- txjia imcatArbitrary File Read vulnerability found in Peacexie ImCat v.5.2 fixed in v.5.4 allows attackers...6.5 Medium
- balero cms project cmsFile Upload vulnerability in balerocms-src 0.8.3 allows remote attackers to run arbitrary code...7.2 High
- online book store project book storeSQL injection vulnerability in sourcecodester online-book-store 1.0 allows remote attackers to...7.5 High
- taogogo taocmsCross Site Request Forgery (CSRF) vulnerability in taoCMS 3.0.2 allows remote attackers to gain...8.8 High
- 1234n minicmsCross Site Scripting Vulnerability in MiniCMS v.1.10 allows attacker to execute arbitrary code...9.6 Critical
- umbraco formsFile upload vulnerability in Umbraco Forms v.8.7.0 allows unauthenticated attackers to execute...9.8 Critical
- mod gnutls project gnutls, airtower-luna mod gnutls +1 moremod_gnutls contains Infinite Loop on request read timeout7.5 High
- gradio-app gradioGradio contains Use of Hard-coded Credentials5.4 Medium
- ge digital industrial gateway server, microsoft .net-sdk, ptc kepware kepserverex +10 more +12 moreThe affected products are vulnerable to an integer overflow or wraparound, which could allow an...9.8 Critical
- ge digital industrial gateway server, microsoft .net-sdk, ptc kepware kepserverex +10 more +12 moreThe affected products are vulnerable to an improper validation of array index, which could allow...9.8 Critical
- mantisbtMantisBT: Exposure of Private issues' summary to unauthorized users4.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the group creation process.5.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the user creation process.5.4 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2022.10.2 jVMTI was enabled by default on agents.5.2 Medium
- online pizza ordering system project pizza ordering system, sourcecodester online pizza ordering system +1 moreSourceCodester Online Pizza Ordering System cross-site request forgery4.3 Medium
- online pizza ordering system project pizza ordering system, sourcecodester online pizza ordering system +1 moreSourceCodester Online Pizza Ordering System cross site scripting3.5 Low
- sales tracker management system project tracker management system, sourcecodester sales tracker management system +1 moreSourceCodester Sales Tracker Management System Edit User sql injection6.3 Medium
- quantumcloud ai chatbot, chatbot +1 moreWordPress AI ChatBot plugin <= 4.2.8 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- wpdevart organization chartWordPress Organization chart Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- opennms horizon, meridian +1 morePlaintext Password Present in the Web logs6.8 Medium
- Show moreLoading…