CVEs published in February 2023
2,729 vulnerabilities, 255 critical, 10 exploited.
- online reviewer management system project reviewer management system, sourcecodester online reviewer management system +1 moreSourceCodester Online Reviewer Management System questions-view.php sql injection6.3 Medium
- dental clinic appointment reservation system project clinic appointment reservation system, sourcecodester dental clinic appointment reservation system +1 moreSourceCodester Dental Clinic Appointment Reservation System POST Parameter login.php sql injection7.3 High
- dental clinic appointment reservation system project clinic appointment reservation system, sourcecodester dental clinic appointment reservation system +1 moreSourceCodester Dental Clinic Appointment Reservation System POST Parameter signup.php cross site scripting4.3 Medium
- dro.pm project dro.pmdro.pm fileman.php cross site scripting3.5 Low
- linux kernel, netapp hci baseboard management controller, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreIn the Linux kernel 6.0.8, there is an out-of-bounds read in ntfs_attr_find in fs/ntfs/attrib.c.7.1 High
- linux kernelIn the Linux kernel 6.0.8, there is a use-after-free in ntfs_trim_fs in fs/ntfs3/bitmap.c.7.8 High
- linux kernelIn the Linux kernel 6.0.8, there is a use-after-free in inode_cgwb_move_to_attached in fs/fs...7.8 High
- asus asmb8-ikvm firmwareASUS ASMB8 iKVM firmware through 1.14.51 allows remote attackers to execute arbitrary code by...9.8 Critical
- frappant forms exportfrp_form_answers allows Cross-site Scripting6.1 Medium
- musicpd music player daemonIn MPD before 0.23.8, as used on Automotive Grade Linux and other platforms, the PipeWire output...7.5 High
- zephyrproject zephyrDOS: Incorrect handling of the initial HCI ACL_MTU handshake packet leads to crash of bluetooth host layer9.6 Critical
wolfsslOSS-FuzzHeap-buffer-overflow in DecodeBasicOcspResponseNo scoreasciicrates.ioAscii (crate) allows out-of-bounds array indexing in safe codeNo score- sourcecodester clinics patient management system, oretnom23 clinic\'s patient management system +1 moreSourceCodester Clinics Patient Management System update_user.php sql injection6.3 Medium
- lite-web-server project lite-web-serverDenial of Service vulnerability in lite-web-server7.5 High
- denoRegular Expression Denial of Service in Deno.upgradeWebSocket API5.3 Medium
- zoneminderZoneMinder vulnerable to OS Command injection in daemonControl() API7.1 High
- zoneminderZoneMinder contains Local File Inclusion vulnerability via `web/ajax/modal.php`5.4 Medium
- zoneminderZoneMinder contains SQL Injection via report_event_audit8.9 High
- zoneminderZoneMinder contains Local File Inclusion vulnerability8.1 High
- zoneminderZoneMinder vulnerable to Missing Authorization7.2 High
- zoneminderZoneMinder SQL Injection9.6 Critical
- zoneminderZoneMinder contains SQL injection via malicious Jason Web Token8.9 High
- zoneminderZoneMinder contains Cross-site Scripting via log viewing7.7 High
- bmc control-mA SQL injection vulnerability in BMC Control-M before 9.0.20.214 allows attackers to execute...9.8 Critical
- debian linux, linux kernel, netapp h300s firmware +4 more +6 moreIn the Linux kernel before 6.1.13, there is a double free in net/mpls/af_mpls.c upon an...4.7 Medium
- linux kernelIn the Linux kernel 6.0.8, there is a use-after-free in run_unpack in fs/ntfs3/run.c, related to...7.8 High
- salesagility salesagility/suitecrm, suitecrm +1 morePath Traversal: '\..\filename' in salesagility/suitecrm4.3 Medium
- froxlor, froxlor froxlor/froxlor +1 moreCross-Site Request Forgery (CSRF) in froxlor/froxlor6.8 Medium
- zohocorp manageengine desktop centralZoho ManageEngine Desktop Central and Desktop Central MSP before 10.1.2137.2 allow directory...8.8 High
- gogs, gogs gogs/gogs +1 moreOS Command Injection in gogs/gogs9.8 Critical
- kiteworks security-advisories, nextcloud server +1 moreNextcloud download permissions can be changed by resharer5.7 Medium
- gentoo sokoGentoo soko contains DoS attack based on SQL Injection7.5 High
- kiteworks security-advisories, nextcloud server +1 morenextcloud vulnerable to Uncontrolled Resource Consumption4.3 Medium
- code-projects online boat reservation system, online boat reservation system project boat reservation system +1 moreSourceCodester/code-projects Online Boat Reservation System POST Parameter login.php cross site scripting5.1 Medium
- joomunited wp meta seoWP Meta SEO <= 4.5.3 - Cross-Site Request Forgery via 'regenerateSitemaps'4.3 Medium
org.neo4j.procedure:apocMavenXML External Entity (XXE) vulnerability in apoc.import.graphml5.9 Medium- litedbLiteDB contains Deserialization of Untrusted Data7.3 High
- aioseo all in one seo, smub all in one seo – powerful seo plugin to boost seo rankings & increase traffic +1 moreAll in One SEO Pack <= 4.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- aioseo all in one seo, smub all in one seo – powerful seo plugin to boost seo rankings & increase traffic +1 moreAll in One SEO Pack <= 4.2.9 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4 Medium
- ibm maximo application suiteIBM Maximo Application Suite 8.8.0 and 8.9.0 stores potentially sensitive information that could...6.2 Medium
sudoersOSS-FuzzUNKNOWN WRITE in sudo_lbuf_append_quoted_v1No scorehdf5OSS-FuzzHeap-buffer-overflow in H5FS__sect_linkNo score- liman central management system central management system, liman port mys +1 moreCommand Injection in Liman Central Management System8.8 High
ndpiOSS-FuzzSegv on unknown address in ndpi_free_flow_dataNo scoreqemuOSS-FuzzHeap-use-after-free in pci_enumNo scoreremove_dir_allcrates.ioRace Condition Enabling Link Following and Time-of-check Time-of-use (TOCTOU) Race Condition in remove_dir_allNo score- apache software foundation airflow aws provider, apache apache-airflow-providers-amazon +1 moreApache Airflow AWS Provider: Arbitrary file read via AWS provider7.5 High
- apache software foundation airflow hive provider, apache apache-airflow-providers-apache-hive +1 moreApache Airflow Hive Provider Beeline RCE9.8 Critical
- apache software foundation airflow sqoop provider, apache apache-airflow-providers-apache-sqoop +1 moreSqoop Apache Airflow Provider Remote Code Execution Vulnerability9.8 Critical
- Show moreLoading…