CVEs published in February 2023
2,729 vulnerabilities, 255 critical, 10 exploited.
- ibm http serverIBM HTTP Server denial of service5.9 Medium
- automatorwpWordPress AutomatorWP Plugin <= 2.5.0 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- strategy11 form builder team formidable forms, strategy11 formidable form builder +1 moreWordPress Formidable Forms Plugin <= 5.5.6 is vulnerable to Cross Site Request Forgery (CSRF)7.1 High
- captainform, captainform forms by captainform – form builder for wordpress +1 moreWordPress Forms by CaptainForm Plugin <= 2.5.3 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
mrubyOSS-FuzzHeap-use-after-free in mrb_gc_markNo scorelibavcOSS-FuzzHeap-buffer-overflow in isvcd_nal_byte_swap_emulationNo score- joomunited wp meta seoWP Meta SEO <= 4.5.3 - Missing Authorization in 'wpmsGGSaveInformation'5.4 Medium
- joomunited wp meta seoWP Meta SEO <= 4.5.3 - Missing Authorization in 'saveSitemapSettings'5.4 Medium
- joomunited wp meta seoWP Meta SEO <= 4.5.3 - Missing Authorization in 'regenerateSitemaps'4.3 Medium
- joomunited wp meta seoWP Meta SEO <= 4.5.3 - Missing Authorization in 'listPostsCategory'4.3 Medium
- joomunited wp meta seoWP Meta SEO <= 4.5.3 - Missing Authorization in 'checkAllCategoryInSitemap'4.3 Medium
- joomunited wp meta seoWP Meta SEO <= 4.5.3 - Cross-Site Request Forgery via 'setIgnore'4.3 Medium
- gnpublisher gn publisher, gn publisher: google news compatible rss feeds +1 moreGN Publisher <= 1.5.5 - Reflected Cross-Site Scripting6.1 Medium
- utilities project utilitiesmde utilities contains Prototype Pollution7.5 High
- abb merging unit- smu615, relion protection relays - 611 series, relion protection relays - 615 series cn 4.0 fp1 +29 more +31 moreMMS File Transfer Vulnerability impact on Distribution Automation products6.2 Medium
- hitachi automation director, infrastructure analytics advisor, ops center analyzer +2 more +4 moreFile and Directory Permissions Vulnerability in Hitachi Automation Director, Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center6.6 Medium
- hitachi infrastructure analytics advisor, ops center analyzer +1 moreMan-in-the-middle attack Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer8.6 High
- hitachi ops center analyzerDirectory Permission Vulnerability in Hitachi Ops Center Analyzer7.3 High
- opencyclecompass server-phpOpenCycleCompass server-php login.php sql injection7.3 High
- gnu libmicrohttpd, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreGNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of...5.9 Medium
- sudo project sudo, fedoraproject fedora +1 moreSudo before 1.9.13p2 has a double free in the per-command chroot feature.7.2 High
- opencatsCross-site request forgery is facilitated by OpenCATS failure to require CSRF tokens in POST...5.4 Medium
- opencatsImproper neutralization of input during web page generation allows an authenticated attacker with...5.4 Medium
- opencatsImproper neutralization of input during web page generation allows an unauthenticated attacker to...6.1 Medium
- opencatsAn open redirect vulnerability exposes OpenCATS to template injection due to improper validation...5.4 Medium
- stagil navigationAn unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu &...7.5 High
- stagil navigationAn unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu &...7.5 High
- online reviewer management system project reviewer management systemAn issue was discovered in Online Reviewer Management System v1.0. There is a SQL injection that...7.2 High
- online reviewer management system project reviewer management systemAn issue was discovered in Online Reviewer Management System v1.0. There is a XSS vulnerability...4.8 Medium
- docmosis tornadoAn issue was discovered in Docmosis Tornado prior to version 2.9.5. An authenticated attacker can...8.8 High
- docmosis tornadoDocmosis Tornado <= 2.9.4 is vulnerable to Directory Traversal leading to the disclosure of...7.5 High
- docmosis tornadoAn issue was discovered in Docmosis Tornado prior to version 2.9.5. An unauthenticated attacker...7.5 High
- linux kernelIn the Linux kernel before 5.16.3, drivers/usb/dwc3/dwc3-qcom.c misinterprets the...5.5 Medium
- linux kernelIn the Linux kernel before 6.0.3, drivers/gpu/drm/virtio/virtgpu_object.c misinterprets the...5.5 Medium
- linux kernelIn the Linux kernel before 6.1.2, kernel/module/decompress.c misinterprets the...5.5 Medium
- linux kernelIn the Linux kernel before 5.17.2, drivers/soc/qcom/qcom_aoss.c does not release an...5.5 Medium
- linux kernelIn the Linux kernel before 5.17, an error path in dwc3_qcom_acpi_register_core in drivers/usb...7.8 High
- vmware workspace one contentVMware Workspace ONE Content contains a passcode bypass vulnerability. A malicious actor, with...6.8 Medium
- linux kernel, redhat enterprise linux, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreIn nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to...5.5 Medium
- microweber, microweber microweber/microweber +1 moreCross-site Scripting (XSS) - Stored in microweber/microweber5.7 Medium
- linux kernelA flaw was found in the Linux Kernel. The tls_is_tx_ready() incorrectly checks for list emptiness...3.3 Low
- linux kernelA memory leak flaw was found in the Linux kernel's Stream Control Transmission Protocol. This...5.5 Medium
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreA memory corruption flaw was found in the Linux kernel’s human interface device (HID) subsystem...6.6 Medium
- trusted computing group tpm2.0, microsoft windows 10 1507, windows 10 1607 +10 more +12 moreTPM2.0 vulnerable to out-of-bounds read5.5 Medium
- trusted computing group tpm2.0, microsoft windows 10 1507, windows 10 1607 +10 more +12 moreTPM2.0 vulnerable to out-of-bounds write7.8 High
- smartofficepayroll smartofficeAn issue was discovered in Smart Office Web 20.28 and earlier allows attackers to view sensitive...7.5 High
- smartofficepayroll smartofficeAn issue was discovered in Smart Office Web 20.28 and earlier allows attackers to download...7.5 High
- quest kace systems management applianceAn XSS vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.1...6.1 Medium
- netapp active iq unified managerActive IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9...6.5 Medium
- netapp active iq unified managerActive IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9...4.8 Medium
- Show moreLoading…