1 February 2023

13 results · Clear filters · Feed

• Critical 9.4
  CVE-2023-22501 EPSS 16%

  An authentication vulnerability was discovered in Jira Service Management Server and Data Center which allows an attack…

  Atlassian Jira Service Management Data Center Jira Service Management Server Web / CMS
  Feb 1, 2023
• Critical 9.8
  CVE-2023-24997

  Apache InLong: Jdbc Connection Security Bypass

  Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade to Apache InLong's latest version or cherry-pick https://github.com/apache/inl…

  Apache Software Foundation Apache InLong org.apache.inlong:inlong Maven
  Feb 1, 2023
• Critical 9.1
  CVE-2023-0587 EPSS 60%

  A file upload vulnerability in exists in Trend Micro Apex One server build 11110. Using a malformed Content-Length head…

  Feb 1, 2023
• Critical 9.3
  CVE-2023-0606

  Cross-site Scripting (XSS) - Reflected in ampache/ampache

  Cross-site Scripting (XSS) - Reflected in GitHub repository ampache/ampache prior to 5.5.7.

  ampache ampache/ampache ampache Ubuntu
  Feb 1, 2023
• Critical 9.8
  CVE-2023-23076 EPSS 74%

  OS Command injection vulnerability in Support Center Plus 11 via Executor in Action when creating new schedules.

  Feb 1, 2023
• Critical 9.8
  CVE-2022-24324

  A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overfl…

  Schneider Electric IGSS Data Server (IGSSdataServer.exe) ICS / OT
  Feb 1, 2023
• Critical 9.8
  CVE-2022-2329

  A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to …

  Schneider Electric IGSS Data Server (IGSSdataServer.exe) ICS / OT
  Feb 1, 2023
• Critical 9.8
  CVE-2022-42971

  A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could cause remote code execution …

  Schneider Electric Schneider Electric Easy UPS Online Monitoring Software APC Easy UPS Online Monitoring Software ICS / OT
  Feb 1, 2023
• Critical 9.8
  CVE-2022-42970

  A CWE-306: Missing Authentication for Critical Function The software does not perform any authentication for functional…

  Schneider Electric APC Easy UPS Online Monitoring Software Schneider Electric Easy UPS Online Monitoring Software ICS / OT
  Feb 1, 2023
• Critical 9.8
  CVE-2022-47714

  Last Yard 22.09.8-1 does not enforce HSTS headers

  Feb 1, 2023
• Critical 9.8
  CVE-2022-47769

  An arbitrary file write vulnerability in Serenissima Informatica Fast Checkin v1.0 allows unauthenticated attackers to …

  Feb 1, 2023
• Critical 9.8
  CVE-2022-47003 Scanner template

  A vulnerability in the Remember Me function of Mura CMS before v10.0.580 allows attackers to bypass authentication via …

  Feb 1, 2023
• Critical 9.8
  CVE-2022-47770

  Serenissima Informatica Fast Checkin version v1.0 is vulnerable to Unauthenticated SQL Injection.

  Feb 1, 2023