Archive
1 February 2023
Vulnerabilities first published on this day (UTC), newest first.
59 results · Clear filters · Feed
-
High 8.8CVE-2023-24610 Public exploit
NOSH 4a5cfdb allows remote authenticated users to execute PHP arbitrary code via the "practice logo" upload feature. Th…
-
High 7.5
Selfwealth iOS mobile App 3.3.1 is vulnerable to Sensitive key disclosure. The application reveals hardcoded API keys.
-
High 7.2
An arbitrary file upload vulnerability in Ftdms v3.1.6 allows attackers to execute arbitrary code via uploading a craft…
-
High 7.5
Due to insufficient length validation in the Open5GS GTP library versions prior to versions 2.4.13 and 2.5.7, when pars…
-
High 7.5
Selfwealth iOS mobile App 3.3.1 is vulnerable to Insecure App Transport Security (ATS) Settings.
-
High 7.5CVE-2023-23969 EPSS 47%
Django contains Uncontrolled Resource Consumption via cached header
In Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6, the parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. This leads to a potential denial-of-service vector via excessive memory usage if the raw value o…
-
High 8.8
VMware vRealize Operations (vROps) contains a CSRF bypass vulnerability. A malicious user could execute actions on the …
-
High 7.8
A CWE-285: Improper Authorization vulnerability exists that could cause unauthorized access to certain software functio…
-
High 8.8
sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters
-
High 8.2
Cypress : https://www.infineon.com/ Cypress Bluetooth Mesh SDK BSA0107_05.01.00-BX8-AMESH-08 is affected by: Buffer Ove…
-
High 8.2
Cypress : https://www.infineon.com/ Cypress Bluetooth Mesh SDK BSA0107_05.01.00-BX8-AMESH-08 is affected by: Buffer Ove…
-
High 7.2
Seacms v12.7 was discovered to contain a remote code execution (RCE) vulnerability via the ip parameter at admin_ ip.ph…
-
High 8.8CVE-2022-45782 Public exploit
An issue was discovered in dotCMS core 5.3.8.5 through 5.3.8.15 and 21.03 through 22.10.1. A cryptographically insecure…
-
High 8.2
In Bestechnic Bluetooth Mesh SDK (BES2300) V1.0, a buffer overflow vulnerability can be triggered during provisioning, …
-
High 7.8
A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could cause local privilege …
-
High 7.8
A CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause local privilege escalation when local at…
-
High 7.5
Serenissima Informatica Fast Checkin 1.0 is vulnerable to Directory Traversal.
-
High 7.5
Last Yard 22.09.8-1 is vulnerable to Cross-origin resource sharing (CORS).
-
High 7.5
A CWE-200: Information Exposure vulnerability exists that could cause the exposure of sensitive information stored on t…