Archive
2 February 2023
Vulnerabilities first published on this day (UTC), newest first.
6 results · Clear filters · Feed
-
Critical 10.0
IBM Tivoli Workload Scheduler XML external entity injection
IBM Tivoli Workload Scheduler 9.4, 9.5, and 10.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-For…
-
Critical 9.8
Monnai aaPanel host system v1.5 contains an access control issue which allows attackers to escalate privileges and exec…
-
Critical 9.8
Easyone CRM v5.50.02 was discovered to contain a SQL Injection vulnerability via the text parameter at /Services/Misc.a…
-
Critical 9.8
RuoYi up to v4.7.5 was discovered to contain a SQL injection vulnerability via the component /tool/gen/createTable.
-
Critical 9.8
A vulnerability in TOTOLINK N200RE_v5 firmware V9.3.5u.6139 allows unauthenticated attackers to access the telnet servi…
-
Critical 9.8
Tenda W20E v15.11.0.6 was discovered to contain multiple stack overflows in the function formSetStaticRoute via the par…