Archive

4 February 2023

Vulnerabilities first published on this day (UTC), newest first.

← January 2023 2023 / February /4 March 2023 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

High 8.1

CVE-2022-45786

Apache AGE: Python and Golang drivers allow data manipulation and exposure due to SQL injection

There are issues with the AGE drivers for Golang and Python that enable SQL injections to occur. This impacts AGE for PostgreSQL 11 & AGE for PostgreSQL 12, all versions up-to-and-including 1.1.0, when using those drivers. The fix is to update to the latest G…

Apache Software Foundation Apache AGE github.com/apache/age/drivers/golang apache-age-python PyPI Go

Feb 4, 2023
High 7.5

CVE-2023-0678 Scanner template EPSS 37%

Missing Authorization in phpipam/phpipam

Missing Authorization in GitHub repository phpipam/phpipam prior to v1.5.1.

phpipam phpipam/phpipam

Feb 4, 2023
High 7.5

CVE-2023-25193

hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks duri…

openjdk-lts openjdk-9 openjdk-13 openjdk11 Debian Ubuntu Azure Linux Alpine Wolfi

Feb 4, 2023