Skip to content
OpenAdvisories

Archive

6 February 2023

Vulnerabilities first published on this day (UTC), newest first.

← January 2023 2023 / February /6 March 2023 →
  1. 1120
  2. 250
  3. 3117
  4. 416
  5. 53
  6. 6187
  7. 784
  8. 875
  9. 9125
  10. 1074
  11. 115
  12. 1216
  13. 13119
  14. 14203
  15. 1594
  16. 16172
  17. 17101
  18. 1814
  19. 199
  20. 2051
  21. 2185
  22. 2261
  23. 2357
  24. 2452
  25. 2518
  26. 2621
  27. 27145
  28. 28115
All Critical High Medium Low Exploited only Public exploit

16 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-3229 Public exploit EPSS 66%

    Because the web management interface for Unified Intents' Unified Remote solution does not itself require authenticatio…

    Unified Intents AB Unified Remote
  • Critical 9.8
    CVE-2022-4681 Public exploit

    Hide My WP < 6.2.9 - Unauthenticated SQLi

    The Hide My WP WordPress plugin before 6.2.9 does not properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.

    Web / CMS
  • Critical 9.8
    CVE-2023-24201

    Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at get_ticket.php.

  • Critical 9.8
    CVE-2023-24200

    Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at save_ticket.php.

  • Critical 9.8
    CVE-2023-24276

    TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the country par…

  • Critical 9.8
    CVE-2023-24198

    Raffle Draw System v1.0 was discovered to contain multiple SQL injection vulnerabilities at save_winner.php via the tic…

  • Critical 9.8
    CVE-2023-24199

    Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at delete_ticket.p…

  • Critical 9.8
    CVE-2023-24202

    Raffle Draw System v1.0 was discovered to contain a local file inclusion vulnerability via the page parameter in index.…

  • Critical 9.8
    CVE-2023-23333 Public exploit Scanner template EPSS 99%

    There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassi…

  • Critical 9.0
    CVE-2022-48311 Public exploit

    **UNSUPPORTED WHEN ASSIGNED** Cross Site Scripting (XSS) in HP Deskjet 2540 series printer Firmware Version CEP1FN1418B…

  • Critical 9.8
    CVE-2022-48078

    pycdc commit 44a730f3a889503014fec94ae6e62d8401cb75e5 was discovered to contain a stack overflow via the component ASTr…

  • Critical 9.8
    CVE-2022-47071 EPSS 43%

    In NVS365 V01, the background network test function can trigger command execution.

  • Critical 9.8
    CVE-2021-36226

    Western Digital My Cloud devices before OS5 do not use cryptographically signed Firmware upgrade files.

  • Critical 9.8
    CVE-2021-31574

    In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote es…

    MediaTek EN7528, EN7580
  • Critical 9.8
    CVE-2021-31575

    In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote es…

    MediaTek EN7528, EN7580
  • Critical 9.8
    CVE-2021-31573

    In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote es…

    MediaTek EN7528, EN7580