Skip to content
OpenAdvisories

Archive

6 February 2023

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-3229 Public exploit EPSS 66%

    Because the web management interface for Unified Intents' Unified Remote solution does not itself require authenticatio…

  • Critical 9.8
    CVE-2022-4681 Public exploit

    Hide My WP < 6.2.9 - Unauthenticated SQLi

    The Hide My WP WordPress plugin before 6.2.9 does not properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.

  • High 7.2
    CVE-2023-0669 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Fortra GoAnywhere MFT License Response Servlet Command Injection

    Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. This issue was patched in version 7.1.2.

    KEV Feb 10, 2023
  • Critical 9.8
    CVE-2023-23333 Public exploit Scanner template EPSS 99%

    There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassi…

  • Critical 9.0
    CVE-2022-48311 Public exploit

    **UNSUPPORTED WHEN ASSIGNED** Cross Site Scripting (XSS) in HP Deskjet 2540 series printer Firmware Version CEP1FN1418B…

  • Medium 6.5
    CVE-2022-44267 Public exploit EPSS 77%

    ImageMagick 7.1.0-49 is vulnerable to Denial of Service. When it parses a PNG image (e.g., for resize), the convert pro…

  • Medium 6.5
    CVE-2022-44268 Public exploit EPSS 90%

    ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the result…