Skip to content
OpenAdvisories

Archive

6 February 2023

Vulnerabilities first published on this day (UTC), newest first.

← January 2023 2023 / February /6 March 2023 →
  1. 1120
  2. 250
  3. 3117
  4. 416
  5. 53
  6. 6187
  7. 784
  8. 875
  9. 9125
  10. 1074
  11. 115
  12. 1216
  13. 13119
  14. 14203
  15. 1594
  16. 16172
  17. 17101
  18. 1814
  19. 199
  20. 2051
  21. 2185
  22. 2261
  23. 2357
  24. 2452
  25. 2518
  26. 2621
  27. 27145
  28. 28115
All Critical High Medium Low Exploited only Public exploit

19 results · Clear filters · Feed

  • High 8.6
    CVE-2022-41731

    IBM Watson Knowledge Catalog on Cloud Pak SQL injection

    IBM Watson Knowledge Catalog on Cloud Pak for Data 4.5.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-F…

    IBM Watson Knowledge Catalog on-prem
  • High 7.2
    CVE-2022-4489

    WOOF - Products Filter for WooCommerce < 1.3.2 - Admin+ PHP Object Injection

    The HUSKY WordPress plugin before 1.3.2 unserializes user input provided via the settings, which could allow high privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.

    Web / CMS
  • High 8.8
    CVE-2023-0234 EPSS 18%

    SiteGround Security < 1.3.1 - Admin+ SQLi

    The SiteGround Security WordPress plugin before 1.3.1 does not properly sanitize user input before using it in an SQL query, leading to an authenticated SQL injection issue.

    Web / CMS
  • High 7.2
    CVE-2023-0669 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Fortra GoAnywhere MFT License Response Servlet Command Injection

    Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. This issue was patched in version 7.1.2.

    Fortra GoAnywhere MFT
    KEV Feb 10, 2023
  • High 7.8
    CVE-2022-40196

    Improper access control in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.2.1 and Intel C++ Compiler Classi…

  • High 7.8
    CVE-2022-47361

    In firewall service, there is a missing permission check. This could lead to local escalation of privilege with system …

    Unisoc (Shanghai) Technologies SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
  • High 7.4
    CVE-2022-25853

    semver-tags is vulnerable to Command Injection via the getGitTagsRemote function

    All versions of the package semver-tags are vulnerable to Command Injection via the getGitTagsRemote function due to improper input sanitization.

    semver-tags npm
  • High 7.4
    CVE-2022-25855

    create-choo-app3 is vulnerable to Command Injection via the devInstall function

    All versions of the package create-choo-app3 are vulnerable to Command Injection via the devInstall function due to improper user-input sanitization.

    create-choo-app3 npm
  • High 8.1
    CVE-2023-23849

    Versions of Coverity Connect prior to 2022.12.0 are vulnerable to an unauthenticated Cross-Site Scripting vulnerability…

    Synopsys Coverity
  • High 7.5
    CVE-2023-25016

    Couchbase Server before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2 exposes Sensitive Information to an Unauthorize…

  • High 7.5
    CVE-2022-32663

    In Wi-Fi driver, there is a possible system crash due to null pointer dereference. This could lead to remote denial of …

    MediaTek MT5221, MT7603, MT7613, MT7615, MT7622, MT7628, MT7629, MT7668, MT7902, MT7915, MT7916, MT7921, MT7981, MT7986, MT8167S, MT8175, MT8362A, MT8365, MT8385, MT8518S, MT8532, MT8788
  • High 7.5
    CVE-2022-48166 Scanner template

    An access control issue in Wavlink WL-WN530HG4 M30HG4.V5030.201217 allows unauthenticated attackers to download configu…

  • High 7.8
    CVE-2022-48019

    The components wfshbr64.sys and wfshbr32.sys in Another Eden before v3.0.20 and before v2.14.200 allows attackers to pe…

  • High 7.5
    CVE-2022-48164 Scanner template

    An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN533A8 M33A8.V5030.190716 allows unauthe…

  • High 7.2
    CVE-2022-45589

    All versions before 8.0.1-R2022-10-RT and 7.3.1-R2022-09-RT of the Talend ESB Runtime are potentially vulnerable to SQL…

  • High 7.5
    CVE-2022-44617

    A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will …

    libxpm motif libxpm libxpm Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.5
    CVE-2022-44343

    CRMEB 4.4.4 is vulnerable to Any File download.

  • High 8.1
    CVE-2022-42951

    An issue was discovered in Couchbase Server 6.5.x and 6.6.x before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2. Dur…

  • High 8.8
    CVE-2021-36225

    Western Digital My Cloud devices before OS5 allow REST API access by low-privileged accounts, as demonstrated by API co…