Archive
6 February 2023
Vulnerabilities first published on this day (UTC), newest first.
187 results · Feed
-
Medium 6.7
In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escal…
-
Medium 6.4
In ccd, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege…
-
Medium 5.4
Softr v2.0 was discovered to contain a HTML injection vulnerability via the Work Space Name parameter.
-
High 7.5CVE-2022-48166 Scanner template
An access control issue in Wavlink WL-WN530HG4 M30HG4.V5030.201217 allows unauthenticated attackers to download configu…
-
High 7.8
The components wfshbr64.sys and wfshbr32.sys in Another Eden before v3.0.20 and before v2.14.200 allows attackers to pe…
-
Critical 9.0CVE-2022-48311 Public exploit
**UNSUPPORTED WHEN ASSIGNED** Cross Site Scripting (XSS) in HP Deskjet 2540 series printer Firmware Version CEP1FN1418B…
-
Critical 9.8
pycdc commit 44a730f3a889503014fec94ae6e62d8401cb75e5 was discovered to contain a stack overflow via the component ASTr…
-
High 7.5CVE-2022-48164 Scanner template
An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN533A8 M33A8.V5030.190716 allows unauthe…
-
Medium 5.9
BTicino Door Entry HOMETOUCH for iOS 1.4.2 was discovered to be missing an SSL certificate.
-
High 7.2
All versions before 8.0.1-R2022-10-RT and 7.3.1-R2022-09-RT of the Talend ESB Runtime are potentially vulnerable to SQL…
-
Unscored —
ezEIP v5.3.0(0649) was discovered to contain a cross-site scripting (XSS) vulnerability.
-
High 7.5
A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will …
-
High 7.5
CRMEB 4.4.4 is vulnerable to Any File download.
-
Medium 6.5
ImageMagick 7.1.0-49 is vulnerable to Denial of Service. When it parses a PNG image (e.g., for resize), the convert pro…
-
Medium 6.5
ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the result…
-
Medium 4.9
An issue was discovered in Couchbase Server 7.x before 7.0.5 and 7.1.x before 7.1.2. A crafted HTTP REST request from a…
-
High 8.1
An issue was discovered in Couchbase Server 6.5.x and 6.6.x before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2. Dur…
-
Critical 9.8CVE-2022-47071 EPSS 43%
In NVS365 V01, the background network test function can trigger command execution.
-
Unscored —
Western Digital My Cloud devices before OS5 have a nobody account with a blank password.
-
High 8.8
Western Digital My Cloud devices before OS5 allow REST API access by low-privileged accounts, as demonstrated by API co…
-
Critical 9.8
Western Digital My Cloud devices before OS5 do not use cryptographically signed Firmware upgrade files.
-
Unscored —
In Boa, there is a possible escalation of privilege due to a stack buffer overflow. This could lead to remote escalatio…
-
Unscored —
In Boa, there is a possible escalation of privilege due to a missing permission check. This could lead to remote escala…
-
Critical 9.8
In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote es…
-
Critical 9.8
In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote es…
-
Unscored —
In Boa, there is a possible information disclosure due to a missing permission check. This could lead to remote informa…
-
Critical 9.8
In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote es…