Skip to content
OpenAdvisories

Archive

7 February 2023

Vulnerabilities first published on this day (UTC), newest first.

← January 2023 2023 / February /7 March 2023 →
  1. 1120
  2. 250
  3. 3117
  4. 416
  5. 53
  6. 6187
  7. 784
  8. 875
  9. 9125
  10. 1074
  11. 115
  12. 1216
  13. 13119
  14. 14203
  15. 1594
  16. 16172
  17. 17101
  18. 1814
  19. 199
  20. 2051
  21. 2185
  22. 2261
  23. 2357
  24. 2452
  25. 2518
  26. 2621
  27. 27145
  28. 28115
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 10.0
    CVE-2023-24813

    URI validation failure on SVG parsing. Bypass of CVE-2023-23924

    Dompdf is an HTML to PDF converter written in php. Due to the difference in the attribute parser of Dompdf and php-svg-lib, an attacker can still call arbitrary URLs with arbitrary protocols. Dompdf parses the href attribute of `image` tags and respects `xlin…

    dompdf dompdf dompdf/dompdf php-dompdf Debian Packagist
  • Critical 9.8
    CVE-2022-24990 Exploited · Ransomware Public exploit Scanner template EPSS 83%

    TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Age…

    KEV Feb 10, 2023
  • Critical 9.9
    CVE-2022-43757

    Rancher: Exposure of sensitive fields

    A Cleartext Storage of Sensitive Information vulnerability in SUSE Rancher allows users on managed clusters to gain access to credentials. The impact depends on the credentials exposed This issue affects: SUSE Rancher Rancher versions prior to 2.5.17; Rancher…

    SUSE Rancher github.com/rancher/rancher Go
  • Critical 9.8
    CVE-2021-36471

    Directory Traversal vulnerability in AdminLTE 3.1.0 allows remote attackers to gain escalated privilege and view sensit…