Skip to content
OpenAdvisories

Archive

7 February 2023

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.8
    CVE-2023-25194 Public exploit Scanner template EPSS 96%

    Apache Kafka Connect API: Possible RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration using Kafka Connect

    A possible security vulnerability has been identified in Apache Kafka Connect API. This requires access to a Kafka Connect worker, and the ability to create/modify connectors on it with an arbitrary Kafka client SASL JAAS config and a SASL-based security prot…

  • Critical 9.8
    CVE-2022-24990 Exploited · Ransomware Public exploit Scanner template EPSS 83%

    TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Age…

    KEV Feb 10, 2023