Skip to content
OpenAdvisories

Archive

7 February 2023

Vulnerabilities first published on this day (UTC), newest first.

← January 2023 2023 / February /7 March 2023 →
  1. 1120
  2. 250
  3. 3117
  4. 416
  5. 53
  6. 6187
  7. 784
  8. 875
  9. 9125
  10. 1074
  11. 115
  12. 1216
  13. 13119
  14. 14203
  15. 1594
  16. 16172
  17. 17101
  18. 1814
  19. 199
  20. 2051
  21. 2185
  22. 2261
  23. 2357
  24. 2452
  25. 2518
  26. 2621
  27. 27145
  28. 28115
All Critical High Medium Low Exploited only Public exploit

50 results · Clear filters · Feed

  • Medium 6.1
    CVE-2023-23011

    Cross Site Scripting (XSS) vulnerability in InvoicePlane 1.6 via filter_product input to file modal_product_lookups.php.

  • Medium 6.3
    CVE-2023-22643

    libzypp-plugin-appdata: potential arbitrary code execution via shell injection due to `os.system` calls

    An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in libzypp-plugin-appdata of SUSE Linux Enterprise Server for SAP 15-SP3; openSUSE Leap 15.4 allows attackers that can trick users to use specially cra…

    SUSE openSUSE openSUSE Leap 15.4 SUSE Linux Enterprise Server for SAP 15-SP3 Linux
  • Medium 6.5
    CVE-2022-45191

    An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can cause a denial of serv…

  • Medium 6.5
    CVE-2022-45192

    An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can cause a denial of serv…

  • Medium 6.1
    CVE-2022-45441

    A cross-site scripting (XSS) vulnerability in Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.13)C0, which coul…

    Zyxel NBG-418N v2 firmware Network devices
  • Medium 4.3
    CVE-2022-45854

    An improper check for unusual conditions in Zyxel NWA110AX firmware verisons prior to 6.50(ABTG.0)C0, which could allow…

    Zyxel NWA110AX firmware Network devices
  • Medium 5.3
    CVE-2022-45190

    An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can bypass passkey entry i…

  • Medium 6.5
    CVE-2022-40480

    Nordic Semiconductor, Microchip Technology NRF5340-DK DT100112 was discovered to contain an issue which allows attacker…

  • Medium 4.3
    CVE-2022-21948

    paste: XSS on the image upload function

    An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in paste allows remote attackers to place Javascript into SVG files. This issue affects: openSUSE paste paste version b57b9f87e303a3db9465776e657378e96845493…

    openSUSE paste
  • Medium 5.9
    CVE-2022-43756

    Rancher/Wrangler: Denial of service when processing Git credentials

    A Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in SUSE Rancher allows remote attackers to cause denial of service by supplying specially crafted git credentials. This issue affects: SUSE Ranc…

    SUSE Rancher github.com/rancher/wrangler Go