Skip to content
OpenAdvisories

Archive

8 February 2023

Vulnerabilities first published on this day (UTC), newest first.

← January 2023 2023 / February /8 March 2023 →
  1. 1120
  2. 250
  3. 3117
  4. 416
  5. 53
  6. 6187
  7. 784
  8. 875
  9. 9125
  10. 1074
  11. 115
  12. 1216
  13. 13119
  14. 14203
  15. 1594
  16. 16172
  17. 17101
  18. 1814
  19. 199
  20. 2051
  21. 2185
  22. 2261
  23. 2357
  24. 2452
  25. 2518
  26. 2621
  27. 27145
  28. 28115
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.6
    CVE-2023-25168

    Symbolic Link (Symlink) Following allowing the deletion of files and directories on the host system in wings

    Wings is Pterodactyl's server control plane. This vulnerability can be used to delete files and directories recursively on the host system. This vulnerability can be combined with `GHSA-p8r3-83r8-jwj5` to overwrite files on the host system. In order to use th…

    pterodactyl wings github.com/pterodactyl/wings Go
  • Critical 9.8
    CVE-2022-45088

    Local File Inclusion in Smartpower Web

    Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows PHP Local File Inclusion. This issue affects Smartpower Web: before 23.01.01.

    Group Arge Energy and Control Systems Smartpower Web
  • Critical 9.8
    CVE-2022-43764

    Buffer overflow when changing configuration on Tbase Server

    Insufficient validation of input parameters when changing configuration on Tbase server in B&R APROL versions < R 4.2-07 could result in buffer overflow. This may lead to Denial-of-Service conditions or execution of arbitrary code.

    B&R Industrial Automation B&R APROL
  • Critical 9.4
    CVE-2022-43761

    Lack of authentication when managing APROL database

    Missing authentication when creating and managing the B&R APROL database in versions < R 4.2-07 allows reading and changing the system configuration. 

    B&R Industrial Automation B&R APROL
  • Critical 9.8
    CVE-2023-0744 Public exploit

    Improper Access Control in answerdev/answer

    Improper Access Control in GitHub repository answerdev/answer prior to 1.0.4.

    answerdev answerdev/answer github.com/answerdev/answer Go
  • Critical 9.8
    CVE-2022-45982

    Deserialization of Untrusted Data in thinkphp

    thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload.

    topthink/think Packagist
  • Critical 9.8
    CVE-2022-45527

    File upload vulnerability in Future-Depth Institutional Management Website (IMS) 1.0, allows unauthorized attackers to …

  • Critical 9.8
    CVE-2022-45526

    SQL Injection vulnerability in Future-Depth Institutional Management Website (IMS) 1.0, allows attackers to execute arb…