Skip to content
OpenAdvisories

Archive

10 February 2023

Vulnerabilities first published on this day (UTC), newest first.

← January 2023 2023 / February /10 March 2023 →
  1. 1120
  2. 250
  3. 3117
  4. 416
  5. 53
  6. 6187
  7. 784
  8. 875
  9. 9125
  10. 1074
  11. 115
  12. 1216
  13. 13119
  14. 14203
  15. 1594
  16. 16172
  17. 17101
  18. 1814
  19. 199
  20. 2051
  21. 2185
  22. 2261
  23. 2357
  24. 2452
  25. 2518
  26. 2621
  27. 27145
  28. 28115
All Critical High Medium Low Exploited only Public exploit

74 results · Feed

  • Medium 5.5
    CVE-2023-23698

    Dell Command | Update, Dell Update, and Alienware Update versions before 4.6.0 and 4.7.1 contain Insecure Operation on …

    Dell Dell Command Update (DCU)
  • Medium 5.3
    CVE-2018-7935 Public exploit

    There is a vulnerability in 21.328.01.00.00 version of the E5573Cs-322. Remote attackers could exploit this vulnerabili…

    Huawei E5573Cs-322 Network devices
  • High 7.3
    CVE-2023-0774

    SourceCodester Medical Certificate Generator App action.php sql injection

    A vulnerability has been found in SourceCodester Medical Certificate Generator App 1.0 and classified as critical. This vulnerability affects unknown code of the file action.php. The manipulation of the argument lastname leads to sql injection. The attack can…

    SourceCodester Medical Certificate Generator App
  • Medium 6.8
    CVE-2022-24410

    Dell BIOS contains an information exposure vulnerability. An unauthenticated local attacker with physical access to the…

    Dell CPG BIOS
  • Medium 6.7
    CVE-2022-34454

    Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a heap-based buffer overflow. A local privileged malicious user co…

    Dell PowerScale OneFS
  • Low 2.7
    CVE-2022-34452

    PowerPath Management Appliance with versions 3.3, 3.2*, 3.1 & 3.0* contains sensitive information disclosure vulnerabil…

    Dell PowerPath Management Appliance
  • High 7.5
    CVE-2023-22832

    Apache NiFi: Improper Restriction of XML External Entity References in ExtractCCDAAttributes

    The ExtractCCDAAttributes Processor in Apache NiFi 1.2.0 through 1.19.1 does not restrict XML External Entity references. Flow configurations that include the ExtractCCDAAttributes Processor are vulnerable to malicious XML documents that contain Document Type…

    Apache Software Foundation Apache NiFi org.apache.nifi:nifi-ccda-processors Maven
  • High 7.2
    CVE-2023-0771

    SQL Injection in ampache/ampache

    SQL Injection in GitHub repository ampache/ampache prior to 5.5.7,develop.

    ampache ampache/ampache ampache Ubuntu
  • High 8.6
    CVE-2023-0777 Public exploit Scanner template EPSS 15%

    Authentication Bypass by Primary Weakness in modoboa/modoboa

    Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4.

    modoboa modoboa/modoboa modoboa PyPI
  • Medium 4.8
    CVE-2023-24231

    A stored cross-site scripting (XSS) vulnerability in the component /php-inventory-management-system/categories.php of I…

  • Medium 4.8
    CVE-2023-24232

    A stored cross-site scripting (XSS) vulnerability in the component /php-inventory-management-system/product.php of Inve…

  • Critical 9.8
    CVE-2023-24349

    D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /gof…

  • High 8.8
    CVE-2023-24347

    D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /gof…

  • Critical 9.8
    CVE-2023-24352

    D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /gof…

  • Medium 4.8
    CVE-2023-24230

    Formwork Cross-site Scripting (XSS) from Page title field

    A stored cross-site scripting (XSS) vulnerability in the component /formwork/panel/dashboard of Formwork v1.12.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page title parameter.

    getformwork/formwork Packagist
  • Critical 9.8
    CVE-2023-24350

    D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the config.smtp_email_subject…

  • High 8.8
    CVE-2023-24344

    D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /gof…

  • Medium 4.8
    CVE-2023-24233

    A stored cross-site scripting (XSS) vulnerability in the component /php-inventory-management-system/orders.php?o=add of…

  • High 8.8
    CVE-2023-24345

    D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /gof…

  • High 8.8
    CVE-2023-24346

    D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the wan_connected parameter a…

  • Critical 9.8
    CVE-2023-24351

    D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the FILECODE parameter at /go…

  • Medium 4.8
    CVE-2023-24234

    A stored cross-site scripting (XSS) vulnerability in the component php-inventory-management-system/brand.php of Invento…

  • High 8.8
    CVE-2023-24343

    D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /gof…

  • Critical 9.8
    CVE-2023-24348

    D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /gof…

  • Unscored —
    CVE-2023-23163 Public exploit

    Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the editid param…

  • Unscored —
    CVE-2023-23162 Public exploit

    Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the cid paramete…

  • Unscored —
    CVE-2023-23161 Public exploit Scanner template

    A reflected cross-site scripting (XSS) vulnerability in Art Gallery Management System Project v1.0 allows attackers to …

  • Medium 6.1
    CVE-2023-23286 Public exploit

    Cross Site Scripting (XSS) vulnerability in Provide server 14.4 allows attackers to execute arbitrary code through the …

  • High 8.8
    CVE-2022-46649 Public exploit

    Acemanager in ALEOS before version 4.16 allows a user with valid credentials to manipulate the IP logging operation to …

  • Medium 4.9
    CVE-2022-46650 EPSS 12%

    Acemanager in ALEOS before version 4.16 allows a user with valid credentials to reconfigure the device to expose the AC…

  • Critical 9.8
    CVE-2022-45699 Scanner template EPSS 77%

    Command injection in the administration interface in APSystems ECU-R version 5203 allows a remote unauthenticated attac…

  • Critical 9.1
    CVE-2022-45766

    Hardcoded credentials in Global Facilities Management Software (GFMS) Version 3 software distributed by Key Systems Man…

  • Medium 6.1
    CVE-2022-44261

    Avery Dennison Monarch Printer M9855 is vulnerable to Cross Site Scripting (XSS).

  • Critical 9.1
    CVE-2022-43501

    KASAGO TCP/IP stack provided by Zuken Elmic generates ISNs(Initial Sequence Number) for TCP connections from an insuffi…

    ZUKEN Elmic Kasago IPv4 Kasago mobile IPv6 Kasago IPv6/v4 Dual