Skip to content
OpenAdvisories

Archive

13 February 2023

Vulnerabilities first published on this day (UTC), newest first.

← January 2023 2023 / February /13 March 2023 →
  1. 1120
  2. 250
  3. 3117
  4. 416
  5. 53
  6. 6187
  7. 784
  8. 875
  9. 9125
  10. 1074
  11. 115
  12. 1216
  13. 13119
  14. 14203
  15. 1594
  16. 16172
  17. 17101
  18. 1814
  19. 199
  20. 2051
  21. 2185
  22. 2261
  23. 2357
  24. 2452
  25. 2518
  26. 2621
  27. 27145
  28. 28115
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Critical 9.1
    CVE-2023-23551

    X-600M Code Injection

    Control By Web X-600M devices run Lua scripts and are vulnerable to code injection, which could allow an attacker to remotely execute arbitrary code.

    Control By Web X-600M devices
  • Critical 9.8
    CVE-2022-4445

    FL3R FeelBox <= 8.1 - Unauthenticated SQLi

    The FL3R FeelBox WordPress plugin through 8.1 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.

    Web / CMS
  • Critical 9.8
    CVE-2023-24084

    ChiKoi v1.0 was discovered to contain a SQL injection vulnerability via the load_file function.

  • Critical 9.8
    CVE-2023-24646

    An arbitrary file upload vulnerability in the component /fos/admin/ajax.php of Food Ordering System v2.0 allows attacke…

  • Critical 9.1
    CVE-2023-24188

    Arbitrary file deletion in ureport

    ureport v2.2.9 was discovered to contain a directory traversal vulnerability via the deletion function which allows for arbitrary files to be deleted.

    com.bstek.ureport:ureport2-core Maven
  • Critical 9.8
    CVE-2023-25717 Exploited Scanner template EPSS 98%

    Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrate…

    KEV May 12, 2023
  • Critical 9.1
    CVE-2023-22854

    The ccmweb component of Mitel MiContact Center Business server 9.2.2.0 through 9.4.1.0 could allow an unauthenticated a…

  • Critical 9.8
    CVE-2022-48323 Scanner template EPSS 57%

    Sunlogin Sunflower Simplified (aka Sunflower Simple and Personal) 1.0.1.43315 is vulnerable to a path traversal issue. …

  • Critical 9.8
    CVE-2022-48322

    NETGEAR Nighthawk WiFi Mesh systems and routers are affected by a stack-based buffer overflow vulnerability. This affec…

  • Critical 9.8
    CVE-2022-40022 Public exploit Scanner template EPSS 92%

    Microchip Technology (Microsemi) SyncServer S650 was discovered to contain a command injection vulnerability.

  • Critical 9.8
    CVE-2022-47034

    A type juggling vulnerability in the component /auth/fn.php of PlaySMS v1.4.5 and earlier allows attackers to bypass au…