Skip to content
OpenAdvisories

Archive

13 February 2023

Vulnerabilities first published on this day (UTC), newest first.

← January 2023 2023 / February /13 March 2023 →
  1. 1120
  2. 250
  3. 3117
  4. 416
  5. 53
  6. 6187
  7. 784
  8. 875
  9. 9125
  10. 1074
  11. 115
  12. 1216
  13. 13119
  14. 14203
  15. 1594
  16. 16172
  17. 17101
  18. 1814
  19. 199
  20. 2051
  21. 2185
  22. 2261
  23. 2357
  24. 2452
  25. 2518
  26. 2621
  27. 27145
  28. 28115
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Unscored —
    CVE-2023-0099 Public exploit Scanner template

    Simple URLs < 115 - Multiple Reflected XSS

    The Simple URLs WordPress plugin before 115 does not sanitise and escape some parameters before outputting them back in some pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

    Web / CMS
  • Unscored —
    CVE-2023-0159 Public exploit Scanner template EPSS 55%

    Extensive VC Addons for WPBakery page builder < 1.9.1 - Unauthenticated RCE

    The Extensive VC Addons for WPBakery page builder WordPress plugin before 1.9.1 does not validate a parameter passed to the php extract function when loading templates, allowing an unauthenticated attacker to override the template path to read arbitrary files…

    Web / CMS
  • Medium 6.1
    CVE-2022-48110 Public exploit

    CKSource CKEditor 5 35.4.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Full Featured C…

  • Critical 9.8
    CVE-2022-40022 Public exploit Scanner template EPSS 92%

    Microchip Technology (Microsemi) SyncServer S650 was discovered to contain a command injection vulnerability.