16 February 2023

11 results · Clear filters · Feed

• Critical 9.8
  CVE-2022-39952 Public exploit Scanner template EPSS 100%

  A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, …

  Fortinet FortiNAC Network devices
  Feb 16, 2023
• Critical 9.3
  CVE-2021-42756 Public exploit EPSS 35%

  Multiple stack-based buffer overflow vulnerabilities [CWE-121] in the proxy daemon of FortiWeb 5.x all versions, 6.0.7 …

  Fortinet FortiWeb Network devices
  Feb 16, 2023
• Critical 9.1
  CVE-2023-23947

  Argo CD users with any cluster secret update access may update out-of-bounds cluster secrets

  Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All Argo CD versions starting with 2.3.0-rc1 and prior to 2.3.17, 2.4.23 2.5.11, and 2.6.2 are vulnerable to an improper authorization bug which allows users who have the ability to upd…

  argoproj Argo CD github.com/argoproj/argo-cd github.com/argoproj/argo-cd/v2 Go
  Feb 16, 2023
• Critical 9.8
  CVE-2023-20032 EPSS 30%

  On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ …

  Cisco Cisco Secure Endpoint Cisco Secure Web Appliance Cisco Secure Endpoint Private Cloud Administration Portal Network devices Debian Ubuntu Azure Linux Alpine
  Feb 16, 2023
• Critical 9.1
  CVE-2022-3843

  WAGO: Exposure of configuration interface in unmanaged switches

  In WAGO Unmanaged Switch (852-111/000-001) in firmware version 01 an undocumented configuration interface without authorization allows an remote attacker to read system information and configure a limited set of parameters.

  WAGO Unmanaged Switch 852-111/000-001 ICS / OT
  Feb 16, 2023
• Critical 9.9
  CVE-2023-22579

  Sequalize - Unsafe fall-through in getWhereConditions

  Due to improper parameter filtering in the sequalize js library, can a attacker peform injection.

  Feathers-Sequalize Sequelize.js sequelize @sequelize/core npm
  Feb 16, 2023
• Critical 10.0
  CVE-2023-22578

  Sequalize - Default support for “raw attributes” when using parentheses

  Due to improper artibute filtering in the sequalize js library, can a attacker peform SQL injections.

  Feathers-Sequalize Sequelize.js sequelize @sequelize/core npm
  Feb 16, 2023
• Critical 9.8
  CVE-2023-24238

  TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the city parame…

  Feb 16, 2023
• Critical 9.8
  CVE-2023-24236

  TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the province pa…

  Feb 16, 2023
• Critical 9.1
  CVE-2022-43969

  Ricoh mp_c4504ex devices with firmware 1.06 mishandle credentials.

  Feb 16, 2023
• Critical 9.8
  CVE-2021-43529

  Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/…

  Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu
  Feb 16, 2023