Skip to content
OpenAdvisories

Archive

16 February 2023

Vulnerabilities first published on this day (UTC), newest first.

9 results · Clear filters · Feed

  • Medium 6.5
    CVE-2021-33104 Public exploit

    Improper access control in the Intel(R) OFU software before version 14.1.28 may allow an authenticated user to potentia…

  • Critical 9.8
    CVE-2022-39952 Public exploit Scanner template EPSS 100%

    A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, …

  • Critical 9.3
    CVE-2021-42756 Public exploit EPSS 35%

    Multiple stack-based buffer overflow vulnerabilities [CWE-121] in the proxy daemon of FortiWeb 5.x all versions, 6.0.7 …

  • Medium 5.3
    CVE-2023-23752 Exploited Public exploit Scanner template EPSS 100%

    [20230201] - Core - Improper access check in webservice endpoints

    An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints.

    KEV Jan 8, 2024
  • Medium 5.3
    CVE-2023-20052 Public exploit

    On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the DMG f…

  • Medium 6.0
    CVE-2023-20075 Public exploit

    Vulnerability in the CLI of Cisco Secure Email Gateway could allow an authenticated, remote attacker to execute arbitra…

  • Medium 6.5
    CVE-2023-20009 Public exploit

    A vulnerability in the Web UI and administrative CLI of the Cisco Secure Email Gateway (ESA) and Cisco Secure Email and…

  • High 7.2
    CVE-2023-0861 Public exploit EPSS 29%

    Authenticated Command Injection in NetModule NSRW

    NetModule NSRW web administration interface executes an OS command constructed with unsanitized user input. A successful exploit could allow an authenticated user to execute arbitrary commands with elevated privileges. This issue affects NSRW: from 4.3.0.0 be…

  • High 7.8
    CVE-2023-0860 Public exploit

    Improper Restriction of Excessive Authentication Attempts in modoboa/modoboa-installer

    Improper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4.