Skip to content
OpenAdvisories

Archive

16 February 2023

Vulnerabilities first published on this day (UTC), newest first.

← January 2023 2023 / February /16 March 2023 →
  1. 1120
  2. 250
  3. 3117
  4. 416
  5. 53
  6. 6187
  7. 784
  8. 875
  9. 9125
  10. 1074
  11. 115
  12. 1216
  13. 13119
  14. 14203
  15. 1594
  16. 16172
  17. 17101
  18. 1814
  19. 199
  20. 2051
  21. 2185
  22. 2261
  23. 2357
  24. 2452
  25. 2518
  26. 2621
  27. 27145
  28. 28115
All Critical High Medium Low Exploited only Public exploit

172 results · Feed

  • Medium 6.1
    CVE-2022-48324

    Multiple Cross Site Scripting (XSS) vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects …

  • Medium 5.7
    CVE-2022-48306

    Gotham Chat IRC help does not validate hostnames in TLS certificates

    Improper Validation of Certificate with Host Mismatch vulnerability in Gotham Chat IRC helper of Palantir Gotham allows A malicious attacker in a privileged network position could abuse this to perform a man-in-the-middle attack. A successful man-in-the-middl…

    Palantir Palantir Gotham Chat IRC helper
  • Medium 6.3
    CVE-2022-48308

    It was discovered that the sls-logging was not verifying hostnames in TLS certificates due to a misuse of the javax.net…

    Palantir sls-logging
  • High 7.8
    CVE-2022-40080

    Stack overflow vulnerability in Aspire E5-475G 's BIOS firmware, in the FpGui module, a second call to GetVariable serv…

  • Medium 4.9
    CVE-2022-44299

    SiteServerCMS 7.1.3 sscms has a file read vulnerability.

  • Critical 9.1
    CVE-2022-43969

    Ricoh mp_c4504ex devices with firmware 1.06 mishandle credentials.

  • High 7.5
    CVE-2022-47703

    TIANJIE CPE906-3 is vulnerable to password disclosure. This is present on Software Version WEB5.0_LCD_20200513, Firmwar…

  • Low 3.2
    CVE-2021-0187

    Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially en…

  • Medium 5.4
    CVE-2021-40555

    Cross site scripting (XSS) vulnerability in flatCore-CMS 2.2.15 allows attackers to execute arbitrary code via descript…

  • Medium 6.1
    CVE-2021-23980

    Cross-site scripting in Bleach

    A mutation XSS affects users calling bleach.clean with all of: svg or math in the allowed tags p or br in allowed tags style, title, noscript, script, textarea, noframes, iframe, or xmp in allowed tags the keyword argument strip_comments=False Note: none of t…

    Mozilla Mozilla Bleach bleach python-bleach Debian Ubuntu Alpine PyPI
  • Critical 9.8
    CVE-2021-43529

    Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/…

    Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu
  • Medium 6.1
    CVE-2019-17003

    Scanning a QR code that contained a javascript: URL would have resulted in the Javascript being executed.

    Mozilla Firefox for iOS iOS Browsers