Skip to content
OpenAdvisories

Archive

17 February 2023

Vulnerabilities first published on this day (UTC), newest first.

← January 2023 2023 / February /17 March 2023 →
  1. 1120
  2. 250
  3. 3117
  4. 416
  5. 53
  6. 6187
  7. 784
  8. 875
  9. 9125
  10. 1074
  11. 115
  12. 1216
  13. 13119
  14. 14203
  15. 1594
  16. 16172
  17. 17101
  18. 1814
  19. 199
  20. 2051
  21. 2185
  22. 2261
  23. 2357
  24. 2452
  25. 2518
  26. 2621
  27. 27145
  28. 28115
All Critical High Medium Low Exploited only Public exploit

18 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-47986 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    IBM Aspera Faspex code execution

    IBM Aspera Faspex 4.4.2 Patch Level 1 and earlier could allow a remote attacker to execute arbitrary code on the system, caused by a YAML deserialization flaw. By sending a specially crafted obsolete API call, an attacker could exploit this vulnerability to e…

    IBM Aspera Faspex
    KEV Feb 21, 2023
  • Critical 9.8
    CVE-2020-29168

    SQL Injection vulnerability in Projectworlds Online Doctor Appointment Booking System, allows attackers to gain sensiti…

  • Critical 9.1
    CVE-2023-0877

    Code Injection in froxlor/froxlor

    Code Injection in GitHub repository froxlor/froxlor prior to 2.0.11.

    froxlor froxlor/froxlor froxlor/froxlor Packagist
  • Critical 9.8
    CVE-2023-24221

    LuckyframeWEB v3.5 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /system/DeptM…

  • Critical 9.8
    CVE-2023-24219

    LuckyframeWEB v3.5 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /system/UserM…

  • Critical 9.8
    CVE-2023-24220

    LuckyframeWEB v3.5 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /system/RoleM…

  • Critical 9.8
    CVE-2023-23064

    TOTOLINK A720R V4.1.5cu.532_ B20210610 is vulnerable to Incorrect Access Control.

  • Critical 9.8
    CVE-2023-23279 Public exploit

    Canteen Management System 1.0 is vulnerable to SQL Injection via /php_action/getOrderReport.php.

  • Critical 9.8
    CVE-2022-40021

    QVidium Technologies Amino A140 (prior to firmware version 1.0.0-283) was discovered to contain a command injection vul…

  • Critical 9.8
    CVE-2022-40032 Public exploit Scanner template EPSS 21%

    SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' parame…

  • Critical 9.8
    CVE-2022-40347 Public exploit

    SQL Injection vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'phone', 'email', 'deptTyp…

  • Critical 9.8
    CVE-2021-34182

    An issue in ttyd v.1.6.3 allows attacker to execute arbitrary code via default configuration permissions.

    ttyd ttyd Debian Ubuntu
  • Critical 9.8
    CVE-2021-33949

    An issue in FeMiner WMS v1.1 allows attackers to execute arbitrary code via the filename parameter and the exec functio…

  • Critical 9.8
    CVE-2021-33226

    Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute arbitrary code via the func var…

    salt PyPI
  • Critical 9.8
    CVE-2021-33391

    An issue in HTACG HTML Tidy v5.7.28 allows attacker to execute arbitrary code via the -g option of the CleanNode() func…

    tidy-html5 tidy-html5 tidy Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2021-33948

    SQL injection vulnerability in FantasticLBP Hotels Server v1.0 allows attacker to execute arbitrary code via the userna…

  • Critical 9.8
    CVE-2021-35261

    File Upload Vulnerability in Yupoxion BearAdmin before commit 10176153528b0a914eb4d726e200fd506b73b075 allows attacker …

  • Critical 9.8
    CVE-2021-32163

    Privilege escalation in MOSN

    Authentication vulnerability in MOSN v.0.23.0 allows attacker to escalate privileges via case-sensitive JWT authorization.

    mosn.io/mosn Go