Skip to content
OpenAdvisories

Archive

17 February 2023

Vulnerabilities first published on this day (UTC), newest first.

9 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-47986 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    IBM Aspera Faspex code execution

    IBM Aspera Faspex 4.4.2 Patch Level 1 and earlier could allow a remote attacker to execute arbitrary code on the system, caused by a YAML deserialization flaw. By sending a specially crafted obsolete API call, an attacker could exploit this vulnerability to e…

    KEV Feb 21, 2023
  • Medium 5.5
    CVE-2023-0482 Public exploit

    Insecure Temporary File in RESTEasy

    In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user.

  • High 8.8
    CVE-2023-24078 Public exploit EPSS 53%

    Real Time Logic FuguHub v8.1 and earlier was discovered to contain a remote code execution (RCE) vulnerability via the …

  • High 7.5
    CVE-2023-24329 Public exploit EPSS 20%

    An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by suppl…

  • Critical 9.8
    CVE-2023-23279 Public exploit

    Canteen Management System 1.0 is vulnerable to SQL Injection via /php_action/getOrderReport.php.

  • Medium 5.3
    CVE-2023-22232 Public exploit Scanner template EPSS 83%

    Adobe Connect Improper Access Control Security feature bypass

    Adobe Connect versions 11.4.5 (and earlier), 12.1.5 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the integrity of a minor feature…

  • High 8.8
    CVE-2022-45701 Public exploit EPSS 43%

    Arris TG2482A firmware through 9.1.103GEM9 allow Remote Code Execution (RCE) via the ping utility feature.

  • Critical 9.8
    CVE-2022-40032 Public exploit Scanner template EPSS 21%

    SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' parame…

  • Critical 9.8
    CVE-2022-40347 Public exploit

    SQL Injection vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'phone', 'email', 'deptTyp…