Skip to content
OpenAdvisories

Archive

18 February 2023

Vulnerabilities first published on this day (UTC), newest first.

← January 2023 2023 / February /18 March 2023 →
  1. 1120
  2. 250
  3. 3117
  4. 416
  5. 53
  6. 6187
  7. 784
  8. 875
  9. 9125
  10. 1074
  11. 115
  12. 1216
  13. 13119
  14. 14203
  15. 1594
  16. 16172
  17. 17101
  18. 1814
  19. 199
  20. 2051
  21. 2185
  22. 2261
  23. 2357
  24. 2452
  25. 2518
  26. 2621
  27. 27145
  28. 28115
All Critical High Medium Low Exploited only Public exploit

14 results · Feed

  • Medium 4.7
    CVE-2023-0913 Public exploit

    SourceCodester Auto Dealer Management System sql injection

    A vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0. This vulnerability affects unknown code of the file /adms/admin/?page=vehicles/sell_vehicle. The manipulation of the argument id leads to sql injection. The …

    SourceCodester Auto Dealer Management System
  • Medium 4.7
    CVE-2023-0912 Public exploit

    SourceCodester Auto Dealer Management System sql injection

    A vulnerability classified as critical has been found in SourceCodester Auto Dealer Management System 1.0. This affects an unknown part of the file /adms/admin/?page=vehicles/view_transaction. The manipulation of the argument id leads to sql injection. It is …

    SourceCodester Auto Dealer Management System
  • Medium 6.3
    CVE-2023-0910

    SourceCodester Online Pizza Ordering System GET Parameter view_prod.php sql injection

    A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the file view_prod.php of the component GET Parameter Handler. The manipulation of the argument ID leads t…

    SourceCodester Online Pizza Ordering System
  • Low 3.3
    CVE-2023-0909

    cxasm notepad-- Directory Comparison denial of service

    A vulnerability, which was classified as problematic, was found in cxasm notepad-- 1.22. This affects an unknown part of the component Directory Comparison Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The as…

    cxasm notepad--
  • Medium 5.5
    CVE-2023-0908

    Xoslab Easy File Locker xlkfs.sys MessageNotifyCallback denial of service

    A vulnerability, which was classified as problematic, was found in Xoslab Easy File Locker 2.2.0.184. This affects the function MessageNotifyCallback in the library xlkfs.sys. The manipulation leads to denial of service. Local access is required to approach t…

    Xoslab Easy File Locker
  • Medium 4.4
    CVE-2023-0907

    Filseclab Twister Antivirus IoControlCode ffsmon.sys 0x220017 denial of service

    A vulnerability, which was classified as problematic, has been found in Filseclab Twister Antivirus 8.17. Affected by this issue is the function 0x220017 in the library ffsmon.sys of the component IoControlCode Handler. The manipulation leads to denial of ser…

    Filseclab Twister Antivirus
  • High 7.3
    CVE-2023-0906

    SourceCodester Online Pizza Ordering System POST Parameter ajax.php delete_category missing authentication

    A vulnerability classified as critical was found in SourceCodester Online Pizza Ordering System 1.0. Affected by this vulnerability is the function delete_category of the file ajax.php of the component POST Parameter Handler. The manipulation leads to missing…

    SourceCodester Online Pizza Ordering System
  • High 7.3
    CVE-2023-0905 Public exploit

    SourceCodester Employee Task Management System changePasswordForEmployee.php improper authentication

    A vulnerability classified as critical has been found in SourceCodester Employee Task Management System 1.0. Affected is an unknown function of the file changePasswordForEmployee.php. The manipulation leads to improper authentication. It is possible to launch…

    SourceCodester Employee Task Management System
  • Medium 6.3
    CVE-2023-0904 Public exploit

    SourceCodester Employee Task Management System task-details.php sql injection

    A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file task-details.php. The manipulation of the argument task_id leads to sql injection. The attac…

    SourceCodester Employee Task Management System
  • Medium 5.0
    CVE-2023-0903

    SourceCodester Employee Task Management System edit-task.php sql injection

    A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file edit-task.php. The manipulation of the argument task_id leads to sql injection. The attack c…

    SourceCodester Employee Task Management System
  • Low 3.5
    CVE-2023-0902 Public exploit

    SourceCodester Simple Food Ordering System process_order.php cross site scripting

    A vulnerability was found in SourceCodester Simple Food Ordering System 1.0. It has been classified as problematic. This affects an unknown part of the file process_order.php. The manipulation of the argument order leads to cross site scripting. It is possibl…

    SourceCodester Simple Food Ordering System
  • Medium 5.5
    CVE-2022-37935

    HPE OneView for VMware vCenter, in certain circumstances, may disclose the “HPE OneView” Username and Password.

    Hewlett Packard Enterprise (HPE) HPE OneView for VMware vCenter, Virtualization
  • Medium 5.3
    CVE-2023-0901

    Exposure of Sensitive Information to an Unauthorized Actor in pixelfed/pixelfed

    Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository pixelfed/pixelfed prior to 0.11.4.

    pixelfed pixelfed/pixelfed pixelfed/pixelfed Packagist
  • Medium 5.4
    CVE-2022-40348 Public exploit

    Cross Site Scripting (XSS) vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'name' and 'e…