Skip to content
OpenAdvisories

Archive

20 February 2023

Vulnerabilities first published on this day (UTC), newest first.

← January 2023 2023 / February /20 March 2023 →
  1. 1120
  2. 250
  3. 3117
  4. 416
  5. 53
  6. 6187
  7. 784
  8. 875
  9. 9125
  10. 1074
  11. 115
  12. 1216
  13. 13119
  14. 14203
  15. 1594
  16. 16172
  17. 17101
  18. 1814
  19. 199
  20. 2051
  21. 2185
  22. 2261
  23. 2357
  24. 2452
  25. 2518
  26. 2621
  27. 27145
  28. 28115
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Critical 9.1
    CVE-2022-46836

    PHP code injection in watolib

    PHP code injection in watolib auth.php and hosttags.php in Tribe29's Checkmk <= 2.1.0p10, Checkmk <= 2.0.0p27, and Checkmk <= 1.6.0p29 allows an attacker to inject and execute PHP code which will be executed upon request of the vulnerable component.

    Tribe29 Checkmk check-mk Ubuntu
  • Critical 9.8
    CVE-2023-25805

    versionn Command Injection Vulnerability

    versionn, software for changing version information across multiple files, has a command injection vulnerability in all versions prior to version 1.1.0. This issue is patched in version 1.1.0.

    commenthol versionn versionn npm
  • Critical 9.8
    CVE-2023-25613

    LDAP Injection Vulnerability in Apache Kerby

    An LDAP Injection vulnerability exists in the LdapIdentityBackend of Apache Kerby before 2.0.3. 

    Apache Software Foundation Apache Kerby LDAP Backend org.apache.kerby:ldap-backend Maven
  • Critical 9.8
    CVE-2023-23452

    Missing Authentication for Critical Function in SICK FX0-GPNT v3 Firmware Version V3.04 and V3.05 allows an unprivilege…

  • Critical 9.8
    CVE-2023-23453

    Missing Authentication for Critical Function in SICK FX0-GENT v3 Firmware Version V3.04 and V3.05 allows an unprivilege…

  • Critical 9.8
    CVE-2023-26093

    Liima before 1.17.28 allows Hibernate query language (HQL) injection, related to colToSort in the deployment filter.

  • Critical 9.8
    CVE-2023-26092

    Liima before 1.17.28 allows server-side template injection.

  • Critical 9.8
    CVE-2022-48337

    GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file,…

    xemacs21-packages xemacs21 emacs25 emacs24 Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2022-48329

    MISP before 2.4.166 unsafely allows users to use the order parameter, related to app/Model/Attribute.php, app/Model/Gal…