Skip to content
OpenAdvisories

Archive

21 February 2023

Vulnerabilities first published on this day (UTC), newest first.

← January 2023 2023 / February /21 March 2023 →
  1. 1120
  2. 250
  3. 3117
  4. 416
  5. 53
  6. 6187
  7. 784
  8. 875
  9. 9125
  10. 1074
  11. 115
  12. 1216
  13. 13119
  14. 14203
  15. 1594
  16. 16172
  17. 17101
  18. 1814
  19. 199
  20. 2051
  21. 2185
  22. 2261
  23. 2357
  24. 2452
  25. 2518
  26. 2621
  27. 27145
  28. 28115
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-25157 Public exploit Scanner template EPSS 86%

    Unfiltered SQL Injection Vulnerabilities in Geoserver

    GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. GeoServer includes support for the OGC Filter expression language and the OGC Common Query Language (CQL) as part of the Web Feature Service (WFS)…

    geoserver geoserver org.geoserver.community:gs-jdbcconfig Maven
  • Critical 9.8
    CVE-2023-25158

    Unfiltered SQL Injection in Geotools

    GeoTools is an open source Java library that provides tools for geospatial data. GeoTools includes support for OGC Filter expression language parsing, encoding and execution against a range of datastore. SQL Injection Vulnerabilities have been found when exec…

    geotools geotools org.geotools:gt-jdbc Maven
  • Critical 9.8
    CVE-2023-0232

    ShopLentor < 2.5.4 - PHP Object Injection

    The ShopLentor WordPress plugin before 2.5.4 unserializes user input from cookies in order to track viewed products and user data, which could lead to PHP Object Injection.

    Web / CMS
  • Critical 9.8
    CVE-2023-24080

    A lack of rate limiting on the password reset endpoint of Chamberlain myQ v5.222.0.32277 (on iOS) allows attackers to c…

  • Critical 9.8
    CVE-2023-24320

    An access control issue in Axcora POS #0~gitf77ec09 allows unauthenticated attackers to execute arbitrary commands via …

  • Critical 9.8
    CVE-2023-24184

    TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability.

  • Critical 9.8
    CVE-2023-22920

    A security misconfiguration vulnerability exists in the Zyxel LTE3316-M604 firmware version V2.00(ABMP.6)C0 due to a fa…

    Zyxel LTE3316-M604 Network devices
  • Critical 9.8
    CVE-2022-46637

    Prolink router PRS1841 was discovered to contain hardcoded credentials for its Telnet and FTP services.

  • Critical 9.8
    CVE-2022-45564

    SQL Injection vulnerability in znfit Home improvement ERP management system V50_20220207,v42 allows attackers to execut…

  • Critical 9.8
    CVE-2022-45677

    SQL Injection Vulnerability in tanujpatra228 Tution Management System (TMS) via the email parameter to processes/studen…