Skip to content
OpenAdvisories

Archive

22 February 2023

Vulnerabilities first published on this day (UTC), newest first.

← January 2023 2023 / February /22 March 2023 →
  1. 1120
  2. 250
  3. 3117
  4. 416
  5. 53
  6. 6187
  7. 784
  8. 875
  9. 9125
  10. 1074
  11. 115
  12. 1216
  13. 13119
  14. 14203
  15. 1594
  16. 16172
  17. 17101
  18. 1814
  19. 199
  20. 2051
  21. 2185
  22. 2261
  23. 2357
  24. 2452
  25. 2518
  26. 2621
  27. 27145
  28. 28115
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-37938

    Unauthenticated server side request forgery in HPE Serviceguard Manager

    Hewlett Packard Enterprise (HPE) HPE Serviceguard for Linux Linux
  • Critical 9.8
    CVE-2022-37937

    Pre-auth memory corruption in HPE Serviceguard

    Hewlett Packard Enterprise (HPE) HPE Serviceguard for Linux Linux
  • Critical 9.8
    CVE-2022-37936

    Unauthenticated Java deserialization vulnerability in Serviceguard Manager

    Hewlett Packard Enterprise (HPE) HPE Serviceguard for Linux Linux
  • Critical 9.3
    CVE-2023-0104 EPSS 22%

    The listed versions for Weintek EasyBuilder Pro are vulnerable to a ZipSlip attack caused by decompiling a malicious pr…

    Weintek EasyBuilder Pro cMT
  • Critical 10.0
    CVE-2023-25813 Public exploit

    SQL Injection via replacements in sequelize

    Sequelize is a Node.js ORM tool. In versions prior to 6.19.1 a SQL injection exploit exists related to replacements. Parameters which are passed through replacements are not properly escaped which can lead to arbitrary SQL injection depending on the specific …

    sequelize sequelize sequelize npm
  • Critical 9.8
    CVE-2022-41217

    Cloudflow - Unauthenticated file upload vulnerability

    Cloudflow contains a unauthenticated file upload vulnerability, which makes it possible for an attacker to upload malicious files to the CLOUDFLOW PROOFSCOPE built-in storage.

    Hybrid Software Cloudflow
  • Critical 9.8
    CVE-2023-24108

    MvcTools 6d48cd6830fc1df1d8c9d61caa1805fd6a1b7737 was discovered to contain a code execution backdoor via the request p…

  • Critical 9.8
    CVE-2023-24093

    An access control issue in H3C A210-G A210-GV100R005 allows attackers to authenticate without a password.

  • Critical 9.8
    CVE-2023-24107

    hour_of_code_python_2015 commit 520929797b9ca43bb818b2e8f963fb2025459fa3 was discovered to contain a code execution bac…

  • Critical 9.8
    CVE-2023-24114

    typecho 1.1/17.10.30 was discovered to contain a remote code execution (RCE) vulnerability via install.php.

  • Critical 9.8
    CVE-2022-45599 Public exploit

    Aztech WMB250AC Mesh Routers Firmware Version 016 2020 is vulnerable to PHP Type Juggling in file /var/www/login.php, a…