Skip to content
OpenAdvisories

Archive

22 February 2023

Vulnerabilities first published on this day (UTC), newest first.

← January 2023 2023 / February /22 March 2023 →
  1. 1120
  2. 250
  3. 3117
  4. 416
  5. 53
  6. 6187
  7. 784
  8. 875
  9. 9125
  10. 1074
  11. 115
  12. 1216
  13. 13119
  14. 14203
  15. 1594
  16. 16172
  17. 17101
  18. 1814
  19. 199
  20. 2051
  21. 2185
  22. 2261
  23. 2357
  24. 2452
  25. 2518
  26. 2621
  27. 27145
  28. 28115
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 10.0
    CVE-2023-25813 Public exploit

    SQL Injection via replacements in sequelize

    Sequelize is a Node.js ORM tool. In versions prior to 6.19.1 a SQL injection exploit exists related to replacements. Parameters which are passed through replacements are not properly escaped which can lead to arbitrary SQL injection depending on the specific …

    sequelize sequelize sequelize npm
  • High 7.3
    CVE-2023-0963 Public exploit

    SourceCodester Music Gallery Site POST Request Users.php access control

    A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been rated as critical. This issue affects some unknown processing of the file Users.php of the component POST Request Handler. The manipulation leads to improper access controls. The …

    SourceCodester Music Gallery Site
  • Medium 6.3
    CVE-2023-0962 Public exploit

    SourceCodester Music Gallery Site GET Request Master.php sql injection

    A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been declared as critical. This vulnerability affects unknown code of the file Master.php of the component GET Request Handler. The manipulation of the argument id leads to sql injecti…

    SourceCodester Music Gallery Site
  • Medium 6.3
    CVE-2023-0961 Public exploit

    SourceCodester Music Gallery Site GET Request view_music_details.php sql injection

    A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been classified as critical. This affects an unknown part of the file view_music_details.php of the component GET Request Handler. The manipulation of the argument id leads to sql inje…

    SourceCodester Music Gallery Site
  • Unscored —
    CVE-2023-22974 Public exploit

    A Path Traversal in setup.php in OpenEMR < 7.0.0 allows remote unauthenticated users to read arbitrary files by control…

  • High 8.8
    CVE-2022-45600 Public exploit

    Aztech WMB250AC Mesh Routers Firmware Version 016 2020 devices improperly manage sessions, which allows remote attacker…

  • Critical 9.8
    CVE-2022-45599 Public exploit

    Aztech WMB250AC Mesh Routers Firmware Version 016 2020 is vulnerable to PHP Type Juggling in file /var/www/login.php, a…