Skip to content
OpenAdvisories

Archive

22 February 2023

Vulnerabilities first published on this day (UTC), newest first.

← January 2023 2023 / February /22 March 2023 →
  1. 1120
  2. 250
  3. 3117
  4. 416
  5. 53
  6. 6187
  7. 784
  8. 875
  9. 9125
  10. 1074
  11. 115
  12. 1216
  13. 13119
  14. 14203
  15. 1594
  16. 16172
  17. 17101
  18. 1814
  19. 199
  20. 2051
  21. 2185
  22. 2261
  23. 2357
  24. 2452
  25. 2518
  26. 2621
  27. 27145
  28. 28115
All Critical High Medium Low Exploited only Public exploit

61 results · Feed

  • Critical 9.8
    CVE-2023-24093

    An access control issue in H3C A210-G A210-GV100R005 allows attackers to authenticate without a password.

  • Critical 9.8
    CVE-2023-24107

    hour_of_code_python_2015 commit 520929797b9ca43bb818b2e8f963fb2025459fa3 was discovered to contain a code execution bac…

  • Critical 9.8
    CVE-2023-24114

    typecho 1.1/17.10.30 was discovered to contain a remote code execution (RCE) vulnerability via install.php.

  • Unscored —
    CVE-2023-23063 Scanner template

    Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability via the component /cgi-bin/GetF…

  • Medium 5.7
    CVE-2023-23039

    An issue was discovered in the Linux kernel through 6.2.0-rc2. drivers/tty/vcc.c has a race condition and resultant use…

    linux kernel Debian Azure Linux
  • High 7.5
    CVE-2023-23040

    TP-Link router TL-WR940N V6 3.19.1 Build 180119 uses a deprecated MD5 algorithm to hash the admin password used for bas…

  • Unscored —
    CVE-2023-22974 Public exploit

    A Path Traversal in setup.php in OpenEMR < 7.0.0 allows remote unauthenticated users to read arbitrary files by control…

  • Unscored —
    CVE-2023-22972

    A Reflected Cross-site scripting (XSS) vulnerability in interface/forms/eye_mag/php/eye_mag_functions.php in OpenEMR < …

  • Unscored —
    CVE-2023-22973

    A Local File Inclusion (LFI) vulnerability in interface/forms/LBF/new.php in OpenEMR < 7.0.0 allows remote authenticate…

  • High 7.3
    CVE-2023-26214

    TIBCO BusinessConnect Reflected XSS Vulnerability

    The BusinessConnect UI component of TIBCO Software Inc.'s TIBCO BusinessConnect contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker with network access to execute scripts targeting the affected…

    TIBCO Software TIBCO BusinessConnect
  • High 8.8
    CVE-2023-26314

    The mono package before 6.8.0.105+dfsg-3.3 for Debian allows arbitrary code execution because the application/x-ms-dos-…

    mono mono Debian Ubuntu
  • Unscored —
    CVE-2022-39983

    File upload vulnerability in Pro Gamma Instant Developer RD3 22.5 r23, r30, and possibly earlier versions, allows attac…

  • Unscored —
    CVE-2022-29273 EPSS 60%

    pfSense CE through 2.6.0 and pfSense Plus before 22.05 allow XSS in the WebGUI via URL Table Alias URL parameters.

  • Unscored —
    CVE-2022-48149

    Online Student Admission System in PHP Free Source Code 1.0 was discovered to contain a SQL injection vulnerability via…

  • High 7.5
    CVE-2022-2883

    In affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which results in Denial of Ser…

    Octopus Deploy Octopus Server
  • High 8.8
    CVE-2022-45600 Public exploit

    Aztech WMB250AC Mesh Routers Firmware Version 016 2020 devices improperly manage sessions, which allows remote attacker…

  • Critical 9.8
    CVE-2022-45599 Public exploit

    Aztech WMB250AC Mesh Routers Firmware Version 016 2020 is vulnerable to PHP Type Juggling in file /var/www/login.php, a…

  • High 7.3
    CVE-2022-41567

    TIBCO BusinessConnect Stored XSS Vulnerability

    The BusinessConnect UI component of TIBCO Software Inc.'s TIBCO BusinessConnect contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a cross-site scripting (XSS) attack on the affected system. Affec…

    TIBCO Software TIBCO BusinessConnect
  • High 8.7
    CVE-2022-41566

    TIBCO EBX Add-ons Cross Site Scripting (XSS) Vulnerability

    The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute stored XSS on the affected system. Affected releases are TIBCO Software Inc.'s TI…

    TIBCO Software TIBCO EBX Add-ons
  • High 8.7
    CVE-2022-41565

    TIBCO EBX Cross Site Scripting (XSS) Vulnerability

    The Web Application component of TIBCO Software Inc.'s TIBCO EBX and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a stored XSS on the a…

    TIBCO Software TIBCO EBX TIBCO Product and Service Catalog powered by TIBCO EBX
  • Unscored —
    CVE-2021-33367

    Buffer Overflow vulnerability in Freeimage v3.18.0 allows attacker to cause a denial of service via a crafted JXR file.

    freeimage freeimage Debian Ubuntu