Skip to content
OpenAdvisories

Archive

23 February 2023

Vulnerabilities first published on this day (UTC), newest first.

← January 2023 2023 / February /23 March 2023 →
  1. 1120
  2. 250
  3. 3117
  4. 416
  5. 53
  6. 6187
  7. 784
  8. 875
  9. 9125
  10. 1074
  11. 115
  12. 1216
  13. 13119
  14. 14203
  15. 1594
  16. 16172
  17. 17101
  18. 1814
  19. 199
  20. 2051
  21. 2185
  22. 2261
  23. 2357
  24. 2452
  25. 2518
  26. 2621
  27. 27145
  28. 28115
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-0754

    The affected products are vulnerable to an integer overflow or wraparound, which could  allow an attacker to crash the …

    Microsoft Rockwell Automation PTC General Electric Browsers ICS / OT
  • Critical 9.8
    CVE-2023-0755 EPSS 12%

    The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash t…

    Microsoft Rockwell Automation PTC General Electric Browsers ICS / OT
  • Critical 9.8
    CVE-2022-2504

    SQLi in SDD-Baro

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SDD Computer Software SDD-Baro allows SQL Injection. This issue affects SDD-Baro: before 2.8.432.

    SDD Computer Software SDD-Baro
  • Critical 9.8
    CVE-2023-0939

    Multiple SQL Injection on NTN Information Technologies' Online Services software

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NTN Information Technologies Online Services Software allows SQL Injection. This issue affects Online Services Software: before 1.17.

    NTN Information Technologies Online Services Software
  • Critical 9.8
    CVE-2023-24205

    Clash for Windows v0.20.12 was discovered to contain a remote code execution (RCE) vulnerability which is exploited via…

  • Critical 9.8
    CVE-2023-24104

    Ubiquiti Networks UniFi Dream Machine Pro v7.2.95 allows attackers to bypass domain restrictions via crafted packets.

  • Critical 9.1
    CVE-2023-23914

    A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functiona…

    curl curl curl tensorflow Debian Ubuntu Azure Linux Alpine
  • Critical 9.8
    CVE-2022-4492

    Undertow client not checking server identity presented by server certificate in https connections

    The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by default) in https and in http/2. I would add it to any TLS client protocol.

    undertow undertow io.undertow:undertow-core Debian Ubuntu Maven
  • Critical 9.8
    CVE-2022-36231 Public exploit

    Code injection in pdf_info

    pdf_info 0.5.3 is vulnerable to Command Execution because the Ruby code uses backticks instead of Open3.

    pdf_info RubyGems