Skip to content
OpenAdvisories

Archive

24 February 2023

Vulnerabilities first published on this day (UTC), newest first.

← January 2023 2023 / February /24 March 2023 →
  1. 1120
  2. 250
  3. 3117
  4. 416
  5. 53
  6. 6187
  7. 784
  8. 875
  9. 9125
  10. 1074
  11. 115
  12. 1216
  13. 13119
  14. 14203
  15. 1594
  16. 16172
  17. 17101
  18. 1814
  19. 199
  20. 2051
  21. 2185
  22. 2261
  23. 2357
  24. 2452
  25. 2518
  26. 2621
  27. 27145
  28. 28115
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • High 7.5
    CVE-2023-26033

    Gentoo soko contains DoS attack based on SQL Injection

    Gentoo soko is the code that powers packages.gentoo.org. Versions prior to 1.0.1 are vulnerable to SQL Injection, leading to a Denial of Service. If the user selects (in user preferences) the "Recently Visited Packages" view for the index page, the value of t…

    gentoo soko
  • High 7.3
    CVE-2022-23535

    LiteDB contains Deserialization of Untrusted Data

    LiteDB is a small, fast and lightweight .NET NoSQL embedded database. Versions prior to 5.0.13 are subject to Deserialization of Untrusted Data. LiteDB uses a special field in JSON documents to cast different types from `BsonDocument` to POCO classes. When in…

    mbdavid LiteDB LiteDB NuGet
  • High 8.8
    CVE-2021-3855

    Command Injection in Liman Central Management System

    Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Liman Central Management System Liman MYS (HTTP/Controllers, CronMail, Jobs modules) allows Command Injection. This issue affects Liman Central Management Sys…

    Liman Central Management System Liman Central Management System
  • High 7.5
    CVE-2023-25956

    Apache Airflow AWS Provider: Arbitrary file read via AWS provider

    Generation of Error Message Containing Sensitive Information vulnerability in the Apache Airflow AWS Provider. This issue affects Apache Airflow AWS Provider versions before 7.2.1.

    Apache Software Foundation Apache Airflow AWS Provider apache-airflow-providers-amazon PyPI
  • High 7.5
    CVE-2023-25692

    Apache Airflow Google Provider: Google Cloud Sql Provider Denial Of Service

    Improper Input Validation vulnerability in the Apache Airflow Google Provider. This issue affects Apache Airflow Google Provider versions before 8.10.0.

    Apache Software Foundation Apache Airflow Google provider apache-airflow-providers-google PyPI
  • High 7.3
    CVE-2023-0997

    SourceCodester Moosikay E-Commerce System POST Parameter order.php sql injection

    A vulnerability was found in SourceCodester Moosikay E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Moosikay/order.php of the component POST Parameter Handler. The manipulation of the ar…

    SourceCodester Moosikay E-Commerce System
  • High 7.5
    CVE-2023-26102

    rangy vulnerable to Prototype Pollution

    All versions of the package rangy are vulnerable to Prototype Pollution when using the extend() function in file rangy-core.js.The function uses recursive merge which can lead an attacker to modify properties of the Object.prototype

    rangy npm
  • High 7.8
    CVE-2023-0996

    There is a vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker coul…

    struktur libheif libheif libheif Debian Ubuntu
  • High 8.1
    CVE-2023-0994

    Exposure of Sensitive Information to an Unauthorized Actor in francoisjacquet/rosariosis

    Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository francoisjacquet/rosariosis prior to 10.8.2.

    francoisjacquet francoisjacquet/rosariosis francoisjacquet/rosariosis Packagist
  • High 7.5
    CVE-2022-44310

    ecdh vulnerable to Exposure of Resource to Wrong Sphere

    In Development IL ecdh before 0.2.0, an attacker can send an invalid point (not on the curve) as the public key, and obtain the derived shared secret.

    ecdh npm
  • High 8.8
    CVE-2021-34167

    Cross Site Request Forgery (CSRF) vulnerability in taoCMS 3.0.2 allows remote attackers to gain escalated privileges vi…

  • High 7.5
    CVE-2021-34249

    SQL injection vulnerability in sourcecodester online-book-store 1.0 allows remote attackers to view sensitive informati…