Archive
27 February 2023
Vulnerabilities first published on this day (UTC), newest first.
145 results · Feed
-
Medium 5.9
A race condition was addressed with additional validation. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura…
-
Unscored —
A stored cross-site scripting (XSS) vulnerability in Art Gallery Management System Project v1.0 allows attackers to exe…
-
Unscored —
Art Gallery Management System Project in PHP 1.0 was discovered to contain a SQL injection vulnerability via the userna…
-
Medium 5.5
A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.2. An app may be ab…
-
Unscored —
The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2…
-
High 8.6
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 1…
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, macOS Monterey 1…
-
High 8.8CVE-2023-23529 Exploited
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.…
KEV Feb 14, 2023 -
Unscored —CVE-2023-23156 Public exploit
Art Gallery Management System Project in PHP 1.0 was discovered to contain a SQL injection vulnerability via the pid pa…
-
Unscored —
In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a divide b…
-
Low 3.3
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Monter…
-
Medium 5.5
A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Ventura 13.2.1. A…
-
Unscored —
The issue was addressed with improved handling of caches. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura …
-
Unscored —
This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2…
-
Critical 9.8
Tenda Router W30E V1.0.1.25(633) is vulnerable to Buffer Overflow in function fromRouteStatic via parameters entrys and…
-
Critical 9.8
Tenda AC500 V2.0.1.9(1307) is vulnerable to Buffer Overflow in function fromAddressNat via parameters entrys and mitInt…
-
High 7.5CVE-2023-25235 EPSS 11%
Tenda AC500 V2.0.1.9(1307) is vulnerable to Buffer Overflow in function formOneSsidCfgSet via parameter ssid.
-
Critical 9.8
Tenda AC500 V2.0.1.9(1307) is vulnerable to Buffer Overflow in function fromRouteStatic via parameters entrys and mitIn…
-
High 7.5
Sme.UP TOKYO V6R1M220406 was discovered to contain an arbitrary file download vulnerabilty via the component /ResourceS…
-
High 7.5
An issue was discovered in the Connected Vehicle Systems Alliance (COVESA; formerly GENIVI) dlt-daemon through 2.18.8. …
-
Unscored —
Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an OS command injection vulnerability via calls made to the XMSe…
-
High 7.2
ABUS TVIP 20000-21150 devices allows remote attackers to execute arbitrary code via shell metacharacters in the /cgi-bi…
-
Unscored —
Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an information disclosure vulnerability via the /debug endpoint.…
-
Unscored —
Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an arbitrary file upload vulnerability.
-
High 7.7
An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It allows SQL Injection, by which an…
-
Medium 4.1
An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It uses a local database to store da…
-
High 8.2
An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It possesses an authentication mecha…
-
Unscored —
The issue was addressed with improved UI handling. This issue is fixed in Safari 15.6, iOS 15.6 and iPadOS 15.6. Visiti…
-
Unscored —
This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Monterey 12.6, macOS Big Sur 11.7. …
-
Unscored —
The issue was addressed with improved memory handling. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPad…
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in iOS 15.6 and iPadOS 15.6. A user may…
-
Unscored —
The issue was addressed with improved UI handling. This issue is fixed in Safari 16, tvOS 16, watchOS 9, iOS 16. Visiti…
-
High 7.8
This issue was addressed with improved checks. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, tvOS 16. An app may…
-
Unscored —
This issue was addressed with improved state management. This issue is fixed in Apple Music 3.9.10 for Android. An app …
-
High 7.5
A logic issue was addressed with improved state management. This issue is fixed in Apple Music 3.9.10 for Android. An a…
-
High 7.8
A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.6, macOS Big Sur 1…
-
Medium 5.3
This issue was addressed with using HTTPS when sending information over the network. This issue is fixed in Apple Music…
-
Unscored —
An out-of-bounds read issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.6, iOS 15.6 and…
-
Medium 6.3
A race condition was addressed with improved state handling. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 an…
-
Medium 5.5
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13, macOS Monterey 12.…