Skip to content
OpenAdvisories

Archive

February 2023

Vulnerabilities first published in this month (UTC), newest first.

← January 2023 2023 / February March 2023 →
  1. 1120
  2. 250
  3. 3117
  4. 416
  5. 53
  6. 6187
  7. 784
  8. 875
  9. 9125
  10. 1074
  11. 115
  12. 1216
  13. 13119
  14. 14203
  15. 1594
  16. 16172
  17. 17101
  18. 1814
  19. 199
  20. 2051
  21. 2185
  22. 2261
  23. 2357
  24. 2452
  25. 2518
  26. 2621
  27. 27145
  28. 28115
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-47986 Exploited · Ransomware Public exploit EPSS 100%

    IBM Aspera Faspex code execution

    IBM Aspera Faspex 4.4.2 Patch Level 1 and earlier could allow a remote attacker to execute arbitrary code on the system, caused by a YAML deserialization flaw. By sending a specially crafted obsolete API call, an attacker could exploit this vulnerability to e…

    IBM Aspera Faspex
    KEV Feb 21, 2023
  • Medium 5.3
    CVE-2023-23752 Exploited Public exploit EPSS 100%

    [20230201] - Core - Improper access check in webservice endpoints

    An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints.

    Joomla! Project Joomla! CMS Web / CMS
    KEV Jan 8, 2024
  • High 7.8
    CVE-2023-21823 Exploited Public exploit

    Windows Graphics Component Remote Code Execution Vulnerability

    Windows Graphics Component Remote Code Execution Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows Android iOS
    KEV Feb 14, 2023
  • Critical 9.8
    CVE-2022-24990 Exploited · Ransomware Public exploit EPSS 83%

    TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Age…

    KEV Feb 10, 2023
  • High 7.2
    CVE-2023-0669 Exploited · Ransomware Public exploit EPSS 100%

    Fortra GoAnywhere MFT License Response Servlet Command Injection

    Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. This issue was patched in version 7.1.2.

    Fortra GoAnywhere MFT
    KEV Feb 10, 2023