Archive
February 2023
Vulnerabilities first published in this month (UTC), newest first.
2,189 results · Feed
-
Critical 9.8
A piece of Huawei whole-home intelligence software has an Incorrect Privilege Assignment vulnerability. Successful expl…
-
Medium 4.6
There is a data processing error vulnerability in Leia-B29 2.0.0.49(M03). Successful exploitation could bypass lock scr…
-
Critical 9.8
There is a system command injection vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could allow atta…
-
Medium 5.5
There is an identity authentication bypass vulnerability in Huawei Children Smart Watch (Simba-AL00) 1.1.1.274. Success…
-
High 7.5
There is a buffer overflow vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could lead to device serv…
-
Unscored —
This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.1, macOS Big Sur 11.7.1. A re…
-
Unscored —
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue i…
-
Unscored —
A race condition was addressed with additional validation. This issue is fixed in macOS Ventura 13, macOS Monterey 12.6…
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.1, macOS Big Sur 11…
-
Unscored —
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13. An app m…
-
Unscored —
Arbitrary File Delete vulnerability in Razer Central before v7.8.0.381 when handling files in the Accounts directory.
-
Unscored —
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13, iOS 16.1…
-
Unscored —
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13. An app may…
-
Unscored —
An injection issue was addressed with improved input validation. This issue is fixed in Xcode 14.1. An app may be able …
-
Unscored —
An issue with app access to camera data was addressed with improved logic. This issue is fixed in macOS Ventura 13. A c…
-
Unscored —
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.4 and iPadOS 15.4, macOS Monterey…
-
Unscored —
A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. …
-
Unscored —
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 15.5 and iPadOS 15.5…
-
Unscored —
Cross Site Scripting vulnerability in IRZ Electronics RUH2 GSM router allows attacker to obtain sensitive information v…
-
Unscored —
This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in Apple Music 3…
-
Medium 5.3
TechPowerUp Ryzen DRAM Calculator WinRing0x64.sys initialization
A vulnerability, which was classified as critical, has been found in TechPowerUp Ryzen DRAM Calculator 1.2.0.5. This issue affects some unknown processing in the library WinRing0x64.sys. The manipulation leads to improper initialization. Local access is requi…
-
Medium 5.3
TechPowerUp RealTemp WinRing0x64.sys initialization
A vulnerability classified as critical was found in TechPowerUp RealTemp 3.7.0.0. This vulnerability affects unknown code in the library WinRing0x64.sys. The manipulation leads to improper initialization. An attack has to be approached locally. The exploit ha…
-
Medium 6.3
MuYuCMS getFile.html server-side request forgery
A vulnerability classified as critical has been found in MuYuCMS 2.2. This affects an unknown part of the file /admin.php/update/getFile.html. The manipulation of the argument url leads to server-side request forgery. It is possible to initiate the attack rem…
-
Low 3.8
MuYuCMS filesdel.html path traversal
A vulnerability was found in MuYuCMS 2.2. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin.php/accessory/filesdel.html. The manipulation of the argument filedelur leads to relative path traversal. The a…
-
Medium 4.3
MuYuCMS index.php path traversal
A vulnerability was found in MuYuCMS 2.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /editor/index.php. The manipulation of the argument file_path leads to relative path traversal. The attack ca…
-
Medium 4.3
MuYuCMS index.php path traversal
A vulnerability was found in MuYuCMS 2.2. It has been classified as problematic. Affected is an unknown function of the file /editor/index.php. The manipulation of the argument dir_path leads to relative path traversal. It is possible to launch the attack rem…
-
Low 3.5
SourceCodester Online Pet Shop We App update_status.php cross site scripting
A vulnerability has been found in SourceCodester Online Pet Shop We App 1.0 and classified as problematic. This vulnerability affects unknown code of the file /pet_shop/admin/orders/update_status.php. The manipulation of the argument oid with the input 1"><sc…
-
Low 3.5
SourceCodester Simple Responsive Tourism Website rate_review.php cross site scripting
A vulnerability, which was classified as problematic, was found in SourceCodester Simple Responsive Tourism Website 1.0. This affects an unknown part of the file /tourism/rate_review.php. The manipulation of the argument id with the input 1"><script>alert(111…
-
Medium 6.3
SourceCodester Online Graduate Tracer System add_acc.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Online Graduate Tracer System 1.0. Affected by this issue is some unknown functionality of the file tracking/admin/add_acc.php. The manipulation of the argument id leads to sq…
-
High 7.3
SourceCodester Class and Exam Timetabling System POST Parameter index3.php sql injection
A vulnerability classified as critical was found in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/index3.php of the component POST Parameter Handler. The manipulation of the…
-
Medium 6.3
SourceCodester Online Reviewer Management System questions-view.php sql injection
A vulnerability classified as critical has been found in SourceCodester Online Reviewer Management System 1.0. Affected is an unknown function of the file /reviewer_0/admins/assessments/pretest/questions-view.php. The manipulation of the argument id leads to …
-
High 7.3
SourceCodester Dental Clinic Appointment Reservation System POST Parameter login.php sql injection
A vulnerability was found in SourceCodester Dental Clinic Appointment Reservation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /APR/login.php of the component POST Parameter Handler. The manipulation of the…
-
Medium 4.3
SourceCodester Dental Clinic Appointment Reservation System POST Parameter signup.php cross site scripting
A vulnerability was found in SourceCodester Dental Clinic Appointment Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /APR/signup.php of the component POST Parameter Handler. The manipulation of…
-
Low 3.5
dro.pm fileman.php cross site scripting
A vulnerability, which was classified as problematic, was found in dro.pm. This affects an unknown part of the file web/fileman.php. The manipulation of the argument secret/key leads to cross site scripting. It is possible to initiate the attack remotely. Thi…
-
High 7.8
In the Linux kernel 6.0.8, there is a use-after-free in ntfs_trim_fs in fs/ntfs3/bitmap.c.
-
High 7.1CVE-2023-26607 Public exploit
In the Linux kernel 6.0.8, there is an out-of-bounds read in ntfs_attr_find in fs/ntfs/attrib.c.
-
Unscored —
ASUS ASMB8 iKVM firmware through 1.14.51 allows remote attackers to execute arbitrary code by using SNMP to create exte…
-
Medium 6.1
frp_form_answers allows Cross-site Scripting
The frp_form_answers (aka Forms Export) extension before 3.1.2, and 4.x before 4.0.2, for TYPO3 allows XSS via saved emails.
-
High 7.8
In the Linux kernel 6.0.8, there is a use-after-free in inode_cgwb_move_to_attached in fs/fs-writeback.c, related to __…
-
High 7.5
In MPD before 0.23.8, as used on Automotive Grade Linux and other platforms, the PipeWire output plugin mishandles a Dr…