Archive

2 March 2023

Vulnerabilities first published on this day (UTC), newest first.

← February 2023 2023 / March /2 April 2023 →

All Critical High Medium Low Exploited only Public exploit

58 results · Feed

Medium 6.4

CVE-2023-22462

Stored XSS in Grafana Text plugin

Grafana is an open-source platform for monitoring and observability. On 2023-01-01 during an internal audit of Grafana, a member of the security team found a stored XSS vulnerability affecting the core plugin "Text". The stored XSS vulnerability requires seve…

Grafana Grafana grafana github.com/grafana/grafana Web / CMS Ubuntu Go

Mar 2, 2023
Unscored —

CVE-2023-0656 Public exploit EPSS 41%

A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of …

SonicWall SonicOS Network devices

Mar 2, 2023
Medium 6.5

CVE-2023-1148

Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress

Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3.

flatpressblog flatpressblog/flatpress

Mar 2, 2023
Medium 5.4

CVE-2023-1146

Cross-site Scripting (XSS) - Generic in flatpressblog/flatpress

Cross-site Scripting (XSS) - Generic in GitHub repository flatpressblog/flatpress prior to 1.3.

flatpressblog flatpressblog/flatpress

Mar 2, 2023
High 8.8

CVE-2023-1101

SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use exc…

SonicWall SonicOS Network devices

Mar 2, 2023
Medium 5.3

CVE-2023-1106

Cross-site Scripting (XSS) - Reflected in flatpressblog/flatpress

Cross-site Scripting (XSS) - Reflected in GitHub repository flatpressblog/flatpress prior to 1.3.

flatpressblog flatpressblog/flatpress

Mar 2, 2023
Medium 6.5

CVE-2023-1147

Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress

Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3.

flatpressblog flatpressblog/flatpress

Mar 2, 2023
High 7.8

CVE-2023-1118

A flaw use after free in the Linux kernel integrated infrared receiver/transceiver driver was found in the way user det…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Mar 2, 2023
Medium 5.7

CVE-2023-1149

Improper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserver

Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.8.0.

BTCPay Server btcpayserver/btcpayserver

Mar 2, 2023
Medium 6.5

CVE-2023-1107

Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress

Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3.

flatpressblog flatpressblog/flatpress

Mar 2, 2023
High 8.8

CVE-2023-25358

A use-after-free vulnerability in WebCore::RenderLayer::addChild in WebKitGTK before 2.36.8 allows attackers to execute…

qtwebkit-source qtwebkit-opensource-src webkit2gtk webkitgtk Debian Ubuntu

Mar 2, 2023
High 8.8

CVE-2023-25360

A use-after-free vulnerability in WebCore::RenderLayer::renderer in WebKitGTK before 2.36.8 allows attackers to execute…

webkit2gtk webkitgtk wpewebkit Debian Ubuntu

Mar 2, 2023
Unscored —

CVE-2023-25362

A use-after-free vulnerability in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK before 2.36.8 allows att…

webkit2gtk webkitgtk wpewebkit Debian Ubuntu

Mar 2, 2023
High 8.8

CVE-2023-25361

A use-after-free vulnerability in WebCore::RenderLayer::setNextSibling in WebKitGTK before 2.36.8 allows attackers to e…

webkit2gtk webkitgtk wpewebkit Debian Ubuntu

Mar 2, 2023
Unscored —

CVE-2023-25363

A use-after-free vulnerability in WebCore::RenderLayer::updateDescendantDependentFlags in WebKitGTK before 2.36.8 allow…

webkit2gtk webkitgtk wpewebkit Debian Ubuntu

Mar 2, 2023
Unscored —

CVE-2023-26780

CleverStupidDog yf-exam v 1.8.0 is vulnerable to SQL Injection.

Mar 2, 2023
Unscored —

CVE-2022-38734

StorageGRID (formerly StorageGRID Webscale) versions prior to 11.6.0.8 are susceptible to a Denial of Service (DoS) vul…

Mar 2, 2023
Unscored —

CVE-2022-46501

Accruent LLC Maintenance Connection 2021 (all) & 2022.2 was discovered to contain a SQL injection vulnerability via the…

Mar 2, 2023