CVE-2023 records published in February 2023
Page two of two: records 1,001 to 1,199 of the 1,199 published in February 2023, newest first. The first page carries the figures for February 2023.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2023-23944 | Nexcloud Mail app temporarily stores cleartext password in database | 2.0CNA v3.1 | 0.5% | 2023-02-06 | Fix |
| CVE-2023-23943 | Blind SSRF via server URL input in the Nextcloud Mail app | 5.0CNA v3.1 | 0.9% | 2023-02-06 | Fix |
| CVE-2023-23942 | Self reflected HTML injection in Desktop client | 5.4CNA v3.1 | 0.7% | 2023-02-06 | Fix |
| CVE-2023-23849 | Synopsys Coverity cross-site scripting | 6.1NVD v3.1 | 1.3% | 2023-02-06 | Fix |
| CVE-2023-23333 | Contec SolarView Compact There is a command injection | 9.8NVD v3.1 | 99.3% | 2023-02-06 | Reported exploitedNucleiMetasploitEmerging ThreatsExploit code |
| CVE-2023-20619 | MediaTek chipsets use-after-free in vcu | 6.7v3.1 | 0.1% | 2023-02-06 | Fix |
| CVE-2023-20618 | MediaTek chipsets out-of-bounds read in vcu | 6.7v3.1 | 0.1% | 2023-02-06 | Fix |
| CVE-2023-20616 | MediaTek chipsets access of resource using incompatible type (type confusion) in ion | 6.7v3.1 | 0.1% | 2023-02-06 | Fix |
| CVE-2023-20615 | MediaTek chipsets out-of-bounds write in ril | 6.7v3.1 | 0.1% | 2023-02-06 | Fix |
| CVE-2023-20614 | MediaTek chipsets out-of-bounds write in ril | 6.7v3.1 | 0.1% | 2023-02-06 | Fix |
| CVE-2023-20613 | MediaTek chipsets improper input validation in ril | 6.7v3.1 | 0.1% | 2023-02-06 | Fix |
| CVE-2023-20612 | MediaTek chipsets improper input validation in ril | 6.7v3.1 | 0.1% | 2023-02-06 | Fix |
| CVE-2023-20611 | MediaTek chipsets improper synchronization in gpu | 6.4v3.1 | 0.1% | 2023-02-06 | Fix |
| CVE-2023-20610 | MediaTek chipsets improper synchronization in display drm | 6.4v3.1 | 0.1% | 2023-02-06 | Fix |
| CVE-2023-20609 | MediaTek chipsets out-of-bounds read in ccu | 4.4v3.1 | 0.1% | 2023-02-06 | Fix |
| CVE-2023-20608 | MediaTek chipsets improper synchronization in display drm | 6.4v3.1 | 0.1% | 2023-02-06 | Fix |
| CVE-2023-20607 | MediaTek chipsets improper synchronization in ccu | 6.4v3.1 | 0.1% | 2023-02-06 | Fix |
| CVE-2023-20606 | MediaTek chipsets improper input validation in apusys | 4.4v3.1 | 0.1% | 2023-02-06 | Fix |
| CVE-2023-20605 | MediaTek chipsets improper input validation in keyinstall | 4.4v3.1 | 0.1% | 2023-02-06 | Fix |
| CVE-2023-20604 | MediaTek chipsets improper input validation in ged | 6.7v3.1 | 0.1% | 2023-02-06 | Fix |
| CVE-2023-20602 | MediaTek chipsets improper input validation in ged | 6.7v3.1 | 0.1% | 2023-02-06 | Fix |
| CVE-2023-0687 | GNU C Library buffer overflow | 9.8NVD v3.1 | 1.1% | 2023-02-06 | Fix |
| CVE-2023-0686 | SourceCodester Online Eyewear Shop HTTP POST request update_cart SQL injection | 9.8v3.1 | 0.6% | 2023-02-06 | |
| CVE-2023-0679 | SourceCodester Canteen Management System removeUser.php SQL injection | 8.1v3.1 | 0.7% | 2023-02-06 | |
| CVE-2023-0669 | Fortra GoAnywhere MFT remote code execution | 7.2NVD v3.1 | 100.0% | 2023-02-06 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2023-0615 | Linux kernel vivid V4L2 test driver memory leak | 5.5NVD v3.1 | 0.2% | 2023-02-06 | Fix |
| CVE-2023-0282 | YourChannel WordPress plugin Subscriber+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-06 | Fix |
| CVE-2023-0252 | Contextual Related Posts WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-06 | Fix |
| CVE-2023-0236 | Tutor LMS WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.3% | 2023-02-06 | NucleiFix |
| CVE-2023-0234 | SiteGround Security WordPress plugin Admin+ SQLi | 8.8NVD v3.1 | 18.0% | 2023-02-06 | Fix |
| CVE-2023-0178 | Annual Archive WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2023-02-06 | Fix |
| CVE-2023-0176 | Giveaways and Contests by RafflePress WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2023-02-06 | Fix |
| CVE-2023-0174 | WP VR WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2023-02-06 | Fix |
| CVE-2023-0173 | Drag and Drop Sales Funnel Builder for WordPress shortcode attributes stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2023-02-06 | Fix |
| CVE-2023-0171 | jQuery T(-) Countdown Widget WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2023-02-06 | Fix |
| CVE-2023-0170 | Html5 Audio Player WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2023-02-06 | Fix |
| CVE-2023-0154 | GamiPress Vimeo integration WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.7% | 2023-02-06 | Fix |
| CVE-2023-0153 | Vimeo Video Autoplay Automute WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2023-02-06 | |
| CVE-2023-0150 | Cloak Front End Email WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2023-02-06 | Fix |
| CVE-2023-0149 | WordPrezi WordPress plugin Contributor+ Strored XSS | 5.4NVD v3.1 | 0.7% | 2023-02-06 | Fix |
| CVE-2023-0148 | Gallery Factory Lite WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.7% | 2023-02-06 | |
| CVE-2023-0147 | Flexible Captcha WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2023-02-06 | |
| CVE-2023-0146 | Naver Map WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-06 | |
| CVE-2023-0144 | Event Manager and Tickets Selling Plugin for WooCommerce WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-06 | Fix |
| CVE-2023-0143 | Send PDF for Contact Form 7 WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.6% | 2023-02-06 | Fix |
| CVE-2023-0096 | Happyforms WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-06 | Fix |
| CVE-2023-0095 | Page View Count WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2023-02-06 | Fix |
| CVE-2023-0082 | ExactMetrics WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2023-02-06 | Fix |
| CVE-2023-0081 | MonsterInsights WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2023-02-06 | Fix |
| CVE-2023-0072 | WC Vendors Marketplace WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.7% | 2023-02-06 | Fix |
| CVE-2023-0070 | ResponsiveVoice Text To Speech WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2023-02-06 | Fix |
| CVE-2023-0062 | EAN for WooCommerce WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2023-02-06 | Fix |
| CVE-2023-25193 | harfbuzz resource exhaustion | 7.5v3.1 | 1.8% | 2023-02-04 | Fix |
| CVE-2023-22849 | Apache Sling App CMS: XSS in CMS Reference / UI components | 6.1v3.1 | 1.4% | 2023-02-04 | Fix |
| CVE-2023-0678 | Missing authorization in phpipam/phpipam | 5.3NVD v3.1 | 37.3% | 2023-02-04 | NucleiFix |
| CVE-2023-0677 | Cross-site scripting (XSS) Reflected in phpipam/phpipam | 6.1v3.1 | 0.4% | 2023-02-04 | Fix |
| CVE-2023-0676 | Cross-site scripting (XSS) Reflected in phpipam/phpipam | 6.1v3.1 | 1.5% | 2023-02-04 | NucleiFix |
| CVE-2023-0675 | Calendar Event Management System SQL injection | 8.8v3.1 | 0.7% | 2023-02-04 | |
| CVE-2023-0674 | XXL-JOB New Password updatePwd cross-site request forgery | 6.5v3.1 | 0.4% | 2023-02-04 | Fix |
| CVE-2023-0673 | SourceCodester Online Eyewear Shop SQL injection | 8.1v3.1 | 0.5% | 2023-02-04 | |
| CVE-2023-0671 | Code injection in froxlor/froxlor | 8.8NVD v3.1 | 1.1% | 2023-02-04 | Fix |
| CVE-2023-25139 | GNU glibc out-of-bounds write | 9.8NVD v3.1 | 1.5% | 2023-02-03 | Fix |
| CVE-2023-25136 | OpenBSD OpenSSH double free | 6.5NVD v3.1 | 89.8% | 2023-02-03 | Exploit codeFix |
| CVE-2023-25135 | vBulletin deserialization of untrusted data | 9.8v3.1 | 23.9% | 2023-02-03 | NucleiFix |
| CVE-2023-24613 | Array Networks vxAG out-of-bounds write | 4.9v3.1 | 0.8% | 2023-02-03 | Fix |
| CVE-2023-24576 | Dell NetWorker NVE code injection | 7.5CNA v3.1 | 1.0% | 2023-02-03 | Fix |
| CVE-2023-24157 | TOTOLINK T8 command injection | 9.8v3.1 | 2.1% | 2023-02-03 | |
| CVE-2023-24156 | TOTOLINK T8 command injection | 9.8v3.1 | 2.1% | 2023-02-03 | |
| CVE-2023-24155 | TOTOLINK T8 hard-coded credentials | 9.8v3.1 | 0.9% | 2023-02-03 | |
| CVE-2023-24154 | TOTOLINK T8 command injection | 9.8v3.1 | 1.9% | 2023-02-03 | |
| CVE-2023-24153 | TOTOLINK T8 command injection | 9.8v3.1 | 2.1% | 2023-02-03 | |
| CVE-2023-24152 | TOTOLINK T8 command injection | 9.8v3.1 | 2.1% | 2023-02-03 | |
| CVE-2023-24151 | TOTOLINK T8 command injection | 9.8v3.1 | 2.1% | 2023-02-03 | |
| CVE-2023-24150 | TOTOLINK T8 command injection | 9.8v3.1 | 2.1% | 2023-02-03 | |
| CVE-2023-24149 | TOTOLINK CA300-PoE hard-coded credentials | 9.8v3.1 | 0.8% | 2023-02-03 | |
| CVE-2023-24148 | TOTOLINK CA300-PoE command injection | 9.8v3.1 | 1.8% | 2023-02-03 | |
| CVE-2023-24147 | TOTOLINK CA300-PoE hard-coded credentials | 7.5v3.1 | 0.7% | 2023-02-03 | |
| CVE-2023-24146 | TOTOLINK CA300-PoE command injection | 9.8v3.1 | 1.9% | 2023-02-03 | |
| CVE-2023-24145 | TOTOLINK CA300-PoE command injection | 9.8v3.1 | 1.8% | 2023-02-03 | |
| CVE-2023-24144 | TOTOLINK CA300-PoE command injection | 9.8v3.1 | 1.9% | 2023-02-03 | |
| CVE-2023-24143 | TOTOLINK CA300-PoE command injection | 9.8v3.1 | 1.9% | 2023-02-03 | |
| CVE-2023-24142 | TOTOLINK CA300-PoE command injection | 9.8v3.1 | 1.9% | 2023-02-03 | |
| CVE-2023-24141 | TOTOLINK CA300-PoE command injection | 9.8v3.1 | 1.9% | 2023-02-03 | |
| CVE-2023-24140 | TOTOLINK CA300-PoE command injection | 9.8v3.1 | 1.9% | 2023-02-03 | |
| CVE-2023-24139 | TOTOLINK CA300-PoE command injection | 9.8v3.1 | 1.9% | 2023-02-03 | |
| CVE-2023-24138 | TOTOLINK CA300-PoE command injection | 9.8v3.1 | 1.9% | 2023-02-03 | |
| CVE-2023-24029 | Progress WS_FTP Server incorrect authorization | 7.2v3.1 | 0.9% | 2023-02-03 | Fix |
| CVE-2023-23941 | SwagPayPal payment not sent to PayPal correctly | 7.5CNA v3.1 | 0.3% | 2023-02-03 | Fix |
| CVE-2023-23940 | OpenZeppelin Contracts for Cairo is vulnerable to signature validation bypass | 6.4CNA v3.1 | 0.2% | 2023-02-03 | Fix |
| CVE-2023-23937 | Missing file upload type validation in pimcore/pimcore | 8.2CNA v3.1 | 0.5% | 2023-02-03 | Fix |
| CVE-2023-23933 | Amazon OpenSearch Anomaly Detection plugin information disclosure | 5.7CNA v3.0 | 0.5% | 2023-02-03 | Fix |
| CVE-2023-23932 | Specially crafted RTPS message may cause an OpenDDS application to crash | 5.3CNA v3.1 | 0.7% | 2023-02-03 | Fix |
| CVE-2023-23925 | Switcher Client contains regular expression denial of service (ReDoS) | 8.6CNA v3.1 | 0.5% | 2023-02-03 | Fix |
| CVE-2023-23636 | Jellyfin Web cross-site scripting (XSS) via Playlist Name | 5.4v3.1 | 0.6% | 2023-02-03 | Fix |
| CVE-2023-23635 | Jellyfin Web cross-site scripting (XSS) via Collection Name | 5.4v3.1 | 0.6% | 2023-02-03 | Fix |
| CVE-2023-23615 | Malicious users in Discourse can create spam topics as any user due to improper access control | 5.3CNA v3.1 | 0.5% | 2023-02-03 | Fix |
| CVE-2023-23477 | IBM WebSphere Application Server code execution | 8.1CNA v3.1 | 1.9% | 2023-02-03 | Fix |
| CVE-2023-23088 | Json-parser Barenboim buffer overflow | 9.8v3.1 | 1.0% | 2023-02-03 | |
| CVE-2023-23087 | Mojo::JSON null pointer dereference | 9.8v3.1 | 0.9% | 2023-02-03 | |
| CVE-2023-23086 | Mojo::JSON MojoJson v1.2.3 buffer overflow | 9.8v3.1 | 0.9% | 2023-02-03 | |
| CVE-2023-23082 | Kodi A heap-based buffer overflow | 4.6v3.1 | 0.7% | 2023-02-03 | Fix |
| CVE-2023-22975 | jflyfox jfinal_cms JFinal CMS v5.1.0 cross-site scripting | 6.1v3.1 | 0.4% | 2023-02-03 | |
| CVE-2023-22746 | CKAN is vulnerable to session secret shared across instances using Docker images | 8.6CNA v3.1 | 0.7% | 2023-02-03 | Fix |
| CVE-2023-22474 | parse-community parse-server parse Server is vulnerable to authentication bypass via spoofing | 8.7CNA v3.1 | 0.7% | 2023-02-03 | Fix |
| CVE-2023-20854 | VMware Workstation improper privilege management | 8.4v3.1 | 0.3% | 2023-02-03 | Fix |
| CVE-2023-0663 | Calendar Event Management System Login page SQL injection | 9.8v3.1 | 0.9% | 2023-02-03 | |
| CVE-2023-0659 | BDCOM 1704-WGL Backup file param.file.tgz information disclosure | 7.5v3.1 | 0.7% | 2023-02-03 | |
| CVE-2023-0658 | Multilaser RE057/RE170 Backup file param.file.tgz information disclosure | 7.5v3.1 | 0.7% | 2023-02-03 | |
| CVE-2023-0124 | DOPSoft out-of-bounds write | 7.8v3.1 | 0.2% | 2023-02-03 | Fix |
| CVE-2023-0123 | DOPSoft stack-based buffer overflow | 7.8v3.1 | 0.2% | 2023-02-03 | Fix |
| CVE-2023-25015 | Clockwork Web contains a cross-site request forgery vulnerability with Rails | 6.5v3.1 | 0.4% | 2023-02-02 | Fix |
| CVE-2023-25014 | Broken access control in 3rd party TYPO3 extension femanager | 7.5v3.1 | 0.5% | 2023-02-02 | Fix |
| CVE-2023-25013 | Broken access control in 3rd party TYPO3 extension femanager | 7.5v3.1 | 0.5% | 2023-02-02 | Fix |
| CVE-2023-25012 | Linux kernel use-after-free | 4.6v3.1 | 0.8% | 2023-02-02 | Fix |
| CVE-2023-24574 | Dell Enterprise SONiC OS resource exhaustion | 7.5CNA v3.1 | 0.9% | 2023-02-02 | Fix |
| CVE-2023-23120 | TRENDnet Tv-ip651wi improper integrity check validation | 5.9v3.1 | 0.3% | 2023-02-02 | Fix |
| CVE-2023-23119 | UI Af-2x improper integrity check validation | 5.9v3.1 | 0.3% | 2023-02-02 | Fix |
| CVE-2023-23110 | NETGEAR XAVN2001V2 download without integrity check | 7.4v3.1 | 0.6% | 2023-02-02 | Fix |
| CVE-2023-0651 | FastCMS Template Management unrestricted upload | 9.8v3.1 | 0.8% | 2023-02-02 | |
| CVE-2023-0650 | YAFNET Signature cross-site scripting | 5.4v3.1 | 0.7% | 2023-02-02 | Fix |
| CVE-2023-0649 | dst-admin sendBroadcast command injection | 7.5v3.1 | 3.2% | 2023-02-02 | |
| CVE-2023-0648 | dst-admin masterConsole command injection | 7.5v3.1 | 3.1% | 2023-02-02 | |
| CVE-2023-0647 | dst-admin kickPlayer command injection | 7.5v3.1 | 3.1% | 2023-02-02 | |
| CVE-2023-0646 | dst-admin cavesConsole command injection | 7.5v3.1 | 3.2% | 2023-02-02 | |
| CVE-2023-0643 | Improper Handling of Additional Special Element in Squidex/Squidex | 6.1v3.1 | 0.6% | 2023-02-02 | Fix |
| CVE-2023-0642 | Cross-site request forgery (CSRF) in Squidex/Squidex | 6.5v3.1 | 0.4% | 2023-02-02 | Fix |
| CVE-2023-0641 | PHPGurukul Employee Leaves Management System changepassword.php weak password | 9.1v3.1 | 1.0% | 2023-02-02 | |
| CVE-2023-0640 | TRENDnet TEW-652BRP Web interface ping.ccp command injection | 9.8v3.1 | 6.5% | 2023-02-02 | |
| CVE-2023-0639 | TRENDnet TEW-652BRP Web Management interface get_set.ccp cross-site scripting | 6.1v3.1 | 0.4% | 2023-02-02 | |
| CVE-2023-0638 | TRENDnet TEW-811DRU web interface command injection | 9.8v3.1 | 2.9% | 2023-02-02 | |
| CVE-2023-0637 | TRENDnet TEW-811DRU Web Management interface wan.asp memory corruption | 6.5v3.1 | 0.8% | 2023-02-02 | |
| CVE-2023-0400 | Trellix Data Loss Prevention (DLP) incorrect control flow | 5.9CNA v3.1 | 0.4% | 2023-02-02 | Exploit codeFix |
| CVE-2023-24997 | Apache InLong: Jdbc Connection Security Bypass | 9.8v3.1 | 1.4% | 2023-02-01 | Fix |
| CVE-2023-24977 | Apache InLong: Jdbc Connection causes arbitrary file reading in InLong | 7.5v3.1 | 1.2% | 2023-02-01 | Fix |
| CVE-2023-24956 | Forget Heart Message Box SQL injection | 8.8v3.1 | 0.7% | 2023-02-01 | |
| CVE-2023-24610 | Nosh Chartingsystem unrestricted file upload | 8.8v3.1 | 2.1% | 2023-02-01 | Exploit code |
| CVE-2023-24241 | Forget Heart Message Box SQL injection | 9.8v3.1 | 0.7% | 2023-02-01 | |
| CVE-2023-23969 | Django contains uncontrolled resource consumption via cached header | 7.5v3.1 | 47.1% | 2023-02-01 | Exploit codeFix |
| CVE-2023-23928 | reason-jose ignores signature checks | 5.9CNA v3.1 | 0.5% | 2023-02-01 | Fix |
| CVE-2023-23924 | URI validation failure on SVG parsing in Dompdf | 10.0CNA v3.1 | 3.6% | 2023-02-01 | Exploit codeFix |
| CVE-2023-23846 | Open5GS resource exhaustion | 7.5v3.1 | 0.8% | 2023-02-01 | |
| CVE-2023-23751 | Joomla! CMS Core Missing ACL checks for com_actionlogs | 4.3v3.1 | 0.4% | 2023-02-01 | Fix |
| CVE-2023-23750 | Joomla! CMS core CSRF within post-installation messages | 6.3v3.1 | 0.2% | 2023-02-01 | Fix |
| CVE-2023-23692 | Dell Data Domain OS command injection | 8.8CNA v3.1 | 1.6% | 2023-02-01 | Fix |
| CVE-2023-23630 | Cross-site (XSS) vulnerability with Express API in Eta | 8.6CNA v3.1 | 0.6% | 2023-02-01 | Fix |
| CVE-2023-23555 | F5 BIG-IP FastL4 profile vulnerability | 7.5CNA v3.1 | 0.6% | 2023-02-01 | Fix |
| CVE-2023-23552 | F5 BIG-IP Advanced WAF and ASM resource exhaustion | 7.5CNA v3.1 | 1.5% | 2023-02-01 | Fix |
| CVE-2023-23469 | IBM Cloud Pak for Business Automation information disclosure | 4.0CNA v3.1 | 0.2% | 2023-02-01 | Fix |
| CVE-2023-23136 | lmxcms path traversal | 6.5v3.1 | 0.8% | 2023-02-01 | |
| CVE-2023-23135 | Ftdms An arbitrary file upload | 7.2v3.1 | 1.0% | 2023-02-01 | |
| CVE-2023-23132 | Selfwealth hard-coded credentials | 7.5v3.1 | 0.6% | 2023-02-01 | |
| CVE-2023-23131 | Selfwealth improper certificate validation | 7.5v3.1 | 0.6% | 2023-02-01 | |
| CVE-2023-23130 | ConnectWise Automate cleartext transmission of sensitive information | 5.9v3.1 | 0.3% | 2023-02-01 | |
| CVE-2023-23128 | Connectwise permissive cross-domain policy | 6.1v3.1 | 0.4% | 2023-02-01 | |
| CVE-2023-23127 | Connectwise missing encryption | 5.3v3.1 | 0.3% | 2023-02-01 | |
| CVE-2023-23126 | ConnectWise Automate clickjacking | 6.1v3.1 | 0.4% | 2023-02-01 | |
| CVE-2023-23078 | Zoho ManageEngine ServiceDesk Plus cross-site scripting | 6.1v3.1 | 2.8% | 2023-02-01 | Fix |
| CVE-2023-23077 | Zoho ManageEngine ServiceDesk Plus cross-site scripting | 6.1v3.1 | 2.8% | 2023-02-01 | Fix |
| CVE-2023-23076 | Zoho Manageengine Supportcenter Plus OS command injection | 9.8v3.1 | 74.3% | 2023-02-01 | |
| CVE-2023-23075 | Zoho ManageEngine AssetExplorer cross-site scripting | 6.1v3.1 | 2.6% | 2023-02-01 | |
| CVE-2023-23074 | Zoho ManageEngine ServiceDesk Plus cross-site scripting | 6.1v3.1 | 83.6% | 2023-02-01 | Fix |
| CVE-2023-23073 | Zoho ManageEngine ServiceDesk Plus cross-site scripting | 6.1v3.1 | 2.8% | 2023-02-01 | Fix |
| CVE-2023-22842 | F5 BIG-IP SIP profile stack-based buffer overflow | 7.5CNA v3.1 | 0.6% | 2023-02-01 | Fix |
| CVE-2023-22839 | F5 BIG-IP DNS profile null pointer dereference | 7.5CNA v3.1 | 0.6% | 2023-02-01 | Fix |
| CVE-2023-22664 | F5 BIG-IP HTTP/2 profile resource exhaustion | 7.5CNA v3.1 | 0.6% | 2023-02-01 | Fix |
| CVE-2023-22657 | F5OS tenant file name handling command injection | 7.0CNA v3.1 | 0.4% | 2023-02-01 | Fix |
| CVE-2023-22575 | Dell PowerScale OneFS sensitive information in log files | 8.7CNA v3.1 | 0.6% | 2023-02-01 | Fix |
| CVE-2023-22574 | Dell PowerScale OneFS sensitive information in log files | 8.1CNA v3.1 | 0.7% | 2023-02-01 | Fix |
| CVE-2023-22573 | Dell PowerScale OneFS sensitive information in log files | 7.9CNA v3.1 | 0.2% | 2023-02-01 | Fix |
| CVE-2023-22572 | Dell PowerScale OneFS sensitive information in log files | 7.8CNA v3.1 | 0.2% | 2023-02-01 | Fix |
| CVE-2023-22501 | Atlassian Jira Service Management Server improper authentication | 9.4CNA v3.0 | 15.5% | 2023-02-01 | Fix |
| CVE-2023-22422 | F5 BIG-IP HTTP profile buffer overflow | 7.5CNA v3.1 | 0.6% | 2023-02-01 | Fix |
| CVE-2023-22418 | BIG-IP APM virtual server vulnerability | 6.1CNA v3.1 | 0.3% | 2023-02-01 | Fix |
| CVE-2023-22374 | F5 BIG-IP iControl SOAP format string | 7.5CNA v3.1 | 72.6% | 2023-02-01 | Fix |
| CVE-2023-22358 | F5 BIG-IP Edge Client Windows installer DLL hijacking | 7.8CNA v3.1 | 0.2% | 2023-02-01 | Fix |
| CVE-2023-22341 | F5 BIG-IP Access Policy Manager OAuth profile null pointer dereference | 7.5CNA v3.1 | 0.6% | 2023-02-01 | Fix |
| CVE-2023-22340 | F5 BIG-IP SIP profile null pointer dereference | 7.5CNA v3.1 | 0.6% | 2023-02-01 | Fix |
| CVE-2023-22326 | F5 BIG-IP iControl REST and tmsh vulnerability | 4.9CNA v3.1 | 0.5% | 2023-02-01 | Fix |
| CVE-2023-22323 | BIG-IP SSL OCSP Authentication profile vulnerability | 7.5CNA v3.1 | 0.7% | 2023-02-01 | Fix |
| CVE-2023-22302 | F5 BIG-IP HTTP profile vulnerability | 5.9CNA v3.1 | 0.5% | 2023-02-01 | Fix |
| CVE-2023-22283 | F5 BIG-IP Edge Client DLL hijacking | 6.5CNA v3.1 | 0.2% | 2023-02-01 | Fix |
| CVE-2023-22281 | F5 BIG-IP Advanced Firewall Manager NAT policy vulnerability | 7.5CNA v3.1 | 0.6% | 2023-02-01 | Fix |
| CVE-2023-20856 | VMware vRealize Operations (vROps) cross-site request forgery | 8.8v3.1 | 0.4% | 2023-02-01 | Fix |
| CVE-2023-0619 | Kraken.io Image Optimizer WordPress plugin missing authorization authenticated plugin options update | 6.5v3.1 | 0.7% | 2023-02-01 | Fix |
| CVE-2023-0618 | TRENDnet TEW-652BRP Web service cfg_op.ccp memory corruption | 7.5v3.1 | 0.9% | 2023-02-01 | |
| CVE-2023-0617 | TRENDNet TEW-811DRU httpd guestnetwork.asp buffer overflow | 7.5v3.1 | 1.0% | 2023-02-01 | |
| CVE-2023-0613 | TRENDnet TEW-811DRU httpd security.asp memory corruption | 7.5v3.1 | 0.9% | 2023-02-01 | |
| CVE-2023-0612 | TRENDnet TEW-811DRU httpd basic.asp buffer overflow | 7.5v3.1 | 0.9% | 2023-02-01 | |
| CVE-2023-0611 | TRENDnet TEW-652BRP Web Management interface get_set.ccp command injection | 8.8v3.1 | 3.9% | 2023-02-01 | |
| CVE-2023-0610 | Improper authorization in wallabag/wallabag | 4.3v3.1 | 0.4% | 2023-02-01 | Fix |
| CVE-2023-0609 | Improper authorization in wallabag/wallabag | 4.3v3.1 | 0.6% | 2023-02-01 | Fix |
| CVE-2023-0608 | Cross-site scripting (XSS) DOM in microweber/microweber | 5.4v3.1 | 0.5% | 2023-02-01 | Fix |
| CVE-2023-0607 | Cross-site scripting (XSS) Stored in ProjectSend/ProjectSend | 4.8NVD v3.1 | 0.7% | 2023-02-01 | Fix |
| CVE-2023-0606 | Cross-site scripting (XSS) Reflected in ampache/ampache | 6.1NVD v3.1 | 0.6% | 2023-02-01 | Fix |
| CVE-2023-0599 | Rapid7 Metasploit Pro stored XSS | 6.1CNA v3.1 | 0.4% | 2023-02-01 | |
| CVE-2023-0587 | Trend Micro Apex One exists file upload | 9.1v3.1 | 59.6% | 2023-02-01 | |
| CVE-2023-0524 | Tenable.io improper privilege management | 8.8NVD v3.1 | 0.6% | 2023-02-01 | |
| CVE-2023-0454 | OrangeScrum path traversal | 8.1v3.1 | 1.0% | 2023-02-01 | |
| CVE-2023-0341 | EditorConfig C Core stack buffer overflow in editorconfig-core-c | 7.8NVD v3.1 | 1.0% | 2023-02-01 | Fix |