CVEs published February 4, 2023
14 CVEs were published on February 4, 2023: 1 critical, 3 high.
- Published
- 14
- Critical
- 1
- High
- 3
- Medium
- 7
- Low
- 3
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 10
Most affected products
- phpipam/phpipam
- 3
- Apache Software Foundation Apache AGE · github.com/apach… +1
- 1
- Apache Software Foundation Apache Sling App CMS · org.apach…
- 1
- Calendar Event Management System
- 1
- froxlor/froxlor
- 1
- MobileDetect · mobiledetect/mobiledetectlib
- 1
- NREL api-umbrella-web
- 1
- OnShift TurboGears · turbogears
- 1
- Segmentio is-url · is-url
- 1
- SourceCodester Online Eyewear Shop
- 1
Critical 1
High 3
- CVE-2022-45786Apache AGE: Python and Golang drivers allow data manipulation and exposure due to SQL injectionApache Software Foundation Apache AGE · github.com/apach… +1
- CVE-2023-0678Missing Authorization in phpipam/phpipamphpipam/phpipam
- CVE-2023-25193hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of loo
Medium, low and unrated 10
- CVE-2023-22849Apache Sling App CMS: XSS in CMS Reference / UI ComponentsApache Software Foundation Apache Sling App CMS · org.apach…
- CVE-2019-25101OnShift TurboGears HTTP Header controllers.py response splittingOnShift TurboGears · turbogears
- CVE-2018-25080MobileDetect Example session_example.php initLayoutType cross site scriptingMobileDetect · mobiledetect/mobiledetectlib
- CVE-2023-0675Calendar Event Management System sql injectionCalendar Event Management System
- CVE-2023-0674XXL-JOB New Password updatePwd cross-site request forgeryXXL-JOB · com.xuxueli:xxl-job
- CVE-2023-0673SourceCodester Online Eyewear Shop sql injectionSourceCodester Online Eyewear Shop
- CVE-2018-25079Segmentio is-url index.js redosSegmentio is-url · is-url
- CVE-2015-10072NREL api-umbrella-web Flash Message cross site scriptingNREL api-umbrella-web
- CVE-2023-0676Cross-site Scripting (XSS) - Reflected in phpipam/phpipamphpipam/phpipam
- CVE-2023-0677Cross-site Scripting (XSS) - Reflected in phpipam/phpipamphpipam/phpipam