CVEs published February 6, 2023
187 CVEs were published on February 6, 2023: 16 critical, 19 high. 1 is now in CISA KEV.
- Published
- 187
- Critical
- 16
- High
- 19
- Medium
- 142
- Low
- 5
- Unrated
- 5
- Now in CISA KEV
- 1
- Fix available
- 57
Most affected products
- Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- 50
- MediaTek EN7528, EN7580
- 6
- MediaTek MT5221, MT7603, MT7613, MT7615, MT7622, MT7628, MT…
- 4
- MediaTek MT6739, MT6761, MT6762, MT6765, MT6768, MT6769, MT…
- 4
- MediaTek MT6879, MT6895, MT6983
- 3
- nextcloud security-advisories
- 3
- IBM App Connect Enterprise
- 2
- MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…
- 2
- MediaTek MT6735, MT6737, MT6739, MT6753, MT6757, MT6761, MT…
- 2
- MediaTek MT6761, MT6762, MT6768, MT6769, MT6779, MT6781, MT…
- 2
Critical 16
- CVE-2022-3229Because the web management interface for Unified Intents' Unified Remote solution does not itself require authentication, a remote, unauthenUnified Intents AB Unified Remote
- CVE-2022-4681Hide My WP < 6.2.9 - Unauthenticated SQLiHide My WP
- CVE-2021-31573In Config Manager, there is a possible command injection due to improper input validation.MediaTek EN7528, EN7580
- CVE-2021-31574In Config Manager, there is a possible command injection due to improper input validation.MediaTek EN7528, EN7580
- CVE-2021-31575In Config Manager, there is a possible command injection due to improper input validation.MediaTek EN7528, EN7580
- CVE-2021-36226Western Digital My Cloud devices before OS5 do not use cryptographically signed Firmware upgrade files.
- CVE-2022-47071In NVS365 V01, the background network test function can trigger command execution.
- CVE-2022-48078pycdc commit 44a730f3a889503014fec94ae6e62d8401cb75e5 was discovered to contain a stack overflow via the component ASTree.cpp:BuildFromCode.
- CVE-2022-48311**UNSUPPORTED WHEN ASSIGNED** Cross Site Scripting (XSS) in HP Deskjet 2540 series printer Firmware Version CEP1FN1418BR and Product Model N
- CVE-2023-23333There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restricti
- CVE-2023-24198Raffle Draw System v1.0 was discovered to contain multiple SQL injection vulnerabilities at save_winner.php via the ticket_id and draw param
- CVE-2023-24199Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at delete_ticket.php.
- CVE-2023-24200Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at save_ticket.php.
- CVE-2023-24201Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at get_ticket.php.
- CVE-2023-24202Raffle Draw System v1.0 was discovered to contain a local file inclusion vulnerability via the page parameter in index.php.
- CVE-2023-24276TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the country parameter at setting/del
High 19
- CVE-2022-41731IBM Watson Knowledge Catalog on Cloud Pak SQL injectionIBM Watson Knowledge Catalog on-prem
- CVE-2022-4489WOOF - Products Filter for WooCommerce < 1.3.2 - Admin+ PHP Object InjectionHUSKY
- CVE-2023-0234SiteGround Security < 1.3.1 - Admin+ SQLiSiteGround Security
- CVE-2023-0669Fortra GoAnywhere MFT License Response Servlet Command InjectionFortra Goanywhere MFT
- CVE-2022-40196Improper access control in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.2.1 and Intel C++ Compiler Classic before version 2021Intel(R) oneAPI DPC++/C++ Compiler and Intel® C++ Compiler…
- CVE-2022-47361In firewall service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-25853All versions of the package semver-tags are vulnerable to Command Injection via the getGitTagsRemote function due to improper input sanitizasemver-tags
- CVE-2022-25855All versions of the package create-choo-app3 are vulnerable to Command Injection via the devInstall function due to improper user-input sanicreate-choo-app3
- CVE-2021-36225Western Digital My Cloud devices before OS5 allow REST API access by low-privileged accounts, as demonstrated by API commands for firmware u
- CVE-2022-32663In Wi-Fi driver, there is a possible system crash due to null pointer dereference.MediaTek MT5221, MT7603, MT7613, MT7615, MT7622, MT7628, MT…
- CVE-2022-42951An issue was discovered in Couchbase Server 6.5.x and 6.6.x before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2.
- CVE-2022-44343CRMEB 4.4.4 is vulnerable to Any File download.
- CVE-2022-44617A flaw was found in libXpm.libXpm
- CVE-2022-45589All versions before 8.0.1-R2022-10-RT and 7.3.1-R2022-09-RT of the Talend ESB Runtime are potentially vulnerable to SQL Injection attacks in
- CVE-2022-48019The components wfshbr64.sys and wfshbr32.sys in Another Eden before v3.0.20 and before v2.14.200 allows attackers to perform privilege escal
- CVE-2022-48164An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN533A8 M33A8.V5030.190716 allows unauthenticated attackers to
- CVE-2022-48166An access control issue in Wavlink WL-WN530HG4 M30HG4.V5030.201217 allows unauthenticated attackers to download configuration data and log f
- CVE-2023-23849Versions of Coverity Connect prior to 2022.12.0 are vulnerable to an unauthenticated Cross-Site Scripting vulnerability.Synopsys Coverity
- CVE-2023-25016Couchbase Server before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2 exposes Sensitive Information to an Unauthorized Actor.
Medium, low and unrated 152
- CVE-2022-42444IBM App Connect Enterprise denial of serviceIBM App Connect Enterprise
- CVE-2022-42439IBM App Connect Enterprise information disclosureIBM App Connect Enterprise
- CVE-2023-23942Self reflected HTML injection in Desktop clientnextcloud security-advisories
- CVE-2023-23943Blind SSRF via server URL input in the Nextcloud Mail appnextcloud security-advisories
- CVE-2017-20177WangGuard Plugin WGG User List wangguard-user-info.php wangguard_users_info cross site scriptingWangGuard Plugin
- CVE-2015-10073tinymighty WikiSEO Meta Property Tag WikiSEO.body.php modifyHTML cross site scriptingtinymighty WikiSEO · tinymighty/wiki-seo
- CVE-2022-4626PPWP – WordPress Password Protect Page < 1.8.6 - Contributor+ Stored XSS in ShortcodePPWP
- CVE-2023-0252Contextual Related Posts < 3.3.1 - Contributor+ Stored XSSContextual Related Posts
- CVE-2023-0072WC Vendors Marketplace < 2.4.5 - Contributor+ Stored XSSWC Vendors Marketplace
- CVE-2023-0176Giveaways and Contests by RafflePress < 1.11.3 - Contributor+ Stored XSSGiveaways and Contests by RafflePress
- CVE-2022-4826Simple Tooltips < 2.1.4 - Contributor+ Stored XSS via ShortcodeSimple Tooltips
- CVE-2022-4762Materialis Companion < 1.3.40 - Contributor+ Stored XSS via ShortcodeMaterialis Companion
- CVE-2022-4670PDF.js Viewer < 2.1.8 - Contributor+ Stored XSS via ShortcodePDF.js Viewer
- CVE-2022-4657Restaurant Menu < 2.3.6 - Contributor+ Stored XSS via ShortcodeRestaurant Menu
- CVE-2023-0171jQuery T(-) Countdown Widget < 2.3.24 - Contributor+ Stored XSSjQuery T(-) Countdown Widget
- CVE-2023-0147Flexible Captcha <= 4.1 - Contributor+ Stored XSSFlexible Captcha
- CVE-2022-4677Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) < 3.12.7 - Contributor+ Stored XSS via ShortcodeLeaflet Maps Marker
- CVE-2023-0096Happyforms < 1.22.0 - Contributor+ Stored XSSForm builder to get in touch with visitors, grow your email…
- CVE-2022-4836Breadcrumb < 1.5.33 - Contributor+ Stored XSS via ShortcodeBreadcrumb
- CVE-2023-0081MonsterInsights < 8.12.1 - Contributor+ Stored XSSMonsterInsights
- CVE-2023-0150Cloak Front End Email < 1.9.2 - Contributor+ Stored XSSCloak Front End Email
- CVE-2023-0146Naver Map <= 1.1.0 - Contributor+ Stored XSSNaver Map
- CVE-2023-0170Html5 Audio Player < 2.1.12 - Contributor+ Stored XSSHtml5 Audio Player
- CVE-2023-0062EAN for WooCommerce < 4.4.3 - Contributor+ Stored XSSEAN for WooCommerce
- CVE-2023-0173WPFunnels < 2.6.9 - Contributor+ Stored XSSDrag & Drop Sales Funnel Builder for WordPress
- CVE-2022-4747Post Category Image With Grid and Slider < 1.4.8 - Contributor+ Stored XSS via ShortcodePost Category Image With Grid and Slider
- CVE-2023-0149WordPrezi < 0.9 - Contributor+ Strored XSSWordPrezi
- CVE-2023-0082ExactMetrics < 7.12.1 - Contributor+ Stored XSSExactMetrics
- CVE-2023-0153Vimeo Video Autoplay Automute <= 1.0 - Contributor+ Stored XSSVimeo Video Autoplay Automute
- CVE-2022-4321PDF Generator for WordPress < 1.1.2 - Reflected XSSPDF Generator for WordPress
- CVE-2023-0144Event Manager and Tickets Selling Plugin for WooCommerce < 3.8.0 - Contributor+ Stored XSSEvent Manager and Tickets Selling Plugin for WooCommerce
- CVE-2022-4459WP Show Posts < 1.1.4 - Contributor+ Stored XSSWP Show Posts
- CVE-2023-0282YourChannel < 1.2.2 - Subscriber+ Stored XSSYourChannel: Everything you want in a YouTube plugin.
- CVE-2022-4674Ibtana – WordPress Website Builder < 1.1.8.8 - Contributor+ Stored XSS via ShortcodeIbtana
- CVE-2023-0095Page View Count < 2.6.1 - Contributor+ Stored XSSPage View Count
- CVE-2023-0148Gallery Factory Lite <= 2.0.0 - Contributor+ Stored XSSGallery Factory Lite
- CVE-2023-0236Tutor LMS < 2.0.10 - Reflected Cross-Site ScriptingTutor LMS
- CVE-2022-4838Clean Login < 1.13.7 - Contributor+ Stored XSS via ShortcodeClean Login
- CVE-2022-4833YourChannel: Everything you want in a YouTube plugin < 1.2.3 - Contributor+ Stored XSS via ShortcodeYourChannel: Everything you want in a YouTube plugin.
- CVE-2022-4825WP-ShowHide < 1.05 - Contributor+ Stored XSS via ShortcodeWP-ShowHide
- CVE-2023-0143Send PDF for Contact Form 7 < 0.9.9.2 - Contributor+ Stored XSS via ShortcodeSend PDF for Contact Form
- CVE-2022-4384Stream < 3.9.2 - Subscriber+ Alert CreationStream
- CVE-2022-4717Strong Testimonials < 3.0.3 - Contributor+ Stored XSS via ShortcodeStrong Testimonials
- CVE-2023-0174WP VR < 8.2.7 - Contributor+ Stored XSSWP VR
- CVE-2022-4756YouTube Channel < 3.23.0 - Contributor+ Stored XSS via ShortcodeMy YouTube Channel
- CVE-2023-0070ResponsiveVoice Text To Speech < 1.7.7 - Contributor+ Stored XSSResponsiveVoice Text To Speech
- CVE-2022-4664Logo Slider < 3.6.0 - Contributor+ Stored XSS in ShortcodeLogo Slider
- CVE-2023-0154GamiPress – Vimeo integration < 1.0.9 - Contributor+ Stored XSSGamiPress
- CVE-2022-4824WP Blog and Widget < 2.3.1 - Contributor+ Stored XSS via ShortcodeWP Blog and Widgets
- CVE-2022-4577Easy Testimonials < 3.9.3 - Contributor+ Stored XSSEasy Testimonials
- CVE-2023-0178Annual Archive < 1.6.0 - Contributor+ Stored XSSAnnual Archive
- CVE-2023-23944Nexcloud Mail app temporarily stores cleartext password in databasenextcloud security-advisories
- CVE-2022-41342Improper buffer restrictions in the Intel(R) C++ Compiler Classic before version 2021.7.1 for some Intel(R) oneAPI Toolkits before version 2Intel(R) C++ Compiler Classic before
- CVE-2022-38136Uncontrolled search path in the Intel(R) oneAPI DPC++/C++ Compiler for Windows and Intel Fortran Compiler for Windows before version 2022.2.Intel(R) oneAPI DPC++/C++ Compiler for Windows and Intel®…
- CVE-2023-0686SourceCodester Online Eyewear Shop HTTP POST Request update_cart sql injectionSourceCodester Online Eyewear Shop
- CVE-2022-4902eXo Chat Application Mention ExoChatMessageComposer.vue cross site scriptingeXo Chat Application
- CVE-2022-29330mk Shortener <= 0.2 - Cross-Site Request Forgery to Stored Cross-Site Scriptingkuzmanov 0mk Shortener
- CVE-2020-36660paxswill EVE Ship Replacement Program User Information api.py information disclosurepaxswill EVE Ship Replacement Program · eve-srp
- CVE-2023-0679SourceCodester Canteen Management System removeUser.php sql injectionSourceCodester Canteen Management System
- CVE-2022-29416WordPress Afterpay Gateway for WooCommerce Plugin <= 3.5.0 is vulnerable to Cross Site Scripting (XSS)Afterpay Gateway for WooCommerce
- CVE-2022-27628WordPress WZone – Lite Version Plugin <= 3.1 Lite is vulnerable to Cross Site Request Forgery (CSRF)AA-Team WZone – Lite Version
- CVE-2022-47452In gnss driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47451In wlan driver, there is a possible missing params check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47371In bt driver, there is a thread competition leads to early release of resources to be accessed.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47370In wlan driver, there is a possible missing params check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47369In wlan driver, there is a possible missing params check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47368In wlan driver, there is a possible missing params check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47367In bluetooth driver, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47366In wlan driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47365In wlan driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47364In wlan driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47363In wlan driver, there is a possible out of bounds read due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-44447In wlan driver, there is a possible null pointer dereference issue due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-44421In wlan driver, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47333In wlan driver, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47332In wlan driver, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47450In wlan driver, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47330In wlan driver, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47329In wlan driver, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47328In wlan driver, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47327In wlan driver, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47326In wlan driver, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47325In wlan driver, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47324In wlan driver, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47323In wlan driver, there is a possible missing params check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47322In wlan driver, there is a possible missing params check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-44448In wlan driver, there is a possible missing params check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-42783In wlan driver, there is a possible missing params check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-38686In wlan driver, there is a possible missing params check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-38681In wlan driver, there is a possible missing params check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-38680In wlan driver, there is a possible missing params check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-38674In wlan driver, there is a possible missing params check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-38675In gpu driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47360In log service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47359In log service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47358In log service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47357In log service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47356In log service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47355In log service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47354In log service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47348In engineermode services, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47347In engineermode services, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47346In engineermode services, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47345In engineermode services, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47344In engineermode services, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47343In engineermode services, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47342In engineermode services, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47341In engineermode services, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47331In wlan driver, there is a race condition.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-47339In cmd services, there is a OS command injection issue due to missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2017-20176ciubotaru share-on-diaspora new_window.php cross site scriptingciubotaru share-on-diaspora
- CVE-2014-125086Gimmie Plugin trigger_login.php sql injectionGimmie Plugin
- CVE-2021-31576In Boa, there is a possible information disclosure due to a missing permission check.MediaTek EN7528, EN7580
- CVE-2021-31577In Boa, there is a possible escalation of privilege due to a missing permission check.MediaTek EN7528, EN7580
- CVE-2021-31578In Boa, there is a possible escalation of privilege due to a stack buffer overflow.MediaTek EN7528, EN7580
- CVE-2021-36224Western Digital My Cloud devices before OS5 have a nobody account with a blank password.
- CVE-2022-28923Caddy v2.4.6 was discovered to contain an open redirection vulnerability which allows attackers to redirect users to phishing websites via cgithub.com/caddyserver/caddy/v2
- CVE-2022-32595In widevine, there is a possible out of bounds read due to an incorrect bounds check.MediaTek MT6762, MT6765, MT6768, MT6769, MT6779, MT6781, MT…
- CVE-2022-32642In ccd, there is a possible memory corruption due to a race condition.MediaTek MT6879, MT6895, MT6983
- CVE-2022-32643In ccd, there is a possible use after free due to a race condition.MediaTek MT6879, MT6895, MT6983
- CVE-2022-32654In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling.MediaTek MT5221, MT7603, MT7613, MT7615, MT7622, MT7628, MT…
- CVE-2022-32655In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling.MediaTek MT5221, MT7603, MT7613, MT7615, MT7622, MT7628, MT…
- CVE-2022-32656In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling.MediaTek MT5221, MT7603, MT7613, MT7615, MT7622, MT7628, MT…
- CVE-2022-42950An issue was discovered in Couchbase Server 7.x before 7.0.5 and 7.1.x before 7.1.2.
- CVE-2022-44267ImageMagick 7.1.0-49 is vulnerable to Denial of Service.
- CVE-2022-44268ImageMagick 7.1.0-49 is vulnerable to Information Disclosure.
- CVE-2022-45722ezEIP v5.3.0(0649) was discovered to contain a cross-site scripting (XSS) vulnerability.
- CVE-2022-46496BTicino Door Entry HOMETOUCH for iOS 1.4.2 was discovered to be missing an SSL certificate.
- CVE-2022-48085Softr v2.0 was discovered to contain a HTML injection vulnerability via the Work Space Name parameter.
- CVE-2023-0615A memory leak flaw and potential divide by zero and Integer overflow was found in the Linux kernel V4L2 and vivid test code functionality.Kernel
- CVE-2023-0687A vulnerability was found in GNU C Library 2.38.GNU C Library
- CVE-2023-20602In ged, there is a possible out of bounds write due to an integer overflow.MediaTek MT6735, MT6737, MT6739, MT6753, MT6757, MT6761, MT…
- CVE-2023-20604In ged, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6735, MT6737, MT6739, MT6753, MT6757, MT6761, MT…
- CVE-2023-20605In keyinstall, there is a possible out of bounds read due to a missing bounds check.MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…
- CVE-2023-20606In apusys, there is a possible out of bounds read due to a missing bounds check.MediaTek MT6879, MT6895, MT6983
- CVE-2023-20607In ccu, there is a possible memory corruption due to a race condition.MediaTek MT6765, MT6768, MT8786
- CVE-2023-20608In display drm, there is a possible use after free due to a race condition.MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…
- CVE-2023-20609In ccu, there is a possible out of bounds read due to a logic error.MediaTek MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT…
- CVE-2023-20610In display drm, there is a possible memory corruption due to a race condition.MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…
- CVE-2023-20611In gpu, there is a possible use after free due to a race condition.MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…
- CVE-2023-20612In ril, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6739, MT6761, MT6762, MT6765, MT6768, MT6769, MT…
- CVE-2023-20613In ril, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6739, MT6761, MT6762, MT6765, MT6768, MT6769, MT…
- CVE-2023-20614In ril, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6739, MT6761, MT6762, MT6765, MT6768, MT6769, MT…
- CVE-2023-20615In ril, there is a possible out of bounds write due to a missing bounds check.MediaTek MT6739, MT6761, MT6762, MT6765, MT6768, MT6769, MT…
- CVE-2023-20616In ion, there is a possible out of bounds read due to type confusion.MediaTek MT6580, MT6735, MT6737, MT6739, MT6753, MT6757, MT…
- CVE-2023-20618In vcu, there is a possible memory corruption due to improper locking.MediaTek MT6761, MT6762, MT6768, MT6769, MT6779, MT6781, MT…
- CVE-2023-20619In vcu, there is a possible memory corruption due to improper locking.MediaTek MT6761, MT6762, MT6768, MT6769, MT6779, MT6781, MT…
- CVE-2023-24191Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the redirect parameter in signup.php
- CVE-2023-24192Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the redirect parameter in login.php.
- CVE-2023-24194Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the page parameter in navbar.php.
- CVE-2023-24195Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the page parameter in index.php.
- CVE-2023-24197Online Food Ordering System v2 was discovered to contain a SQL injection vulnerability via the id parameter at view_order.php.