# CVEs published 2023-02-06

187 CVEs were published on February 6, 2023: 16 critical, 19 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2022-3229](https://cve.now/CVE-2022-3229.md): Because the web management interface for Unified Intents' Unified Remote solution does not itself require authentication, a remote, unauthen (CVSS 9.8, Unified Intents AB Unified Remote)
- [CVE-2022-42444](https://cve.now/CVE-2022-42444.md): IBM App Connect Enterprise denial of service (CVSS 4.9, IBM App Connect Enterprise)
- [CVE-2022-42439](https://cve.now/CVE-2022-42439.md): IBM App Connect Enterprise information disclosure (CVSS 6.8, IBM App Connect Enterprise)
- [CVE-2023-23942](https://cve.now/CVE-2023-23942.md): Self reflected HTML injection in Desktop client (CVSS 5.4, nextcloud security-advisories)
- [CVE-2023-23943](https://cve.now/CVE-2023-23943.md): Blind SSRF via server URL input in the Nextcloud Mail app (CVSS 5.0, nextcloud security-advisories)
- [CVE-2022-41731](https://cve.now/CVE-2022-41731.md): IBM Watson Knowledge Catalog on Cloud Pak SQL injection (CVSS 8.6, IBM Watson Knowledge Catalog on-prem)
- [CVE-2017-20177](https://cve.now/CVE-2017-20177.md): WangGuard Plugin WGG User List wangguard-user-info.php wangguard\_users\_info cross site scripting (CVSS 3.5, WangGuard Plugin)
- [CVE-2015-10073](https://cve.now/CVE-2015-10073.md): tinymighty WikiSEO Meta Property Tag WikiSEO.body.php modifyHTML cross site scripting (CVSS 3.5, tinymighty WikiSEO · tinymighty/wiki-seo)
- [CVE-2022-4626](https://cve.now/CVE-2022-4626.md): PPWP – WordPress Password Protect Page \< 1.8.6 - Contributor+ Stored XSS in Shortcode (CVSS 5.4, PPWP)
- [CVE-2023-0252](https://cve.now/CVE-2023-0252.md): Contextual Related Posts \< 3.3.1 - Contributor+ Stored XSS (CVSS 5.4, Contextual Related Posts)
- [CVE-2022-4489](https://cve.now/CVE-2022-4489.md): WOOF - Products Filter for WooCommerce \< 1.3.2 - Admin+ PHP Object Injection (CVSS 7.2, HUSKY)
- [CVE-2023-0072](https://cve.now/CVE-2023-0072.md): WC Vendors Marketplace \< 2.4.5 - Contributor+ Stored XSS (CVSS 5.4, WC Vendors Marketplace)
- [CVE-2023-0176](https://cve.now/CVE-2023-0176.md): Giveaways and Contests by RafflePress \< 1.11.3 - Contributor+ Stored XSS (CVSS 5.4, Giveaways and Contests by RafflePress)
- [CVE-2022-4826](https://cve.now/CVE-2022-4826.md): Simple Tooltips \< 2.1.4 - Contributor+ Stored XSS via Shortcode (CVSS 5.4, Simple Tooltips)
- [CVE-2022-4762](https://cve.now/CVE-2022-4762.md): Materialis Companion \< 1.3.40 - Contributor+ Stored XSS via Shortcode (CVSS 5.4, Materialis Companion)
- [CVE-2022-4670](https://cve.now/CVE-2022-4670.md): PDF.js Viewer \< 2.1.8 - Contributor+ Stored XSS via Shortcode (CVSS 5.4, PDF.js Viewer)
- [CVE-2022-4657](https://cve.now/CVE-2022-4657.md): Restaurant Menu \< 2.3.6 - Contributor+ Stored XSS via Shortcode (CVSS 5.4, Restaurant Menu)
- [CVE-2023-0171](https://cve.now/CVE-2023-0171.md): jQuery T(-) Countdown Widget \< 2.3.24 - Contributor+ Stored XSS (CVSS 5.4, jQuery T(-) Countdown Widget)
- [CVE-2023-0147](https://cve.now/CVE-2023-0147.md): Flexible Captcha \<= 4.1 - Contributor+ Stored XSS (CVSS 5.4, Flexible Captcha)
- [CVE-2022-4677](https://cve.now/CVE-2022-4677.md): Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) \< 3.12.7 - Contributor+ Stored XSS via Shortcode (CVSS 5.4, Leaflet Maps Marker)
- [CVE-2023-0096](https://cve.now/CVE-2023-0096.md): Happyforms \< 1.22.0 - Contributor+ Stored XSS (CVSS 5.4, Form builder to get in touch with visitors, grow your email…)
- [CVE-2022-4836](https://cve.now/CVE-2022-4836.md): Breadcrumb \< 1.5.33 - Contributor+ Stored XSS via Shortcode (CVSS 5.4, Breadcrumb)
- [CVE-2023-0081](https://cve.now/CVE-2023-0081.md): MonsterInsights \< 8.12.1 - Contributor+ Stored XSS (CVSS 5.4, MonsterInsights)
- [CVE-2023-0150](https://cve.now/CVE-2023-0150.md): Cloak Front End Email \< 1.9.2 - Contributor+ Stored XSS (CVSS 5.4, Cloak Front End Email)
- [CVE-2023-0146](https://cve.now/CVE-2023-0146.md): Naver Map \<= 1.1.0 - Contributor+ Stored XSS (CVSS 5.4, Naver Map)
- [CVE-2023-0170](https://cve.now/CVE-2023-0170.md): Html5 Audio Player \< 2.1.12 - Contributor+ Stored XSS (CVSS 5.4, Html5 Audio Player)
- [CVE-2023-0062](https://cve.now/CVE-2023-0062.md): EAN for WooCommerce \< 4.4.3 - Contributor+ Stored XSS (CVSS 5.4, EAN for WooCommerce)
- [CVE-2023-0234](https://cve.now/CVE-2023-0234.md): SiteGround Security \< 1.3.1 - Admin+ SQLi (CVSS 8.8, SiteGround Security)
- [CVE-2023-0173](https://cve.now/CVE-2023-0173.md): WPFunnels \< 2.6.9 - Contributor+ Stored XSS (CVSS 5.4, Drag & Drop Sales Funnel Builder for WordPress)
- [CVE-2022-4747](https://cve.now/CVE-2022-4747.md): Post Category Image With Grid and Slider \< 1.4.8 - Contributor+ Stored XSS via Shortcode (CVSS 5.4, Post Category Image With Grid and Slider)
- [CVE-2023-0149](https://cve.now/CVE-2023-0149.md): WordPrezi \< 0.9 - Contributor+ Strored XSS (CVSS 5.4, WordPrezi)
- [CVE-2023-0082](https://cve.now/CVE-2023-0082.md): ExactMetrics \< 7.12.1 - Contributor+ Stored XSS (CVSS 5.4, ExactMetrics)
- [CVE-2023-0153](https://cve.now/CVE-2023-0153.md): Vimeo Video Autoplay Automute \<= 1.0 - Contributor+ Stored XSS (CVSS 5.4, Vimeo Video Autoplay Automute)
- [CVE-2022-4321](https://cve.now/CVE-2022-4321.md): PDF Generator for WordPress \< 1.1.2 - Reflected XSS (CVSS 6.1, PDF Generator for WordPress)
- [CVE-2023-0144](https://cve.now/CVE-2023-0144.md): Event Manager and Tickets Selling Plugin for WooCommerce \< 3.8.0 - Contributor+ Stored XSS (CVSS 5.4, Event Manager and Tickets Selling Plugin for WooCommerce)
- [CVE-2022-4459](https://cve.now/CVE-2022-4459.md): WP Show Posts \< 1.1.4 - Contributor+ Stored XSS (CVSS 5.4, WP Show Posts)
- [CVE-2023-0282](https://cve.now/CVE-2023-0282.md): YourChannel \< 1.2.2 - Subscriber+ Stored XSS (CVSS 5.4, YourChannel: Everything you want in a YouTube plugin.)
- [CVE-2022-4674](https://cve.now/CVE-2022-4674.md): Ibtana – WordPress Website Builder \< 1.1.8.8 - Contributor+ Stored XSS via Shortcode (CVSS 5.4, Ibtana)
- [CVE-2023-0095](https://cve.now/CVE-2023-0095.md): Page View Count \< 2.6.1 - Contributor+ Stored XSS (CVSS 5.4, Page View Count)
- [CVE-2023-0148](https://cve.now/CVE-2023-0148.md): Gallery Factory Lite \<= 2.0.0 - Contributor+ Stored XSS (CVSS 5.4, Gallery Factory Lite)
- [CVE-2023-0236](https://cve.now/CVE-2023-0236.md): Tutor LMS \< 2.0.10 - Reflected Cross-Site Scripting (CVSS 6.1, Tutor LMS)
- [CVE-2022-4681](https://cve.now/CVE-2022-4681.md): Hide My WP \< 6.2.9 - Unauthenticated SQLi (CVSS 9.8, Hide My WP)
- [CVE-2022-4838](https://cve.now/CVE-2022-4838.md): Clean Login \< 1.13.7 - Contributor+ Stored XSS via Shortcode (CVSS 5.4, Clean Login)
- [CVE-2022-4833](https://cve.now/CVE-2022-4833.md): YourChannel: Everything you want in a YouTube plugin \< 1.2.3 - Contributor+ Stored XSS via Shortcode (CVSS 5.4, YourChannel: Everything you want in a YouTube plugin.)
- [CVE-2022-4825](https://cve.now/CVE-2022-4825.md): WP-ShowHide \< 1.05 - Contributor+ Stored XSS via Shortcode (CVSS 5.4, WP-ShowHide)
- [CVE-2023-0143](https://cve.now/CVE-2023-0143.md): Send PDF for Contact Form 7 \< 0.9.9.2 - Contributor+ Stored XSS via Shortcode (CVSS 5.4, Send PDF for Contact Form)
- [CVE-2022-4384](https://cve.now/CVE-2022-4384.md): Stream \< 3.9.2 - Subscriber+ Alert Creation (CVSS 6.5, Stream)
- [CVE-2022-4717](https://cve.now/CVE-2022-4717.md): Strong Testimonials \< 3.0.3 - Contributor+ Stored XSS via Shortcode (CVSS 5.4, Strong Testimonials)
- [CVE-2023-0174](https://cve.now/CVE-2023-0174.md): WP VR \< 8.2.7 - Contributor+ Stored XSS (CVSS 5.4, WP VR)
- [CVE-2022-4756](https://cve.now/CVE-2022-4756.md): YouTube Channel \< 3.23.0 - Contributor+ Stored XSS via Shortcode (CVSS 5.4, My YouTube Channel)
- [CVE-2023-0070](https://cve.now/CVE-2023-0070.md): ResponsiveVoice Text To Speech \< 1.7.7 - Contributor+ Stored XSS (CVSS 5.4, ResponsiveVoice Text To Speech)
- [CVE-2022-4664](https://cve.now/CVE-2022-4664.md): Logo Slider \< 3.6.0 - Contributor+ Stored XSS in Shortcode (CVSS 5.4, Logo Slider)
- [CVE-2023-0154](https://cve.now/CVE-2023-0154.md): GamiPress – Vimeo integration \< 1.0.9 - Contributor+ Stored XSS (CVSS 5.4, GamiPress)
- [CVE-2022-4824](https://cve.now/CVE-2022-4824.md): WP Blog and Widget \< 2.3.1 - Contributor+ Stored XSS via Shortcode (CVSS 5.4, WP Blog and Widgets)
- [CVE-2022-4577](https://cve.now/CVE-2022-4577.md): Easy Testimonials \< 3.9.3 - Contributor+ Stored XSS (CVSS 5.4, Easy Testimonials)
- [CVE-2023-0178](https://cve.now/CVE-2023-0178.md): Annual Archive \< 1.6.0 - Contributor+ Stored XSS (CVSS 5.4, Annual Archive)
- [CVE-2023-23944](https://cve.now/CVE-2023-23944.md): Nexcloud Mail app temporarily stores cleartext password in database (CVSS 2.0, nextcloud security-advisories)
- [CVE-2023-0669](https://cve.now/CVE-2023-0669.md): Fortra GoAnywhere MFT License Response Servlet Command Injection (CVSS 7.2, KEV, Fortra Goanywhere MFT)
- [CVE-2022-41342](https://cve.now/CVE-2022-41342.md): Improper buffer restrictions in the Intel(R) C++ Compiler Classic before version 2021.7.1 for some Intel(R) oneAPI Toolkits before version 2 (CVSS 6.0, Intel(R) C++ Compiler Classic before)
- [CVE-2022-38136](https://cve.now/CVE-2022-38136.md): Uncontrolled search path in the Intel(R) oneAPI DPC++/C++ Compiler for Windows and Intel Fortran Compiler for Windows before version 2022.2. (CVSS 6.7, Intel(R) oneAPI DPC++/C++ Compiler for Windows and Intel®…)
- [CVE-2022-40196](https://cve.now/CVE-2022-40196.md): Improper access control in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.2.1 and Intel C++ Compiler Classic before version 2021 (CVSS 7.8, Intel(R) oneAPI DPC++/C++ Compiler and Intel® C++ Compiler…)
- [CVE-2023-0686](https://cve.now/CVE-2023-0686.md): SourceCodester Online Eyewear Shop HTTP POST Request update\_cart sql injection (CVSS 5.0, SourceCodester Online Eyewear Shop)
- [CVE-2022-4902](https://cve.now/CVE-2022-4902.md): eXo Chat Application Mention ExoChatMessageComposer.vue cross site scripting (CVSS 3.5, eXo Chat Application)
- [CVE-2022-2933](https://cve.now/CVE-2022-2933.md): 0mk Shortener \<= 0.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting (CVSS 5.4, kuzmanov 0mk Shortener)
- [CVE-2020-36660](https://cve.now/CVE-2020-36660.md): paxswill EVE Ship Replacement Program User Information api.py information disclosure (CVSS 4.3, paxswill EVE Ship Replacement Program · eve-srp)
- [CVE-2023-0679](https://cve.now/CVE-2023-0679.md): SourceCodester Canteen Management System removeUser.php sql injection (CVSS 5.0, SourceCodester Canteen Management System)
- [CVE-2022-29416](https://cve.now/CVE-2022-29416.md): WordPress Afterpay Gateway for WooCommerce Plugin \<= 3.5.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 4.7, Afterpay Gateway for WooCommerce)
- [CVE-2022-27628](https://cve.now/CVE-2022-27628.md): WordPress WZone – Lite Version Plugin \<= 3.1 Lite is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.7, AA-Team WZone – Lite Version)
- [CVE-2022-47452](https://cve.now/CVE-2022-47452.md): In gnss driver, there is a possible out of bounds write due to a missing bounds check. (CVSS 5.5, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47451](https://cve.now/CVE-2022-47451.md): In wlan driver, there is a possible missing params check. (CVSS 6.3, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47371](https://cve.now/CVE-2022-47371.md): In bt driver, there is a thread competition leads to early release of resources to be accessed. (CVSS 5.5, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47370](https://cve.now/CVE-2022-47370.md): In wlan driver, there is a possible missing params check. (CVSS 5.0, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47369](https://cve.now/CVE-2022-47369.md): In wlan driver, there is a possible missing params check. (CVSS 5.7, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47368](https://cve.now/CVE-2022-47368.md): In wlan driver, there is a possible missing params check. (CVSS 5.7, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47367](https://cve.now/CVE-2022-47367.md): In bluetooth driver, there is a missing permission check. (CVSS 4.8, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47366](https://cve.now/CVE-2022-47366.md): In wlan driver, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.4, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47365](https://cve.now/CVE-2022-47365.md): In wlan driver, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.4, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47364](https://cve.now/CVE-2022-47364.md): In wlan driver, there is a possible out of bounds write due to a missing bounds check. (CVSS 5.7, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47363](https://cve.now/CVE-2022-47363.md): In wlan driver, there is a possible out of bounds read due to a missing bounds check. (CVSS 5.7, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-44447](https://cve.now/CVE-2022-44447.md): In wlan driver, there is a possible null pointer dereference issue due to a missing bounds check. (CVSS 5.5, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-44421](https://cve.now/CVE-2022-44421.md): In wlan driver, there is a possible missing permission check. (CVSS 5.5, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47333](https://cve.now/CVE-2022-47333.md): In wlan driver, there is a possible missing permission check. (CVSS 5.5, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47332](https://cve.now/CVE-2022-47332.md): In wlan driver, there is a possible missing permission check. (CVSS 5.5, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47450](https://cve.now/CVE-2022-47450.md): In wlan driver, there is a possible missing permission check. (CVSS 5.5, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47330](https://cve.now/CVE-2022-47330.md): In wlan driver, there is a possible missing permission check. (CVSS 5.5, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47329](https://cve.now/CVE-2022-47329.md): In wlan driver, there is a possible missing permission check. (CVSS 6.4, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47328](https://cve.now/CVE-2022-47328.md): In wlan driver, there is a possible missing permission check. (CVSS 6.4, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47327](https://cve.now/CVE-2022-47327.md): In wlan driver, there is a possible missing permission check. (CVSS 5.5, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47326](https://cve.now/CVE-2022-47326.md): In wlan driver, there is a possible missing permission check. (CVSS 6.4, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47325](https://cve.now/CVE-2022-47325.md): In wlan driver, there is a possible missing permission check. (CVSS 6.4, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47324](https://cve.now/CVE-2022-47324.md): In wlan driver, there is a possible missing permission check. (CVSS 6.4, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47323](https://cve.now/CVE-2022-47323.md): In wlan driver, there is a possible missing params check. (CVSS 6.4, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47322](https://cve.now/CVE-2022-47322.md): In wlan driver, there is a possible missing params check. (CVSS 6.4, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-44448](https://cve.now/CVE-2022-44448.md): In wlan driver, there is a possible missing params check. (CVSS 6.4, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-42783](https://cve.now/CVE-2022-42783.md): In wlan driver, there is a possible missing params check. (CVSS 6.4, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-38686](https://cve.now/CVE-2022-38686.md): In wlan driver, there is a possible missing params check. (CVSS 6.4, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-38681](https://cve.now/CVE-2022-38681.md): In wlan driver, there is a possible missing params check. (CVSS 5.5, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-38680](https://cve.now/CVE-2022-38680.md): In wlan driver, there is a possible missing params check. (CVSS 5.5, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-38674](https://cve.now/CVE-2022-38674.md): In wlan driver, there is a possible missing params check. (CVSS 5.5, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-38675](https://cve.now/CVE-2022-38675.md): In gpu driver, there is a possible out of bounds write due to a missing bounds check. (CVSS 5.5, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47361](https://cve.now/CVE-2022-47361.md): In firewall service, there is a missing permission check. (CVSS 7.8, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47360](https://cve.now/CVE-2022-47360.md): In log service, there is a missing permission check. (CVSS 5.5, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47359](https://cve.now/CVE-2022-47359.md): In log service, there is a missing permission check. (CVSS 5.5, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47358](https://cve.now/CVE-2022-47358.md): In log service, there is a missing permission check. (CVSS 5.5, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47357](https://cve.now/CVE-2022-47357.md): In log service, there is a missing permission check. (CVSS 5.5, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47356](https://cve.now/CVE-2022-47356.md): In log service, there is a missing permission check. (CVSS 4.0, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47355](https://cve.now/CVE-2022-47355.md): In log service, there is a missing permission check. (CVSS 4.0, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47354](https://cve.now/CVE-2022-47354.md): In log service, there is a missing permission check. (CVSS 4.0, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47348](https://cve.now/CVE-2022-47348.md): In engineermode services, there is a missing permission check. (CVSS 4.0, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47347](https://cve.now/CVE-2022-47347.md): In engineermode services, there is a missing permission check. (CVSS 5.5, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47346](https://cve.now/CVE-2022-47346.md): In engineermode services, there is a missing permission check. (CVSS 4.0, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47345](https://cve.now/CVE-2022-47345.md): In engineermode services, there is a missing permission check. (CVSS 5.5, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47344](https://cve.now/CVE-2022-47344.md): In engineermode services, there is a missing permission check. (CVSS 5.5, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47343](https://cve.now/CVE-2022-47343.md): In engineermode services, there is a missing permission check. (CVSS 5.5, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47342](https://cve.now/CVE-2022-47342.md): In engineermode services, there is a missing permission check. (CVSS 5.5, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47341](https://cve.now/CVE-2022-47341.md): In engineermode services, there is a missing permission check. (CVSS 6.7, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47331](https://cve.now/CVE-2022-47331.md): In wlan driver, there is a race condition. (CVSS 4.7, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-47339](https://cve.now/CVE-2022-47339.md): In cmd services, there is a OS command injection issue due to missing permission check. (CVSS 6.7, Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…)
- [CVE-2022-25853](https://cve.now/CVE-2022-25853.md): All versions of the package semver-tags are vulnerable to Command Injection via the getGitTagsRemote function due to improper input sanitiza (CVSS 7.4, semver-tags)
- [CVE-2022-25855](https://cve.now/CVE-2022-25855.md): All versions of the package create-choo-app3 are vulnerable to Command Injection via the devInstall function due to improper user-input sani (CVSS 7.4, create-choo-app3)
- [CVE-2017-20176](https://cve.now/CVE-2017-20176.md): ciubotaru share-on-diaspora new\_window.php cross site scripting (CVSS 3.5, ciubotaru share-on-diaspora)
- [CVE-2014-125086](https://cve.now/CVE-2014-125086.md): Gimmie Plugin trigger\_login.php sql injection (CVSS 5.5, Gimmie Plugin)
- [CVE-2021-31573](https://cve.now/CVE-2021-31573.md): In Config Manager, there is a possible command injection due to improper input validation. (CVSS 9.8, MediaTek EN7528, EN7580)
- [CVE-2021-31574](https://cve.now/CVE-2021-31574.md): In Config Manager, there is a possible command injection due to improper input validation. (CVSS 9.8, MediaTek EN7528, EN7580)
- [CVE-2021-31575](https://cve.now/CVE-2021-31575.md): In Config Manager, there is a possible command injection due to improper input validation. (CVSS 9.8, MediaTek EN7528, EN7580)
- [CVE-2021-31576](https://cve.now/CVE-2021-31576.md): In Boa, there is a possible information disclosure due to a missing permission check. (no CVSS, MediaTek EN7528, EN7580)
- [CVE-2021-31577](https://cve.now/CVE-2021-31577.md): In Boa, there is a possible escalation of privilege due to a missing permission check. (no CVSS, MediaTek EN7528, EN7580)
- [CVE-2021-31578](https://cve.now/CVE-2021-31578.md): In Boa, there is a possible escalation of privilege due to a stack buffer overflow. (no CVSS, MediaTek EN7528, EN7580)
- [CVE-2021-36224](https://cve.now/CVE-2021-36224.md): Western Digital My Cloud devices before OS5 have a nobody account with a blank password. (no CVSS)
- [CVE-2021-36225](https://cve.now/CVE-2021-36225.md): Western Digital My Cloud devices before OS5 allow REST API access by low-privileged accounts, as demonstrated by API commands for firmware u (CVSS 8.8)
- [CVE-2021-36226](https://cve.now/CVE-2021-36226.md): Western Digital My Cloud devices before OS5 do not use cryptographically signed Firmware upgrade files. (CVSS 9.8)
- [CVE-2022-28923](https://cve.now/CVE-2022-28923.md): Caddy v2.4.6 was discovered to contain an open redirection vulnerability which allows attackers to redirect users to phishing websites via c (CVSS 6.1, github.com/caddyserver/caddy/v2)
- [CVE-2022-32595](https://cve.now/CVE-2022-32595.md): In widevine, there is a possible out of bounds read due to an incorrect bounds check. (CVSS 4.4, MediaTek MT6762, MT6765, MT6768, MT6769, MT6779, MT6781, MT…)
- [CVE-2022-32642](https://cve.now/CVE-2022-32642.md): In ccd, there is a possible memory corruption due to a race condition. (CVSS 6.4, MediaTek MT6879, MT6895, MT6983)
- [CVE-2022-32643](https://cve.now/CVE-2022-32643.md): In ccd, there is a possible use after free due to a race condition. (CVSS 6.4, MediaTek MT6879, MT6895, MT6983)
- [CVE-2022-32654](https://cve.now/CVE-2022-32654.md): In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. (CVSS 6.7, MediaTek MT5221, MT7603, MT7613, MT7615, MT7622, MT7628, MT…)
- [CVE-2022-32655](https://cve.now/CVE-2022-32655.md): In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. (CVSS 6.7, MediaTek MT5221, MT7603, MT7613, MT7615, MT7622, MT7628, MT…)
- [CVE-2022-32656](https://cve.now/CVE-2022-32656.md): In Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. (CVSS 6.7, MediaTek MT5221, MT7603, MT7613, MT7615, MT7622, MT7628, MT…)
- [CVE-2022-32663](https://cve.now/CVE-2022-32663.md): In Wi-Fi driver, there is a possible system crash due to null pointer dereference. (CVSS 7.5, MediaTek MT5221, MT7603, MT7613, MT7615, MT7622, MT7628, MT…)
- [CVE-2022-42950](https://cve.now/CVE-2022-42950.md): An issue was discovered in Couchbase Server 7.x before 7.0.5 and 7.1.x before 7.1.2. (CVSS 4.9)
- [CVE-2022-42951](https://cve.now/CVE-2022-42951.md): An issue was discovered in Couchbase Server 6.5.x and 6.6.x before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2. (CVSS 8.1)
- [CVE-2022-44267](https://cve.now/CVE-2022-44267.md): ImageMagick 7.1.0-49 is vulnerable to Denial of Service. (CVSS 6.5)
- [CVE-2022-44268](https://cve.now/CVE-2022-44268.md): ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. (CVSS 6.5)
- [CVE-2022-44343](https://cve.now/CVE-2022-44343.md): CRMEB 4.4.4 is vulnerable to Any File download. (CVSS 7.5)
- [CVE-2022-44617](https://cve.now/CVE-2022-44617.md): A flaw was found in libXpm. (CVSS 7.5, libXpm)
- [CVE-2022-45589](https://cve.now/CVE-2022-45589.md): All versions before 8.0.1-R2022-10-RT and 7.3.1-R2022-09-RT of the Talend ESB Runtime are potentially vulnerable to SQL Injection attacks in (CVSS 7.2)
- [CVE-2022-45722](https://cve.now/CVE-2022-45722.md): ezEIP v5.3.0(0649) was discovered to contain a cross-site scripting (XSS) vulnerability. (no CVSS)
- [CVE-2022-46496](https://cve.now/CVE-2022-46496.md): BTicino Door Entry HOMETOUCH for iOS 1.4.2 was discovered to be missing an SSL certificate. (CVSS 5.9)
- [CVE-2022-47071](https://cve.now/CVE-2022-47071.md): In NVS365 V01, the background network test function can trigger command execution. (CVSS 9.8)
- [CVE-2022-48019](https://cve.now/CVE-2022-48019.md): The components wfshbr64.sys and wfshbr32.sys in Another Eden before v3.0.20 and before v2.14.200 allows attackers to perform privilege escal (CVSS 7.8)
- [CVE-2022-48078](https://cve.now/CVE-2022-48078.md): pycdc commit 44a730f3a889503014fec94ae6e62d8401cb75e5 was discovered to contain a stack overflow via the component ASTree.cpp:BuildFromCode. (CVSS 9.8)
- [CVE-2022-48085](https://cve.now/CVE-2022-48085.md): Softr v2.0 was discovered to contain a HTML injection vulnerability via the Work Space Name parameter. (CVSS 5.4)
- [CVE-2022-48164](https://cve.now/CVE-2022-48164.md): An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN533A8 M33A8.V5030.190716 allows unauthenticated attackers to (CVSS 7.5)
- [CVE-2022-48166](https://cve.now/CVE-2022-48166.md): An access control issue in Wavlink WL-WN530HG4 M30HG4.V5030.201217 allows unauthenticated attackers to download configuration data and log f (CVSS 7.5)
- [CVE-2022-48311](https://cve.now/CVE-2022-48311.md): \*\*UNSUPPORTED WHEN ASSIGNED\*\* Cross Site Scripting (XSS) in HP Deskjet 2540 series printer Firmware Version CEP1FN1418BR and Product Model N (CVSS 9.0)
- [CVE-2023-0615](https://cve.now/CVE-2023-0615.md): A memory leak flaw and potential divide by zero and Integer overflow was found in the Linux kernel V4L2 and vivid test code functionality. (CVSS 5.5, Kernel)
- [CVE-2023-0687](https://cve.now/CVE-2023-0687.md): A vulnerability was found in GNU C Library 2.38. (CVSS 4.6, GNU C Library)
- [CVE-2023-20602](https://cve.now/CVE-2023-20602.md): In ged, there is a possible out of bounds write due to an integer overflow. (CVSS 6.7, MediaTek MT6735, MT6737, MT6739, MT6753, MT6757, MT6761, MT…)
- [CVE-2023-20604](https://cve.now/CVE-2023-20604.md): In ged, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT6735, MT6737, MT6739, MT6753, MT6757, MT6761, MT…)
- [CVE-2023-20605](https://cve.now/CVE-2023-20605.md): In keyinstall, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…)
- [CVE-2023-20606](https://cve.now/CVE-2023-20606.md): In apusys, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, MediaTek MT6879, MT6895, MT6983)
- [CVE-2023-20607](https://cve.now/CVE-2023-20607.md): In ccu, there is a possible memory corruption due to a race condition. (CVSS 6.4, MediaTek MT6765, MT6768, MT8786)
- [CVE-2023-20608](https://cve.now/CVE-2023-20608.md): In display drm, there is a possible use after free due to a race condition. (CVSS 6.4, MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…)
- [CVE-2023-20609](https://cve.now/CVE-2023-20609.md): In ccu, there is a possible out of bounds read due to a logic error. (CVSS 4.4, MediaTek MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT…)
- [CVE-2023-20610](https://cve.now/CVE-2023-20610.md): In display drm, there is a possible memory corruption due to a race condition. (CVSS 6.4, MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…)
- [CVE-2023-20611](https://cve.now/CVE-2023-20611.md): In gpu, there is a possible use after free due to a race condition. (CVSS 6.4, MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…)
- [CVE-2023-20612](https://cve.now/CVE-2023-20612.md): In ril, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT6739, MT6761, MT6762, MT6765, MT6768, MT6769, MT…)
- [CVE-2023-20613](https://cve.now/CVE-2023-20613.md): In ril, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT6739, MT6761, MT6762, MT6765, MT6768, MT6769, MT…)
- [CVE-2023-20614](https://cve.now/CVE-2023-20614.md): In ril, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT6739, MT6761, MT6762, MT6765, MT6768, MT6769, MT…)
- [CVE-2023-20615](https://cve.now/CVE-2023-20615.md): In ril, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT6739, MT6761, MT6762, MT6765, MT6768, MT6769, MT…)
- [CVE-2023-20616](https://cve.now/CVE-2023-20616.md): In ion, there is a possible out of bounds read due to type confusion. (CVSS 6.7, MediaTek MT6580, MT6735, MT6737, MT6739, MT6753, MT6757, MT…)
- [CVE-2023-20618](https://cve.now/CVE-2023-20618.md): In vcu, there is a possible memory corruption due to improper locking. (CVSS 6.7, MediaTek MT6761, MT6762, MT6768, MT6769, MT6779, MT6781, MT…)
- [CVE-2023-20619](https://cve.now/CVE-2023-20619.md): In vcu, there is a possible memory corruption due to improper locking. (CVSS 6.7, MediaTek MT6761, MT6762, MT6768, MT6769, MT6779, MT6781, MT…)
- [CVE-2023-23333](https://cve.now/CVE-2023-23333.md): There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restricti (CVSS 9.8)
- [CVE-2023-23849](https://cve.now/CVE-2023-23849.md): Versions of Coverity Connect prior to 2022.12.0 are vulnerable to an unauthenticated Cross-Site Scripting vulnerability. (CVSS 8.1, Synopsys Coverity)
- [CVE-2023-24191](https://cve.now/CVE-2023-24191.md): Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the redirect parameter in signup.php (CVSS 6.1)
- [CVE-2023-24192](https://cve.now/CVE-2023-24192.md): Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the redirect parameter in login.php. (CVSS 6.1)
- [CVE-2023-24194](https://cve.now/CVE-2023-24194.md): Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the page parameter in navbar.php. (CVSS 6.1)
- [CVE-2023-24195](https://cve.now/CVE-2023-24195.md): Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the page parameter in index.php. (CVSS 6.1)
- [CVE-2023-24197](https://cve.now/CVE-2023-24197.md): Online Food Ordering System v2 was discovered to contain a SQL injection vulnerability via the id parameter at view\_order.php. (CVSS 6.1)
- [CVE-2023-24198](https://cve.now/CVE-2023-24198.md): Raffle Draw System v1.0 was discovered to contain multiple SQL injection vulnerabilities at save\_winner.php via the ticket\_id and draw param (CVSS 9.8)
- [CVE-2023-24199](https://cve.now/CVE-2023-24199.md): Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at delete\_ticket.php. (CVSS 9.8)
- [CVE-2023-24200](https://cve.now/CVE-2023-24200.md): Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at save\_ticket.php. (CVSS 9.8)
- [CVE-2023-24201](https://cve.now/CVE-2023-24201.md): Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at get\_ticket.php. (CVSS 9.8)
- [CVE-2023-24202](https://cve.now/CVE-2023-24202.md): Raffle Draw System v1.0 was discovered to contain a local file inclusion vulnerability via the page parameter in index.php. (CVSS 9.8)
- [CVE-2023-24276](https://cve.now/CVE-2023-24276.md): TOTOlink A7100RU(V7.4cu.2313\_B20191024) was discovered to contain a command injection vulnerability via the country parameter at setting/del (CVSS 9.8)
- [CVE-2023-25016](https://cve.now/CVE-2023-25016.md): Couchbase Server before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2 exposes Sensitive Information to an Unauthorized Actor. (CVSS 7.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-02-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.