# CVEs published 2023-02-10

74 CVEs were published on February 10, 2023: 8 critical, 24 high. Days are UTC.

- [CVE-2023-25557](https://cve.now/CVE-2023-25557.md): Server-Side Request Forgery in DataHub (CVSS 7.5, datahub-project datahub)
- [CVE-2023-25558](https://cve.now/CVE-2023-25558.md): Deserialization of untrusted data in DataHub (CVSS 7.5, datahub-project datahub)
- [CVE-2023-25559](https://cve.now/CVE-2023-25559.md): System account impersonation in DataHub (CVSS 8.2, datahub-project datahub)
- [CVE-2023-25560](https://cve.now/CVE-2023-25560.md): JSON Injection in DataHub (CVSS 8.2, datahub-project datahub)
- [CVE-2023-25561](https://cve.now/CVE-2023-25561.md): Login fail open on JAAS misconfiguration in DataHub (CVSS 5.7, datahub-project datahub)
- [CVE-2023-25562](https://cve.now/CVE-2023-25562.md): Failure to Invalidate Session on Logout in DataHub (CVSS 6.9, datahub-project datahub)
- [CVE-2023-0776](https://cve.now/CVE-2023-0776.md): Remote Code Execution in Baicells QRTB Platform (CVSS 8.1, Baicells Nova · Baicells Neutrino)
- [CVE-2022-46754](https://cve.now/CVE-2022-46754.md): Wyse Management Suite 3.8 and below contain an improper access control vulnerability. (CVSS 8.7, Dell Wyse Management Suite)
- [CVE-2022-46755](https://cve.now/CVE-2022-46755.md): Wyse Management Suite 3.8 and below contain an improper access control vulnerability. (CVSS 4.9, Dell Wyse Management Suite)
- [CVE-2022-46677](https://cve.now/CVE-2022-46677.md): Wyse Management Suite 3.8 and below contain an improper access control vulnerability with which an custom group admin can create a subgroup (CVSS 6.8, Dell Wyse Management Suite)
- [CVE-2022-46678](https://cve.now/CVE-2022-46678.md): Wyse Management Suite 3.8 and below contain an improper access control vulnerability. (CVSS 4.9, Dell Wyse Management Suite)
- [CVE-2022-46676](https://cve.now/CVE-2022-46676.md): Wyse Management Suite 3.8 and below contain an improper access control vulnerability. (CVSS 4.9, Dell Wyse Management Suite)
- [CVE-2022-46675](https://cve.now/CVE-2022-46675.md): Wyse Management Suite Repository 3.8 and below contain an information disclosure vulnerability. (CVSS 5.3, Dell Wyse Management Suite)
- [CVE-2022-45104](https://cve.now/CVE-2022-45104.md): Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 9.2.3.x contain a command execution vulnerability. (CVSS 8.8, Dell Unisphere for PowerMax vApp)
- [CVE-2022-34451](https://cve.now/CVE-2022-34451.md): PowerPath Management Appliance with versions 3.3 & 3.2\*, 3.1 & 3.0\* contains a Stored Cross-site Scripting Vulnerability. (CVSS 4.8, Dell PowerPath Management Appliance)
- [CVE-2022-34450](https://cve.now/CVE-2022-34450.md): PowerPath Management Appliance with version 3.3 contains Privilege Escalation vulnerability. (CVSS 6.7, Dell PowerPath Management Appliance)
- [CVE-2022-34449](https://cve.now/CVE-2022-34449.md): PowerPath Management Appliance with versions 3.3 & 3.2\* contains a Hardcoded Cryptographic Keys vulnerability. (CVSS 6.0, Dell PowerPath Management Appliance)
- [CVE-2022-34448](https://cve.now/CVE-2022-34448.md): PowerPath Management Appliance with versions 3.3 & 3.2\*, 3.1 & 3.0\* contains a Cross-site Request Forgery vulnerability. (CVSS 8.8, Dell PowerPath Management Appliance)
- [CVE-2022-34447](https://cve.now/CVE-2022-34447.md): PowerPath Management Appliance with versions 3.3 & 3.2\*, 3.1 & 3.0\* contains OS Command Injection vulnerability. (CVSS 7.2, Dell PowerPath Management Appliance)
- [CVE-2022-34446](https://cve.now/CVE-2022-34446.md): PowerPath Management Appliance with versions 3.3 & 3.2\* contains Authorization Bypass vulnerability. (CVSS 8.8, Dell PowerPath Management Appliance)
- [CVE-2022-34445](https://cve.now/CVE-2022-34445.md): Dell PowerScale OneFS, versions 8.2.x through 9.3.x contain a weak encoding for a password. (CVSS 6.0, Dell PowerScale OneFS)
- [CVE-2022-34444](https://cve.now/CVE-2022-34444.md): Dell PowerScale OneFS, versions 9.2.0.x through 9.4.0.x contain an information vulnerability. (CVSS 5.9, Dell PowerScale OneFS)
- [CVE-2022-34404](https://cve.now/CVE-2022-34404.md): Dell System Update, version 2.0.0 and earlier, contains an Improper Certificate Validation in data parser module. (CVSS 6.5, Dell System Update)
- [CVE-2022-34392](https://cve.now/CVE-2022-34392.md): SupportAssist for Home PCs (versions 3.11.4 and prior) contain an insufficient session expiration Vulnerability. (CVSS 5.5, Dell SupportAssist)
- [CVE-2022-34389](https://cve.now/CVE-2022-34389.md): Dell SupportAssist contains a rate limit bypass issues in screenmeet API third party component. (CVSS 3.7, Dell SupportAssist)
- [CVE-2022-34388](https://cve.now/CVE-2022-34388.md): Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain informatio (CVSS 7.1, Dell SupportAssist)
- [CVE-2022-34387](https://cve.now/CVE-2022-34387.md): Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain a privil (CVSS 6.4, Dell SupportAssist)
- [CVE-2022-34386](https://cve.now/CVE-2022-34386.md): Dell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain cryptograph (CVSS 5.5, Dell SupportAssist Client Consumer)
- [CVE-2022-34385](https://cve.now/CVE-2022-34385.md): SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs (version 3.2.0 and prior) contain cryptographic w (CVSS 5.5, Dell SupportAssist Client Consumer)
- [CVE-2022-34384](https://cve.now/CVE-2022-34384.md): Dell SupportAssist Client Consumer (version 3.11.1 and prior), SupportAssist Client Commercial (version 3.2 and prior), Dell Command | Upda (CVSS 7.8, Dell SupportAssist Client Consumer)
- [CVE-2022-34377](https://cve.now/CVE-2022-34377.md): Dell PowerEdge BIOS and Dell Precision BIOS contain an Improper SMM communication buffer verification vulnerability. (CVSS 1.9, Dell PowerEdge Platform)
- [CVE-2023-24816](https://cve.now/CVE-2023-24816.md): set\_term\_title command injection in ipython (CVSS 4.5, ipython)
- [CVE-2022-34376](https://cve.now/CVE-2022-34376.md): Dell PowerEdge BIOS and Dell Precision BIOS contain an improper input validation vulnerability. (CVSS 3.9, Dell PowerEdge Platform)
- [CVE-2022-34366](https://cve.now/CVE-2022-34366.md): Dell SupportAssist for Home PCs (version 3.11.2 and prior) contain Overly Permissive Cross-domain Whitelist vulnerability. (CVSS 6.5, Dell SupportAssist Client Consumer)
- [CVE-2022-34364](https://cve.now/CVE-2022-34364.md): Dell BSAFE SSL-J, versions before 6.5 and version 7.0 contain a debug message revealing unnecessary information vulnerability. (CVSS 4.4, Dell BSAFE SSL-J)
- [CVE-2022-33934](https://cve.now/CVE-2022-33934.md): Dell PowerScale OneFS, versions 8.2.x through 9.4.x contain multiple stored cross-site scripting vulnerabilities. (CVSS 7.7, Dell PowerScale OneFS)
- [CVE-2022-4903](https://cve.now/CVE-2022-4903.md): CodenameOne implicit intent for sensitive communication (CVSS 5.0, CodenameOne · com.codenameone:codenameone-core)
- [CVE-2015-10077](https://cve.now/CVE-2015-10077.md): webbuilders-group silverstripe-kapost-bridge KapostService.php getPreview sql injection (CVSS 6.3, webbuilders-group silverstripe-kapost-bridge · webbuilders-…)
- [CVE-2023-24569](https://cve.now/CVE-2023-24569.md): Dell Alienware Command Center versions 5.5.37.0 and prior contain an Improper Input validation vulnerability. (CVSS 7.8, Dell Alienware Command Center)
- [CVE-2023-24573](https://cve.now/CVE-2023-24573.md): Dell Command | Monitor versions prior to 10.9 contain an arbitrary folder delete vulnerability during uninstallation. (CVSS 4.7, Dell Command Monitor)
- [CVE-2023-23698](https://cve.now/CVE-2023-23698.md): Dell Command | Update, Dell Update, and Alienware Update versions before 4.6.0 and 4.7.1 contain Insecure Operation on Windows Junction in (CVSS 5.5, Dell Command Update)
- [CVE-2018-7935](https://cve.now/CVE-2018-7935.md): There is a vulnerability in 21.328.01.00.00 version of the E5573Cs-322. (CVSS 5.3, Huawei E5573Cs-322)
- [CVE-2023-0774](https://cve.now/CVE-2023-0774.md): SourceCodester Medical Certificate Generator App action.php sql injection (CVSS 7.3, SourceCodester Medical Certificate Generator App)
- [CVE-2022-24410](https://cve.now/CVE-2022-24410.md): Dell BIOS contains an information exposure vulnerability. (CVSS 6.8, Dell CPG BIOS)
- [CVE-2022-34454](https://cve.now/CVE-2022-34454.md): Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a heap-based buffer overflow. (CVSS 6.7, Dell PowerScale OneFS)
- [CVE-2022-34452](https://cve.now/CVE-2022-34452.md): PowerPath Management Appliance with versions 3.3, 3.2\*, 3.1 & 3.0\* contains sensitive information disclosure vulnerability. (CVSS 2.7, Dell PowerPath Management Appliance)
- [CVE-2023-22832](https://cve.now/CVE-2023-22832.md): Apache NiFi: Improper Restriction of XML External Entity References in ExtractCCDAAttributes (CVSS 7.5, Apache Software Foundation Apache NiFi · org.apache.nifi:ni…)
- [CVE-2022-43501](https://cve.now/CVE-2022-43501.md): KASAGO TCP/IP stack provided by Zuken Elmic generates ISNs(Initial Sequence Number) for TCP connections from an insufficiently random source (CVSS 9.1, ZUKEN Elmic Kasago IPv6/v4 Dual · ZUKEN Elmic Kasago IPv4 +1)
- [CVE-2022-44261](https://cve.now/CVE-2022-44261.md): Avery Dennison Monarch Printer M9855 is vulnerable to Cross Site Scripting (XSS). (CVSS 6.1)
- [CVE-2022-45699](https://cve.now/CVE-2022-45699.md): Command injection in the administration interface in APSystems ECU-R version 5203 allows a remote unauthenticated attacker to execute arbitr (CVSS 9.8)
- [CVE-2022-45766](https://cve.now/CVE-2022-45766.md): Hardcoded credentials in Global Facilities Management Software (GFMS) Version 3 software distributed by Key Systems Management permits remot (CVSS 9.1)
- [CVE-2022-46649](https://cve.now/CVE-2022-46649.md): Acemanager in ALEOS before version 4.16 allows a user with valid credentials to manipulate the IP logging operation to execute arbitrary she (CVSS 8.8, ALEOS)
- [CVE-2022-46650](https://cve.now/CVE-2022-46650.md): Acemanager in ALEOS before version 4.16 allows a user with valid credentials to reconfigure the device to expose the ACEManager credentials (CVSS 4.9, ALEOS)
- [CVE-2023-0771](https://cve.now/CVE-2023-0771.md): SQL Injection in ampache/ampache (CVSS 7.2, ampache/ampache)
- [CVE-2023-0777](https://cve.now/CVE-2023-0777.md): Authentication Bypass by Primary Weakness in modoboa/modoboa (CVSS 8.6, modoboa/modoboa · modoboa)
- [CVE-2023-23161](https://cve.now/CVE-2023-23161.md): A reflected cross-site scripting (XSS) vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web (no CVSS)
- [CVE-2023-23162](https://cve.now/CVE-2023-23162.md): Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter at product.php. (no CVSS)
- [CVE-2023-23163](https://cve.now/CVE-2023-23163.md): Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter. (no CVSS)
- [CVE-2023-23286](https://cve.now/CVE-2023-23286.md): Cross Site Scripting (XSS) vulnerability in Provide server 14.4 allows attackers to execute arbitrary code through the server-log via userna (CVSS 6.1)
- [CVE-2023-24230](https://cve.now/CVE-2023-24230.md): A stored cross-site scripting (XSS) vulnerability in the component /formwork/panel/dashboard of Formwork v1.12.1 allows attackers to execute (CVSS 4.8, getformwork/formwork)
- [CVE-2023-24231](https://cve.now/CVE-2023-24231.md): A stored cross-site scripting (XSS) vulnerability in the component /php-inventory-management-system/categories.php of Inventory Management S (CVSS 4.8)
- [CVE-2023-24232](https://cve.now/CVE-2023-24232.md): A stored cross-site scripting (XSS) vulnerability in the component /php-inventory-management-system/product.php of Inventory Management Syst (CVSS 4.8)
- [CVE-2023-24233](https://cve.now/CVE-2023-24233.md): A stored cross-site scripting (XSS) vulnerability in the component /php-inventory-management-system/orders.php?o=add of Inventory Management (CVSS 4.8)
- [CVE-2023-24234](https://cve.now/CVE-2023-24234.md): A stored cross-site scripting (XSS) vulnerability in the component php-inventory-management-system/brand.php of Inventory Management System (CVSS 4.8)
- [CVE-2023-24343](https://cve.now/CVE-2023-24343.md): D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSchedule. (CVSS 8.8)
- [CVE-2023-24344](https://cve.now/CVE-2023-24344.md): D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /goform/formWlanGuestSetu (CVSS 8.8)
- [CVE-2023-24345](https://cve.now/CVE-2023-24345.md): D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSetWanDhcpplu (CVSS 8.8)
- [CVE-2023-24346](https://cve.now/CVE-2023-24346.md): D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the wan\_connected parameter at /goform/formEasySet (CVSS 8.8)
- [CVE-2023-24347](https://cve.now/CVE-2023-24347.md): D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /goform/formSetWanDhcpplu (CVSS 8.8)
- [CVE-2023-24348](https://cve.now/CVE-2023-24348.md): D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSetACLFilter. (CVSS 9.8)
- [CVE-2023-24349](https://cve.now/CVE-2023-24349.md): D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSetRoute. (CVSS 9.8)
- [CVE-2023-24350](https://cve.now/CVE-2023-24350.md): D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the config.smtp\_email\_subject parameter at /goform (CVSS 9.8)
- [CVE-2023-24351](https://cve.now/CVE-2023-24351.md): D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the FILECODE parameter at /goform/formLogin. (CVSS 9.8)
- [CVE-2023-24352](https://cve.now/CVE-2023-24352.md): D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /goform/formWPS. (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-02-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.