CVEs published February 14, 2023
200 CVEs were published on February 14, 2023: 10 critical, 118 high. 4 are now in CISA KEV.
- Published
- 200
- Critical
- 10
- High
- 118
- Medium
- 66
- Low
- 4
- Unrated
- 2
- Now in CISA KEV
- 4
- Fix available
- 109
Most affected products
- Microsoft Windows
- 35
- Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023
- 19
- Siemens Tecnomatix Plant Simulation
- 19
- Splunk Enterprise · Splunk Cloud Platform
- 11
- gssapi gss-ntlmssp
- 5
- Microsoft Dynamics 365 (on-premises)
- 5
- SAP NetWeaver AS ABAP
- 4
- SAP Solution Manager
- 4
- Microsoft Exchange Server 2013 Cumulative Update · Micro… +1
- 3
- PLANEX COMMUNICATIONS Wired/Wireless LAN Pan/Tilt Network C…
- 3
Critical 10
- CVE-2023-21716Microsoft Word Remote Code Execution VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office +6
- CVE-2023-21692Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-21690Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-21689Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-21803Windows iSCSI Discovery Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-24482A vulnerability has been identified in COMOS V10.2 (All versions), COMOS V10.3.3.1 (All versions < V10.3.3.1.45), COMOS V10.3.3.2 (All versiSiemens COMOS
- CVE-2023-24159TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the admpass parameter in the setPasswordCfg fun
- CVE-2023-24160TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the admuser parameter in the setPasswordCfg fun
- CVE-2023-24161TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the webWlanIdx parameter in the setWebWlanIdx f
- CVE-2023-25725HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in some situations, aka "request smu
High 118
- CVE-2023-22743Git for Windows' installer is susceptible to DLL side loading attacksgit-for-windows git
- CVE-2023-23618gitk can inadvertently call executables in the worktreegit-for-windows git
- CVE-2023-21778Microsoft Dynamics Unified Service Desk Remote Code Execution VulnerabilityMicrosoft Dynamics 365 Unified Service Desk
- CVE-2023-23381Visual Studio Remote Code Execution VulnerabilityMicrosoft Visual Studio 2013 Update · Microsoft Visual S… +1
- CVE-2023-21823Windows Graphics Component Remote Code Execution VulnerabilityMicrosoft Office for Android · Microsoft Office for iOS +2
- CVE-2023-21815Visual Studio Remote Code Execution VulnerabilityMicrosoft Visual Studio 2013 Update · Microsoft Visual S… +1
- CVE-2023-21808.NET and Visual Studio Remote Code Execution VulnerabilityMicrosoft .NET · Microsoft Visual Studio 2013 Update +7
- CVE-2023-21553Azure DevOps Server Remote Code Execution VulnerabilityMicrosoft Azure DevOps Server
- CVE-2023-21566Visual Studio Elevation of Privilege VulnerabilityMicrosoft Visual Studio
- CVE-2023-25577Werkzeug may allow high resource usage when parsing multipart form data with many fieldspallets werkzeug · werkzeug
- CVE-2022-27677 Failure to validate privileges during installation of AMD Ryzen™ Master may allow an attacker with low privileges to modify files potentialAMD Ryzen™ Master
- CVE-2023-233903D Builder Remote Code Execution VulnerabilityMicrosoft 3D Builder
- CVE-2023-233773D Builder Remote Code Execution VulnerabilityMicrosoft 3D Builder
- CVE-2023-23376Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21564Azure DevOps Server Cross-Site Scripting VulnerabilityMicrosoft Azure DevOps Server
- CVE-2023-21717Microsoft SharePoint Server Elevation of Privilege VulnerabilityMicrosoft SharePoint Enterprise Server 2013 Service Pack… +2
- CVE-2023-21715Microsoft Publisher Security Feature Bypass VulnerabilityMicrosoft 365 Apps for Enterprise
- CVE-2023-21713Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server 2012 for x64-based Systems Service… +3
- CVE-2023-21710Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Microsof…
- CVE-2023-21702Windows iSCSI Service Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-21701Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-21700Windows iSCSI Discovery Service Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-21695Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-21691Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-21688NT OS Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21686Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-21685Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-21822Windows Graphics Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21820Windows Distributed File System (DFS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-21819Windows Secure Channel Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-21818Windows Secure Channel Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-21817Windows Kerberos Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21816Windows Active Directory Domain Services API Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-21813Windows Secure Channel Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-21812Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21811Windows iSCSI Service Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-21809Microsoft Defender for Endpoint Security Feature Bypass VulnerabilityMicrosoft Defender Security Intelligence Updates
- CVE-2023-21805Windows MSHTML Platform Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-21804Windows Graphics Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21802Windows Media Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-21801Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-21800Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows Server 2008 Service Pack · Microsoft… +1
- CVE-2023-21799Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-21798Microsoft ODBC Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-21797Microsoft ODBC Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-21529Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server 2013 Cumulative Update · Micro… +1
- CVE-2023-23379Microsoft Defender for IoT Elevation of Privilege VulnerabilityMicrosoft Defender for IoT
- CVE-2023-23378Print 3D Remote Code Execution VulnerabilityMicrosoft Print
- CVE-2023-23374Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityMicrosoft Edge for Android
- CVE-2023-21568Microsoft SQL Server Integration Service (VS extension) Remote Code Execution VulnerabilityMicrosoft SQL Server Integration Services for Visual Studio
- CVE-2023-21718Microsoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server 2008 R2 Service Pack · Microsoft SQ… +5
- CVE-2023-21707Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server 2013 Cumulative Update · Micro… +1
- CVE-2023-21706Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server 2013 Cumulative Update · Micro… +1
- CVE-2023-21705Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server 2012 for x64-based Systems Service… +3
- CVE-2023-21704Microsoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server 2014 Service Pack · Microsoft SQL S… +1
- CVE-2023-21806Power BI Report Server Spoofing VulnerabilityMicrosoft Power BI Report Server - January
- CVE-2023-21777Azure App Service on Azure Stack Hub Elevation of Privilege VulnerabilityMicrosoft Azure App Service on Azure Stack Hub
- CVE-2023-21684Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-21528Microsoft SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server 2008 R2 Service Pack · Microsoft SQ… +5
- CVE-2023-25567GSS-NTLMSSP vulnerable to out-of-bounds read when decoding target informationgssapi gss-ntlmssp
- CVE-2023-25566GSS-NTLMSSP vulnerable to memory leak when parsing usernamesgssapi gss-ntlmssp
- CVE-2023-25565GSS-NTLMSSP vulnerable to incorrect free when decoding target informationgssapi gss-ntlmssp
- CVE-2023-22939SPL Command Safeguards Bypass via the ‘map’ SPL Command in Splunk EnterpriseSplunk Enterprise · Splunk Cloud Platform
- CVE-2023-22933Persistent Cross-Site Scripting through the ‘module’ Tag in a View in Splunk EnterpriseSplunk Enterprise · Splunk Cloud Platform
- CVE-2023-22932Persistent Cross-Site Scripting through a Base64-encoded Image in a View in Splunk EnterpriseSplunk Enterprise · Splunk Cloud Platform
- CVE-2023-22935SPL Command Safeguards Bypass via the ‘display.page.search.patterns.sensitivity’ Search Parameter in Splunk EnterpriseSplunk Enterprise · Splunk Cloud Platform
- CVE-2023-22934SPL Command Safeguards Bypass via the ‘pivot’ SPL Command in Splunk EnterpriseSplunk Enterprise · Splunk Cloud Platform
- CVE-2023-25576@fastify/multipart vulnerable to DoS due to unlimited number of partsfastify-multipart · @fastify/multipart
- CVE-2023-25149TimescaleDB has incorrect access controltimescaledb
- CVE-2023-25141JNDI injection into Apache sling-org-apache-sling-jcr-baseApache Software Foundation Apache Sling JCR Base · org.apac…
- CVE-2023-25140A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.254), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35Siemens Parasolid · Siemens Solid Edge SE2022
- CVE-2023-24996A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006).Siemens Tecnomatix Plant Simulation
- CVE-2023-24995A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006).Siemens Tecnomatix Plant Simulation
- CVE-2023-24994A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006).Siemens Tecnomatix Plant Simulation
- CVE-2023-24993A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006).Siemens Tecnomatix Plant Simulation
- CVE-2023-24992A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006).Siemens Tecnomatix Plant Simulation
- CVE-2023-24991A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006).Siemens Tecnomatix Plant Simulation
- CVE-2023-24990A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006).Siemens Tecnomatix Plant Simulation
- CVE-2023-24989A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006).Siemens Tecnomatix Plant Simulation
- CVE-2023-24988A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006).Siemens Tecnomatix Plant Simulation
- CVE-2023-24987A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006).Siemens Tecnomatix Plant Simulation
- CVE-2023-24986A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006).Siemens Tecnomatix Plant Simulation
- CVE-2023-24985A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006).Siemens Tecnomatix Plant Simulation
- CVE-2023-24984A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006).Siemens Tecnomatix Plant Simulation
- CVE-2023-24983A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006).Siemens Tecnomatix Plant Simulation
- CVE-2023-24982A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006).Siemens Tecnomatix Plant Simulation
- CVE-2023-24981A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006).Siemens Tecnomatix Plant Simulation
- CVE-2023-24980A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006).Siemens Tecnomatix Plant Simulation
- CVE-2023-24979A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006).Siemens Tecnomatix Plant Simulation
- CVE-2023-24978A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006).Siemens Tecnomatix Plant Simulation
- CVE-2023-24581A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (ASiemens Solid Edge SE2022 · Siemens Solid Edge SE2023
- CVE-2023-24564A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (ASiemens Solid Edge SE2022 · Siemens Solid Edge SE2023
- CVE-2023-24563A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2).Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023
- CVE-2023-24562A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2).Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023
- CVE-2023-24561A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2).Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023
- CVE-2023-24560A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2).Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023
- CVE-2023-24559A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2).Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023
- CVE-2023-24558A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2).Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023
- CVE-2023-24557A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2).Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023
- CVE-2023-24556A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2).Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023
- CVE-2023-24555A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2).Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023
- CVE-2023-24554A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2).Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023
- CVE-2023-24553A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2).Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023
- CVE-2023-24552A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2).Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023
- CVE-2023-24551A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2).Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023
- CVE-2023-24550A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2).Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023
- CVE-2023-24549A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2).Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023
- CVE-2022-47977A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.3.0).Siemens JT Open · Siemens JT Utilities
- CVE-2022-47936A vulnerability has been identified in JT Open (All versions < V11.2.3.0), JT Utilities (All versions < V13.2.3.0), Parasolid V34.0 (All verSiemens JT Open · Siemens JT Utilities +1
- CVE-2022-31808A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions < V2.85.44), SiPass integrated ACC-AP (All versions <Siemens SiPass integrated AC5102 · Siemens SiPass integrate…
- CVE-2023-24530SAP BusinessObjects Business Intelligence Platform (CMC) - versions 420, 430, allows an authenticated admin user to upload malicious code thSAP BusinessObjects Business Intelligence Platform
- CVE-2023-24523An attacker authenticated as a non-admin user with local access to a server port assigned to the SAP Host Agent (Start Service) - versions 7SAP Host Agent Service
- CVE-2023-0020SAP BusinessObjects Business Intelligence platform - versions 420, 430, allows an authenticated attacker to access sensitive information whiSAP_SE SAP BusinessObjects Business Intelligence Platform
- CVE-2021-46023An Untrusted Pointer Dereference was discovered in function mrb_vm_exec in mruby before 3.1.0-rc.
- CVE-2022-29557LexisNexis Firco Compliance Link 3.7 allows CSRF.
- CVE-2023-22375Cross-site request forgery (CSRF) vulnerability in Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions allows a remote unauthePLANEX COMMUNICATIONS Wired/Wireless LAN Pan/Tilt Network C…
- CVE-2023-22629An issue was discovered in TitanFTP through 1.94.1205.
- CVE-2023-24187An XML External Entity (XXE) vulnerability in ureport v2.2.9 allows attackers to execute arbitrary code via uploading a crafted XML file to com.bstek.ureport:ureport2-core
Medium, low and unrated 72
- CVE-2023-21567Visual Studio Denial of Service VulnerabilityMicrosoft Visual Studio
- CVE-2023-23934Wrkzeug's incorrect parsing of nameless cookies leads to __Host- cookies bypasspallets werkzeug · werkzeug
- CVE-2023-23946Git's `git apply` overwriting paths outside the working treegit
- CVE-2023-22490Git vulnerable to local clone-based data exfiltration with non-local transportsgit
- CVE-2022-27672When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode 1st Gen AMD EPYC™ Processors · 2nd Gen AMD EPYC™ Proces… +10
- CVE-2023-21722.NET Framework Denial of Service VulnerabilityMicrosoft .NET Framework 2.0 Service Pack · Microsoft .N… +1
- CVE-2023-21714Microsoft Office Information Disclosure VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC
- CVE-2023-21703Azure Data Box Gateway Remote Code Execution VulnerabilityMicrosoft Azure Data Box Gateway · Microsoft Azure Stack Ed…
- CVE-2023-21699Windows Internet Storage Name Service (iSNS) Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-21697Windows Internet Storage Name Service (iSNS) Server Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-21694Windows Fax Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-21693Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-21687HTTP.sys Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-23382Azure Machine Learning Compute Instance Information Disclosure VulnerabilityMicrosoft Azure Machine Learning
- CVE-2023-21573Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2023-21572Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2023-21571Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2023-21570Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2023-21721Microsoft OneNote Elevation of Privilege VulnerabilityMicrosoft OneNote for Android
- CVE-2023-21720Microsoft Edge (Chromium-based) Tampering VulnerabilityMicrosoft Edge
- CVE-2023-21807Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2023-21794Microsoft Edge (Chromium-based) Spoofing VulnerabilityMicrosoft Edge
- CVE-2023-25564GSS-NTLMSSP vulnerable to memory corruption when decoding UTF16 stringsgssapi gss-ntlmssp
- CVE-2023-25563GSS-NTLMSSP vulnerable to multiple out-of-bounds reads when decoding NTLM fieldsgssapi gss-ntlmssp
- CVE-2023-22938Permissions Validation Failure in the ‘sendemail’ REST API Endpoint in Splunk EnterpriseSplunk Enterprise · Splunk Cloud Platform
- CVE-2023-22937Unnecessary File Extensions Allowed by Lookup Table Uploads in Splunk EnterpriseSplunk Enterprise · Splunk Cloud Platform
- CVE-2023-22943Modular Input REST API Requests Connect via HTTP after Certificate Validation Failure in Splunk Add-on Builder and Splunk CloudConnect SDKSplunk Add-on Builder · Splunk CloudConnect SDK
- CVE-2023-22942Cross-Site Request Forgery in the ‘ssg/kvstore_client’ REST Endpoint in Splunk EnterpriseSplunk Enterprise
- CVE-2023-22936Authenticated Blind Server Side Request Forgery via the ‘search_listener’ Search Parameter in Splunk EnterpriseSplunk Enterprise · Splunk Cloud Platform
- CVE-2023-22941Improperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk DaemonSplunk Enterprise · Splunk Cloud Platform
- CVE-2023-22931‘createrss’ External Search Command Overwrites Existing RSS Feeds in Splunk EnterpriseSplunk Enterprise · Splunk Cloud Platform
- CVE-2023-22940SPL Command Safeguards Bypass via the ‘collect’ SPL Command Aliases in Splunk EnterpriseSplunk Enterprise · Splunk Cloud Platform
- CVE-2023-25571Backstage has XSS Vulnerability in Software Catalogbackstage · @backstage/core-components +2
- CVE-2023-0830EasyNAS backup.pl system os command injectionEasyNAS
- CVE-2022-22564Dell EMC Unity versions before 5.2.0.0.5.173 , use(es) broken cryptographic algorithm.Dell Unity
- CVE-2022-4286Reflected Cross-Site Scripting Vulnerabilities in Automation RuntimeB&R Industrial Automation B&R Automation Runtime
- CVE-2023-24382WordPress Material Design Icons for Page Builders Plugin <= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF)Photon WP Material Design Icons for Page Builders
- CVE-2022-46862WordPress Quiz And Survey Master Plugin <= 8.0.7 is vulnerable to Cross Site Request Forgery (CSRF)ExpressTech Quiz And Survey Master – Best Quiz, Exam and Su…
- CVE-2023-24377WordPress Ecwid Shopping Cart Plugin <= 6.11.3 is vulnerable to Cross Site Request Forgery (CSRF)Ecwid Ecommerce Shopping Cart
- CVE-2023-25065WordPress WP Tabs Plugin <= 2.1.14 is vulnerable to Cross Site Request Forgery (CSRF)ShapedPlugin WP Tabs – Responsive Tabs Plugin for WordPress
- CVE-2023-24566A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (ASiemens Solid Edge SE2022 · Siemens Solid Edge SE2023
- CVE-2023-24565A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (ASiemens Solid Edge SE2022 · Siemens Solid Edge SE2023
- CVE-2023-23835A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.34), Mendix Applications using Mendix 8 (AllSiemens Mendix Applications using Mendix
- CVE-2022-35868A vulnerability has been identified in TIA Multiuser Server V14 (All versions), TIA Multiuser Server V15 (All versions < V15.1 Update 8), TISiemens TIA Multiuser Server · Siemens TIA Project-Server
- CVE-2023-25066WordPress FV Flowplayer Video Player Plugin <= 7.5.30.7212 is vulnerable to Cross Site Request Forgery (CSRF)FolioVision FV Flowplayer Video Player
- CVE-2022-43469WordPress Corona Virus (COVID-19) Banner & Live Data Plugin <= 1.7.0.6 is vulnerable to Cross Site Request Forgery (CSRF)Orchestrated Corona Virus (COVID-19) Banner & Live Data
- CVE-2023-25614SAP NetWeaver AS ABAP (BSP Framework) application - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allow an unautSAP NetWeaver AS ABAP
- CVE-2023-24529Due to lack of proper input validation, BSP application (CRM_BSP_FRAME) - versions 700, 701, 702, 731, 740, 750, 751, 752, 75C, 75D, 75E, 75SAP NetWeaver AS ABAP
- CVE-2023-24528SAP Fiori apps for Travel Management in SAP ERP (My Travel Requests) - version 600, allows an authenticated attacker to exploit a certain mFiori apps 1.0 for travel management in SAP ERP
- CVE-2023-24525SAP CRM WebClient UI - versions WEBCUIF 748, 800, 801, S4FND 102, 103, does not sufficiently encode user-controlled inputs, resulting in CroSAP CRM
- CVE-2023-24524SAP S/4 HANA Map Treasury Correspondence Format Data does not perform necessary authorization check for an authenticated user, resulting in SAP S/4 HANA
- CVE-2023-24522Due to insufficient input sanitization, SAP NetWeaver AS ABAP (Business Server Pages) - versions 700, 701, 702, 731, 740, allows an unauthenSAP NetWeaver AS ABAP
- CVE-2023-24521Due to insufficient input sanitization, SAP NetWeaver AS ABAP (BSP Framework) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 7SAP NetWeaver AS ABAP
- CVE-2023-23860SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, allows an unauthenticated attaSAP NetWeaver AS for ABAP and ABAP Platform
- CVE-2023-23859SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, allows an unauthenticated attaSAP NetWeaver AS for ABAP and ABAP Platform
- CVE-2023-23858Due to insufficient input validation, SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 78SAP_SE SAP NetWeaver AS for ABAP and ABAP Platform
- CVE-2023-23856In SAP BusinessObjects Business Intelligence (Web Intelligence user interface) - version 430, some calls return json with wrong content typeSAP_SE SAP BusinessObjects Business Intelligence
- CVE-2023-23855SAP Solution Manager - version 720, allows an authenticated attacker to redirect users to a malicious site due to insufficient URL validatioSAP Solution Manager
- CVE-2023-23854SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, does not perform necessary auSAP NetWeaver AS ABAP and ABAP Platform
- CVE-2023-23853An unauthenticated attacker in AP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 702, 731, 740, 750, 751, 752, 753,SAP NetWeaver Application Server for ABAP and ABAP Platform
- CVE-2023-23852SAP Solution Manager (System Monitoring) - version 720, does not sufficiently encode user-controlled inputs, resulting in Cross-Site ScriptiSAP Solution Manager
- CVE-2023-23851SAP Business Planning and Consolidation - versions 200, 300, allows an attacker with business authorization to upload any files (including wSAP Business Planning and Consolidation
- CVE-2023-0025SAP Solution Manager (BSP Application) - version 720, allows an authenticated attacker to craft a malicious link, which when clicked by an uSAP Solution Manager
- CVE-2023-0024SAP Solution Manager (BSP Application) - version 720, allows an authenticated attacker to craft a malicious link, which when clicked by an uSAP Solution Manager
- CVE-2023-0019In SAP GRC (Process Control) - versions GRCFND_A V1200, GRCFND_A V8100, GRCPINW V1100_700, GRCPINW V1100_731, GRCPINW V1200_750, remote-enabSAP_SE SAP GRC
- CVE-2023-0814Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Sensitive Information Disclosure via Shortcodecozmoslabs User Profile Builder – Beautiful User Registrati…
- CVE-2022-41564TIBCO Operational Intelligence Hawk Redtail Credential Exposure VulnerabilityTIBCO Software TIBCO Hawk · TIBCO Software TIBCO Operationa…
- CVE-2023-0655SonicWall Email Security contains a vulnerability that could permit a remote unauthenticated attacker access to an error page that includes SonicWall Email Security
- CVE-2023-0827Cross-site Scripting (XSS) - Stored in pimcore/pimcorepimcore/pimcore
- CVE-2023-22370Stored cross-site scripting vulnerability in Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions allows a network-adjacent autPLANEX COMMUNICATIONS Wired/Wireless LAN Pan/Tilt Network C…
- CVE-2023-22376Reflected cross-site scripting vulnerability in Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions allows a remote unauthentiPLANEX COMMUNICATIONS Wired/Wireless LAN Pan/Tilt Network C…
- CVE-2023-25758Onekey Touch devices through 4.0.0 and Onekey Mini devices through 2.10.0 allow man-in-the-middle attackers to obtain the seed phase.