# CVEs published 2023-02-14

200 CVEs were published on February 14, 2023: 10 critical, 118 high. 4 are now in CISA KEV. Days are UTC.

- [CVE-2023-22743](https://cve.now/CVE-2023-22743.md): Git for Windows' installer is susceptible to DLL side loading attacks (CVSS 7.3, git-for-windows git)
- [CVE-2023-23618](https://cve.now/CVE-2023-23618.md): gitk can inadvertently call executables in the worktree (CVSS 8.6, git-for-windows git)
- [CVE-2023-21778](https://cve.now/CVE-2023-21778.md): Microsoft Dynamics Unified Service Desk Remote Code Execution Vulnerability (CVSS 8.0, Microsoft Dynamics 365 Unified Service Desk)
- [CVE-2023-23381](https://cve.now/CVE-2023-23381.md): Visual Studio Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Visual Studio 2013 Update · Microsoft Visual S… +1)
- [CVE-2023-21823](https://cve.now/CVE-2023-21823.md): Windows Graphics Component Remote Code Execution Vulnerability (CVSS 7.8, KEV, Microsoft Office for Android · Microsoft Office for iOS +2)
- [CVE-2023-21815](https://cve.now/CVE-2023-21815.md): Visual Studio Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Visual Studio 2013 Update · Microsoft Visual S… +1)
- [CVE-2023-21808](https://cve.now/CVE-2023-21808.md): .NET and Visual Studio Remote Code Execution Vulnerability (CVSS 7.8, Microsoft .NET · Microsoft Visual Studio 2013 Update +7)
- [CVE-2023-21553](https://cve.now/CVE-2023-21553.md): Azure DevOps Server Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Azure DevOps Server)
- [CVE-2023-21567](https://cve.now/CVE-2023-21567.md): Visual Studio Denial of Service Vulnerability (CVSS 5.6, Microsoft Visual Studio)
- [CVE-2023-21566](https://cve.now/CVE-2023-21566.md): Visual Studio Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Visual Studio)
- [CVE-2023-25577](https://cve.now/CVE-2023-25577.md): Werkzeug may allow high resource usage when parsing multipart form data with many fields (CVSS 7.5, pallets werkzeug · werkzeug)
- [CVE-2023-23934](https://cve.now/CVE-2023-23934.md): Wrkzeug's incorrect parsing of nameless cookies leads to \_\_Host- cookies bypass (CVSS 2.6, pallets werkzeug · werkzeug)
- [CVE-2022-27677](https://cve.now/CVE-2022-27677.md): Failure to validate privileges during installation of AMD Ryzen™ Master may allow an attacker with low privileges to modify files potential (CVSS 7.8, AMD Ryzen™ Master)
- [CVE-2023-23946](https://cve.now/CVE-2023-23946.md): Git's \`git apply\` overwriting paths outside the working tree (CVSS 6.2, git)
- [CVE-2023-22490](https://cve.now/CVE-2023-22490.md): Git vulnerable to local clone-based data exfiltration with non-local transports (CVSS 5.5, git)
- [CVE-2022-27672](https://cve.now/CVE-2022-27672.md): When SMT is enabled, certain AMD processors may speculatively execute instructions using a target from the sibling thread after an SMT mode (no CVSS, 1st Gen AMD EPYC™ Processors · 2nd Gen AMD EPYC™ Proces… +10)
- [CVE-2023-23390](https://cve.now/CVE-2023-23390.md): 3D Builder Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 3D Builder)
- [CVE-2023-23377](https://cve.now/CVE-2023-23377.md): 3D Builder Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 3D Builder)
- [CVE-2023-23376](https://cve.now/CVE-2023-23376.md): Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVSS 7.8, KEV, Microsoft Windows)
- [CVE-2023-21564](https://cve.now/CVE-2023-21564.md): Azure DevOps Server Cross-Site Scripting Vulnerability (CVSS 7.1, Microsoft Azure DevOps Server)
- [CVE-2023-21722](https://cve.now/CVE-2023-21722.md): .NET Framework Denial of Service Vulnerability (CVSS 5.0, Microsoft .NET Framework 2.0 Service Pack · Microsoft .N… +1)
- [CVE-2023-21717](https://cve.now/CVE-2023-21717.md): Microsoft SharePoint Server Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft SharePoint Enterprise Server 2013 Service Pack… +2)
- [CVE-2023-21716](https://cve.now/CVE-2023-21716.md): Microsoft Word Remote Code Execution Vulnerability (CVSS 9.8, Microsoft 365 Apps for Enterprise · Microsoft Office +6)
- [CVE-2023-21715](https://cve.now/CVE-2023-21715.md): Microsoft Publisher Security Feature Bypass Vulnerability (CVSS 7.3, KEV, Microsoft 365 Apps for Enterprise)
- [CVE-2023-21714](https://cve.now/CVE-2023-21714.md): Microsoft Office Information Disclosure Vulnerability (CVSS 5.5, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC)
- [CVE-2023-21713](https://cve.now/CVE-2023-21713.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SQL Server 2012 for x64-based Systems Service… +3)
- [CVE-2023-21710](https://cve.now/CVE-2023-21710.md): Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 7.2, Microsoft Exchange Server 2016 Cumulative Update · Microsof…)
- [CVE-2023-21703](https://cve.now/CVE-2023-21703.md): Azure Data Box Gateway Remote Code Execution Vulnerability (CVSS 6.5, Microsoft Azure Data Box Gateway · Microsoft Azure Stack Ed…)
- [CVE-2023-21702](https://cve.now/CVE-2023-21702.md): Windows iSCSI Service Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2023-21701](https://cve.now/CVE-2023-21701.md): Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2023-21700](https://cve.now/CVE-2023-21700.md): Windows iSCSI Discovery Service Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2023-21699](https://cve.now/CVE-2023-21699.md): Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability (CVSS 5.3, Microsoft Windows)
- [CVE-2023-21697](https://cve.now/CVE-2023-21697.md): Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability (CVSS 6.2, Microsoft Windows)
- [CVE-2023-21695](https://cve.now/CVE-2023-21695.md): Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2023-21694](https://cve.now/CVE-2023-21694.md): Windows Fax Service Remote Code Execution Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2023-21693](https://cve.now/CVE-2023-21693.md): Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability (CVSS 5.7, Microsoft Windows)
- [CVE-2023-21692](https://cve.now/CVE-2023-21692.md): Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2023-21691](https://cve.now/CVE-2023-21691.md): Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2023-21690](https://cve.now/CVE-2023-21690.md): Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2023-21689](https://cve.now/CVE-2023-21689.md): Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2023-21688](https://cve.now/CVE-2023-21688.md): NT OS Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-21687](https://cve.now/CVE-2023-21687.md): HTTP.sys Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2023-21686](https://cve.now/CVE-2023-21686.md): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2023-21685](https://cve.now/CVE-2023-21685.md): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2023-21822](https://cve.now/CVE-2023-21822.md): Windows Graphics Component Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-21820](https://cve.now/CVE-2023-21820.md): Windows Distributed File System (DFS) Remote Code Execution Vulnerability (CVSS 7.4, Microsoft Windows)
- [CVE-2023-21819](https://cve.now/CVE-2023-21819.md): Windows Secure Channel Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2023-21818](https://cve.now/CVE-2023-21818.md): Windows Secure Channel Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2023-21817](https://cve.now/CVE-2023-21817.md): Windows Kerberos Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-21816](https://cve.now/CVE-2023-21816.md): Windows Active Directory Domain Services API Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2023-21813](https://cve.now/CVE-2023-21813.md): Windows Secure Channel Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2023-21812](https://cve.now/CVE-2023-21812.md): Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-21811](https://cve.now/CVE-2023-21811.md): Windows iSCSI Service Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2023-21809](https://cve.now/CVE-2023-21809.md): Microsoft Defender for Endpoint Security Feature Bypass Vulnerability (CVSS 7.8, Microsoft Defender Security Intelligence Updates)
- [CVE-2023-21805](https://cve.now/CVE-2023-21805.md): Windows MSHTML Platform Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-21804](https://cve.now/CVE-2023-21804.md): Windows Graphics Component Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-21803](https://cve.now/CVE-2023-21803.md): Windows iSCSI Discovery Service Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2023-21802](https://cve.now/CVE-2023-21802.md): Windows Media Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-21801](https://cve.now/CVE-2023-21801.md): Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-21800](https://cve.now/CVE-2023-21800.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows Server 2008 Service Pack · Microsoft… +1)
- [CVE-2023-21799](https://cve.now/CVE-2023-21799.md): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2023-21798](https://cve.now/CVE-2023-21798.md): Microsoft ODBC Driver Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2023-21797](https://cve.now/CVE-2023-21797.md): Microsoft ODBC Driver Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2023-21529](https://cve.now/CVE-2023-21529.md): Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 8.8, KEV, Microsoft Exchange Server 2013 Cumulative Update · Micro… +1)
- [CVE-2023-23382](https://cve.now/CVE-2023-23382.md): Azure Machine Learning Compute Instance Information Disclosure Vulnerability (CVSS 6.5, Microsoft Azure Machine Learning)
- [CVE-2023-23379](https://cve.now/CVE-2023-23379.md): Microsoft Defender for IoT Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Defender for IoT)
- [CVE-2023-23378](https://cve.now/CVE-2023-23378.md): Print 3D Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Print)
- [CVE-2023-23374](https://cve.now/CVE-2023-23374.md): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVSS 8.3, Microsoft Edge for Android)
- [CVE-2023-21573](https://cve.now/CVE-2023-21573.md): Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability (CVSS 5.4, Microsoft Dynamics 365 (on-premises))
- [CVE-2023-21572](https://cve.now/CVE-2023-21572.md): Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability (CVSS 6.5, Microsoft Dynamics 365 (on-premises))
- [CVE-2023-21571](https://cve.now/CVE-2023-21571.md): Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability (CVSS 5.4, Microsoft Dynamics 365 (on-premises))
- [CVE-2023-21570](https://cve.now/CVE-2023-21570.md): Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability (CVSS 5.4, Microsoft Dynamics 365 (on-premises))
- [CVE-2023-21568](https://cve.now/CVE-2023-21568.md): Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability (CVSS 7.3, Microsoft SQL Server Integration Services for Visual Studio)
- [CVE-2023-21721](https://cve.now/CVE-2023-21721.md): Microsoft OneNote Elevation of Privilege Vulnerability (CVSS 6.5, Microsoft OneNote for Android)
- [CVE-2023-21720](https://cve.now/CVE-2023-21720.md): Microsoft Edge (Chromium-based) Tampering Vulnerability (CVSS 5.3, Microsoft Edge)
- [CVE-2023-21718](https://cve.now/CVE-2023-21718.md): Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability (CVSS 7.8, Microsoft SQL Server 2008 R2 Service Pack · Microsoft SQ… +5)
- [CVE-2023-21707](https://cve.now/CVE-2023-21707.md): Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Exchange Server 2013 Cumulative Update · Micro… +1)
- [CVE-2023-21706](https://cve.now/CVE-2023-21706.md): Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Exchange Server 2013 Cumulative Update · Micro… +1)
- [CVE-2023-21705](https://cve.now/CVE-2023-21705.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SQL Server 2012 for x64-based Systems Service… +3)
- [CVE-2023-21704](https://cve.now/CVE-2023-21704.md): Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability (CVSS 7.8, Microsoft SQL Server 2014 Service Pack · Microsoft SQL S… +1)
- [CVE-2023-21807](https://cve.now/CVE-2023-21807.md): Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability (CVSS 6.5, Microsoft Dynamics 365 (on-premises))
- [CVE-2023-21806](https://cve.now/CVE-2023-21806.md): Power BI Report Server Spoofing Vulnerability (CVSS 8.2, Microsoft Power BI Report Server - January)
- [CVE-2023-21794](https://cve.now/CVE-2023-21794.md): Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVSS 4.3, Microsoft Edge)
- [CVE-2023-21777](https://cve.now/CVE-2023-21777.md): Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability (CVSS 8.7, Microsoft Azure App Service on Azure Stack Hub)
- [CVE-2023-21684](https://cve.now/CVE-2023-21684.md): Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2023-21528](https://cve.now/CVE-2023-21528.md): Microsoft SQL Server Remote Code Execution Vulnerability (CVSS 7.8, Microsoft SQL Server 2008 R2 Service Pack · Microsoft SQ… +5)
- [CVE-2023-25567](https://cve.now/CVE-2023-25567.md): GSS-NTLMSSP vulnerable to out-of-bounds read when decoding target information (CVSS 7.5, gssapi gss-ntlmssp)
- [CVE-2023-25566](https://cve.now/CVE-2023-25566.md): GSS-NTLMSSP vulnerable to memory leak when parsing usernames (CVSS 7.5, gssapi gss-ntlmssp)
- [CVE-2023-25565](https://cve.now/CVE-2023-25565.md): GSS-NTLMSSP vulnerable to incorrect free when decoding target information (CVSS 7.5, gssapi gss-ntlmssp)
- [CVE-2023-25564](https://cve.now/CVE-2023-25564.md): GSS-NTLMSSP vulnerable to memory corruption when decoding UTF16 strings (CVSS 6.5, gssapi gss-ntlmssp)
- [CVE-2023-25563](https://cve.now/CVE-2023-25563.md): GSS-NTLMSSP vulnerable to multiple out-of-bounds reads when decoding NTLM fields (CVSS 5.9, gssapi gss-ntlmssp)
- [CVE-2023-22939](https://cve.now/CVE-2023-22939.md): SPL Command Safeguards Bypass via the ‘map’ SPL Command in Splunk Enterprise (CVSS 8.1, Splunk Enterprise · Splunk Cloud Platform)
- [CVE-2023-22938](https://cve.now/CVE-2023-22938.md): Permissions Validation Failure in the ‘sendemail’ REST API Endpoint in Splunk Enterprise (CVSS 4.3, Splunk Enterprise · Splunk Cloud Platform)
- [CVE-2023-22937](https://cve.now/CVE-2023-22937.md): Unnecessary File Extensions Allowed by Lookup Table Uploads in Splunk Enterprise (CVSS 4.3, Splunk Enterprise · Splunk Cloud Platform)
- [CVE-2023-22943](https://cve.now/CVE-2023-22943.md): Modular Input REST API Requests Connect via HTTP after Certificate Validation Failure in Splunk Add-on Builder and Splunk CloudConnect SDK (CVSS 4.8, Splunk Add-on Builder · Splunk CloudConnect SDK)
- [CVE-2023-22933](https://cve.now/CVE-2023-22933.md): Persistent Cross-Site Scripting through the ‘module’ Tag in a View in Splunk Enterprise (CVSS 8.0, Splunk Enterprise · Splunk Cloud Platform)
- [CVE-2023-22942](https://cve.now/CVE-2023-22942.md): Cross-Site Request Forgery in the ‘ssg/kvstore\_client’ REST Endpoint in Splunk Enterprise (CVSS 5.4, Splunk Enterprise)
- [CVE-2023-22932](https://cve.now/CVE-2023-22932.md): Persistent Cross-Site Scripting through a Base64-encoded Image in a View in Splunk Enterprise (CVSS 8.0, Splunk Enterprise · Splunk Cloud Platform)
- [CVE-2023-22936](https://cve.now/CVE-2023-22936.md): Authenticated Blind Server Side Request Forgery via the ‘search\_listener’ Search Parameter in Splunk Enterprise (CVSS 6.3, Splunk Enterprise · Splunk Cloud Platform)
- [CVE-2023-22941](https://cve.now/CVE-2023-22941.md): Improperly Formatted ‘INGEST\_EVAL’ Parameter Crashes Splunk Daemon (CVSS 6.5, Splunk Enterprise · Splunk Cloud Platform)
- [CVE-2023-22931](https://cve.now/CVE-2023-22931.md): ‘createrss’ External Search Command Overwrites Existing RSS Feeds in Splunk Enterprise (CVSS 4.3, Splunk Enterprise · Splunk Cloud Platform)
- [CVE-2023-22935](https://cve.now/CVE-2023-22935.md): SPL Command Safeguards Bypass via the ‘display.page.search.patterns.sensitivity’ Search Parameter in Splunk Enterprise (CVSS 8.1, Splunk Enterprise · Splunk Cloud Platform)
- [CVE-2023-22934](https://cve.now/CVE-2023-22934.md): SPL Command Safeguards Bypass via the ‘pivot’ SPL Command in Splunk Enterprise (CVSS 7.3, Splunk Enterprise · Splunk Cloud Platform)
- [CVE-2023-22940](https://cve.now/CVE-2023-22940.md): SPL Command Safeguards Bypass via the ‘collect’ SPL Command Aliases in Splunk Enterprise (CVSS 6.3, Splunk Enterprise · Splunk Cloud Platform)
- [CVE-2023-25571](https://cve.now/CVE-2023-25571.md): Backstage has XSS Vulnerability in Software Catalog (CVSS 6.8, backstage · @backstage/core-components +2)
- [CVE-2023-0830](https://cve.now/CVE-2023-0830.md): EasyNAS backup.pl system os command injection (CVSS 5.3, EasyNAS)
- [CVE-2022-22564](https://cve.now/CVE-2022-22564.md): Dell EMC Unity versions before 5.2.0.0.5.173 , use(es) broken cryptographic algorithm. (CVSS 5.9, Dell Unity)
- [CVE-2023-25576](https://cve.now/CVE-2023-25576.md): @fastify/multipart vulnerable to DoS due to unlimited number of parts (CVSS 7.5, fastify-multipart · @fastify/multipart)
- [CVE-2022-4286](https://cve.now/CVE-2022-4286.md): Reflected Cross-Site Scripting Vulnerabilities in Automation Runtime (CVSS 6.1, B&R Industrial Automation B&R Automation Runtime)
- [CVE-2023-25149](https://cve.now/CVE-2023-25149.md): TimescaleDB has incorrect access control (CVSS 8.8, timescaledb)
- [CVE-2023-25141](https://cve.now/CVE-2023-25141.md): JNDI injection into Apache sling-org-apache-sling-jcr-base (CVSS 7.5, Apache Software Foundation Apache Sling JCR Base · org.apac…)
- [CVE-2023-24382](https://cve.now/CVE-2023-24382.md): WordPress Material Design Icons for Page Builders Plugin \<= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Photon WP Material Design Icons for Page Builders)
- [CVE-2022-46862](https://cve.now/CVE-2022-46862.md): WordPress Quiz And Survey Master Plugin \<= 8.0.7 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, ExpressTech Quiz And Survey Master – Best Quiz, Exam and Su…)
- [CVE-2023-24377](https://cve.now/CVE-2023-24377.md): WordPress Ecwid Shopping Cart Plugin \<= 6.11.3 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Ecwid Ecommerce Shopping Cart)
- [CVE-2023-25065](https://cve.now/CVE-2023-25065.md): WordPress WP Tabs Plugin \<= 2.1.14 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, ShapedPlugin WP Tabs – Responsive Tabs Plugin for WordPress)
- [CVE-2023-25140](https://cve.now/CVE-2023-25140.md): A vulnerability has been identified in Parasolid V34.0 (All versions \< V34.0.254), Parasolid V34.1 (All versions \< V34.1.242), Parasolid V35 (CVSS 7.8, Siemens Parasolid · Siemens Solid Edge SE2022)
- [CVE-2023-24996](https://cve.now/CVE-2023-24996.md): A vulnerability has been identified in Tecnomatix Plant Simulation (All versions \< V2201.0006). (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-24995](https://cve.now/CVE-2023-24995.md): A vulnerability has been identified in Tecnomatix Plant Simulation (All versions \< V2201.0006). (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-24994](https://cve.now/CVE-2023-24994.md): A vulnerability has been identified in Tecnomatix Plant Simulation (All versions \< V2201.0006). (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-24993](https://cve.now/CVE-2023-24993.md): A vulnerability has been identified in Tecnomatix Plant Simulation (All versions \< V2201.0006). (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-24992](https://cve.now/CVE-2023-24992.md): A vulnerability has been identified in Tecnomatix Plant Simulation (All versions \< V2201.0006). (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-24991](https://cve.now/CVE-2023-24991.md): A vulnerability has been identified in Tecnomatix Plant Simulation (All versions \< V2201.0006). (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-24990](https://cve.now/CVE-2023-24990.md): A vulnerability has been identified in Tecnomatix Plant Simulation (All versions \< V2201.0006). (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-24989](https://cve.now/CVE-2023-24989.md): A vulnerability has been identified in Tecnomatix Plant Simulation (All versions \< V2201.0006). (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-24988](https://cve.now/CVE-2023-24988.md): A vulnerability has been identified in Tecnomatix Plant Simulation (All versions \< V2201.0006). (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-24987](https://cve.now/CVE-2023-24987.md): A vulnerability has been identified in Tecnomatix Plant Simulation (All versions \< V2201.0006). (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-24986](https://cve.now/CVE-2023-24986.md): A vulnerability has been identified in Tecnomatix Plant Simulation (All versions \< V2201.0006). (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-24985](https://cve.now/CVE-2023-24985.md): A vulnerability has been identified in Tecnomatix Plant Simulation (All versions \< V2201.0006). (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-24984](https://cve.now/CVE-2023-24984.md): A vulnerability has been identified in Tecnomatix Plant Simulation (All versions \< V2201.0006). (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-24983](https://cve.now/CVE-2023-24983.md): A vulnerability has been identified in Tecnomatix Plant Simulation (All versions \< V2201.0006). (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-24982](https://cve.now/CVE-2023-24982.md): A vulnerability has been identified in Tecnomatix Plant Simulation (All versions \< V2201.0006). (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-24981](https://cve.now/CVE-2023-24981.md): A vulnerability has been identified in Tecnomatix Plant Simulation (All versions \< V2201.0006). (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-24980](https://cve.now/CVE-2023-24980.md): A vulnerability has been identified in Tecnomatix Plant Simulation (All versions \< V2201.0006). (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-24979](https://cve.now/CVE-2023-24979.md): A vulnerability has been identified in Tecnomatix Plant Simulation (All versions \< V2201.0006). (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-24978](https://cve.now/CVE-2023-24978.md): A vulnerability has been identified in Tecnomatix Plant Simulation (All versions \< V2201.0006). (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-24581](https://cve.now/CVE-2023-24581.md): A vulnerability has been identified in Solid Edge SE2022 (All versions \< V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (A (CVSS 7.8, Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023)
- [CVE-2023-24566](https://cve.now/CVE-2023-24566.md): A vulnerability has been identified in Solid Edge SE2022 (All versions \< V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (A (CVSS 3.3, Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023)
- [CVE-2023-24565](https://cve.now/CVE-2023-24565.md): A vulnerability has been identified in Solid Edge SE2022 (All versions \< V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (A (CVSS 3.3, Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023)
- [CVE-2023-24564](https://cve.now/CVE-2023-24564.md): A vulnerability has been identified in Solid Edge SE2022 (All versions \< V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (A (CVSS 7.8, Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023)
- [CVE-2023-24563](https://cve.now/CVE-2023-24563.md): A vulnerability has been identified in Solid Edge SE2022 (All versions \< V222.0MP12), Solid Edge SE2023 (All versions \< V223.0Update2). (CVSS 7.8, Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023)
- [CVE-2023-24562](https://cve.now/CVE-2023-24562.md): A vulnerability has been identified in Solid Edge SE2022 (All versions \< V222.0MP12), Solid Edge SE2023 (All versions \< V223.0Update2). (CVSS 7.8, Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023)
- [CVE-2023-24561](https://cve.now/CVE-2023-24561.md): A vulnerability has been identified in Solid Edge SE2022 (All versions \< V222.0MP12), Solid Edge SE2023 (All versions \< V223.0Update2). (CVSS 7.8, Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023)
- [CVE-2023-24560](https://cve.now/CVE-2023-24560.md): A vulnerability has been identified in Solid Edge SE2022 (All versions \< V222.0MP12), Solid Edge SE2023 (All versions \< V223.0Update2). (CVSS 7.8, Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023)
- [CVE-2023-24559](https://cve.now/CVE-2023-24559.md): A vulnerability has been identified in Solid Edge SE2022 (All versions \< V222.0MP12), Solid Edge SE2023 (All versions \< V223.0Update2). (CVSS 7.8, Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023)
- [CVE-2023-24558](https://cve.now/CVE-2023-24558.md): A vulnerability has been identified in Solid Edge SE2022 (All versions \< V222.0MP12), Solid Edge SE2023 (All versions \< V223.0Update2). (CVSS 7.8, Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023)
- [CVE-2023-24557](https://cve.now/CVE-2023-24557.md): A vulnerability has been identified in Solid Edge SE2022 (All versions \< V222.0MP12), Solid Edge SE2023 (All versions \< V223.0Update2). (CVSS 7.8, Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023)
- [CVE-2023-24556](https://cve.now/CVE-2023-24556.md): A vulnerability has been identified in Solid Edge SE2022 (All versions \< V222.0MP12), Solid Edge SE2023 (All versions \< V223.0Update2). (CVSS 7.8, Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023)
- [CVE-2023-24555](https://cve.now/CVE-2023-24555.md): A vulnerability has been identified in Solid Edge SE2022 (All versions \< V222.0MP12), Solid Edge SE2023 (All versions \< V223.0Update2). (CVSS 7.8, Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023)
- [CVE-2023-24554](https://cve.now/CVE-2023-24554.md): A vulnerability has been identified in Solid Edge SE2022 (All versions \< V222.0MP12), Solid Edge SE2023 (All versions \< V223.0Update2). (CVSS 7.8, Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023)
- [CVE-2023-24553](https://cve.now/CVE-2023-24553.md): A vulnerability has been identified in Solid Edge SE2022 (All versions \< V222.0MP12), Solid Edge SE2023 (All versions \< V223.0Update2). (CVSS 7.8, Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023)
- [CVE-2023-24552](https://cve.now/CVE-2023-24552.md): A vulnerability has been identified in Solid Edge SE2022 (All versions \< V222.0MP12), Solid Edge SE2023 (All versions \< V223.0Update2). (CVSS 7.8, Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023)
- [CVE-2023-24551](https://cve.now/CVE-2023-24551.md): A vulnerability has been identified in Solid Edge SE2022 (All versions \< V222.0MP12), Solid Edge SE2023 (All versions \< V223.0Update2). (CVSS 7.8, Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023)
- [CVE-2023-24550](https://cve.now/CVE-2023-24550.md): A vulnerability has been identified in Solid Edge SE2022 (All versions \< V222.0MP12), Solid Edge SE2023 (All versions \< V223.0Update2). (CVSS 7.8, Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023)
- [CVE-2023-24549](https://cve.now/CVE-2023-24549.md): A vulnerability has been identified in Solid Edge SE2022 (All versions \< V222.0MP12), Solid Edge SE2023 (All versions \< V223.0Update2). (CVSS 7.8, Siemens Solid Edge SE2022 · Siemens Solid Edge SE2023)
- [CVE-2023-24482](https://cve.now/CVE-2023-24482.md): A vulnerability has been identified in COMOS V10.2 (All versions), COMOS V10.3.3.1 (All versions \< V10.3.3.1.45), COMOS V10.3.3.2 (All versi (CVSS 10.0, Siemens COMOS)
- [CVE-2023-23835](https://cve.now/CVE-2023-23835.md): A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions \< V7.23.34), Mendix Applications using Mendix 8 (All (CVSS 5.9, Siemens Mendix Applications using Mendix)
- [CVE-2022-47977](https://cve.now/CVE-2022-47977.md): A vulnerability has been identified in JT Open (All versions \< V11.2.3.0), JT Utilities (All versions \< V13.2.3.0). (CVSS 7.8, Siemens JT Open · Siemens JT Utilities)
- [CVE-2022-47936](https://cve.now/CVE-2022-47936.md): A vulnerability has been identified in JT Open (All versions \< V11.2.3.0), JT Utilities (All versions \< V13.2.3.0), Parasolid V34.0 (All ver (CVSS 7.8, Siemens JT Open · Siemens JT Utilities +1)
- [CVE-2022-35868](https://cve.now/CVE-2022-35868.md): A vulnerability has been identified in TIA Multiuser Server V14 (All versions), TIA Multiuser Server V15 (All versions \< V15.1 Update 8), TI (CVSS 6.7, Siemens TIA Multiuser Server · Siemens TIA Project-Server)
- [CVE-2022-31808](https://cve.now/CVE-2022-31808.md): A vulnerability has been identified in SiPass integrated AC5102 (ACC-G2) (All versions \< V2.85.44), SiPass integrated ACC-AP (All versions \< (CVSS 7.8, Siemens SiPass integrated AC5102 · Siemens SiPass integrate…)
- [CVE-2023-25066](https://cve.now/CVE-2023-25066.md): WordPress FV Flowplayer Video Player Plugin \<= 7.5.30.7212 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, FolioVision FV Flowplayer Video Player)
- [CVE-2022-43469](https://cve.now/CVE-2022-43469.md): WordPress Corona Virus (COVID-19) Banner & Live Data Plugin \<= 1.7.0.6 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Orchestrated Corona Virus (COVID-19) Banner & Live Data)
- [CVE-2023-25614](https://cve.now/CVE-2023-25614.md): SAP NetWeaver AS ABAP (BSP Framework) application - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allow an unaut (CVSS 6.1, SAP NetWeaver AS ABAP)
- [CVE-2023-24530](https://cve.now/CVE-2023-24530.md): SAP BusinessObjects Business Intelligence Platform (CMC) - versions 420, 430, allows an authenticated admin user to upload malicious code th (CVSS 8.4, SAP BusinessObjects Business Intelligence Platform)
- [CVE-2023-24529](https://cve.now/CVE-2023-24529.md): Due to lack of proper input validation, BSP application (CRM\_BSP\_FRAME) - versions 700, 701, 702, 731, 740, 750, 751, 752, 75C, 75D, 75E, 75 (CVSS 6.1, SAP NetWeaver AS ABAP)
- [CVE-2023-24528](https://cve.now/CVE-2023-24528.md): SAP Fiori apps for Travel Management in SAP ERP (My Travel Requests) - version 600, allows an authenticated attacker to exploit a certain m (CVSS 6.5, Fiori apps 1.0 for travel management in SAP ERP)
- [CVE-2023-24525](https://cve.now/CVE-2023-24525.md): SAP CRM WebClient UI - versions WEBCUIF 748, 800, 801, S4FND 102, 103, does not sufficiently encode user-controlled inputs, resulting in Cro (CVSS 4.3, SAP CRM)
- [CVE-2023-24524](https://cve.now/CVE-2023-24524.md): SAP S/4 HANA Map Treasury Correspondence Format Data does not perform necessary authorization check for an authenticated user, resulting in (CVSS 6.5, SAP S/4 HANA)
- [CVE-2023-24523](https://cve.now/CVE-2023-24523.md): An attacker authenticated as a non-admin user with local access to a server port assigned to the SAP Host Agent (Start Service) - versions 7 (CVSS 8.8, SAP Host Agent Service)
- [CVE-2023-24522](https://cve.now/CVE-2023-24522.md): Due to insufficient input sanitization, SAP NetWeaver AS ABAP (Business Server Pages) - versions 700, 701, 702, 731, 740, allows an unauthen (CVSS 6.1, SAP NetWeaver AS ABAP)
- [CVE-2023-24521](https://cve.now/CVE-2023-24521.md): Due to insufficient input sanitization, SAP NetWeaver AS ABAP (BSP Framework) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 7 (CVSS 6.1, SAP NetWeaver AS ABAP)
- [CVE-2023-23860](https://cve.now/CVE-2023-23860.md): SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, allows an unauthenticated atta (CVSS 6.1, SAP NetWeaver AS for ABAP and ABAP Platform)
- [CVE-2023-23859](https://cve.now/CVE-2023-23859.md): SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 789, 790, allows an unauthenticated atta (CVSS 6.1, SAP NetWeaver AS for ABAP and ABAP Platform)
- [CVE-2023-23858](https://cve.now/CVE-2023-23858.md): Due to insufficient input validation, SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 78 (CVSS 6.1, SAP\_SE SAP NetWeaver AS for ABAP and ABAP Platform)
- [CVE-2023-23856](https://cve.now/CVE-2023-23856.md): In SAP BusinessObjects Business Intelligence (Web Intelligence user interface) - version 430, some calls return json with wrong content type (CVSS 4.3, SAP\_SE SAP BusinessObjects Business Intelligence)
- [CVE-2023-23855](https://cve.now/CVE-2023-23855.md): SAP Solution Manager - version 720, allows an authenticated attacker to redirect users to a malicious site due to insufficient URL validatio (CVSS 6.5, SAP Solution Manager)
- [CVE-2023-23854](https://cve.now/CVE-2023-23854.md): SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, does not perform necessary au (CVSS 3.8, SAP NetWeaver AS ABAP and ABAP Platform)
- [CVE-2023-23853](https://cve.now/CVE-2023-23853.md): An unauthenticated attacker in AP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 702, 731, 740, 750, 751, 752, 753, (CVSS 6.1, SAP NetWeaver Application Server for ABAP and ABAP Platform)
- [CVE-2023-23852](https://cve.now/CVE-2023-23852.md): SAP Solution Manager (System Monitoring) - version 720, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripti (CVSS 6.1, SAP Solution Manager)
- [CVE-2023-23851](https://cve.now/CVE-2023-23851.md): SAP Business Planning and Consolidation - versions 200, 300, allows an attacker with business authorization to upload any files (including w (CVSS 5.4, SAP Business Planning and Consolidation)
- [CVE-2023-0025](https://cve.now/CVE-2023-0025.md): SAP Solution Manager (BSP Application) - version 720, allows an authenticated attacker to craft a malicious link, which when clicked by an u (CVSS 6.5, SAP Solution Manager)
- [CVE-2023-0024](https://cve.now/CVE-2023-0024.md): SAP Solution Manager (BSP Application) - version 720, allows an authenticated attacker to craft a malicious link, which when clicked by an u (CVSS 6.5, SAP Solution Manager)
- [CVE-2023-0020](https://cve.now/CVE-2023-0020.md): SAP BusinessObjects Business Intelligence platform - versions 420, 430, allows an authenticated attacker to access sensitive information whi (CVSS 8.5, SAP\_SE SAP BusinessObjects Business Intelligence Platform)
- [CVE-2023-0019](https://cve.now/CVE-2023-0019.md): In SAP GRC (Process Control) - versions GRCFND\_A V1200, GRCFND\_A V8100, GRCPINW V1100\_700, GRCPINW V1100\_731, GRCPINW V1200\_750, remote-enab (CVSS 6.5, SAP\_SE SAP GRC)
- [CVE-2023-0814](https://cve.now/CVE-2023-0814.md): Profile Builder – User Profile & User Registration Forms \<= 3.9.0 - Sensitive Information Disclosure via Shortcode (CVSS 6.5, cozmoslabs User Profile Builder – Beautiful User Registrati…)
- [CVE-2021-46023](https://cve.now/CVE-2021-46023.md): An Untrusted Pointer Dereference was discovered in function mrb\_vm\_exec in mruby before 3.1.0-rc. (CVSS 7.5)
- [CVE-2022-29557](https://cve.now/CVE-2022-29557.md): LexisNexis Firco Compliance Link 3.7 allows CSRF. (CVSS 8.8)
- [CVE-2022-41564](https://cve.now/CVE-2022-41564.md): TIBCO Operational Intelligence Hawk Redtail Credential Exposure Vulnerability (CVSS 6.8, TIBCO Software TIBCO Hawk · TIBCO Software TIBCO Operationa…)
- [CVE-2023-0655](https://cve.now/CVE-2023-0655.md): SonicWall Email Security contains a vulnerability that could permit a remote unauthenticated attacker access to an error page that includes (CVSS 5.3, SonicWall Email Security)
- [CVE-2023-0827](https://cve.now/CVE-2023-0827.md): Cross-site Scripting (XSS) - Stored in pimcore/pimcore (CVSS 6.3, pimcore/pimcore)
- [CVE-2023-22370](https://cve.now/CVE-2023-22370.md): Stored cross-site scripting vulnerability in Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions allows a network-adjacent aut (no CVSS, PLANEX COMMUNICATIONS Wired/Wireless LAN Pan/Tilt Network C…)
- [CVE-2023-22375](https://cve.now/CVE-2023-22375.md): Cross-site request forgery (CSRF) vulnerability in Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions allows a remote unauthe (CVSS 8.8, PLANEX COMMUNICATIONS Wired/Wireless LAN Pan/Tilt Network C…)
- [CVE-2023-22376](https://cve.now/CVE-2023-22376.md): Reflected cross-site scripting vulnerability in Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G all versions allows a remote unauthenti (CVSS 6.1, PLANEX COMMUNICATIONS Wired/Wireless LAN Pan/Tilt Network C…)
- [CVE-2023-22629](https://cve.now/CVE-2023-22629.md): An issue was discovered in TitanFTP through 1.94.1205. (CVSS 8.8)
- [CVE-2023-24159](https://cve.now/CVE-2023-24159.md): TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the admpass parameter in the setPasswordCfg fun (CVSS 9.8)
- [CVE-2023-24160](https://cve.now/CVE-2023-24160.md): TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the admuser parameter in the setPasswordCfg fun (CVSS 9.8)
- [CVE-2023-24161](https://cve.now/CVE-2023-24161.md): TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the webWlanIdx parameter in the setWebWlanIdx f (CVSS 9.8)
- [CVE-2023-24187](https://cve.now/CVE-2023-24187.md): An XML External Entity (XXE) vulnerability in ureport v2.2.9 allows attackers to execute arbitrary code via uploading a crafted XML file to (CVSS 7.8, com.bstek.ureport:ureport2-core)
- [CVE-2023-25725](https://cve.now/CVE-2023-25725.md): HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in some situations, aka "request smu (CVSS 9.1)
- [CVE-2023-25758](https://cve.now/CVE-2023-25758.md): Onekey Touch devices through 4.0.0 and Onekey Mini devices through 2.10.0 allow man-in-the-middle attackers to obtain the seed phase. (CVSS 4.2)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-02-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.