# CVEs published 2023-02-18

14 CVEs were published on February 18, 2023: 0 critical, 2 high. Days are UTC.

- [CVE-2023-0913](https://cve.now/CVE-2023-0913.md): SourceCodester Auto Dealer Management System sql injection (CVSS 4.7, SourceCodester Auto Dealer Management System)
- [CVE-2023-0912](https://cve.now/CVE-2023-0912.md): SourceCodester Auto Dealer Management System sql injection (CVSS 4.7, SourceCodester Auto Dealer Management System)
- [CVE-2023-0910](https://cve.now/CVE-2023-0910.md): SourceCodester Online Pizza Ordering System GET Parameter view\_prod.php sql injection (CVSS 6.3, SourceCodester Online Pizza Ordering System)
- [CVE-2023-0909](https://cve.now/CVE-2023-0909.md): cxasm notepad-- Directory Comparison denial of service (CVSS 3.3, cxasm notepad--)
- [CVE-2023-0908](https://cve.now/CVE-2023-0908.md): Xoslab Easy File Locker xlkfs.sys MessageNotifyCallback denial of service (CVSS 5.5, Xoslab Easy File Locker)
- [CVE-2023-0907](https://cve.now/CVE-2023-0907.md): Filseclab Twister Antivirus IoControlCode ffsmon.sys 0x220017 denial of service (CVSS 4.4, Filseclab Twister Antivirus)
- [CVE-2023-0906](https://cve.now/CVE-2023-0906.md): SourceCodester Online Pizza Ordering System POST Parameter ajax.php delete\_category missing authentication (CVSS 7.3, SourceCodester Online Pizza Ordering System)
- [CVE-2023-0905](https://cve.now/CVE-2023-0905.md): SourceCodester Employee Task Management System changePasswordForEmployee.php improper authentication (CVSS 7.3, SourceCodester Employee Task Management System)
- [CVE-2023-0904](https://cve.now/CVE-2023-0904.md): SourceCodester Employee Task Management System task-details.php sql injection (CVSS 6.3, SourceCodester Employee Task Management System)
- [CVE-2023-0903](https://cve.now/CVE-2023-0903.md): SourceCodester Employee Task Management System edit-task.php sql injection (CVSS 5.0, SourceCodester Employee Task Management System)
- [CVE-2023-0902](https://cve.now/CVE-2023-0902.md): SourceCodester Simple Food Ordering System process\_order.php cross site scripting (CVSS 3.5, SourceCodester Simple Food Ordering System)
- [CVE-2022-37935](https://cve.now/CVE-2022-37935.md): HPE OneView for VMware vCenter, in certain circumstances, may disclose the “HPE OneView” Username and Password. (CVSS 5.5, Hewlett Packard Enterprise (HPE) HPE OneView for VMware vCe…)
- [CVE-2022-40348](https://cve.now/CVE-2022-40348.md): Cross Site Scripting (XSS) vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'name' and 'email' parameters, all (CVSS 5.4)
- [CVE-2023-0901](https://cve.now/CVE-2023-0901.md): Exposure of Sensitive Information to an Unauthorized Actor in pixelfed/pixelfed (CVSS 5.3, pixelfed/pixelfed)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-02-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.