# CVEs published 2023-02-19

9 CVEs were published on February 19, 2023: 0 critical, 2 high. Days are UTC.

- [CVE-2016-15024](https://cve.now/CVE-2016-15024.md): doomsider shadow denial of service (CVSS 2.5, doomsider shadow)
- [CVE-2014-125087](https://cve.now/CVE-2014-125087.md): java-xmlbuilder xml external entity reference (CVSS 5.5, java-xmlbuilder · com.jamesmurty.utils:java-xmlbuilder)
- [CVE-2012-10007](https://cve.now/CVE-2012-10007.md): madgicweb BuddyStream Plugin ShareBox.php cross site scripting (CVSS 3.5, madgicweb BuddyStream Plugin)
- [CVE-2023-0918](https://cve.now/CVE-2023-0918.md): codeprojects Pharmacy Management System Avatar Image add.php unrestricted upload (CVSS 6.3, codeprojects Pharmacy Management System)
- [CVE-2023-0917](https://cve.now/CVE-2023-0917.md): SourceCodester Simple Customer Relationship Management System login.php sql injection (CVSS 7.3, SourceCodester Simple Customer Relationship Management Syst…)
- [CVE-2023-0916](https://cve.now/CVE-2023-0916.md): SourceCodester Auto Dealer Management System Users.php access control (CVSS 6.3, SourceCodester Auto Dealer Management System)
- [CVE-2023-0915](https://cve.now/CVE-2023-0915.md): SourceCodester Auto Dealer Management System sql injection (CVSS 6.3, SourceCodester Auto Dealer Management System)
- [CVE-2023-0914](https://cve.now/CVE-2023-0914.md): Improper Authorization in pixelfed/pixelfed (CVSS 4.3, pixelfed/pixelfed)
- [CVE-2023-0919](https://cve.now/CVE-2023-0919.md): Missing Authentication for Critical Function in kareadita/kavita (CVSS 8.1, kareadita/kavita)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-02-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.