CVEs published February 25, 2023
18 CVEs were published on February 25, 2023: 3 critical, 9 high.
- Published
- 18
- Critical
- 3
- High
- 9
- Medium
- 6
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 12
Most affected products
- zoneminder
- 8
- deno
- 1
- froxlor/froxlor
- 1
- gogs/gogs · gogs.io/gogs
- 1
- lite-web-server
- 1
- salesagility/suitecrm
- 1
- SourceCodester Clinics Patient Management System
- 1
Critical 3
High 9
- CVE-2023-26104All versions of the package lite-web-server are vulnerable to Denial of Service (DoS) when an attacker sends an HTTP request and includes colite-web-server
- CVE-2023-26039ZoneMinder vulnerable to OS Command injection in daemonControl() APIzoneminder
- CVE-2023-26037ZoneMinder contains SQL Injection via report_event_auditzoneminder
- CVE-2023-26036ZoneMinder contains Local File Inclusion vulnerabilityzoneminder
- CVE-2023-26035ZoneMinder vulnerable to Missing Authorizationzoneminder
- CVE-2023-26032ZoneMinder contains SQL injection via malicious Jason Web Tokenzoneminder
- CVE-2023-25825ZoneMinder contains Cross-site Scripting via log viewingzoneminder
- CVE-2022-48362Zoho ManageEngine Desktop Central and Desktop Central MSP before 10.1.2137.2 allow directory traversal via computerName to AgentLogUploadSer
- CVE-2023-26544In the Linux kernel 6.0.8, there is a use-after-free in run_unpack in fs/ntfs3/run.c, related to a difference between NTFS sector size and m
Medium, low and unrated 6
- CVE-2023-1035SourceCodester Clinics Patient Management System update_user.php sql injectionSourceCodester Clinics Patient Management System
- CVE-2023-26103Versions of the package deno before 1.31.0 are vulnerable to Regular Expression Denial of Service (ReDoS) due to the upgradeWebSocket functideno
- CVE-2023-26038ZoneMinder contains Local File Inclusion vulnerability via `web/ajax/modal.php`zoneminder
- CVE-2023-1033Cross-Site Request Forgery (CSRF) in froxlor/froxlorfroxlor/froxlor
- CVE-2023-1034Path Traversal: '\..\filename' in salesagility/suitecrmsalesagility/suitecrm
- CVE-2023-26545In the Linux kernel before 6.1.13, there is a double free in net/mpls/af_mpls.c upon an allocation failure (for registering the sysctl table