CVEs published February 26, 2023
21 CVEs were published on February 26, 2023: 1 critical, 6 high.
- Published
- 21
- Critical
- 1
- High
- 6
- Medium
- 8
- Low
- 4
- Unrated
- 2
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- MuYuCMS
- 4
- SourceCodester Dental Clinic Appointment Reservation System
- 2
- dro.pm
- 1
- frappant/frp-form-answers
- 1
- SourceCodester Class and Exam Timetabling System
- 1
- SourceCodester Online Graduate Tracer System
- 1
- SourceCodester Online Pet Shop We App
- 1
- SourceCodester Online Reviewer Management System
- 1
- SourceCodester Simple Responsive Tourism Website
- 1
- TechPowerUp RealTemp
- 1
Critical 1
High 6
- CVE-2023-1039SourceCodester Class and Exam Timetabling System POST Parameter index3.php sql injectionSourceCodester Class and Exam Timetabling System
- CVE-2023-1037SourceCodester Dental Clinic Appointment Reservation System POST Parameter login.php sql injectionSourceCodester Dental Clinic Appointment Reservation System
- CVE-2022-48363In MPD before 0.23.8, as used on Automotive Grade Linux and other platforms, the PipeWire output plugin mishandles a Drain call in certain s
- CVE-2023-26605In the Linux kernel 6.0.8, there is a use-after-free in inode_cgwb_move_to_attached in fs/fs-writeback.c, related to __list_del_entry_valid.
- CVE-2023-26606In the Linux kernel 6.0.8, there is a use-after-free in ntfs_trim_fs in fs/ntfs3/bitmap.c.
- CVE-2023-26607In the Linux kernel 6.0.8, there is an out-of-bounds read in ntfs_attr_find in fs/ntfs/attrib.c.
Medium, low and unrated 14
- CVE-2023-1048TechPowerUp Ryzen DRAM Calculator WinRing0x64.sys initializationTechPowerUp Ryzen DRAM Calculator
- CVE-2023-1047TechPowerUp RealTemp WinRing0x64.sys initializationTechPowerUp RealTemp
- CVE-2023-1046MuYuCMS getFile.html server-side request forgeryMuYuCMS
- CVE-2023-1045MuYuCMS filesdel.html path traversalMuYuCMS
- CVE-2023-1044MuYuCMS index.php path traversalMuYuCMS
- CVE-2023-1043MuYuCMS index.php path traversalMuYuCMS
- CVE-2023-1042SourceCodester Online Pet Shop We App update_status.php cross site scriptingSourceCodester Online Pet Shop We App
- CVE-2023-1041SourceCodester Simple Responsive Tourism Website rate_review.php cross site scriptingSourceCodester Simple Responsive Tourism Website
- CVE-2023-1040SourceCodester Online Graduate Tracer System add_acc.php sql injectionSourceCodester Online Graduate Tracer System
- CVE-2023-1038SourceCodester Online Reviewer Management System questions-view.php sql injectionSourceCodester Online Reviewer Management System
- CVE-2023-1036SourceCodester Dental Clinic Appointment Reservation System POST Parameter signup.php cross site scriptingSourceCodester Dental Clinic Appointment Reservation System
- CVE-2019-25105dro.pm fileman.php cross site scriptingdro.pm
- CVE-2023-26091The frp_form_answers (aka Forms Export) extension before 3.1.2, and 4.x before 4.0.2, for TYPO3 allows XSS via saved emails.frappant/frp-form-answers
- CVE-2023-26602ASUS ASMB8 iKVM firmware through 1.14.51 allows remote attackers to execute arbitrary code by using SNMP to create extensions, as demonstrat