# CVEs published 2023-02-26

21 CVEs were published on February 26, 2023: 1 critical, 6 high. Days are UTC.

- [CVE-2023-1048](https://cve.now/CVE-2023-1048.md): TechPowerUp Ryzen DRAM Calculator WinRing0x64.sys initialization (CVSS 5.3, TechPowerUp Ryzen DRAM Calculator)
- [CVE-2023-1047](https://cve.now/CVE-2023-1047.md): TechPowerUp RealTemp WinRing0x64.sys initialization (CVSS 5.3, TechPowerUp RealTemp)
- [CVE-2023-1046](https://cve.now/CVE-2023-1046.md): MuYuCMS getFile.html server-side request forgery (CVSS 6.3, MuYuCMS)
- [CVE-2023-1045](https://cve.now/CVE-2023-1045.md): MuYuCMS filesdel.html path traversal (CVSS 3.8, MuYuCMS)
- [CVE-2023-1044](https://cve.now/CVE-2023-1044.md): MuYuCMS index.php path traversal (CVSS 4.3, MuYuCMS)
- [CVE-2023-1043](https://cve.now/CVE-2023-1043.md): MuYuCMS index.php path traversal (CVSS 4.3, MuYuCMS)
- [CVE-2023-1042](https://cve.now/CVE-2023-1042.md): SourceCodester Online Pet Shop We App update\_status.php cross site scripting (CVSS 3.5, SourceCodester Online Pet Shop We App)
- [CVE-2023-1041](https://cve.now/CVE-2023-1041.md): SourceCodester Simple Responsive Tourism Website rate\_review.php cross site scripting (CVSS 3.5, SourceCodester Simple Responsive Tourism Website)
- [CVE-2023-1040](https://cve.now/CVE-2023-1040.md): SourceCodester Online Graduate Tracer System add\_acc.php sql injection (CVSS 6.3, SourceCodester Online Graduate Tracer System)
- [CVE-2023-1039](https://cve.now/CVE-2023-1039.md): SourceCodester Class and Exam Timetabling System POST Parameter index3.php sql injection (CVSS 7.3, SourceCodester Class and Exam Timetabling System)
- [CVE-2023-1038](https://cve.now/CVE-2023-1038.md): SourceCodester Online Reviewer Management System questions-view.php sql injection (CVSS 6.3, SourceCodester Online Reviewer Management System)
- [CVE-2023-1037](https://cve.now/CVE-2023-1037.md): SourceCodester Dental Clinic Appointment Reservation System POST Parameter login.php sql injection (CVSS 7.3, SourceCodester Dental Clinic Appointment Reservation System)
- [CVE-2023-1036](https://cve.now/CVE-2023-1036.md): SourceCodester Dental Clinic Appointment Reservation System POST Parameter signup.php cross site scripting (CVSS 4.3, SourceCodester Dental Clinic Appointment Reservation System)
- [CVE-2019-25105](https://cve.now/CVE-2019-25105.md): dro.pm fileman.php cross site scripting (CVSS 3.5, dro.pm)
- [CVE-2021-3329](https://cve.now/CVE-2021-3329.md): DOS: Incorrect handling of the initial HCI ACL\_MTU handshake packet leads to crash of bluetooth host layer (CVSS 9.6, zephyrproject-rtos zephyr)
- [CVE-2022-48363](https://cve.now/CVE-2022-48363.md): In MPD before 0.23.8, as used on Automotive Grade Linux and other platforms, the PipeWire output plugin mishandles a Drain call in certain s (CVSS 7.5)
- [CVE-2023-26091](https://cve.now/CVE-2023-26091.md): The frp\_form\_answers (aka Forms Export) extension before 3.1.2, and 4.x before 4.0.2, for TYPO3 allows XSS via saved emails. (no CVSS, frappant/frp-form-answers)
- [CVE-2023-26602](https://cve.now/CVE-2023-26602.md): ASUS ASMB8 iKVM firmware through 1.14.51 allows remote attackers to execute arbitrary code by using SNMP to create extensions, as demonstrat (no CVSS)
- [CVE-2023-26605](https://cve.now/CVE-2023-26605.md): In the Linux kernel 6.0.8, there is a use-after-free in inode\_cgwb\_move\_to\_attached in fs/fs-writeback.c, related to \_\_list\_del\_entry\_valid. (CVSS 7.8)
- [CVE-2023-26606](https://cve.now/CVE-2023-26606.md): In the Linux kernel 6.0.8, there is a use-after-free in ntfs\_trim\_fs in fs/ntfs3/bitmap.c. (CVSS 7.8)
- [CVE-2023-26607](https://cve.now/CVE-2023-26607.md): In the Linux kernel 6.0.8, there is an out-of-bounds read in ntfs\_attr\_find in fs/ntfs/attrib.c. (CVSS 7.1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-02-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.