Security Vulnerabilities - CVEs Published In February 2023
A vulnerability was found in paxswill EVE Ship Replacement Program 0.12.11. It has been rated as problematic. This issue affects some unknown processing of the file src/evesrp/views/api.py of the component User Information Handler. The manipulation leads to information disclosure. The attack may be initiated remotely. Upgrading to version 0.12.12 is able to address this issue. The patch is named 9e03f68e46e85ca9c9694a6971859b3ee66f0240. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-220211.
CVSS Score
4.3
EPSS Score
0.001
Published
2023-02-06
In NVS365 V01, the background network test function can trigger command execution.
CVSS Score
9.8
EPSS Score
0.039
Published
2023-02-06
pycdc commit 44a730f3a889503014fec94ae6e62d8401cb75e5 was discovered to contain a stack overflow via the component ASTree.cpp:BuildFromCode.
CVSS Score
9.8
EPSS Score
0.001
Published
2023-02-06
Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at save_ticket.php.
CVSS Score
9.8
EPSS Score
0.001
Published
2023-02-06
Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at get_ticket.php.
CVSS Score
9.8
EPSS Score
0.001
Published
2023-02-06
Raffle Draw System v1.0 was discovered to contain a local file inclusion vulnerability via the page parameter in index.php.
CVSS Score
9.8
EPSS Score
0.001
Published
2023-02-06
TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the country parameter at setting/delStaticDhcpRules.
CVSS Score
9.8
EPSS Score
0.015
Published
2023-02-06
The components wfshbr64.sys and wfshbr32.sys in Another Eden before v3.0.20 and before v2.14.200 allows attackers to perform privilege escalation via a crafted payload.
CVSS Score
7.8
EPSS Score
0.001
Published
2023-02-06
Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the redirect parameter in signup.php.
CVSS Score
6.1
EPSS Score
0.001
Published
2023-02-06
Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the redirect parameter in login.php.
CVSS Score
6.1
EPSS Score
0.001
Published
2023-02-06