Vulnerabilities (13)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU84423 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2023-49691	CWE-78	Low	No	No	-	14.12.2023	SB2023121421 SB2024061413
#VU83426 - Improper Access Control CVE-2023-44374	CWE-284	Medium	No	No	-	22.11.2023	SB2023112223 SB2023121421 SB2024061413
#VU83425 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CVE-2023-44373	CWE-74	Low	No	No	-	22.11.2023	SB2023112223 SB2023121421 SB2024061413
#VU83417 - Use of Weak Hash CVE-2023-44319	CWE-328	Low	No	No	-	22.11.2023	SB2023112223 SB2023121421 SB2024061413
#VU83416 - Use of Hard-coded Cryptographic Key CVE-2023-44318	CWE-321	Low	No	No	-	22.11.2023	SB2023112223 SB2023121423 SB2024031320 and 1 more
#VU83415 - Acceptance of Extraneous Untrusted Data With Trusted Data CVE-2023-44317	CWE-349	Low	No	No	-	22.11.2023	SB2023112223 SB2023121344 SB2024061413
#VU70424 - Improper input validation CVE-2022-46143	CWE-20	Low	No	No	-	19.12.2022	SB2022121925 SB2023121421
#VU70423 - Storing Passwords in a Recoverable Format CVE-2022-46142	CWE-257	Low	No	No	-	19.12.2022	SB2022121925
#VU70422 - Use of a Broken or Risky Cryptographic Algorithm CVE-2022-46140	CWE-327	Medium	No	No	-	19.12.2022	SB2022121924
#VU70421 - Improper control of a resource through its lifetime CVE-2022-46144	CWE-664	Medium	No	No	-	19.12.2022	SB2022121925 SB2024061413
#VU68289 - Missing Authorization CVE-2022-31765	CWE-862	Medium	No	No	-	13.10.2022	SB2022101316
#VU68287 - Improper input validation CVE-2022-31766	CWE-20	High	No	No	-	13.10.2022	SB2022101312
#VU66368 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CVE-2022-36323	CWE-74	Low	No	No	-	10.08.2022	SB2022081042 SB2023121421 SB2024061413