CVEs published in January 2023
4,262 vulnerabilities, 224 critical, 8 exploited.
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A memory leak which will ultimately lead to an rpd crash will be observed when a peer interface flaps continuously in a Segment Routing scenario using OSPF6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5k Series, EX46xx Series: MAC limiting feature stops working after PFE restart or device reboot6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series and MX Series with SPC3: When IPsec VPN is configured iked will core when a specifically formatted payload is received6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10K Series: An ICCP flap will be observed due to excessive specific traffic7.5 High
- juniper junos os evolvedJunos OS Evolved: The kernel might restart in a BGP scenario where "bgp auto-discovery" is enabled and such a neighbor flaps5.9 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: PTX10008, PTX10016: When a specific SNMP MIB is queried the FPC will crash7.5 High
- juniper junos os evolvedJunos OS Evolved: A specific SNMP GET operation and a specific CLI commands cause resources to leak and eventually the evo-pfemand process will crash7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10K Series: PFE crash upon receipt of specific genuine packets when sFlow is enabled7.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD might crash when MPLS ping is performed on BGP LSPs5.3 Medium
- juniper junos os evolvedJunos OS Evolved: PTX10003: An attacker sending specific genuine packets will cause a memory leak in the PFE leading to a Denial of Service6.1 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Receipt of crafted TCP packets destined to the device results in MBUF leak leading to a Denial of Service (DoS)7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: In an MPLS scenario the processing of specific packets to the device causes a buffer leak and ultimately a loss of connectivity6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series and MX Series: Memory leak due to receipt of specially crafted SIP calls7.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD crash upon receipt of BGP route with invalid next-hop7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: ACX2K Series: Receipt of a high rate of specific traffic will lead to a Denial of Service (DoS)7.5 High
- bits-and-blooms bits-and-blooms/bloom, bloom project bloom +1 moreUncontrolled Search Path Element in bits-and-blooms/bloom7.8 High
- pyload, pyload pyload/pyload +1 moreInsufficient Session Expiration in pyload/pyload8.3 High
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 11.4 prior to...6.1 Medium
- linux kernelA flaw NULL Pointer Dereference in the Linux kernel NTFS3 driver function attr_punch_hole() was...5.5 Medium
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39...5.5 Medium
- phpgurukul student study center management systemA cross-site scripting (XSS) vulnerability in Student Study Center Management System V 1.0 allows...5.4 Medium
- judging management system project management systemJudging Management System v1.0.0 was discovered to contain a SQL injection vulnerability via the...7.8 High
- judging management system project management systemA cross-site scripting (XSS) vulnerability in Judging Management System v1.0 allows attackers to...6.1 Medium
- online student enrollment system project student enrollment systemA cross-site scripting (XSS) vulnerability in the component /admin/register.php of Online Student...5.4 Medium
- helmet store showroom site project store showroom siteHelmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the...7.2 High
- linuxfoundation harborAn access control issue in Harbor v1.X.X to v2.5.3 allows attackers to access public and private...7.5 High
- douco douphpA cross-site scripting (XSS) vulnerability in the /admin/article_category.php component of DouPHP...5.4 Medium
- alotcer ar7088h-a, alotceriot ar7088h-a firmware +1 moreAlotcer - AR7088H-A Authenticated Command execution7.2 High
- alotcer ar7088h-a, alotceriot ar7088h-a firmware +1 moreAlotcer - AR7088H-A Information disclosure5.3 Medium
- maxum rumpus, pcman ftp server +1 moreRumpus - FTP server Improper Token Verification7.3 High
- maxum rumpus, pcman ftp server +1 moreRumpus - FTP server Persistent cross-site scripting (PXSS) – Unspecified vector6.8 Medium
- maxum rumpus, pcman ftp server +1 moreRumpus - FTP server Cross-site request forgery (CSRF) – Create user6.8 Medium
- maxum rumpus, pcman ftp server +1 moreRumpus - FTP server Cross-site request forgery (CSRF) – Privilege escalation6.8 Medium
- phpgurukul doctor appointment management systemA cross-site scripting (XSS) vulnerability in Doctor Appointment Management System v1.0.0 allows...6.1 Medium
- phpgurukul doctor appointment management systemDoctor Appointment Management System v1.0.0 was discovered to contain a cross-site scripting (XSS...6.1 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 15...5.5 Medium
- wiresharkInfinite loops in the BPv6, OpenFlow, and Kafka protocol dissectors in Wireshark 4.0.0 to 4.0.1...6.3 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 15.1 before 15...5.5 Medium
- servicenowA cross-site scripting (XSS) vulnerability in Employee Service Center (esc) and Service Portal ...5.4 Medium
- gitlabIncorrect Authorization check affecting all versions of GitLab EE from 13.11 prior to 15.5.7, 15...5.3 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 10.8 before 15...4.3 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions before 15.5.7, all versions...6.4 Medium
- maxum rumpus, pcman ftp server +1 moreRumpus - FTP server Reflected cross-site scripting (RXSS)6.8 Medium
- exfo bv-10 performance endpoint unit, bv-10 firmware +1 moreEXFO - BV-10 Performance Endpoint Unit Misconfiguration6.2 Medium
- exfo bv-10 performance endpoint unit, bv-10 firmware +1 moreEXFO - BV-10 Performance Endpoint Unit Undocumented privileged user.9.8 Critical
- exfo bv-10 performance endpoint unit, bv-10 firmware +1 moreEXFO - BV-10 Performance Endpoint Unit Authentication bypass9.8 Critical
- moodle plugin - saml auth plugin - saml auth, moodle saml authentication +1 moreMoodle Plugin - SAML Auth Open Redirect6.5 Medium
- h c mingham-smith ltd tardis 2000H C Mingham-Smith Ltd - Tardis 2000 Privilege escalation4.9 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 15...5.3 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions before 15.5.7, all versions...5.8 Medium
- Show moreLoading…