CVEs published in January 2023
4,262 vulnerabilities, 224 critical, 8 exploited.
- helmet store showroom site project store showroom siteHelmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the...7.2 High
- helmet store showroom site project store showroom siteHelmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the...7.2 High
- online student enrollment system project student enrollment systemOnline Student Enrollment System v1.0 was discovered to contain a SQL injection vulnerability via...9.8 Critical
- datax-web project datax-webThe RPC interface in datax-web v1.0.0 and v2.0.0 to v2.1.2 contains no permission checks by...9.8 Critical
- online health care system project health care systemOnline Health Care System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- hospital management system project management systemHospital Management System v1.0 is vulnerable to SQL Injection. Attackers can gain administrator...8.2 High
- webbrowser project webbrowserwebbrowser-rs allows attackers to access arbitrary files via supplying a crafted URL9.8 Critical
- mailenableAuthenticated mail users, under specific circumstances, could add files with unsanitized content...8.8 High
- deytek informatics fileorbis file management system, fileorbis +1 morePath traversal in FileOrbis File Management System7.5 High
- nim-lang nim, nimforum +1 moreAn issue was discovered in Nim before 1.6.2. The RST module of the Nim language stdlib, as used...6.1 Medium
- johnson controls metasys ads/adx/oas, johnsoncontrols metasys application and data server, metasys extended application and data server +1 more +3 moreInsufficiently Protected Credentials in Metasys7.8 High
- delta industrial automation 4g router dx-3021, deltaww dx-3021l9 firmware +1 moreThe webserver in Delta DX-3021 versions prior to 1.24 is vulnerable to command injection through...7.2 High
- delta electronics infrasuite device masterDelta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied...9.8 Critical
- inhand networks inrouter 302, inrouter 615, inhandnetworks inrouter302 firmware +1 more +3 moreInHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version...10.0 Critical
- inhand networks inrouter 302, inrouter 615, inhandnetworks inrouter302 firmware +1 more +3 moreInHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version...10.0 Critical
- inhand networks inrouter 302, inrouter 615, inhandnetworks inrouter302 firmware +1 more +3 moreInHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version...7.0 High
- inhand networks inrouter 302, inrouter 615, inhandnetworks inrouter302 firmware +1 more +3 moreInHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version...7.2 High
- inhand networks inrouter 302, inrouter 615, inhandnetworks inrouter302 firmware +1 more +3 moreInHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version...6.5 Medium
- nvidia dgx a100 firmware, dgx servers +1 moreNVIDIA BMC contains a vulnerability in libwebsocket, where an authorized attacker can cause a...8.1 High
- nvidia dgx a100 firmware, dgx servers +1 moreNVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a...8.1 High
- oretnom23 online food ordering systemSourceCodester Online Food Ordering System Category List cross site scripting2.4 Low
- oretnom23 online food ordering systemSourceCodester Online Food Ordering System Menu Form unrestricted upload4.7 Medium
- oretnom23 online food ordering systemSourceCodester Online Food Ordering System Login Page sql injection6.3 Medium
- nvidia isaac sim, omniverse audio2face, omniverse code +3 more +5 moreOmniverse Kit contains a vulnerability in the reference applications Create, Audio2Face, Isaac...7.8 High
- simple-membership-plugin simple membership wp user importSimple Membership WP user Import <= 1.7 - Authenticated (Admin+) SQL Injection7.2 High
- qtAn integer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2....8.8 High
- qtA buffer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2. A...8.8 High
- aeharding classroom-engagement-systemaeharding classroom-engagement-system sql injection6.3 Medium
- manikandan170890 php-form-builder-classmanikandan170890 php-form-builder-class Textarea Textarea.php cross site scripting3.5 Low
- earclink espcmsearclink ESPCMS Content cross site scripting3.5 Low
- campcodes online flight booking management system, online flight booking management system project flight booking management system +1 moreSourceCodester Online Flight Booking Management System add_contestant.php sql injection6.3 Medium
- tuzicms project tuzicmsTuziCMS KefuController.class.php delall sql injection6.3 Medium
- tuzicms project tuzicmsTuziCMS Article Module ArticleController.class.php index sql injection6.3 Medium
- hitachi energy lumada apm, hitachienergy lumada asset performance management +1 moreA vulnerability exists in the Lumada APM’s User Asset Group feature due to a flaw in access control mechanism implementation on the “Limited Engineer” role.5.7 Medium
- java-merge-sort project java-merge-sortJava Merge-sort Insecure Temporary File vulnerability5.5 Medium
- upx, fedoraproject fedora +1 moreUpx: segv on packlinuxelf64::invert_pt_dynamic() in p_lx_elf.cpp5.3 Medium
- upx, fedoraproject fedora +1 moreUpx: heap-buffer-overflow in packtmt::pack()5.3 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreatm_tc_enqueue in net/sched/sch_atm.c in the Linux kernel through 6.1.4 allows attackers to cause...5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morecbq_classify in net/sched/sch_cbq.c in the Linux kernel through 6.1.4 allows attackers to cause a...5.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: A memory leak might be observed in IPsec VPN scenario leading to an FPC crash7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if SIP ALG is enabled and a malformed SIP packet is received7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash when specific H.323 packets are received7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX Series and QFX10000 Series: An FPC memory leak is observed when specific EVPN VXLAN Multicast packets are processed6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: The Multiservices PIC Management Daemon (mspmand) will crash when an IPsec6 tunnel processes specific IPv4 packets7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if the SIP ALG is enabled and specific SIP messages are processed7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: The flow processing daemon (flowd) will crash when Unified Policies are used with IPv6 and certain dynamic applications are rejected by the device7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series with MPC10/MPC11: When Suspicious Control Flow Detection (scfd) is enabled and an attacker is sending specific traffic, this causes a memory leak.7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series, MX Series with SPC3: When an inconsistent NAT configuration exists and a specific CLI command is issued the SPC will reboot5.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX 5000 Series: Upon processing of a specific SIP packet an FPC can crash7.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An RPD crash can happen due to an MPLS TE tunnel configuration change on a directly connected router6.5 Medium
- Show moreLoading…