CVEs published in January 2023
4,262 vulnerabilities, 224 critical, 8 exploited.
- nvidia dgx a100 firmware, dgx servers +1 moreNVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject...7.2 High
- nvidia dgx a100 firmware, dgx servers +1 moreNVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject...7.2 High
- nvidia dgx a100 firmware, dgx servers +1 moreNVIDIA BMC contains a vulnerability in IPMI handler, where an unauthorized attacker can use...5.3 Medium
- nvidia bmc, dgx servers +1 moreNVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can upload and...6.0 Medium
- nvidia sbios, dgx servers +1 moreDGX A100 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of...6.0 Medium
- nvidia sbios, dgx servers +1 moreDGX A100 SBIOS contains a vulnerability in the Pre-EFI Initialization (PEI)phase, where a...6.0 Medium
- nvidia bmc, dgx servers +1 moreNVIDIA BMC stores user passwords in an obfuscated form in a database accessible by the host. This...6.2 Medium
- nvidia bmc, dgx servers +1 moreNVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a...6.4 Medium
- nvidia bmc, dgx servers +1 moreNVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can access...6.5 Medium
- nvidia dgx a100 firmware, dgx servers +1 moreNVIDIA DGX A100 contains a vulnerability in SBIOS in the FsRecovery, which may allow a highly...6.7 Medium
- nvidia bmc, dgx servers +1 moreNVIDIA BMC contains a vulnerability in SPX REST auth handler, where an un-authorized attacker can...7.1 High
- nvidia dgx a100 firmware, dgx servers +1 moreNVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject...7.2 High
- nvidia bmc, dgx servers +1 moreNVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can read and...7.2 High
- nvidia dgx station a100 firmware, dgx servers +1 moreNVIDIA DGX Station contains a vulnerability in SBIOS in the SmiFlash, where a local user with...7.5 High
- nvidia dgx a100 firmware, dgx servers +1 moreNVIDIA DGX A100 contains a vulnerability in SBIOS in the SmiFlash, where a local user with...7.5 High
- siemens jt2go, teamcenter visualization v13.3, teamcenter visualization v14.0 +2 more +4 moreThe APDFL.dll contains a memory corruption vulnerability while parsing specially crafted PDF...7.8 High
- siemens jt2go, teamcenter visualization v13.3, teamcenter visualization v14.0 +2 more +4 moreThe APDFL.dll contains an out-of-bounds write past the fixed-length heap-based buffer while...7.8 High
- siemens jt2go, teamcenter visualization v13.3, teamcenter visualization v14.0 +2 more +4 moreThe APDFL.dll contains a stack-based buffer overflow vulnerability that could be triggered while...7.8 High
- nvidia bmc, dgx servers +1 moreNVIDIA BMC IPMI handler allows an unauthenticated host to write to a host SPI flash bypassing...7.7 High
- nvidia bmc, dgx servers +1 moreNVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a...7.8 High
- axigen mail serverA 2-Step Verification problem in Axigen 10.3.3.52 allows an attacker to access a mailbox by...9.8 Critical
- debian linux, linux kernel, netapp hci baseboard management controller +1 more +3 moreIn rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there...7.8 High
- adobe incopyAdobe InCopy Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe incopyAdobe InCopy Font Parsing Use-After-Free Information Disclosure Vulnerability5.5 Medium
- adobe incopyAdobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe incopyAdobe InCopy Improper Input Validation Remote Code Execution Vulnerability7.8 High
- adobe incopyAdobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe incopyAdobe InCopy Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- adobe indesignAdobe InDesign Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe indesignAdobe InDesign Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe indesignAdobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe indesignAdobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe indesignAdobe InDesign Improper Input Validation Remote Code Execution Vulnerability7.8 High
- adobe indesignAdobe InDesign Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- craigk5n craigk5n/webcalendar, webcalendar project webcalendar +1 moreCross-site Scripting (XSS) - Stored in craigk5n/webcalendar7.6 High
- vim, vim vim/vim, apple macos +2 more +4 moreHeap-based Buffer Overflow in vim/vim7.3 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +10 more +12 moreImportant: kernel security and bug fix update7.8 High
- eternal terminal project terminalIn Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles.5.3 Medium
- eternal terminal project terminal, fedoraproject fedora +1 moreIn Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp.5.3 Medium
- technitium dns serverTechnitium DNS Server before 10.0 allows a self-CNAME denial-of-service attack in which a CNAME...7.5 High
- hotel management system project management systemTramyardg hotel-mgmt-system version 2022.4 is vulnerable to Cross Site Scripting (XSS) via...5.4 Medium
- hotel management system project management systemTramyardg hotel-mgmt-system version 2022.4 is vulnerable to SQL Injection via /app/dao...6.5 Medium
- dynamic transaction queuing system project transaction queuing systemDynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability...7.2 High
- dynamic transaction queuing system project transaction queuing systemDynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability...9.8 Critical
- dynamic transaction queuing system project transaction queuing systemDynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability...9.8 Critical
- dynamic transaction queuing system project transaction queuing systemDynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability...7.2 High
- dynamic transaction queuing system project transaction queuing systemDynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability...7.2 High
- dynamic transaction queuing system project transaction queuing systemDynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability...7.2 High
- dynamic transaction queuing system project transaction queuing systemDynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability...7.2 High
- helmet store showroom site project store showroom siteHelmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the...7.2 High
- Show moreLoading…