CVEs published in January 2023
4,262 vulnerabilities, 224 critical, 8 exploited.
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaq7.6 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreWeak Password Requirements in thorsten/phpmyfaq5.7 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaq9.1 Critical
- radare radare2, radareorg radareorg/radare2 +1 moreFailure to Sanitize Special Elements into a Different Plane (Special Element Injection) in radareorg/radare28.6 High
- abreen apolloabreen Apollo path traversal5.5 Medium
- cis450project project cis450projectssn2013 cis450Project AddAppUser.java addUser sql injection5.5 Medium
- minichanMinichan reports.php cross site scripting3.5 Low
libplistOSS-FuzzHeap-buffer-overflow in parse_skip_wsNo score- muffingroup bethemeWordPress Betheme theme <= 26.6.1 is vulnerable to Broken Access Control4.3 Medium
- crm perks forms – wordpress form builder, crmperks crm perks forms +1 moreWordPress CRM Perks Forms Plugin <= 1.1.0 is vulnerable to Reflected Cross Site Scripting (XSS) vulnerability6.1 Medium
- apache shiro, vmware spring boot +1 moreApache Shiro before 1.11.0, when used with Spring Boot 2.6+, may allow authentication bypass through a specially crafted HTTP request7.5 High
- netdataNetdata is vulnerable to improper authentication6.5 Medium
- netdataNetdata vulnerable to command injection8.1 High
- maif izanamiIzanami is vulnerable to Authorization Bypass9.8 Critical
- autolabAutolab is vulnerable to file disclosure via remote handin feature6.5 Medium
- nextcloud deck, kiteworks security-advisories +1 moreNextcloud Deck vulnerable to authorization bypass3.5 Low
- nextcloud deck, kiteworks security-advisories +1 moreNextcloud Deck vulnerable to uncontrolled resource consumption3.5 Low
- autolabAutolab is vulnerable to remote code execution (RCE) via MOSS functionality8.8 High
- torproject tor, debian linux, fedoraproject fedora +2 moreThe SafeSocks option in Tor before 0.4.7.13 has a logic error in which the unsafe SOCKS4 protocol...6.5 Medium
- tikiTiki before 24.1, when feature_create_webhelp is enabled, allows lib/structures/structlib.php PHP...8.8 High
- tikiTiki through 25.0 allows CSRF attacks that are related to tiki-importer.php and tiki-import_sheet...6.5 Medium
- tikiTiki before 24.2 allows lib/importer/tikiimporter_blog_wordpress.php PHP Object Injection by an...7.2 High
- tikiTiki before 24.1, when the Spreadsheets feature is enabled, allows lib/sheet/grid.php PHP Object...8.8 High
- alfio-event alfio-event/alf.io, opencollective alf.io +1 moreCross-site Scripting (XSS) - Stored in alfio-event/alf.io4.3 Medium
- alfio-event alfio-event/alf.io, opencollective alf.io +1 moreCross-site Scripting (XSS) - Reflected in alfio-event/alf.io3.5 Low
- publify publify/publify, publify project publify +1 moreImproper Input Validation in publify/publify8.4 High
- firefly-iii firefly-iii/firefly-iii, firefly iii +1 moreIncorrect Authorization in firefly-iii/firefly-iii6.5 Medium
- pyload, pyload pyload/pyload +1 moreCode Injection in pyload/pyload9.8 Critical
- publify publify/publify, publify project publify +1 moreInsecure Storage of Sensitive Information in publify/publify4.6 Medium
- publify publify/publify, publify project publify +1 moreInteger Overflow or Wraparound in publify/publify7.6 High
- golang h2c, golang.org/x/net golang.org/x/net/http2/h2c +1 moreRequest smuggling due to improper request handling in golang.org/x/net/http2/h2c7.5 High
@curveball/a12n-servernpma12nserver vulnerable to potential SQL Injections via Knex dependency6.5 Medium- neo4j-contrib neo4j-apoc-procedures, neo4j awesome procedures on cyper +1 moreneo4j-apoc-procedures is vulnerable to path traversal7.1 High
- gggggggg ton-masterserverGGGGGGGG ToN-MasterServer svr_request_pub.php sql injection5.5 Medium
- aibattle project aibattleDovgalyuk AIBattle procedures.php registerUser sql injection5.5 Medium
- obox launchpad – coming soon & maintenance mode plugin, launchpad - coming soon \& maintenance mode plugin +1 moreLaunchpad – Coming Soon & Maintenance Mode Plugin <= 1.0.13 - Authenticated (Administrator+) Cross-Site Scripting5.5 Medium
- frenify mediamatic, plugincraft mediamatic – media library folders +1 moreMediamatic – Media Library Folders <= 2.8.1 - Cross-Site Request Forgery8.8 High
- frenify mediamatic, plugincraft mediamatic – media library folders +1 moreMediamatic – Media Library Folders <= 2.8.1 - Missing Authorization4.3 Medium
- aibattle project aibattleDovgalyuk AIBattle procedures.php sendComments sql injection5.5 Medium
- gitlearn project gitlearngitlearn Escape Sequence config.sh getOutOf injection5.4 Medium
- dpup fittr-flickr, fittr flickr project flickr +1 moredpup fittr-flickr EXIF Preview easy-exif.js cross site scripting3.5 Low
- cool-php-captcha project cool-php-captchajianlinwei cool-php-captcha example-form.php cross site scripting3.5 Low
- rapidleechTh3-822 Rapidleech zip.php zip_go cross site scripting3.5 Low
- mcafee application and change controlProduct security bypass vulnerability in ACC prior to version 8.3.4 allows a locally logged-in...4.4 Medium
- cloudfavorites favorites-webityouknow favorites-web Comment cross site scripting3.5 Low
- openeuler byaccWhen a file is processed, an infinite loop occurs in next_inline() of the more_curly() function.5.5 Medium
- openeuler byaccWhen processing files, malloc stores the data of the current line. When processing comments,...7.8 High
- campcodes online flight booking management system, online flight booking management system project flight booking management system +1 moreSourceCodester Online Flight Booking Management System POST Parameter review_search.php sql injection6.3 Medium
- campcodes online flight booking management system, online flight booking management system project flight booking management system +1 moreSourceCodester Online Flight Booking Management System judge_panel.php sql injection6.3 Medium
- global-modules-path project global-modules-pathglobal-modules-path Command Injection vulnerability7.4 High
- Show moreLoading…