CVEs published in January 2023
4,262 vulnerabilities, 224 critical, 8 exploited.
- marco milesi wp attachmentsWP Attachments < 5.0.6 - Admin+ Stored XSS4.8 Medium
- tipsandtricks-hq wp video lightboxWP Video Lightbox < 1.9.7 - Contributor+ Stored XSS5.4 Medium
- shapedplugin real testimonialsReal Testimonials < 2.6.0 - Contributor+ Stored XSS5.4 Medium
toropenSUSESecurity update for torNo score- sourcecodester online tours & travels management system, online tours \& travels management system project tours \& travels management system +1 moreSourceCodester Online Tours & Travels Management System page-login.php sql injection7.3 High
- abhilash1985 predictappabhilash1985 PredictApp Cookie new_framework_defaults_7_0.rb deserialization6.3 Medium
- nethserver phonenehome, nethserver-phonenehome project nethserver-phonenehome +1 moreNethServer phonenehome index.php get_country_coor sql injection5.5 Medium
- events project eventsEvents Extension events.php searchResults sql injection5.5 Medium
- prodigasistemas curupiraprodigasistemas curupira passwords_controller.rb sql injection5.5 Medium
- liftkit database, liftkit database library project database library +1 moreliftkit database Query.php processOrderBy sql injection5.5 Medium
- antonbolling clan7upsantonbolling clan7ups Login/Session sql injection5.5 Medium
- apache supersetApache Superset: SQL injection vulnerability in adhoc clauses5.4 Medium
- apache supersetApache Superset: Dashboard metadata information leak5.3 Medium
- apache supersetApache Superset: Open Redirect Vulnerability5.4 Medium
- apache supersetApache Superset: Improper rendering of user input5.4 Medium
- apache supersetApache Superset: Cross Site Request Forgery (CSRF) on accept, request access API8.8 High
- apache supersetApache Superset: Cross-Site Scripting vulnerability on upload forms5.4 Medium
- apache supersetApache Superset: Cross-Site Scripting on dashboards5.4 Medium
- hima hopcs, x-opc a+e, x-opc da +2 more +4 moreHima: Unquoted path vulnerabilities in HIMA PC based Software7.8 High
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Stored in pimcore/pimcore6.1 Medium
- froxlor, froxlor froxlor/froxlor +1 morePath Traversal: '\..\filename' in froxlor/froxlor6.8 Medium
- froxlor, froxlor froxlor/froxlor +1 moreCommand Injection in froxlor/froxlor7.2 High
- trustedfirmware trusted firmware-aTrusted Firmware-A through 2.8 has an out-of-bounds read in the X.509 parser for parsing boot...7.4 High
- karsany obridgekarsany OBridge ProcedureDao.java getAllStandaloneProcedureAndFunction sql injection4.6 Medium
- jekbox project jekboxtombh jekbox server.rb exposure of information through directory listing4.3 Medium
- krail-jpa project krail-jpakrail-jpa sql injection5.5 Medium
- calesanz gibb-modul-151calesanz gibb-modul-151 login redirect4.6 Medium
- bony2023 discussion-boardbony2023 Discussion-Board main.php display_all_replies sql injection5.5 Medium
- brandonfire mirna database by php mysql, mirna database by php mysql project database by php mysql +1 morebrandonfire miRNA_Database_by_PHP_MySql model.php count_rna sql injection5.5 Medium
- course-builder project course-builderOverdrive Eletrônica course-builder oeditor.html cross site scripting3.5 Low
- sourcecodester online food ordering system, online food ordering system v2 project food ordering system v2 +1 moreSourceCodester Online Food Ordering System Login Module admin_class.php sql injection6.3 Medium
- sourcecodester online food ordering system, online food ordering system v2 project food ordering system v2 +1 moreSourceCodester Online Food Ordering System Signup Module admin_class.php sql injection6.3 Medium
- sourcecodester online food ordering system, online food ordering system v2 project food ordering system v2 +1 moreSourceCodester Online Food Ordering System view_prod.php sql injection6.3 Medium
- bmattoso desafio buzz woody, desafio buzz woody project buzz woody +1 morebmattoso desafio_buzz_woody sql injection5.5 Medium
- kyuubl school-registerKYUUBl school-register DBManager.java sql injection5.5 Medium
- lolfeedback project lolfeedbacklolfeedback sql injection5.5 Medium
- project todolist project todolist, tutrantta project todolist +1 moretutrantta project_todolist Database.php update sql injection5.5 Medium
- gophergala sqldumpgophergala sqldump sql injection5.5 Medium
- agy pontifex.httpagy pontifex.http Http.coffee sql injection5.5 Medium
- horizon project horizon, iidk-the-actual console +1 moreyanheven console horizon.instances.js cross site scripting3.5 Low
- searx stats project stats, pointhi searx stats +1 morepointhi searx_stats cron.php sql injection5.5 Medium
- stracker project strackervisegripped Stracker api.php getHistory sql injection5.5 Medium
- bluecatnetworks device registration portalBlueCat Device Registration Portal 2.2 allows XXE attacks that exfiltrate single-line files. A...7.5 High
- mercedes-benz xentry retail data storage firmwareMercedes-Benz XENTRY Retail Data Storage 7.8.1 allows remote attackers to cause a denial of...7.5 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq6.5 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaq4.7 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaq8.6 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreImproper Authentication in thorsten/phpmyfaq5.3 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaq9.8 Critical
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaq8.6 High
- Show moreLoading…