CVEs published in January 2023
4,262 vulnerabilities, 224 critical, 8 exploited.
KernelLinuxudf: Fix preallocation discarding at indirect extent boundaryNo score- nickzren alsdb, columbia als data browser +1 morenickzren alsdb sql injection5.5 Medium
- evandro-machado trabalho-web2evandro-machado Trabalho-Web2 ClienteDAO.java sql injection5.5 Medium
- authenticator plugin project plugin, bricco authenticator plugin +1 moreBricco Authenticator Plugin DBAuthenticator.java compare sql injection5.5 Medium
- ollpu parontalliollpu parontalli index.php sql injection5.5 Medium
- liftkit databaseMNBikeways database views.py sql injection5.5 Medium
- s134328 webapplication-veganguides134328 Webapplication-Veganguide apiService.js cross site scripting3.5 Low
- mediawiki wikisource category browser, wikisource category browser +1 moreWikisource Category Browser index.php cross site scripting3.5 Low
- opensuse libzypp-plugin-appdata, leap 15.4, suse linux enterprise server for sap 15-sp3 +2 morelibzypp-plugin-appdata: potential arbitrary code execution via shell injection due to `os.system` calls6.3 Medium
- simplesamlphp simplesamlphp-module-openidprovidersimplesamlphp simplesamlphp-module-openidprovider trust.tpl.php cross site scripting3.5 Low
- oretnom23 online food ordering systemSourceCodester Online Food Ordering System manage_user.php sql injection7.3 High
- ad33lx ip blacklist cloudWordPress IP Blacklist Cloud Plugin <= 5.00 is vulnerable to SQL Injection (SQLi) vulnerability9.1 Critical
- ad33lx ip blacklist cloudWordPress IP Blacklist Cloud Plugin <= 5.00 is vulnerable to Cross Site Scripting (XSS)4.8 Medium
- hyumika openstreetmap, mika osm – openstreetmap +1 moreWordPress OSM – OpenStreetMap Plugin <= 6.0.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- hitachi tuning managerFile and Directory Permission Vulnerability in Hitachi Tuning Manager6.6 Medium
- unistra impatientIMPatienT before 1.5.2 allows stored XSS via onmouseover in certain text fields within a PATCH ...7.6 High
- zohocorp manageengine exchange reporter plusZoho ManageEngine Exchange Reporter Plus before 5708 allows attackers to conduct XXE attacks.7.5 High
- omron corporation cx-motion-mch, omron cx-motion-mch firmware +1 moreCX-Motion-MCH v2.32 and earlier contains an access of uninitialized pointer vulnerability. Having...7.8 High
- omron corporation cp1l-el20dr-d, omron cp1l-el20dr-d firmware +1 moreActive debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is...9.8 Critical
- pixela corporation pix-rt100, pixela pix-rt100 firmware +1 moreHidden functionality vulnerability in PIX-RT100 versions RT100_TEQ_2.1.1_EQ101 and RT100_TEQ_2.1...6.5 Medium
- pixela corporation pix-rt100, pixela pix-rt100 firmware +1 moreOS command injection vulnerability in PIX-RT100 versions RT100_TEQ_2.1.1_EQ101 and RT100_TEQ_2.1...8.0 High
- tp-link sg105pe, tl-sg105pe firmware +1 moreTP-Link SG105PE firmware prior to 'TL-SG105PE(UN) 1.0_1.0.0 Build 20221208' contains an...9.8 Critical
- pgadmin 4, pgadmin.org pgadmin 4, fedoraproject fedora +2 morepgAdmin 4 Open Redirect vulnerability6.1 Medium
- mahoroba kobo, inc. maho-pbx netdevancer series, ate-mahoroba maho-pbx netdevancer firmware, maho-pbx netdevancer mobilegate firmware +1 more +3 moreReflected cross-site scripting vulnerability in MAHO-PBX NetDevancer series MAHO-PBX NetDevancer...6.1 Medium
- ate-mahoroba maho-pbx netdevancer firmware, maho-pbx netdevancer mobilegate firmware, maho-pbx netdevancer vsg firmware +1 more +3 moreCross-site request forgery (CSRF) vulnerability in MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior...8.1 High
- ate-mahoroba maho-pbx netdevancer firmware, maho-pbx netdevancer mobilegate firmware, maho-pbx netdevancer vsg firmware +1 more +3 moreMAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni...7.2 High
- ate-mahoroba maho-pbx netdevancer firmware, maho-pbx netdevancer mobilegate firmware, maho-pbx netdevancer vsg firmware +1 more +3 moreMAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni...9.8 Critical
- daj m-filter, digital arts inc. m-filter ver.5 series and ver.4 series +1 morem-FILTER prior to Ver.5.70R01 (Ver.5 Series) and m-FILTER prior to Ver.4.87R04 (Ver.4 Series)...5.3 Medium
- daloradius, lirantal lirantal/daloradius +1 moreCross-site Scripting (XSS) - Reflected in lirantal/daloradius5.8 Medium
- daloradius, lirantal lirantal/daloradius +1 moreCross-site Scripting (XSS) - Reflected in lirantal/daloradius5.8 Medium
- red hat openshiftThe Birthday attack against 64-bit block ciphers flaw (CVE-2016-2183) was reported for the health...5.3 Medium
- nlnet labs krillTriggered crash on direct RRDP access7.5 High
- linux kernelA NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in...7.5 High
- microsoft libxpmA flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls...8.8 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreIn the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem...5.5 Medium
- totolink a7100ru firmwareTOTOlink A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection Vulnerability in the...9.8 Critical
- ruby-git, debian linux, fedoraproject fedora +2 moreCode injection in ruby git8.0 High
- arm bifrost gpu kernel driver, midgard gpu kernel driver, valhall gpu kernel driver +2 moreAn issue was discovered in the Arm Mali GPU Kernel Driver. There is a use-after-free. A non...8.8 High
- dlink dir-645 firmwareD-Link DIR 645A1 1.06B01_Beta01 was discovered to contain a stack overflow via the service=...9.8 Critical
- microsoft libxpmA flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the...7.5 High
- zyxel ax7501-b0 firmwareA vulnerability exists in the FTP server of the Zyxel AX7501-B0 firmware prior to V5.17(ABPC.3)C0...4.4 Medium
- zyxel ax7501-b0 firmwareA pair of spare WiFi credentials is stored in the configuration file of the Zyxel AX7501-B0...6.5 Medium
- microsoft libxpmA flaw was found in libXpm. When processing a file with width of 0 and a very large height, some...7.5 High
- ge ms 3000 firmwareAn issue was discovered on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0....9.8 Critical
- ge ms 3000 firmwareAn issue was discovered in FC46-WebBridge on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3...9.8 Critical
- ge ms 3000 firmwareAn issue was discovered in FC46-WebBridge on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3...7.5 High
- phoronix-media phoronix test suiteA XSS vulnerability was found in phoromatic_r_add_test_details.php in phoronix-test-suite.6.1 Medium
- lsoft listservThe LISTSERV 17 web interface allows remote attackers to conduct Insecure Direct Object...7.5 High
- lsoft listservA cross-site scripting (XSS) vulnerability in the LISTSERV 17 web interface allows remote...6.1 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 before 15...5.7 Medium
- Show moreLoading…