CVEs published in January 2023
4,262 vulnerabilities, 224 critical, 8 exploited.
- oracle weblogic serverVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...7.5 High
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported...4.9 Medium
- oracle weblogic serverVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...7.5 High
- oracle weblogic serverVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...7.5 High
- oracle weblogic serverVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...7.5 High
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported...4.9 Medium
- oracle graalvm, azul zulu, oracle jdk +2 more +4 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...5.3 Medium
- oracle self-service human resourcesVulnerability in the Oracle Self-Service Human Resources product of Oracle E-Business Suite ...4.3 Medium
- oracle bi publisher, oracle corporation bi publisher (formerly xml publisher) +1 moreVulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Security...8.8 High
- oracle peoplesoft enterprise cs academic advisementVulnerability in the PeopleSoft Enterprise CS Academic Advisement product of Oracle PeopleSoft ...5.3 Medium
- oracle graalvm, azul zulu, oracle communications unified assurance +3 more +5 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...5.3 Medium
- oracle database, oracle corporation database - enterprise edition +1 moreVulnerability in the Oracle Database RDBMS Security component of Oracle Database Server. ...6.3 Medium
- oracle hospitality reporting and analyticsVulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and...8.1 High
- oracle database, oracle corporation database - enterprise edition +1 moreVulnerability in the Oracle Database Data Redaction component of Oracle Database Server. ...4.3 Medium
- oracle hospitality reporting and analyticsVulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and...7.6 High
- oracle isupplier portalVulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component:...5.3 Medium
- oracle corporation communications brm - elastic charging engine, oracle communications billing and revenue management elastic charging engine, communications cloud native core binding support function +1 more +3 moreVulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle...4.4 Medium
- oracle java virtual machine, oracle corporation database - enterprise edition +1 moreVulnerability in the Java VM component of Oracle Database Server. Supported versions that are...4.3 Medium
- ge proficy historianCVE-2022-467329.8 Critical
- apersistence project apersistencePrivateSky apersistence mysqlUtils.js sql injection5.5 Medium
- aenbleidd findAenBleidd FiND my_validator.cpp init_result buffer overflow5.5 Medium
- debutsav project debutsavrisheesh debutsav sql injection5.5 Medium
- runzero platform, shopware +1 moreImproper Output Neutralization in Log Module in shopware2.7 Low
- runzero platform, shopware +1 moreInsufficient Session Expiration in Administration in shopware3.7 Low
- runzero platform, shopware +1 moreImproper Control of Generation of Code in Twig rendered views in shopware10.0 Critical
- runzero platform, shopware +1 moreImproper Input Validation of Clearance sale in cart5.3 Medium
- runzero platform, shopware +1 moreImproper Input Newsletter subscription option validation in shopware4.3 Medium
- git-for-windows gitGit clone remote code execution vulnerability in git-for-windows8.6 High
- cakephpDatabase Query::offset() and limit() vulnerable to SQL injection in cakephp9.8 Critical
- denoInteractive permission prompt spoofing in Deno7.5 High
- sylabs scs-library-client, singularity container services library +1 moreUser credentials leaked to third-party service via HTTP redirect in scs-library-client5.2 Medium
- libsisimai sisimaiSisimai string.rb to_plain redos3.5 Low
KernelLinuxusb: gadget: uvc: Prevent buffer overflow in setup handlerNo scoreKernelLinuxpstore: Avoid kcore oops by vmap()ing with VM_IOREMAPNo scoreKernelLinuxfs: don't audit the capability check in simple_xattr_list()No scoreKernelLinuxperf: Fix possible memleak in pmu_dev_alloc()No scoreKernelLinuxocfs2: fix memory leak in ocfs2_stack_glue_init()No scoreKernelLinuxMIPS: vpe-mt: fix possible memory leak while module exitingNo scoreKernelLinuxudf: Discard preallocation before extending file with a holeNo scoreKernelLinuxudf: Fix preallocation discarding at indirect extent boundaryNo scoreKernelLinuxPNP: fix name memory leak in pnp_alloc_dev()No scoreKernelLinuxMIPS: vpe-cmp: fix possible memory leak while module exitingNo scoreKernelLinuxudf: Fix extending file within last blockNo scoreKernelLinuxrapidio: fix possible name leaks when rio_add_device() failsNo scoreKernelLinuxrapidio: rio: fix possible name leak in rio_register_mport()No scoreKernelLinuxACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage()No scoreKernelLinuxx86/xen: Fix memory leak in xen_init_lock_cpu()No scoreKernelLinuxhfs: Fix OOB Write in hfs_asc2macNo scoreKernelLinuxrapidio: fix possible UAF when kfifo_alloc() failsNo scoreKernelLinuxrapidio: devices: fix missing put_device in mport_cdev_openNo score- Show moreLoading…