CVEs published in January 2023
4,262 vulnerabilities, 224 critical, 8 exploited.
- mozilla firefoxLogic bug in process allocation allowed to read arbitrary files6.5 Medium
- sudo project sudo, apple macos, debian linux +1 more +3 moreIn Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the...7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAdobe Acrobat Reader Creation of Temporary File in Directory with Incorrect Permissions Privilege escalation7.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAdobe Acrobat Reader Creation of Temporary File in Directory with Incorrect Permissions Privilege escalation7.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAdobe Acrobat Reader Stack-based Buffer Overflow Arbitrary code execution7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +2 more +4 moreAdobe Acrobat Reader DC resetForm Use-After-Free Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAdobe Acrobat Reader Improper Input Validation Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC Font Parsing Heap-based Buffer Overflow Arbitrary code execution7.8 High
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAdobe Acrobat Reader Stack-based Buffer Overflow Arbitrary code execution7.8 High
- adobe dimensionAdobe Dimension USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe dimensionAdobe Dimension OBJ File Parsing Use-After-Free Information Disclosure Vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability5.5 Medium
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Reader DC Font Parsing Integer Overflow Remote Code Execution Vulnerability7.8 High
- gpac, gpac gpac/gpac +1 moreUse After Free in gpac/gpac7.8 High
- orangescrumOrangeScrum version 2.0.11 allows an authenticated external attacker to execute arbitrary...8.8 High
- haproxy, fedoraproject extra packages for enterprise linux, fedora +6 more +8 moreAn uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash...6.5 Medium
- swift project async http client, asynchttpclient project async-http-client +1 moreAsync HTTP Client has CRLF Injection vulnerability in HTTP request headers7.5 High
- zoho manageengine, zohocorp manageengine access manager plus, manageengine ad360 +20 more +22 moreMultiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow...9.8 Critical
- openstack swift, debian linux +1 moreOpenStack Swift XML external entities (XXE) Injection6.5 Medium
- foxit pdf editor, pdf reader +1 moreFoxit PDF Reader and PDF Editor 11.2.1.53537 and earlier has an Out-of-Bounds Read vulnerability.6.5 Medium
- matrixsslAn issue in MatrixSSL 4.5.1-open and earlier leads to failure to securely check the SessionID...7.5 High
- opentext extended ecmA remote OScript execution issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19...8.8 High
- opentext extended ecmAn issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The Java...8.8 High
- opentext extended ecmAn issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The endpoint...8.8 High
- opentext extended ecmAn issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The action...7.5 High
- opentext extended ecmAn issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The endpoint...8.1 High
- opentext extended ecmAn issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The Common...8.8 High
- opentext extended ecmAn issue was discovered in OpenText Content Suite Platform 22.1 (16.2.19.1803). The request...8.8 High
- book store management system project store management systemBook Store Management System v1.0 was discovered to contain a cross-site scripting (XSS)...5.4 Medium
- rushstreetinteractive rushbetRushBet version 2022.23.1-b490616d allows a remote attacker to steal customer accounts via use of...5.4 Medium
- blogengine blogengine.netBlogEngine.NET v3.3.8.0 allows an attacker to create any folder with "files" prefix under ~...9.8 Critical
- ruckuswireless sz-100 firmware, sz-144 firmware, sz-300 firmware +1 more +3 moreDDOS reflection amplification vulnerability in eAut module of Ruckus Wireless SmartZone...7.5 High
- plex media serverPlex media server 1.21 and before is vulnerable to ddos reflection attack via plex service.7.5 High
- inxeduSQL Injection vulnerability in file /inxedu/demo_inxedu_open/src/main/resources/mybatis/inxedu...9.8 Critical
- okerthai g955v1 firmwareOS Command Injection vulnerability in OKER G955V1 v1.03.02.20161128, allows physical attackers to...6.8 Medium
- tynx wuerschtynx wuersch Store.class.php getByCustomQuery sql injection5.5 Medium
- nivit redportsnivit redports model.py sql injection5.5 Medium
- jopenid project jopenidmichaelliao jopenid OpenIdManager.java getAuthentication timing discrepancy2.6 Low
- ge proficy historianAn unauthorized user with network access and the decryption key could decrypt sensitive data,...7.5 High
- ge proficy historianAn unauthorized user could possibly delete any file on the system.7.5 High
- ge proficy historianAn unauthorized user could be able to read any file on the system, potentially exposing sensitive...7.5 High
- ge proficy historianAn unauthorized user could alter or write files with full control over the path and content of...7.5 High
- oracle solaris, oracle corporation solaris operating system +1 moreVulnerability in the Oracle Solaris product of Oracle Systems (component: NSSwitch). Supported...4.0 Medium
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...5.5 Medium
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...5.5 Medium
- Show moreLoading…