CVEs published in January 2023
4,262 vulnerabilities, 224 critical, 8 exploited.
- cisco identity services engine, identity services engine software +1 moreA vulnerability in the web-based management interface of Cisco Identity Services Engine could...4.3 Medium
drupal/corePackagistThe Media Library module does not properly check entity access in some circumstances. This may result in users with access to edit content seeing metadata about media items they are not authorized to…No scoredrupal/media_library_blockPackagistThe Media Library Block module allows you to render a media entity in a block. The module does not properly check media access in some circumstances. This may result in unauthorized users (including a…No scoredrupal/entity_browserPackagistThe Entity Browser module allows you to select entities from entity reference fields using a custom entity browser widget. Entity Browser does not properly check entity access in some circumstances. T…No score- alexred contentmapAlexRed contentmap contentmap.php Load sql injection5.5 Medium
- ale7714 sigeprosiale7714 sigeprosi sql injection5.5 Medium
- iamdroppy phoenixcfiamdroppy phoenixcf articles.cfm sql injection5.5 Medium
- linuxfoundation zowe api mediation layer, open mainframe project zowe +1 moreIt is possible to manipulate the JWT token without the knowledge of the JWT secret and...5.3 Medium
- ridhoq soundslikeridhoq soundslike songs.py get_song_relations sql injection5.5 Medium
- dell unisphere for powermax vapp, vasa provider, emc solutions enabler virtual appliance +6 more +8 moreDell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 9.2.3.x...6.5 Medium
- kunal nagar custom 404 proCustom 404 Pro <= 3.7.1 - Cross-Site Request Forgery4.3 Medium
libplistOSS-FuzzHeap-buffer-overflow in node_from_openstepNo score- dell command\|configure, command configure (dcc) +1 moreDell command configuration, version 4.8 and prior, contains improper folder permission when...7.3 High
- dell alienware m15 a6 firmware, alienware m15 ryzen edition r5 firmware, alienware m17 ryzen edition r5 firmware +13 more +15 moreDell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability. A...5.1 Medium
- dell idrac8 firmware, integrated dell remote access controller 8 +1 moreDell iDRAC8 version 2.83.83.83 and prior contain an improper input validation vulnerability in Racadm when the firmware lock-down configuration is set. A remote high privileged attacker could exploit…2.7 Low
- dell idrac9 firmware, integrated dell remote access controller 9 +1 moreDell iDRAC9 version 6.00.02.00 and prior contain an improper input validation vulnerability in...2.7 Low
- skyhigh security secure web gateway (swg), trellix skyhigh secure web gateway +1 moreXSS in Skyhigh Security SWG6.1 Medium
- geni portal, geni-portal +1 moreGENI Portal sliceresource.php no_invocation_id_error cross site scripting3.5 Low
- geni portal, geni-portal +1 moreGENI Portal error-text.php cross site scripting3.5 Low
- danynab movify-jdanynab movify-j ReviewServiceImpl.java getByMovieId sql injection5.5 Medium
- dell policy manager for secure connect gateway, secure connect gateway (scg) policy manager +1 moreDell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded...8.0 High
- dell policy manager for secure connect gateway, secure connect gateway (scg) policy manager +1 moreDell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a Hard-coded Password...8.4 High
- dell bios, edge gateway 3000 firmware, edge gateway 5000 firmware +1 more +3 moreDell BIOS contains an improper input validation vulnerability. A local authenticated malicious...7.5 High
- click-reminder project click-reminderlierdakil click-reminder BaseAction.php db_query sql injection5.5 Medium
- dell alienware m15 a6 firmware, alienware m17 r5 firmware, cpg bios +1 more +3 moreDell BIOS contains a stack based buffer overflow vulnerability. A local authenticated malicious...7.5 High
- dell bios, g5 se 5505 firmware, inspiron 27 7775 firmware +24 more +26 morePrior Dell BIOS versions contain an improper input validation vulnerability. A local...7.5 High
- dell bios, g5 se 5505 firmware, inspiron 27 7775 firmware +24 more +26 moreDell BIOS contains an improper input validation vulnerability. A local authenticated malicious...7.5 High
- dell emc metro node, dell emc metro node +1 moreDell EMC Metro node, Version(s) prior to 7.1, contain a Code Injection Vulnerability. An...8.8 High
- cookiejar project cookiejarcookiejar Regular Expression Denial of Service via Cookie.parse function5.3 Medium
- nodeserver project nodeserveryoungerheart nodeserver nodeserver.js path traversal5.5 Medium
- mel-spintax project mel-spintaxmelnaron mel-spintax spintax.js redos3.5 Low
- oznetmaster ssharpsmartthreadpooloznetmaster SSharpSmartThreadPool SmartThreadPool.cs race condition4.6 Medium
- sewio real-time location system studio, rtls studio +1 moreCVE-2022-479176.8 Medium
- sewio real-time location system studio, rtls studio +1 moreCVE-2022-479119.1 Critical
- sewio real-time location system studio, rtls studio +1 moreCVE-2022-473958.1 High
- sewio real-time location system studio, rtls studio +1 moreCVE-2022-467336.3 Medium
- sewio real-time location system studio, rtls studio +1 moreCVE-2022-4544410.0 Critical
- sewio real-time location system studio, rtls studio +1 moreCVE-2022-451278.1 High
- sewio real-time location system studio, rtls studio +1 moreCVE-2022-434839.1 Critical
- sewio real-time location system studio, rtls studio +1 moreCVE-2022-434555.5 Medium
- sewio real-time location system studio, rtls studio +1 moreCVE-2022-419899.0 Critical
- oracle mysql clusterVulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: Internal...6.3 Medium
- mozilla firefoxMemory safety bugs fixed in Firefox 1098.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreMemory safety bugs fixed in Firefox 109 and Firefox ESR 102.78.8 High
- mozilla firefoxCreation of duplicate SystemPrincipal from less secure contexts6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreCalls to console.log allowed bypassing Content Security Policy via format directive6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreContent Security Policy wasn't being correctly applied to WebSockets in WebWorkers6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreURL being dragged from cross-origin iframe into same tab triggers navigation6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMalicious command could be hidden in devtools output on Windows6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreArbitrary file read from GTK drag and drop on Linux6.5 Medium
- Show moreLoading…