CVEs published in January 2023
4,262 vulnerabilities, 224 critical, 8 exploited.
- cisco cx cloud agentA vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to...6.7 Medium
- cisco webex room phone, sip ip phone software, webex room phone firmware +1 more +3 moreA vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco Webex Room Phone and...6.5 Medium
- cisco session initiation protocol (sip) software, ip phone 7800 firmware, ip phone 7811 firmware +20 more +22 moreA vulnerability in the web-based management interface of Cisco IP Phone 7800 and 8800 Series...8.6 High
- cisco broadworks xtended services platform, broadworks, broadworks application delivery platform device management +2 moreA vulnerability in the Device Management Servlet application of Cisco BroadWorks Application...8.6 High
- cisco industrial network directorA vulnerability in the monitoring application of Cisco Industrial Network Director could allow an...8.8 High
- cisco industrial network directorA vulnerability in Cisco Industrial Network Director could allow an authenticated, remote...5.4 Medium
- cisco small business rv series router firmware, rv016 firmware, rv042 firmware +2 more +4 moreA vulnerability in the web-based management interface of Cisco Small Business RV042 Series...9.0 Critical
- cisco small business rv series router firmware, rv016 firmware, rv042 firmware +2 more +4 moreA vulnerability in the web-based management interface of Cisco Small Business Routers RV042...6.5 Medium
- cisco asyncos, email security appliance (esa) +1 moreA vulnerability in the URL filtering mechanism of Cisco AsyncOS Software for Cisco Email Security...0.0 None
- cisco unified communications managerA vulnerability in the web-based management interface of Cisco Unified Communications Manager ...8.1 High
- modoboa, modoboa modoboa/modoboa +1 moreCross-Site Request Forgery (CSRF) in modoboa/modoboa5.4 Medium
- modoboa, modoboa modoboa/modoboa +1 moreCross-Site Request Forgery (CSRF) in modoboa/modoboa5.4 Medium
- zephyrproject zephyrDoS: Invalid Initialization in le_read_buffer_size_complete9.6 Critical
- zephyrproject zephyrBuffer Overreads in Bluetooth HCI6.8 Medium
- sonicwall sma1000 firmware, sma1000 +1 morePre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows...7.5 High
- popojicmsPopojiCMS v2.0.1 backend plugin function has a file upload vulnerability.8.8 High
- easycorp zentaoZenTao 16.4 to 18.0.beta1 is vulnerable to SQL injection. After logging in with any user, you can...8.8 High
- seltmann-webdesign content management systemSeltmann GmbH Content Management System 6 is vulnerable to SQL Injection via /index.php.9.8 Critical
- jeecg bootJeecg-boot is vulnerable to SQL injection9.8 Critical
- nexusphpWeak access control in NexusPHP before 1.7.33 allows a remote authenticated user to edit any post...4.3 Medium
- nexusphpA persistent cross-site scripting (XSS) vulnerability in NexusPHP before 1.7.33 allows remote...5.4 Medium
- nexusphpMultiple reflective cross-site scripting (XSS) vulnerabilities in NexusPHP before 1.7.33 allow...6.1 Medium
- nexusphpMultiple SQL injection vulnerabilities in NexusPHP before 1.7.33 allow remote attackers to...9.8 Critical
- dlink dir-859 a1 firmwareD-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the...9.8 Critical
- zephyrproject zephyrBluetooth HCI Error Handling Double Free9.8 Critical
- notepad-plus-plus notepad\+\+Buffer overflow in function Notepad_plus::addHotSpot in Notepad++ v8.4.3 and earlier allows...6.5 Medium
- tp-link tl-wdr7660 firmwareAn issue was discovered in function httpProcDataSrv in TL-WDR7660 2.0.30 that allows attackers to...8.0 High
- fuji electric tellus lite v-simulatorFuji Electric Tellus Lite V-Simulator versions 4.0.12.0 and prior are vulnerable to a stack-based...7.8 High
- trendmicro maximum security 2022, trend micro, inc. micro maxium security (consumer) +1 moreA vulnerability exists in Trend Micro Maximum Security 2022 (17.7) wherein a low-privileged user...7.0 High
- rapid7 velociraptorRapid7 Velociraptor directory traversal in client ID parameter4.3 Medium
- frioux ptomefrioux ptome sql injection5.5 Medium
- rapid7 velociraptorInsufficient permission check in the VQL copy() function8.8 High
- ibm robotic process automation, robotic process automation as a service, robotic process automation for cloud pak +2 moreIBM Robotic Process Automation information disclosure5.9 Medium
- ibm robotic process automation for cloud pak, robotic process automation, robotic process automation as a service +2 moreIBM Robotic Process Automation for Cloud Pak cross-site scripting4.6 Medium
- ibm robotic process automation for cloud pakIBM Robotic Process Automation for Cloud Pak insufficient permission settings4.0 Medium
- rackDenial of Service Vulnerability in Rack Content-Disposition parsing7.5 High
- rails https://github.com/rails/rails, rubyonrails rails +1 moreReDoS based DoS vulnerability in Action Dispatch7.5 High
- activesupport project activesupport, rails https://github.com/rails/rails +1 moreReDoS based DoS vulnerability in Active Support's underscore7.5 High
- rubyonrails rails, actionpack project actionpack, rails https://github.com/rails/rails +2 moreOpen Redirect Vulnerability in Action Pack6.1 Medium
- activerecord project activerecord, rails https://github.com/rails/rails +1 moreDenial of Service Vulnerability in ActiveRecord's PostgreSQL adapter7.5 High
- debian linux, rails https://github.com/rails/rails, rubyonrails rails +2 moreReDoS based DoS vulnerability in Action Dispatch7.5 High
- activerecord project activerecord, rails https://github.com/rails/rails +1 moreSQL Injection Vulnerability via ActiveRecord comments8.8 High
- rackDenial of service via header parsing in Rack7.5 High
- rackDenial of service via multipart parsing in Rack7.5 High
- ibm aix, vios +1 moreIBM AIX denial of service6.2 Medium
- rubyonrails globalidReDoS based DoS vulnerability in GlobalID7.5 High
drupal/media_library_form_elementPackagistThis module enables you to use the media library in custom forms without the Media Library Widget. The module does not properly check entity access in some circumstances. This may result in users with…No score- cisco identity services engine, identity services engine software +1 moreA vulnerability in the web-based management interface of Cisco Identity Services Engine could...4.8 Medium
- cisco identity services engine, identity services engine software +1 moreA vulnerability in the web-based management interface of Cisco Identity Services Engine could...6.3 Medium
- cisco identity services engine, identity services engine software +1 moreA vulnerability in the web-based management interface of Cisco Identity Services Engine could...5.4 Medium
- Show moreLoading…