CVEs published in January 2023
4,262 vulnerabilities, 224 critical, 8 exploited.
- hometory mangboard wp basic, mangboard wp +1 moreSQL-Injection vulnerability caused by the lack of verification of input values for the table name...8.8 High
- xpressengine, xehub xe3 xpresesengine +1 moreXpressEngine file upload vulnerability8.8 High
- oretnom23 online food ordering systemMultiple SQL Injection vulnerabilies in tourist5 Online-food-ordering-system 1.0.9.8 Critical
- cybereason endpoint detection and responseCybereason EDR version 19.1.282 and above, 19.2.182 and above, 20.1.343 and above, and 20.2.X and...7.8 High
- electerm project electermelecterm allows unauthorized users to execute arbitrary commands9.8 Critical
- ruckuswireless r310 firmware, r500 firmware, r600 firmware +11 more +13 moreIn Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5...7.5 High
- ruckuswireless r310 firmware, r500 firmware, r600 firmware +11 more +13 moreIn Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5...6.5 Medium
- ruckuswireless r310 firmware, r500 firmware, r600 firmware +11 more +13 moreIn Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5...7.5 High
- ruckuswireless r310 firmware, r500 firmware, r600 firmware +11 more +13 moreIn Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5...7.5 High
- ruckuswireless r310 firmware, r500 firmware, r600 firmware +11 more +13 moreIn Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5...9.8 Critical
- ruckuswireless r310 firmware, r500 firmware, r600 firmware +11 more +13 moreIn Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5...9.1 Critical
- ruckuswireless r310 firmware, r500 firmware, r600 firmware +11 more +13 moreIn Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5...7.5 High
- ruckuswireless r310 firmware, r500 firmware, r600 firmware +11 more +13 moreIn Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5...7.5 High
- ruckuswireless r310 firmware, r500 firmware, r600 firmware +11 more +13 moreIn Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5...9.8 Critical
- ruckuswireless r310 firmware, r500 firmware, r600 firmware +11 more +13 moreIn Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5...9.8 Critical
- inxeduSQL Injection vulnerability in inxedu 2.0.6 allows attackers to execute arbitrary commands via...9.8 Critical
- tpm2-software tpm2-tss, tpm2 software stack project software stack +1 moreBuffer Overlow in TSS2_RC_Decode in tpm2-tss6.4 Medium
- freeswitch sofia-sipheap-over-flow in stun_parse_attribute in sofia-sip9.8 Critical
- hcl software bigfix mobileHCL BigFix Mobile / Modern Client Management Server passwords are susceptible to a brute-force attack5.4 Medium
- jruby jruby-openssljruby-openssl gem for JRuby fails to do proper certificate validation7.5 High
- ghostAn insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation...9.0 Critical
- ghostAn insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation...9.0 Critical
- ghostAn insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation...9.0 Critical
- ghostAn insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation...9.0 Critical
- ibm spectrum virtualizeIBM Spectrum Virtualize information disclosure5.9 Medium
- 3com marketing – asesor de cookies para normativa española, 3commarketing 3com-asesor-de-cookies +1 moreWordPress 3com – Asesor de Cookies para normativa española Plugin <= 3.4.3 is vulnerable to Cross Site Scripting (XSS)4.8 Medium
gitUbuntugit regressionNo score- e-dynamics events made easyEvents Made Easy <= 2.3.16 - Missing Authorization5.4 Medium
- warfareplugins social warfare, social sharing plugin – social warfare +1 moreSocial Warfare <= 4.3.1 - Cross-Site Request Forgery5.4 Medium
- warfareplugins social warfare, social sharing plugin – social warfare +1 moreSocial Warfare <= 4.3.0 - Missing Authorization5.4 Medium
wolfsslOSS-FuzzHeap-buffer-overflow in wc_AesFeedbackEncryptNo scorehunspellOSS-FuzzStack-buffer-overflow in AffixMgr::compound_checkNo scorewolfsslOSS-FuzzHeap-buffer-overflow in wc_AesCbcEncryptNo score- wago cc100 firmware, edge controller firmware, pfc100 firmware +11 more +13 moreWAGO: Missing authentication for config export functionality in multiple products5.9 Medium
- dell cloud mobility for dell emc storage, cloud mobility for dell storage +1 moreCloud Mobility for Dell EMC Storage, versions 1.3.0.X and below contains an Improper Check for...7.0 High
- gitter-badger ezpublish-modern-legacy, gitter ez publish modern legacy +1 moregitter-badger ezpublish-modern-legacy forgotpassword.php password recovery2.6 Low
- anant google-enterprise-connector-dctmAnant Labs google-enterprise-connector-dctm sql injection5.5 Medium
- copperwall twidditcopperwall Twiddit index.php sql injection6.3 Medium
- 2moons project 2moonsoktora24 2moons sql injection5.5 Medium
- mycms project mycmsMyCMS Visitors Module view.php build_view cross site scripting3.5 Low
- bastianallgeier kirby webmentions plugin, getkirby webmentions +1 morebastianallgeier Kirby Webmentions Plugin injection5.6 Medium
- cash-machine project cash-machineviakondratiuk cash-machine machine.py update_failed_attempts sql injection5.5 Medium
- cisco roomos software, roomos, telepresence endpoint software (tc/ce) +2 more +4 moreA vulnerability in the CLI of Cisco TelePresence CE and RoomOS Software could allow an...4.4 Medium
- cisco roomos software, roomos, telepresence endpoint software (tc/ce) +1 more +3 moreA vulnerability in Cisco TelePresence CE and RoomOS Software could allow an authenticated, local...4.4 Medium
- cisco small business rv series router firmware, rv340 firmware, rv340w firmware +2 more +4 moreA vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W,...4.7 Medium
- cisco small business rv series router firmware, rv160 vpn router firmware, rv160w wireless-ac vpn router firmware +2 more +4 moreA vulnerability in the web-based management interface of Cisco Small Business RV160 and RV260...4.9 Medium
- cisco unified intelligence center, packaged contact center enterprise, unified contact center enterprise +1 more +3 moreA vulnerability in the web-based management interface of Cisco Unified Intelligence Center could...6.1 Medium
- cisco broadworks application delivery platform, broadworks application server, broadworks xtended services platform +1 more +3 moreA vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery...6.1 Medium
- cisco network services orchestratorA vulnerability in the NETCONF service of Cisco Network Services Orchestrator (NSO) could allow...5.5 Medium
- cisco cx cloud agentA vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to...6.7 Medium
- Show moreLoading…