CVEs published in January 2023
4,262 vulnerabilities, 224 critical, 8 exploited.
- book store management system project store management systemBook Store Management System v1.0 was discovered to contain a cross-site scripting (XSS)...6.1 Medium
- kalkun project kalkunCross Site Scripting (XSS) vulnerability in Kalkun 0.8.0 via username input in file User_model.php.6.1 Medium
- inventory system project systemCross Site Scripting (XSS) vulnerability in InventorySystem thru commit...6.1 Medium
- classroombookingsCross Site Scripting (XSS) vulnerability in craigrodway classroombookings 2.6.4 allows attackers...6.1 Medium
- ecommerce-codeigniter-bootstrap project ecommerce-codeigniter-bootstrapCross Site Scripting (XSS) vulnerability in Ecommerce-CodeIgniter-Bootstrap thru commit...6.1 Medium
- zohocorp manageengine servicedesk plus mspZoho ManageEngine ServiceDesk Plus MSP through 13003 is vulnerable to authentication bypass due...9.1 Critical
- mediawikiAn issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39...5.3 Medium
- mediawikiAn issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39...5.4 Medium
- contec conprosys hmi system, contec co., ltd. conprosys hmi system (chs) +1 moreCross-site scripting vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a...5.4 Medium
- contec conprosys hmi system, contec co., ltd. conprosys hmi system (chs) +1 moreImproper access control vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows...7.5 High
- contec conprosys hmi system, contec co., ltd. conprosys hmi system (chs) +1 moreUse of password hash instead of password for authentication vulnerability in CONPROSYS HMI System...5.3 Medium
- contec conprosys hmi system, contec co., ltd. conprosys hmi system (chs) +1 moreUse of default credentials vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier...7.5 High
- builderio builderio/qwik, qwik +1 moreCross-site Scripting (XSS) - Generic in builderio/qwik6.1 Medium
- tenable nessusA privilege escalation vulnerability was identified in Nessus versions 8.10.1 through 8.15.8 and...8.8 High
- owasp modsecurity, debian linux +1 moreIn ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed...7.5 High
- remoteclinic remote clinicSQL Injection vulnerability in RemoteClinic 2.0 allows attackers to execute arbitrary commands...9.8 Critical
- totolink a7100ru firmwareTOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection...9.8 Critical
- totolink a7100ru firmwareTOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection...9.8 Critical
- totolink a7100ru firmwareTOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection...9.8 Critical
- totolink a7100ru firmwareTOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection...9.8 Critical
- totolink a7100ru firmwareTOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection...9.8 Critical
- totolink a7100ru firmwareTOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection...9.8 Critical
- hospital management system project management systemSQL Injection vulnerability in kishan0725 Hospital Management System thru commit...9.8 Critical
- uber krakenKraken has arbitrary file read vulnerability via component testfs7.5 High
- yeastar n412 firmware, n824 firmware +1 moreIn Yeastar N412 and N824 Configuration Panel 42.x and 45.x, an unauthenticated attacker can...7.5 High
- vimA null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11...7.8 High
- xiph opusfile, fedoraproject fedora +1 moreA null pointer dereference issue was discovered in functions op_get_data and op_open1 in opusfile...7.8 High
- mariadbMariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for...6.5 Medium
- solarwinds dynamipsUse of uninitialized variable in function gen_eth_recv in GNS3 dynamips 0.2.21.7.5 High
- assimpAn issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser:...8.8 High
- left project leftCross site scripting (XSS) vulnerability in Hundredrabbits Left 7.1.5 for MacOS allows attackers...6.1 Medium
- left project leftCross site scripting (XSS) vulnerability in Hundredrabbits Left 7.1.5 for MacOS allows attackers...6.1 Medium
- eyoucmsEyouCMS <= 1.6.0 was discovered a reflected-XSS in the FileManager component in GET parameter ...5.4 Medium
- eyoucmsEyouCMS <= 1.6.0 was discovered a reflected-XSS in the article attribute editor component in POST...6.1 Medium
- eyoucmsEyouCMS <= 1.6.0 was discovered a reflected-XSS in article type editor component in POST value ...6.1 Medium
- eyoucmsEyouCMS <= 1.6.0 was discovered a reflected-XSS in FileManager component in GET value "activepath...6.1 Medium
- eyoucmsEyouCMS <= 1.6.0 was discovered a reflected-XSS in the article publish component in cookie ...6.1 Medium
- eyoucmsEyouCMS <= 1.6.0 was discovered a reflected-XSS in the article publish component in cookie ...6.1 Medium
- bitrix24Insufficiently Protected Credentials in the AD/LDAP server settings in 1C-Bitrix Bitrix24 through...4.9 Medium
- sinilink xy-wft1 firmwareThe Sinilink XY-WFT1 WiFi Remote Thermostat, running firmware 1.3.6, allows an attacker to bypass...5.9 Medium
- reqlogicMultiple cross-site scripting (XSS) vulnerabilities in ReQlogic v11.3 allow attackers to execute...6.1 Medium
- mediawikiAn issue was discovered in the CheckUser extension for MediaWiki through 1.39.x. Various...5.3 Medium
- swift project foundation, apple swift foundation +1 moreA program using FoundationNetworking in swift-corelibs-foundation is potentially vulnerable to CRLF ( ) injection in URLRequest headers. In this vulnerability, a client can insert one or several CRLF…8.8 High
- solarwinds database performance analyzer (dpa), database performance analyzer +1 moreSensitive Information Disclosure Vulnerability7.5 High
- solarwinds database performance analyzer (dpa), database performance analyzer +1 moreReflected Cross-Site Scripting Vulnerability5.4 Medium
- broadcom symantec endpoint protection, symantec endpoint protection +1 moreSymantec Endpoint Protection, prior to 14.3 RU6 (14.3.9210.6000), may be susceptible to a...7.8 High
- reprisesoftware reprise license managerDirectory traversal vulnerability in Reprise License Manager (RLM) web interface before 14.2BL4...8.1 High
- reprisesoftware reprise license managerCRLF vulnerability in Reprise License Manager (RLM) web interface through 14.2BL4 in the password...6.5 Medium
- reprisesoftware reprise license managerAn SSRF issue was discovered in Reprise License Manager (RLM) web interface through 14.2BL4 that...6.5 Medium
- cuppacmsSession fixation vulnerability in CuppaCMS thru commit 4c9b742b23b924cf4c1f943f48b278e06a17e297...8.8 High
- Show moreLoading…