CVEs published in January 2023
4,262 vulnerabilities, 224 critical, 8 exploited.
- blazzdev rate my postRate my Post – WP Rating System < 3.3.9 - Contributor+ Stored XSS via Shortcode5.4 Medium
- unknown پلاگین پرداخت دلخواه, wp-master pardakht-delkhah +1 morePardakht Delkhah < 2.9.3 - Unauthenticated Stored XSS6.1 Medium
- unknown passster, passster project passter +1 morePassster < 3.5.5.9 - Protection Bypass & Arbitrary Post Access7.5 High
- unknown all-in-one security (aios), updraftplus all-in-one security +1 moreAll In One WP Security & Firewall < 5.1.3 - Configuration Leak5.3 Medium
- damian wp popupsWP Popups < 2.1.4.8 - Contributor+ Stored XSS5.4 Medium
- easy-appointments easy appointmentsEasy Appointments < 3.11.2 - Contributor+ Stored XSS in Shortcode5.4 Medium
- pickplugins product slider for woocommerceProduct Slider for WooCommerce < 2.6.4 - Contributor+ Stored XSS in Shortcode5.4 Medium
- mra13 wordpress simple shopping cart, tipsandtricks-hq wordpress simple paypal shopping cart +1 moreWordPress Simple Shopping Cart < 4.6.2 - Contributor+ Stored XSS via Shortcode5.4 Medium
- onlinestorekit oneclick chat to orderOneClick Chat to Order < 1.0.4.2 - Contributor+ Stored XSS via Shortcode5.4 Medium
- unknown login logout menuLogin Logout Menu < 1.4.0 - Contributor+ Stored XSS in Shortcode5.4 Medium
- agile logix store locator wordpress, agilelogix store locator +1 moreStore Locator WordPress < 1.4.9 - Contributor+ Stored XSS via Shortcode5.4 Medium
readstatOSS-FuzzHeap-buffer-overflow in sas_read2No scoreharfbuzzOSS-FuzzHeap-buffer-overflow in OT::Layout::GPOS_impl::PairSet<OT::Layout::MediumTypes>::applyNo score- trendnet tew-820ap firmware** UNSUPPORTED WHEN ASSIGNED ** TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware...8.8 High
- trendnet tew-820ap firmware** UNSUPPORTED WHEN ASSIGNED ** TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware...8.8 High
- trendnet tew-820ap firmware** UNSUPPORTED WHEN ASSIGNED ** TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware...8.8 High
- trendnet tew-820ap firmware** UNSUPPORTED WHEN ASSIGNED ** TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware...8.8 High
- trendnet tew-820ap firmware** UNSUPPORTED WHEN ASSIGNED ** TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware...8.8 High
- misp-project mispapp/View/AuthKeys/authkey_display.ctp in MISP through 2.4.167 has an XSS in authkey add via a...6.1 Medium
- signal signal-desktopSignal Desktop before 6.2.0 on Windows, Linux, and macOS allows an attacker to obtain potentially...3.3 Low
- signal signal-desktopSignal Desktop before 6.2.0 on Windows, Linux, and macOS allows an attacker to modify...7.8 High
- lexmark b2236 firmware, b2338 firmware, b2442 firmware +125 more +127 moreIn certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input...9.8 Critical
- zdirAn arbitrary file upload vulnerability in the /api/upload component of zdir v3.2.0 allows...8.8 High
- lexmark b2236 firmware, b2338 firmware, b2442 firmware +125 more +127 moreLexmark products through 2023-01-10 have Improper Control of Interaction Frequency.7.5 High
- izybat orange casiersIzyBat Orange casiers before 20221102_1 allows SQL Injection via a getCasier.php?taille= URI.4.3 Medium
- microsoft edge chromium, edge (chromium-based) extended stable +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability8.3 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability8.3 High
- microsoft edge (chromium-based), edge chromium, edge (chromium-based) extended stable +2 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability8.3 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Security Feature Bypass Vulnerability6.5 Medium
- healthchecks, healthchecks healthchecks/healthchecks +1 moreObservable Discrepancy in healthchecks/healthchecks5.3 Medium
- modoboa, modoboa modoboa/modoboa +1 moreCross-Site Request Forgery (CSRF) in modoboa/modoboa5.4 Medium
- linux kernelA NULL pointer dereference flaw was found in rawv6_push_pending_frames in net/ipv6/raw.c in the...5.5 Medium
- libtiff, debian linux +1 moreprocessCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer...5.5 Medium
- trendnet tew-820ap firmware** UNSUPPORTED WHEN ASSIGNED ** TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware...8.8 High
- sonic project sonicPath Traversal in github.com/go-sonic/sonic4.3 Medium
- correosA vulnerability in the descarga_etiqueta.php component of Correos Prestashop 1.7.x allows...7.5 High
- tp-link tapo c200 v1 firmwareAn access control issue on TP-LInk Tapo C200 V1 devices allows physically proximate attackers to...6.4 Medium
- javaweb blog project blogCross-Site Scripting (XSS) vulnerability found in Rawchen blog-ssm v1.0 allows attackers to...5.4 Medium
- oneidentity syslog-ng, syslog-ng store box +1 moreCVE-2022-38725 affecting package syslog-ng for versions less than 3.33.2-77.5 High
- edgenexus application delivery controllerA Cross-Site Request Forgery (CSRF) in the management portal of JetNexus/EdgeNexus ADC 4.2.8...8.8 High
- edgenexus application delivery controllerThe management portal component of JetNexus/EdgeNexus ADC 4.2.8 was discovered to contain a...8.8 High
- na, jedec universal flash storage +1 moreHost Boot ROM Code Vulnerability in Systems Implementing UFS Boot Feature8.7 High
- onlyoffice serverONLYOFFICE all versions as of 2021-11-08 is vulnerable to Server-Side Request Forgery (SSRF). The...8.1 High
- onlyoffice serverONLYOFFICE all versions as of 2021-11-08 is vulnerable to Improper Input Validation. A lack of...5.3 Medium
- onlyoffice serverONLYOFFICE all versions as of 2021-11-08 is affected by Incorrect Access Control. An...7.5 High
- onlyoffice serverONLYOFFICE all versions as of 2021-11-08 is vulnerable to Cross Site Scripting (XSS). The "macros...6.1 Medium
- onlyoffice serverONLYOFFICE all versions as of 2021-11-08 is affected by Incorrect Access Control. An attacker can...9.8 Critical
- onlyoffice serverONLYOFFICE all versions as of 2021-11-08 is affected by Incorrect Access Control. Signed document...7.5 High
- debian linux, linux kernel +1 moreUse after free in SNDRV_CTL_IOCTL_ELEM in Linux Kernel7.9 High
- rockstargames grand theft auto vGrand Theft Auto V for PC allows attackers to achieve partial remote code execution or modify...7.3 High
- Show moreLoading…