CVEs published in January 2023
4,262 vulnerabilities, 224 critical, 8 exploited.
- jenkins kubernetes credentials provider, jenkins project kubernetes credentials provider plugin +1 moreExposure of system-scoped Kubernetes credentials in Jenkins Kubernetes Credentials Provider Plugin6.5 Medium
- jenkins openid connect authentication, jenkins project openid connect authentication plugin +1 moreSession fixation vulnerability in Jenkins OpenId Connect Authentication Plugin8.8 High
- jenkins gerrit trigger, jenkins project gerrit trigger plugin +1 moreCross-site request forgery in Jenkins Gerrit Trigger Plugin6.5 Medium
- jenkins script security, jenkins project script security plugin +1 moreSandbox bypass in Jenkins Script Security Plugin8.8 High
- spipSPIP v4.1.5 and earlier was discovered to contain a SQL injection vulnerability via the _oups...9.8 Critical
- broadcom symantec identity governance and administration, symantec identity manager +1 moreAbility to enumerate the Oracle LDAP attributes for the current user by modifying the query used...6.1 Medium
- broadcom symantec identity governance and administration, symantec identity manager +1 moreUser’s supplied input (usually a CRLF sequence) can be used to split a returning response into...6.1 Medium
- broadcom symantec identity governance and administration, symantec identity manager +1 moreAn authenticated user can supply malicious HTML and JavaScript code that will be executed in the...5.4 Medium
- amano xofficeAmano Xoffice parking solutions 7.1.3879 is vulnerable to SQL Injection.9.8 Critical
- google androidIn several functions of SettingsState.java, there is a possible system crash loop due to resource...5.5 Medium
- google chromeUse after free in GuestView in Google Chrome prior to 109.0.5414.119 allowed an attacker who...8.8 High
- google chromeType Confusion in ServiceWorker API in Google Chrome prior to 109.0.5414.119 allowed a remote...8.8 High
- google chromeUse after free in WebRTC in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to...8.8 High
- google chromeUse after free in WebTransport in Google Chrome prior to 109.0.5414.119 allowed a remote attacker...8.8 High
- matbao wp helper premiumThe WP Helper Lite WordPress plugin, in versions < 4.3, returns all GET parameters unsanitized in...6.1 Medium
- deltaww infrasuite device masterA privilege escalation vulnerability exists in Delta Electronics InfraSuite Device Master 00.00...8.8 High
- wiresharkMemory leak in the NFS dissector in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows...6.3 Medium
- wiresharkGNW dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service...6.3 Medium
- wiresharkiSCSI dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of...6.3 Medium
- wiresharkCrash in the EAP dissector in Wireshark 4.0.0 to 4.0.2 allows denial of service via packet...6.3 Medium
- wiresharkDissection engine bug in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of...6.3 Medium
- wireshark, debian linux +1 moreTIPC dissector crash in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows denial of service...6.3 Medium
- wiresharkExcessive loops in multiple dissectors in Wireshark 4.0.0 to 4.0.2 and 3.6.0 to 3.6.10 and allows...6.3 Medium
- softperfect networxSoftPerfect NetWorx 7.1.1 on Windows allows an attacker to execute a malicious binary with...8.8 High
- sengled es21-n1eaw firmwareA vulnerability in Sengled Smart bulb 0x0000024 allows attackers to arbitrarily perform a factory...7.5 High
- mingsoft mcmsArbitrary file write in net.mingsoft:ms-mcms8.8 High
- askey rtf3505vw-n1 firmwareAn issue in ASKEY router RTF3505VW-N1 BR_SV_g000_R3505VMN1001_s32_7 allows attackers to escalate...7.8 High
- sleuthkit the sleuth kitOS Command injection vulnerability in sleuthkit fls tool 4.11.1 allows attackers to execute...7.8 High
- id software project and consultancy services b2b customer ordering system, idyazilim b2b dealer order system +1 moreReflected XSS B2B Dealer Ordering System5.4 Medium
- gitlabAn issue has been discovered in GitLab EE affecting all versions starting from 15.6 before 15.6.1...5.7 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 9.3 before 15.4.6,...5.5 Medium
- javaweb blog project blogAn issue discovered in Rawchen blog-ssm v1.0 allows remote attacker to escalate privileges and...9.8 Critical
- blog-ssm project blog-ssmAn issue was discovered in Rawchen blog-ssm v1.0 allows an attacker to obtain sensitive user...6.5 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 9.3 before 15.4.6,...5.5 Medium
- elastic endpoint securityAn issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which...7.8 High
- elastic endgame, endpoint security, endpoint security and elastic endgame security +2 moreAn issue was discovered in the quarantine feature of Elastic Endpoint Security and Elastic...7.8 High
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 15.4 prior to 15.4.4,...6.5 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 prior to...6.5 Medium
- gitlabA cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions from 13.5...9.3 Critical
- gitlabAn improper access control issue in GitLab CE/EE affecting all versions from 11.3 prior to 15.3.5...5.3 Medium
- gitlabAn issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.4.6,...4.3 Medium
- citirx citrix application delivery controller (citrix adc) and citrix gateway, citrix application delivery controller, gateway +2 moreUnauthenticated denial of service7.5 High
- citirx citrix application delivery controller (citrix adc) and citrix gateway, citrix application delivery controller, gateway +2 moreAuthenticated denial of service6.5 Medium
- micro focus netiq identity manager, netiq identity manager +1 moreFile existence disclosue vulnerability in IDM plugin1.8 Low
- google androidThe logs of sensitive information (PII) or hardware identifier should only be printed in Android ...5.5 Medium
- google androidIn onCreate of MasterClearConfirmFragment.java, there is a possible factory reset due to a...5.5 Medium
- google androidIn Car Settings app, the toggle button in Modify system settings is vulnerable to tapjacking...4.7 Medium
- google androidIn ApplicationsDetailsActivity of AndroidManifest.xml, there is a possible DoS due to a...5.5 Medium
- arista eosFor certain systems running EOS, a Precision Time Protocol (PTP) packet of a management/signaling message with an invalid Type-Length-Value (TLV) causes the PTP agent to restart. Repeated restarts of…5.3 Medium
- github cmark-gfmInefficient Quadratic complexity bug in handle_pointy_brace may lead to a denial of service3.5 Low
- Show moreLoading…