CVEs published in January 2023
4,262 vulnerabilities, 224 critical, 8 exploited.
- glpi-project glpiglpi contains XSS in RSS Description Link6.2 Medium
- glpi-project glpiglpi vulnerable to XSS on external links6.2 Medium
- glpi-project glpiglpi vulnerable to Unauthorized access to data export6.5 Medium
- openedx xblock-lti-consumerxblock-lti-consumer contain Missing Authorization in Grade Pass Back Implementation5.4 Medium
- vagrant.js project vagrant.jsCommand injection in vagrant.js7.4 High
- uflo project ufloRemote Code Execution in com.bstek.uflo:uflo-core9.8 Critical
- smartctl project smartctlCommand injection in smartctl7.4 High
- linuxfoundation onnxDirectory Traversal in onnx7.5 High
- serve-lite project serve-liteDirectory Traversal vulnerability in serve-lite7.5 High
- serve-lite project serve-liteCross-site Scripting (XSS) in serve-lite5.4 Medium
- tenable tenable.scA Server Side Request Forgery (SSRF) vulnerability exists in Tenable.sc due to improper...6.5 Medium
- tenable tenable.scA stored cross-site scripting (XSS) vulnerability exists in Tenable.sc due to improper validation...5.4 Medium
- tenable tenable.scA formula injection vulnerability exists in Tenable.sc due to improper validation of user...5.7 Medium
- bloofox bloofoxcmsbloofoxCMS v0.5.2.1 was discovered to contain an arbitrary file deletion vulnerability via the...6.5 Medium
- tenable tenable.scA LDAP injection vulnerability exists in Tenable.sc due to improper validation of user-supplied...6.5 Medium
- linux kernelA use-after-free flaw was found in io_uring/filetable.c in io_install_fixed_file in the io_uring...5.5 Medium
- linux kernelA use-after-free flaw was found in io_uring/poll.c in io_poll_check_events in the io_uring...4.7 Medium
- campbell scientific cr1000, cr300, cr3000 +7 more +9 moreDisclosure of Sensitive Information on Campbell Scientific Products9.1 Critical
- redhat openshiftgithub.com/openshift/apiserver-library-go Improper Input Validation vulnerability6.3 Medium
- solar-log 1000 firmware, 1000 pm\+ firmware, 1200 firmware +6 more +8 moreA backdoor in Solar-Log Gateway products allows remote access via web panel gaining super...9.8 Critical
- small crm project crmA cross-site scripting (XSS) vulnerability in the Create Ticket page of Small CRM v3.0 allows...5.4 Medium
- netgear ac1200 r6220 firmwareNETGEAR Nighthawk R6220 v1.1.0.112_1.0.1 was discovered to contain a cross-site scripting (XSS)...6.1 Medium
- tuzicmsTuzicms v2.0.6 was discovered to contain a SQL injection vulnerability via the component \App...9.8 Critical
- taogogo taocmsAn issue in the website background of taocms v3.0.2 allows attackers to execute a Server-Side...9.8 Critical
- online graduate tracer system project graduate tracer systemSourcecodester.com Online Graduate Tracer System V 1.0.0 is vulnerable to Cross Site Scripting ...6.1 Medium
- online graduate tracer system project graduate tracer systemA cross-site scripting (XSS) vulnerability in Online Graduate Tracer System v1.0.0 allows...6.1 Medium
- phpgurukul doctor appointment management systemphpgurukul Doctor Appointment Management System V 1.0.0 is vulnerable to Cross Site Scripting ...6.1 Medium
- softing uatoolkit embeddedIn Softing uaToolkit Embedded before 1.41, a malformed CreateMonitoredItems request may cause a...7.5 High
- phpgurukul doctor appointment management systemA cross-site scripting (XSS) vulnerability in Doctor Appointment Management System v1.0.0 allows...6.1 Medium
- softing uatoolkit embeddedIn Softing uaToolkit Embedded before 1.40.1, a malformed PubSub discovery announcement message...7.5 High
- aternityIncorrect access control in Aternity agent in Riverbed Aternity before 12.1.4.27 allows for local...7.8 High
- blog-ssm project blog-ssmFile Upload Vulnerability found in Rawchen Blog-ssm v1.0 allowing attackers to execute arbitrary...8.8 High
- isc bind, bind 9 +1 morenamed configured to answer from stale cache may terminate unexpectedly at recursive-clients soft quota7.5 High
- micro focus netiq imanager, netiq imanager +1 moreXSS vulnerabilities in iManager7.2 High
- isc bind, bind 9 +1 morenamed configured to answer from stale cache may terminate unexpectedly while processing RRSIG queries7.5 High
- vmware vrealize log insightVMware vRealize Log Insight contains an Information Disclosure Vulnerability. A malicious actor...5.3 Medium
- vmware vrealize log insightvRealize Log Insight contains a deserialization vulnerability. An unauthenticated malicious actor...7.5 High
- vmware vrealize log insightThe vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated,...9.8 Critical
- vmware vrealize log insightThe vRealize Log Insight contains a broken access control vulnerability. An unauthenticated...9.8 Critical
- isc bind, bind 9 +1 moreAn UPDATE message flood may cause named to exhaust all available memory7.5 High
- western digital my cloud, westerndigital my cloud dl2100 firmware, my cloud dl4100 firmware +6 more +8 moreWestern Digital My Cloud OS 5 arbitrary file read and write vulnerability via ftp6.7 Medium
- western digital my cloud, westerndigital my cloud dl2100 firmware, my cloud dl4100 firmware +6 more +8 moreWestern Digital My Cloud OS 5 devices Command Injection Vulnerability6.2 Medium
- uptimed project uptimeduptimed before 0.4.6-r1 on Gentoo allows local users (with access to the uptimed user account) to...7.8 High
- chinamobileltd gpn2.4p21-c-cn firmwareDirectory traversal vulnerability in ChinaMobile PLC Wireless Router model GPN2.4P21-C-CN running...9.1 Critical
- chinamobileltd gpn2.4p21-c-cn firmwareAn issue was discovered in the default configuration of ChinaMobile PLC Wireless Router model...9.1 Critical
- carel pcoweb card bios, pcoweb card boot, pcoweb card web +2 moreAn issue was discovered in Rehau devices that use a pCOWeb card BIOS v6.27, BOOT v5.00, web...7.5 High
- man-db project man-dbman-db before 2.8.5 on Gentoo allows local users (with access to the man user account) to gain...7.8 High
- baicells nova 227, nova 233, nova 246 +2 more +4 moreRemote Code Execution in Baicells RTS Platform8.1 High
- amazon opensearch, embysupport security +1 moreIssue with whitespace in JWT roles in OpenSearch4.7 Medium
- amazon opensearch, embysupport security +1 moreField-level security issue with .keyword fields in OpenSearch5.7 Medium
- Show moreLoading…