CVEs published in January 2023
4,262 vulnerabilities, 224 critical, 8 exploited.
- pdf-xchange editorThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- pdf-xchange editorThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- pdf-xchange editorThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- pdf-xchange editorThis vulnerability allows remote attackers to disclose sensitive information on affected...3.3 Low
- xenGuests can cause Xenstore crash via soft reset When a guest issues a "Soft Reset" (e.g. for...7.5 High
- pdf-xchange editorThis vulnerability allows remote attackers to disclose sensitive information on affected...3.3 Low
- pdf-xchange editorThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- pdf-xchange editorThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- pdf-xchange editorThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- pdf-xchange editorThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- pdf-xchange editorThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- pdf-xchange editorThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- pdf-xchange editorThis vulnerability allows remote attackers to disclose sensitive information on affected...3.3 Low
- pdf-xchange editorThis vulnerability allows remote attackers to disclose sensitive information on affected...3.3 Low
- pdf-xchange editorThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- pdf-xchange editorThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- centreonThis vulnerability allows remote attackers to escalate privileges on affected installations of...7.2 High
- windscribeThis vulnerability allows local attackers to escalate privileges on affected installations of...7.8 High
- bec technologies multiple routers, dlink dir-867 firmware, dir-878 firmware +1 more +3 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected...8.8 High
- d-link dir-2150, dlink dir-2150 firmware +1 moreThis vulnerability allows network-adjacent attackers to execute arbitrary commands on affected...8.8 High
- d-link dir-2150, dlink dir-2150 firmware +1 moreThis vulnerability allows network-adjacent attackers to execute arbitrary commands on affected...8.8 High
- d-link dir-2150, dlink dir-2150 firmware +1 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected D-Link...8.8 High
- d-link dir-2150, dlink dir-2150 firmware +1 moreThis vulnerability allows network-adjacent attackers to execute arbitrary code on affected D-Link...8.8 High
- qlik qlikviewQlik QlikView through 12.60.20100.0 creates a Temporary File in a Directory with Insecure...7.8 High
- qlik nprinting designerQlik NPrinting Designer through 21.14.3.0 creates a Temporary File in a Directory with Insecure...7.8 High
- ymfe yapiCross-site Scripting in yapi-vendor5.4 Medium
- instructure canvas learning management serviceInstructure Canvas LMS didn't properly deny access to locked/unpublished files when the...6.5 Medium
- phpmyadminphpmyadmin contains SQL Injection vulnerability9.8 Critical
- hfish project hfishAn issue was discovered in HFish 0.5.1. When a payload is inserted where the name is entered, XSS...6.1 Medium
- isc bind, bind 9 +1 morenamed may terminate unexpectedly when processing ECS options in repeated responses to iterative queries7.5 High
- suse rancher, wrangler +1 more[RANCHER] OS command injection in Rancher and Fleet7.5 High
- suse rancher, wrangler +1 moreRancher/Wrangler: Denial of service when processing Git credentials5.9 Medium
- argoproj argo-cd, argo cd +1 moreargo-cd Controller reconciles apps outside configured namespaces when sharding is enabled8.6 High
github.com/rancher/rancherGoRancher generated tokens not revoked after modifications made to authentication provider8.8 High- suse rancherRancher: Exposure of sensitive fields9.9 Critical
- suse rancherRancher: Command injection in Git package7.6 High
- suse rancherAuthenticated user can gain unauthorized shell pod and kubectl access in the local cluster7.4 High
- suse rancherRancher: Privilege escalation via promoted roles7.2 High
- suse rancherRancher: Non-random authentication token7.1 High
- ibm security verify governanceIBM Security Verify Governance, Identity Manager virtual appliance component information disclosure3.7 Low
- argoproj argo cd, argo-cd +1 moreJWT audience claim is not verified9.1 Critical
- ibm business automation workflow, business monitor +1 moreIBM Business Automation Workflow information disclosure7.5 High
- ibm websphere application serverIBM WebSphere Application Server information disclosure5.9 Medium
- dell cpg drivers, realtek high definition audio driver +1 moreAn improper access control vulnerability was identified in the Realtek audio driver. A local...7.3 High
libzipOSS-FuzzHeap-use-after-free in zip_source_openNo score- microsoft binwalkPath Traversal in binwalk7.8 High
- contiki-ngcontiki-ng BLE-L2CAP contains Improper size validation of L2CAP frames8.2 High
- glpi-project glpiglpi contains XSS Stored inside Standard Interface Help Link href attribute6.2 Medium
- glpi-project glpiglpi Unauthorized access to inventory files7.5 High
- glpi-project glpiglpi subject to Cross-site Scripting (XSS) - Reflected6.8 Medium
- Show moreLoading…