CVEs published in January 2023
4,262 vulnerabilities, 224 critical, 8 exploited.
- siretta quartz-gold, quartz-gold firmware +1 moreSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing...7.2 High
- siretta quartz-gold, quartz-gold firmware +1 moreSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing...7.2 High
- siretta quartz-gold, quartz-gold firmware +1 moreSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing...7.2 High
- siretta quartz-gold, quartz-gold firmware +1 moreSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing...7.2 High
- siretta quartz-gold, quartz-gold firmware +1 moreSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing...7.2 High
- siretta quartz-gold, quartz-gold firmware +1 moreSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing...7.2 High
- siretta quartz-gold, quartz-gold firmware +1 moreSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing...7.2 High
- siretta quartz-gold, quartz-gold firmware +1 moreSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing...7.2 High
- siretta quartz-gold, quartz-gold firmware +1 moreSeveral stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing...7.2 High
- siretta quartz-gold, quartz-gold firmware +1 moreA directory traversal vulnerability exists in the m2m DELETE_FILE cmd functionality of Siretta...8.2 High
- siretta quartz-gold, quartz-gold firmware +1 moreAn OS command injection vulnerability exists in the httpd SNMP functionality of Siretta QUARTZ...7.2 High
- siretta quartz-gold, quartz-gold firmware +1 moreSeveral OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0...9.8 Critical
- siretta quartz-gold, quartz-gold firmware +1 moreSeveral OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0...9.8 Critical
- siretta quartz-gold, quartz-gold firmware +1 moreA heap-based buffer overflow vulnerability exists in the m2m DELETE_FILE cmd functionality of...9.8 Critical
- siretta quartz-gold, quartz-gold firmware +1 moreAn OS command injection vulnerability exists in the m2m DELETE_FILE cmd functionality of Siretta...9.8 Critical
- siretta quartz-gold, quartz-gold firmware +1 moreSeveral OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0...9.8 Critical
- siretta quartz-gold, quartz-gold firmware +1 moreSeveral OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0...9.8 Critical
- arista networks eosAll versions of Econolite EOS traffic control software are vulnerable to CWE-328: Use of Weak...9.8 Critical
- arista networks eosAll versions of Econolite EOS traffic control software are vulnerable to CWE-284: Improper Access...7.5 High
symfont/processPackagistsymfont/process typosquatting malware spoofs symfony/processNo scoredirectxtex_desktop_2019NuGet,directxtex_desktop_win10NuGet,directxtex_uwpNuGet +2 moreSecurity bug in ConvertToSinglePlane when used with untrusted content from the DDS loader6.1 Medium- openmage magento, magento-lts +1 moreMagneto-lts vulnerable to Cross-Site Request Forgery4.2 Medium
- sourcecodester online tours & travels management system, online tours \& travels management system project tours \& travels management system +1 moreSourceCodester Online Tours & Travels Management System Parameter forget_password.php sql injection5.5 Medium
- sourcecodester online tours & travels management system, online tours \& travels management system project tours \& travels management system +1 moreSourceCodester Online Tours & Travels Management System Parameter forget_password.php sql injection5.5 Medium
- isoftforce dreamer cmsisoftforce Dreamer CMS cross site scripting3.5 Low
- pi-hole adminlte, web interface +1 moreImproper session handling of "Remember me for 7 days" functionality8.8 High
- discourseDiscourse subject to Allocation of Resources Without Limits or Throttling6.5 Medium
- discourseDiscourse vulnerable to Cross-site Scripting in local oneboxes8.8 High
- tenda ac18 firmwareTenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/fromSetWirelessRepeat.9.8 Critical
- tenda ac18 firmwareTenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/FUN_0007343c.9.8 Critical
- tenda ac18 firmwareTenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/add_white_node.9.8 Critical
- tenda ac18 firmwareTenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/formWifiBasicSet.9.8 Critical
- tenda ac18 firmwareTenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/initIpAddrInfo.9.8 Critical
- tenda ac18 firmwareTenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/FUN_000c2318.9.8 Critical
- hughes hn7000s firmware, hn9460 firmware, hx200 firmware +2 more +4 moreCross Site Scripting (XSS) vulnerability in Hughes Network Systems Router Terminal for HX200 v8.3...6.1 Medium
- modoboa, modoboa modoboa/modoboa +1 moreCross-site Scripting (XSS) - Stored in modoboa/modoboa7.1 High
- vim, vim vim/vim +1 moreDivide By Zero in vim/vim7.3 High
- pyload, pyload pyload/pyload, pyload-ng project pyload-ng +2 moreImproper Certificate Validation in pyload/pyload7.4 High
- btcpayserver btcpayserver/btcpayserver, btcpay server +1 moreImproper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserver5.3 Medium
- pyload, pyload pyload/pyload, pyload-ng project pyload-ng +2 moreCross-site Scripting (XSS) - Stored in pyload/pyload9.6 Critical
- modoboa, modoboa modoboa/modoboa +1 moreCross-site Scripting (XSS) - Stored in modoboa/modoboa7.1 High
- bumsys project bumsys, unilogies unilogies/bumsys +1 moreUnrestricted Upload of File with Dangerous Type in unilogies/bumsys7.6 High
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in Intents in Google Chrome on Android prior to 109.0.5414.119...6.5 Medium
- openstack cinder, glance, nova +1 more +3 moreOpenStack Cinder, glance, and Nova vulnerable to Path Traversal5.7 Medium
- revenue collection system project collection systemAn access control issue in Revenue Collection System v1.0 allows unauthenticated attackers to...9.8 Critical
- revenue collection system project collection systemRevenue Collection System v1.0 was discovered to contain a SQL injection vulnerability at step1.php.9.8 Critical
- adguardImproper input validation in driver adgnetworkwfpdrv.sys in Adguard For Windows x86 up to version...7.8 High
- sscms siteserver cmsSiteServer CMS 7.1.3 has a SQL injection vulnerability the background.9.8 Critical
- dentsplysirona sidexisDentsply Sirona Sidexis <= 4.3 is vulnerable to Unquoted Service Path.7.8 High
- dentsplysirona sidexisDentsply Sirona Sidexis <= 4.3 is vulnerable to Incorrect Access Control.7.8 High
- Show moreLoading…