CVEs published in January 2023
4,262 vulnerabilities, 224 critical, 8 exploited.
- discourseDiscourse vulnerable to Allocation of Resources Without Limits via Chat drafts4.3 Medium
- havenweb havenHaven 5d15944 allows Server-Side Request Forgery (SSRF) via the feed[url]= Feeds functionality....5.0 Medium
- discourseDiscourse restricted tag routes leak topic information5.3 Medium
- discourseDiscourse membership requests lack character limit3.5 Low
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-19515: Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-19516: Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreZDI-CAN-19517: Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 High
- joraniJorani v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Acronym...6.1 Medium
- ayacms project ayacmsAyaCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the...7.2 High
- dlink dir 878 firmwareD-Link DIR_878_FW1.30B08 was discovered to contain a command injection vulnerability via the...9.8 Critical
- dlink dir 878 firmwareD-Link DIR_878_FW1.30B08 was discovered to contain a command injection vulnerability via the...9.8 Critical
- phicomm k2 firmwarePhicomm K2 v22.6.534.263 was discovered to store the root and admin passwords in plaintext.7.5 High
- phicomm k2 firmwarePhicomm K2G v22.6.3.20 was discovered to contain a command injection vulnerability via the...7.8 High
- phicomm k2 firmwarePhicomm K2 v22.6.534.263 was discovered to store the root and admin passwords in plaintext.7.5 High
- phicomm k2 firmwarePhicomm K2 v22.6.534.263 was discovered to contain a command injection vulnerability via the...7.8 High
- totolink a830r firmwareTotolink A830R V4.1.2cu.5182 was discovered to contain a command injection vulnerability via the...7.5 High
- totolink a830r firmwareAn information disclosure vulnerability in Totolink A830R V4.1.2cu.5182 allows attackers to...5.5 Medium
- totolink a830r firmwareAn issue in the component global.so of Totolink A830R V4.1.2cu.5182 allows attackers to bypass...9.8 Critical
- opencatsOpencats v0.9.7 was discovered to contain a stored cross-site scripting (XSS) vulnerability in...5.4 Medium
- opencatsOpencats v0.9.7 was discovered to contain a reflected cross-site scripting (XSS) vulnerability...6.1 Medium
- opencatsOpencats v0.9.7 was discovered to contain a SQL injection vulnerability via the importID...9.8 Critical
- limesurveyLimeSurvey v5.4.15 was discovered to contain a stored cross-site scripting (XSS) vulnerability in...5.4 Medium
- limesurveyAn arbitrary file upload vulnerability in the plugin manager of LimeSurvey v5.4.15 allows...9.8 Critical
- piwigoA stored cross-site scripting (XSS) vulnerability in identification.php of Piwigo v13.4.0 allows...5.4 Medium
- razer synapseRazer Synapse before 3.7.0830.081906 allows privilege escalation due to an unsafe installation...6.8 Medium
- revenue collection system project collection systemA stored cross-site scripting (XSS) vulnerability in /index.php?page=help of Revenue Collection...5.4 Medium
- netscout ngeniusoneAn issue was discovered in NetScout nGeniusONE 6.3.2 build 904. Open Redirection can occur (issue...3.5 Low
- netscout ngeniusoneAn issue was discovered in NetScout nGeniusONE 6.3.2 build 904. Open Redirection can occur (issue...3.1 Low
- netscout ngeniusoneImproper File Permissions in NetScout nGeniusONE 6.3.2 build 904 allows authenticated remote...8.8 High
- sscms siteserver cmsSiteServer CMS 7.1.3 is vulnerable to SQL Injection.9.8 Critical
- netscout ngeniusoneAn issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site...6.1 Medium
- netscout ngeniusoneAn issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site...6.1 Medium
- netscout ngeniusoneAn issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site...6.1 Medium
- netscout ngeniusoneAn issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site...6.1 Medium
- netscout ngeniusoneAn issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site...6.1 Medium
- netscout ngeniusoneAn issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site...6.1 Medium
- artica pfms pandora fms, pandora fms fms +1 moreCross-site scripting vulnerability in the network maps edit functionality5.2 Medium
- artica pfms pandora fms, pandora fms fms +1 morePath Traversal leading to Local File Inclusion5.9 Medium
- artica pfms pandora fms, pandora fms fms +1 moreLimited Authentication bypass due to hardcoded secret5.6 Medium
- gitlabA blind SSRF vulnerability was identified in all versions of GitLab EE prior to 15.4.6, 15.5...4.3 Medium
- gnu binutils, fedoraproject fedora, redhat enterprise linux +2 moreAn illegal memory access flaw was found in the binutils package. Parsing an ELF file containing...5.5 Medium
- gitlabAn info leak issue was identified in all versions of GitLab EE from 13.7 prior to 15.4.6, 15.5...4.3 Medium
- gitlabIn Gitlab EE/CE before 15.6.1, 15.5.5 and 15.4.6 using a branch with a hexadecimal name could...6.3 Medium
- gitlabA blind SSRF in GitLab CE/EE affecting all from 11.3 prior to 15.4.6, 15.5 prior to 15.5.5, and...3.5 Low
- italtel netmatch-s ciItaltel NetMatch-S CI 5.2.0-20211008 allows Multiple Reflected/Stored XSS issues under...6.1 Medium
- italtel netmatch-s ciItaltel NetMatch-S CI 5.2.0-20211008 allows Absolute Path Traversal under NMSCI-WebGui...7.5 High
- italtel netmatch-s ciItaltel NetMatch-S CI 5.2.0-20211008 has incorrect Access Control under NMSCI-WebGui...9.1 Critical
- eclipse glassfish, the eclipse foundation eclipse glassfish +1 morePath Traversal In Eclipse GlassFish6.5 Medium
- debian linux, lemonldap-ng apache\ +1 moreIn Apache::Session::Browseable before 1.3.6, validity of the X.509 certificate is not checked by...8.1 High
- debian linux, lemonldap-ng apache\ +1 moreIn Apache::Session::LDAP before 0.5, validity of the X.509 certificate is not checked by default...8.1 High
- Show moreLoading…