CVEs published in January 2023
4,262 vulnerabilities, 224 critical, 8 exploited.
- publify publify/publify, publify project publify +1 moreWeak Password Requirements in publify/publify8.1 High
- froxlor, froxlor froxlor/froxlor +1 moreImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in froxlor/froxlor6.2 Medium
- froxlor, froxlor froxlor/froxlor +1 moreBusiness Logic Errors in froxlor/froxlor5.5 Medium
- froxlor, froxlor froxlor/froxlor +1 moreWeak Password Requirements in froxlor/froxlor5.4 Medium
- jszip project jszipJSZip contains Path Traversal via loadAsync7.3 High
- libtiff, fedoraproject fedora +1 moreLibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to...6.8 Medium
- wireguardWireGuard, such as WireGuard 0.5.3 on Windows, does not fully account for the possibility that an...5.3 Medium
- nyuccl psiturkNYUCCL psiTurk experiment.py special elements used in a template engine5.5 Medium
- phpgurukul bank locker management systemPHPGurukul Bank Locker Management System Assign Locker add-locker-form.php cross site scripting3.5 Low
- phpgurukul bank locker management systemPHPGurukul Bank Locker Management System Login index.php sql injection7.3 High
- sourcecodester online tours & travels management system, online tours \& travels management system project tours \& travels management system +1 moreSourceCodester Online Tours & Travels Management System s.php sql injection6.3 Medium
- sourcecodester online tours & travels management system, online tours \& travels management system project tours \& travels management system +1 moreSourceCodester Online Tours & Travels Management System practice_pdf.php sql injection4.7 Medium
- metabaseMetabase subject to Improper Privilege Management6.3 Medium
- metabaseMetabase subject to Exposure of Sensitive Information to an Unauthorized Actor5.7 Medium
- lemonldap-ng lemonldap\In LemonLDAP::NG before 2.0.15. some sessions are not deleted when they are supposed to be...5.9 Medium
- rgrove sanitizeSanitize vulnerable to Cross-site Scripting via Improper neutralization of `noscript` element6.1 Medium
- discourseDiscourse's exclude_tags param could leak which topics had a specific hidden tag4.3 Medium
- discourseDiscourse vulnerable to ReDoS in user agent parsing8.6 High
- hp security managerPotential vulnerabilities have been identified in HP Security Manager which may allow escalation...8.8 High
- hp security managerPotential vulnerabilities have been identified in HP Security Manager which may allow escalation...8.8 High
- hp security managerPotential vulnerabilities have been identified in HP Security Manager which may allow escalation...8.8 High
- hp security managerPotential vulnerabilities have been identified in HP Security Manager which may allow escalation...8.8 High
- wire, wireapp wire-server +1 morewire-server vulnerable to unauthorized removal of Bots from Conversations6.5 Medium
- grafanaGrafana stored XSS in FileUploader component7.3 High
- grafanaGrafana vulnerable to spoofing originalUrl of snapshots6.7 Medium
- contentstudioContentStudio <= 1.2.5 - Authorization Bypass8.2 High
- contentstudioContentStudio <= 1.2.5 - Information Exposure7.5 High
- contentstudioContentStudio <= 1.2.5 - Missing Authorization9.8 Critical
- wire wire-webappwire-webapp contains Improper Handling of Exceptional Conditions leading to a DoS via Markdown Rendering5.3 Medium
- alejandropascual quick restaurant menuQuick Restaurant Menu <= 2.0.2 - Missing Authorization8.1 High
- alejandropascual quick restaurant menuQuick Restaurant Menu <= 2.0.2 - Cross-Site Request Forgery8.1 High
- alejandropascual quick restaurant menuQuick Restaurant Menu <= 2.0.2 - Authenticated (Administrator+) Cross-Site Scripting4.4 Medium
- alejandropascual quick restaurant menuQuick Restaurant Menu <= 2.0.2 - Insecure Direct Object Reference8.1 High
- yafnet, yetanotherforum yaf.net +1 moreYAFNET Private Message PostPrivateMessage cross site scripting3.5 Low
- fedoraproject sssd, redhat enterprise linux, enterprise linux desktop +10 more +12 moresssd: libsss_certmap fails to sanitise certificate data used in LDAP filters8.8 High
- sourcecodester online tours & travels management system, online tours \& travels management system project tours \& travels management system +1 moreSourceCodester Online Tours & Travels Management System expense_report.php sql injection4.7 Medium
- sourcecodester online tours & travels management system, online tours \& travels management system project tours \& travels management system +1 moreSourceCodester Online Tours & Travels Management System expense_report.php sql injection4.7 Medium
- sourcecodester online tours & travels management system, online tours \& travels management system project tours \& travels management system +1 moreSourceCodester Online Tours & Travels Management System disapprove_user.php sql injection4.7 Medium
- sourcecodester online tours & travels management system, online tours \& travels management system project tours \& travels management system +1 moreSourceCodester Online Tours & Travels Management System booking_report.php sql injection4.7 Medium
- sourcecodester online tours & travels management system, online tours \& travels management system project tours \& travels management system +1 moreSourceCodester Online Tours & Travels Management System approve_user.php sql injection4.7 Medium
- sourcecodester online tours & travels management system, online tours \& travels management system project tours \& travels management system +1 moreSourceCodester Online Tours & Travels Management System add_payment.php sql injection4.7 Medium
- sourcecodester online tours & travels management system, online tours \& travels management system project tours \& travels management system +1 moreSourceCodester Online Tours & Travels Management System abc.php sql injection4.7 Medium
- online security guards hiring system project security guards hiring system, phpgurukul online security guards hiring system +1 morePHPGurukul Online Security Guards Hiring System search-request.php cross site scripting3.5 Low
- includesecurity safeurl-pythonsafeurl-python contains Server-Side Request Forgery5.3 Medium
- openmage magento, magento-lts +1 moreOpenMage LTS DataFlow upload remote code execution vulnerability7.2 High
- openmage magento, magento-lts +1 moreOpenMage LTS authenticated remote code execution through layout update8.8 High
fortio.org/proxyGoInitial debug-host handler implementation could leak information and facilitate denial of serviceNo score- openmage magento, magento-lts +1 moreOpenMage LTS has DoS vulnerability in MaliciousCode filter4.9 Medium
- openmage magento, magento-lts +1 moreOpenMage LTS arbitrary file deletion in customer media allows for remote code execution7.2 High
- openmage magento, magento-lts +1 moreOpenMage LTS arbitrary command execution in custom layout update through blocks7.2 High
- Show moreLoading…