CVEs published in January 2023
4,262 vulnerabilities, 224 critical, 8 exploited.
- paranoidhttp project paranoidhttpParanoidhttp Server-Side Request Forgery vulnerability7.5 High
- pdfbook project pdfbookThe PdfBook extension through 2.0.5 before b07b6a64 for MediaWiki allows command injection via an...9.8 Critical
- first net japan inc. easymailCross-site scripting vulnerability in EasyMail 2.00.130 and earlier allows a remote...6.1 Medium
- pgpool pgpool-iiInformation disclosure vulnerability exists in Pgpool-II 4.4.0 to 4.4.1 (4.4 series), 4.3.0 to 4...6.5 Medium
- contec conprosys hmi system, contec co., ltd. conprosys hmi system (chs) +1 moreSQL injection vulnerability in the CONPROSYS HMI System (CHS) Ver.3.5.0 and earlier allows a...6.5 Medium
- omron cx-motion proImproper restriction of XML external entity reference (XXE) vulnerability exists in OMRON CX...5.5 Medium
- editorconfig, editorconfig c core +1 moreStack Buffer Overflow in editorconfig-core-c7.8 High
- gnu tar, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreGNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized...5.5 Medium
- netgear mr60 firmware, ms60 firmware, r6900p firmware +3 more +5 moreNetgear routers R7000P before v1.3.3.154, R6900P before v1.3.3.154, R7960P before v1.4.4.94, and...7.8 High
- rukovoditelRukovoditel v3.2.1 was discovered to contain a remote code execution (RCE) vulnerability in the...9.8 Critical
- taogogo taocmsAn arbitrary file upload vulnerability in taocms v3.0.2 allows attackers to execute arbitrary...9.8 Critical
- cloudschool project cloudschoolCloudSchool v3.0.1 is vulnerable to Cross Site Scripting (XSS). A normal user can steal session...5.4 Medium
- xerox workcentre 3550 firmwareOn Xerox WorkCentre 3550 25.003.03.000 devices, an authenticated attacker can view the SMB server...6.5 Medium
- schneider electric ecostruxure control expert, ecostruxure process expert, legacy modicon quantum (140cpu65*) and premium cpus (tsxp57*) +58 more +60 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could...7.5 High
- zmanda amandaA privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can acquire root...6.7 Medium
- zmanda amandaAmanda 3.5.1 allows privilege escalation from the regular user backup to root. The SUID binary...6.7 Medium
- schneider electric ecostruxure™ cybersecurity admin expert (cae), schneider-electric ecostruxure cybersecurity admin expert +1 moreA CWE-295: Improper Certificate Validation vulnerability exists that could cause the CAE software...7.9 High
- schneider electric ecostruxure™ cybersecurity admin expert (cae), schneider-electric ecostruxure cybersecurity admin expert +1 moreA CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause legitimate...8.0 High
- schneider electric igss data server (igssdataserver.exe), schneider-electric interactive graphical scada system +1 moreA CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a...9.8 Critical
- schneider electric igss data server (igssdataserver.exe), schneider-electric interactive graphical scada system +1 moreA CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause...8.6 High
- schneider electric igss data server (igssdataserver.exe), schneider-electric interactive graphical scada system +1 moreA CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a...9.8 Critical
- schneider electric igss data server (igssdataserver.exe), schneider-electric interactive graphical scada system +1 moreA CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a...9.8 Critical
- schneider electric igss data server (igssdataserver.exe), schneider-electric interactive graphical scada system +1 moreA CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a...9.8 Critical
- schneider electric igss data server (igssdataserver.exe), schneider-electric interactive graphical scada system +1 moreA CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a...9.8 Critical
- schneider electric igss data server (igssdataserver.exe), schneider-electric interactive graphical scada system +1 moreA CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a...9.8 Critical
- schneider electric igss data server (igssdataserver.exe), schneider-electric interactive graphical scada system +1 moreA CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a...9.8 Critical
- schneider electric data center expertA CWE 502: Deserialization of Untrusted Data vulnerability exists that could allow code to be...7.1 High
- schneider electric data center expertA CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in...8.0 High
- schneider electric data center expertA CWE-257: Storing Passwords in a Recoverable Format vulnerability exists that could result in...8.0 High
- schneider electric data center expertA CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in...8.0 High
- schneider electric conext™ combox, schneider-electric conext combox firmware +1 moreA CWE-1021: Improper Restriction of Rendered UI Layers or Frames vulnerability exists that could...6.5 Medium
- schneider electric conext™ combox, schneider-electric conext combox firmware +1 moreA CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists that could cause system’s...7.5 High
- schneider electric conext™ combox, schneider-electric conext combox firmware +1 moreA CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that...8.6 High
- schneider electric c-bus network automation controller, lss5500nac, clipsal c-bus network automation controller, 5500nac, clipsal wiser for c-bus automation controller, 5500shac +9 more +11 moreA CWE-287: Improper Authentication vulnerability exists that could allow an attacker to gain...9.8 Critical
- schneider electric c-bus network automation controller, lss5500nac, clipsal c-bus network automation controller, 5500nac, clipsal wiser for c-bus automation controller, 5500shac +9 more +11 moreA CWE-521: Weak Password Requirements vulnerability exists that could allow an attacker to gain...9.8 Critical
- schneider electric canbrassA CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability...5.3 Medium
- schneider electric ecostruxure machine expert – hvac, somachine hvac, schneider-electric ecostruxure machine expert - hvac +2 moreA CWE-787: Out-of-bounds Write vulnerability exists that could cause sensitive information...4.3 Medium
- ip-label newtestThe Robot application in Ip-label Newtest before v8.5R0 was discovered to use weak signature...9.8 Critical
- schneider electric ecostruxure power commissionA CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause all remote...3.9 Low
- schneider electric ecostruxure power commissionA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...6.5 Medium
- schneider electric ecostruxure power commissionA CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...6.5 Medium
- cimagemosbth cimage check_system.php cross site scripting2.0 Low
- capnsquarepants wordcraftcapnsquarepants wordcraft tag.php cross site scripting3.5 Low
- canteen management system project management system, sourcecodester canteen management system +1 moreSourceCodester Canteen Management System Add Customer createcustomer.php cross site scripting3.5 Low
- sourcecodester online tours & travels management system, online tours \& travels management system project tours \& travels management system +1 moreSourceCodester Online Tours & Travels Management System payment_operation.php sql injection6.3 Medium
mysql-8.0Ubuntumysql-5.7, mysql-8.0 regressionNo scoreradare2OSS-FuzzHeap-buffer-overflow in parse_classes_64No scoreghostscriptOSS-FuzzHeap-use-after-free in gc_traceNo score- nosh chartingsystem project chartingsystemNOSH 4a5cfdb allows stored XSS via the create user page. For example, a first name (of a...5.4 Medium
- froxlor, froxlor froxlor/froxlor +1 moreUnchecked Error Condition in froxlor/froxlor5.3 Medium
- Show moreLoading…