CVEs published in January 2023
4,262 vulnerabilities, 224 critical, 8 exploited.
- hp dragonfly folio g3 2-in-1 firmware, elite dragonfly firmware, elite dragonfly g2 firmware +325 more +327 morePotential vulnerabilities have been identified in the system BIOS of certain HP PC products,...7.8 High
- lenovo bios, ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware +145 more +147 moreAn information leak vulnerability in SMI Handler used to configure platform settings over WMI in...4.4 Medium
- lenovo bios, ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware +134 more +136 moreAn information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models...4.4 Medium
- lenovo bios, ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware +323 more +325 moreAn information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models...4.4 Medium
- hp elite dragonfly firmware, elite slice firmware, elite slice g2 firmware +179 more +181 morePotential security vulnerabilities have been identified in the BIOS (UEFI Firmware) for certain...7.8 High
- hp elite dragonfly firmware, elite slice firmware, elite slice g2 firmware +179 more +181 morePotential security vulnerabilities have been identified in the BIOS (UEFI Firmware) for certain...7.8 High
- hp dragonfly folio g3 2-in-1 firmware, elite dragonfly firmware, elite dragonfly g2 firmware +315 more +317 moreA potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in the BIOS...7.0 High
- themeisle rss aggregator by feedzyRSS Aggregator by Feedzy < 4.1.1 - Contributor+ Stored XSS5.4 Medium
- pixelgrade pixcodesPixCodes < 2.3.7 - Contributor+ Stored XSS in Shortcode5.4 Medium
- phil spectrum icon widgetIcon Widget < 1.3.0 - Contributor+ Stored XSS via Shortcode5.4 Medium
- trustindex widgets for google reviewsWidgets for Google Reviews < 9.8 - Contributor+ Stored XSS5.4 Medium
- paidmembershipspro custom user profile fields for user registration, unknown custom user profile fields for user registration & member frontend profiles with paid memberships pro +1 moreCustom User Profile Fields for User Registration & Member Frontend Profiles with Paid Memberships Pro < 1.8.1 - Contributor+ Stored XSS via Shortcode5.4 Medium
- damian-gora justified gallery, justified gallery project gallery +1 moreJustified Gallery < 1.7.1 - Contributor+ Stored XSS via Shortcode5.4 Medium
- pdf viewer project viewer, unknown pdf viewer +1 morePDF Viewer < 1.0.0 - Contributor+ Stored XSS via Shortcode5.4 Medium
- accordion shortcodes project shortcodes, unknown accordion shortcodes +1 moreAccordion Shortcodes <= 2.4.2 - Contributor+ Stored XSS via Shortcode5.4 Medium
- armandofiore fl3r feelboxFL3R FeelBox <= 8.1 - Settings Update via CSRF to Stored XSS6.1 Medium
- pwrplugins portfolio for elementor, unknown portfolio for elementor, image gallery & post grid | powerfolio +1 morePortfolio for Elementor, Image Gallery & Post Grid | PowerFolio < 2.3.1 - Contributor+ Stored XSS via Shortcode5.4 Medium
- infornweb posts list designer, unknown posts list designer by category +1 morePosts List Designer by Category < 3.2 - Contributor+ Stored XSS via Shortcode5.4 Medium
- machothemes cpo companionCPO Companion < 1.1.0 - Contributor+ Stored XSS via Shortcode5.4 Medium
- unknown post grid, post carousel, & list category posts, shapedplugin smart post show +1 morePost Grid, Post Carousel, & List Category Posts < 2.4.19 - Contributor+ Stored XSS5.4 Medium
- mediaelementjs mediaelement.jsMediaElement.js – HTML5 Video & Audio Player <= 4.2.8 - Contributor+ Stored XSS via Shortcode5.4 Medium
- catchsquare wp social widgetWP Social Widget < 2.2.4 - Contributor+ Stored XSS5.4 Medium
- themify shortcodes, themifyme themify shortcodes +1 moreThemify Shortcodes < 2.0.8 - Contributor+ Stored XSS via Shortcode5.4 Medium
- armandofiore fl3r feelboxFL3R FeelBox <= 8.1 - Moods Reset via CSRF4.3 Medium
- codeinwp revive old posts, revive old posts +1 moreRevive Old Posts – Social Media Auto Post and Scheduling Plugin < 9.0.11 - PHP Object Injection7.2 High
- unknown membership for woocommerceMembership For WooCommerce < 2.1.7 - Unauthenticated Arbitrary File Upload9.8 Critical
- infornweb news & blog designer pack, news \& blog designer pack +1 moreNews & Blog Designer Pack < 3.3 - Contributor+ Stored XSS via Shortcode5.4 Medium
- linksalpha social sharing toolkitSocial Sharing Toolkit <= 2.6 - Contributor+ Stored XSS via Shortcode5.4 Medium
- cpt bootstrap carousel project bootstrap carousel, phil ewels cpt bootstrap carousel +1 moreCPT Bootstrap Carousel <= 1.12 - Contributor+ Stored XSS via Shortcode5.4 Medium
- solwininfotech blog designerBlog Designer – Post and Widget < 2.4.1 - Contributor+ Stored XSS via Shortcode5.4 Medium
- fatcatapps pricing tables, unknown pricing tables wordpress plugin +1 morePricing Tables WordPress Plugin – Easy Pricing Tables < 3.2.3 - Contributor+ Stored XSS via Shortcode5.4 Medium
- miniorange wordpress saml sso premium, wordpress saml sso premium mulsitesite, wordpress saml sso standard +1 more +3 moreminiOrange WordPress SAML SSO multiple versions - Open Redirect in SSO login6.1 Medium
- unknown wp extended search, wp extended search project extended search +1 moreWP Extended Search < 2.1.2 - Contributor+ Stored XSS via Shortcode5.4 Medium
- simple sitemap project sitemap, unknown simple sitemap +1 moreSimple Sitemap < 3.5.8 - Contributor+ Stored XSS5.4 Medium
- chained products project products, unknown chained products +1 moreWooCommerce Chained Products < 2.12.0 - Unauthenticated Arbitrary Options Update to 'no'4.3 Medium
- shapedplugin wp tabsWP Tabs < 2.1.17 - Contributor+ Stored XSS5.4 Medium
- unknown aawp, getaawp amazon affiliate wordpress plugin +1 moreAAWP < 3.12.3 - Unsafe URL Handling7.5 High
- bold-themes bold timeline liteBold Timeline Lite < 1.1.5 - Contributor+ Stored XSS via Shortcode5.4 Medium
- coding panda panda pods repeater field, panda pods repeater field project pods repeater field +1 morePanda Pods Repeater Field < 1.5.4 - Reflected XSS5.4 Medium
- caterhamcomputing cc child pagesCC Child Pages < 1.43 - Contributor+ Stored XSS via Shortcode5.4 Medium
- hp hpsfviewerHPSFViewer might allow Escalation of Privilege. This potential vulnerability was remediated on...7.8 High
- apache iotdb, apache software foundation iotdb workbench +1 moreApache IoTDB Workbench: apache/iotdb-web-workbench: create a user without authorization7.5 High
- ami megarac spx-12, megarac spx-13, megarac sp-x +2 more +4 morePassword reset interception via API8.3 High
- aldo latino privatecontentPrivateContent <= 8.4.3 - Protection Mechanism Bypass5.3 Medium
- linux kernelUse after free in io_uring in the Linux Kernel7.8 High
- freshtomato, siretta quartz-gold, quartz-gold firmware +2 moreAn OS command injection vulnerability exists in the httpd logs/view.cgi functionality of...9.1 Critical
- freshtomato, siretta quartz-gold, quartz-gold firmware +2 moreA directory traversal vulnerability exists in the httpd update.cgi functionality of FreshTomato...6.8 Medium
- eta-dev etaEta vulnerable to Code Injection via templates rendered with user-defined data8.1 High
- servst project servstServst vulnerable to Path Traversal7.5 High
- qnap qts, quts hero +1 moreVulnerability in QTS9.8 Critical
- Show moreLoading…