CVEs published in January 2023
4,262 vulnerabilities, 224 critical, 8 exploited.
- jsuitesjSuites subect to Cross-site Scripting5.4 Medium
- http-cache-semantics project http-cache-semanticshttp-cache-semantics vulnerable to Regular Expression Denial of Service5.3 Medium
- paypal nemo-appiumnemo-appium vulnerable to OS Command Injection7.4 High
- hitachi storage plug-in for vmware vcenter, storage plug-in +1 morePrivilege Escalation Vulnerability in Hitachi Storage Plug-in for VMware vCenter7.6 High
- hitachi storage plug-in for vmware vcenter, storage plug-in +1 morePrivilege Escalation Vulnerability in Hitachi Storage Plug-in for VMware vCenter5.9 Medium
- ami megarac spx-12, megarac spx-13 +1 moreWeak password hashes for Redfish & API5.3 Medium
- forget heart message box project heart message boxForget Heart Message Box v1.1 was discovered to contain a SQL injection vulnerability via the...8.8 High
- forget heart message box project heart message boxForget Heart Message Box v1.1 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- hutoolDromara hutool vulnerable to SQL Injection9.8 Critical
- hutoolDromara Hutool Deserialization of Untrusted Data vulnerability9.8 Critical
- thinking software efenceThinking Software Technology Co., Ltd. Efence - SQL Injection9.8 Critical
- schneider electric ecostruxure geo scada expert 2019 - 2021 (formerly known as clearscada), schneider-electric ecostruxure geo scada expert 2019, ecostruxure geo scada expert 2020 +1 more +3 moreA CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that...7.5 High
- schneider electric ecostruxure geo scada expert 2019 - 2021 (formerly known as clearscada), schneider-electric ecostruxure geo scada expert 2019, ecostruxure geo scada expert 2020 +1 more +3 moreA CWE-285: Improper Authorization vulnerability exists that could cause Denial of Service against...9.1 Critical
- octopus serverIn affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site...5.4 Medium
- easy images project imagesEasy Images v2.0 was discovered to contain an arbitrary file download vulnerability via the...7.5 High
- netcad keosNetcad KEOS 1.0 is vulnerable to XML External Entity (XXE) resulting in SSRF with XXE (remote).9.8 Critical
- i-librariani-librarian 4.10 is vulnerable to Arbitrary file upload in ajaxsupplement.php.9.8 Critical
- bangresto project bangrestoSQL Injection vulnerability in Bangresto 1.0 via the itemID parameter.9.8 Critical
- comfast project cf-wr623n firmwareCOMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1...6.1 Medium
- comfast project cf-wr623n firmwareCOMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1...7.5 High
- comfast project cf-wr623n firmwareCOMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1...9.8 Critical
- comfast project cf-wr623n firmwareCOMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1...6.1 Medium
- comfast project cf-wr623n firmwareCOMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1...9.8 Critical
- dlink dir-825 firmwareBuffer Overflow Vulnerability in D-Link DIR-825 v1.33.0.44ebdd4-embedded and below allows...9.8 Critical
- sailpoint identityiqSailPoint IdentityIQ JavaServer File Path Traversal Vulnerability8.8 High
- schneider electric ecostruxure control expert, ecostruxure process expert, modicon m340 cpu (part numbers bmxp34*) +37 more +39 moreA CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause...8.1 High
- joplin project joplinJoplin Desktop App vulnerable to Cross-site Scripting6.1 Medium
- json.h project json.hCVE-2022-45494 affecting package suitesparse 7.11.0-17.8 High
- sailpoint identityiqSailPoint IdentityIQ Access Control Bypass6.8 Medium
- eq project eqEQ v1.5.31 to v2.2.0 was discovered to contain a SQL injection vulnerability via the UserPwd...9.8 Critical
- liveboxcloud vdeskAn issue was discovered in LIVEBOX Collaboration vDesk before v018. Broken Access Control can...9.8 Critical
- apollotheme ap pagebuilderA cross-site scripting (XSS) vulnerability in ApolloTheme AP PageBuilder component through 2.4.4...6.1 Medium
- changingtec megaservisignadapterChangingTec MegaServiSignAdapter - Out-of-bounds Read6.5 Medium
- changingtec megaservisignadapterChangingTec MegaServiSignAdapter - Improper Input Validation9.8 Critical
- changingtec megaservisignadapterChangingTec MegaServiSignAdapter - Path Traversal7.5 High
- btcpayserver btcpay serverBTCPay Server 1.3.0 through 1.5.3 allows a remote attacker to obtain sensitive information when a...7.5 High
- toshiba storage security softwareImproper Authentication vulnerability in Toshiba Storage Security Software V1.2.0.7413 is that allows for sensitive information to be obtained via(local) password authentication module.7.8 High
- portfoliocms project portfoliocmsWestbrookadmin portfolioCMS v1.05 allows attackers to bypass password validation and access...7.5 High
- snap one wattbox wb-300-ip-3, snapav wattbox wb-300-ip-3 firmware +1 moreSnap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior are vulnerable to a heap-based buffer...5.3 Medium
- snap one wattbox wb-300-ip-3, snapav wattbox wb-300-ip-3 firmware +1 moreSnap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior store passwords in a plaintext file...5.7 Medium
- snap one wattbox wb-300-ip-3, snapav wattbox wb-300-ip-3 firmware +1 moreSnap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior use a proprietary local area network ...6.7 Medium
- snap one wattbox wb-300-ip-3, snapav wattbox wb-300-ip-3 firmware +1 moreSnap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior could bypass the brute force protection...7.5 High
- motorola mr2600 router, mr2600 firmware +1 moreAn improper input sanitization vulnerability in the Motorola MR2600 router could allow a local...7.2 High
- lenovo xclarity controller, thinkagile hx1021 firmware, thinkagile hx1320 firmware +96 more +98 moreThe Remote Mount feature can potentially be abused by valid, authenticated users to make...2.7 Low
- hp 200 g3 all-in-one \(rom family ssid 8431\) firmware, 200 g3 all-in-one \(rom family ssid 84de\) firmware, 200 g4 22 all-in-one pc \(rom family ssid 86f0\) firmware +375 more +377 moreHP has identified a potential vulnerability in BIOS firmware of some Workstation products....7.8 High
- hp support assistantPotential security vulnerabilities have been identified in HP Support Assistant. These...7.8 High
- hp support assistantPotential security vulnerabilities have been identified in HP Support Assistant. These...7.8 High
- hp support assistantPotential security vulnerabilities have been identified in HP Support Assistant. These...7.8 High
- lenovo xclarity controller, thinkagile hx1021 firmware, thinkagile hx1320 firmware +96 more +98 moreA buffer overflow exists in the Remote Presence subsystem which can potentially allow valid,...7.2 High
- lenovo bios, ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware +285 more +287 moreA buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local...6.7 Medium
- Show moreLoading…