Skip to content
OpenAdvisories

Archive

10 January 2023

Vulnerabilities first published on this day (UTC), newest first.

← December 2022 2023 / January /10 February 2023 →
  1. 123
  2. 276
  3. 394
  4. 480
  5. 584
  6. 678
  7. 748
  8. 818
  9. 965
  10. 10215
  11. 11149
  12. 12103
  13. 1380
  14. 1428
  15. 1531
  16. 1667
  17. 17164
  18. 1893
  19. 1956
  20. 20103
  21. 219
  22. 227
  23. 2394
  24. 24125
  25. 2560
  26. 26174
  27. 2786
  28. 287
  29. 2912
  30. 30102
  31. 3151
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Critical 9.0
    CVE-2022-35401 EPSS 21%

    An authentication bypass vulnerability exists in the get_IFTTTTtoken.cgi functionality of Asus RT-AX82U 3.0.0.4.386_496…

    ASUS RT-AX82U
  • Critical 9.3
    CVE-2022-46823

    A vulnerability has been identified in Mendix SAML (Mendix 8 compatible) (All versions >= V2.3.0 < V2.3.4), Mendix SAML…

    Siemens Mendix SAML (Mendix 8 compatible) Mendix SAML (Mendix 9 compatible, Upgrade Track) Mendix SAML (Mendix 9 compatible, New Track) ICS / OT
  • Critical 9.9
    CVE-2022-45092 EPSS 31%

    A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 1). An authenticated remote attacker w…

    Siemens SINEC INS ICS / OT
  • Critical 9.9
    CVE-2023-0022

    Code Injection vulnerability in SAP BusinessObjects Business Intelligence platform (Analysis edition for OLAP)

    SAP BusinessObjects Business Intelligence Analysis edition for OLAP allows an authenticated attacker to inject malicious code that can be executed by the application over the network. On successful exploitation, an attacker can perform operations that may com…

    SAP BusinessObjects Business Intelligence platform (Analysis edition for OLAP)
  • Critical 10.0
    CVE-2023-0018

    Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (Central management console)

    Due to improper input sanitization of user-controlled input in SAP BusinessObjects Business Intelligence Platform CMC application - versions 420, and 430, an attacker with basic user-level privileges can modify/upload crystal reports containing a malicious pa…

    SAP BusinessObjects Business Intelligence Platform (Central management console)
  • Critical 9.4
    CVE-2023-0017 EPSS 16%

    Improper access control in SAP NetWeaver AS for Java

    An unauthenticated attacker in SAP NetWeaver AS for Java - version 7.50, due to improper access control, can attach to an open interface and make use of an open naming and directory API to access services which can be used to perform unauthorized operations a…

    SAP NetWeaver AS for Java
  • Critical 9.9
    CVE-2023-0016

    SQL Injection vulnerability in SAP Business Planning and Consolidation MS

    SAP BPC MS 10.0 - version 810, allows an unauthorized attacker to execute crafted database queries. The exploitation of this issue could lead to SQL injection vulnerability and could allow an attacker to access, modify, and/or delete data from the backend dat…

    SAP SAP BPC MS 10.0
  • Critical 9.0
    CVE-2023-0014

    Capture-replay vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform

    SAP NetWeaver ABAP Server and ABAP Platform - versions SAP_BASIS 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, KERNEL 7.22, 7.53, 7.77, 7.81, 7.85, 7.89, KRNL64UC 7.22, 7.22EXT, 7.53, KRNL64NUC 7.22, 7.22EXT, creates informat…

    SAP NetWeaver ABAP Server and ABAP Platform
  • Critical 9.8
    CVE-2023-22903

    api/views/user.py in LibrePhotos before e19e539 has incorrect access control.

  • Critical 9.8
    CVE-2022-4422

    SQLi in Bulutdesk Callcenter

    Call Center System developed by Bulutses Information Technologies before version 3.0 has an unauthenticated Sql Injection vulnerability. This has been fixed in the version 3.0

    Bulutses Information Technologies Bulutdesk Callcenter
  • Critical 9.6
    CVE-2022-38490

    An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03. Some parameters allow SQL injection. Version 202…

  • Critical 9.8
    CVE-2022-3792 EPSS 14%

    SQL Injection in GullsEye Terminal Operating System

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GullsEye GullsEye terminal operating system allows SQL Injection. This issue affects GullsEye terminal operating system: from unspecified before 5.0.13.

    GullsEye GullsEye terminal operating system
  • Critical 9.8
    CVE-2017-20166

    Ecto missing `is_nil` requirement

    Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between is_nil and raise.

    ecto Hex