Skip to content
OpenAdvisories

Archive

11 January 2023

Vulnerabilities first published on this day (UTC), newest first.

← December 2022 2023 / January /11 February 2023 →
  1. 123
  2. 276
  3. 394
  4. 480
  5. 584
  6. 678
  7. 748
  8. 818
  9. 965
  10. 10215
  11. 11149
  12. 12103
  13. 1380
  14. 1428
  15. 1531
  16. 1667
  17. 17164
  18. 1893
  19. 1956
  20. 20103
  21. 219
  22. 227
  23. 2394
  24. 24125
  25. 2560
  26. 26174
  27. 2786
  28. 287
  29. 2912
  30. 30102
  31. 3151
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-4873

    Stack based overflow on Netcomm router models NF20MESH, NF20, and NL1902

    On Netcomm router models NF20MESH, NF20, and NL1902 a stack based buffer overflow affects the sessionKey parameter. By providing a specific number of bytes, the instruction pointer is able to be overwritten on the stack and crashes the application at a known …

    Netcomm NF20 NL1902 NF20MESH
  • Critical 9.8
    CVE-2022-4498

    A vulnerable HTTP Basic Authentication process in TP-Link routers, Archer C5 and WR710N-V1, is susceptible to either a DoS or an arbitrary code execution via any interface.

    In TP-Link routers, Archer C5 and WR710N-V1, running the latest available code, when receiving HTTP Basic Authentication the httpd service can be sent a crafted packet that causes a heap overflow. This can result in either a DoS (by crashing the httpd process…

    TP-Link Systems Archer C5 WR710N Network devices
  • Critical 9.1
    CVE-2022-3782 Public exploit

    Keycloak vulnerable to path traversal via double URL encoding

    keycloak: path traversal via double URL encoding. A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. An attacker can use this flaw to construct a malicious request to bypass validation and access other URLs and pote…

    redhat.com Keycloak org.keycloak:keycloak-parent Maven
  • Critical 9.8
    CVE-2022-48253

    nhttpd in Nostromo before 2.1 is vulnerable to a path traversal that may allow an attacker to execute arbitrary command…

  • Critical 9.8
    CVE-2022-48252

    The jokob-sk/Pi.Alert fork (before 22.12.20) of Pi.Alert allows Remote Code Execution via nmap_scan.php (scan parameter…

  • Critical 9.8
    CVE-2022-47861

    Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeLead.php.

  • Critical 9.8
    CVE-2022-47862

    Lead Management System v1.0 is vulnerable to SQL Injection via the customer_id parameter in ajax_represent.php.

  • Critical 9.8
    CVE-2022-47860

    Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeProduct.php.

  • Critical 9.8
    CVE-2022-47859

    Lead Management System v1.0 is vulnerable to SQL Injection via the user_id parameter in changePassword.php.

  • Critical 9.8
    CVE-2022-47866

    Lead management system v1.0 is vulnerable to SQL Injection via the id parameter in removeBrand.php.

  • Critical 9.8
    CVE-2022-47865

    Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeOrder.php.

  • Critical 9.8
    CVE-2022-47864

    Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeCategories.php.

  • Critical 9.6
    CVE-2021-3966

    Usb bluetooth device ACL read cb buffer overflow

    usb device bluetooth class includes a buffer overflow related to implementation of net_buf_add_mem.

    zephyrproject-rtos Zephyr