Skip to content
OpenAdvisories

Archive

14 January 2023

Vulnerabilities first published on this day (UTC), newest first.

← December 2022 2023 / January /14 February 2023 →
  1. 123
  2. 276
  3. 394
  4. 480
  5. 584
  6. 678
  7. 748
  8. 818
  9. 965
  10. 10215
  11. 11149
  12. 12103
  13. 1380
  14. 1428
  15. 1531
  16. 1667
  17. 17164
  18. 1893
  19. 1956
  20. 20103
  21. 219
  22. 227
  23. 2394
  24. 24125
  25. 2560
  26. 26174
  27. 2786
  28. 287
  29. 2912
  30. 30102
  31. 3151
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 7.5
    CVE-2023-22602

    Apache Shiro before 1.11.0, when used with Spring Boot 2.6+, may allow authentication bypass through a specially crafted HTTP request

    When using Apache Shiro before 1.11.0 together with Spring Boot 2.6+, a specially crafted HTTP request may cause an authentication bypass. The authentication bypass occurs when Shiro and Spring Boot are using different pattern-matching techniques. Both Shiro …

    Apache Software Foundation Apache Shiro shiro org.apache.shiro:shiro-root Debian Maven
  • High 8.1
    CVE-2023-22496 Public exploit EPSS 36%

    Netdata vulnerable to command injection

    Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. An attacker with the ability to establish a streaming connection can execute arbitrary commands on the targeted Netdata agent. When an alert is triggered, the functi…

    netdata netdata netdata Debian
  • High 7.1
    CVE-2022-23532

    neo4j-apoc-procedures is vulnerable to path traversal

    APOC (Awesome Procedures on Cypher) is an add-on library for Neo4j that provides hundreds of procedures and functions. A path traversal vulnerability found in the apoc.export.* procedures of apoc plugins in Neo4j Graph database. The issue allows a malicious a…

    neo4j-contrib neo4j-apoc-procedures org.neo4j.procedure:apoc Maven
  • High 7.3
    CVE-2023-22478 Scanner template

    KubePi is vulnerable to missing authorization

    KubePi is a modern Kubernetes panel. The API interfaces with unauthorized entities and may leak sensitive information. This issue has been patched in version 1.6.4. There are currently no known workarounds.

    KubeOperator KubePi github.com/KubeOperator/kubepi Go
  • High 8.8
    CVE-2022-41955

    Autolab is vulnerable to remote code execution (RCE) via MOSS functionality

    Autolab is a course management service, initially developed by a team of students at Carnegie Mellon University, that enables instructors to offer autograded programming assignments to their students over the Web. A remote code execution vulnerability was dis…

    autolab Autolab
  • High 7.3
    CVE-2023-22480 Scanner template EPSS 67%

    KubeOperator is vulnerable to unauthorized access to system API

    KubeOperator is an open source Kubernetes distribution focused on helping enterprises plan, deploy and operate production-level K8s clusters. In KubeOperator versions 3.16.3 and below, API interfaces with unauthorized entities and can leak sensitive informati…

    KubeOperator KubeOperator github.com/KubeOperator/KubeOperator Go
  • High 8.4
    CVE-2023-0299

    Improper Input Validation in publify/publify

    Improper Input Validation in GitHub repository publify/publify prior to 9.2.10.

    publify publify/publify publify_core RubyGems
  • High 7.2
    CVE-2023-22851

    Tiki before 24.2 allows lib/importer/tikiimporter_blog_wordpress.php PHP Object Injection by an admin because of an uns…

  • High 8.8
    CVE-2023-22850

    Tiki before 24.1, when the Spreadsheets feature is enabled, allows lib/sheet/grid.php PHP Object Injection because of a…

  • High 8.8
    CVE-2023-22853

    Tiki before 24.1, when feature_create_webhelp is enabled, allows lib/structures/structlib.php PHP Object Injection beca…

  • High 7.6
    CVE-2022-1812 EPSS 31%

    Integer Overflow or Wraparound in publify/publify

    Integer Overflow or Wraparound in GitHub repository publify/publify prior to 9.2.10.

    publify publify/publify publify_core RubyGems