Skip to content
OpenAdvisories

Archive

14 January 2023

Vulnerabilities first published on this day (UTC), newest first.

← December 2022 2023 / January /14 February 2023 →
  1. 123
  2. 276
  3. 394
  4. 480
  5. 584
  6. 678
  7. 748
  8. 818
  9. 965
  10. 10215
  11. 11149
  12. 12103
  13. 1380
  14. 1428
  15. 1531
  16. 1667
  17. 17164
  18. 1893
  19. 1956
  20. 20103
  21. 219
  22. 227
  23. 2394
  24. 24125
  25. 2560
  26. 26174
  27. 2786
  28. 287
  29. 2912
  30. 30102
  31. 3151
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Medium 5.5
    CVE-2015-10043

    abreen Apollo path traversal

    A vulnerability, which was classified as critical, was found in abreen Apollo. This affects an unknown part. The manipulation of the argument file leads to path traversal. The patch is named 6206406630780bbd074aff34f4683fb764faba71. It is recommended to apply…

    abreen Apollo
  • Medium 5.5
    CVE-2015-10020

    ssn2013 cis450Project AddAppUser.java addUser sql injection

    A vulnerability has been found in ssn2013 cis450Project and classified as critical. This vulnerability affects the function addUser of the file HeatMapServer/src/com/datformers/servlet/AddAppUser.java. The manipulation leads to sql injection. The name of the …

    ssn2013 cis450Project
  • Medium 4.3
    CVE-2022-45353

    WordPress Betheme theme <= 26.6.1 is vulnerable to Broken Access Control

    Broken Access Control in Betheme theme <= 26.6.1 on WordPress.

    Muffin Group Betheme
  • Medium 6.1
    CVE-2022-38467 Scanner template

    WordPress CRM Perks Forms Plugin <= 1.1.0 is vulnerable to Reflected Cross Site Scripting (XSS) vulnerability

    Reflected Cross-Site Scripting (XSS) vulnerability in CRM Perks Forms – WordPress Form Builder <= 1.1.0 ver.

    CRM Perks CRM Perks Forms – WordPress Form Builder Web / CMS
  • Medium 6.5
    CVE-2023-22497

    Netdata is vulnerable to improper authentication

    Netdata is an open source option for real-time infrastructure monitoring and troubleshooting. Each Netdata Agent has an automatically generated MACHINE GUID. It is generated when the agent first starts and it is saved to disk, so that it will persist across r…

    netdata netdata netdata netdata Debian Ubuntu
  • Medium 6.5
    CVE-2022-41956

    Autolab is vulnerable to file disclosure via remote handin feature

    Autolab is a course management service, initially developed by a team of students at Carnegie Mellon University, that enables instructors to offer autograded programming assignments to their students over the Web. A file disclosure vulnerability was discovere…

    autolab Autolab
  • Medium 6.5
    CVE-2023-0298

    Incorrect Authorization in firefly-iii/firefly-iii

    Incorrect Authorization in GitHub repository firefly-iii/firefly-iii prior to 5.8.0.

    firefly-iii firefly-iii/firefly-iii grumpydictator/firefly-iii Packagist
  • Medium 4.3
    CVE-2023-0301

    Cross-site Scripting (XSS) - Stored in alfio-event/alf.io

    Cross-site Scripting (XSS) - Stored in GitHub repository alfio-event/alf.io prior to Alf.io 2.0-M4-2301.

    alfio-event alfio-event/alf.io
  • Medium 6.5
    CVE-2023-23589

    The SafeSocks option in Tor before 0.4.7.13 has a logic error in which the unsafe SOCKS4 protocol can be used but not t…

    tor tor Debian Ubuntu
  • Medium 6.5
    CVE-2023-22852

    Tiki through 25.0 allows CSRF attacks that are related to tiki-importer.php and tiki-import_sheet.php.

  • Medium 4.6
    CVE-2022-2815

    Insecure Storage of Sensitive Information in publify/publify

    Insecure Storage of Sensitive Information in GitHub repository publify/publify prior to 9.2.10.

    publify publify/publify publify_core RubyGems