Skip to content
OpenAdvisories

Archive

18 January 2023

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • Medium 6.1
    CVE-2023-0214 Public exploit

    XSS in Skyhigh Security SWG

    A cross-site scripting vulnerability in Skyhigh SWG in main releases 11.x prior to 11.2.6, 10.x prior to 10.2.17, and controlled release 12.x prior to 12.0.1 allows a remote attacker to craft SWG-specific internal requests with URL paths to any third-party we…

  • High 7.8
    CVE-2023-21608 Exploited Public exploit EPSS 59%

    Adobe Acrobat Reader DC resetForm Use-After-Free Remote Code Execution Vulnerability

    Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation o…

    KEV Oct 10, 2023
  • High 7.8
    CVE-2023-22809 Public exploit EPSS 55%

    In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environme…

  • High 7.5
    CVE-2022-46505 Public exploit

    An issue in MatrixSSL 4.5.1-open and earlier leads to failure to securely check the SessionID field, resulting in the m…

  • Critical 9.8
    CVE-2022-47966 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due…

    KEV Jan 23, 2023
  • High 7.5
    CVE-2021-33959 Public exploit EPSS 15%

    Plex media server 1.21 and before is vulnerable to ddos reflection attack via plex service.

  • High 7.5
    CVE-2021-36630 Public exploit

    DDOS reflection amplification vulnerability in eAut module of Ruckus Wireless SmartZone controller that allows remote a…