Skip to content
OpenAdvisories

Archive

19 January 2023

Vulnerabilities first published on this day (UTC), newest first.

← December 2022 2023 / January /19 February 2023 →
  1. 123
  2. 276
  3. 394
  4. 480
  5. 584
  6. 678
  7. 748
  8. 818
  9. 965
  10. 10215
  11. 11149
  12. 12103
  13. 1380
  14. 1428
  15. 1531
  16. 1667
  17. 17164
  18. 1893
  19. 1956
  20. 20103
  21. 219
  22. 227
  23. 2394
  24. 24125
  25. 2560
  26. 26174
  27. 2786
  28. 287
  29. 2912
  30. 30102
  31. 3151
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-22741

    heap-over-flow in stun_parse_attribute in sofia-sip

    Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification. In affected versions Sofia-SIP **lacks both message length and attributes length checks** when it handles STUN packets, leading to controllable heap-over-flow. …

    freeswitch sofia-sip sofia-sip sofia-sip Debian Ubuntu Alpine
  • Critical 9.0
    CVE-2022-47196

    An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default in…

    Ghost Foundation Ghost
  • Critical 9.0
    CVE-2022-47195

    An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default in…

    Ghost Foundation Ghost
  • Critical 9.0
    CVE-2022-47197

    An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default in…

    Ghost Foundation Ghost
  • Critical 9.0
    CVE-2022-47194

    An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default in…

    Ghost Foundation Ghost
  • Critical 9.0
    CVE-2023-20025 Public exploit

    A vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, and RV082 Routers c…

    Cisco Cisco Small Business RV Series Router Firmware Network devices
  • Critical 9.6
    CVE-2023-0397

    DoS: Invalid Initialization in le_read_buffer_size_complete

    A malicious / defect bluetooth controller can cause a Denial of Service due to unchecked input in le_read_buffer_size_complete.

    zephyrproject-rtos Zephyr
  • Critical 9.8
    CVE-2022-3806

    Bluetooth HCI Error Handling Double Free

    Inconsistent handling of error cases in bluetooth hci may lead to a double free condition of a network buffer.

    zephyrproject-rtos Zephyr
  • Critical 9.8
    CVE-2022-46476 EPSS 41%

    D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soa…

  • Critical 9.8
    CVE-2022-46887 EPSS 19%

    Multiple SQL injection vulnerabilities in NexusPHP before 1.7.33 allow remote attackers to execute arbitrary SQL comman…

  • Critical 9.8
    CVE-2022-47105

    Jeecg-boot is vulnerable to SQL injection

    Jeecg-boot v3.4.4 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData.

    org.jeecgframework.boot:jeecg-boot-base-core org.jeecgframework.boot:jeecg-module-system Maven
  • Critical 9.8
    CVE-2022-47740

    Seltmann GmbH Content Management System 6 is vulnerable to SQL Injection via /index.php.