Skip to content
OpenAdvisories

Archive

19 January 2023

Vulnerabilities first published on this day (UTC), newest first.

← December 2022 2023 / January /19 February 2023 →
  1. 123
  2. 276
  3. 394
  4. 480
  5. 584
  6. 678
  7. 748
  8. 818
  9. 965
  10. 10215
  11. 11149
  12. 12103
  13. 1380
  14. 1428
  15. 1531
  16. 1667
  17. 17164
  18. 1893
  19. 1956
  20. 20103
  21. 219
  22. 227
  23. 2394
  24. 24125
  25. 2560
  26. 26174
  27. 2786
  28. 287
  29. 2912
  30. 30102
  31. 3151
All Critical High Medium Low Exploited only Public exploit

56 results · Feed

  • Medium 5.4
    CVE-2023-0406

    Cross-Site Request Forgery (CSRF) in modoboa/modoboa

    Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.0.4.

    modoboa modoboa/modoboa modoboa PyPI
  • High 7.5
    CVE-2023-0126 Scanner template EPSS 73%

    Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated att…

    SonicWall SonicWall SMA1000 Network devices
  • Medium 6.8
    CVE-2023-0396

    Buffer Overreads in Bluetooth HCI

    A malicious / defective bluetooth controller can cause buffer overreads in the most functions that process HCI command responses.

    zephyrproject-rtos Zephyr
  • Critical 9.6
    CVE-2023-0397

    DoS: Invalid Initialization in le_read_buffer_size_complete

    A malicious / defect bluetooth controller can cause a Denial of Service due to unchecked input in le_read_buffer_size_complete.

    zephyrproject-rtos Zephyr
  • Medium 6.5
    CVE-2022-31901 Public exploit

    Buffer overflow in function Notepad_plus::addHotSpot in Notepad++ v8.4.3 and earlier allows attackers to crash the appl…

  • Critical 9.8
    CVE-2022-3806

    Bluetooth HCI Error Handling Double Free

    Inconsistent handling of error cases in bluetooth hci may lead to a double free condition of a network buffer.

    zephyrproject-rtos Zephyr
  • Critical 9.8
    CVE-2022-46476 EPSS 41%

    D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soa…

  • Medium 5.4
    CVE-2022-46889 EPSS 60%

    A persistent cross-site scripting (XSS) vulnerability in NexusPHP before 1.7.33 allows remote authenticated attackers t…

  • Critical 9.8
    CVE-2022-46887 EPSS 19%

    Multiple SQL injection vulnerabilities in NexusPHP before 1.7.33 allow remote attackers to execute arbitrary SQL comman…

  • Medium 6.1
    CVE-2022-46888 Scanner template

    Multiple reflective cross-site scripting (XSS) vulnerabilities in NexusPHP before 1.7.33 allow remote attackers to inje…

  • Medium 4.3
    CVE-2022-46890

    Weak access control in NexusPHP before 1.7.33 allows a remote authenticated user to edit any post in the forum (this is…

  • High 8.8
    CVE-2022-47745 EPSS 15%

    ZenTao 16.4 to 18.0.beta1 is vulnerable to SQL injection. After logging in with any user, you can complete SQL injectio…

  • High 8.8
    CVE-2022-47766

    PopojiCMS v2.0.1 backend plugin function has a file upload vulnerability.

  • Critical 9.8
    CVE-2022-47105

    Jeecg-boot is vulnerable to SQL injection

    Jeecg-boot v3.4.4 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData.

    org.jeecgframework.boot:jeecg-boot-base-core org.jeecgframework.boot:jeecg-module-system Maven
  • Critical 9.8
    CVE-2022-47740

    Seltmann GmbH Content Management System 6 is vulnerable to SQL Injection via /index.php.

  • High 8.0
    CVE-2021-37774

    An issue was discovered in function httpProcDataSrv in TL-WDR7660 2.0.30 that allows attackers to execute arbitrary cod…