Skip to content
OpenAdvisories

Archive

20 January 2023

Vulnerabilities first published on this day (UTC), newest first.

← December 2022 2023 / January /20 February 2023 →
  1. 123
  2. 276
  3. 394
  4. 480
  5. 584
  6. 678
  7. 748
  8. 818
  9. 965
  10. 10215
  11. 11149
  12. 12103
  13. 1380
  14. 1428
  15. 1531
  16. 1667
  17. 17164
  18. 1893
  19. 1956
  20. 20103
  21. 219
  22. 227
  23. 2394
  24. 24125
  25. 2560
  26. 26174
  27. 2786
  28. 287
  29. 2912
  30. 30102
  31. 3151
All Critical High Medium Low Exploited only Public exploit

21 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-0052

    SAUTER Controls Nova 200–220 Series Missing Authentication for Critical Function

    SAUTER Controls Nova 200–220 Series with firmware version 3.3-006 and prior and BACnetstac version 4.2.1 and prior allows the execution of commands without credentials. As Telnet and file transfer protocol (FTP) are the only protocols available for device man…

    SAUTER Controls Nova 106 (EYK300F001) BACnet communication card Nova 230 (EYK230F001) DDC with BACnet connection moduNet300 (EY-AM300F001, EY-AM300F002)
  • Critical 9.8
    CVE-2023-23607

    Unrestricted file upload leads to Remote Code Execution in erohtar/Dasherr

    erohtar/Dasherr is a dashboard for self-hosted services. In affected versions unrestricted file upload allows any unauthenticated user to execute arbitrary code on the server. The file /www/include/filesave.php allows for any file to uploaded to anywhere. If …

    erohtar Dasherr
  • Critical 9.8
    CVE-2020-29297

    Multiple SQL Injection vulnerabilities in tourist5 Online-food-ordering-system 1.0.

  • Critical 9.8
    CVE-2020-23256

    electerm allows unauthorized users to execute arbitrary commands

    An issue was discovered in Electerm 1.3.22, allows attackers to execute arbitrary code via unverified request to electerms service.

    electerm npm
  • Critical 9.8
    CVE-2020-21152

    SQL Injection vulnerability in inxedu 2.0.6 allows attackers to execute arbitrary commands via the functionIds paramete…

  • Critical 9.8
    CVE-2020-22654

    In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n…

  • Critical 9.1
    CVE-2020-22657

    In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n…

  • Critical 9.8
    CVE-2020-22653

    In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n…

  • Critical 9.8
    CVE-2020-22658

    In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n…

  • Critical 9.8
    CVE-2023-24028

    In MISP 2.4.167, app/Controller/Component/ACLComponent.php has incorrect access control for the decaying import functio…

  • Critical 9.8
    CVE-2023-23489 Scanner template EPSS 11%

    The Easy Digital Downloads WordPress Plugin, versions 3.1.0.2 & 3.1.0.3, is affected by an unauthenticated SQL injectio…

    Web / CMS
  • Critical 9.8
    CVE-2023-23488 Public exploit Scanner template EPSS 92%

    The Paid Memberships Pro WordPress Plugin, version < 2.9.8, is affected by an unauthenticated SQL injection vulnerabili…

    Web / CMS
  • Critical 9.1
    CVE-2023-22964

    Zoho ManageEngine ServiceDesk Plus MSP before 10611, and 13x before 13004, is vulnerable to authentication bypass when …

  • Critical 9.8
    CVE-2022-48123

    TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the servername p…

  • Critical 9.8
    CVE-2022-48152

    SQL Injection vulnerability in RemoteClinic 2.0 allows attackers to execute arbitrary commands and gain sensitive infor…

  • Critical 9.8
    CVE-2022-48126

    TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the username par…

  • Critical 9.8
    CVE-2022-48122

    TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the dayvalid par…

  • Critical 9.8
    CVE-2022-48125

    TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the password par…

  • Critical 9.8
    CVE-2022-48124

    TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the FileName par…

  • Critical 9.8
    CVE-2022-48120

    SQL Injection vulnerability in kishan0725 Hospital Management System thru commit 4770d740f2512693ef8fd9aa10a8d17f79fad9…

  • Critical 9.8
    CVE-2022-48121

    TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the rsabits para…