Skip to content
OpenAdvisories

Archive

21 January 2023

Vulnerabilities first published on this day (UTC), newest first.

← December 2022 2023 / January /21 February 2023 →
  1. 123
  2. 276
  3. 394
  4. 480
  5. 584
  6. 678
  7. 748
  8. 818
  9. 965
  10. 10215
  11. 11149
  12. 12103
  13. 1380
  14. 1428
  15. 1531
  16. 1667
  17. 17164
  18. 1893
  19. 1956
  20. 20103
  21. 219
  22. 227
  23. 2394
  24. 24125
  25. 2560
  26. 26174
  27. 2786
  28. 287
  29. 2912
  30. 30102
  31. 3151
All Critical High Medium Low Exploited only Public exploit

9 results · Feed

  • Critical 9.8
    CVE-2023-22884 Public exploit EPSS 12%

    Apache Airflow, Apache Airflow MySQL Provider: Arbitrary file read via MySQL provider in Apache Airflow

    Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Software Foundation Apache Airflow, Apache Software Foundation Apache Airflow MySQL Provider.This issue affects Apache Airflow: before 2.5.1; Apache Ai…

    Apache Software Foundation Apache Airflow Apache Airflow MySQL Provider apache-airflow PyPI
  • Unscored —
    RUSTSEC-2023-0019

    `kuchiki` is unmaintained

    The `kuchiki` repo was marked as archived in [this](https://github.com/kuchiki-rs/kuchiki/commit/f92e4c047fdc30619555da282ac7ccce1d313aa6) commit. ## Possible Alternatives Possible alternatives may include: - [kuchikiki](https://crates.io/crates/kuchikiki) - …

    kuchiki crates.io
  • High 8.8
    CVE-2020-36655

    Command injection in yiisoft/yii2-gii

    Yii Yii2 Gii before 2.2.2 allows remote attackers to execute arbitrary code via the Generator.php messageCategory field. The attacker can embed arbitrary PHP code into the model file.

    yiisoft/yii2-gii Packagist
  • High 7.8
    CVE-2023-0433

    Heap-based Buffer Overflow in vim/vim

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225.

    vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine
  • High 7.5
    CVE-2023-24038

    The HTML-StripScripts module through 1.06 for Perl allows _hss_attval_style ReDoS because of catastrophic backtracking …

    libhtml-stripscripts-perl libhtml-stripscripts-perl Debian Ubuntu
  • Unscored —
    CVE-2023-24040

    dtprintinfo in Common Desktop Environment 1.6 has a bug in the parser of lpstat (an invoked external command) during li…

  • High 7.8
    CVE-2023-24039

    A stack-based buffer overflow in ParseColors in libXm in Common Desktop Environment 1.6 can be exploited by local low-p…

  • High 7.5
    CVE-2023-24042

    A race condition in LightFTP through 2.2 allows an attacker to achieve path traversal via a malformed FTP request. A ha…

  • High 7.5
    CVE-2023-22617

    A remote attacker might be able to cause infinite recursion in PowerDNS Recursor 4.8.0 via a DNS query that retrieves D…

    pdns-recursor pdns-recursor pdns-recursor Debian Ubuntu Alpine