Skip to content
OpenAdvisories

Archive

23 January 2023

Vulnerabilities first published on this day (UTC), newest first.

← December 2022 2023 / January /23 February 2023 →
  1. 123
  2. 276
  3. 394
  4. 480
  5. 584
  6. 678
  7. 748
  8. 818
  9. 965
  10. 10215
  11. 11149
  12. 12103
  13. 1380
  14. 1428
  15. 1531
  16. 1667
  17. 17164
  18. 1893
  19. 1956
  20. 20103
  21. 219
  22. 227
  23. 2394
  24. 24125
  25. 2560
  26. 26174
  27. 2786
  28. 287
  29. 2912
  30. 30102
  31. 3151
All Critical High Medium Low Exploited only Public exploit

94 results · Feed

  • Medium 4.3
    CVE-2022-46959

    Path Traversal in github.com/go-sonic/sonic

    An issue in the component /admin/backups/work-dir of Sonic v1.0.4 allows attackers to execute a directory traversal.

    github.com/go-sonic/sonic Go
  • High 7.5
    CVE-2022-46639

    A vulnerability in the descarga_etiqueta.php component of Correos Prestashop 1.7.x allows attackers to execute a direct…

  • Medium 5.4
    CVE-2022-40034

    Cross-Site Scripting (XSS) vulnerability found in Rawchen blog-ssm v1.0 allows attackers to execute arbitrary code via …

  • High 8.7
    CVE-2022-23005

    Host Boot ROM Code Vulnerability in Systems Implementing UFS Boot Feature

    Western Digital has identified a weakness in the UFS standard that could result in a security vulnerability. This vulnerability may exist in some systems where the Host boot ROM code implements the UFS Boot feature to boot from UFS compliant storage devices. …

  • Medium 6.4
    CVE-2022-41505

    An access control issue on TP-LInk Tapo C200 V1 devices allows physically proximate attackers to obtain root access by …

  • High 8.8
    CVE-2022-37719

    A Cross-Site Request Forgery (CSRF) in the management portal of JetNexus/EdgeNexus ADC 4.2.8 allows attackers to escala…

  • High 8.8
    CVE-2022-37718

    The management portal component of JetNexus/EdgeNexus ADC 4.2.8 was discovered to contain a command injection vulnerabi…

  • High 8.8
    CVE-2022-47065

    TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflo…

  • Medium 5.3
    CVE-2021-43448

    ONLYOFFICE all versions as of 2021-11-08 is vulnerable to Improper Input Validation. A lack of input validation can all…

  • High 8.1
    CVE-2021-43449

    ONLYOFFICE all versions as of 2021-11-08 is vulnerable to Server-Side Request Forgery (SSRF). The document editor servi…

  • High 7.5
    CVE-2021-43447

    ONLYOFFICE all versions as of 2021-11-08 is affected by Incorrect Access Control. An authentication bypass in the docum…

  • Medium 6.1
    CVE-2021-43446

    ONLYOFFICE all versions as of 2021-11-08 is vulnerable to Cross Site Scripting (XSS). The "macros" feature of the docum…

  • High 7.5
    CVE-2021-43444

    ONLYOFFICE all versions as of 2021-11-08 is affected by Incorrect Access Control. Signed document download URLs can be …

  • Critical 9.8
    CVE-2021-43445

    ONLYOFFICE all versions as of 2021-11-08 is affected by Incorrect Access Control. An attacker can authenticate with the…