Skip to content
OpenAdvisories

Archive

24 January 2023

Vulnerabilities first published on this day (UTC), newest first.

← December 2022 2023 / January /24 February 2023 →
  1. 123
  2. 276
  3. 394
  4. 480
  5. 584
  6. 678
  7. 748
  8. 818
  9. 965
  10. 10215
  11. 11149
  12. 12103
  13. 1380
  14. 1428
  15. 1531
  16. 1667
  17. 17164
  18. 1893
  19. 1956
  20. 20103
  21. 219
  22. 227
  23. 2394
  24. 24125
  25. 2560
  26. 26174
  27. 2786
  28. 287
  29. 2912
  30. 30102
  31. 3151
All Critical High Medium Low Exploited only Public exploit

59 results · Clear filters · Feed

  • Medium 5.5
    CVE-2023-20922

    In setMimeGroup of PackageManagerService.java, there is a possible crash loop due to resource exhaustion. This could le…

    Android
  • Medium 5.5
    CVE-2023-20908

    In several functions of SettingsState.java, there is a possible system crash loop due to resource exhaustion. This coul…

    Android
  • Medium 5.4
    CVE-2022-4554

    Reflected XSS B2B Dealer Ordering System

    B2B Customer Ordering System developed by ID Software Project and Consultancy Services before version 1.0.0.347 has an authenticated Reflected XSS vulnerability. This has been fixed in the version 1.0.0.347.

    ID Software Project and Consultancy Services B2B Customer Ordering System
  • Medium 5.7
    CVE-2022-4092

    An issue has been discovered in GitLab EE affecting all versions starting from 15.6 before 15.6.1. It was possible to c…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 5.5
    CVE-2022-4054

    An issue has been discovered in GitLab affecting all versions starting from 9.3 before 15.4.6, all versions starting fr…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 6.5
    CVE-2022-27507

    Authenticated denial of service

    Authenticated denial of service

    Citirx Citrix Application Delivery Controller (Citrix ADC) and Citrix Gateway
  • Medium 6.5
    CVE-2022-3740

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 prior to 15.3.5, 15.4 prior to 1…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 5.5
    CVE-2022-3902

    An issue has been discovered in GitLab affecting all versions starting from 9.3 before 15.4.6, all versions starting fr…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 4.3
    CVE-2022-3478

    An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.4.6, all versions starting f…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 6.5
    CVE-2022-3820

    An issue has been discovered in GitLab affecting all versions starting from 15.4 prior to 15.4.4, and 15.5 prior to 15.…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 5.3
    CVE-2022-3482

    An improper access control issue in GitLab CE/EE affecting all versions from 11.3 prior to 15.3.5, 15.4 prior to 15.4.4…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 6.5
    CVE-2022-40036

    An issue was discovered in Rawchen blog-ssm v1.0 allows an attacker to obtain sensitive user information by bypassing p…

  • Medium 5.5
    CVE-2022-20215

    In onCreate of MasterClearConfirmFragment.java, there is a possible factory reset due to a tapjacking/overlay attack. T…

    Android
  • Medium 5.5
    CVE-2022-20235

    The PowerVR GPU kernel driver maintains an "Information Page" used by its cache subsystem. This page can only be writte…

    Android
  • Medium 5.5
    CVE-2022-20458

    The logs of sensitive information (PII) or hardware identifier should only be printed in Android "userdebug" or "eng" b…

    Android
  • Medium 5.5
    CVE-2022-20213

    In ApplicationsDetailsActivity of AndroidManifest.xml, there is a possible DoS due to a tapjacking/overlay attack. This…

    Android
  • Medium 4.7
    CVE-2022-20214

    In Car Settings app, the toggle button in Modify system settings is vulnerable to tapjacking attack. Attackers can over…

    Android
  • Medium 5.5
    CVE-2022-20494 Public exploit

    In AutomaticZenRule of AutomaticZenRule.java, there is a possible persistent DoS due to resource exhaustion. This could…

    Android
  • Medium 5.3
    CVE-2021-28510

    For certain systems running EOS, a Precision Time Protocol (PTP) packet of a management/signaling message with an invalid Type-Length-Value (TLV) causes the PTP agent to restart. Repeated restarts of the service will make the service unavailable.

    For certain systems running EOS, a Precision Time Protocol (PTP) packet of a management/signaling message with an invalid Type-Length-Value (TLV) causes the PTP agent to restart. Repeated restarts of the service will make the service unavailable.

    Arista Networks EOS Network devices