Skip to content
OpenAdvisories

Archive

25 January 2023

Vulnerabilities first published on this day (UTC), newest first.

← December 2022 2023 / January /25 February 2023 →
  1. 123
  2. 276
  3. 394
  4. 480
  5. 584
  6. 678
  7. 748
  8. 818
  9. 965
  10. 10215
  11. 11149
  12. 12103
  13. 1380
  14. 1428
  15. 1531
  16. 1667
  17. 17164
  18. 1893
  19. 1956
  20. 20103
  21. 219
  22. 227
  23. 2394
  24. 24125
  25. 2560
  26. 26174
  27. 2786
  28. 287
  29. 2912
  30. 30102
  31. 3151
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Critical 9.1
    CVE-2023-22482

    JWT audience claim is not verified

    Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions of Argo CD starting with v1.8.2 and prior to 2.3.13, 2.4.19, 2.5.6, and 2.6.0-rc-3 are vulnerable to an improper authorization bug causing the API to accept certain invalid tok…

    argoproj Argo CD github.com/argoproj/argo-cd github.com/argoproj/argo-cd/v2 Go
  • Critical 9.8
    CVE-2022-25894

    Remote Code Execution in com.bstek.uflo:uflo-core

    All versions of the package com.bstek.uflo:uflo-core are vulnerable to Remote Code Execution (RCE) in the ExpressionContextImpl class via jexl.createExpression(expression).evaluate(context); functionality, due to improper user input validation.

    com.bstek.uflo:uflo-core Maven
  • Critical 9.1
    CVE-2020-18330

    An issue was discovered in the default configuration of ChinaMobile PLC Wireless Router model GPN2.4P21-C-CN running th…

  • Critical 9.1
    CVE-2020-18331

    Directory traversal vulnerability in ChinaMobile PLC Wireless Router model GPN2.4P21-C-CN running the firmware version …

  • Critical 9.1
    CVE-2023-0321

    Disclosure of Sensitive Information on Campbell Scientific Products

    Campbell Scientific dataloggers CR6, CR300, CR800, CR1000 and CR3000 may allow an attacker to download configuration files, which may contain sensitive information about the internal network. From factory defaults, the mentioned datalogges have HTTP and PakBu…

    Campbell Scientific CR300 CR1000 CR6
  • Critical 9.8
    CVE-2022-31704 Public exploit Scanner template EPSS 81%

    The vRealize Log Insight contains a broken access control vulnerability. An unauthenticated malicious actor can remotel…

  • Critical 9.8
    CVE-2022-31706 Public exploit Scanner template EPSS 87%

    The vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject f…

  • Critical 9.8
    CVE-2022-46998

    An issue in the website background of taocms v3.0.2 allows attackers to execute a Server-Side Request Forgery (SSRF).

  • Critical 9.8
    CVE-2022-46999

    Tuzicms v2.0.6 was discovered to contain a SQL injection vulnerability via the component \App\Manage\Controller\UserCon…

  • Critical 9.8
    CVE-2022-47767

    A backdoor in Solar-Log Gateway products allows remote access via web panel gaining super administration privileges to …