Archive
30 January 2023
Vulnerabilities first published on this day (UTC), newest first.
102 results · Feed
-
High 7.1
A CWE 502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the …
-
Critical 9.8
A CWE-521: Weak Password Requirements vulnerability exists that could allow an attacker to gain control of the device w…
-
Critical 9.8
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overfl…
-
High 8.6
A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause brute force …
-
High 8.0
A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE inst…
-
High 7.5
A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists that could cause system’s configurations override and…
-
High 7.9
A CWE-295: Improper Certificate Validation vulnerability exists that could cause the CAE software to give wrong data to…
-
High 8.6
A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause access to manipulate and …
-
Critical 9.8
A CWE-287: Improper Authentication vulnerability exists that could allow an attacker to gain control of the device when…
-
Critical 9.8
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overfl…
-
Critical 9.8
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overfl…
-
Critical 9.8
Rukovoditel v3.2.1 was discovered to contain a remote code execution (RCE) vulnerability in the component /rukovoditel/…
-
Medium 5.5
GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional ju…
-
High 7.8
Netgear routers R7000P before v1.3.3.154, R6900P before v1.3.3.154, R7960P before v1.4.4.94, and R8000P before v1.4.4.9…
-
Critical 9.8
An arbitrary file upload vulnerability in taocms v3.0.2 allows attackers to execute arbitrary code via a crafted PHP fi…
-
Medium 4.3
A CWE-787: Out-of-bounds Write vulnerability exists that could cause sensitive information leakage when accessing a mal…
-
Medium 5.4CVE-2022-46087 Public exploit
CloudSchool v3.0.1 is vulnerable to Cross Site Scripting (XSS). A normal user can steal session cookies of the admin us…
-
High 7.5
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code ex…
-
Medium 6.5
On Xerox WorkCentre 3550 25.003.03.000 devices, an authenticated attacker can view the SMB server settings and can obta…
-
Critical 9.8
The Robot application in Ip-label Newtest before v8.5R0 was discovered to use weak signature checks on executed binarie…
-
Medium 6.5
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in a func…
-
Low 3.9
A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause all remote domains to access the …