Skip to content
OpenAdvisories

Archive

January 2023

Vulnerabilities first published in this month (UTC), newest first.

← December 2022 2023 / January February 2023 →
  1. 123
  2. 276
  3. 394
  4. 480
  5. 584
  6. 678
  7. 748
  8. 818
  9. 965
  10. 10215
  11. 11149
  12. 12103
  13. 1380
  14. 1428
  15. 1531
  16. 1667
  17. 17164
  18. 1893
  19. 1956
  20. 20103
  21. 219
  22. 227
  23. 2394
  24. 24125
  25. 2560
  26. 26174
  27. 2786
  28. 287
  29. 2912
  30. 30102
  31. 3151
All Critical High Medium Low Exploited only Public exploit

21 results · Clear filters · Feed

  • Critical 10.0
    CVE-2023-23924 Public exploit

    URI validation failure on SVG parsing in Dompdf

    Dompdf is an HTML to PDF converter. The URI validation on dompdf 2.0.1 can be bypassed on SVG parsing by passing `<image>` tags with uppercase letters. This may lead to arbitrary object unserialize on PHP < 8, through the `phar` URL wrapper. An attacker can e…

    dompdf dompdf dompdf/dompdf Packagist
  • Critical 9.8
    CVE-2022-45297 Public exploit

    EQ v1.5.31 to v2.2.0 was discovered to contain a SQL injection vulnerability via the UserPwd parameter.

  • Critical 9.8
    CVE-2022-4395 Public exploit EPSS 17%

    Membership For WooCommerce < 2.1.7 - Unauthenticated Arbitrary File Upload

    The Membership For WooCommerce WordPress plugin before 2.1.7 does not validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as malicious PHP code, and achieve RCE.

    Web / CMS
  • Critical 9.8
    CVE-2022-31704 Public exploit Scanner template EPSS 81%

    The vRealize Log Insight contains a broken access control vulnerability. An unauthenticated malicious actor can remotel…

  • Critical 9.8
    CVE-2022-31706 Public exploit Scanner template EPSS 87%

    The vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject f…

  • Critical 9.9
    CVE-2022-45808 Public exploit Scanner template

    WordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to SQL Injection

    SQL Injection vulnerability in LearnPress – WordPress LMS Plugin <= 4.1.7.3.2 versions.

    ThimPress LearnPress – WordPress LMS Plugin Web / CMS
  • Critical 9.3
    CVE-2022-47615 Public exploit Scanner template

    WordPress LearnPress Plugin <= 4.1.7.3.2 is vulnerable to Local File Inclusion

    Local File Inclusion vulnerability in LearnPress – WordPress LMS Plugin <= 4.1.7.3.2 versions.

    ThimPress LearnPress – WordPress LMS Plugin Web / CMS
  • Critical 9.8
    CVE-2022-0316 Public exploit

    Multiple themes - Unauthenticated Arbitrary File Upload

    The WeStand WordPress theme before 2.1, footysquare WordPress theme, aidreform WordPress theme, statfort WordPress theme, club-theme WordPress theme, kingclub-theme WordPress theme, spikes WordPress theme, spikes-black WordPress theme, soundblast WordPress th…

    Web / CMS
  • Critical 9.8
    CVE-2023-22884 Public exploit EPSS 12%

    Apache Airflow, Apache Airflow MySQL Provider: Arbitrary file read via MySQL provider in Apache Airflow

    Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Software Foundation Apache Airflow, Apache Software Foundation Apache Airflow MySQL Provider.This issue affects Apache Airflow: before 2.5.1; Apache Ai…

    Apache Software Foundation Apache Airflow Apache Airflow MySQL Provider apache-airflow PyPI
  • Critical 9.8
    CVE-2023-23488 Public exploit Scanner template EPSS 92%

    The Paid Memberships Pro WordPress Plugin, version < 2.9.8, is affected by an unauthenticated SQL injection vulnerabili…

    Web / CMS
  • Critical 9.0
    CVE-2023-20025 Public exploit

    A vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, and RV082 Routers c…

    Cisco Cisco Small Business RV Series Router Firmware Network devices
  • Critical 9.8
    CVE-2022-47966 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due…

    KEV Jan 23, 2023
  • Critical 9.8
    CVE-2022-41903 Public exploit EPSS 44%

    Integer overflow in `git archive`, `git log --format` leading to RCE in git

    Git is distributed revision control system. `git log` can display commits in an arbitrary format using its `--format` specifiers. This functionality is also exposed to `git archive` via the `export-subst` gitattribute. When processing the padding operators, t…

    git git git git Debian Ubuntu Azure Linux Alpine Wolfi
  • Critical 9.8
    CVE-2022-4060 Public exploit Scanner template EPSS 43%

    User Post Gallery <= 2.19 - Unauthenticated RCE

    The User Post Gallery WordPress plugin through 2.19 does not limit what callback functions can be called by users, making it possible to any visitors to run code on sites running it.

    Web / CMS
  • Critical 9.8
    CVE-2023-0297 Public exploit Scanner template EPSS 96%

    Code Injection in pyload/pyload

    Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31.

    pyload pyload/pyload pyload-ng PyPI
  • Critical 9.8
    CVE-2022-45299 Public exploit

    webbrowser-rs allows attackers to access arbitrary files via supplying a crafted URL

    An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL.

    webbrowser rust-webbrowser rust-webbrowser Debian Ubuntu crates.io
  • Critical 9.1
    CVE-2022-3782 Public exploit

    Keycloak vulnerable to path traversal via double URL encoding

    keycloak: path traversal via double URL encoding. A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. An attacker can use this flaw to construct a malicious request to bypass validation and access other URLs and pote…

    redhat.com Keycloak org.keycloak:keycloak-parent Maven
  • Critical 9.8
    CVE-2022-39073 Public exploit

    There is a command injection vulnerability in ZTE MF286R, Due to insufficient validation of the input parameters, an at…

  • Critical 9.8
    CVE-2022-44877 Exploited Public exploit Scanner template EPSS 100%

    login/index.php in CWP (aka Control Web Panel or CentOS Web Panel) 7 before 0.9.8.1147 allows remote attackers to execu…

    KEV Jan 17, 2023
  • Critical 9.8
    CVE-2022-4297 Public exploit

    WP AutoComplete Search <= 1.0.4 - Unauthenticated SQLi

    The WP AutoComplete Search WordPress plugin through 1.0.4 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX available to unauthenticated users, leading to an unauthenticated SQL injection

    Web / CMS
  • Critical 9.3
    CVE-2022-42475 Exploited · Ransomware Public exploit EPSS 99%

    A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0…

    Fortinet FortiOS FortiProxy Network devices
    KEV Dec 13, 2022