Skip to content
OpenAdvisories

Archive

January 2023

Vulnerabilities first published in this month (UTC), newest first.

← December 2022 2023 / January February 2023 →
  1. 123
  2. 276
  3. 394
  4. 480
  5. 584
  6. 678
  7. 748
  8. 818
  9. 965
  10. 10215
  11. 11149
  12. 12103
  13. 1380
  14. 1428
  15. 1531
  16. 1667
  17. 17164
  18. 1893
  19. 1956
  20. 20103
  21. 219
  22. 227
  23. 2394
  24. 24125
  25. 2560
  26. 26174
  27. 2786
  28. 287
  29. 2912
  30. 30102
  31. 3151
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.9
    CVE-2023-0266 Exploited Public exploit

    Use after free in SNDRV_CTL_IOCTL_ELEM in Linux Kernel

    A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be used in a use-after-free that can result in a priviledge escalation to gain ring0 access from the system user. …

    Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
    KEV Mar 30, 2023
  • High 7.8
    CVE-2023-21608 Exploited Public exploit EPSS 59%

    Adobe Acrobat Reader DC resetForm Use-After-Free Remote Code Execution Vulnerability

    Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation o…

    Adobe Acrobat Reader
    KEV Oct 10, 2023
  • Critical 9.8
    CVE-2022-47966 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due…

    KEV Jan 23, 2023
  • High 7.5
    CVE-2023-21839 Exploited Public exploit Scanner template EPSS 100%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
    KEV May 1, 2023
  • High 8.8
    CVE-2023-22952 Exploited Public exploit Scanner template EPSS 80%

    In SugarCRM before 12.0. Hotfix 91155, a crafted request can inject custom PHP code through the EmailTemplates because …

    KEV Feb 2, 2023
  • High 8.8
    CVE-2023-21674 Exploited Public exploit EPSS 34%

    Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

    Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Jan 10, 2023
  • Critical 9.8
    CVE-2022-44877 Exploited Public exploit Scanner template EPSS 100%

    login/index.php in CWP (aka Control Web Panel or CentOS Web Panel) 7 before 0.9.8.1147 allows remote attackers to execu…

    KEV Jan 17, 2023
  • Critical 9.3
    CVE-2022-42475 Exploited · Ransomware Public exploit EPSS 99%

    A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0…

    Fortinet FortiOS FortiProxy Network devices
    KEV Dec 13, 2022