Archive
January 2023
Vulnerabilities first published in this month (UTC), newest first.
920 results · Clear filters · Feed
-
High 7.2
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUA…
-
High 7.2
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUA…
-
High 7.2
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUA…
-
High 7.2
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUA…
-
High 7.2
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUA…
-
High 7.2
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUA…
-
High 7.2
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUA…
-
High 7.2
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUA…
-
High 7.2
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUA…
-
High 7.2
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUA…
-
High 7.2
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUA…
-
High 7.2
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUA…
-
High 7.2
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUA…
-
High 7.2
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUA…
-
High 7.2
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUA…
-
High 7.2
An OS command injection vulnerability exists in the httpd SNMP functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141…
-
High 8.2
A directory traversal vulnerability exists in the m2m DELETE_FILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210…
-
High 7.5
Econolite EOS versions prior to 3.2.23 lack a password requirement for gaining “READONLY” access to log files and certa…
-
High —
symfont/process typosquatting malware spoofs symfony/process
In September 2021, security researchers discovered a malicious Composer package called `symfont/process`, a typosquat targeting users of `symfony/process`. The malicious package has since been removed from Packagist.
-
High 8.8
Improper session handling of "Remember me for 7 days" functionality
Pi-hole®'s Web interface (based off of AdminLTE) provides a central location to manage your Pi-hole. Versions 4.0 and above, prior to 5.18.3 are vulnerable to Insufficient Session Expiration. Improper use of admin WEBPASSWORD hash as "Remember me for 7 days" …
-
High 8.8
Discourse vulnerable to Cross-site Scripting in local oneboxes
Discourse is an open source platform for community discussion. Versions prior to 2.8.13 (stable), 3.0.0.beta16 (beta) and 3.0.0beta16 (tests-passed), are vulnerable to cross-site Scripting. A maliciously crafted URL can be included in a post to carry out cros…
-
High 8.6
argo-cd Controller reconciles apps outside configured namespaces when sharding is enabled
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions starting with 2.5.0-rc1 and above, prior to 2.5.8, and version 2.6.0-rc4, are vulnerable to an authorization bypass bug which allows a malicious Argo CD user to deploy Applicat…
-
High 7.1
Cross-site Scripting (XSS) - Stored in modoboa/modoboa
Cross-site Scripting (XSS) - Stored in GitHub repository modoboa/modoboa prior to 2.0.4.
-
High 7.1
Cross-site Scripting (XSS) - Stored in modoboa/modoboa
Cross-site Scripting (XSS) - Stored in GitHub repository modoboa/modoboa prior to 2.0.4.
-
High 7.3
Divide By Zero in vim/vim
Divide By Zero in GitHub repository vim/vim prior to 9.0.1247.
-
High 7.4
Improper Certificate Validation in pyload/pyload
Improper Certificate Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev44.
-
High 7.6CVE-2023-0455 Public exploit
Unrestricted Upload of File with Dangerous Type in unilogies/bumsys
Unrestricted Upload of File with Dangerous Type in GitHub repository unilogies/bumsys prior to v1.0.3-beta.
-
High 7.8CVE-2022-45770 Public exploit
Improper input validation in adgnetworkwfpdrv.sys in Adguard For Windows x86 through 7.11 allows local privilege escala…
-
High 8.8
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected D-Link DIR-2150 4.0.1 router…
-
High 8.8
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected D-Link DIR-2150 4.0.1 router…
-
High 8.8
This vulnerability allows network-adjacent attackers to execute arbitrary commands on affected installations of D-Link …
-
High 8.8
This vulnerability allows network-adjacent attackers to execute arbitrary commands on affected installations of D-Link …
-
High 7.8
Dentsply Sirona Sidexis <= 4.3 is vulnerable to Unquoted Service Path.
-
High 7.8
Dentsply Sirona Sidexis <= 4.3 is vulnerable to Incorrect Access Control.
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…
-
High 7.2CVE-2022-41142 EPSS 85%
This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication…
-
High 7.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…
-
High 8.8
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of multiple D-…