Skip to content
OpenAdvisories

Archive

January 2023

Vulnerabilities first published in this month (UTC), newest first.

← December 2022 2023 / January February 2023 →
  1. 123
  2. 276
  3. 394
  4. 480
  5. 584
  6. 678
  7. 748
  8. 818
  9. 965
  10. 10215
  11. 11149
  12. 12103
  13. 1380
  14. 1428
  15. 1531
  16. 1667
  17. 17164
  18. 1893
  19. 1956
  20. 20103
  21. 219
  22. 227
  23. 2394
  24. 24125
  25. 2560
  26. 26174
  27. 2786
  28. 287
  29. 2912
  30. 30102
  31. 3151
All Critical High Medium Low Exploited only Public exploit

920 results · Clear filters · Feed

  • High 7.8
    CVE-2022-41149

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-41150

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-41148

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-41143

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-41141

    This vulnerability allows local attackers to escalate privileges on affected installations of Windscribe. An attacker m…

    Windscribe Windscribe
  • High 7.8
    CVE-2022-42419

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42420

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42394

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42403

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42372

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42377

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42402

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42370

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42421

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42371

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42418

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42395

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42400

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42423

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42399

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42381

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42410

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42373

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42378

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42396

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42416

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42380

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42405

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42415

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42417

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42382

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42379

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42374

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2021-41988

    Qlik NPrinting Designer through 21.14.3.0 creates a Temporary File in a Directory with Insecure Permissions.

  • High 7.8
    CVE-2021-41989

    Qlik QlikView through 12.60.20100.0 creates a Temporary File in a Directory with Insecure Permissions.

  • High 7.5
    CVE-2022-3924 EPSS 16%

    named configured to answer from stale cache may terminate unexpectedly at recursive-clients soft quota

    This issue can affect BIND 9 resolvers with `stale-answer-enable yes;` that also make use of the option `stale-answer-client-timeout`, configured with a value greater than zero. If the resolver receives many queries that require recursion, there will be a cor…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.5
    CVE-2022-3736 EPSS 48%

    named configured to answer from stale cache may terminate unexpectedly while processing RRSIG queries

    BIND 9 resolver can crash when stale cache and stale answers are enabled, option `stale-answer-client-timeout` is set to a positive integer, and the resolver receives an RRSIG query. This issue affects BIND 9 versions 9.16.12 through 9.16.36, 9.18.0 through 9…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.5
    CVE-2022-3488 EPSS 19%

    named may terminate unexpectedly when processing ECS options in repeated responses to iterative queries

    Processing of repeated responses to the same query, where both responses contain ECS pseudo-options, but where the first is broken in some way, can cause BIND to exit with an assertion failure. 'Broken' in this context is anything that would cause the resolve…

    ISC BIND 9
  • High 7.5
    CVE-2022-3094 EPSS 13%

    An UPDATE message flood may cause named to exhaust all available memory

    Sending a flood of dynamic DNS updates may cause `named` to allocate large amounts of memory. This, in turn, may cause `named` to exit due to a lack of free memory. We are not aware of any cases where this has been exploited. Memory is allocated prior to the …

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine Wolfi
  • High 8.8
    GHSA-c45c-39f6-6gw9

    Rancher generated tokens not revoked after modifications made to authentication provider

    ### Impact This issue affects Rancher versions from 2.5.0 up to and including 2.5.16, from 2.6.0 up to and including 2.6.9 and 2.7.0. It only affects Rancher setups that have an external [authentication provider](https://ranchermanager.docs.rancher.com/pages-…

    github.com/rancher/rancher Go