Skip to content
OpenAdvisories

Archive

January 2023

Vulnerabilities first published in this month (UTC), newest first.

← December 2022 2023 / January February 2023 →
  1. 123
  2. 276
  3. 394
  4. 480
  5. 584
  6. 678
  7. 748
  8. 818
  9. 965
  10. 10215
  11. 11149
  12. 12103
  13. 1380
  14. 1428
  15. 1531
  16. 1667
  17. 17164
  18. 1893
  19. 1956
  20. 20103
  21. 219
  22. 227
  23. 2394
  24. 24125
  25. 2560
  26. 26174
  27. 2786
  28. 287
  29. 2912
  30. 30102
  31. 3151
All Critical High Medium Low Exploited only Public exploit

2,382 results · Feed

  • Low 3.3
    CVE-2022-42393

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…

    PDF-XChange PDF-XChange Editor
  • Unscored —
    CVE-2022-42330

    Guests can cause Xenstore crash via soft reset When a guest issues a "Soft Reset" (e.g. for performing a kexec) the lib…

    Xen Xen xen xen Virtualization Debian Ubuntu Alpine
  • Low 3.3
    CVE-2022-42411

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…

    PDF-XChange PDF-XChange Editor
  • Low 3.3
    CVE-2022-42401

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…

    PDF-XChange PDF-XChange Editor
  • Low 3.3
    CVE-2022-42389

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…

    PDF-XChange PDF-XChange Editor
  • Low 3.3
    CVE-2022-42406

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42378

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42396

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • Low 3.3
    CVE-2022-42384

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42416

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42380

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • Low 3.3
    CVE-2022-42398

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42405

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42415

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • Low 3.3
    CVE-2022-42386

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…

    PDF-XChange PDF-XChange Editor
  • Low 3.3
    CVE-2022-42369

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…

    PDF-XChange PDF-XChange Editor
  • Low 3.3
    CVE-2022-42412

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42417

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • Low 3.3
    CVE-2022-42407

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42382

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • Low 3.3
    CVE-2022-42413

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…

    PDF-XChange PDF-XChange Editor
  • Low 3.3
    CVE-2022-42385

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…

    PDF-XChange PDF-XChange Editor
  • Low 3.3
    CVE-2022-42391

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…

    PDF-XChange PDF-XChange Editor
  • Low 3.3
    CVE-2022-42414

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42379

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • Low 3.3
    CVE-2022-42397

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…

    PDF-XChange PDF-XChange Editor
  • High 7.8
    CVE-2022-42374

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. U…

    PDF-XChange PDF-XChange Editor
  • Medium 5.7
    CVE-2022-47951

    OpenStack Cinder, glance, and Nova vulnerable to Path Traversal

    An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that refe…

    nova nova glance nova Debian Ubuntu PyPI
  • Medium 5.4
    CVE-2021-36686

    Cross-site Scripting in yapi-vendor

    Cross Site Scripting (XSS) vulnerability in yapi 1.9.1 allows attackers to execute arbitrary code via the /interface/api edit page.

    yapi-vendor npm
  • Unscored —
    CVE-2021-36539

    Instructure Canvas LMS didn't properly deny access to locked/unpublished files when the unprivileged user access the Do…

  • High 7.8
    CVE-2021-41988

    Qlik NPrinting Designer through 21.14.3.0 creates a Temporary File in a Directory with Insecure Permissions.

  • High 7.8
    CVE-2021-41989

    Qlik QlikView through 12.60.20100.0 creates a Temporary File in a Directory with Insecure Permissions.

  • High 7.5
    CVE-2022-3924 EPSS 16%

    named configured to answer from stale cache may terminate unexpectedly at recursive-clients soft quota

    This issue can affect BIND 9 resolvers with `stale-answer-enable yes;` that also make use of the option `stale-answer-client-timeout`, configured with a value greater than zero. If the resolver receives many queries that require recursion, there will be a cor…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.5
    CVE-2022-3736 EPSS 48%

    named configured to answer from stale cache may terminate unexpectedly while processing RRSIG queries

    BIND 9 resolver can crash when stale cache and stale answers are enabled, option `stale-answer-client-timeout` is set to a positive integer, and the resolver receives an RRSIG query. This issue affects BIND 9 versions 9.16.12 through 9.16.36, 9.18.0 through 9…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.5
    CVE-2022-3488 EPSS 19%

    named may terminate unexpectedly when processing ECS options in repeated responses to iterative queries

    Processing of repeated responses to the same query, where both responses contain ECS pseudo-options, but where the first is broken in some way, can cause BIND to exit with an assertion failure. 'Broken' in this context is anything that would cause the resolve…

    ISC BIND 9
  • High 7.5
    CVE-2022-3094 EPSS 13%

    An UPDATE message flood may cause named to exhaust all available memory

    Sending a flood of dynamic DNS updates may cause `named` to allocate large amounts of memory. This, in turn, may cause `named` to exit due to a lack of free memory. We are not aware of any cases where this has been exploited. Memory is allocated prior to the …

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine Wolfi
  • High 8.8
    GHSA-c45c-39f6-6gw9

    Rancher generated tokens not revoked after modifications made to authentication provider

    ### Impact This issue affects Rancher versions from 2.5.0 up to and including 2.5.16, from 2.6.0 up to and including 2.6.9 and 2.7.0. It only affects Rancher setups that have an external [authentication provider](https://ranchermanager.docs.rancher.com/pages-…

    github.com/rancher/rancher Go
  • Low 3.7
    CVE-2022-22462

    IBM Security Verify Governance, Identity Manager virtual appliance component information disclosure

    IBM Security Verify Governance, Identity Manager virtual appliance component 10.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 225078.

    IBM Security Verify Governance
  • Critical 9.1
    CVE-2023-22482

    JWT audience claim is not verified

    Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions of Argo CD starting with v1.8.2 and prior to 2.3.13, 2.4.19, 2.5.6, and 2.6.0-rc-3 are vulnerable to an improper authorization bug causing the API to accept certain invalid tok…

    argoproj Argo CD github.com/argoproj/argo-cd github.com/argoproj/argo-cd/v2 Go
  • High 7.5
    CVE-2022-43864

    IBM Business Automation Workflow information disclosure

    IBM Business Automation Workflow 22.0.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 23…

    IBM Business Monitor