CVEs published January 1, 2023
23 CVEs were published on January 1, 2023: 2 critical, 4 high.
- Published
- 23
- Critical
- 2
- High
- 4
- Medium
- 11
- Low
- 6
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 8
Most affected products
- admont28 Ingnovarq
- 1
- flar2 ElementalX
- 1
- linagora/twake
- 1
- Multilaser RE708
- 1
- simplesamlphp-module-openid · simplesamlphp/simplesamlphp-m…
- 1
- taoeffect Empress
- 1
- trampgeek jobe
- 1
- Zenoss Dashboard
- 1
- Ziftr primecoin
- 1
Critical 2
- CVE-2022-34322Multiple XSS issues were discovered in Sage Enterprise Intelligence 2021 R1.1 that allow an attacker to execute JavaScript code in the conte
- CVE-2022-48198The ntpd_driver component before 1.3.0 and 2.x before 2.2.0 for Robot Operating System (ROS) allows attackers, who control the source code o
High 4
- CVE-2022-34324Multiple SQL injections in Sage XRT Business Exchange 12.4.302 allow an authenticated attacker to inject malicious data in SQL queries: Add
- CVE-2022-37785An issue was discovered in WeCube Platform 3.2.2.
- CVE-2022-47634M-Link Archive Server in Isode M-Link R16.2v1 through R17.0 before R17.0v24 allows non-administrative users to access and manipulate archive
- CVE-2023-22551The FTP (aka "Implementation of a simple FTP client and server") project through 96c1a35 allows remote attackers to cause a denial of servic
Medium, low and unrated 17
- CVE-2021-4297trampgeek jobe Restapi.php runs_post Privilege Escalationtrampgeek jobe
- CVE-2015-10006admont28 Ingnovarq insertarSliderAjax.php cross site scriptingadmont28 Ingnovarq
- CVE-2013-10006Ziftr primecoin bitcoinrpc.cpp HTTPAuthorized timing discrepancyZiftr primecoin
- CVE-2010-10002SimpleSAMLphp simplesamlphp-module-openid OpenID consumer.php cross site scriptingsimplesamlphp-module-openid · simplesamlphp/simplesamlphp-m…
- CVE-2023-0029Multilaser RE708 Telnet Service denial of serviceMultilaser RE708
- CVE-2014-125030taoeffect Empress hard-coded passwordtaoeffect Empress
- CVE-2018-25063Zenoss Dashboard defaultportlets.js cross site scriptingZenoss Dashboard
- CVE-2018-25062flar2 ElementalX ipsec xfrm_user.c xfrm_dump_policy_done denial of serviceflar2 ElementalX
- CVE-2021-41823The Web Application Firewall (WAF) in Kemp LoadMaster 7.2.54.1 allows certain uses of onmouseover to bypass an XSS protection mechanism.
- CVE-2022-34323Multiple XSS issues were discovered in Sage XRT Business Exchange 12.4.302 that allow an attacker to execute JavaScript code in the context
- CVE-2022-37786An issue was discovered in WeCube Platform 3.2.2.
- CVE-2022-37787An issue was discovered in WeCube platform 3.2.2.
- CVE-2022-40711PrimeKey EJBCA 7.9.0.2 Community allows stored XSS in the End Entity section.
- CVE-2022-45027perfSONAR before 4.4.6, when performing participant discovery, incorrectly uses an HTTP request header value to determine a local address.
- CVE-2022-45213perfSONAR before 4.4.6 inadvertently supports the parse option for a file:// URL.
- CVE-2022-47952lxc-user-nic in lxc through 5.0.1 is installed setuid root, and may allow local users to infer whether any file exists, even within a protec
- CVE-2023-0028Cross-site Scripting (XSS) - Stored in linagora/twakelinagora/twake