CVEs published January 4, 2023
80 CVEs were published on January 4, 2023: 3 critical, 15 high.
- Published
- 80
- Critical
- 3
- High
- 15
- Medium
- 54
- Low
- 7
- Unrated
- 1
- Now in CISA KEV
- 0
- Fix available
- 36
Most affected products
- Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- 39
- IBM Sterling B2B Integrator Standard Edition
- 6
- Axiell Iguana
- 3
- vim/vim
- 3
- lirantal/daloradius
- 2
- @uniswap/universal-router
- 1
- AlliedModders AMX Mod X
- 1
- Apache Software Foundation Apache DolphinScheduler · apa… +1
- 1
- discourse-mermaid-theme-component
- 1
- fossology
- 1
Critical 3
- CVE-2023-22463KubePi's Hardcoded Jwtsigkeys allows malicious actor to login with a forged JWT token KubeOperator KubePi · github.com/KubeOperator/kubepi
- CVE-2022-45875Apache DolphinScheduler: Remote command execution Vulnerability in script alert pluginApache Software Foundation Apache DolphinScheduler · apa… +1
- CVE-2023-22457org.xwiki.contrib:application-ckeditor-ui vulnerable to Remote Code Execution via Cross-Site Request Forgeryxwiki-contrib application-ckeditor · org.xwiki.contrib:appl…
High 15
- CVE-2023-22467luxon.js inefficient regular expression complexity vulnerabilitymoment luxon · luxon
- CVE-2022-45052Local File Inclusion in Axiell Iguana CMSAxiell Iguana
- CVE-2022-25926Versions of the package window-control before 1.4.5 are vulnerable to Command Injection via the sendKeys function, due to improper input sanwindow-control
- CVE-2023-22465Http4s has fatal error parsing User-Agent and Server headershttp4s · org.http4s:http4s-core_2.13 +4
- CVE-2023-22461sanitize-svg Filter Bypass Allows Cross-Site Scripting (XSS)mattkrick sanitize-svg · @mattkrick/sanitize-svg
- CVE-2023-22460go-ipld-prime json codec may panic if asked to encode bytesgo-ipld-prime · github.com/ipld/go-ipld-prime
- CVE-2022-46081In Garmin Connect 4.61, terminating a LiveTrack session wouldn't prevent the LiveTrack API from continued exposure of private personal infor
- CVE-2022-46456NASM v2.16 was discovered to contain a global buffer overflow in the component dbgdbg_typevalue at /output/outdbg.c.
- CVE-2022-48216Uniswap Universal Router before 1.1.0 mishandles reentrancy.@uniswap/universal-router
- CVE-2022-48217The tf_remapper_node component 1.1.1 for Robot Operating System (ROS) allows attackers, who control the source code of a different node in t
- CVE-2023-0046Improper Restriction of Names for Files and Other Resources in lirantal/daloradiuslirantal/daloradius
- CVE-2023-0048 Code Injection in lirantal/daloradiuslirantal/daloradius
- CVE-2023-0049Out-of-bounds Read in vim/vimvim/vim
- CVE-2023-0051Heap-based Buffer Overflow in vim/vimvim/vim
- CVE-2023-0054Out-of-bounds Write in vim/vimvim/vim
Medium, low and unrated 62
- CVE-2022-4876Kaltura mwEmbed DefaultSettings.php cross site scriptingKaltura mwEmbed
- CVE-2023-22466Tokio's reject_remote_clients configuration may get dropped when creating a Windows named pipetokio-rs tokio · tokio
- CVE-2022-4875fossology cross site scriptingfossology
- CVE-2021-4302slackero phpwcms SVG File cross site scriptingslackero phpwcms
- CVE-2021-4300ghostlander Halcyon Block Verification main.cpp AddToBlockIndex access controlghostlander Halcyon
- CVE-2022-45051Reflected POST XSS in Axiell Iguana CMSAxiell Iguana
- CVE-2022-45049Reflected XSS in Axiell Iguana CMSAxiell Iguana
- CVE-2022-22337IBM Sterling B2B Integrator Standard Edition information disclosureIBM Sterling B2B Integrator Standard Edition
- CVE-2022-22338IBM Sterling B2B Integrator Standard Edition SQL injectionIBM Sterling B2B Integrator Standard Edition
- CVE-2022-22371IBM Sterling B2B Integrator Standard Edition session fixationIBM Sterling B2B Integrator Standard Edition
- CVE-2021-38928IBM Sterling B2B Integrator Standard Edition cross-origin resource sharingIBM Sterling B2B Integrator Standard Edition
- CVE-2022-43920IBM Sterling B2B Integrator Standard Edition privilege escalationIBM Sterling B2B Integrator Standard Edition
- CVE-2022-34330IBM Sterling B2B Integrator cross-site scriptingIBM Sterling B2B Integrator
- CVE-2022-22352IBM Sterling B2B Integrator Standard Edition cross-site scriptingIBM Sterling B2B Integrator Standard Edition
- CVE-2022-46180Arbitrary HTML injection in discourse-mermaid-theme-componentdiscourse-mermaid-theme-component
- CVE-2023-22464ViewVC XSS vulnerability in revision view changed path "copyfrom" locationsviewvc
- CVE-2016-15008oxguy3 coebot-www channel.js showChannelBoir cross site scriptingoxguy3 coebot-www
- CVE-2020-36639AlliedModders AMX Mod X Console Command adminvote.sma cmdVoteMap path traversalAlliedModders AMX Mod X
- CVE-2019-25094innologi appointments Extension Appointment cross site scriptinginnologi appointments Extension · innologi/typo3-appointmen…
- CVE-2014-125039kkokko NeoXplora Trainer cross site scriptingkkokko NeoXplora
- CVE-2010-10003gesellix titlelink plugin_content_title.php sql injectiongesellix titlelink
- CVE-2022-38678In contacts service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-38682In contacts service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-38683In contacts service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-38684In contacts service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39081In network service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39082In network service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39083In network service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39084In network service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39085In network service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39086In network service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39087In network service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39088In network service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39104In contacts service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39116In sprd_sysdump driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-39118In sprd_sysdump driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-44422In music service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-44423In music service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-44424In music service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-44425In wlan driver, there is a possible missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-44426In wlan driver, there is a possible missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-44427In wlan driver, there is a possible missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-44428In wlan driver, there is a possible missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-44429In wlan driver, there is a possible missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-44430In wlan driver, there is a possible missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-44431In wlan driver, there is a possible missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-44432In wlan driver, there is a possible missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-44434In messaging service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-44435In messaging service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-44436In messaging service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-44437In messaging service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-44438In messaging service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-44439In messaging service, there is a missing permission check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-44440In wlan driver, there is a possible missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-44441In wlan driver, there is a possible missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-44442In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-44443In wlan driver, there is a possible missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-44444In wlan driver, there is a possible missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-44445In wlan driver, there is a possible missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-44446In wlan driver, there is a possible missing bounds check.Unisoc (Shanghai) Technologies Co. SC9863A/SC9832E/SC7731E/…
- CVE-2022-46457NASM v2.16 was discovered to contain a segmentation violation in the component ieee_write_file at /output/outieee.c.
- CVE-2023-0055Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in pyload/pyloadpyload/pyload · pyload-ng