CVEs published January 7, 2023
48 CVEs were published on January 7, 2023: 1 critical, 6 high.
- Published
- 48
- Critical
- 1
- High
- 6
- Medium
- 29
- Low
- 12
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 42
Most affected products
- usememos/memos · github.com/usememos/memos
- 6
- Netis Netcore Router
- 3
- SourceCodester Royale Event Management System
- 2
- ada-l0velace Bid
- 1
- agnivade easy-scrypt · github.com/agnivade/easy-scrypt
- 1
- ananich bitstorm
- 1
- cronvel terminal-kit · terminal-kit
- 1
- DrAzraelTod pyChao
- 1
- forcedotcom SalesforceMobileSDK-Windows
- 1
- ForumHulp searchresults
- 1
Critical 1
High 6
- CVE-2022-1101SourceCodester Royale Event Management System userregister.php improper authenticationSourceCodester Royale Event Management System
- CVE-2014-125060holdennb CollabCal calenderServer.cpp handleGet improper authenticationholdennb CollabCal
- CVE-2018-25069Netis Netcore Router hard-coded passwordNetis Netcore Router
- CVE-2023-0108Cross-site Scripting (XSS) - Stored in usememos/memosusememos/memos · github.com/usememos/memos
- CVE-2023-0110Cross-site Scripting (XSS) - Stored in usememos/memosusememos/memos · github.com/usememos/memos
- CVE-2023-0112Cross-site Scripting (XSS) - Stored in usememos/memosusememos/memos · github.com/usememos/memos
Medium, low and unrated 41
- CVE-2022-2666SourceCodester Loan Management System login.php sql injectionSourceCodester Loan Management System
- CVE-2021-4301slackero phpwcms sql injectionslackero phpwcms
- CVE-2014-125029ttskch PaginationServiceProvider Demo index.php sql injectionttskch PaginationServiceProvider · ttskch/pagination-servic…
- CVE-2022-1102SourceCodester Royale Event Management System companyprofile.php cross site scriptingSourceCodester Royale Event Management System
- CVE-2013-10009DrAzraelTod pyChao __init__.py lesen sql injectionDrAzraelTod pyChao
- CVE-2016-15014CESNET theme-cesnet resetpassword.php insufficiently protected credentialstheme-cesnet
- CVE-2014-125065john5223 bottle-auth sql injectionjohn5223 bottle-auth
- CVE-2015-10029kelvinmo simplexrd simplexrd.class.php xml external entity referencekelvinmo simplexrd · kelvinmo/simplexrd
- CVE-2020-36646MediaArea ZenLib Ztring.cpp Date_From_Seconds_1970_Local unknown vulnerabilityMediaArea ZenLib
- CVE-2016-15013ForumHulp searchresults listener.php list_keywords sql injectionForumHulp searchresults
- CVE-2021-4307Yomguithereal Baobab prototype pollutionYomguithereal Baobab · baobab
- CVE-2017-20164Symbiote Seed Login SecurityLoginExtension.php onBeforeSecurityLogin redirectSymbiote Seed · symbiote/silverstripe-seed
- CVE-2014-125063ada-l0velace Bid sql injectionada-l0velace Bid
- CVE-2015-10028ss15-this-is-sparta Main Page roomElement.js cross site scriptingss15-this-is-sparta
- CVE-2020-36645square squalor sql injectionsquare squalor · github.com/square/squalor
- CVE-2015-10027hydrian TTRSS-Auth-LDAP Username ldap injectionhydrian TTRSS-Auth-LDAP
- CVE-2014-125062ananich bitstorm announce.php sql injectionananich bitstorm
- CVE-2021-4306cronvel terminal-kit redoscronvel terminal-kit · terminal-kit
- CVE-2016-15012forcedotcom SalesforceMobileSDK-Windows QuerySpec.cs ComputeCountSql sql injectionforcedotcom SalesforceMobileSDK-Windows
- CVE-2015-10026tiredtyrant flairbot flair.py sql injectiontiredtyrant flairbot
- CVE-2022-4880stakira OpenUtau ZIP Archive VoicebankInstaller.cs VoicebankInstaller path traversalstakira OpenUtau
- CVE-2014-125061peel filebroker common.rb select_transfer_status_desc sql injectionpeel filebroker
- CVE-2015-10025luelista miniConf URL Scanning MessageView.cs denial of serviceluelista miniConf
- CVE-2014-125059sternenseemann sternenblog main.c blog_index file inclusionsternenseemann sternenblog
- CVE-2015-10024hoffie larasync file_storage.go path traversalhoffie larasync
- CVE-2015-10023Fumon trello-octometric srv.go main sql injectionFumon trello-octometric
- CVE-2018-25071roxlukas LMeve proxy.php insert_log sql injectionroxlukas LMeve
- CVE-2015-10022IISH nlgis2 custom_import.pl sql injectionIISH nlgis2
- CVE-2015-10021ritterim definely database.js cross site scriptingritterim definely
- CVE-2014-125058LearnMeSomeCodes project3 search.rb search_first_name sql injectionLearnMeSomeCodes project3
- CVE-2018-25070polterguy Phosphorus Five CSV Import NonQuery.cs csv.Read sql injectionpolterguy Phosphorus Five
- CVE-2014-125057mrobit robitailletheknot CSRF Token filters.php comparisonmrobit robitailletheknot
- CVE-2014-125056Pylons horus services.py timing discrepancyPylons horus
- CVE-2020-36644jamesmartin Inline SVG URL Parameter helpers.rb cross site scriptingjamesmartin Inline SVG · inline_svg
- CVE-2014-125055agnivade easy-scrypt scrypt.go VerifyPassphrase timing discrepancyagnivade easy-scrypt · github.com/agnivade/easy-scrypt
- CVE-2015-10019foxoverflow MySimplifiedSQL MySimplifiedSQL_Examples.php cross site scriptingfoxoverflow MySimplifiedSQL
- CVE-2014-125054koroket RedditOnRails Vote access controlkoroket RedditOnRails
- CVE-2023-0114Netis Netcore Router Backup param.file.tgz cleartext storage in a file or on diskNetis Netcore Router
- CVE-2023-0113Netis Netcore Router Backup param.file.tgz information disclosureNetis Netcore Router
- CVE-2023-0107Cross-site Scripting (XSS) - Stored in usememos/memosusememos/memos · github.com/usememos/memos
- CVE-2023-0111Cross-site Scripting (XSS) - Stored in usememos/memosusememos/memos · github.com/usememos/memos