# CVEs published 2023-01-08

18 CVEs were published on January 8, 2023: 0 critical, 1 high. Days are UTC.

- [CVE-2016-15016](https://cve.now/CVE-2016-15016.md): mrtnmtth joomla\_mod\_einsatz\_stats helper.php getStatsByType sql injection (CVSS 5.5, mrtnmtth joomla\_mod\_einsatz\_stats)
- [CVE-2014-125070](https://cve.now/CVE-2014-125070.md): yanheven console tables.py AvailabilityZonesTable cross site scripting (CVSS 3.5, yanheven console)
- [CVE-2016-15015](https://cve.now/CVE-2016-15015.md): viafintech Barzahlen Payment Module PHP SDK Webhook.php verify timing discrepancy (CVSS 2.6, viafintech Barzahlen Payment Module PHP SDK · barzahlen/bar…)
- [CVE-2021-4309](https://cve.now/CVE-2021-4309.md): 01-Scripts 01ACP cross site scripting (CVSS 3.5, 01-Scripts 01ACP)
- [CVE-2015-10031](https://cve.now/CVE-2015-10031.md): purpleparrots 491-Project Highscore update.php sql injection (CVSS 5.5, purpleparrots 491-Project)
- [CVE-2018-25072](https://cve.now/CVE-2018-25072.md): lojban jbovlaste listing.html sql injection (CVSS 6.3, lojban jbovlaste)
- [CVE-2022-4881](https://cve.now/CVE-2022-4881.md): CapsAdmin PAC3 http.lua cross site scripting (CVSS 4.3, CapsAdmin PAC3)
- [CVE-2019-25100](https://cve.now/CVE-2019-25100.md): happyman twmap pointdata2.php sql injection (CVSS 5.5, happyman twmap)
- [CVE-2014-125069](https://cve.now/CVE-2014-125069.md): saxman maps-js-icoads exposure of information through directory listing (CVSS 4.3, saxman maps-js-icoads)
- [CVE-2014-125068](https://cve.now/CVE-2014-125068.md): saxman maps-js-icoads http-server.js path traversal (CVSS 5.5, saxman maps-js-icoads)
- [CVE-2015-10030](https://cve.now/CVE-2015-10030.md): SUKOHI Surpass Surpass.php pathname traversal (CVSS 5.5, SUKOHI Surpass · sukohi/surpass)
- [CVE-2020-36648](https://cve.now/CVE-2020-36648.md): pouetnet pouet sql injection (CVSS 5.5, pouetnet pouet)
- [CVE-2007-10002](https://cve.now/CVE-2007-10002.md): web-cyradm auth.inc.php sql injection (CVSS 7.3, web-cyradm)
- [CVE-2014-125067](https://cve.now/CVE-2014-125067.md): corincerami curiosity image\_controller.rb sql injection (CVSS 5.5, corincerami curiosity)
- [CVE-2020-36647](https://cve.now/CVE-2020-36647.md): YunoHost-Apps transmission\_ynh nginx.conf path traversal (CVSS 5.5, YunoHost-Apps transmission\_ynh)
- [CVE-2021-4308](https://cve.now/CVE-2021-4308.md): WebPA sql injection (CVSS 5.5, WebPA · webpa/webpa)
- [CVE-2014-125066](https://cve.now/CVE-2014-125066.md): emmflo yuko-bot denial of service (CVSS 4.3, emmflo yuko-bot)
- [CVE-2022-0668](https://cve.now/CVE-2022-0668.md): JFrog Artifactory prior to 7.37.13 is vulnerable to Authentication Bypass, which can lead to Privilege Escalation when a specially crafted r (CVSS 5.3, JFrog Artifactory)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-01-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.