CVEs published January 10, 2023
214 CVEs were published on January 10, 2023: 13 critical, 121 high. 1 is now in CISA KEV.
- Published
- 214
- Critical
- 13
- High
- 121
- Medium
- 72
- Low
- 2
- Unrated
- 6
- Now in CISA KEV
- 1
- Fix available
- 122
Most affected products
- Microsoft Windows
- 61
- Google Chrome
- 14
- Microsoft 3D Builder
- 14
- AMD 2nd Gen EPYC · AMD 3rd Gen EPYC
- 11
- wproyal Royal Addons for Elementor – Addons and Templates K…
- 11
- AMD 3rd Gen EPYC
- 9
- Microsoft Windows Server · Microsoft Windows
- 5
- AMD 1st Gen EPYC · AMD 2nd Gen EPYC +1
- 3
- Asus RT-AX82U
- 3
- Siemens SINEC INS
- 3
Critical 13
- CVE-2022-35401An authentication bypass vulnerability exists in the get_IFTTTTtoken.cgi functionality of Asus RT-AX82U 3.0.0.4.386_49674-ge182230.Asus RT-AX82U
- CVE-2022-46823A vulnerability has been identified in Mendix SAML (Mendix 8 compatible) (All versions >= V2.3.0 < V2.3.4), Mendix SAML (Mendix 9 compatibleSiemens Mendix SAML
- CVE-2022-45092A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 1).Siemens SINEC INS
- CVE-2023-0022Code Injection vulnerability in SAP BusinessObjects Business Intelligence platform (Analysis edition for OLAP)SAP BusinessObjects Business Intelligence platform
- CVE-2023-0018Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (Central management console)SAP BusinessObjects Business Intelligence Platform
- CVE-2023-0017Improper access control in SAP NetWeaver AS for JavaSAP NetWeaver AS for Java
- CVE-2023-0016SQL Injection vulnerability in SAP Business Planning and Consolidation MSSAP BPC MS
- CVE-2023-0014Capture-replay vulnerability in SAP NetWeaver AS for ABAP and ABAP PlatformSAP NetWeaver ABAP Server and ABAP Platform
- CVE-2017-20166Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between is_nil and raise.
- CVE-2022-3792SQL Injection in GullsEye Terminal Operating SystemGullsEye terminal operating system
- CVE-2022-38490An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03.
- CVE-2022-4422SQLi in Bulutdesk CallcenterBulutses Information Technologies Bulutdesk Callcenter
- CVE-2023-22903api/views/user.py in LibrePhotos before e19e539 has incorrect access control.
High 121
- CVE-2023-20531Insufficient bound checks in the SMU may allow an attacker to update the SRAM from/to address space to an invalid value potentially resultinAMD 2nd Gen EPYC · AMD 3rd Gen EPYC
- CVE-2023-20530Insufficient input validation of BIOS mailbox messages in SMU may result in out-of-bounds memory reads potentially resulting in a denial of AMD 3rd Gen EPYC
- CVE-2023-20529Insufficient bound checks in the SMU may allow an attacker to update the from/to address space to an invalid value potentially resulting in AMD 2nd Gen EPYC · AMD 3rd Gen EPYC
- CVE-2023-20522Insufficient input validation in ASP may allow an attacker with a malicious BIOS to potentially cause a denial of service.AMD 2nd Gen EPYC · AMD 3rd Gen EPYC
- CVE-2021-46779Insufficient input validation in SVC_ECC_PRIMITIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASPAMD 1st Gen EPYC · AMD 2nd Gen EPYC +1
- CVE-2021-26409Insufficient bounds checking in SEV-ES may allow an attacker to corrupt Reverse Map table (RMP) memory, potentially resulting in a loss of SAMD 3rd Gen EPYC
- CVE-2021-26402Insufficient bounds checking in ASP (AMD Secure Processor) firmware while handling BIOS mailbox commands, may allow an attacker to write parAMD 2nd Gen EPYC · AMD 3rd Gen EPYC
- CVE-2021-26398Insufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AAMD 1st Gen EPYC · AMD 2nd Gen EPYC +1
- CVE-2022-38105An information disclosure vulnerability exists in the cm_processREQ_NC opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge182230 router's configuraAsus RT-AX82U
- CVE-2022-38393A denial of service vulnerability exists in the cfg_server cm_processConnDiagPktList opcode of Asus RT-AX82U 3.0.0.4.386_49674-ge182230 routAsus RT-AX82U
- CVE-2023-22479KubePi vulnerable to session fixation attack KubeOperator KubePi · github.com/KubeOperator/kubepi
- CVE-2022-46163travel-support-program vulnerable to data exfiltration via Ransack query injectionopenSUSE travel-support-program
- CVE-2022-4636Black Box KVM Firmware version 3.4.31307 on models ACR1000A-R-R2, ACR1000A-T-R2, ACR1002A-T, ACR1002A-R, and ACR1020A-T is vulnerable to patBlack Box KVM ACR1020A-T · Black Box KVM ACR1002A-R +3
- CVE-2021-26316Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resultingAMD Ryzen 5000 Series · AMD Ryzen 2000 Series +4
- CVE-2022-47967A vulnerability has been identified in Solid Edge (All versions < V2023 MP1).Siemens Solid Edge
- CVE-2022-47935A vulnerability has been identified in JT Open (All versions < V11.1.1.0), JT Utilities (All versions < V13.1.1.0), Solid Edge (All versionsSiemens JT Open · Siemens JT Utilities +1
- CVE-2022-45094A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 1).Siemens SINEC INS
- CVE-2022-45093A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 1).Siemens SINEC INS
- CVE-2022-43514A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6.0 SP9 Siemens Automation License Manager · Siemens TeleControl Se…
- CVE-2022-43513A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6 (All versions < V6.0 SP9 Siemens Automation License Manager · Siemens TeleControl Se…
- CVE-2022-4294Norton, Avira, Avast and AVG Antivirus for Windows Privilege EscalationNortonLifelock (GenDigital) Norton Antivirus Windows Era… +2
- CVE-2022-36441An issue was discovered in Zebra Enterprise Home Screen 4.1.19.
- CVE-2022-36443An issue was discovered in Zebra Enterprise Home Screen 4.1.19.
- CVE-2022-38491An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03.
- CVE-2022-38492An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03.
- CVE-2022-4379A use-after-free vulnerability was found in __nfs42_ssc_open() in fs/nfs/nfs4file.c in the Linux kernel.Linux kernel
- CVE-2022-46449An issue in MPD (Music Player Daemon) v0.23.10 allows attackers to cause a Denial of Service (DoS) via a crafted input.
- CVE-2022-4661072crm v9 was discovered to contain an arbitrary file upload vulnerability via the avatar upload function.
- CVE-2023-0128Use after free in Overview Mode in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed a remote attacker who convinced a user to engagGoogle Chrome
- CVE-2023-0129Heap buffer overflow in Network Service in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a maliciGoogle Chrome
- CVE-2023-0134Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to Google Chrome
- CVE-2023-0135Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to Google Chrome
- CVE-2023-0136Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to execute inGoogle Chrome
- CVE-2023-0137Heap buffer overflow in Platform Apps in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed an attacker who convinced a user to instaGoogle Chrome
- CVE-2023-0138Heap buffer overflow in libphonenumber in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to potentially exploit heap corruptGoogle Chrome
- CVE-2023-21524Windows Local Security Authority (LSA) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21527Windows iSCSI Service Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-21531Azure Service Fabric Container Elevation of Privilege VulnerabilityMicrosoft Azure Service Fabric
- CVE-2023-21532Windows GDI Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21535Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-21537Microsoft Message Queuing (MSMQ) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21538.NET Denial of Service VulnerabilityMicrosoft .NET · Microsoft PowerShell +12
- CVE-2023-21539Windows Authentication Remote Code Execution VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2023-21541Windows Task Scheduler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21542Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21543Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-21546Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-21547Internet Key Exchange (IKE) Protocol Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-21548Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-21549Windows SMB Witness Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21551Microsoft Cryptographic Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21552Windows GDI Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21555Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-21556Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-21557Windows Lightweight Directory Access Protocol (LDAP) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-21558Windows Error Reporting Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21561Microsoft Cryptographic Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21674Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21675Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21676Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-21677Windows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-21678Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21679Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-21680Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21681Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-21683Windows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-21724Microsoft DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2023-21726Windows Credential Manager User Interface Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21728Windows Netlogon Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-21730Microsoft Cryptographic Services Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21732Microsoft ODBC Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-21733Windows Bind Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2023-21734Microsoft Office Remote Code Execution VulnerabilityMicrosoft Office 2019 for Mac · Microsoft 365 Apps for E… +1
- CVE-2023-21735Microsoft Office Remote Code Execution VulnerabilityMicrosoft Office 2019 for Mac · Microsoft 365 Apps for E… +1
- CVE-2023-21736Microsoft Office Visio Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +2
- CVE-2023-21737Microsoft Office Visio Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +2
- CVE-2023-21738Microsoft Office Visio Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise
- CVE-2023-21739Windows Bluetooth Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21741Microsoft Office Visio Information Disclosure VulnerabilityMicrosoft Office LTSC · Microsoft Visio 2013 Service Pack +3
- CVE-2023-21742Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2023-21744Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2023-21745Microsoft Exchange Server Spoofing VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Microsof…
- CVE-2023-21746Windows NTLM Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21747Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21748Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21749Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21750Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21752Windows Backup Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21754Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21755Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21757Windows Layer 2 Tunneling Protocol (L2TP) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-21758Windows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-21760Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21761Microsoft Exchange Server Information Disclosure VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Microsof…
- CVE-2023-21762Microsoft Exchange Server Spoofing VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1
- CVE-2023-21763Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server 2019 Cumulative Update · Microsof…
- CVE-2023-21764Microsoft Exchange Server Elevation of Privilege VulnerabilityMicrosoft Exchange Server 2019 Cumulative Update · Microsof…
- CVE-2023-21765Windows Print Spooler Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21767Windows Overlay Filter Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21768Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2023-21771Windows Local Session Manager (LSM) Elevation of Privilege VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2023-21772Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21773Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21774Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-21779Visual Studio Code Remote Code Execution VulnerabilityMicrosoft Visual Studio Code
- CVE-2023-217803D Builder Remote Code Execution VulnerabilityMicrosoft 3D Builder
- CVE-2023-217813D Builder Remote Code Execution VulnerabilityMicrosoft 3D Builder
- CVE-2023-217823D Builder Remote Code Execution VulnerabilityMicrosoft 3D Builder
- CVE-2023-217833D Builder Remote Code Execution VulnerabilityMicrosoft 3D Builder
- CVE-2023-217843D Builder Remote Code Execution VulnerabilityMicrosoft 3D Builder
- CVE-2023-217853D Builder Remote Code Execution VulnerabilityMicrosoft 3D Builder
- CVE-2023-217863D Builder Remote Code Execution VulnerabilityMicrosoft 3D Builder
- CVE-2023-217873D Builder Remote Code Execution VulnerabilityMicrosoft 3D Builder
- CVE-2023-217883D Builder Remote Code Execution VulnerabilityMicrosoft 3D Builder
- CVE-2023-217893D Builder Remote Code Execution VulnerabilityMicrosoft 3D Builder
- CVE-2023-217903D Builder Remote Code Execution VulnerabilityMicrosoft 3D Builder
- CVE-2023-217913D Builder Remote Code Execution VulnerabilityMicrosoft 3D Builder
- CVE-2023-217923D Builder Remote Code Execution VulnerabilityMicrosoft 3D Builder
- CVE-2023-217933D Builder Remote Code Execution VulnerabilityMicrosoft 3D Builder
- CVE-2023-22320OpenAM Web Policy Agent (OpenAM Consortium Edition) provided by OpenAM Consortium parses URLs improperly, leading to a path traversal vulnerOpenAM Web Policy Agent
- CVE-2023-22895The bzip2 crate before 0.4.4 for Rust allow attackers to cause a denial of service via a large file that triggers an integer overflow in membzip2
Medium, low and unrated 80
- CVE-2023-20532Insufficient input validation in the SMU may allow an attacker to improperly lock resources, potentially resulting in a denial of service.AMD 2nd Gen EPYC · AMD 3rd Gen EPYC
- CVE-2023-20528Insufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory contents over the I2C bus potentially leadinAMD 2nd Gen EPYC · AMD 3rd Gen EPYC
- CVE-2023-20527Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds, potentially leading toAMD 1st Gen EPYC · AMD 2nd Gen EPYC +1
- CVE-2023-20525Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory outside the bounds of a mapped reAMD 2nd Gen EPYC · AMD 3rd Gen EPYC
- CVE-2023-20523TOCTOU in the ASP may allow a physical attacker to write beyond the buffer bounds, potentially leading to a loss of integrity or denial of sAMD 2nd Gen EPYC · AMD 3rd Gen EPYC
- CVE-2022-23814Failure to validate addresses provided by software to BIOS commands may result in a potential loss of integrity of guest memory in a confideAMD 3rd Gen EPYC
- CVE-2022-23813The software interfaces to ASP and SMU may not enforce the SNP memory security policy resulting in a potential loss of integrity of guest meAMD 2nd Gen EPYC · AMD 3rd Gen EPYC
- CVE-2021-46791Insufficient input validation during parsing of the System Management Mode (SMM) binary may allow a maliciously crafted SMM executable binarAMD 3rd Gen EPYC
- CVE-2021-46768Insufficient input validation in SEV firmware may allow an attacker to perform out-of-bounds memory reads within the ASP boot loader, potentAMD 2nd Gen EPYC · AMD 3rd Gen EPYC
- CVE-2021-46767Insufficient input validation in the ASP may allow an attacker with physical access, unauthorized write access to memory potentially leadingAMD 2nd Gen EPYC · AMD 3rd Gen EPYC
- CVE-2021-26407A randomly generated Initialization Vector (IV) may lead to a collision of IVs with the same key potentially resulting in information discloAMD 2nd Gen EPYC
- CVE-2021-26404Improper input validation and bounds checking in SEV firmware may leak scratch buffer bytes leading to potential information disclosure.AMD 3rd Gen EPYC
- CVE-2021-26403Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret potentially resulting in compromise of VM confideAMD 1st Gen EPYC · AMD 2nd Gen EPYC
- CVE-2021-26396Insufficient validation of address mapping to IO in ASP (AMD Secure Processor) may result in a loss of memory integrity in the SNP guest.AMD 3rd Gen EPYC
- CVE-2021-26355Insufficient fencing and checks in System Management Unit (SMU) may result in access to invalid message port registers that could result in AMD 3rd Gen EPYC
- CVE-2021-26343Insufficient validation in ASP BIOS and DRTM commands may allow malicious supervisor x86 software to disclose the contents of sensitive memoAMD 3rd Gen EPYC
- CVE-2021-26328Failure to verify the mode of CPU execution at the time of SNP_INIT may lead to a potential loss of memory integrity for SNP guests.AMD 3rd Gen EPYC
- CVE-2021-46795A TOCTOU (time-of-check to time-of-use) vulnerability exists where an attacker may use a compromised BIOS to cause the TEE OS to read memoryAMD Ryzen 5000 Series · AMD Ryzen 3000 Series
- CVE-2023-22469Nextcloud Deck card vulnerable to data leak to unauthorized users via reference preview cachenextcloud security-advisories
- CVE-2021-26346Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in tAMD Ryzen 5000 Series
- CVE-2023-0162CPO Companion <= 1.0.4 - Authenticated (Administrator+) Stored Cross-Site Scriptingwpchill CPO Companion
- CVE-2022-4707Royal Elementor Addons <= 1.3.59 - Cross-Site Request Forgery to Menu Template creationwproyal Royal Addons for Elementor – Addons and Templates K…
- CVE-2022-4701Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Activationwproyal Royal Addons for Elementor – Addons and Templates K…
- CVE-2022-4703Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Import Deletionwproyal Royal Addons for Elementor – Addons and Templates K…
- CVE-2022-4705Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Activationwproyal Royal Addons for Elementor – Addons and Templates K…
- CVE-2022-4704Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Importwproyal Royal Addons for Elementor – Addons and Templates K…
- CVE-2022-4710Royal Elementor Addons <= 1.3.59 - Reflected Cross-Site Scriptingwproyal Royal Addons for Elementor – Addons and Templates K…
- CVE-2022-4708Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Conditions Modificationwproyal Royal Addons for Elementor – Addons and Templates K…
- CVE-2022-4711Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Menu Settings Updatewproyal Royal Addons for Elementor – Addons and Templates K…
- CVE-2022-4702Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Deactivationwproyal Royal Addons for Elementor – Addons and Templates K…
- CVE-2022-4700Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Theme Activationwproyal Royal Addons for Elementor – Addons and Templates K…
- CVE-2022-4709Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Kit Importwproyal Royal Addons for Elementor – Addons and Templates K…
- CVE-2014-125073mapoor voteapp app.py show_refresh sql injectionmapoor voteapp
- CVE-2016-15017fabarea media_upload UploadFileService.php getUploadedFileList pathname traversalfabarea media_upload
- CVE-2022-38773Affected devices do not contain an Immutable Root of Trust in Hardware.Siemens SIMATIC Drive Controller CPU 1504D TF · Siemens… +54
- CVE-2022-4429Avira Security for Windows - Denial of ServiceNortonLifelock (GenDigital) Avira Security for Windows
- CVE-2023-0023Information Disclosure in SAP Bank Account Management (Manage Banks)SAP Bank Account Management
- CVE-2023-0015Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence (Web Intelligence)SAP BusinessObjects Business Intelligence Platform
- CVE-2023-0013Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS for ABAP and ABAP PlatformSAP NetWeaver AS for ABAP and ABAP Platform
- CVE-2023-0012Local Privilege Escalation in SAP Host Agent (Windows)SAP Host Agent
- CVE-2021-46871tag.ex in Phoenix Phoenix.HTML (aka phoenix_html) before 3.0.4 allows XSS in HEEx class attributes.phoenix_html
- CVE-2022-30332In Talend Administration Center 7.3.1.20200219 before TAC-15950, the Forgot Password feature provides different error messages for invalid r
- CVE-2022-36442An issue was discovered in Zebra Enterprise Home Screen 4.1.19.
- CVE-2022-38481An issue was discovered in Mega HOPEX 15.2.0.6110 before V5CP2.
- CVE-2022-38482A link-manipulation issue was discovered in Mega HOPEX 15.2.0.6110 before V5CP4.
- CVE-2022-38489An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03 It is prone to stored Cross-site Scripting (XSS).
- CVE-2022-4337An out-of-bounds read in Organization Specific TLV was found in various versions of OpenvSwitch.openvswitch
- CVE-2022-4338An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.openvswitch
- CVE-2022-4382A use-after-free flaw caused by a race among the superblock operations in the gadgetfs Linux driver was found.Linux kernel
- CVE-2022-45164An issue was discovered in Archibus Web Central 2022.03.01.107.
- CVE-2022-45165An issue was discovered in Archibus Web Central 2022.03.01.107.
- CVE-2022-45166An issue was discovered in Archibus Web Central 2022.03.01.107.
- CVE-2022-45167An issue was discovered in Archibus Web Central 2022.03.01.107.
- CVE-2022-47083A PHP Object Injection vulnerability in the unserialize() function Spitfire CMS v1.0.475 allows authenticated attackers to execute arbitrary
- CVE-2022-48251The AES instructions on the ARMv8 platform do not have an algorithm that is "intrinsically resistant" to side-channel attacks.
- CVE-2023-0130Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to spoof the Google Chrome
- CVE-2023-0131Inappropriate implementation in in iframe Sandbox in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to bypass file download Google Chrome
- CVE-2023-0132Inappropriate implementation in in Permission prompts in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to force Google Chrome
- CVE-2023-0133Inappropriate implementation in in Permission prompts in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to bypassGoogle Chrome
- CVE-2023-0139Insufficient validation of untrusted input in Downloads in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to bypaGoogle Chrome
- CVE-2023-0140Inappropriate implementation in in File System API in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to bypass fiGoogle Chrome
- CVE-2023-0141Insufficient policy enforcement in CORS in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to leak cross-origin data via a crGoogle Chrome
- CVE-2023-21525Remote Procedure Call Runtime Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-21536Event Tracing for Windows Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-21540Windows Cryptographic Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-21550Windows Cryptographic Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-21559Windows Cryptographic Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-21560Windows Boot Manager Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2023-21563BitLocker Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2023-21682Windows Point-to-Point Protocol (PPP) Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-21725Windows Malicious Software Removal Tool Elevation of Privilege VulnerabilityMicrosoft Windows Malicious Software Removal Tool
- CVE-2023-21743Microsoft SharePoint Server Security Feature Bypass VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2023-21753Event Tracing for Windows Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-21759Windows Smart Card Resource Management Server Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2023-21766Windows Overlay Filter Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-21776Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-22898workers/extractor.py in Pandora (aka pandora-analysis/pandora) 1.3.0 allows a denial of service when an attacker submits a deeply nested ZIP
- CVE-2023-22899Zip4j through 2.11.2, as used in Threema and other products, does not always check the MAC when decrypting a ZIP archive.net.lingala.zip4j:zip4j
- CVE-2023-22909An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1.
- CVE-2023-22911An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1.