CVEs published January 11, 2023
143 CVEs were published on January 11, 2023: 13 critical, 98 high. 1 is now in CISA KEV.
- Published
- 143
- Critical
- 13
- High
- 98
- Medium
- 27
- Low
- 5
- Unrated
- 0
- Now in CISA KEV
- 1
- Fix available
- 31
Most affected products
- Insteon Hub
- 82
- Zyxel NR7101 firmware
- 4
- Cloudflare WARP
- 2
- Dell Secure Connect Gateway (SCG) Policy Manager
- 2
- IBM Sterling Partner Engagement Manager
- 2
- Netcomm NF20 · Netcomm NF20MESH +1
- 2
- redhat.com Keycloak · org.keycloak:keycloak-core
- 2
- TP-Link WR710N · TP-Link Archer C5
- 2
- zephyrproject-rtos zephyr
- 2
- ACI_Escola
- 1
Critical 13
- CVE-2022-4873Stack based overflow on Netcomm router models NF20MESH, NF20, and NL1902Netcomm NF20 · Netcomm NF20MESH +1
- CVE-2022-4498A vulnerable HTTP Basic Authentication process in TP-Link routers, Archer C5 and WR710N-V1, is susceptible to either a DoS or an arbitrary code execution via any interface.TP-Link WR710N · TP-Link Archer C5
- CVE-2022-3782keycloak: path traversal via double URL encoding.redhat.com Keycloak · org.keycloak:keycloak-parent
- CVE-2021-3966Usb bluetooth device ACL read cb buffer overflowzephyrproject-rtos zephyr
- CVE-2022-47859Lead Management System v1.0 is vulnerable to SQL Injection via the user_id parameter in changePassword.php.
- CVE-2022-47860Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeProduct.php.
- CVE-2022-47861Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeLead.php.
- CVE-2022-47862Lead Management System v1.0 is vulnerable to SQL Injection via the customer_id parameter in ajax_represent.php.
- CVE-2022-47864Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeCategories.php.
- CVE-2022-47865Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeOrder.php.
- CVE-2022-47866Lead management system v1.0 is vulnerable to SQL Injection via the id parameter in removeBrand.php.
- CVE-2022-48252The jokob-sk/Pi.Alert fork (before 22.12.20) of Pi.Alert allows Remote Code Execution via nmap_scan.php (scan parameter) OS Command Injectio
- CVE-2022-48253nhttpd in Nostromo before 2.1 is vulnerable to a path traversal that may allow an attacker to execute arbitrary commands on the remote serve
High 98
- CVE-2017-14454Multiple exploitable buffer overflow vulnerabilities exists in the PubNub message handler for the "control" channel of Insteon Hub running fInsteon Hub
- CVE-2017-16336Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16335Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16334Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16333Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16332Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16331Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16330Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16329Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16328Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16327Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16326Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16325Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16324Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16323Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16322Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16321Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16320Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16319Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16318Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16317Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16316Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16315Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16314Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16313Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16312Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16311Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16310Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16309Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16308Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16307Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16306Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16305Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16304Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16303Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16302Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16301Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16300Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16299Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16298Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16297Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16296Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16295Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16294Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16293Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16292Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16291Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16290Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16289Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16288Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16287Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16286Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16285Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16284Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16283Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16282Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16281Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16280Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16279Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16278Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16277Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16276Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16275Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16274Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16273Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16272Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16271Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16270Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16269Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16268Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16267Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16266Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16265Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16264Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16263Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16262Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16261Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16260Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16259Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16258Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16257Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2017-16256Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwarInsteon Hub
- CVE-2022-3143wildfly-elytron: possible timing attacks via use of unsafe comparator.redhat.com Wildfly-elytron · org.wildfly.security:wildfly-e…
- CVE-2022-4874Authenticated bypass in Netcomm router models NF20MESH, NF20, and NL1902 allows unauthenticated user to get access to content.Netcomm NF20 · Netcomm NF20MESH +1
- CVE-2022-3841RHACM: unauthenticated SSRF in console API endpoint.redhat.com RHACM
- CVE-2023-22487Post mentions can be used to read any post on the forum without access controlflarum framework · flarum/mentions
- CVE-2022-4499The strcmp function in TP-Link routers, Archer C5 and WR710N-V1, used for checking credentials in httpd, is susceptible to a side-channel attack.TP-Link WR710N · TP-Link Archer C5
- CVE-2022-4428support_uri validation missing in WARP client for WindowsCloudflare WARP
- CVE-2022-4696There exists a use-after-free vulnerability in the Linux kernel through io_uring and the IORING_OP_SPLICE operation.Linux Kernel
- CVE-2022-34441 Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded Cryptographic Key vulnerability.Dell Secure Connect Gateway (SCG) Policy Manager
- CVE-2022-34440Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded Cryptographic Key vulnerability.Dell Secure Connect Gateway (SCG) Policy Manager
- CVE-2022-42271NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service NVIDIA DGX Servers
- CVE-2022-42967XSS in Caret markdown editor leads to remote code execution when viewing crafted Markdown filescareteditor caret
- CVE-2022-43389A buffer overflow vulnerability in the library of the web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an unaZyxel NR7101 firmware
- CVE-2022-43393An improper check for unusual or exceptional conditions in the HTTP request processing function of Zyxel GS1920-24v2 firmware prior to V4.70Zyxel GS1920-24v2 firmware
- CVE-2023-22947Insecure folder permissions in the Windows installation path of Shibboleth Service Provider (SP) before 3.4.1 allow an unprivileged local at
- CVE-2023-22952In SugarCRM before 12.0.
- CVE-2023-22959WebChess through 0.9.0 and 1.0.0.rc2 allows SQL injection: mainmenu.php, chess.php, and opponentspassword.php (txtFirstName, txtLastName).
Medium, low and unrated 32
- CVE-2023-0105A flaw was found in Keycloak.redhat.com Keycloak · org.keycloak:keycloak-core
- CVE-2023-0091A flaw was found in Keycloak, where it did not properly check client tokens for possible revocation in its client credential flow.redhat.com Keycloak · org.keycloak:keycloak-core
- CVE-2022-46176Cargo did not verify SSH host keysrust-lang cargo · cargo
- CVE-2023-22492RefreshToken invalidation vulnerabilityzitadel · github.com/zitadel/zitadel
- CVE-2015-10039dobos domino EntityFactory.cs sql injectiondobos domino
- CVE-2015-10038nym3r0s pplv2 sql injectionnym3r0s pplv2
- CVE-2014-125076NoxxieNl Criminals roulette.php sql injectionNoxxieNl Criminals
- CVE-2014-125075gmail-servlet Model.java search sql injectiongmail-servlet
- CVE-2022-4885sviehb jefferson path traversalsviehb jefferson · jefferson
- CVE-2020-36650IonicaBizau node-gry command injectionIonicaBizau node-gry · gry
- CVE-2022-40615IBM Sterling Partner Engagement Manager SQL injectionIBM Sterling Partner Engagement Manager
- CVE-2022-34335IBM Sterling Partner Engagement Manager denial of serviceIBM Sterling Partner Engagement Manager
- CVE-2022-4457WARP client manifest misconfiguration leading to Task HijackingCloudflare WARP
- CVE-2013-10010zerochplus thread.res.pl PrintResList cross site scriptingzerochplus
- CVE-2017-20168jfm-so piWallet api.php sql injectionjfm-so piWallet
- CVE-2014-125074Nayshlok Voyager DatabaseAccess.java sql injectionNayshlok Voyager
- CVE-2020-36649mholt PapaParse papaparse.js redosmholt PapaParse · papaparse
- CVE-2018-25074Prestaul skeemas base.js redosPrestaul skeemas · skeemas
- CVE-2018-25073Newcomer1989 TSN-Ranksystem bot.php getlog cross site scriptingNewcomer1989 TSN-Ranksystem
- CVE-2015-10037ACI_Escola sql injectionACI_Escola
- CVE-2015-10036kylebebak dronfelipe sql injectionkylebebak dronfelipe
- CVE-2012-10004backdrop-contrib Basic Cart basic_cart.cart.inc basic_cart_checkout_form_submit cross site scriptingbackdrop-contrib Basic Cart
- CVE-2022-0553Possible to retrieve uncrypted firmware imagezephyrproject-rtos zephyr
- CVE-2022-43390A command injection vulnerability in the CGI program of Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated aZyxel NR7101 firmware
- CVE-2022-43391A buffer overflow vulnerability in the parameter of the CGI program in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an Zyxel NR7101 firmware
- CVE-2022-43392A buffer overflow vulnerability in the parameter of web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an autheZyxel NR7101 firmware
- CVE-2022-4344Memory exhaustion in the Kafka protocol dissector in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injectiWireshark Foundation Wireshark
- CVE-2022-4415A vulnerability was found in systemd.systemd
- CVE-2022-4543A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI).Linux kernel
- CVE-2023-22945In the GrowthExperiments extension for MediaWiki through 1.39, the growthmanagementorlist API allows blocked users (blocked in ApiManageMent
- CVE-2023-22958The Syracom Secure Login plugin before 3.1.1.0 for Jira may allow spoofing of 2FA PIN validation via the plugins/servlet/twofactor/public/pi
- CVE-2023-22963The personnummer implementation before 3.0.3 for Dart mishandles numbers in which the last four digits match the ^000[0-9]$ regular expressi