# CVEs published 2023-01-11

143 CVEs were published on January 11, 2023: 13 critical, 98 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2017-14454](https://cve.now/CVE-2017-14454.md): Multiple exploitable buffer overflow vulnerabilities exists in the PubNub message handler for the "control" channel of Insteon Hub running f (CVSS 8.5, Insteon Hub)
- [CVE-2017-16336](https://cve.now/CVE-2017-16336.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16335](https://cve.now/CVE-2017-16335.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16334](https://cve.now/CVE-2017-16334.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16333](https://cve.now/CVE-2017-16333.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16332](https://cve.now/CVE-2017-16332.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16331](https://cve.now/CVE-2017-16331.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16330](https://cve.now/CVE-2017-16330.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16329](https://cve.now/CVE-2017-16329.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16328](https://cve.now/CVE-2017-16328.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16327](https://cve.now/CVE-2017-16327.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16326](https://cve.now/CVE-2017-16326.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16325](https://cve.now/CVE-2017-16325.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16324](https://cve.now/CVE-2017-16324.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16323](https://cve.now/CVE-2017-16323.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16322](https://cve.now/CVE-2017-16322.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16321](https://cve.now/CVE-2017-16321.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16320](https://cve.now/CVE-2017-16320.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16319](https://cve.now/CVE-2017-16319.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16318](https://cve.now/CVE-2017-16318.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16317](https://cve.now/CVE-2017-16317.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16316](https://cve.now/CVE-2017-16316.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16315](https://cve.now/CVE-2017-16315.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16314](https://cve.now/CVE-2017-16314.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16313](https://cve.now/CVE-2017-16313.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16312](https://cve.now/CVE-2017-16312.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16311](https://cve.now/CVE-2017-16311.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16310](https://cve.now/CVE-2017-16310.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16309](https://cve.now/CVE-2017-16309.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16308](https://cve.now/CVE-2017-16308.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16307](https://cve.now/CVE-2017-16307.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16306](https://cve.now/CVE-2017-16306.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16305](https://cve.now/CVE-2017-16305.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16304](https://cve.now/CVE-2017-16304.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16303](https://cve.now/CVE-2017-16303.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16302](https://cve.now/CVE-2017-16302.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16301](https://cve.now/CVE-2017-16301.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16300](https://cve.now/CVE-2017-16300.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16299](https://cve.now/CVE-2017-16299.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16298](https://cve.now/CVE-2017-16298.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16297](https://cve.now/CVE-2017-16297.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16296](https://cve.now/CVE-2017-16296.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16295](https://cve.now/CVE-2017-16295.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16294](https://cve.now/CVE-2017-16294.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16293](https://cve.now/CVE-2017-16293.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16292](https://cve.now/CVE-2017-16292.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16291](https://cve.now/CVE-2017-16291.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16290](https://cve.now/CVE-2017-16290.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16289](https://cve.now/CVE-2017-16289.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16288](https://cve.now/CVE-2017-16288.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16287](https://cve.now/CVE-2017-16287.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16286](https://cve.now/CVE-2017-16286.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16285](https://cve.now/CVE-2017-16285.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16284](https://cve.now/CVE-2017-16284.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16283](https://cve.now/CVE-2017-16283.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16282](https://cve.now/CVE-2017-16282.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16281](https://cve.now/CVE-2017-16281.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16280](https://cve.now/CVE-2017-16280.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16279](https://cve.now/CVE-2017-16279.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16278](https://cve.now/CVE-2017-16278.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16277](https://cve.now/CVE-2017-16277.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16276](https://cve.now/CVE-2017-16276.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16275](https://cve.now/CVE-2017-16275.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16274](https://cve.now/CVE-2017-16274.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16273](https://cve.now/CVE-2017-16273.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16272](https://cve.now/CVE-2017-16272.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16271](https://cve.now/CVE-2017-16271.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16270](https://cve.now/CVE-2017-16270.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16269](https://cve.now/CVE-2017-16269.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16268](https://cve.now/CVE-2017-16268.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16267](https://cve.now/CVE-2017-16267.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16266](https://cve.now/CVE-2017-16266.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16265](https://cve.now/CVE-2017-16265.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16264](https://cve.now/CVE-2017-16264.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16263](https://cve.now/CVE-2017-16263.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16262](https://cve.now/CVE-2017-16262.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16261](https://cve.now/CVE-2017-16261.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16260](https://cve.now/CVE-2017-16260.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16259](https://cve.now/CVE-2017-16259.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16258](https://cve.now/CVE-2017-16258.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16257](https://cve.now/CVE-2017-16257.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2017-16256](https://cve.now/CVE-2017-16256.md): Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmwar (CVSS 8.5, Insteon Hub)
- [CVE-2022-3143](https://cve.now/CVE-2022-3143.md): wildfly-elytron: possible timing attacks via use of unsafe comparator. (CVSS 7.4, redhat.com Wildfly-elytron · org.wildfly.security:wildfly-e…)
- [CVE-2023-0105](https://cve.now/CVE-2023-0105.md): A flaw was found in Keycloak. (CVSS 6.5, redhat.com Keycloak · org.keycloak:keycloak-core)
- [CVE-2023-0091](https://cve.now/CVE-2023-0091.md): A flaw was found in Keycloak, where it did not properly check client tokens for possible revocation in its client credential flow. (CVSS 3.8, redhat.com Keycloak · org.keycloak:keycloak-core)
- [CVE-2022-4873](https://cve.now/CVE-2022-4873.md): Stack based overflow on Netcomm router models NF20MESH, NF20, and NL1902 (CVSS 9.8, Netcomm NF20 · Netcomm NF20MESH +1)
- [CVE-2022-4874](https://cve.now/CVE-2022-4874.md): Authenticated bypass in Netcomm router models NF20MESH, NF20, and NL1902 allows unauthenticated user to get access to content. (CVSS 7.5, Netcomm NF20 · Netcomm NF20MESH +1)
- [CVE-2022-4498](https://cve.now/CVE-2022-4498.md): A vulnerable HTTP Basic Authentication process in TP-Link routers, Archer C5 and WR710N-V1, is susceptible to either a DoS or an arbitrary code execution via any interface. (CVSS 9.8, TP-Link WR710N · TP-Link Archer C5)
- [CVE-2022-3841](https://cve.now/CVE-2022-3841.md): RHACM: unauthenticated SSRF in console API endpoint. (CVSS 7.8, redhat.com RHACM)
- [CVE-2022-46176](https://cve.now/CVE-2022-46176.md): Cargo did not verify SSH host keys (CVSS 5.3, rust-lang cargo · cargo)
- [CVE-2023-22487](https://cve.now/CVE-2023-22487.md): Post mentions can be used to read any post on the forum without access control (CVSS 7.7, flarum framework · flarum/mentions)
- [CVE-2023-22492](https://cve.now/CVE-2023-22492.md): RefreshToken invalidation vulnerability (CVSS 5.9, zitadel · github.com/zitadel/zitadel)
- [CVE-2022-4499](https://cve.now/CVE-2022-4499.md): The strcmp function in TP-Link routers, Archer C5 and WR710N-V1, used for checking credentials in httpd, is susceptible to a side-channel attack. (CVSS 7.5, TP-Link WR710N · TP-Link Archer C5)
- [CVE-2015-10039](https://cve.now/CVE-2015-10039.md): dobos domino EntityFactory.cs sql injection (CVSS 5.5, dobos domino)
- [CVE-2015-10038](https://cve.now/CVE-2015-10038.md): nym3r0s pplv2 sql injection (CVSS 5.5, nym3r0s pplv2)
- [CVE-2014-125076](https://cve.now/CVE-2014-125076.md): NoxxieNl Criminals roulette.php sql injection (CVSS 5.5, NoxxieNl Criminals)
- [CVE-2014-125075](https://cve.now/CVE-2014-125075.md): gmail-servlet Model.java search sql injection (CVSS 5.5, gmail-servlet)
- [CVE-2022-4885](https://cve.now/CVE-2022-4885.md): sviehb jefferson path traversal (CVSS 5.0, sviehb jefferson · jefferson)
- [CVE-2020-36650](https://cve.now/CVE-2020-36650.md): IonicaBizau node-gry command injection (CVSS 5.5, IonicaBizau node-gry · gry)
- [CVE-2022-3782](https://cve.now/CVE-2022-3782.md): keycloak: path traversal via double URL encoding. (CVSS 9.1, redhat.com Keycloak · org.keycloak:keycloak-parent)
- [CVE-2022-4428](https://cve.now/CVE-2022-4428.md): support\_uri validation missing in WARP client for Windows (CVSS 8.9, Cloudflare WARP)
- [CVE-2022-40615](https://cve.now/CVE-2022-40615.md): IBM Sterling Partner Engagement Manager SQL injection (CVSS 6.3, IBM Sterling Partner Engagement Manager)
- [CVE-2022-34335](https://cve.now/CVE-2022-34335.md): IBM Sterling Partner Engagement Manager denial of service (CVSS 6.5, IBM Sterling Partner Engagement Manager)
- [CVE-2022-4457](https://cve.now/CVE-2022-4457.md): WARP client manifest misconfiguration leading to Task Hijacking (CVSS 5.5, Cloudflare WARP)
- [CVE-2013-10010](https://cve.now/CVE-2013-10010.md): zerochplus thread.res.pl PrintResList cross site scripting (CVSS 4.3, zerochplus)
- [CVE-2017-20168](https://cve.now/CVE-2017-20168.md): jfm-so piWallet api.php sql injection (CVSS 5.5, jfm-so piWallet)
- [CVE-2014-125074](https://cve.now/CVE-2014-125074.md): Nayshlok Voyager DatabaseAccess.java sql injection (CVSS 5.5, Nayshlok Voyager)
- [CVE-2020-36649](https://cve.now/CVE-2020-36649.md): mholt PapaParse papaparse.js redos (CVSS 3.5, mholt PapaParse · papaparse)
- [CVE-2018-25074](https://cve.now/CVE-2018-25074.md): Prestaul skeemas base.js redos (CVSS 3.5, Prestaul skeemas · skeemas)
- [CVE-2018-25073](https://cve.now/CVE-2018-25073.md): Newcomer1989 TSN-Ranksystem bot.php getlog cross site scripting (CVSS 3.5, Newcomer1989 TSN-Ranksystem)
- [CVE-2022-4696](https://cve.now/CVE-2022-4696.md): There exists a use-after-free vulnerability in the Linux kernel through io\_uring and the IORING\_OP\_SPLICE operation. (CVSS 7.8, Linux Kernel)
- [CVE-2022-34441](https://cve.now/CVE-2022-34441.md): Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded Cryptographic Key vulnerability. (CVSS 8.0, Dell Secure Connect Gateway (SCG) Policy Manager)
- [CVE-2022-34440](https://cve.now/CVE-2022-34440.md): Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded Cryptographic Key vulnerability. (CVSS 8.4, Dell Secure Connect Gateway (SCG) Policy Manager)
- [CVE-2015-10037](https://cve.now/CVE-2015-10037.md): ACI\_Escola sql injection (CVSS 5.5, ACI\_Escola)
- [CVE-2015-10036](https://cve.now/CVE-2015-10036.md): kylebebak dronfelipe sql injection (CVSS 5.5, kylebebak dronfelipe)
- [CVE-2012-10004](https://cve.now/CVE-2012-10004.md): backdrop-contrib Basic Cart basic\_cart.cart.inc basic\_cart\_checkout\_form\_submit cross site scripting (CVSS 3.5, backdrop-contrib Basic Cart)
- [CVE-2022-42271](https://cve.now/CVE-2022-42271.md): NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service (CVSS 8.4, NVIDIA DGX Servers)
- [CVE-2021-3966](https://cve.now/CVE-2021-3966.md): Usb bluetooth device ACL read cb buffer overflow (CVSS 9.6, zephyrproject-rtos zephyr)
- [CVE-2022-0553](https://cve.now/CVE-2022-0553.md): Possible to retrieve uncrypted firmware image (CVSS 6.5, zephyrproject-rtos zephyr)
- [CVE-2022-42967](https://cve.now/CVE-2022-42967.md): XSS in Caret markdown editor leads to remote code execution when viewing crafted Markdown files (CVSS 7.5, careteditor caret)
- [CVE-2022-43389](https://cve.now/CVE-2022-43389.md): A buffer overflow vulnerability in the library of the web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an una (CVSS 8.6, Zyxel NR7101 firmware)
- [CVE-2022-43390](https://cve.now/CVE-2022-43390.md): A command injection vulnerability in the CGI program of Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authenticated a (CVSS 5.4, Zyxel NR7101 firmware)
- [CVE-2022-43391](https://cve.now/CVE-2022-43391.md): A buffer overflow vulnerability in the parameter of the CGI program in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an (CVSS 6.5, Zyxel NR7101 firmware)
- [CVE-2022-43392](https://cve.now/CVE-2022-43392.md): A buffer overflow vulnerability in the parameter of web server in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an authe (CVSS 6.5, Zyxel NR7101 firmware)
- [CVE-2022-43393](https://cve.now/CVE-2022-43393.md): An improper check for unusual or exceptional conditions in the HTTP request processing function of Zyxel GS1920-24v2 firmware prior to V4.70 (CVSS 8.2, Zyxel GS1920-24v2 firmware)
- [CVE-2022-4344](https://cve.now/CVE-2022-4344.md): Memory exhaustion in the Kafka protocol dissector in Wireshark 4.0.0 to 4.0.1 and 3.6.0 to 3.6.9 allows denial of service via packet injecti (CVSS 6.3, Wireshark Foundation Wireshark)
- [CVE-2022-4415](https://cve.now/CVE-2022-4415.md): A vulnerability was found in systemd. (CVSS 5.5, systemd)
- [CVE-2022-4543](https://cve.now/CVE-2022-4543.md): A flaw named "EntryBleed" was found in the Linux Kernel Page Table Isolation (KPTI). (CVSS 5.5, Linux kernel)
- [CVE-2022-47859](https://cve.now/CVE-2022-47859.md): Lead Management System v1.0 is vulnerable to SQL Injection via the user\_id parameter in changePassword.php. (CVSS 9.8)
- [CVE-2022-47860](https://cve.now/CVE-2022-47860.md): Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeProduct.php. (CVSS 9.8)
- [CVE-2022-47861](https://cve.now/CVE-2022-47861.md): Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeLead.php. (CVSS 9.8)
- [CVE-2022-47862](https://cve.now/CVE-2022-47862.md): Lead Management System v1.0 is vulnerable to SQL Injection via the customer\_id parameter in ajax\_represent.php. (CVSS 9.8)
- [CVE-2022-47864](https://cve.now/CVE-2022-47864.md): Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeCategories.php. (CVSS 9.8)
- [CVE-2022-47865](https://cve.now/CVE-2022-47865.md): Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeOrder.php. (CVSS 9.8)
- [CVE-2022-47866](https://cve.now/CVE-2022-47866.md): Lead management system v1.0 is vulnerable to SQL Injection via the id parameter in removeBrand.php. (CVSS 9.8)
- [CVE-2022-48252](https://cve.now/CVE-2022-48252.md): The jokob-sk/Pi.Alert fork (before 22.12.20) of Pi.Alert allows Remote Code Execution via nmap\_scan.php (scan parameter) OS Command Injectio (CVSS 9.8)
- [CVE-2022-48253](https://cve.now/CVE-2022-48253.md): nhttpd in Nostromo before 2.1 is vulnerable to a path traversal that may allow an attacker to execute arbitrary commands on the remote serve (CVSS 9.8)
- [CVE-2023-22945](https://cve.now/CVE-2023-22945.md): In the GrowthExperiments extension for MediaWiki through 1.39, the growthmanagementorlist API allows blocked users (blocked in ApiManageMent (CVSS 4.3)
- [CVE-2023-22947](https://cve.now/CVE-2023-22947.md): Insecure folder permissions in the Windows installation path of Shibboleth Service Provider (SP) before 3.4.1 allow an unprivileged local at (CVSS 7.3)
- [CVE-2023-22952](https://cve.now/CVE-2023-22952.md): In SugarCRM before 12.0. (CVSS 8.8, KEV)
- [CVE-2023-22958](https://cve.now/CVE-2023-22958.md): The Syracom Secure Login plugin before 3.1.1.0 for Jira may allow spoofing of 2FA PIN validation via the plugins/servlet/twofactor/public/pi (CVSS 6.1)
- [CVE-2023-22959](https://cve.now/CVE-2023-22959.md): WebChess through 0.9.0 and 1.0.0.rc2 allows SQL injection: mainmenu.php, chess.php, and opponentspassword.php (txtFirstName, txtLastName). (CVSS 8.8)
- [CVE-2023-22963](https://cve.now/CVE-2023-22963.md): The personnummer implementation before 3.0.3 for Dart mishandles numbers in which the last four digits match the ^000\[0-9\]$ regular expressi (CVSS 5.3)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-01-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.