# CVEs published 2023-01-13

79 CVEs were published on January 13, 2023: 7 critical, 41 high. Days are UTC.

- [CVE-2022-41721](https://cve.now/CVE-2022-41721.md): Request smuggling due to improper request handling in golang.org/x/net/http2/h2c (CVSS 7.5, golang.org/x/net/http2/h2c · golang.org/x/net)
- [CVE-2017-20169](https://cve.now/CVE-2017-20169.md): GGGGGGGG ToN-MasterServer svr\_request\_pub.php sql injection (CVSS 5.5, GGGGGGGG ToN-MasterServer)
- [CVE-2015-10042](https://cve.now/CVE-2015-10042.md): Dovgalyuk AIBattle procedures.php registerUser sql injection (CVSS 5.5, Dovgalyuk AIBattle)
- [CVE-2023-0295](https://cve.now/CVE-2023-0295.md): Launchpad – Coming Soon & Maintenance Mode Plugin \<= 1.0.13 - Authenticated (Administrator+) Cross-Site Scripting (CVSS 5.5, obox Launchpad – Coming Soon & Maintenance Mode Plugin)
- [CVE-2023-0294](https://cve.now/CVE-2023-0294.md): Mediamatic – Media Library Folders \<= 2.8.1 - Cross-Site Request Forgery (CVSS 8.8, plugincraft Mediamatic – Media Library Folders)
- [CVE-2023-0293](https://cve.now/CVE-2023-0293.md): Mediamatic – Media Library Folders \<= 2.8.1 - Missing Authorization (CVSS 4.3, plugincraft Mediamatic – Media Library Folders)
- [CVE-2015-10041](https://cve.now/CVE-2015-10041.md): Dovgalyuk AIBattle procedures.php sendComments sql injection (CVSS 5.5, Dovgalyuk AIBattle)
- [CVE-2015-10040](https://cve.now/CVE-2015-10040.md): gitlearn Escape Sequence config.sh getOutOf injection (CVSS 5.4, gitlearn)
- [CVE-2023-22491](https://cve.now/CVE-2023-22491.md): gatsby-transformer-remark vulnerable to unsanitized JavaScript code injection (CVSS 8.1, gatsbyjs gatsby · gatsby-transformer-remark)
- [CVE-2023-22489](https://cve.now/CVE-2023-22489.md): Flarum is missing authorization in discussion replies (CVSS 3.5, flarum framework · flarum/core)
- [CVE-2009-10002](https://cve.now/CVE-2009-10002.md): dpup fittr-flickr EXIF Preview easy-exif.js cross site scripting (CVSS 3.5, dpup fittr-flickr)
- [CVE-2009-10001](https://cve.now/CVE-2009-10001.md): jianlinwei cool-php-captcha example-form.php cross site scripting (CVSS 3.5, jianlinwei cool-php-captcha)
- [CVE-2021-4312](https://cve.now/CVE-2021-4312.md): Th3-822 Rapidleech zip.php zip\_go cross site scripting (CVSS 3.5, Th3-822 Rapidleech)
- [CVE-2023-0221](https://cve.now/CVE-2023-0221.md): Product security bypass vulnerability in ACC prior to version 8.3.4 allows a locally logged-in attacker with administrator privileges to byp (CVSS 4.4, Trellix Application and Change Control)
- [CVE-2023-22493](https://cve.now/CVE-2023-22493.md): RSSHub is vulnerable to SSRF (Server-Side Request Forgery) (CVSS 8.8, DIYgod RSSHub · rsshub)
- [CVE-2023-0287](https://cve.now/CVE-2023-0287.md): ityouknow favorites-web Comment cross site scripting (CVSS 3.5, ityouknow favorites-web)
- [CVE-2023-0283](https://cve.now/CVE-2023-0283.md): SourceCodester Online Flight Booking Management System POST Parameter review\_search.php sql injection (CVSS 6.3, SourceCodester Online Flight Booking Management System)
- [CVE-2023-0281](https://cve.now/CVE-2023-0281.md): SourceCodester Online Flight Booking Management System judge\_panel.php sql injection (CVSS 6.3, SourceCodester Online Flight Booking Management System)
- [CVE-2022-21191](https://cve.now/CVE-2022-21191.md): Versions of the package global-modules-path before 3.0.0 are vulnerable to Command Injection due to missing input sanitization or other chec (CVSS 7.4, global-modules-path)
- [CVE-2022-42290](https://cve.now/CVE-2022-42290.md): NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to cod (CVSS 7.2, NVIDIA DGX servers)
- [CVE-2022-42289](https://cve.now/CVE-2022-42289.md): NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to cod (CVSS 7.2, NVIDIA DGX servers)
- [CVE-2022-42288](https://cve.now/CVE-2022-42288.md): NVIDIA BMC contains a vulnerability in IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid BMC username, w (CVSS 5.3, NVIDIA DGX servers)
- [CVE-2022-42287](https://cve.now/CVE-2022-42287.md): NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can upload and download arbitrary files under certain circ (CVSS 6.0, NVIDIA DGX servers)
- [CVE-2022-42286](https://cve.now/CVE-2022-42286.md): DGX A100 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of service, or escalation of privileges. (CVSS 6.0, NVIDIA DGX servers)
- [CVE-2022-42285](https://cve.now/CVE-2022-42285.md): DGX A100 SBIOS contains a vulnerability in the Pre-EFI Initialization (PEI)phase, where a privileged user can disable SPI flash protection, (CVSS 6.0, NVIDIA DGX servers)
- [CVE-2022-42284](https://cve.now/CVE-2022-42284.md): NVIDIA BMC stores user passwords in an obfuscated form in a database accessible by the host. (CVSS 6.2, NVIDIA DGX servers)
- [CVE-2022-42283](https://cve.now/CVE-2022-42283.md): NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service (CVSS 6.4, NVIDIA DGX servers)
- [CVE-2022-42282](https://cve.now/CVE-2022-42282.md): NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can access arbitrary files, which may lead to information (CVSS 6.5, NVIDIA DGX servers)
- [CVE-2022-42281](https://cve.now/CVE-2022-42281.md): NVIDIA DGX A100 contains a vulnerability in SBIOS in the FsRecovery, which may allow a highly privileged local attacker to cause an out-of-b (CVSS 6.7, NVIDIA DGX servers)
- [CVE-2022-42280](https://cve.now/CVE-2022-42280.md): NVIDIA BMC contains a vulnerability in SPX REST auth handler, where an un-authorized attacker can exploit a path traversal, which may lead t (CVSS 7.1, NVIDIA DGX servers)
- [CVE-2022-42279](https://cve.now/CVE-2022-42279.md): NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to cod (CVSS 7.2, NVIDIA DGX servers)
- [CVE-2022-42278](https://cve.now/CVE-2022-42278.md): NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can read and write to arbitrary locations within the memor (CVSS 7.2, NVIDIA DGX servers)
- [CVE-2022-42277](https://cve.now/CVE-2022-42277.md): NVIDIA DGX Station contains a vulnerability in SBIOS in the SmiFlash, where a local user with elevated privileges can read, write and erase (CVSS 7.5, NVIDIA DGX servers)
- [CVE-2022-42276](https://cve.now/CVE-2022-42276.md): NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmiFlash, where a local user with elevated privileges can read, write and erase fla (CVSS 7.5, NVIDIA DGX servers)
- [CVE-2022-3161](https://cve.now/CVE-2022-3161.md): The APDFL.dll contains a memory corruption vulnerability while parsing specially crafted PDF files. (CVSS 7.8, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2022-3160](https://cve.now/CVE-2022-3160.md): The APDFL.dll contains an out-of-bounds write past the fixed-length heap-based buffer while parsing specially crafted PDF files. (CVSS 7.8, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2022-3159](https://cve.now/CVE-2022-3159.md): The APDFL.dll contains a stack-based buffer overflow vulnerability that could be triggered while parsing specially crafted PDF files. (CVSS 7.8, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2022-42275](https://cve.now/CVE-2022-42275.md): NVIDIA BMC IPMI handler allows an unauthenticated host to write to a host SPI flash bypassing secureboot protections. (CVSS 7.7, NVIDIA DGX servers)
- [CVE-2022-42274](https://cve.now/CVE-2022-42274.md): NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service (CVSS 7.8, NVIDIA DGX servers)
- [CVE-2021-36204](https://cve.now/CVE-2021-36204.md): Insufficiently Protected Credentials in Metasys (CVSS 7.8, Johnson Controls Metasys ADS/ADX/OAS)
- [CVE-2021-46872](https://cve.now/CVE-2021-46872.md): An issue was discovered in Nim before 1.6.2. (CVSS 6.1)
- [CVE-2022-3693](https://cve.now/CVE-2022-3693.md): Path traversal in FileOrbis File Management System (CVSS 7.5, Deytek Informatics FileOrbis File Management System)
- [CVE-2022-42136](https://cve.now/CVE-2022-42136.md): Authenticated mail users, under specific circumstances, could add files with unsanitized content in public folders where the IIS user had pe (CVSS 8.8)
- [CVE-2022-45299](https://cve.now/CVE-2022-45299.md): An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL. (CVSS 9.8, webbrowser)
- [CVE-2022-46093](https://cve.now/CVE-2022-46093.md): Hospital Management System v1.0 is vulnerable to SQL Injection. (CVSS 8.2)
- [CVE-2022-46471](https://cve.now/CVE-2022-46471.md): Online Health Care System v1.0 was discovered to contain a SQL injection vulnerability via the consulting\_id parameter at /healthcare/Admin/ (CVSS 9.8)
- [CVE-2022-46478](https://cve.now/CVE-2022-46478.md): The RPC interface in datax-web v1.0.0 and v2.0.0 to v2.1.2 contains no permission checks by default which allows attackers to execute arbitr (CVSS 9.8)
- [CVE-2022-46502](https://cve.now/CVE-2022-46502.md): Online Student Enrollment System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /student\_enrollm (CVSS 9.8)
- [CVE-2022-46946](https://cve.now/CVE-2022-46946.md): Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete (CVSS 7.2)
- [CVE-2022-46947](https://cve.now/CVE-2022-46947.md): Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete (CVSS 7.2)
- [CVE-2022-46949](https://cve.now/CVE-2022-46949.md): Helmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete (CVSS 7.2)
- [CVE-2022-46950](https://cve.now/CVE-2022-46950.md): Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?acti (CVSS 7.2)
- [CVE-2022-46951](https://cve.now/CVE-2022-46951.md): Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?acti (CVSS 7.2)
- [CVE-2022-46952](https://cve.now/CVE-2022-46952.md): Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?acti (CVSS 7.2)
- [CVE-2022-46953](https://cve.now/CVE-2022-46953.md): Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?acti (CVSS 7.2)
- [CVE-2022-46954](https://cve.now/CVE-2022-46954.md): Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?acti (CVSS 9.8)
- [CVE-2022-46955](https://cve.now/CVE-2022-46955.md): Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?acti (CVSS 9.8)
- [CVE-2022-46956](https://cve.now/CVE-2022-46956.md): Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/manage\_user.p (CVSS 7.2)
- [CVE-2022-48090](https://cve.now/CVE-2022-48090.md): Tramyardg hotel-mgmt-system version 2022.4 is vulnerable to SQL Injection via /app/dao/CustomerDAO.php. (CVSS 6.5)
- [CVE-2022-48091](https://cve.now/CVE-2022-48091.md): Tramyardg hotel-mgmt-system version 2022.4 is vulnerable to Cross Site Scripting (XSS) via process\_update\_profile.php. (CVSS 5.4)
- [CVE-2022-48256](https://cve.now/CVE-2022-48256.md): Technitium DNS Server before 10.0 allows a self-CNAME denial-of-service attack in which a CNAME loop causes an answer to contain hundreds of (CVSS 7.5)
- [CVE-2022-48257](https://cve.now/CVE-2022-48257.md): In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp. (CVSS 5.3)
- [CVE-2022-48258](https://cve.now/CVE-2022-48258.md): In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles. (CVSS 5.3)
- [CVE-2023-0288](https://cve.now/CVE-2023-0288.md): Heap-based Buffer Overflow in vim/vim (CVSS 7.3, vim/vim)
- [CVE-2023-0289](https://cve.now/CVE-2023-0289.md): Cross-site Scripting (XSS) - Stored in craigk5n/webcalendar (CVSS 7.6, craigk5n/webcalendar)
- [CVE-2023-21587](https://cve.now/CVE-2023-21587.md): Adobe InDesign Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Adobe InDesign)
- [CVE-2023-21588](https://cve.now/CVE-2023-21588.md): Adobe InDesign Improper Input Validation Remote Code Execution Vulnerability (CVSS 7.8, Adobe InDesign)
- [CVE-2023-21589](https://cve.now/CVE-2023-21589.md): Adobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe InDesign)
- [CVE-2023-21590](https://cve.now/CVE-2023-21590.md): Adobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe InDesign)
- [CVE-2023-21591](https://cve.now/CVE-2023-21591.md): Adobe InDesign Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe InDesign)
- [CVE-2023-21592](https://cve.now/CVE-2023-21592.md): Adobe InDesign Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe InDesign)
- [CVE-2023-21594](https://cve.now/CVE-2023-21594.md): Adobe InCopy Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Adobe InCopy)
- [CVE-2023-21595](https://cve.now/CVE-2023-21595.md): Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe InCopy)
- [CVE-2023-21596](https://cve.now/CVE-2023-21596.md): Adobe InCopy Improper Input Validation Remote Code Execution Vulnerability (CVSS 7.8, Adobe InCopy)
- [CVE-2023-21597](https://cve.now/CVE-2023-21597.md): Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe InCopy)
- [CVE-2023-21598](https://cve.now/CVE-2023-21598.md): Adobe InCopy Font Parsing Use-After-Free Information Disclosure Vulnerability (CVSS 5.5, Adobe InCopy)
- [CVE-2023-21599](https://cve.now/CVE-2023-21599.md): Adobe InCopy Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe InCopy)
- [CVE-2023-23559](https://cve.now/CVE-2023-23559.md): In rndis\_query\_oid in drivers/net/wireless/rndis\_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition. (CVSS 7.8)
- [CVE-2023-23566](https://cve.now/CVE-2023-23566.md): A 2-Step Verification problem in Axigen 10.3.3.52 allows an attacker to access a mailbox by bypassing 2-Step Verification when they try to a (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-01-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.