CVEs published January 15, 2023
31 CVEs were published on January 15, 2023: 2 critical, 6 high.
- Published
- 31
- Critical
- 2
- High
- 6
- Medium
- 21
- Low
- 2
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 26
Most affected products
- thorsten/phpmyfaq
- 9
- SourceCodester Online Food Ordering System
- 3
- agy pontifex.http
- 1
- bmattoso desafio_buzz_woody
- 1
- bony2023 Discussion-Board
- 1
- brandonfire miRNA_Database_by_PHP_MySql
- 1
- calesanz gibb-modul-151
- 1
- gophergala sqldump
- 1
- karsany OBridge
- 1
- krail-jpa
- 1
Critical 2
High 6
- CVE-2023-0302Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in radareorg/radare2radareorg/radare2
- CVE-2023-0308Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
- CVE-2023-0309Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
- CVE-2023-0312Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
- CVE-2023-23590Mercedes-Benz XENTRY Retail Data Storage 7.8.1 allows remote attackers to cause a denial of service (device restart) via an unauthenticated
- CVE-2023-23595BlueCat Device Registration Portal 2.2 allows XXE attacks that exfiltrate single-line files.
Medium, low and unrated 23
- CVE-2018-25075karsany OBridge ProcedureDao.java getAllStandaloneProcedureAndFunction sql injectionkarsany OBridge
- CVE-2016-15019tombh jekbox server.rb exposure of information through directory listingtombh jekbox
- CVE-2016-15018krail-jpa sql injectionkrail-jpa
- CVE-2015-10052calesanz gibb-modul-151 login redirectcalesanz gibb-modul-151
- CVE-2015-10051bony2023 Discussion-Board main.php display_all_replies sql injectionbony2023 Discussion-Board
- CVE-2015-10050brandonfire miRNA_Database_by_PHP_MySql model.php count_rna sql injectionbrandonfire miRNA_Database_by_PHP_MySql
- CVE-2015-10049Overdrive Eletrônica course-builder oeditor.html cross site scriptingOverdrive Eletrônica course-builder
- CVE-2023-0305SourceCodester Online Food Ordering System Login Module admin_class.php sql injectionSourceCodester Online Food Ordering System
- CVE-2023-0304SourceCodester Online Food Ordering System Signup Module admin_class.php sql injectionSourceCodester Online Food Ordering System
- CVE-2023-0303SourceCodester Online Food Ordering System view_prod.php sql injectionSourceCodester Online Food Ordering System
- CVE-2015-10048bmattoso desafio_buzz_woody sql injectionbmattoso desafio_buzz_woody
- CVE-2015-10047KYUUBl school-register DBManager.java sql injectionKYUUBl school-register
- CVE-2015-10046lolfeedback sql injectionlolfeedback
- CVE-2015-10045tutrantta project_todolist Database.php update sql injectiontutrantta project_todolist
- CVE-2015-10044gophergala sqldump sql injectiongophergala sqldump
- CVE-2014-125079agy pontifex.http Http.coffee sql injectionagy pontifex.http
- CVE-2014-125078yanheven console horizon.instances.js cross site scriptingyanheven console
- CVE-2014-125077pointhi searx_stats cron.php sql injectionpointhi searx_stats
- CVE-2022-4889visegripped Stracker api.php getHistory sql injectionvisegripped Stracker
- CVE-2023-0307Weak Password Requirements in thorsten/phpmyfaqthorsten/phpmyfaq
- CVE-2023-0311Improper Authentication in thorsten/phpmyfaqthorsten/phpmyfaq
- CVE-2023-0313Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
- CVE-2023-0314Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaqthorsten/phpmyfaq