CVEs published January 17, 2023
164 CVEs were published on January 17, 2023: 16 critical, 53 high. 1 is now in CISA KEV.
- Published
- 164
- Critical
- 16
- High
- 53
- Medium
- 79
- Low
- 12
- Unrated
- 4
- Now in CISA KEV
- 1
- Fix available
- 50
Most affected products
- Oracle MySQL Server
- 24
- Oracle VM VirtualBox
- 6
- GE Digital Proficy Historian
- 5
- Oracle WebLogic Server
- 5
- shopware platform · shopware/platform +1
- 5
- Mahoroba Kobo MAHO-PBX NetDevancer series
- 4
- Apache Software Foundation Apache HTTP Server
- 3
- freeradius
- 3
- Oracle Business Intelligence Enterprise Edition
- 3
- Oracle Database - Enterprise Edition
- 3
Critical 16
- CVE-2023-21890Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Core).Oracle Communications Converged Application Server
- CVE-2022-46732CVE-2022-46732GE Digital Proficy Historian
- CVE-2022-23521gitattributes parsing integer overflow in gitgit
- CVE-2022-41903Integer overflow in `git archive`, `git log --format` leading to RCE in gitgit
- CVE-2023-22731Improper Control of Generation of Code in Twig rendered views in shopwareshopware platform · shopware/platform +1
- CVE-2023-22727Database Query::offset() and limit() vulnerable to SQL injection in cakephpcakephp · cakephp/cakephp +1
- CVE-2022-36760Apache HTTP Server: mod_proxy_ajp Possible request smugglingApache Software Foundation Apache HTTP Server
- CVE-2022-43462WordPress IP Blacklist Cloud Plugin <= 5.00 is vulnerable to SQL Injection (SQLi) vulnerabilityAdeel Ahmed IP Blacklist Cloud
- CVE-2022-23739Incorrect authorization check in GitHub Enterprise Server leading to escalation of privileges in GraphQL API requests from GitHub Apps using scoped user-to-server tokensGitHub Enterprise Server
- CVE-2022-43976An issue was discovered in FC46-WebBridge on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0.
- CVE-2022-43977An issue was discovered on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0.
- CVE-2022-46475D-Link DIR 645A1 1.06B01_Beta01 was discovered to contain a stack overflow via the service= variable in the genacgi_main function.
- CVE-2022-47853TOTOlink A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection Vulnerability in the httpd service.
- CVE-2023-22279MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, and MAHO-PBX NetDevancMahoroba Kobo MAHO-PBX NetDevancer series
- CVE-2023-22303TP-Link SG105PE firmware prior to 'TL-SG105PE(UN) 1.0_1.0.0 Build 20221208' contains an authentication bypass vulnerability.TP-Link SG105PE
- CVE-2023-22357Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is not specified in FINS protocol being execuOMRON CP1L-EL20DR-D
High 53
- CVE-2022-38469 An unauthorized user with network access and the decryption key could decrypt sensitive data, such as usernames and passwords.GE Digital Proficy Historian
- CVE-2022-46331 An unauthorized user could possibly delete any file on the system.GE Digital Proficy Historian
- CVE-2022-43494 An unauthorized user could be able to read any file on the system, potentially exposing sensitive information.GE Digital Proficy Historian
- CVE-2022-46660 An unauthorized user could alter or write files with full control over the path and content of the file.GE Digital Proficy Historian
- CVE-2023-21894Vulnerability in the Oracle Global Lifecycle Management NextGen OUI Framework product of Oracle Fusion Middleware (component: NextGen InstalOracle Global Lifecycle Management NextGen OUI Framework
- CVE-2023-21893Vulnerability in the Oracle Data Provider for .NET component of Oracle Database Server.Oracle Data Provider for .NET · Oracle.ManagedDataAccess +1
- CVE-2023-21886Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2023-21862Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: XML Security component).Oracle Web Services Manager
- CVE-2023-21858Vulnerability in the Oracle Collaborative Planning product of Oracle E-Business Suite (component: Installation).Oracle Collaborative Planning
- CVE-2023-21857Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Auomated Test Suite).Oracle HCM Common Architecture
- CVE-2023-21856Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports).Oracle iSetup
- CVE-2023-21855Vulnerability in the Oracle Sales for Handhelds product of Oracle E-Business Suite (component: Pocket Outlook Sync(PocketPC)).Oracle Sales for Handhelds
- CVE-2023-21854Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Core Components).Oracle Sales Offline
- CVE-2023-21853Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Synchronization).Oracle Mobile Field Service
- CVE-2023-21852Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component: Setup).Oracle Learning Management
- CVE-2023-21851Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration).Oracle Marketing
- CVE-2023-21850Vulnerability in the Oracle Demantra Demand Management product of Oracle Supply Chain (component: E-Business Collections).Oracle Demantra Demand Management
- CVE-2023-21849Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: Java utils).Oracle Applications DBA
- CVE-2023-21848Vulnerability in the Oracle Communications Convergence product of Oracle Communications Applications (component: Admin Configuration).Oracle Communications Convergence
- CVE-2023-21846Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Security).Oracle BI Publisher
- CVE-2023-21842Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container).Oracle WebLogic Server
- CVE-2023-21841Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2023-21839Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2023-21838Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2023-21837Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2023-21832Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Security).Oracle BI Publisher
- CVE-2023-21828Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Reporting).Oracle Hospitality Reporting and Analytics
- CVE-2023-21826Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Reporting).Oracle Hospitality Reporting and Analytics
- CVE-2022-41953Git clone remote code execution vulnerability in git-for-windowsgit-for-windows git
- CVE-2023-22499Interactive permission prompt spoofing in Denodenoland deno · deno
- CVE-2023-23749Extension - miniorange - LDAP Integration - LDAP Injection (username)miniorange LDAP Integration with Active Directory and OpenL…
- CVE-2015-10063saemorris TheRadSystem _login.php redirect sql injectionsaemorris TheRadSystem
- CVE-2023-22875IBM Security QRadar SIEM information disclosureIBM Security QRadar SIEM
- CVE-2022-4621Panasonic Sanyo CCTV Network CameraPanasonic Sanyo CCTV Network Camera
- CVE-2022-3091RONDS EPM version 1.19.5 has a vulnerability in which a function could allow unauthenticated users to leak credentials.RONDS Equipment Predictive Maintenance Solution
- CVE-2022-2893RONDS EPM version 1.19.5 does not properly validate the filename parameter, which could allow an unauthorized user to specify file paths aRONDS Equipment Predictive Maintenance Solution
- CVE-2023-0332SourceCodester Online Food Ordering System manage_user.php sql injectionSourceCodester Online Food Ordering System
- CVE-2021-32837mechanize vulnerable to ReDoSpython-mechanize mechanize · mechanize
- CVE-2022-40319The LISTSERV 17 web interface allows remote attackers to conduct Insecure Direct Object References (IDOR) attacks via a modified email addre
- CVE-2022-41858A flaw was found in the Linux kernel.Linux kernel
- CVE-2022-41859In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantiallfreeradius
- CVE-2022-41860In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionarifreeradius
- CVE-2022-43975An issue was discovered in FC46-WebBridge on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0.
- CVE-2022-46648ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a reposruby-git · git
- CVE-2022-47318ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a reposruby-git · git
- CVE-2023-0122A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in nvmet_setup_auth(), allows an attacker to perform a Pre-Kernel
- CVE-2023-0158Triggered crash on direct RRDP accessNLnet Labs Krill
- CVE-2023-22280MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, and MAHO-PBX NetDevancMahoroba Kobo MAHO-PBX NetDevancer series
- CVE-2023-22286Cross-site request forgery (CSRF) vulnerability in MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG LiMahoroba Kobo MAHO-PBX NetDevancer series
- CVE-2023-22304OS command injection vulnerability in PIX-RT100 versions RT100_TEQ_2.1.1_EQ101 and RT100_TEQ_2.1.2_EQ101 allows a network-adjacent attacker PIXELA PIX-RT100
- CVE-2023-22366CX-Motion-MCH v2.32 and earlier contains an access of uninitialized pointer vulnerability.OMRON CX-Motion-MCH
- CVE-2023-22624Zoho ManageEngine Exchange Reporter Plus before 5708 allows attackers to conduct XXE attacks.
- CVE-2023-23637IMPatienT before 1.5.2 allows stored XSS via onmouseover in certain text fields within a PATCH /modify_onto request to the ontology builder.
Medium, low and unrated 95
- CVE-2015-10066tynx wuersch Store.class.php getByCustomQuery sql injectiontynx wuersch
- CVE-2014-125082nivit redports model.py sql injectionnivit redports
- CVE-2010-10006michaelliao jopenid OpenIdManager.java getAuthentication timing discrepancymichaelliao jopenid · org.expressme:JOpenId
- CVE-2023-21900Vulnerability in the Oracle Solaris product of Oracle Systems (component: NSSwitch).Oracle Solaris Operating System
- CVE-2023-21899Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2023-21898Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2023-21892Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Visual Analyzer).Oracle Business Intelligence Enterprise Edition
- CVE-2023-21891Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Visual Analyzer).Oracle Business Intelligence Enterprise Edition
- CVE-2023-21889Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2023-21888Vulnerability in the Primavera Gateway product of Oracle Construction and Engineering (component: WebUI).Oracle Primavera Gateway
- CVE-2023-21887Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS).Oracle MySQL Server
- CVE-2023-21885Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2023-21884Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2023-21883Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2023-21882Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2023-21881Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2023-21880Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2023-21879Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2023-21878Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2023-21877Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2023-21876Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2023-21875Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption).Oracle MySQL Server
- CVE-2023-21874Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling).Oracle MySQL Server
- CVE-2023-21873Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2023-21872Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2023-21871Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2023-21870Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2023-21869Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2023-21868Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2023-21867Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2023-21866Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2023-21865Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2023-21864Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2023-21863Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2023-21861Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Visual Analyzer).Oracle Business Intelligence Enterprise Edition
- CVE-2023-21859Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2023-21847Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Download).Oracle Web Applications Desktop Integrator
- CVE-2023-21845Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2023-21844Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2023-21843Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound).Oracle Java SE JDK and JRE
- CVE-2023-21840Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS).Oracle MySQL Server
- CVE-2023-21836Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).Oracle MySQL Server
- CVE-2023-21835Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).Oracle Java SE JDK and JRE
- CVE-2023-21834Vulnerability in the Oracle Self-Service Human Resources product of Oracle E-Business Suite (component: Workflow, Approval, Work Force ManagOracle Self-Service Human Resources
- CVE-2023-21831Vulnerability in the PeopleSoft Enterprise CS Academic Advisement product of Oracle PeopleSoft (component: Advising Notes).Oracle PeopleSoft Enterprise CS Academic Advisement
- CVE-2023-21830Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization).Oracle Java SE JDK and JRE
- CVE-2023-21829Vulnerability in the Oracle Database RDBMS Security component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2023-21827Vulnerability in the Oracle Database Data Redaction component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2023-21825Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Supplier Management).Oracle iSupplier Portal
- CVE-2023-21824Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications Applications (component: Customer,Oracle Communications BRM - Elastic Charging Engine
- CVE-2022-39429Vulnerability in the Java VM component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2017-20171PrivateSky apersistence mysqlUtils.js sql injectionPrivateSky apersistence
- CVE-2015-10065AenBleidd FiND my_validator.cpp init_result buffer overflowAenBleidd FiND
- CVE-2014-125081risheesh debutsav sql injectionrisheesh debutsav
- CVE-2023-22733Improper Output Neutralization in Log Module in shopwareshopware platform · shopware/platform +1
- CVE-2023-22732Insufficient Session Expiration in Administration in shopwareshopware platform · shopware/platform +1
- CVE-2023-22730Improper Input Validation of Clearance sale in cartshopware platform · shopware/platform +1
- CVE-2023-22734Improper Input Newsletter subscription option validation in shopwareshopware platform · shopware/platform +1
- CVE-2022-23538User credentials leaked to third-party service via HTTP redirect in scs-library-clientsylabs scs-library-client · github.com/sylabs/scs-library-c…
- CVE-2022-4891Sisimai string.rb to_plain redosSisimai
- CVE-2022-37436Apache HTTP Server: mod_proxy prior to 2.4.55 allows a backend to trigger HTTP response splittingApache Software Foundation Apache HTTP Server
- CVE-2006-20001Apache HTTP Server: mod_dav out of bounds read, or write of zero byteApache Software Foundation Apache HTTP Server
- CVE-2015-10064VictorFerraresi pokemon-database-php sql injectionVictorFerraresi pokemon-database-php
- CVE-2015-10062galaxy-data-resource Command Line Template injectiongalaxy-data-resource
- CVE-2016-15021nickzren alsdb sql injectionnickzren alsdb
- CVE-2015-10061evandro-machado Trabalho-Web2 ClienteDAO.java sql injectionevandro-machado Trabalho-Web2
- CVE-2013-10013Bricco Authenticator Plugin DBAuthenticator.java compare sql injectionBricco Authenticator Plugin
- CVE-2017-20170ollpu parontalli index.php sql injectionollpu parontalli
- CVE-2015-10060MNBikeways database views.py sql injectionMNBikeways database
- CVE-2015-10059s134328 Webapplication-Veganguide apiService.js cross site scriptings134328 Webapplication-Veganguide
- CVE-2015-10058Wikisource Category Browser index.php cross site scriptingWikisource Category Browser
- CVE-2010-10008simplesamlphp simplesamlphp-module-openidprovider trust.tpl.php cross site scriptingsimplesamlphp-module-openidprovider · simplesamlphp/simples…
- CVE-2022-42462WordPress IP Blacklist Cloud Plugin <= 5.00 is vulnerable to Cross Site Scripting (XSS)Adeel Ahmed IP Blacklist Cloud
- CVE-2022-30544WordPress OSM – OpenStreetMap Plugin <= 6.0.1 is vulnerable to Cross Site Request Forgery (CSRF)MiKa OSM – OpenStreetMap
- CVE-2020-36611File and Directory Permission Vulnerability in Hitachi Tuning ManagerHitachi Tuning Manager
- CVE-2018-14628An information leak vulnerability was discovered in Samba's LDAP server.Samba
- CVE-2021-36647Use of a Broken or Risky Cryptographic Algorithm in the function mbedtls_mpi_exp_mod() in lignum.c in Mbed TLS Mbed TLS all versions before
- CVE-2022-2251Improper sanitization of branch names in GitLab Runner affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.GitLab Runner
- CVE-2022-2907An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 before 15.1.6, all versions starting from 15.2 beforeGitLab
- CVE-2022-3650A privilege escalation flaw was found in Ceph.Ceph
- CVE-2022-39195A cross-site scripting (XSS) vulnerability in the LISTSERV 17 web interface allows remote attackers to inject arbitrary JavaScript or HTML v
- CVE-2022-40704A XSS vulnerability was found in phoromatic_r_add_test_details.php in phoronix-test-suite.phoronix-test-suite
- CVE-2022-4121In libetpan a null pointer dereference in mailimap_mailbox_data_status_free in low-level/imap/mailimap_types.c was found that could lead to libetpan
- CVE-2022-41861A flaw was found in freeradius.freeradius
- CVE-2022-45439A pair of spare WiFi credentials is stored in the configuration file of the Zyxel AX7501-B0 firmware prior to V5.17(ABPC.3)C0 in cleartext.Zyxel AX7501-B0 firmware
- CVE-2022-45440A vulnerability exists in the FTP server of the Zyxel AX7501-B0 firmware prior to V5.17(ABPC.3)C0, which processes symbolic links on externaZyxel AX7501-B0 firmware
- CVE-2022-46891An issue was discovered in the Arm Mali GPU Kernel Driver.
- CVE-2022-47929In the Linux kernel before 6.1.6, a NULL pointer dereference bug in the traffic control subsystem allows an unprivileged user to trigger a d
- CVE-2023-0296The Birthday attack against 64-bit block ciphers flaw (CVE-2016-2183) was reported for the health checks port (9979) on etcd grpc-proxy compRed Hat OpenShift
- CVE-2023-0337Cross-site Scripting (XSS) - Reflected in lirantal/daloradiuslirantal/daloradius
- CVE-2023-0338Cross-site Scripting (XSS) - Reflected in lirantal/daloradiuslirantal/daloradius
- CVE-2023-22278m-FILTER prior to Ver.5.70R01 (Ver.5 Series) and m-FILTER prior to Ver.4.87R04 (Ver.4 Series) allows a remote unauthenticated attacker to byDigital Arts m-FILTER Ver.5 Series and Ver.4 Series
- CVE-2023-22296Reflected cross-site scripting vulnerability in MAHO-PBX NetDevancer series MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAMahoroba Kobo MAHO-PBX NetDevancer series
- CVE-2023-22298Open redirect vulnerability in pgAdmin 4 versions prior to v6.14 allows a remote unauthenticated attacker to redirect a user to an arbitrarypgAdmin Project pgAdmin · pgadmin4
- CVE-2023-22316Hidden functionality vulnerability in PIX-RT100 versions RT100_TEQ_2.1.1_EQ101 and RT100_TEQ_2.1.2_EQ101 allows a network-adjacent attacker PIXELA PIX-RT100