# CVEs published 2023-01-20

94 CVEs were published on January 20, 2023: 21 critical, 33 high. Days are UTC.

- [CVE-2023-22742](https://cve.now/CVE-2023-22742.md): libgit2 fails to verify SSH keys by default (CVSS 5.3, libgit2 · libgit2-sys +1)
- [CVE-2023-0052](https://cve.now/CVE-2023-0052.md): SAUTER Controls Nova 200–220 Series Missing Authentication for Critical Function (CVSS 9.8, SAUTER Controls Nova 220 (EYK220F001) DDC with BACnet co… +2)
- [CVE-2023-22726](https://cve.now/CVE-2023-22726.md): Unrestricted file upload leading to privilege escalation in act (CVSS 8.0, nektos act · github.com/nektos/act)
- [CVE-2023-23607](https://cve.now/CVE-2023-23607.md): Unrestricted file upload leads to Remote Code Execution in erohtar/Dasherr (CVSS 9.8, erohtar Dasherr)
- [CVE-2022-1109](https://cve.now/CVE-2022-1109.md): An incorrect default permissions vulnerability in Lenovo Leyun cloud music application could allow denial of service. (CVSS 5.5, Lenovo Leyun)
- [CVE-2022-41733](https://cve.now/CVE-2022-41733.md): IBM InfoSphere Information Server denial of service (CVSS 5.3, IBM InfoSphere Information Server)
- [CVE-2022-35977](https://cve.now/CVE-2022-35977.md): Integer overflow in certain command arguments can drive Redis to OOM panic (CVSS 5.5, redis)
- [CVE-2023-22458](https://cve.now/CVE-2023-22458.md): Integer overflow in multiple Redis commands can lead to denial-of-service (CVSS 5.5, redis)
- [CVE-2021-39089](https://cve.now/CVE-2021-39089.md): IBM Cloud Pak for Security information disclosure (CVSS 4.3, IBM Cloud Pak for Security)
- [CVE-2021-39011](https://cve.now/CVE-2021-39011.md): IBM Cloud Pak for Security information disclosure (CVSS 4.2, IBM Cloud Pak for Security)
- [CVE-2022-40267](https://cve.now/CVE-2022-40267.md): Authentication Bypass Vulnerability in Web Server Function on MELSEC Series (CVSS 5.9, Mitsubishi Electric MELSEC iQ-F Series FX5U-32MT/ES · M… +65)
- [CVE-2023-23691](https://cve.now/CVE-2023-23691.md): Dell EMC PV ME5, versions ME5.1.0.0.0 and ME5.1.0.1.0, contains a Client-side desync Vulnerability. (CVSS 8.1, Dell PowerVault ME5)
- [CVE-2020-21152](https://cve.now/CVE-2020-21152.md): SQL Injection vulnerability in inxedu 2.0.6 allows attackers to execute arbitrary commands via the functionIds parameter to /saverolefunctio (CVSS 9.8)
- [CVE-2020-22653](https://cve.now/CVE-2020-22653.md): In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus (CVSS 9.8)
- [CVE-2020-22654](https://cve.now/CVE-2020-22654.md): In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus (CVSS 9.8)
- [CVE-2020-22655](https://cve.now/CVE-2020-22655.md): In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus (CVSS 7.5)
- [CVE-2020-22656](https://cve.now/CVE-2020-22656.md): In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus (CVSS 7.5)
- [CVE-2020-22657](https://cve.now/CVE-2020-22657.md): In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus (CVSS 9.1)
- [CVE-2020-22658](https://cve.now/CVE-2020-22658.md): In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus (CVSS 9.8)
- [CVE-2020-22659](https://cve.now/CVE-2020-22659.md): In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus (CVSS 7.5)
- [CVE-2020-22660](https://cve.now/CVE-2020-22660.md): In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus (CVSS 7.5)
- [CVE-2020-22661](https://cve.now/CVE-2020-22661.md): In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus (CVSS 6.5)
- [CVE-2020-22662](https://cve.now/CVE-2020-22662.md): In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus (CVSS 7.5)
- [CVE-2020-23256](https://cve.now/CVE-2020-23256.md): An issue was discovered in Electerm 1.3.22, allows attackers to execute arbitrary code via unverified request to electerms service. (CVSS 9.8, electerm)
- [CVE-2020-25502](https://cve.now/CVE-2020-25502.md): Cybereason EDR version 19.1.282 and above, 19.2.182 and above, 20.1.343 and above, and 20.2.X and above has a DLL hijacking vulnerability, w (CVSS 7.8)
- [CVE-2020-29297](https://cve.now/CVE-2020-29297.md): Multiple SQL Injection vulnerabilities in tourist5 Online-food-ordering-system 1.0. (CVSS 9.8)
- [CVE-2021-26642](https://cve.now/CVE-2021-26642.md): XpressEngine file upload vulnerability (CVSS 8.8, XEHub XE3 XpresesEngine · xpressengine/xpressengine)
- [CVE-2021-26644](https://cve.now/CVE-2021-26644.md): SQL-Injection vulnerability caused by the lack of verification of input values for the table name of DB used by the Mangboard bulletin board (CVSS 8.8, Hometory Mangboard WP BASIC)
- [CVE-2021-29368](https://cve.now/CVE-2021-29368.md): Session fixation vulnerability in CuppaCMS thru commit 4c9b742b23b924cf4c1f943f48b278e06a17e297 on November 12, 2019 allows attackers to gai (CVSS 8.8)
- [CVE-2021-33641](https://cve.now/CVE-2021-33641.md): When processing files, malloc stores the data of the current line. (CVSS 7.8, byacc)
- [CVE-2021-33642](https://cve.now/CVE-2021-33642.md): When a file is processed, an infinite loop occurs in next\_inline() of the more\_curly() function. (CVSS 5.5, byacc)
- [CVE-2021-37498](https://cve.now/CVE-2021-37498.md): An SSRF issue was discovered in Reprise License Manager (RLM) web interface through 14.2BL4 that allows remote attackers to trigger outbound (CVSS 6.5)
- [CVE-2021-37499](https://cve.now/CVE-2021-37499.md): CRLF vulnerability in Reprise License Manager (RLM) web interface through 14.2BL4 in the password parameter in View License Result function, (CVSS 6.5)
- [CVE-2021-37500](https://cve.now/CVE-2021-37500.md): Directory traversal vulnerability in Reprise License Manager (RLM) web interface before 14.2BL4 in the diagnostics function that allows RLM (CVSS 8.1)
- [CVE-2022-25631](https://cve.now/CVE-2022-25631.md): Symantec Endpoint Protection, prior to 14.3 RU6 (14.3.9210.6000), may be susceptible to a Elevation of Privilege vulnerability, which is a t (CVSS 7.8, Symantec Endpoint Protection)
- [CVE-2022-38110](https://cve.now/CVE-2022-38110.md): Reflected Cross-Site Scripting Vulnerability (CVSS 5.4, SolarWinds Database Performance Analyzer)
- [CVE-2022-38112](https://cve.now/CVE-2022-38112.md): Sensitive Information Disclosure Vulnerability (CVSS 7.5, SolarWinds Database Performance Analyzer)
- [CVE-2022-3918](https://cve.now/CVE-2022-3918.md): A program using FoundationNetworking in swift-corelibs-foundation is potentially vulnerable to CRLF ( ) injection in URLRequest headers. (CVSS 8.8, Swift Project Swift Foundation)
- [CVE-2022-39193](https://cve.now/CVE-2022-39193.md): An issue was discovered in the CheckUser extension for MediaWiki through 1.39.x. (CVSS 5.3)
- [CVE-2022-41441](https://cve.now/CVE-2022-41441.md): Multiple cross-site scripting (XSS) vulnerabilities in ReQlogic v11.3 allow attackers to execute arbitrary web scripts or HTML via a crafted (CVSS 6.1)
- [CVE-2022-43704](https://cve.now/CVE-2022-43704.md): The Sinilink XY-WFT1 WiFi Remote Thermostat, running firmware 1.3.6, allows an attacker to bypass the intended requirement to communicate us (CVSS 5.9)
- [CVE-2022-43959](https://cve.now/CVE-2022-43959.md): Insufficiently Protected Credentials in the AD/LDAP server settings in 1C-Bitrix Bitrix24 through 22.200.200 allow remote administrators to (CVSS 4.9)
- [CVE-2022-45537](https://cve.now/CVE-2022-45537.md): EyouCMS \<= 1.6.0 was discovered a reflected-XSS in the article publish component in cookie "ENV\_LIST\_URL". (CVSS 6.1)
- [CVE-2022-45538](https://cve.now/CVE-2022-45538.md): EyouCMS \<= 1.6.0 was discovered a reflected-XSS in the article publish component in cookie "ENV\_GOBACK\_URL". (CVSS 6.1)
- [CVE-2022-45539](https://cve.now/CVE-2022-45539.md): EyouCMS \<= 1.6.0 was discovered a reflected-XSS in FileManager component in GET value "activepath" when creating a new file. (CVSS 6.1)
- [CVE-2022-45540](https://cve.now/CVE-2022-45540.md): EyouCMS \<= 1.6.0 was discovered a reflected-XSS in article type editor component in POST value "name" if the value contains a malformed UTF- (CVSS 6.1)
- [CVE-2022-45541](https://cve.now/CVE-2022-45541.md): EyouCMS \<= 1.6.0 was discovered a reflected-XSS in the article attribute editor component in POST value "value" if the value contains a non- (CVSS 6.1)
- [CVE-2022-45542](https://cve.now/CVE-2022-45542.md): EyouCMS \<= 1.6.0 was discovered a reflected-XSS in the FileManager component in GET parameter "filename" when editing any file. (CVSS 5.4)
- [CVE-2022-45557](https://cve.now/CVE-2022-45557.md): Cross site scripting (XSS) vulnerability in Hundredrabbits Left 7.1.5 for MacOS allows attackers to execute arbitrary code via file names. (CVSS 6.1)
- [CVE-2022-45558](https://cve.now/CVE-2022-45558.md): Cross site scripting (XSS) vulnerability in Hundredrabbits Left 7.1.5 for MacOS allows attackers to execute arbitrary code via the meta tag. (CVSS 6.1)
- [CVE-2022-45748](https://cve.now/CVE-2022-45748.md): An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/A (CVSS 8.8)
- [CVE-2022-47012](https://cve.now/CVE-2022-47012.md): Use of uninitialized variable in function gen\_eth\_recv in GNS3 dynamips 0.2.21. (CVSS 7.5)
- [CVE-2022-47015](https://cve.now/CVE-2022-47015.md): MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. (CVSS 6.5)
- [CVE-2022-47021](https://cve.now/CVE-2022-47021.md): A null pointer dereference issue was discovered in functions op\_get\_data and op\_open1 in opusfile.c in xiph opusfile 0.9 thru 0.12 allows at (CVSS 7.8)
- [CVE-2022-47024](https://cve.now/CVE-2022-47024.md): A null pointer dereference issue was discovered in function gui\_x11\_create\_blank\_mouse in gui\_x11.c in vim 8.1.2269 thru 9.0.0339 allows att (CVSS 7.8)
- [CVE-2022-47732](https://cve.now/CVE-2022-47732.md): In Yeastar N412 and N824 Configuration Panel 42.x and 45.x, an unauthenticated attacker can create backup file and download it, revealing ad (CVSS 7.5)
- [CVE-2022-47747](https://cve.now/CVE-2022-47747.md): kraken \<= 0.1.4 has an arbitrary file read vulnerability via the component testfs. (CVSS 7.5, github.com/uber/kraken)
- [CVE-2022-48120](https://cve.now/CVE-2022-48120.md): SQL Injection vulnerability in kishan0725 Hospital Management System thru commit 4770d740f2512693ef8fd9aa10a8d17f79fad9bd (on March 13, 2021 (CVSS 9.8)
- [CVE-2022-48121](https://cve.now/CVE-2022-48121.md): TOTOlink A7100RU V7.4cu.2313\_B20191024 was discovered to contain a command injection vulnerability via the rsabits parameter in the setting/ (CVSS 9.8)
- [CVE-2022-48122](https://cve.now/CVE-2022-48122.md): TOTOlink A7100RU V7.4cu.2313\_B20191024 was discovered to contain a command injection vulnerability via the dayvalid parameter in the setting (CVSS 9.8)
- [CVE-2022-48123](https://cve.now/CVE-2022-48123.md): TOTOlink A7100RU V7.4cu.2313\_B20191024 was discovered to contain a command injection vulnerability via the servername parameter in the setti (CVSS 9.8)
- [CVE-2022-48124](https://cve.now/CVE-2022-48124.md): TOTOlink A7100RU V7.4cu.2313\_B20191024 was discovered to contain a command injection vulnerability via the FileName parameter in the setting (CVSS 9.8)
- [CVE-2022-48125](https://cve.now/CVE-2022-48125.md): TOTOlink A7100RU V7.4cu.2313\_B20191024 was discovered to contain a command injection vulnerability via the password parameter in the setting (CVSS 9.8)
- [CVE-2022-48126](https://cve.now/CVE-2022-48126.md): TOTOlink A7100RU V7.4cu.2313\_B20191024 was discovered to contain a command injection vulnerability via the username parameter in the setting (CVSS 9.8)
- [CVE-2022-48152](https://cve.now/CVE-2022-48152.md): SQL Injection vulnerability in RemoteClinic 2.0 allows attackers to execute arbitrary commands and gain sensitive information via the id par (CVSS 9.8)
- [CVE-2022-48279](https://cve.now/CVE-2022-48279.md): In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firew (CVSS 7.5)
- [CVE-2023-0101](https://cve.now/CVE-2023-0101.md): A privilege escalation vulnerability was identified in Nessus versions 8.10.1 through 8.15.8 and 10.0.0 through 10.4.1. (CVSS 8.8, Nessus)
- [CVE-2023-0410](https://cve.now/CVE-2023-0410.md): Cross-site Scripting (XSS) - Generic in builderio/qwik (CVSS 6.1, builderio/qwik · @builder.io/qwik)
- [CVE-2023-22331](https://cve.now/CVE-2023-22331.md): Use of default credentials vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote unauthenticated attacker to alt (CVSS 7.5, Contec Co. CONPROSYS HMI System)
- [CVE-2023-22334](https://cve.now/CVE-2023-22334.md): Use of password hash instead of password for authentication vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remot (CVSS 5.3, Contec Co. CONPROSYS HMI System)
- [CVE-2023-22339](https://cve.now/CVE-2023-22339.md): Improper access control vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote unauthenticated attacker to bypass (CVSS 7.5, Contec Co. CONPROSYS HMI System)
- [CVE-2023-22373](https://cve.now/CVE-2023-22373.md): Cross-site scripting vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote authenticated attacker to inject an a (CVSS 5.4, Contec Co. CONPROSYS HMI System)
- [CVE-2023-22910](https://cve.now/CVE-2023-22910.md): An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. (CVSS 5.4)
- [CVE-2023-22912](https://cve.now/CVE-2023-22912.md): An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. (CVSS 5.3)
- [CVE-2023-22964](https://cve.now/CVE-2023-22964.md): Zoho ManageEngine ServiceDesk Plus MSP before 10611, and 13x before 13004, is vulnerable to authentication bypass when LDAP authentication i (CVSS 9.1)
- [CVE-2023-23010](https://cve.now/CVE-2023-23010.md): Cross Site Scripting (XSS) vulnerability in Ecommerce-CodeIgniter-Bootstrap thru commit d5904379ca55014c5df34c67deda982c73dc7fe5 (on Dec 27, (CVSS 6.1)
- [CVE-2023-23012](https://cve.now/CVE-2023-23012.md): Cross Site Scripting (XSS) vulnerability in craigrodway classroombookings 2.6.4 allows attackers to execute arbitrary code or other unspecif (CVSS 6.1)
- [CVE-2023-23014](https://cve.now/CVE-2023-23014.md): Cross Site Scripting (XSS) vulnerability in InventorySystem thru commit e08fbbe17902146313501ed0b5feba81d58f455c (on Apr 23, 2021) via edit\_ (CVSS 6.1)
- [CVE-2023-23015](https://cve.now/CVE-2023-23015.md): Cross Site Scripting (XSS) vulnerability in Kalkun 0.8.0 via username input in file User\_model.php. (CVSS 6.1)
- [CVE-2023-23024](https://cve.now/CVE-2023-23024.md): Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /bsms\_ci/index.php/book. (CVSS 6.1)
- [CVE-2023-23143](https://cve.now/CVE-2023-23143.md): Buffer overflow vulnerability in function avc\_parse\_slice in file media\_tools/av\_parsers.c. (CVSS 7.8)
- [CVE-2023-23144](https://cve.now/CVE-2023-23144.md): Integer overflow vulnerability in function Q\_DecCoordOnUnitSphere file bifs/unquantize.c in GPAC version 2.2-rev0-gab012bbfb-master. (CVSS 5.5)
- [CVE-2023-23145](https://cve.now/CVE-2023-23145.md): GPAC version 2.2-rev0-gab012bbfb-master was discovered to contain a memory leak in lsr\_read\_rare\_full function. (CVSS 7.8)
- [CVE-2023-23488](https://cve.now/CVE-2023-23488.md): The Paid Memberships Pro WordPress Plugin, version \< 2.9.8, is affected by an unauthenticated SQL injection vulnerability in the 'code' para (CVSS 9.8, Paid Memberships Pro WordPress Plugin)
- [CVE-2023-23489](https://cve.now/CVE-2023-23489.md): The Easy Digital Downloads WordPress Plugin, versions 3.1.0.2 & 3.1.0.3, is affected by an unauthenticated SQL injection vulnerability in th (CVSS 9.8, Easy Digital Downloads WordPress Plugin)
- [CVE-2023-23490](https://cve.now/CVE-2023-23490.md): The Survey Maker WordPress Plugin, version \< 3.1.2, is affected by an authenticated SQL injection vulnerability in the 'surveys\_ids' paramet (CVSS 8.8, Survey Maker WordPress Plugin)
- [CVE-2023-23491](https://cve.now/CVE-2023-23491.md): The Quick Event Manager WordPress Plugin, version \< 9.7.5, is affected by a reflected cross-site scripting vulnerability in the 'category' p (CVSS 6.1, Quick Event Manager WordPress Plugin)
- [CVE-2023-23492](https://cve.now/CVE-2023-23492.md): The Login with Phone Number WordPress Plugin, version \< 1.4.2, is affected by an authenticated SQL injection vulnerability in the 'ID' param (CVSS 8.8, Login with Phone Number WordPress Plugin)
- [CVE-2023-23596](https://cve.now/CVE-2023-23596.md): jc21 NGINX Proxy Manager through 2.9.19 allows OS command injection. (CVSS 8.8)
- [CVE-2023-24021](https://cve.now/CVE-2023-24021.md): Incorrect handling of '\\0' bytes in file uploads in ModSecurity before 2.9.7 may allow for Web Application Firewall bypasses and buffer over (CVSS 7.5)
- [CVE-2023-24025](https://cve.now/CVE-2023-24025.md): CRYSTALS-DILITHIUM (in Post-Quantum Cryptography Selected Algorithms 2022) in PQClean d03da30 may allow universal forgeries of digital signa (CVSS 7.5)
- [CVE-2023-24026](https://cve.now/CVE-2023-24026.md): In MISP 2.4.167, app/webroot/js/event-graph.js has an XSS vulnerability via an event-graph preview payload. (CVSS 6.1)
- [CVE-2023-24027](https://cve.now/CVE-2023-24027.md): In MISP 2.4.167, app/webroot/js/action\_table.js allows XSS via a network history name. (CVSS 6.1)
- [CVE-2023-24028](https://cve.now/CVE-2023-24028.md): In MISP 2.4.167, app/Controller/Component/ACLComponent.php has incorrect access control for the decaying import function. (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-01-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.