CVEs published January 21, 2023
8 CVEs were published on January 21, 2023: 1 critical, 6 high.
- Published
- 8
- Critical
- 1
- High
- 6
- Medium
- 0
- Low
- 0
- Unrated
- 1
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- Apache Software Foundation Apache Airflow · apache-airfl… +1
- 1
- vim/vim
- 1
- yiisoft/yii2-gii
- 1
Critical 1
High 6
- CVE-2020-36655Yii Yii2 Gii before 2.2.2 allows remote attackers to execute arbitrary code via the Generator.php messageCategory field.yiisoft/yii2-gii
- CVE-2023-0433Heap-based Buffer Overflow in vim/vimvim/vim
- CVE-2023-22617A remote attacker might be able to cause infinite recursion in PowerDNS Recursor 4.8.0 via a DNS query that retrieves DS records for a misco
- CVE-2023-24038The HTML-StripScripts module through 1.06 for Perl allows _hss_attval_style ReDoS because of catastrophic backtracking for HTML content with
- CVE-2023-24039A stack-based buffer overflow in ParseColors in libXm in Common Desktop Environment 1.6 can be exploited by local low-privileged users via t
- CVE-2023-24042A race condition in LightFTP through 2.2 allows an attacker to achieve path traversal via a malformed FTP request.