CVEs published January 22, 2023
7 CVEs were published on January 22, 2023: 0 critical, 1 high.
- Published
- 7
- Critical
- 0
- High
- 1
- Medium
- 5
- Low
- 0
- Unrated
- 1
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- pyload/pyload · pyload-ng
- 2
High 1
Medium, low and unrated 6
- CVE-2023-0434Improper Input Validation in pyload/pyloadpyload/pyload · pyload-ng
- CVE-2023-0435Excessive Attack Surface in pyload/pyloadpyload/pyload · pyload-ng
- CVE-2023-24044A Host Header Injection issue on the Login page of Plesk Obsidian through 18.0.49 allows attackers to redirect users to malicious websites v
- CVE-2023-24055KeePass through 2.53 (in a default installation) allows an attacker, who has write access to the XML configuration file, to obtain the clear
- CVE-2023-24056In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconf_tu
- CVE-2023-24058Booked Scheduler 2.5.5 allows authenticated users to create and schedule events for any other user via a modified userId value to reservatio