# CVEs published 2023-01-22

7 CVEs were published on January 22, 2023: 0 critical, 1 high. Days are UTC.

- [CVE-2023-0434](https://cve.now/CVE-2023-0434.md): Improper Input Validation in pyload/pyload (CVSS 5.4, pyload/pyload · pyload-ng)
- [CVE-2023-0435](https://cve.now/CVE-2023-0435.md): Excessive Attack Surface in pyload/pyload (CVSS 4.0, pyload/pyload · pyload-ng)
- [CVE-2023-24044](https://cve.now/CVE-2023-24044.md): A Host Header Injection issue on the Login page of Plesk Obsidian through 18.0.49 allows attackers to redirect users to malicious websites v (CVSS 6.1)
- [CVE-2023-24055](https://cve.now/CVE-2023-24055.md): KeePass through 2.53 (in a default installation) allows an attacker, who has write access to the XML configuration file, to obtain the clear (no CVSS)
- [CVE-2023-24056](https://cve.now/CVE-2023-24056.md): In pkgconf through 1.9.3, variable duplication can cause unbounded string expansion due to incorrect checks in libpkgconf/tuple.c:pkgconf\_tu (CVSS 5.5)
- [CVE-2023-24058](https://cve.now/CVE-2023-24058.md): Booked Scheduler 2.5.5 allows authenticated users to create and schedule events for any other user via a modified userId value to reservatio (CVSS 4.3)
- [CVE-2023-24059](https://cve.now/CVE-2023-24059.md): Grand Theft Auto V for PC allows attackers to achieve partial remote code execution or modify files on a PC, as exploited in the wild in Jan (CVSS 7.3)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-01-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.