# CVEs published 2023-01-26

172 CVEs were published on January 26, 2023: 19 critical, 111 high. Days are UTC.

- [CVE-2022-36279](https://cve.now/CVE-2022-36279.md): A stack-based buffer overflow vulnerability exists in the httpd delfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-40701](https://cve.now/CVE-2022-40701.md): A directory traversal vulnerability exists in the httpd delfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. (CVSS 6.5, Siretta QUARTZ-GOLD)
- [CVE-2022-40969](https://cve.now/CVE-2022-40969.md): An os command injection vulnerability exists in the httpd delfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-38459](https://cve.now/CVE-2022-38459.md): A stack-based buffer overflow vulnerability exists in the httpd downfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-38088](https://cve.now/CVE-2022-38088.md): A directory traversal vulnerability exists in the httpd downfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. (CVSS 4.9, Siretta QUARTZ-GOLD)
- [CVE-2022-38715](https://cve.now/CVE-2022-38715.md): A leftover debug code vulnerability exists in the httpd shell.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-39045](https://cve.now/CVE-2022-39045.md): A file write vulnerability exists in the httpd upload.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-40220](https://cve.now/CVE-2022-40220.md): An OS command injection vulnerability exists in the httpd txt/restore.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-41030](https://cve.now/CVE-2022-41030.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-41029](https://cve.now/CVE-2022-41029.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-41028](https://cve.now/CVE-2022-41028.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-41027](https://cve.now/CVE-2022-41027.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-41026](https://cve.now/CVE-2022-41026.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-41025](https://cve.now/CVE-2022-41025.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-41024](https://cve.now/CVE-2022-41024.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-41023](https://cve.now/CVE-2022-41023.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-41022](https://cve.now/CVE-2022-41022.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-41021](https://cve.now/CVE-2022-41021.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-41020](https://cve.now/CVE-2022-41020.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-41019](https://cve.now/CVE-2022-41019.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-41018](https://cve.now/CVE-2022-41018.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-41017](https://cve.now/CVE-2022-41017.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-41016](https://cve.now/CVE-2022-41016.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-41015](https://cve.now/CVE-2022-41015.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-41014](https://cve.now/CVE-2022-41014.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-41013](https://cve.now/CVE-2022-41013.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-41012](https://cve.now/CVE-2022-41012.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-41011](https://cve.now/CVE-2022-41011.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-41010](https://cve.now/CVE-2022-41010.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-41009](https://cve.now/CVE-2022-41009.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-41008](https://cve.now/CVE-2022-41008.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-41007](https://cve.now/CVE-2022-41007.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-41006](https://cve.now/CVE-2022-41006.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-41005](https://cve.now/CVE-2022-41005.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-41004](https://cve.now/CVE-2022-41004.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-41003](https://cve.now/CVE-2022-41003.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-41002](https://cve.now/CVE-2022-41002.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-41001](https://cve.now/CVE-2022-41001.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-41000](https://cve.now/CVE-2022-41000.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-40999](https://cve.now/CVE-2022-40999.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-40998](https://cve.now/CVE-2022-40998.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-40997](https://cve.now/CVE-2022-40997.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-40996](https://cve.now/CVE-2022-40996.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-40995](https://cve.now/CVE-2022-40995.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-40994](https://cve.now/CVE-2022-40994.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-40993](https://cve.now/CVE-2022-40993.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-40992](https://cve.now/CVE-2022-40992.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-40991](https://cve.now/CVE-2022-40991.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-40990](https://cve.now/CVE-2022-40990.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-40989](https://cve.now/CVE-2022-40989.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-40988](https://cve.now/CVE-2022-40988.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-40987](https://cve.now/CVE-2022-40987.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-40986](https://cve.now/CVE-2022-40986.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-40985](https://cve.now/CVE-2022-40985.md): Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-38066](https://cve.now/CVE-2022-38066.md): An OS command injection vulnerability exists in the httpd SNMP functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. (CVSS 7.2, Siretta QUARTZ-GOLD)
- [CVE-2022-41154](https://cve.now/CVE-2022-41154.md): A directory traversal vulnerability exists in the m2m DELETE\_FILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. (CVSS 8.2, Siretta QUARTZ-GOLD)
- [CVE-2022-40222](https://cve.now/CVE-2022-40222.md): An OS command injection vulnerability exists in the m2m DELETE\_FILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. (CVSS 9.8, Siretta QUARTZ-GOLD)
- [CVE-2022-41991](https://cve.now/CVE-2022-41991.md): A heap-based buffer overflow vulnerability exists in the m2m DELETE\_FILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. (CVSS 9.8, Siretta QUARTZ-GOLD)
- [CVE-2022-42493](https://cve.now/CVE-2022-42493.md): Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. (CVSS 9.8, Siretta QUARTZ-GOLD)
- [CVE-2022-42492](https://cve.now/CVE-2022-42492.md): Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. (CVSS 9.8, Siretta QUARTZ-GOLD)
- [CVE-2022-42491](https://cve.now/CVE-2022-42491.md): Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. (CVSS 9.8, Siretta QUARTZ-GOLD)
- [CVE-2022-42490](https://cve.now/CVE-2022-42490.md): Several OS command injection vulnerabilities exist in the m2m binary of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. (CVSS 9.8, Siretta QUARTZ-GOLD)
- [CVE-2023-0452](https://cve.now/CVE-2023-0452.md): Econolite EOS versions prior to 3.2.23 use a weak hash algorithm for encrypting privileged user credentials. (CVSS 9.8, Econolite EOS)
- [CVE-2023-0451](https://cve.now/CVE-2023-0451.md): Econolite EOS versions prior to 3.2.23 lack a password requirement for gaining “READONLY” access to log files and certain database and confi (CVSS 7.5, Econolite EOS)
- [CVE-2023-0516](https://cve.now/CVE-2023-0516.md): SourceCodester Online Tours & Travels Management System Parameter forget\_password.php sql injection (CVSS 5.5, SourceCodester Online Tours & Travels Management System)
- [CVE-2023-0515](https://cve.now/CVE-2023-0515.md): SourceCodester Online Tours & Travels Management System Parameter forget\_password.php sql injection (CVSS 5.5, SourceCodester Online Tours & Travels Management System)
- [CVE-2023-0513](https://cve.now/CVE-2023-0513.md): isoftforce Dreamer CMS cross site scripting (CVSS 3.5, isoftforce Dreamer CMS)
- [CVE-2023-23619](https://cve.now/CVE-2023-23619.md): Improper Control of Generation of Code ('Code Injection') in @asyncapi/modelina (CVSS 10.0, asyncapi modelina · @asyncapi/modelina)
- [CVE-2023-23614](https://cve.now/CVE-2023-23614.md): Improper session handling of "Remember me for 7 days" functionality (CVSS 8.8, pi-hole AdminLTE)
- [CVE-2023-22739](https://cve.now/CVE-2023-22739.md): Discourse subject to Allocation of Resources Without Limits or Throttling (CVSS 6.5, discourse)
- [CVE-2023-22468](https://cve.now/CVE-2023-22468.md): Discourse vulnerable to Cross-site Scripting in local oneboxes (CVSS 8.8, discourse)
- [CVE-2023-22736](https://cve.now/CVE-2023-22736.md): argo-cd Controller reconciles apps outside configured namespaces when sharding is enabled (CVSS 8.6, argoproj argo-cd · github.com/argoproj/argo-cd +1)
- [CVE-2020-22327](https://cve.now/CVE-2020-22327.md): An issue was discovered in HFish 0.5.1. (CVSS 6.1)
- [CVE-2020-22452](https://cve.now/CVE-2020-22452.md): SQL Injection vulnerability in function getTableCreationQuery in CreateAddField.php in phpMyAdmin 5.x before 5.2.0 via the tbl\_storage\_engin (CVSS 9.8, phpmyadmin/phpmyadmin)
- [CVE-2021-36539](https://cve.now/CVE-2021-36539.md): Instructure Canvas LMS didn't properly deny access to locked/unpublished files when the unprivileged user access the DocViewer based file pr (no CVSS)
- [CVE-2021-36686](https://cve.now/CVE-2021-36686.md): Cross Site Scripting (XSS) vulnerability in yapi 1.9.1 allows attackers to execute arbitrary code via the /interface/api edit page. (CVSS 5.4, yapi-vendor)
- [CVE-2021-41988](https://cve.now/CVE-2021-41988.md): Qlik NPrinting Designer through 21.14.3.0 creates a Temporary File in a Directory with Insecure Permissions. (CVSS 7.8)
- [CVE-2021-41989](https://cve.now/CVE-2021-41989.md): Qlik QlikView through 12.60.20100.0 creates a Temporary File in a Directory with Insecure Permissions. (CVSS 7.8)
- [CVE-2022-40717](https://cve.now/CVE-2022-40717.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected D-Link DIR-2150 4.0.1 routers. (CVSS 8.8, D-Link DIR-2150)
- [CVE-2022-40718](https://cve.now/CVE-2022-40718.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected D-Link DIR-2150 4.0.1 routers. (CVSS 8.8, D-Link DIR-2150)
- [CVE-2022-40719](https://cve.now/CVE-2022-40719.md): This vulnerability allows network-adjacent attackers to execute arbitrary commands on affected installations of D-Link DIR-2150 4.0.1 router (CVSS 8.8, D-Link DIR-2150)
- [CVE-2022-40720](https://cve.now/CVE-2022-40720.md): This vulnerability allows network-adjacent attackers to execute arbitrary commands on affected installations of D-Link DIR-2150 4.0.1 router (CVSS 8.8, D-Link DIR-2150)
- [CVE-2022-41140](https://cve.now/CVE-2022-41140.md): This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of multiple D-Link routers. (CVSS 8.8, D-Link Multiple Routers)
- [CVE-2022-41141](https://cve.now/CVE-2022-41141.md): This vulnerability allows local attackers to escalate privileges on affected installations of Windscribe. (CVSS 7.8, Windscribe)
- [CVE-2022-41142](https://cve.now/CVE-2022-41142.md): This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. (CVSS 7.2, Centreon)
- [CVE-2022-41143](https://cve.now/CVE-2022-41143.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-41144](https://cve.now/CVE-2022-41144.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-41145](https://cve.now/CVE-2022-41145.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-41146](https://cve.now/CVE-2022-41146.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-41147](https://cve.now/CVE-2022-41147.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-41148](https://cve.now/CVE-2022-41148.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-41149](https://cve.now/CVE-2022-41149.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-41150](https://cve.now/CVE-2022-41150.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-41151](https://cve.now/CVE-2022-41151.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-41152](https://cve.now/CVE-2022-41152.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-41153](https://cve.now/CVE-2022-41153.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-42330](https://cve.now/CVE-2022-42330.md): Guests can cause Xenstore crash via soft reset When a guest issues a "Soft Reset" (e.g. (no CVSS, xen)
- [CVE-2022-42369](https://cve.now/CVE-2022-42369.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-42370](https://cve.now/CVE-2022-42370.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-42371](https://cve.now/CVE-2022-42371.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-42372](https://cve.now/CVE-2022-42372.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-42373](https://cve.now/CVE-2022-42373.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-42374](https://cve.now/CVE-2022-42374.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-42375](https://cve.now/CVE-2022-42375.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-42376](https://cve.now/CVE-2022-42376.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-42377](https://cve.now/CVE-2022-42377.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-42378](https://cve.now/CVE-2022-42378.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-42379](https://cve.now/CVE-2022-42379.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-42380](https://cve.now/CVE-2022-42380.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-42381](https://cve.now/CVE-2022-42381.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-42382](https://cve.now/CVE-2022-42382.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-42383](https://cve.now/CVE-2022-42383.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-42384](https://cve.now/CVE-2022-42384.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-42385](https://cve.now/CVE-2022-42385.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-42386](https://cve.now/CVE-2022-42386.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-42387](https://cve.now/CVE-2022-42387.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-42388](https://cve.now/CVE-2022-42388.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-42389](https://cve.now/CVE-2022-42389.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-42390](https://cve.now/CVE-2022-42390.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-42391](https://cve.now/CVE-2022-42391.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-42392](https://cve.now/CVE-2022-42392.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-42393](https://cve.now/CVE-2022-42393.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-42394](https://cve.now/CVE-2022-42394.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-42395](https://cve.now/CVE-2022-42395.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-42396](https://cve.now/CVE-2022-42396.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-42397](https://cve.now/CVE-2022-42397.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-42398](https://cve.now/CVE-2022-42398.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-42399](https://cve.now/CVE-2022-42399.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-42400](https://cve.now/CVE-2022-42400.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-42401](https://cve.now/CVE-2022-42401.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-42402](https://cve.now/CVE-2022-42402.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-42403](https://cve.now/CVE-2022-42403.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-42404](https://cve.now/CVE-2022-42404.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-42405](https://cve.now/CVE-2022-42405.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-42406](https://cve.now/CVE-2022-42406.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-42407](https://cve.now/CVE-2022-42407.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-42408](https://cve.now/CVE-2022-42408.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-42409](https://cve.now/CVE-2022-42409.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-42410](https://cve.now/CVE-2022-42410.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-42411](https://cve.now/CVE-2022-42411.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-42412](https://cve.now/CVE-2022-42412.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-42413](https://cve.now/CVE-2022-42413.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-42414](https://cve.now/CVE-2022-42414.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. (CVSS 3.3, PDF-XChange Editor)
- [CVE-2022-42415](https://cve.now/CVE-2022-42415.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-42416](https://cve.now/CVE-2022-42416.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-42417](https://cve.now/CVE-2022-42417.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-42418](https://cve.now/CVE-2022-42418.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-42419](https://cve.now/CVE-2022-42419.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-42420](https://cve.now/CVE-2022-42420.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-42421](https://cve.now/CVE-2022-42421.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-42423](https://cve.now/CVE-2022-42423.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. (CVSS 7.8, PDF-XChange Editor)
- [CVE-2022-44263](https://cve.now/CVE-2022-44263.md): Dentsply Sirona Sidexis \<= 4.3 is vulnerable to Incorrect Access Control. (CVSS 7.8)
- [CVE-2022-44264](https://cve.now/CVE-2022-44264.md): Dentsply Sirona Sidexis \<= 4.3 is vulnerable to Unquoted Service Path. (CVSS 7.8)
- [CVE-2022-44297](https://cve.now/CVE-2022-44297.md): SiteServer CMS 7.1.3 has a SQL injection vulnerability the background. (CVSS 9.8)
- [CVE-2022-45770](https://cve.now/CVE-2022-45770.md): Improper input validation in adgnetworkwfpdrv.sys in Adguard For Windows x86 through 7.11 allows local privilege escalation. (CVSS 7.8)
- [CVE-2022-46966](https://cve.now/CVE-2022-46966.md): Revenue Collection System v1.0 was discovered to contain a SQL injection vulnerability at step1.php. (CVSS 9.8)
- [CVE-2022-46967](https://cve.now/CVE-2022-46967.md): An access control issue in Revenue Collection System v1.0 allows unauthenticated attackers to view the contents of /admin/DBbackup/ director (CVSS 9.8)
- [CVE-2022-47951](https://cve.now/CVE-2022-47951.md): An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25. (CVSS 5.7, nova · glance +1)
- [CVE-2023-0455](https://cve.now/CVE-2023-0455.md): Unrestricted Upload of File with Dangerous Type in unilogies/bumsys (CVSS 7.6, unilogies/bumsys)
- [CVE-2023-0470](https://cve.now/CVE-2023-0470.md): Cross-site Scripting (XSS) - Stored in modoboa/modoboa (CVSS 7.1, modoboa/modoboa · modoboa)
- [CVE-2023-0488](https://cve.now/CVE-2023-0488.md): Cross-site Scripting (XSS) - Stored in pyload/pyload (CVSS 9.6, pyload/pyload · pyload-ng)
- [CVE-2023-0493](https://cve.now/CVE-2023-0493.md): Improper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserver (CVSS 5.3, btcpayserver/btcpayserver)
- [CVE-2023-0509](https://cve.now/CVE-2023-0509.md): Improper Certificate Validation in pyload/pyload (CVSS 7.4, pyload/pyload · pyload-ng)
- [CVE-2023-0512](https://cve.now/CVE-2023-0512.md): Divide By Zero in vim/vim (CVSS 7.3, vim/vim)
- [CVE-2023-0519](https://cve.now/CVE-2023-0519.md): Cross-site Scripting (XSS) - Stored in modoboa/modoboa (CVSS 7.1, modoboa/modoboa · modoboa)
- [CVE-2023-22971](https://cve.now/CVE-2023-22971.md): Cross Site Scripting (XSS) vulnerability in Hughes Network Systems Router Terminal for HX200 v8.3.1.14, HX90 v6.11.0.5, HX50L v6.10.0.18, HN (CVSS 6.1)
- [CVE-2023-24164](https://cve.now/CVE-2023-24164.md): Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/FUN\_000c2318. (CVSS 9.8)
- [CVE-2023-24165](https://cve.now/CVE-2023-24165.md): Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/initIpAddrInfo. (CVSS 9.8)
- [CVE-2023-24166](https://cve.now/CVE-2023-24166.md): Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/formWifiBasicSet. (CVSS 9.8)
- [CVE-2023-24167](https://cve.now/CVE-2023-24167.md): Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/add\_white\_node. (CVSS 9.8)
- [CVE-2023-24169](https://cve.now/CVE-2023-24169.md): Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/FUN\_0007343c. (CVSS 9.8)
- [CVE-2023-24170](https://cve.now/CVE-2023-24170.md): Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/fromSetWirelessRepeat. (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-01-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.