# CVEs published 2023-01-27

85 CVEs were published on January 27, 2023: 8 critical, 31 high. Days are UTC.

- [CVE-2023-23627](https://cve.now/CVE-2023-23627.md): Sanitize vulnerable to Cross-site Scripting via Improper neutralization of \`noscript\` element (CVSS 6.1, rgrove sanitize · sanitize)
- [CVE-2023-23624](https://cve.now/CVE-2023-23624.md): Discourse's exclude\_tags param could leak which topics had a specific hidden tag (CVSS 4.3, discourse)
- [CVE-2023-23621](https://cve.now/CVE-2023-23621.md): Discourse vulnerable to ReDoS in user agent parsing (CVSS 8.6, discourse)
- [CVE-2023-23617](https://cve.now/CVE-2023-23617.md): OpenMage LTS has DoS vulnerability in MaliciousCode filter (CVSS 4.9, OpenMage magento-lts · openmage/magento-lts)
- [CVE-2022-46356](https://cve.now/CVE-2022-46356.md): Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, and (CVSS 8.8, HP Security Manager)
- [CVE-2022-46357](https://cve.now/CVE-2022-46357.md): Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, and (CVSS 8.8, HP Security Manager)
- [CVE-2022-46358](https://cve.now/CVE-2022-46358.md): Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, and (CVSS 8.8, HP Security Manager)
- [CVE-2022-46359](https://cve.now/CVE-2022-46359.md): Potential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, and (CVSS 8.8, HP Security Manager)
- [CVE-2023-22737](https://cve.now/CVE-2023-22737.md): wire-server vulnerable to unauthorized removal of Bots from Conversations (CVSS 6.5, wireapp wire-server)
- [CVE-2022-23552](https://cve.now/CVE-2022-23552.md): Grafana stored XSS in FileUploader component (CVSS 7.3, grafana)
- [CVE-2022-39324](https://cve.now/CVE-2022-39324.md): Grafana vulnerable to spoofing originalUrl of snapshots (CVSS 6.7, grafana · github.com/grafana/grafana)
- [CVE-2023-0558](https://cve.now/CVE-2023-0558.md): ContentStudio \<= 1.2.5 - Authorization Bypass (CVSS 8.2, ContentStudio)
- [CVE-2023-0557](https://cve.now/CVE-2023-0557.md): ContentStudio \<= 1.2.5 - Information Exposure (CVSS 7.5, ContentStudio)
- [CVE-2023-0556](https://cve.now/CVE-2023-0556.md): ContentStudio \<= 1.2.5 - Missing Authorization (CVSS 9.8, ContentStudio)
- [CVE-2022-39380](https://cve.now/CVE-2022-39380.md): wire-webapp contains Improper Handling of Exceptional Conditions leading to a DoS via Markdown Rendering (CVSS 5.3, wireapp wire-webapp)
- [CVE-2023-0555](https://cve.now/CVE-2023-0555.md): Quick Restaurant Menu \<= 2.0.2 - Missing Authorization (CVSS 8.1, alejandropascual Quick Restaurant Menu)
- [CVE-2023-0554](https://cve.now/CVE-2023-0554.md): Quick Restaurant Menu \<= 2.0.2 - Cross-Site Request Forgery (CVSS 8.1, alejandropascual Quick Restaurant Menu)
- [CVE-2023-0553](https://cve.now/CVE-2023-0553.md): Quick Restaurant Menu \<= 2.0.2 - Authenticated (Administrator+) Cross-Site Scripting (CVSS 4.4, alejandropascual Quick Restaurant Menu)
- [CVE-2023-0550](https://cve.now/CVE-2023-0550.md): Quick Restaurant Menu \<= 2.0.2 - Insecure Direct Object Reference (CVSS 8.1, alejandropascual Quick Restaurant Menu)
- [CVE-2023-0549](https://cve.now/CVE-2023-0549.md): YAFNET Private Message PostPrivateMessage cross site scripting (CVSS 3.5, YAFNET)
- [CVE-2021-41231](https://cve.now/CVE-2021-41231.md): OpenMage LTS DataFlow upload remote code execution vulnerability (CVSS 7.2, OpenMage magento-lts · openmage/magento-lts)
- [CVE-2021-41144](https://cve.now/CVE-2021-41144.md): OpenMage LTS authenticated remote code execution through layout update (CVSS 8.8, OpenMage magento-lts · openmage/magento-lts)
- [CVE-2021-41143](https://cve.now/CVE-2021-41143.md): OpenMage LTS arbitrary file deletion in customer media allows for remote code execution (CVSS 7.2, OpenMage magento-lts · openmage/magento-lts)
- [CVE-2021-39217](https://cve.now/CVE-2021-39217.md): OpenMage LTS arbitrary command execution in custom layout update through blocks (CVSS 7.2, OpenMage magento-lts · openmage/magento-lts)
- [CVE-2021-21395](https://cve.now/CVE-2021-21395.md): Magneto-lts vulnerable to Cross-Site Request Forgery (CVSS 4.2, OpenMage magento-lts · openmage/magento-lts)
- [CVE-2023-0534](https://cve.now/CVE-2023-0534.md): SourceCodester Online Tours & Travels Management System expense\_report.php sql injection (CVSS 4.7, SourceCodester Online Tours & Travels Management System)
- [CVE-2023-0533](https://cve.now/CVE-2023-0533.md): SourceCodester Online Tours & Travels Management System expense\_report.php sql injection (CVSS 4.7, SourceCodester Online Tours & Travels Management System)
- [CVE-2023-0532](https://cve.now/CVE-2023-0532.md): SourceCodester Online Tours & Travels Management System disapprove\_user.php sql injection (CVSS 4.7, SourceCodester Online Tours & Travels Management System)
- [CVE-2023-0531](https://cve.now/CVE-2023-0531.md): SourceCodester Online Tours & Travels Management System booking\_report.php sql injection (CVSS 4.7, SourceCodester Online Tours & Travels Management System)
- [CVE-2023-0530](https://cve.now/CVE-2023-0530.md): SourceCodester Online Tours & Travels Management System approve\_user.php sql injection (CVSS 4.7, SourceCodester Online Tours & Travels Management System)
- [CVE-2023-0529](https://cve.now/CVE-2023-0529.md): SourceCodester Online Tours & Travels Management System add\_payment.php sql injection (CVSS 4.7, SourceCodester Online Tours & Travels Management System)
- [CVE-2023-0528](https://cve.now/CVE-2023-0528.md): SourceCodester Online Tours & Travels Management System abc.php sql injection (CVSS 4.7, SourceCodester Online Tours & Travels Management System)
- [CVE-2023-0527](https://cve.now/CVE-2023-0527.md): PHPGurukul Online Security Guards Hiring System search-request.php cross site scripting (CVSS 3.5, PHPGurukul Online Security Guards Hiring System)
- [CVE-2023-22740](https://cve.now/CVE-2023-22740.md): Discourse vulnerable to Allocation of Resources Without Limits via Chat drafts (CVSS 4.3, discourse)
- [CVE-2019-25053](https://cve.now/CVE-2019-25053.md): A path traversal vulnerability exists in Sage FRP 1000 before November 2019. (CVSS 7.5)
- [CVE-2020-36658](https://cve.now/CVE-2020-36658.md): In Apache::Session::LDAP before 0.5, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, be (CVSS 8.1)
- [CVE-2020-36659](https://cve.now/CVE-2020-36659.md): In Apache::Session::Browseable before 1.3.6, validity of the X.509 certificate is not checked by default when connecting to remote LDAP back (CVSS 8.1)
- [CVE-2022-2712](https://cve.now/CVE-2022-2712.md): In Eclipse GlassFish versions 5.1.0 to 6.2.5, there is a vulnerability in relative path traversal because it does not filter request path st (CVSS 6.5, The Eclipse Foundation Eclipse GlassFish · org.glassfish.ma…)
- [CVE-2022-39811](https://cve.now/CVE-2022-39811.md): Italtel NetMatch-S CI 5.2.0-20211008 has incorrect Access Control under NMSCI-WebGui/advancedsettings.jsp and NMSCIWebGui/SaveFileUploader. (CVSS 9.1)
- [CVE-2022-39812](https://cve.now/CVE-2022-39812.md): Italtel NetMatch-S CI 5.2.0-20211008 allows Absolute Path Traversal under NMSCI-WebGui/SaveFileUploader. (CVSS 7.5)
- [CVE-2022-39813](https://cve.now/CVE-2022-39813.md): Italtel NetMatch-S CI 5.2.0-20211008 allows Multiple Reflected/Stored XSS issues under NMSCIWebGui/j\_security\_check via the j\_username param (CVSS 6.1)
- [CVE-2022-4139](https://cve.now/CVE-2022-4139.md): An incorrect TLB flush issue was found in the Linux kernel’s GPU i915 kernel driver, potentially leading to random memory corruption or data (CVSS 7.8, kernel)
- [CVE-2022-4201](https://cve.now/CVE-2022-4201.md): A blind SSRF in GitLab CE/EE affecting all from 11.3 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 allows an attacker to c (CVSS 3.5, GitLab)
- [CVE-2022-4205](https://cve.now/CVE-2022-4205.md): In Gitlab EE/CE before 15.6.1, 15.5.5 and 15.4.6 using a branch with a hexadecimal name could override an existing hash. (CVSS 6.3, GitLab)
- [CVE-2022-4255](https://cve.now/CVE-2022-4255.md): An info leak issue was identified in all versions of GitLab EE from 13.7 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 whi (CVSS 4.3, GitLab)
- [CVE-2022-4285](https://cve.now/CVE-2022-4285.md): An illegal memory access flaw was found in the binutils package. (CVSS 5.5, binutils)
- [CVE-2022-4335](https://cve.now/CVE-2022-4335.md): A blind SSRF vulnerability was identified in all versions of GitLab EE prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which (CVSS 4.3, GitLab)
- [CVE-2022-43978](https://cve.now/CVE-2022-43978.md): Limited Authentication bypass due to hardcoded secret (CVSS 5.6, Artica PFMS Pandora FMS)
- [CVE-2022-43979](https://cve.now/CVE-2022-43979.md): Path Traversal leading to Local File Inclusion (CVSS 5.9, Artica PFMS Pandora FMS)
- [CVE-2022-43980](https://cve.now/CVE-2022-43980.md): Cross-site scripting vulnerability in the network maps edit functionality (CVSS 5.2, Artica PFMS Pandora FMS)
- [CVE-2022-44024](https://cve.now/CVE-2022-44024.md): An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. (CVSS 6.1)
- [CVE-2022-44025](https://cve.now/CVE-2022-44025.md): An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. (CVSS 6.1)
- [CVE-2022-44026](https://cve.now/CVE-2022-44026.md): An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. (CVSS 7.1)
- [CVE-2022-44027](https://cve.now/CVE-2022-44027.md): An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. (CVSS 6.1)
- [CVE-2022-44028](https://cve.now/CVE-2022-44028.md): An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. (CVSS 6.1)
- [CVE-2022-44029](https://cve.now/CVE-2022-44029.md): An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. (CVSS 6.1)
- [CVE-2022-44298](https://cve.now/CVE-2022-44298.md): SiteServer CMS 7.1.3 is vulnerable to SQL Injection. (CVSS 9.8)
- [CVE-2022-44715](https://cve.now/CVE-2022-44715.md): Improper File Permissions in NetScout nGeniusONE 6.3.2 build 904 allows authenticated remote users to gain permissions via a crafted payload (CVSS 8.8)
- [CVE-2022-44717](https://cve.now/CVE-2022-44717.md): An issue was discovered in NetScout nGeniusONE 6.3.2 build 904. (CVSS 3.1)
- [CVE-2022-44718](https://cve.now/CVE-2022-44718.md): An issue was discovered in NetScout nGeniusONE 6.3.2 build 904. (CVSS 3.5)
- [CVE-2022-46968](https://cve.now/CVE-2022-46968.md): A stored cross-site scripting (XSS) vulnerability in /index.php?page=help of Revenue Collection System v1.0 allows attackers to execute arbi (CVSS 5.4)
- [CVE-2022-47632](https://cve.now/CVE-2022-47632.md): Razer Synapse before 3.7.0830.081906 allows privilege escalation due to an unsafe installation path, improper privilege management, and impr (CVSS 6.8)
- [CVE-2022-48007](https://cve.now/CVE-2022-48007.md): A stored cross-site scripting (XSS) vulnerability in identification.php of Piwigo v13.4.0 allows attackers to execute arbitrary web scripts (CVSS 5.4)
- [CVE-2022-48008](https://cve.now/CVE-2022-48008.md): An arbitrary file upload vulnerability in the plugin manager of LimeSurvey v5.4.15 allows attackers to execute arbitrary code via a crafted (CVSS 9.8)
- [CVE-2022-48010](https://cve.now/CVE-2022-48010.md): LimeSurvey v5.4.15 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /index.php/surveyAdministrat (no CVSS)
- [CVE-2022-48011](https://cve.now/CVE-2022-48011.md): Opencats v0.9.7 was discovered to contain a SQL injection vulnerability via the importID parameter in the Import viewerrors function. (CVSS 9.8)
- [CVE-2022-48012](https://cve.now/CVE-2022-48012.md): Opencats v0.9.7 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /opencats/index.php?m=setti (CVSS 6.1)
- [CVE-2022-48013](https://cve.now/CVE-2022-48013.md): Opencats v0.9.7 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /opencats/index.php?m=calendar. (CVSS 5.4)
- [CVE-2022-48066](https://cve.now/CVE-2022-48066.md): An issue in the component global.so of Totolink A830R V4.1.2cu.5182 allows attackers to bypass authentication via a crafted cookie. (CVSS 9.8)
- [CVE-2022-48067](https://cve.now/CVE-2022-48067.md): An information disclosure vulnerability in Totolink A830R V4.1.2cu.5182 allows attackers to obtain the root password via a brute-force attac (CVSS 5.5)
- [CVE-2022-48069](https://cve.now/CVE-2022-48069.md): Totolink A830R V4.1.2cu.5182 was discovered to contain a command injection vulnerability via the QUERY\_STRING parameter. (CVSS 7.5)
- [CVE-2022-48070](https://cve.now/CVE-2022-48070.md): Phicomm K2 v22.6.534.263 was discovered to contain a command injection vulnerability via the autoUpTime parameter in the automatic upgrade f (CVSS 7.8)
- [CVE-2022-48071](https://cve.now/CVE-2022-48071.md): Phicomm K2 v22.6.534.263 was discovered to store the root and admin passwords in plaintext. (CVSS 7.5)
- [CVE-2022-48072](https://cve.now/CVE-2022-48072.md): Phicomm K2G v22.6.3.20 was discovered to contain a command injection vulnerability via the autoUpTime parameter in the automatic upgrade fun (CVSS 7.8)
- [CVE-2022-48073](https://cve.now/CVE-2022-48073.md): Phicomm K2G v22.6.3.20 was discovered to store the root and admin passwords in plaintext. (CVSS 7.5)
- [CVE-2022-48107](https://cve.now/CVE-2022-48107.md): D-Link DIR\_878\_FW1.30B08 was discovered to contain a command injection vulnerability via the component /setnetworksettings/IPAddress. (CVSS 9.8)
- [CVE-2022-48108](https://cve.now/CVE-2022-48108.md): D-Link DIR\_878\_FW1.30B08 was discovered to contain a command injection vulnerability via the component /SetNetworkSettings/SubnetMask. (CVSS 9.8)
- [CVE-2022-48116](https://cve.now/CVE-2022-48116.md): AyaCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the component /admin/tpl\_edit.inc.php. (CVSS 7.2)
- [CVE-2022-48118](https://cve.now/CVE-2022-48118.md): Jorani v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Acronym parameter. (CVSS 6.1)
- [CVE-2023-22240](https://cve.now/CVE-2023-22240.md): ZDI-CAN-19517: Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2023-22241](https://cve.now/CVE-2023-22241.md): ZDI-CAN-19516: Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2023-22242](https://cve.now/CVE-2023-22242.md): ZDI-CAN-19515: Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2023-23616](https://cve.now/CVE-2023-23616.md): Discourse membership requests lack character limit (CVSS 3.5, discourse)
- [CVE-2023-23620](https://cve.now/CVE-2023-23620.md): Discourse restricted tag routes leak topic information (CVSS 5.3, discourse)
- [CVE-2023-24060](https://cve.now/CVE-2023-24060.md): Haven 5d15944 allows Server-Side Request Forgery (SSRF) via the feed\[url\]= Feeds functionality. (CVSS 5.0)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-01-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.