# CVEs published 2023-01-31

50 CVEs were published on January 31, 2023: 17 critical, 16 high. Days are UTC.

- [CVE-2023-23924](https://cve.now/CVE-2023-23924.md): URI validation failure on SVG parsing in Dompdf (CVSS 10.0, dompdf · dompdf/dompdf)
- [CVE-2023-0341](https://cve.now/CVE-2023-0341.md): Stack Buffer Overflow in editorconfig-core-c (CVSS 7.8, EditorConfig C Core)
- [CVE-2016-15023](https://cve.now/CVE-2016-15023.md): SiteFusion Application Server Extension getextension.php path traversal (CVSS 3.5, SiteFusion Application Server)
- [CVE-2022-28331](https://cve.now/CVE-2022-28331.md): Apache Portable Runtime (APR): Windows out-of-bounds write in apr\_socket\_sendv function (CVSS 9.8, Apache Software Foundation Apache Portable Runtime)
- [CVE-2022-25147](https://cve.now/CVE-2022-25147.md): Apache Portable Runtime Utility (APR-util): out-of-bounds writes in the apr\_base64 family of functions (no CVSS, Apache Software Foundation Apache Portable Runtime Utility)
- [CVE-2022-24963](https://cve.now/CVE-2022-24963.md): Apache Portable Runtime (APR): out-of-bound writes in the apr\_encode family of functions (CVSS 9.8, Apache Software Foundation Apache Portable Runtime)
- [CVE-2022-44644](https://cve.now/CVE-2022-44644.md): Apache Linkis (incubating): The DatasourceManager module has a Local File Read Vulnerability (CVSS 6.5, Apache Software Foundation Apache Linkis · org.apache.linki…)
- [CVE-2022-44645](https://cve.now/CVE-2022-44645.md): Apache Linkis (incubating): The DatasourceManager module has a serialization attack vulnerability (CVSS 8.8, Apache Software Foundation Apache Linkis · org.apache.linki…)
- [CVE-2023-0593](https://cve.now/CVE-2023-0593.md): Path traversal in yaffshiv (CVSS 5.5, devttys0 yaffshiv)
- [CVE-2023-0592](https://cve.now/CVE-2023-0592.md): Path traversal in jefferson (CVSS 5.5, sviehb jefferson)
- [CVE-2023-24829](https://cve.now/CVE-2023-24829.md): Apache IoTDB Workbench: apache/iotdb-web-workbench: forge the JWTToken to access workbench (CVSS 8.8, Apache Software Foundation Apache IoTDB Workbench · apache-…)
- [CVE-2023-0591](https://cve.now/CVE-2023-0591.md): Path Traversal in ubi\_reader (CVSS 5.5, jrspruitt ubi\_reader · ubi-reader)
- [CVE-2022-25979](https://cve.now/CVE-2022-25979.md): Versions of the package jsuites before 5.0.1 are vulnerable to Cross-site Scripting (XSS) due to improper user-input sanitization in the Edi (CVSS 5.4, jsuites · org.webjars.npm:jsuites)
- [CVE-2022-21129](https://cve.now/CVE-2022-21129.md): Versions of the package nemo-appium before 0.0.9 are vulnerable to Command Injection due to improper input sanitization in the 'module.expor (CVSS 7.4, nemo-appium)
- [CVE-2022-25881](https://cve.now/CVE-2022-25881.md): This affects versions of the package http-cache-semantics before 4.1.1. (CVSS 5.3, http-cache-semantics · org.webjars.npm:http-cache-semantics)
- [CVE-2022-4441](https://cve.now/CVE-2022-4441.md): Privilege Escalation Vulnerability in Hitachi Storage Plug-in for VMware vCenter (CVSS 7.6, Hitachi Storage Plug-in for VMware vCenter)
- [CVE-2022-4041](https://cve.now/CVE-2022-4041.md): Privilege Escalation Vulnerability in Hitachi Storage Plug-in for VMware vCenter (CVSS 5.9, Hitachi Storage Plug-in for VMware vCenter)
- [CVE-2022-40258](https://cve.now/CVE-2022-40258.md): Weak password hashes for Redfish & API (CVSS 5.3, AMI MegaRAC SPx-12 · AMI MegaRAC SPx-13)
- [CVE-2020-20402](https://cve.now/CVE-2020-20402.md): Westbrookadmin portfolioCMS v1.05 allows attackers to bypass password validation and access sensitive information via session fixation. (CVSS 7.5)
- [CVE-2022-30421](https://cve.now/CVE-2022-30421.md): Improper Authentication vulnerability in Toshiba Storage Security Software V1.2.0.7413 is that allows for sensitive information to be obtain (CVSS 7.8)
- [CVE-2022-32984](https://cve.now/CVE-2022-32984.md): BTCPay Server 1.3.0 through 1.5.3 allows a remote attacker to obtain sensitive information when a public Point of Sale app is exposed. (CVSS 7.5)
- [CVE-2022-39059](https://cve.now/CVE-2022-39059.md): ChangingTec MegaServiSignAdapter - Path Traversal (CVSS 7.5, ChangingTec MegaServiSignAdapter)
- [CVE-2022-39060](https://cve.now/CVE-2022-39060.md): ChangingTec MegaServiSignAdapter - Improper Input Validation (CVSS 9.8, ChangingTec MegaServiSignAdapter)
- [CVE-2022-39061](https://cve.now/CVE-2022-39061.md): ChangingTec MegaServiSignAdapter - Out-of-bounds Read (CVSS 6.5, ChangingTec MegaServiSignAdapter)
- [CVE-2022-44897](https://cve.now/CVE-2022-44897.md): A cross-site scripting (XSS) vulnerability in ApolloTheme AP PageBuilder component through 2.4.4 allows attackers to execute arbitrary web s (CVSS 6.1)
- [CVE-2022-45172](https://cve.now/CVE-2022-45172.md): An issue was discovered in LIVEBOX Collaboration vDesk before v018. (CVSS 9.8)
- [CVE-2022-45297](https://cve.now/CVE-2022-45297.md): EQ v1.5.31 to v2.2.0 was discovered to contain a SQL injection vulnerability via the UserPwd parameter. (CVSS 9.8)
- [CVE-2022-45435](https://cve.now/CVE-2022-45435.md): SailPoint IdentityIQ Access Control Bypass (CVSS 6.8, SailPoint IdentityIQ)
- [CVE-2022-45494](https://cve.now/CVE-2022-45494.md): Buffer overflow vulnerability in function json\_parse\_object in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (Novemb (CVSS 7.8)
- [CVE-2022-45598](https://cve.now/CVE-2022-45598.md): Cross Site Scripting vulnerability in Joplin Desktop App before v2.9.17 allows attacker to execute arbitrary code via improper santization. (CVSS 6.1, joplin)
- [CVE-2022-45789](https://cve.now/CVE-2022-45789.md): A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbus functions on the c (CVSS 8.1, Schneider Electric EcoStruxure Control Expert · Schneide… +2)
- [CVE-2022-46835](https://cve.now/CVE-2022-46835.md): SailPoint IdentityIQ JavaServer File Path Traversal Vulnerability (CVSS 8.8, SailPoint IdentityIQ)
- [CVE-2022-47035](https://cve.now/CVE-2022-47035.md): Buffer Overflow Vulnerability in D-Link DIR-825 v1.33.0.44ebdd4-embedded and below allows attacker to execute arbitrary code via the GetConf (CVSS 9.8)
- [CVE-2022-47697](https://cve.now/CVE-2022-47697.md): COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 and before is vulnerable to Account takeov (CVSS 9.8)
- [CVE-2022-47698](https://cve.now/CVE-2022-47698.md): COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Cross Site Scripting (XSS (CVSS 6.1)
- [CVE-2022-47699](https://cve.now/CVE-2022-47699.md): COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Incorrect Access Control. (CVSS 9.8)
- [CVE-2022-47700](https://cve.now/CVE-2022-47700.md): COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 and before is vulnerable to Incorrect Acce (CVSS 7.5)
- [CVE-2022-47701](https://cve.now/CVE-2022-47701.md): COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Cross Site Scripting (XSS (CVSS 6.1)
- [CVE-2022-47780](https://cve.now/CVE-2022-47780.md): SQL Injection vulnerability in Bangresto 1.0 via the itemID parameter. (CVSS 9.8)
- [CVE-2022-47854](https://cve.now/CVE-2022-47854.md): i-librarian 4.10 is vulnerable to Arbitrary file upload in ajaxsupplement.php. (CVSS 9.8)
- [CVE-2022-47873](https://cve.now/CVE-2022-47873.md): Netcad KEOS 1.0 is vulnerable to XML External Entity (XXE) resulting in SSRF with XXE (remote). (CVSS 9.8)
- [CVE-2022-48161](https://cve.now/CVE-2022-48161.md): Easy Images v2.0 was discovered to contain an arbitrary file download vulnerability via the component /application/down.php. (CVSS 7.5)
- [CVE-2022-4898](https://cve.now/CVE-2022-4898.md): In affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site Scripting payload in the support link. (CVSS 5.4, Octopus Deploy Octopus Server)
- [CVE-2023-22610](https://cve.now/CVE-2023-22610.md): A CWE-863: Incorrect Authorization vulnerability exists that could cause Denial of Service against the Geo SCADA server when specific messa (CVSS 9.1, Schneider Electric EcoStruxure Geo SCADA Expert 2019 -)
- [CVE-2023-22611](https://cve.now/CVE-2023-22611.md): A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause information disclosure when spec (CVSS 7.5, Schneider Electric EcoStruxure Geo SCADA Expert 2019 -)
- [CVE-2023-22900](https://cve.now/CVE-2023-22900.md): Thinking Software Technology Co., Ltd. Efence - SQL Injection (CVSS 9.8, Thinking Software Technology Co. Efence)
- [CVE-2023-24162](https://cve.now/CVE-2023-24162.md): Deserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readObjectFromXml paramete (CVSS 9.8, cn.hutool:hutool-all)
- [CVE-2023-24163](https://cve.now/CVE-2023-24163.md): SQL Inection vulnerability in Dromara hutool before 5.8.21 allows attacker to execute arbitrary code via the aviator template engine. (CVSS 9.8, cn.hutool:hutool-all)
- [CVE-2023-24241](https://cve.now/CVE-2023-24241.md): Forget Heart Message Box v1.1 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/loginpost.php. (CVSS 9.8)
- [CVE-2023-24956](https://cve.now/CVE-2023-24956.md): Forget Heart Message Box v1.1 was discovered to contain a SQL injection vulnerability via the name parameter at /cha.php. (CVSS 8.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-01-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.