CVEs published in January 2024
2,664 vulnerabilities, 306 critical, 14 exploited.
- zte zxcloud iraiLocal Privilege Escalation Vulnerability of ZTE's ZXCLOUD iRAI6.7 Medium
- hcl software dryice myxalyticsImproper Error Handling affects DRYiCE MyXalytics3.1 Low
- zte zxcloud irai, zxcloud irai firmware +1 moreUnsafe DLL Loading Vulnerability in ZTE ZXCLOUD iRAI6.4 Medium
- hcl software dryice myxalyticsA broken cryptographic algorithm impacts MyXalytics8.2 High
- hcl software dryice myxalyticsInsecure key rotation affects MyXalytics8.2 High
- zte zxcloud iraiIllegal Memory Access Vulnerability of ZTE's ZXCLOUD iRAI4.4 Medium
- gl-inet gl-a1300 firmware, gl-ar300m firmware, gl-ar750 firmware +9 more +11 moreAn issue was discovered on GL.iNet devices through 4.5.0. Attackers who are able to steal the...7.2 High
- gl-inet gl-a1300 firmware, gl-ar300m firmware, gl-ar750 firmware +9 more +11 moreAn issue was discovered on GL.iNet devices through 4.5.0. Attackers can invoke the add_user...9.8 Critical
- apiida api gateway managerAPIIDA API Gateway Manager for Broadcom Layer7 v2023.2.2 is vulnerable to Host Header Injection.6.1 Medium
- apiida api gateway managerAPIIDA API Gateway Manager for Broadcom Layer7 v2023.2 is vulnerable to Cross Site Scripting (XSS).6.1 Medium
- ureport2 project ureport2Arbitrary File Write vulnerability in the saveReportFile method of ureport2 2.2.9 and before...9.8 Critical
- jeecgDeserialization of Untrusted Data in jeecgFormDemoController in JEECG 4.0 and earlier allows...9.8 Critical
- fuwushe ifairDirectory Traversal vulnerability in fuwushe.org iFair versions 23.8_ad0 and before allows an...7.5 High
- gpacAn issue discovered in GPAC 2.3-DEV-rev605-gfc9e29089-master in MP4Box in gf_avc_change_vui ...7.5 High
- plotly plotly.jsplotly.js prototype pollution vulnerability9.8 Critical
- linecorp lineAn issue in Tamaki_hamanoki Line v.13.6.1 allows attackers to send crafted notifications via...8.2 High
- o-ran-sc ric-plt-e2mgrAn issue was discovered in O-RAN Software Community ric-plt-e2mgr in the G-Release environment,...7.7 High
- perfood couchauthCouchAuth host header injection vulnerability leaks the password reset token9.6 Critical
- automaticsystems soc fl9600 firstlane firmwareAn issue in Automatic Systems SOC FL9600 FastLine v.lego_T04E00 allows a remote attacker to...7.5 High
- automaticsystems soc fl9600 firstlane firmwareDirectory Traversal in Automatic-Systems SOC FL9600 FastLine lego_T04E00 allows a remote attacker...7.5 High
- google pixel watch, pixel watch firmware +1 moreUser Build misconfiguration resulting in local escalation of privilege10.0 Critical
- ssssssss magic-apiMagic-Api code injection6.3 Medium
- recognizeapp omniauth\, synth omniauth-microsoft graph +1 moreomniauth-microsoft_graph vulnerable to account takeover (nOAuth)8.6 High
- google wifi pro, nest wifi pro firmware +1 moreGoogle Nest WiFi Pro root code-execution & user-data compromise10.0 Critical
- evm project evmErroneous handling of `record_external_operation` error return5.9 Medium
- google pixel watch, android +1 moreThere is a possible information disclosure due to a missing permission check in Pixel Watch8.4 High
- prestashopXSS can be stored in DB from "add a message form" in order detail page (FO)5.4 Medium
- prestashopSome attribute not escaped in Validate::isCleanHTML method8.1 High
- ssssssss spider-flowspider-flow FunctionController.java FunctionService.saveFunction code injection6.3 Medium
- codeastro internet banking systemCodeAstro Internet Banking System Profile Picture pages_account.php unrestricted upload6.3 Medium
- mehah otclientArbitrary Expression Injection in github workflow leads to Command execution & leaking secrets9.8 Critical
- nia rrj nueva ecija engineer online portal, rrj nueva ecija engineer online portal +1 moreRRJ Nueva Ecija Engineer Online Portal Add Downloadable downloadable.php unrestricted upload6.3 Medium
- kernelsuThe logic of get apk path in KernelSU module can be bypassed6.7 Medium
- nia rrj nueva ecija engineer online portal, rrj nueva ecija engineer online portal +1 moreRRJ Nueva Ecija Engineer Online Portal file information disclosure5.3 Medium
- google nest mini, home firmware, home mini firmware +2 more +4 moreAn attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in EoP10.0 Critical
- priva top control suite, topcontrol suite - bacnet, topcontrol suite - blue id +3 more +5 morePredictable SSH credentials in Priva TopControl Suite7.5 High
- nia rrj nueva ecija engineer online portal, rrj nueva ecija engineer online portal +1 moreRRJ Nueva Ecija Engineer Online Portal Quiz add_quiz.php cross site scripting3.5 Low
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +26 more +28 moreKernel: netfilter: use-after-free in nft_trans_gc_catchall_sync leads to privilege escalation7.8 High
- nia rrj nueva ecija engineer online portal, rrj nueva ecija engineer online portal +1 moreRRJ Nueva Ecija Engineer Online Portal Create Message teacher_message.php cross site scripting3.5 Low
- silabs gecko software development kit, silabs.com gsdk +1 moreUnvalidated input in Silicon Labs TrustZone implementation leads to accessing Trusted memory region9.3 Critical
- spassarop owasp antisamy .net, antisamy-dotnet +1 moreOWASP.AntiSamy mXSS when preserving comments6.1 Medium
- acumos design studioAcumos Design Studio cross site scripting3.5 Low
- nia rrj nueva ecija engineer online portal, rrj nueva ecija engineer online portal +1 moreRRJ Nueva Ecija Engineer Online Portal change_password_teacher.php weak password3.1 Low
- zimbra zm-ajaxZimbra zm-ajax XFormItem.js XFormItem.prototype.setError cross site scripting2.6 Low
- royaltechbd royal prettyphotort-prettyphoto Plugin rt-prettyphoto.php royal_prettyphoto_plugin_links cross site scripting3.5 Low
polkitopenSUSESecurity update for polkitNo score- ekol informatics website template, ekolbilisim web sablonu yazilimi +1 moreSQLi in Ekol Bilisim Website Template9.8 Critical
- rust-vmm vmm-sys-util`serde` deserialization for `FamStructWrapper` lacks bound checks that could potentially lead to out-of-bounds memory access5.7 Medium
- mattermost, mattermost server +1 moreDetails of archived public channels are leaked to members of another team4.3 Medium
- mattermost, mattermost server +1 moreLack of restriction to manage group names for freshly demoted guests3.7 Low
- Show moreLoading…