CVEs published in January 2024
2,664 vulnerabilities, 306 critical, 14 exploited.
- engineers online portal project online portal, sourcecodester engineers online portal +1 moreSourceCodester Engineers Online Portal Password Change change_password_teacher.php session expiration4.3 Medium
- apache axisApache Axis 1.x (EOL) may allow SSRF when untrusted input is passed to the service admin HTTP API7.2 High
- themeisle rss aggregator by feedzy – feed to post, autoblogging, news & youtube video feeds aggregator, rss aggregator by feedzy +1 moreRSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.3.2 - Missing Authorization5.4 Medium
- themeisle rss aggregator by feedzy – feed to post, autoblogging, news & youtube video feeds aggregator, rss aggregator by feedzy +1 moreRSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.3.2 - Authenticated (Author+) Stored Cross-Site Scripting6.4 Medium
libjxlOSS-FuzzGlobal-buffer-overflow in void jxl::N_AVX2::WriteToOutputStage::StoreUnsignedRow<unsigned char>No score- fit2cloud cloudexplorer liteInsecure Permissions vulnerability in fit2cloud Cloud Explorer Lite version 1.4.1, allow local...7.8 High
- ava teaching video application service platformCross Site Scripting (XSS) vulnerability in AVA teaching video application service platform...6.1 Medium
- autelrobotics evo nano drone firmwareAutel EVO NANO drone flight control firmware version 1.6.5 is vulnerable to denial of service (DoS).5.7 Medium
- abocms abo.cmsSQL Injection vulnerability in ABO.CMS v.5.9.3, allows remote attackers to execute arbitrary code...9.8 Critical
- dzzofficeSQL Injection vulnerability in Dzzoffice version 2.01, allows remote attackers to obtain...6.5 Medium
- man d-tale, man-group dtale +1 moreD-Tale server-side request forgery through Web uploads7.5 High
- flarum, flarum framework +1 moreFlarum's Logout Route allows open redirects6.5 Medium
- codeastro online food ordering systemCodeAstro Online Food Ordering System Admin Panel sql injection7.3 High
- xenarm32: The cache may not be properly cleaned/invalidated (take two)3.3 Low
- qnap qts, quts hero +1 moreQTS, QuTS hero6.6 Medium
- qnap qts, quts hero +1 moreQTS, QuTS hero7.5 High
- qnap video stationVideo Station4.3 Medium
- qnap video stationVideo Station8.8 High
- qnap qcalagentQcalAgent6.3 Medium
- qnap qts, quts hero +1 moreQTS, QuTS hero3.8 Low
- qnap qts, quts hero +1 moreQTS, QuTS hero3.8 Low
- qnap qts, quts hero +1 moreQTS, QuTS hero3.8 Low
- qnap qts, quts hero +1 moreQTS, QuTS hero3.8 Low
- qnap qts, quts hero +1 moreQTS, QuTS hero3.8 Low
- qnap qts, quts hero +1 moreQTS, QuTS hero3.8 Low
- qnap qumagieQuMagie3.5 Low
- qnap qumagieQuMagie5.5 Medium
- qnap qumagieQuMagie7.4 High
- xenarm32: The cache may not be properly cleaned/invalidated3.3 Low
- icewarpIceWarp Utility Download cross site scripting4.3 Medium
- shapedplugin wp tabs, shapedplugin llc wp tabs – responsive tabs plugin for wordpress +1 moreWordPress WP Tabs Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- iframe project iframeWordPress iFrame Plugin <= 4.8 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- david maucher send users emailWordPress Send Users Email Plugin <= 1.4.3 is vulnerable to Sensitive Data Exposure5.3 Medium
- naa986 wp stripe checkoutWordPress WP Stripe Checkout Plugin <= 1.2.2.37 is vulnerable to Sensitive Data Exposure7.5 High
- bluezBlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability7.1 High
- aaron j 404 solutionWordPress 404 Solution Plugin <= 2.33.0 is vulnerable to Sensitive Data Exposure5.3 Medium
- mra13 affiliates managerWordPress Affiliates Manager Plugin <= 2.9.30 is vulnerable to Sensitive Data Exposure5.3 Medium
- uncanny automator, uncanny owl automator – automate everything with the #1 no-code automation and integration plugin, uncannyowl uncanny automator +1 moreWordPress Uncanny Automator Plugin <= 5.1.0.2 is vulnerable to Sensitive Data Exposure5.3 Medium
- js help desk – best help desk & support plugin, wiselyhub js help desk +1 moreWordPress JS Help Desk – Best Help Desk & Support Plugin Plugin <= 2.7.1 is vulnerable to Arbitrary File Upload10.0 Critical
- doofinder, doofinder wp & woocommerce search +1 moreWordPress Doofinder for WooCommerce Plugin <= 2.0.33 is vulnerable to Broken Access Control4.3 Medium
- cleantalk spam protection, anti-spam, firewall by cleantalk, spam protection\, antispam\, firewall +1 moreWordPress Spam protection, AntiSpam, FireWall by CleanTalk Plugin <= 6.20 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- designful stylish price list – price table builder & qr code restaurant menu, stylishpricelist stylish price list +1 moreWordPress Stylish Price List Plugin <= 7.0.17 is vulnerable to Broken Access Control5.4 Medium
- aspengrovestudios inline image upload for bbpressWordPress Inline Image Upload for BBPress Plugin <= 1.1.18 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- awesome support team support – wordpress helpdesk & support plugin, awesomesupport awesome support – wordpress helpdesk & support plugin, getawesomesupport awesome support +2 moreWordPress Awesome Support Plugin <= 6.1.5 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- apollo13themes apollo13 framework extensionsWordPress Apollo13 Framework Extensions Plugin <= 1.9.1 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- icegram engage – wordpress lead generation, popup builder, cta, optins and email list building, engage +1 moreWordPress Icegram Plugin <= 3.1.18 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- basix nex-forms – ultimate form builder – contact forms and much more, basixonline nex-forms +1 moreWordPress NEX-Forms – Ultimate Form Builder Plugin <= 8.5.2 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- nitropack, nitropack inc. – cache & speed optimization for core web vitals, defer css & javascript, lazy load images +1 moreWordPress NitroPack Plugin <= 1.10.2 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- presstigers simple job boardWordPress Simple Job Board Plugin <= 2.10.6 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- wpchill strong testimonialsWordPress Strong Testimonials Plugin <= 3.1.10 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- Show moreLoading…