CVEs published in January 2024
2,664 vulnerabilities, 306 critical, 14 exploited.
- totolink lr1200gb, lr1200gb firmware +1 moreTotolink LR1200GB cstecgi.cgi UploadFirmwareFile command injection6.3 Medium
- kashipara food management systemKashipara Food Management System stock_edit.php sql injection6.3 Medium
- kashipara food management systemKashipara Food Management System stock_entry_submit.php sql injection6.3 Medium
- microchip maxview storage managerIn default installations of Microchip maxView Storage Manager (for Adaptec Smart Storage...10.0 Critical
- topazevolution antifraudThe wsftprm.sys kernel driver 2.0.0.0 in Topaz Antifraud allows low-privileged attackers to kill...6.5 Medium
- flycms project flycmsFlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component...8.8 High
- flycms project flycmsFlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...8.8 High
- flycms project flycmsFlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...8.8 High
- get-simple getsimplecmsA Cross Site Scripting (XSS) vulnerability in GetSimple CMS 3.3.16 exists when using Source Code...5.4 Medium
- studip stud.ipStud.IP 5.x through 5.3.3 allows XSS with resultant upload of executable files, because...9.0 Critical
- phome empirecmsSQL injection vulnerability in EmpireCMS v7.5, allows remote attackers to execute arbitrary code...7.2 High
- wallix bastion, bastion access manager +1 moreWALLIX Bastion 7.x, 8.x, 9.x and 10.x and WALLIX Access Manager 3.x and 4.x have Incorrect Access...7.5 High
- easyxdmeasyXDM 2.5 allows XSS via the xdm_e parameter.6.1 Medium
- kashipara food management systemKashipara Food Management System rawstock_used_damaged_submit.php sql injection6.3 Medium
- kashipara food management systemKashipara Food Management System itemBillPdf.php sql injection6.3 Medium
- totolink n350rt, n350rt firmware +1 moreTotolink N350RT HTTP POST Request main stack-based overflow6.3 Medium
- totolink n350rt, n350rt firmware +1 moreTotolink N350RT HTTP POST Request main stack-based overflow6.3 Medium
- ibm db2IBM Db2 for Windows privilege escalation8.4 High
- phpgurukul hospital management systemPHPGurukul Hospital Management System Contact Form index.php#contact_us cross site scripting4.3 Medium
- kashipara food management systemKashipara Food Management System party_submit.php cross site scripting3.5 Low
- dedecmsDeDeCMS Backend file_class.php unrestricted upload4.7 Medium
- kashipara food management systemKashipara Food Management System party_details.php cross site scripting3.5 Low
- kashipara food management systemKashipara Food Management System addmaterialsubmit.php cross site scripting3.5 Low
- kashipara food management systemKashipara Food Management System loginCheck.php sql injection6.3 Medium
- kashipara food management systemKashipara Food Management System item_type_submit.php sql injection6.3 Medium
- kashipara food management systemKashipara Food Management System item_list_edit.php sql injection6.3 Medium
- kashipara food management systemKashipara Food Management System partylist_edit_submit.php sql injection6.3 Medium
- kashipara food management systemKashipara Food Management System party_submit.php sql injection6.3 Medium
- kashipara food management systemKashipara Food Management System rawstock_used_damaged_smt.php sql injection6.3 Medium
- kashipara food management systemKashipara Food Management System item_edit_submit.php sql injection6.3 Medium
threadalonecrates.ioUnsound sending of non-Send types across threads in threadaloneNo score- matrix-org matrix-rust-sdkmatrix-sdk-crypto missing facility to signal rotation of a verified cryptographic identity4.3 Medium
- kashipara food management systemKashipara Food Management System billAjax.php sql injection6.3 Medium
- kashipara food management systemKashipara Food Management System addwaste_entry.php sql injection6.3 Medium
- kashipara food management systemKashipara Food Management System addmaterialsubmit.php sql injection6.3 Medium
- asus router, uniwayinfo uw-101x firmware, uw-301vpw firmware +3 more +5 moreUniway Router Administrative Web Interface reliance on ip address for authentication5.6 Medium
- onenavOneNav API improper authentication7.3 High
- asus router, uniwayinfo uw-101x firmware, uw-301vpw firmware +3 more +5 moreUniway Router Device Reset device_reset.cgi denial of service7.5 High
- kashipara food management systemKashipara Food Management System addmaterial_edit.php sql injection6.3 Medium
- kashipara food management systemKashipara Food Management System item_list_submit.php sql injection6.3 Medium
- kashipara hospital management systemKashipara Hospital Management System registration.php sql injection7.3 High
- totolink x2000r firmware, x2000r v2 +1 moreTotolink X2000R_V2 boa formTmultiAP buffer overflow8.0 High
- kashipara hospital management systemKashipara Hospital Management System Parameter login.php sql injection7.3 High
- project worlds online lawyer management systemProject Worlds Online Lawyer Management System User Registration cross site scripting4.3 Medium
- oretnom23 clinic queuing systemSourceCodester Clinic Queuing System GET Parameter index.php file inclusion6.3 Medium
- oretnom23 clinic queuing systemSourceCodester Clinic Queuing System LoginRegistration.php authorization7.3 High
- acme ultra mini httpdACME Ultra Mini HTTPd HTTP GET Request denial of service5.3 Medium
- codeastro online job portalOnline Job Portal Create News Page News.php cross site scripting2.4 Low
- ftpdmin project ftpdminSentex FTPDMIN RNFR Command denial of service5.3 Medium
icuOSS-FuzzHeap-buffer-overflow in icu_75::Locale::LocaleNo score- Show moreLoading…