CVEs published in January 2024
2,664 vulnerabilities, 306 critical, 14 exploited.
- gtkwaveMultiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of...7.8 High
- gtkwaveMultiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of...7.8 High
- gtkwaveMultiple integer overflow vulnerabilities exist in the LXT2 num_dict_entries functionality of...7.8 High
- gtkwaveMultiple integer overflow vulnerabilities exist in the LXT2 num_dict_entries functionality of...7.8 High
- gtkwaveAn out-of-bounds write vulnerability exists in the LXT2 num_time_table_entries functionality of...7.8 High
- gtkwaveAn integer overflow vulnerability exists in the LXT2 zlib block allocation functionality of...7.8 High
- gtkwaveAn integer overflow vulnerability exists in the LXT2 lxt2_rd_trace value elements allocation...7.8 High
- gtkwaveMultiple integer underflow vulnerabilities exist in the LXT2 lxt2_rd_iter_radix shift operation...7.0 High
- gtkwaveAn out-of-bounds write vulnerability exists in the LXT2 zlib block decompression functionality of...7.8 High
- gtkwaveMultiple out-of-bounds write vulnerabilities exist in the LXT2 parsing functionality of GTKWave 3...7.8 High
- gtkwaveMultiple out-of-bounds write vulnerabilities exist in the LXT2 parsing functionality of GTKWave 3...7.8 High
- gtkwaveMultiple integer underflow vulnerabilities exist in the LXT2 lxt2_rd_iter_radix shift operation...7.0 High
- gtkwaveA stack-based buffer overflow vulnerability exists in the LXT2 lxt2_rd_expand_integer_to_bits...7.8 High
- manageengine opmanager, zohocorp manageengine opmanager, manageengine firewall analyzer +5 more +7 moreA directory traversal vulnerability exists in the uploadMib functionality of ManageEngine...9.1 Critical
- openvpn connectOpenVPN Connect version 3.0 through 3.4.6 on macOS allows local users to execute code in external...7.8 High
- fastify fastify-reply-from, reply-from +1 more@fastify-reply-from JSON Content-Type parsing confusion5.3 Medium
- pumaHTTP Request/Response Smuggling in puma5.9 Medium
- pyloadpyLoad unauthenticated flask configuration leakage7.5 High
- pyloadpyLoad Log Injection5.3 Medium
- gpac, gpac gpac/gpac +1 moreOut-of-bounds Read in gpac/gpac4.4 Medium
- tasmoadminOpen redirect in TasmoAdmin6.1 Medium
- gpac, gpac gpac/gpac +1 moreStack-based Buffer Overflow in gpac/gpac4.0 Medium
- prestashow google integrator, prestashop google integrator +1 moreSQL Injection in PrestaShop Google Integrator9.8 Critical
- inis project inisInis Proxy.php server-side request forgery6.3 Medium
- kashipara dynamic lab management systemKashipara Dynamic Lab Management System login_process.php sql injection7.3 High
- arm valhall gpu kernel driverMali GPU Kernel Driver allows improper GPU processing operations5.5 Medium
- open-xchange ox app suiteUser-defined script code could be stored for a upsell related shop URL. This code was not...5.4 Medium
- open-xchange ox app suiteUsers were able to define disclaimer texts for an upsell shop dialog that would contain script...5.4 Medium
- open-xchange ox app suiteUser-defined OXMF templates could be used to access a limited part of the internal OX App Suite...8.1 High
- kashipara dynamic lab management systemKashipara Dynamic Lab Management System admin_login_process.php sql injection7.3 High
- open-xchange ox app suiteThe optional "LDAP contacts provider" could be abused by privileged users to inject LDAP filter...7.6 High
- open-xchange ox app suiteThe "upsell" widget at the portal page could be abused to inject arbitrary script code. Attackers...5.4 Medium
- open-xchange ox app suiteA component for parsing OXMF templates could be abused to execute arbitrary system commands that...8.8 High
- guangzhou yingke electronic technology ncastGuangzhou Yingke Electronic Technology Ncast Guest Login IPSetup.php information disclosure5.3 Medium
- youke365 youke 365Youke365 collect.php server-side request forgery6.3 Medium
- youke365 youke 365Youke365 Parameter caiji.php server-side request forgery6.3 Medium
- fhs-opensource iparkingfhs-opensource iparking vueLogin deserialization6.3 Medium
- fhs-opensource iparkingfhs-opensource iparking PayTempOrderAction.java getData sql injection6.3 Medium
- byzoro smart s150 management platform, smart s150 firmware +1 moreByzoro Smart S150 Management Platform HTTP POST Request userattestation.php unrestricted upload6.3 Medium
- totolink n200re, n200re firmware +1 moreTotolink N200RE cstecgi.cgi setTracerouteCfg os command injection7.3 High
- totolink n200re, n200re firmware +1 moreTotolink N200RE cstecgi.cgi setDiagnosisCfg os command injection7.3 High
- totolink n200re, n200re firmware +1 moreTotolink N200RE cstecgi.cgi UploadFirmwareFile os command injection7.3 High
- totolink n200re, n200re firmware +1 moreTotolink N200RE cstecgi.cgi NTPSyncWithHost os command injection7.3 High
- totolink lr1200gb, lr1200gb firmware +1 moreTotolink LR1200GB cstecgi.cgi setWanCfg os command injection7.3 High
- totolink lr1200gb, lr1200gb firmware +1 moreTotolink LR1200GB cstecgi.cgi setUssd os command injection7.3 High
- totolink lr1200gb, lr1200gb firmware +1 moreTotolink LR1200GB cstecgi.cgi setUploadSetting os command injection6.3 Medium
- ibm cics transaction gateway, cics transaction gateway containers +1 moreIBM CICS Transaction Gateway improper access controls4.0 Medium
- totolink lr1200gb, lr1200gb firmware +1 moreTotolink LR1200GB cstecgi.cgi setOpModeCfg os command injection6.3 Medium
- ibm storage fusion hciIBM Storage Fusion HCI information disclosure6.5 Medium
- chanzhaoyu chatgpt-web, chatgpt web +1 moreChanzhaoyu chatgpt-web cross site scripting3.5 Low
- Show moreLoading…