CVEs published in January 2024
2,664 vulnerabilities, 306 critical, 14 exploited.
- savignano s-notifyAn issue was discovered in savignano S/Notify before 2.0.1 for Bitbucket. While an administrative...8.3 High
- savignano s-notifyAn issue was discovered in savignano S/Notify before 4.0.2 for Jira. While an administrative user...8.3 High
- evernoteAn issue in Evernote Evernote for MacOS v.10.68.2 allows a remote attacker to execute arbitrary...9.8 Critical
- tenda a18 firmwareTenda A18 v15.13.07.09 was discovered to contain a stack overflow via the devName parameter in...9.8 Critical
- jfinalcms project jfinalcmsCross Site Scripting (XSS) vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary...5.4 Medium
- gradle enterpriseIn Gradle Enterprise before 2023.1, a remote attacker may be able to gain access to a new...9.8 Critical
- trendnet tv-ip1314pi firmwareAn issue was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices. Command injection can occur...9.8 Critical
- trendnet tv-ip1314pi firmwareA stack-based buffer overflow was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices,...9.8 Critical
- trendnet tv-ip1314pi firmwareAn issue was discovered in libremote_dbg.so on TRENDnet TV-IP1314PI 5.5.3 200714 devices....9.8 Critical
- freeimage project freeimageAn issue discovered in BitmapAccess.cpp::FreeImage_AllocateBitmap in FreeImage 3.18.0 leads to an...6.5 Medium
- freeimage project freeimageAn integer overflow vulnerability in Exif.cpp::jpeg_read_exif_dir in FreeImage 3.18.0 allows...6.5 Medium
- freeimage project freeimageBuffer Overflow vulnerability in BitmapAccess.cpp::FreeImage_AllocateBitmap in FreeImage 3.18.0...6.5 Medium
- freeimage project freeimageAn integer overflow vulnerability in LoadPixelDataRLE4 function in PluginBMP.cpp in Freeimage 3...8.8 High
- freeimage project freeimageA Buffer out-of-bound read vulnerability in Exif.cpp::ReadInt32 in FreeImage 3.18.0 allows...6.5 Medium
- freeimage project freeimageAn integer overflow vulnerability in FreeImageIO.cpp::_MemoryReadProc in FreeImage 3.18.0 allows...8.8 High
- juzaweb cmsjuzawebCMS Incorrect Access Control vulnerability4.9 Medium
- follettlearning solutions destinyCross Site Scripting vulnerability in Follet School Solutions Destiny v.20_0_1_AU4 and later...6.1 Medium
- st st54-android-packages-apps-nfcThe ST ST54-android-packages-apps-Nfc package before 130-20230215-23W07p0 for Android has an out...5.5 Medium
- tp-link tapoTP-Link Tapo APK up to v2.12.703 uses hardcoded credentials for access to the login panel.7.5 High
- netscout ngeniusoneCross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker...6.1 Medium
- netscout ngeniusoneAn issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code...9.8 Critical
- netscout ngeniusoneCross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker...5.4 Medium
- infoblox niosA stored cross-site scripting (XSS) vulnerability in Infoblox NIOS v8.5.2-409296 allows attackers...5.4 Medium
- demon1a discord-reconRemote code execution on ReconServer due to improper input sanitization on the prips command10.0 Critical
- advancedcustomfields advanced custom fields, unknown advanced custom fields (acf) +1 moreWordPress Advanced Custom Fields Plugin 3.1.1-6.0.2 is vulnerable to Sensitive Data Exposure3.7 Low
- metagauss profilegrid, profilegrid – user profiles, memberships, groups and communities +1 moreWordPress ProfileGrid Plugin <= 5.0.3 is vulnerable to Broken Access Control6.3 Medium
- rymera wholesale suite, rymera web co wholesale suite – woocommerce wholesale prices, b2b, catalog mode, order form, wholesale user roles, dynamic pricing & more +1 moreWordPress Wholesale Suite Plugin <= 2.1.5 is vulnerable to Broken Access Control5.4 Medium
- totolink n350rt, n350rt firmware +1 moreTotolink N350RT cstecgi.cgi loginAuth stack-based overflow7.2 High
- cool plugins events shortcodes for the events calendarWordPress Events Shortcodes & Templates For The Events Calendar Plugin <= 2.3.1 is vulnerable to SQL Injection7.6 High
- svnlabs html5 mp3 player with folder feedburner playlist freeWordPress HTML5 MP3 Player with Folder Feedburner Plugin <= 2.8.0 is vulnerable to PHP Object Injection9.1 Critical
- wp chill download monitorWordPress Download Monitor Plugin <= 4.7.60 is vulnerable to Sensitive Data Exposure5.3 Medium
- ninja team fastdup – fastest wordpress migration & duplicator, ninjateam fastdup +1 moreWordPress FastDup Plugin <= 2.1.7 is vulnerable to Sensitive Data Exposure5.3 Medium
- studiowombat wp optin wheel – gamified optin email marketing tool for wordpress and woocommerce, wp optin wheel +1 moreWordPress WP Optin Wheel Plugin <= 1.4.3 is vulnerable to Sensitive Data Exposure5.3 Medium
- ewels cpt bootstrap carouselWordPress CPT Bootstrap Carousel Plugin <= 1.12 is vulnerable to Cross Site Scripting (XSS)7.1 High
- impactpixel ads invalid click protectionWordPress Ads Invalid Click Protection Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- michiel van eerd private google calendarsWordPress Private Google Calendars Plugin <= 20231125 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- wpmu dev defender security – malware scanner, login security & firewall, wpmudev defender security +1 moreWordPress Defender Security Plugin <= 4.1.0 is vulnerable to Sensitive Data Exposure5.3 Medium
- jordy meow database cleaner: clean, optimize & repair, database cleaner +1 moreWordPress Database Cleaner Plugin <= 0.9.8 is vulnerable to Sensitive Data Exposure5.3 Medium
- brian d. goad ptypeconverterWordPress pTypeConverter Plugin <= 0.2.8.1 is vulnerable to SQL Injection7.6 High
- cformsii project cformsiiWordPress CformsII Plugin <= 15.0.5 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- javik randomizeWordPress Randomize Plugin <= 1.4.3 is vulnerable to SQL Injection8.5 High
- live composer team page builder: live composer, blueastral page builder\ +1 moreWordPress Page Builder: Live Composer Plugin <= 1.5.25 is vulnerable to PHP Object Injection7.7 High
- videowhisper rate star review – ajax reviews for content, with star ratings, rate star review +1 moreWordPress Rate Star Review Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS)7.1 High
- yevhen kotelnytskyi js & css script optimizer, yevhenkotelnytskyi js \& css script optimizer +1 moreWordPress JS & CSS Script Optimizer Plugin <= 0.3.3 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- repute infosystems armember – membership plugin, content restriction, member levels, user profile & user signup, reputeinfosystems armember +1 moreWordPress ARMember Plugin <= 4.0.22 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object Injection9.6 Critical
- svnlabs html5 soundcloud player with playlist freeWordPress HTML5 SoundCloud Player Plugin <= 2.8.0 is vulnerable to PHP Object Injection9.1 Critical
- svnlabs html5 mp3 player with playlist freeWordPress HTML5 MP3 Player with Playlist Free Plugin <= 3.0.0 is vulnerable to PHP Object Injection9.1 Critical
- subnet powersystem centerSubnet Solutions Inc. PowerSYSTEM Center Unquoted Search Path or Element7.8 High
- unknown wp blogs' planetarium, wp-blogs-planetarium project wp-blogs-planetarium +1 moreWP Blogs' Planetarium <= 1.0 - Settings Update via CSRF8.8 High
- wp swings coupon referral programWordPress Coupon Referral Program Plugin <= 1.7.2 is vulnerable to Sensitive Data Exposure7.5 High
- Show moreLoading…