CVEs published in January 2024
2,664 vulnerabilities, 306 critical, 14 exploited.
- trellix anti-malware engineA symbolic link manipulation vulnerability in Trellix Anti-Malware Engine prior to the January...7.1 High
- siemens jt2go, teamcenter visualization v13.3, teamcenter visualization v14.1 +3 more +5 moreA vulnerability has been identified in JT2Go (All versions < V14.3.0.6), Teamcenter Visualization...7.8 High
- siemens jt2go, teamcenter visualization v13.3, teamcenter visualization v14.1 +3 more +5 moreA vulnerability has been identified in JT2Go (All versions < V14.3.0.6), Teamcenter Visualization...7.8 High
- siemens jt2go, teamcenter visualization v13.3, teamcenter visualization v14.1 +3 more +5 moreA vulnerability has been identified in JT2Go (All versions < V14.3.0.6), Teamcenter Visualization...3.3 Low
- siemens jt2go, teamcenter visualization v13.3, teamcenter visualization v14.1 +3 more +5 moreA vulnerability has been identified in JT2Go (All versions < V14.3.0.6), Teamcenter Visualization...7.8 High
- microchip maxview storage manager, siemens simatic ipc1047e, simatic ipc647e +1 more +3 moreA vulnerability has been identified in SIMATIC IPC1047E (All versions with maxView Storage...10.0 Critical
- siemens simatic cn 4100, simatic cn 4100 firmware +1 moreA vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7). The "intermediate...9.8 Critical
- siemens simatic cn 4100, simatic cn 4100 firmware +1 moreA vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7). The affected...7.5 High
- siemens simatic cn 4100, simatic cn 4100 firmware +1 moreA vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.7). The "intermediate...8.8 High
- siemens solid edge se2023A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The...7.8 High
- siemens solid edge se2023A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The...7.8 High
- siemens solid edge se2023A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The...7.8 High
- siemens solid edge se2023A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The...7.8 High
- siemens solid edge se2023A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The...7.8 High
- siemens solid edge se2023A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The...7.8 High
- siemens solid edge se2023A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The...7.8 High
- siemens solid edge se2023A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The...7.8 High
- siemens solid edge se2023A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The...7.8 High
- siemens solid edge se2023A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The...7.8 High
- siemens solid edge se2023A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 10). The...7.8 High
- siemens spectrum power 7A vulnerability has been identified in Spectrum Power 7 (All versions < V23Q4). The affected...7.8 High
- siemens cp-8031 master module, cp-8050 master module, sicam a8000 cp-8031 firmware +1 more +3 moreA vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.20), CP...6.6 Medium
- korenix jetnet series, jetnet 4508-w firmware, jetnet 4508 firmware +40 more +42 moreUnauthenticated Firmware Upgrade9.8 Critical
- bosch bcc101, bcc102, bcc50 +3 more +5 moreNetwork port 8899 open in WiFi firmware of BCC101/BCC102/BCC50 products, that allows an attacker...8.3 High
- jetbrains youtrackIn JetBrains YouTrack before 2023.3.22666 stored XSS via markdown was possible4.6 Medium
- korenix jetnet series, jetnet 4508-w firmware, jetnet 4508 firmware +40 more +42 moreTFTP Without Authentication8.6 High
- qualys web application screening, qualys,inc. web app scanning connector jenkins plugin +1 morePossible XXE vulnerability in Jenkins Plugin for Qualys Web Application Security5.7 Medium
- qualys policy compliance, qualys,inc. policy compliance connector jenkins plugin +1 morePossible XSS vulnerability in Jenkins Plugin for Qualys Policy Compliance5.7 Medium
- qualys policy compliance, qualys,inc. policy compliance connector jenkins plugin +1 morePossible XXE vulnerability in Jenkins Plugin for Qualys Policy Compliance5.7 Medium
- totolink nr1800x, nr1800x firmware +1 moreTotolink NR1800X cstecgi.cgi loginAuth stack-based overflow9.8 Critical
- strategy11 formidable form builder, strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builder +1 moreFormidable Forms <= 6.7 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4 Medium
- strategy11 formidable form builder, strategy11team formidable forms – contact form plugin, survey, quiz, payment, calculator form & custom form builder +1 moreFormidable Forms <= 6.7 - HTML Injection6.5 Medium
- totolink n350rt, n350rt firmware +1 moreTotolink N350RT cstecgi.cgi loginAuth stack-based overflow7.2 High
- wpmet metform elementor contact form builder, roxnor metform – contact form, survey, quiz, & custom form builder for elementor +1 moreMetform Elementor Contact Form Builder <= 3.8.1 - Cross-Site Request Forgery5.4 Medium
- maxfoundry maxbuttons, maxbuttons – create buttons +1 moreWordPress Button Plugin MaxButtons <= 9.7.4 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4 Medium
- ivanti endpoint managerAn unspecified SQL Injection vulnerability in Ivanti Endpoint Manager released prior to 2022 SU 5...9.6 Critical
- sap gui connector, sap se microsoft edge browser extension (sap gui connector for microsoft edge) +1 moreInformation Disclosure vulnerability in Microsoft Edge browser extension (SAP GUI connector for Microsoft Edge)7.4 High
- sap netweaver, sap se netweaver (internet communication manager) +1 moreInformation Disclosure vulnerability in SAP NetWeaver Internet Communication Manager4.1 Medium
- sap se netweaver abap application server and abap platform, sap netweaver application server abap +1 moreCross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Application Server and ABAP Platform4.1 Medium
- sap application interface framework, sap se application interface framework (file adapter) +1 moreCode Injection vulnerability in SAP Application Interface Framework (File Adapter)8.4 High
- sap se s/4hana finance (advanced payment management), sap s\/4hana finance +1 moreMissing Authorization check in SAP S/4HANA Finance (Advanced Payment Management)6.4 Medium
- sap lt replication serverImproper Authorization check in SAP LT Replication Server7.3 High
- sap marketing, sap se marketing (contacts app) +1 moreURL Redirection vulnerability in SAP Marketing (Contacts App)3.7 Low
- microsoft azure uamqp, azure azure-uamqp-c +1 moreAzure IoT Platform Device SDK Remote Code Execution Vulnerability9.8 Critical
- tozt spreadsheet\The Spreadsheet::ParseXLSX package before 0.28 for Perl can encounter an out-of-memory condition...5.5 Medium
- microsoft .net, .net 6.0, .net 7.0 +13 more +15 moreMicrosoft Identity Denial of service vulnerability6.8 Medium
- microsoft .net, .net framework, .net 6.0 +23 more +25 moreNET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability9.1 Critical
- dataiku data science studioDataiku DSS before 11.4.5 and 12.4.1 has Incorrect Access Control that could lead to a full...9.8 Critical
- appwrite command line interfaceApprite CLI makes Use of Hard-coded Credentials5.5 Medium
- savignano s-notifyAn issue was discovered in savignano S/Notify before 4.0.2 for Confluence. While an...8.3 High
- Show moreLoading…