CVEs published in January 2024
2,664 vulnerabilities, 306 critical, 14 exploited.
- sem-cms semcmsSEMCMS v4.8 was discovered to contain a SQL injection vulnerability via the languageID parameter...7.5 High
- dlink r15 firmwareD-Link R15 before v1.08.02 was discovered to contain no firewall restrictions for IPv6 traffic....5.3 Medium
- cisco ironport email security appliance, secure email gateway firmware +1 moreHyland Perceptive Filters releases before 2023-12-08 (e.g., 11.4.0.2647), as used in Cisco...9.8 Critical
- cassianetworks xc1000 firmware, xc2000 firmware +1 moreIn Cassia Gateway firmware XC1000_2.1.1.2303082218 and XC2000_2.1.1.2303090947, the queueUrl...9.8 Critical
- totolink n200re v5 firmwareTotolink N200RE_V5 V9.3.5u.6255_B20211224 is vulnerable to Incorrect Access Control. The device...9.1 Critical
- phpgurukul hospital management systemA Time-Based SQL Injection vulnerability was discovered in Hospital Management System V4.0 which...4.9 Medium
- phpgurukul hospital management systemA JQuery Unrestricted Arbitrary File Upload vulnerability was discovered in Hospital Management...9.8 Critical
- phpgurukul hospital management systemA Cross-Site Scripting (XSS) vulnerability was discovered in Hospital Management System V4.0...6.1 Medium
- phpgurukul hospital management systemA Time-Based SQL Injection vulnerability was discovered in Hospital Management System V4.0 which...4.9 Medium
- phpgurukul dairy farm shop management systemPHPGurukul Dairy Farm Shop Management System add-category.php sql injection5.5 Medium
- unknown-o download-stationunknown-o download-station index.php path traversal5.3 Medium
- likeshopLikeshop HTTP POST Request File.php userFormImage unrestricted upload7.3 High
- engineers online portal project online portal, sourcecodester engineers online portal +1 moreSourceCodester Engineers Online Portal session fixiation3.1 Low
- engineers online portal project online portal, sourcecodester engineers online portal +1 moreSourceCodester Engineers Online Portal session expiration3.1 Low
- engineers online portal project online portal, sourcecodester engineers online portal +1 moreSourceCodester Engineers Online Portal missing secure attribute3.7 Low
- ami megarac sp-x, megarac spx +1 moreheap memory overflow8.3 High
- ami megarac sp-x, megarac spx +1 moreStack-based Buffer Overflow8.3 High
- ami megarac sp-x, megarac spx +1 moreHeap-based Buffer Overflow8.3 High
- ami megarac sp-x, megarac spx +1 moreHeap-based Buffer Overflow8.3 High
- ami megarac sp-x, megarac spx +1 morestack-based buffer overflow9.6 Critical
- ami megarac sp-x, megarac spx +1 moreUntrusted Pointer Dereference7.8 High
- ami megarac sp-x, megarac spx +1 moreStack-based Buffer Overflow BMC9.6 Critical
- ami megarac sp-x, megarac spx +1 moreUntrusted Pointer Dereference in BMC7.8 High
- proofpoint enterprise protectionHTML injection in email body through email subject5.3 Medium
- engineers online portal project online portal, sourcecodester engineers online portal +1 moreSourceCodester Engineers Online Portal File Upload resource consumption4.3 Medium
- red hat openshift container platform 3.11, openshift container platform 4.13, openshift container platform 4.14 +1 more +3 moreCri-o: pods are able to break out of resource confinement on cgroupv26.5 Medium
- engineers online portal project online portal, sourcecodester engineers online portal +1 moreSourceCodester Engineers Online Portal signup_teacher.php weak password3.7 Low
- codeastro vehicle booking system, vehicle booking system project booking system +1 moreCodeAstro Vehicle Booking System Feedback Page user-give-feedback.php cross site scripting3.5 Low
- codeastro vehicle booking system, vehicle booking system project booking system +1 moreCodeAstro Vehicle Booking System User Registration usr-register.php cross site scripting4.3 Medium
- soxft timemailsoxft TimeMail check.php sql injection5.5 Medium
- hyperledger aries cloud agent, aries-cloudagent-python +1 moreHyperledger Aries Cloud Agent Python result of presentation verification not checked for LDP-VC9.9 Critical
- codeastro simple house rental system, simple house rental system project house rental system +1 moreCodeAstro Simple House Rental System Login Panel cross site scripting4.3 Medium
- inis project inisInis Sqlite.php sql injection6.3 Medium
- schneider electric easergy studioA CWE-502: Deserialization of untrusted data vulnerability exists that could allow an attacker...7.8 High
- mrousavy react-native-mmkvInsertion of Sensitive Information into Log File in react-native-mmkv4.4 Medium
- inis project inisInis GET Request File.php path traversal3.5 Low
linux-azureUbuntulinux-azure vulnerabilitiesNo score- microsoft identitymodel extensions, azuread azure-activedirectory-identitymodel-extensions-for-dotnet +1 moreMicrosoft.IdentityModel.Protocols.SignedHttpRequest remote code execution vulnerability7.1 High
linux-azureUbuntulinux-azure vulnerabilitiesNo score- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS...7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +23 more +25 moreWindows Themes Spoofing Vulnerability6.5 Medium
- microsoft sharepoint server, sharepoint enterprise server 2016, sharepoint server 2019 +1 more +3 moreMicrosoft SharePoint Server Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreMicrosoft Message Queuing Information Disclosure Vulnerability6.5 Medium
- microsoft .net framework, .net framework 3.5, .net framework 3.5 and 4.7.2 +4 more +6 more.NET Framework Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreWindows Cryptographic Services Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +15 more +17 moreWindows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 11 version 21h2, windows 11 version 22h2, windows 11 version 22h3 +7 more +9 moreWindows Kernel-Mode Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 21h2 +11 more +13 moreMicrosoft Bluetooth Driver Spoofing Vulnerability5.7 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreMicrosoft Local Security Authority Subsystem Service Information Disclosure Vulnerability5.7 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +20 more +22 moreMicrosoft AllJoyn API Denial of Service Vulnerability7.5 High
- Show moreLoading…