CVEs published in January 2024
2,664 vulnerabilities, 306 critical, 14 exploited.
- bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 moreThe vulnerability allows a remote attacker to download arbitrary files in all paths of the system...6.5 Medium
- bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 moreThe vulnerability allows an unauthenticated remote attacker to upload arbitrary files under the...6.5 Medium
- bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 moreThe vulnerability allows a remote attacker to inject and execute arbitrary client-side script...5.3 Medium
- bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 moreThe vulnerability allows a remote attacker to upload arbitrary files in all paths of the system...8.1 High
- bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 moreThe vulnerability allows an authenticated remote attacker to download arbitrary files in all...6.5 Medium
- apache answerApache Answer: Repeated submissions using scripts resulted in an abnormal number of collections for questions.3.1 Low
- zte mf258, mf258 firmware +1 moreXSS Vulnerability in ZTE MF258 Products5.7 Medium
- redis, fedoraproject fedora +1 moreRedis vulnerable to integer overflow in certain payloads8.1 High
- phpgurukul hospital management systemPHPGurukul Hospital Management System query-details.php sql injection5.5 Medium
- phpgurukul hospital management systemPHPGurukul Hospital Management System patient-search.php sql injection5.5 Medium
- phpgurukul hospital management systemPHPGurukul Hospital Management System change-password.php sql injection5.5 Medium
- phpgurukul hospital management systemPHPGurukul Hospital Management System contact.php sql injection5.5 Medium
- phpgurukul hospital management systemPHPGurukul Hospital Management System edit-doctor-specialization.php sql injection5.5 Medium
- code-projects simple online hotel reservation systemcode-projects Simple Online Hotel Reservation System login.php sql injection7.3 High
- csdeshang dso2oDeShang DSO2O install.php access control5.3 Medium
- coderd-repos evacoderd-repos Eva HTTP POST Request page sql injection5.5 Medium
- mandelo ssm shiro blogMandelo ssm_shiro_blog Backend updateRoles access control4.3 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient data validation in Extensions in Google Chrome prior to 120.0.6099.216 allowed an...5.3 Medium
- freeipa, fedoraproject fedora, red hat enterprise linux 6 +32 more +34 moreIpa: invalid csrf protection6.5 Medium
- wuzhicmsWuzhicms v4.1.0 was discovered to contain a SQL injection vulnerability via the $keywords...9.8 Critical
- tenda ax1803 firmwareTenda AX1803 v1.0.0.1 was discovered to contain a command injection vulnerability via the...9.8 Critical
- tenda ax1803 firmwareTenda AX1803 v1.0.0.1 was discovered to contain a stack overflow in the function getIptvInfo.9.8 Critical
- tenda ax1803 firmwareTenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function...9.8 Critical
- tenda ax1803 firmwareTenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function...9.8 Critical
- tenda ax1803 firmwareTenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the...9.8 Critical
- tenda ax1803 firmwareTenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function...9.8 Critical
- tenda ax1803 firmwareTenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the...9.8 Critical
- tenda ax1803 firmwareTenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the...9.8 Critical
- tenda ax1803 firmwareTenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the...9.8 Critical
- tenda ax1803 firmwareTenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function...9.8 Critical
- tenda ax1803 firmwareTenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function...9.8 Critical
- tenda ax1803 firmwareTenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the...9.8 Critical
- tenda ax1803 firmwareTenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function...9.8 Critical
- tenda ax1803 firmwareTenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the...9.8 Critical
- tenda ax1803 firmwareTenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function...9.8 Critical
- tenda ax1803 firmwareTenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function...9.8 Critical
- tenda ax1803 firmwareTenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function...9.8 Critical
- tenda ax1803 firmwareTenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the...9.8 Critical
- tenda ax1803 firmwareTenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function...9.8 Critical
- tenda ax1803 firmwareTenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function...9.8 Critical
- tenda ax1803 firmwareTenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the...9.8 Critical
- publiccmsPublicCMS 4.0 is vulnerable to Cross Site Scripting (XSS). Because files can be uploaded and...5.4 Medium
- flir ax8 firmwareFLIR AX8 thermal sensor cameras up to and including 1.46.16 are vulnerable to Directory Traversal...7.5 High
- flir ax8 firmwareCommand injection vulnerability in /usr/www/res.php in FLIR AX8 up to 1.46.16 allows attackers to...9.8 Critical
- dlink dir-815 firmwareAn issue discovered in D-Link dir815 v.1.01SSb08.bin allows a remote attacker to execute...9.8 Critical
- kyocera device managerKyocera Device Manager before 3.1.1213.0 allows NTLM credential exposure during UNC path...7.2 High
- gpacMP4Box GPAC version 2.3-DEV-rev636-gfbd7e13aa-master was discovered to contain an infinite loop...5.5 Medium
- barassistant bar assistantBlind Server-Side Request Forgery (SSRF) vulnerability in karlomikus Bar Assistant before version...8.8 High
- tenda ax12 firmwareBuffer Overflow vulnerability in Tenda AX12 V22.03.01.46, allows remote attackers to cause a...7.5 High
- easycorp zentaoZentao versions 4.1.3 and before has a URL redirect vulnerability, which prevents the system from...6.1 Medium
- Show moreLoading…