CVEs published in January 2024
2,664 vulnerabilities, 306 critical, 14 exploited.
- wwbn avideoAn information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image...6.5 Medium
- wwbn avideoAn information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image...6.5 Medium
- wwbn avideoAn information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image...6.5 Medium
- wwbn avideoAn information disclosure vulnerability exists in the image404Raw.php functionality of WWBN...7.5 High
- wwbn avideoA cross-site scripting (xss) vulnerability exists in the navbarMenuAndLogo.php user name...8.5 High
- wwbn avideoA unrestricted php file upload vulnerability exists in the import.json.php temporary copy...4.3 Medium
- wwbn avideoA cross-site scripting (xss) vulnerability exists in the functiongetOpenGraph videoName...9.6 Critical
- wwbn avideoA cross-site scripting (xss) vulnerability exists in the channelBody.php user name functionality...9.0 Critical
- wwbn avideoAn insufficient entropy vulnerability exists in the userRecoverPass.php recoverPass generation...8.8 High
- wwbn avideoA local file inclusion vulnerability exists in the getLanguageFromBrowser functionality of WWBN...9.8 Critical
- wwbn avideoWWBN AVideo recovery notification bypass vulnerability5.3 Medium
- wwbn avideoWWBN AVideo Improper Restriction of Excessive Authentication Attempts vulnerability7.3 High
- wwbn avideoWWBN AVideo Insufficient Entropy vulnerbaility9.8 Critical
- gitpython-developers gitpythonUntrusted search path under some conditions on Windows allows arbitrary code execution7.8 High
- go-gitMaliciously crafted Git server replies can lead to path traversal and RCE on go-git clients9.8 Critical
- pimcore customer-data-framework, customer management framework +1 morePimcore Customer Data Framework Improper Access Control allows unprivileged user to access GDPR extracts6.5 Medium
- pimcore customer management framework, customer-data-framework +1 morePimcore Customer Data Framework Improper Access Control allows unprivileged user to access customers duplicates list6.5 Medium
- pimcore ecommerce-framework-bundle, e-commerce framework +1 morePimcore Ecommerce Framework Bundle Improper Access Control allows unprivileged user to access back-office orders list4.3 Medium
- quic-goquic-go's path validation mechanism can cause denial of service6.4 Medium
- myeventon eventon, ashanjay eventon – events calendar, eventon (pro) - wordpress virtual event calendar plugin +1 more +3 moreEventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Missing Authorization to Arbitrary Post Meta Update via evo_eventpost_update_meta6.5 Medium
- sourcecodester student attendance system, student attendance system project attendance system +1 moreSourceCodester Student Attendance System attendance_report.php sql injection6.3 Medium
glibcUbuntuglibc regressionNo score- bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 moreThe vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS)...8.1 High
- bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 moreThe vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS)...8.1 High
- bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 moreThe vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS)...8.1 High
- bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 moreThe vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS)...8.1 High
- bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 moreThe vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS)...8.1 High
- bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 moreThe vulnerability allows a remote unauthenticated attacker to read arbitrary content of the...5.3 Medium
- bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 moreThe vulnerability allows a remote unauthenticated attacker to read arbitrary content of the...5.3 Medium
- bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 moreThe vulnerability allows a remote unauthenticated attacker to read arbitrary content of the...5.3 Medium
- bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 moreThe vulnerability allows a remote attacker to delete arbitrary files on the file system via a...5.5 Medium
- bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 moreThe vulnerability allows a remote attacker to access sensitive data inside exported packages or...7.8 High
- bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 moreThe vulnerability allows a remote attacker to inject arbitrary HTTP response headers or...5.3 Medium
- bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 moreThe vulnerability allows an unauthenticated remote attacker to send malicious network requests...6.3 Medium
- bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 moreThe vulnerability allows a remote attacker to inject and execute arbitrary client-side script...5.3 Medium
- bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 moreThe vulnerability allows a remote authenticated attacker to read or update arbitrary content of...8.8 High
- bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 moreThe vulnerability allows an authenticated remote attacker to perform actions exceeding their...8.8 High
- bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 moreThe vulnerability allows a remote attacker to authenticate to the SSH service with root...8.1 High
- adobe substance 3d stager, substance3d - stager +1 moreAdobe Substance 3D Stager v2.1.1 Vulnerability VII5.5 Medium
- adobe substance 3d stager, substance3d - stager +1 moreAdobe Substance 3D Stager v2.1.1 Vulnerability III5.5 Medium
- adobe substance 3d stager, substance3d - stager +1 moreAdobe Substance 3D Stager v2.1.1 Vulnerability V5.5 Medium
- adobe substance 3d stager, substance3d - stager +1 moreAdobe Substance 3D Stager v2.1.1 Vulnerability IV5.5 Medium
- adobe substance 3d stager, substance3d - stager +1 moreAdobe Substance 3D Stager v2.1.1 Vulnerability VIII5.5 Medium
- adobe substance 3d stager, substance3d - stager +1 moreAdobe Substance 3D Stager v2.1.1 Vulnerability I5.5 Medium
hawk2openSUSESecurity update for hawk2No score- trellix endpoint security, endpoint security web control, endpoint security (ens) web control +2 moreA content-security-policy vulnerability in ENS Control browser extension prior to 10.7.0 Update...6.1 Medium
- bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 moreThe vulnerability allows a remote attacker to authenticate to the web application with high...8.1 High
- bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 moreThe vulnerability allows an authenticated remote attacker to list arbitrary folders in all paths...6.5 Medium
- bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 moreThe vulnerability allows an authenticated remote attacker to upload a malicious file to the SD...5.5 Medium
- bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 moreThe vulnerability allows an unauthenticated remote attacker to read arbitrary files under the...5.3 Medium
- Show moreLoading…