CVEs published in January 2024
2,664 vulnerabilities, 306 critical, 14 exploited.
- totolink a3300r firmwareTOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection...9.8 Critical
- yzmcmsmember/index/register.html in YzmCMS 6.5 through 7.0 allows XSS via the Referer HTTP header.6.1 Medium
- totolink ex1200t firmwareTOTOlink EX1200T V4.1.2cu.5232_B20210713 was discovered to contain a remote command execution ...9.8 Critical
- totolink a3700r firmwareTOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE)...9.8 Critical
- totolink a3700r firmwareTOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE)...9.8 Critical
- totolink a3700r firmwareTOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE)...9.8 Critical
- totolink a3700r firmwareTOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE)...9.8 Critical
- totolink a3700r firmwareTOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE)...9.8 Critical
- dlink dir-822 firmwareD-Link DIR-822+ V1.0.2 contains a login bypass in the HNAP1 interface, which allows attackers to...9.8 Critical
- dlink dir-822 firmwareD-Link DIR-822+ V1.0.2 was found to contain a command injection in SetStaticRouteSettings...9.8 Critical
- scalefusionScaleFusion 10.5.2 does not properly limit users to the Edge application because Alt-F4 can be used.6.8 Medium
- scalefusionScaleFusion 10.5.2 does not properly limit users to the Edge application because file downloads...4.6 Medium
- scalefusionScaleFusion 10.5.2 does not properly limit users to the Edge application because a search can be...8.8 High
- scalefusionScaleFusion 10.5.2 does not properly limit users to the Edge application because Ctrl-O and Ctrl...8.8 High
- ujcmsA spoofing attack in ujcms v.8.0.2 allows a remote attacker to obtain sensitive information and...9.8 Critical
- buffalo ls210d firmwareAn issue in Buffalo LS210D v.1.78-0.03 allows a remote attacker to execute arbitrary code via the...8.1 High
- aertherwide exiftagsIn exiftags 1.01, nikon_prop1 in nikon.c has a heap-based buffer overflow (write of size 28)...7.8 High
- scalefusionIn ScaleFusion (Windows Desktop App) agent v10.5.2, Kiosk mode application restrictions can be...8.8 High
- flient smart lock advanced firmwareMissing encryption in the NFC tags of the Flient Smart Door Lock v1.0 allows attackers to create...6.5 Medium
- hozard alarm systemThe remote keyless system of the Hozard alarm system (alarmsystemen) v1.0 sends an identical...5.3 Medium
- hozard alarm systemHozard alarm system (Alarmsysteem) v1.0 is vulnerable to Improper Authentication. Commands sent...5.9 Medium
- hozard alarm systemMissing encryption in the RFID tags of the Hozard alarm system (Alarmsysteem) v1.0 allow...6.5 Medium
- hozard alarm systemA default engineer password set on the Hozard alarm system (Alarmsysteem) v1.0 allows an attacker...5.9 Medium
- flient smart lock advanced firmwareFlient Smart Door Lock v1.0 is vulnerable to Use of Default Credentials. Due to default...6.8 Medium
- hozard alarm systemThe number of attempts to bring the Hozard Alarm system (alarmsystemen) v1.0 to a disarmed state...8.1 High
- sigb pmbFile Upload vulnerability PMB v.7.4.8 allows a remote attacker to execute arbitrary code and...7.2 High
- swftoolsSWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a...5.5 Medium
- elitecms elite cmsCross Site Scripting Vulnerability in Elite CRM v1.2.11 allows attacker to execute arbitrary code...6.1 Medium
- tp-link archer ax3000, archer ax5400, archer axe75 +7 more +9 moreMultiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the...8.8 High
- tp-link archer air r5, archer ax3000, archer ax5400 +4 more +6 moreMultiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS...8.0 High
- tp-link archer air r5, archer ax3000, archer ax5400 +6 more +8 moreMultiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the...8.8 High
- omron cj-series and cs-series cpu modules, sysmac cj1g-cpu42p firmware, sysmac cj1g-cpu43p firmware +39 more +41 moreOmron CJ-series and CS-series unauthenticated filesystem access.8.6 High
- apple ipados, ios and ipados, iphone os +2 moreThe issue was addressed with improved validation of environment variables. This issue is fixed in...3.3 Low
- apple macosThe issue was addressed with additional restrictions on the observability of app states. This...5.5 Medium
- apple ipados, ios and ipados, iphone os +2 moreThis issue was addressed by improving Face ID anti-spoofing models. This issue is fixed in iOS 17...5.5 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreAn issue was addressed with improved handling of temporary files. This issue is fixed in macOS...5.5 Medium
- apple macosA logic issue was addressed with improved state management. This issue is fixed in macOS Ventura...5.5 Medium
- apple ipados, macos, ios and ipados +2 more +4 moreThe issue was addressed with additional permissions checks. This issue is fixed in macOS Sonoma...5.5 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreThe issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16...3.3 Low
- apple ipados, macos, tvos +3 more +5 moreAn integer overflow was addressed through improved input validation. This issue is fixed in tvOS...5.5 Medium
- apple macosA race condition was addressed with improved state handling. This issue is fixed in macOS Big Sur...7.0 High
- apple ipados, macos, tvos +3 more +5 moreAn out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS...6.5 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreA privacy issue was addressed with improved private data redaction for log entries. This issue is...3.3 Low
- apple macosA path handling issue was addressed with improved validation. This issue is fixed in macOS...3.3 Low
- apple ipados, macos, ios and ipados +1 more +3 moreMultiple memory corruption issues were addressed with improved input validation. This issue is...7.5 High
- apple macosThis issue was addressed by forcing hardened runtime on the affected binaries at the system level...7.8 High
- apple macosThis issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13...7.8 High
- apple ipados, macos, ios and ipados +1 more +3 moreA logic issue was addressed with improved checks. This issue is fixed in iOS 16.2 and iPadOS 16.2...5.5 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreA type confusion issue was addressed with improved checks. This issue is fixed in macOS Big Sur...7.8 High
- apple ipados, macos, tvos +3 more +5 moreAn out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS...6.5 Medium
- Show moreLoading…