CVEs published in January 2024
2,664 vulnerabilities, 306 critical, 14 exploited.
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: In an AF scenario traffic can bypass configured lo0 firewall filters5.3 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A specific BGP UPDATE message will cause a crash in the backup Routing Engine in NSR-enabled devices5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4100, EX4400, EX4600, QFX5000 Series: A high rate of specific ICMP traffic will cause the PFE to hang7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX 5000 Series: Repeated execution of a specific CLI command causes a flowd crash5.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series and EX Series: Security Vulnerability in J-web allows a preAuth Remote Code Execution9.8 Critical
- juniper paragon active assurance control center, juniper networks paragon active assurance +1 moreParagon Active Assurance Control Center: Information disclosure vulnerability7.4 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Memory leak in bbe-smgd process if BFD liveness detection for DHCP subscribers is enabled6.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: BGP session flaps on NSR-enabled devices can cause rpd crash5.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: jdhcpd will hang on receiving a specific DHCP packet6.5 Medium
icuOSS-FuzzHeap-buffer-overflow in __stringNo score- relax-and-recover, fedoraproject fedora, redhat enterprise linux +1 more +3 moreRelax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y...5.5 Medium
- mediawikiAn issue was discovered in the GlobalBlocking extension in MediaWiki before 1.40.2. For a Special...6.1 Medium
- mediawikiAn issue was discovered in the Phonos extension in MediaWiki before 1.40.2. PhonosButton.js...5.4 Medium
- mediawikiAn issue was discovered in the WatchAnalytics extension in MediaWiki before 1.40.2. XSS can occur...6.1 Medium
- mediawikiAn issue was discovered in the PageTriage extension in MediaWiki before 1.35.14, 1.36.x through 1...5.4 Medium
- mediawikiMediaWiki Cargo Extension Cross-site Scripting vulnerability6.1 Medium
- mediawikiAn issue was discovered in the CheckUser extension in MediaWiki before 1.35.14, 1.36.x through 1...5.4 Medium
- mediawikiAn issue was discovered in the CampaignEvents extension in MediaWiki before 1.35.14, 1.36.x...5.4 Medium
- jfinalcms project jfinalcmsA stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save mobile parameter,...5.4 Medium
- jfinalcms project jfinalcmsCross-site Scripting in JFinal5.4 Medium
- jfinalcms project jfinalcmsCross-site Scripting in JFinal5.4 Medium
- debian linux, linux kernel +1 moreAn out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported family)7.8 High
- matroska libebmlIn libebml before 1.4.5, an integer overflow in MemIOCallback.cpp can occur when reading or...6.5 Medium
- totolink ex1800t, ex1800t firmware +1 moreTOTOlink EX1800T V9.1.0cu.2112_B20220316 was discovered to contain a remote command execution ...9.8 Critical
- phpgurukul art gallery management systemIn PHPGurukul Art Gallery Management System v1.1, "Update Artist Image" functionality of "imageid...6.5 Medium
- verydowsVerydows v2.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component ...8.8 High
- ujcmsFile Upload vulnerability in Ujcms v.8.0.2 allows a local attacker to execute arbitrary code via...5.4 Medium
- piwigoCross Site Scripting vulnerability in piwigo v.14.0.0 allows a remote attacker to obtain...6.1 Medium
- gl.inet a1300, ar300m, ar750 +21 more +23 moreAn issue was discovered on GL.iNet devices before version 4.5.0. They assign the same session ID...5.5 Medium
- gl-inet gl-a1300 firmware, gl-ar300m firmware, gl-ar750 firmware +9 more +11 moreAn issue was discovered on GL.iNet devices before version 4.5.0. There is an NGINX authentication...9.8 Critical
- aarboard jave2An issue was discovered in Jave2 version 3.3.1, allows attackers to execute arbitrary code via...8.8 High
- unify openscape voiceA directory traversal vulnerability in the SOAP Server integrated in Atos Unify OpenScape Voice...7.5 High
- centralsquare click2gov building permitAn issue was discovered in CentralSquare Click2Gov Building Permit before October 2023. Lack of...4.3 Medium
- live555A heap-use-after-free vulnerability was found in live555 version 2023.05.10 while handling the...9.8 Critical
- oretnom23 judging management systemSQL Injection vulnerability in oretnom23 Judging Management System v1.0, allows remote attackers...9.8 Critical
- oretnom23 judging management systemSQL Injection vulnerability in oretnom23 Judging Management System v1.0, allows remote attackers...9.8 Critical
- oretnom23 judging management systemSQL Injection vulnerability in oretnom23 Judging Management System v1.0, allows remote attackers...9.8 Critical
- troglobit libeuvuev (aka libuev) before 2.4.1 has a buffer overflow in epoll_wait if maxevents is a large number.9.8 Critical
- linux kernelAn issue was discovered in drivers/input/input.c in the Linux kernel before 5.17.10. An attacker...5.5 Medium
- gentoo portageGentoo Portage missing PGP validation of executed code9.8 Critical
- netapp ontap 9, clustered data ontap +1 moreCVE-2024-21982 Information Disclosure Vulnerability in ONTAP 94.8 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +5 more +7 moreKernel: blkio memory leakage due to blkcg and some blkgs are not freed after they are made offline.5.5 Medium
- microsoft edge (chromium-based), edge chromium, edge (chromium-based) extended stable +2 moreMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability5.2 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Security Feature Bypass Vulnerability6.3 Medium
- foru cmsForU CMS cms_template.php sql injection6.3 Medium
- meetyoucrop big-whale, meiyou big whale +1 moremeetyoucrop big-whale Admin Module all.api improper ownership management6.3 Medium
- qkmc-rk redbbsqkmc-rk redbbs Nickname cross site scripting3.5 Low
- foru cmsForU CMS password recovery5.3 Medium
- code-projects simple banking systemCodeAstro Simple Banking System Create a User Page createuser.php cross site scripting3.5 Low
- codeastro online food ordering systemCodeAstro Online Food Ordering System dishes.php cross site scripting3.5 Low
- Show moreLoading…