CVEs published in January 2024
2,664 vulnerabilities, 306 critical, 14 exploited.
- code-projects online faculty clearance, fabian online faculty clearance system +1 morecode-projects Online Faculty Clearance HTTP POST Request deactivate.php sql injection6.3 Medium
- skoda-auto superb 3 firmware, škoda superb iii +1 moreDenial of Service via ECU reset service4.7 Medium
- joynext mib3 infotainment unit, skoda-auto superb 3 firmware +1 moreHead Unit Denial-of-Service via Apple CarPlay service5.3 Medium
- joynext mib3 infotainment unit, skoda-auto superb 3 firmware +1 moreHard-coded password for UDS services4.0 Medium
gstreamer-plugins-badSUSESecurity update for gstreamer-plugins-badNo score- carmelogarcia faculty management systemcode-projects Faculty Management System student-print.php sql injection6.3 Medium
- phpgurukul blood bank \& donor management systemBlood Bank & Donor Management request-received-bydonar.php sql injection4.7 Medium
- hongdian h8951-4g-esp, h8951-4g-esp firmware +1 moreBuffer overflow vulnerability in Cookie authentication field9.8 Critical
- hongdian h8951-4g-esp, h8951-4g-esp firmware +1 moreSensitive authentication-related value accessible publicly7.5 High
- hongdian h8951-4g-esp, h8951-4g-esp firmware +1 moreStored cross-site scripting vulnerability6.1 Medium
- hongdian h8951-4g-esp, h8951-4g-esp firmware +1 moreBruteforcing authentication cookie for a given user7.5 High
- hongdian h8951-4g-esp, h8951-4g-esp firmware +1 moreReflected cross-site scripting vulnerability6.1 Medium
- hongdian h8951-4g-esp, h8951-4g-esp firmware +1 moreCommand execution using the certificate upload utility8.8 High
- hongdian h8951-4g-esp, h8951-4g-esp firmware +1 morePredictable encryption passphrase used in publicly accessible configuration file7.5 High
- hongdian h8951-4g-esp, h8951-4g-esp firmware +1 moreRouter console accessible without authentication9.8 Critical
- hongdian h8951-4g-esp, h8951-4g-esp firmware +1 moreCommand injection in the network test tools8.8 High
- hongdian h8951-4g-esp, h8951-4g-esp firmware +1 morePredefined root password9.8 Critical
- gitlabImproper Verification of Cryptographic Signature in GitLab3.5 Low
- gitlabIncorrect Authorization in GitLab7.6 High
- gitlabIncorrect Authorization in GitLab7.3 High
- gitlab, gitlab ce/ee +1 moreWeak Password Recovery Mechanism for Forgotten Password in GitLab10.0 Critical
- gitlabMissing Authorization in GitLab6.6 Medium
- mongodb c driverMongoDB client C Driver may infinitely loop when validating certain BSON input data5.3 Medium
- bluezBlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability7.1 High
- linux kernel, openatom openeuler +1 moreKernel crash in EXT4 filesystem5.5 Medium
- linux kernel, openatom openeuler +1 moreNULL-ptr-deref in network sched5.5 Medium
- checkmkPrivilege escalation in jar_signature8.8 High
- checkmkPrivilege escalation in mk_tsm8.8 High
- checkmkDisabled automation users could still authenticate8.8 High
- cloud foundry routing release, pivotal cloud foundry deployment, cloud foundry routing release +1 more +3 moreCVE-2023-34061 – Gorouter route pruning7.5 High
- ays pro plugins wordpress quiz maker plugin, ays-pro quiz maker +1 moreImproper input validation vulnerability in WordPress Quiz Maker Plugin prior to 6.5.0.6 allows a...6.5 Medium
- sqlite, fedoraproject extra packages for enterprise linux, fedora +9 more +11 moreSqlite: use-after-free bug in jsonparseaddnodearray4.7 Medium
- macrozheng mall, fuyanglipengjun wetong mall +1 moreWeitong Mall OrderDao.xml sql injection5.5 Medium
- cloudfavorites favorites-webcloudfavorites favorites-web Nickname cross site scripting3.5 Low
- elan dell inspiron, emc elan match-on-chip fpr solution firmware +1 moreSecurity Vulnerability on Match-on-Chip FPR Architecture6.0 Medium
- hancom hcellBuffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Hancom...8.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: BGP flap on NSR-enabled devices causes memory leak6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series and SRX Series: Processing of a specific SIP packet causes NAT IP allocation to fail7.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A specific query via DREND causes rpd crash7.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A link flap causes patroot memory leak which leads to rpd crash6.5 Medium
- juniper junos os evolvedJunos OS Evolved: Specific TCP traffic causes OFP core and restart of RE7.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In a jflow scenario continuous route churn will cause a memory leak and eventually an rpd crash7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series and EX9200 Series: If the "tcp-reset" option used in an IPv6 filter, matched packets are accepted instead of rejected5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: When "tcp-encap" is configured and specific packets are received flowd will crash7.5 High
- juniper junos os evolvedJunos OS Evolved: A high rate of specific traffic will cause a complete system outage7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Gathering statistics in a scaled SCU/DCU configuration will lead to a device crash6.5 Medium
- juniper junos os evolvedJunos OS Evolved: ACX7024, ACX7100-32C and ACX7100-48L: Traffic stops when a specific IPv4 UDP packet is received by the RE7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Due to an error in processing TCP events flowd will crash5.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX Series: In an FTI scenario MPLS packets hitting reject next-hop will cause a host path wedge condition6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: MPC3E memory leak with PTP configuration6.5 Medium
- Show moreLoading…