CVEs published in January 2024
2,664 vulnerabilities, 306 critical, 14 exploited.
- qstar archive storage managerQStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 was discovered to contain a DOM Based...6.1 Medium
- qstar archive storage managerQStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 was discovered to contain a DOM Based...8.8 High
- qstar archive storage managerAn unauthenticated log file read in the component log-smblog-save of QStar Archive Solutions...5.3 Medium
- openkmA Stored Cross-Site Scripting (XSS) vulnerability exists in OpenKM version 7.1.40 (dbb6e88) With...5.4 Medium
- evershopEverShop at risk to unauthorized access via weak HMAC secret9.1 Critical
- evershopEverShop vulnerable to improper authorization in GraphQL endpoints7.5 High
- scada-ltsAn issue was discovered in Scada-LTS v2.7.5.2 build 4551883606 and before, allows remote...8.8 High
- mailmunch constant contact forms by mailmunch, constant contact forms +1 moreWordPress Constant Contact Forms by MailMunch Plugin <= 2.0.11 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- cozmoslabs profile builder pro, profile builder +1 moreWordPress Profile Builder Pro Plugin <= 3.10.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- apple magic keyboard firmwareA session management issue was addressed with improved checks. This issue is fixed in Magic...2.4 Low
- code-projects dormitory management systemcode-projects Dormitory Management System login.php sql injection7.3 High
- apolloconfig apolloApollo Configuration Center users improper authorization4.3 Medium
- zoom, zoom video communications, inc. desktop client for windows, zoom vdi client for windows, and zoom sdks for windows before version 5.16.10, zoom meeting software development kit +2 more +4 moreZoom Desktop Client for Windows - Improper Access Control8.8 High
- code-projects dormitory management systemcode-projects Dormitory Management System comment.php sql injection6.3 Medium
- code-projects dormitory management systemcode-projects Dormitory Management System modifyuser.php information disclosure3.5 Low
- chromiumembedded cef, chromium embedded framework +1 moreOOB Access in CefLayeredWindowUpdaterOSR::OnAllocatedSharedMemory5.3 Medium
- lifplatforms lif auth server, lif-platforms lif-auth-server +1 moreLif Auth Server vulnerable to uncontrolled data in path expression4.2 Medium
- code-projects human resource integrated systemcode-projects Human Resource Integrated System dec_service_credits.php sql injection6.3 Medium
- code-projects human resource integrated systemcode-projects Human Resource Integrated System inc_service_credits.php sql injection6.3 Medium
- rubygems rubygems.orgrubygems.org MFA Bypass through password reset function could allow account takeover4.8 Medium
- wazuhwazuh-logcollector integer underflow local privilege escalation7.4 High
- discourseDiscourse secure uploads accessible to guests even when login is required3.1 Low
- discourseInsufficient control of custom field value sizes4.3 Medium
- discourse discourse-reactions, reactions +1 moreReaction data for user notifications exposed in Discourse-reactions3.5 Low
- discourseDiscourse vulnerable to unlimited mentioned users in message serializer8.6 High
- code-projects human resource integrated systemcode-projects Human Resource Integrated System update_personal_info.php sql injection6.3 Medium
- code-projects fighting cock information systemcode-projects Fighting Cock Information System new-father.php unrestricted upload6.3 Medium
- mate-desktop atrilAtril's CBT comic book parsing vulnerable to Remote Code Execution9.6 Critical
- clerk javascript@clerk/nextjs auth() and getAuth() methods vulnerable to insecure direct object reference (IDOR)9.1 Critical
- carmelogarcia employee profile management systemcode-projects Employee Profile Management System edit_position_query.php cross site scripting3.5 Low
- acritum femitter serverAcritum Femitter Server path traversal4.3 Medium
- qemu, red hat enterprise linux 6, enterprise linux 7 +4 more +6 moreQemu: vnc: null pointer dereference in qemu_clipboard_request()6.5 Medium
- code-projects employee profile management systemcode-projects Employee Profile Management System file_table.php sql injection5.5 Medium
- code-projects employee profile management systemcode-projects Employee Profile Management System download.php path traversal3.5 Low
- nvidia dgx a100, dgx a100 firmware +1 moreCVE4.2 Medium
- nvidia dgx a100, dgx a100 firmware +1 moreCVE6.5 Medium
- nvidia dgx a100, dgx a100 firmware +1 moreCVE6.6 Medium
- nvidia dgx a100, dgx a100 firmware +1 moreCVE6.8 Medium
- nvidia dgx a100, dgx a100 firmware +1 moreCVE7.5 High
- nvidia dgx a100, dgx a100 firmware +1 moreCVE7.5 High
- nvidia dgx a100, dgx a100 firmware +1 moreCVE9.0 Critical
- nvidia dgx a100, dgx a100 firmware +1 moreCVE9.3 Critical
- nvidia dgx a100, dgx a100 firmware +1 moreCVE9.3 Critical
- code-projects online faculty clearancecode-projects Online Faculty Clearance HTTP GET Request delete_faculty.php sql injection6.3 Medium
- code-projects online faculty clearance, fabian online faculty clearance system +1 morecode-projects Online Faculty Clearance HTTP POST Request admin_view_info.php sql injection6.3 Medium
streamlitPyPIMinor fix to previous patch for CVE-2022-359185.3 Medium- code-projects online faculty clearance, fabian online faculty clearance system +1 morecode-projects Online Faculty Clearance HTTP POST Request designee_view_status.php sql injection6.3 Medium
- nvidia triton inference serverCVE7.5 High
- ivanti connect secure, policy secure, connect secure and policy secure +2 more +4 moreA command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and...9.1 Critical
- ivanti ics, policy secure, connect secure and policy secure +2 more +4 moreAn authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti...8.2 High
- Show moreLoading…