CVEs published in January 2024
2,664 vulnerabilities, 306 critical, 14 exploited.
- unknown easy forms for mailchimpEasy Forms for Mailchimp <= 6.8.10 - Admin+ Stored Cross-Site Scripting4.8 Medium
- estatik, unknown estatik real estate plugin +1 moreEstatik Real Estate Plugin < 4.1.1 - Reflected XSS6.1 Medium
- js morisset jsm file get contents() shortcode, surniaulula jsm file get contents\(\) shortcode +1 moreJSM file_get_contents() Shortcode < 2.7.1 - Contributor+ SSRF8.8 High
- unknown post smtp mailer, wpexperts post smtp +1 morePost SMTP < 2.8.7 - Admin+ SQL Injection7.2 High
- themeum wp crowdfundingWP Crowdfunding < 2.1.10 - Admin+ Stored XSS4.8 Medium
- unknown essential blocksEssential Blocks < 4.4.3 - Unauthenticated Local File Inclusion9.8 Critical
- estatik, unknown estatik real estate plugin +1 moreEstatik Real Estate Plugin < 4.1.1 - Subscriber+ Arbitrary Option Update6.5 Medium
- easy.jobs, unknown easy.jobs- best recruitment plugin for job board listing, manager, career page for elementor & gutenberg +1 moreeasy.jobs < 2.4.7 - Subscriber+ Arbitrary Settings Update4.3 Medium
- estatik, unknown estatik real estate plugin +1 moreEstatik Real Estate Plugin < 4.1.1 - Unauthenticated PHP Object Injection9.8 Critical
- spider-themes eazydocsEazyDocs < 2.3.6 - Unauthenticated Arbitrary Posts Deletion and Document Management7.5 High
- keap official opt-in forms, unknown keap official opt-in forms +1 moreKeap Official Opt-in Forms <= 1.0.11 - Admin+ Stored XSS4.8 Medium
- paxtechnology paydroid, pax technology pos terminals +1 morePAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can...7.8 High
- paxtechnology paydroid, pax technology pos terminals +1 morePAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can...7.8 High
- pax technology a50, paxtechnology paydroid, pax technology a920 pro +2 morePAX A920Pro/A50 devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow...6.8 Medium
- pax technology a920, paxtechnology paydroid +1 morePAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature...7.6 High
- paxtechnology paydroid, pax technology pos terminals +1 morePAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.45_20230314 or earlier can...6.8 Medium
- adobe acrobat, acrobat for edge, microsoft edge chromium +2 moreNew Edge T5 MSRC Case [DCMSFT-1081]5.5 Medium
- adobe acrobat, acrobat for edge, microsoft edge chromium +2 moreT5 Acrobat JS vulnerability - Exploitable crash via t5::javascript::get_page_num_words5.5 Medium
- hashgraph guardian, nozomi networks cmc +1 moreCheck Point IoT integration: WebSocket returns assets data without authentication in Guardian/CMC before 23.3.06.3 Medium
- apache iotdbApache IoTDB: Remote Code Execution (RCE) risk via the UDF9.8 Critical
- apache shiroApache Shiro before 1.13.0 or 2.0.0-alpha-4, may be susceptible to a path traversal attack that results in an authentication bypass when used together with path rewriting6.5 Medium
- apache solrApache Solr: Host environment variables are published via the Metrics API6.5 Medium
- debian linux, linux kernel, red hat enterprise linux 6 +25 more +27 moreKernel: null pointer dereference vulnerability in ida_free in lib/idr.c6.2 Medium
- 3rrr-btob 3r-tmc01 firmware, 3r-tmc02 firmware, 3r-tmc03 firmware +9 more +11 moreInsufficient technical documentation issue exists in thermal camera TMC series all firmware...4.6 Medium
- freefloat ftp serverFreeFloat FTP Server SIZE Command denial of service5.3 Medium
- codecrafters ability ftp serverAbility FTP Server APPE Command denial of service5.3 Medium
- easyftpEasyFTP LIST Command denial of service5.3 Medium
- codecanyon rise ultimate project manager, rise rise ultimate project manager +1 moreCodeCanyon RISE Ultimate Project Manager signin redirect6.9 Medium
- codeastro real estate management systemCodeAstro Real Estate Management System propertydetail.php sql injection6.3 Medium
- tenda w9, w9 firmware +1 moreTenda W9 httpd formWifiMacFilterGet stack-based overflow8.8 High
- tenda w9, w9 firmware +1 moreTenda W9 httpd formAddSysLogRule stack-based overflow8.8 High
- tenda w9, w9 firmware +1 moreTenda W9 httpd formOfflineSet stack-based overflow6.3 Medium
- tenda w9, w9 firmware +1 moreTenda W9 httpd formQosManage_user stack-based overflow8.8 High
- intumit smartrobotIntumit inc. SmartRobot - Remote Code Execution9.8 Critical
- tenda w9, w9 firmware +1 moreTenda W9 httpd formQosManage_auto stack-based overflow8.8 High
- tenda w9, w9 firmware +1 moreTenda W9 httpd setWrlBasicInfo stack-based overflow8.8 High
- tenda w9, w9 firmware +1 moreTenda W9 httpd setWrlAccessList stack-based overflow8.8 High
- tenda pa6, tendacn pa6 firmware +1 moreTenda PA6 httpd portmap cgiPortMapAdd stack-based overflow8.8 High
- netvision airpassNetVision Information airPASS - Path Traversal7.5 High
- tenda a15, a15 firmware +1 moreTenda A15 Web-based Management Interface SetOnlineDevName stack-based overflow7.2 High
- tenda a15, a15 firmware +1 moreTenda A15 Web-based Management Interface SetOnlineDevName stack-based overflow7.2 High
- tenda a15, a15 firmware +1 moreTenda A15 Web-based Management Interface WifiExtraSet set_repeat5 stack-based overflow8.6 High
- tenda a15, a15 firmware +1 moreTenda A15 Web-based Management Interface setBlackRule stack-based overflow7.2 High
- cxbsoft post-officeCXBSoft Post-Office HTTP POST Request reg_go.php sql injection5.5 Medium
- cxbsoft post-officeCXBSoft Post-Office HTTP POST Request login_auth.php sql injection5.5 Medium
- cxbsoft post-officeCXBSoft Post-Office HTTP POST Request update_go.php sql injection5.5 Medium
- cxbsoft url-shortingCXBSoft Url-shorting HTTP POST Request update_go.php sql injection6.3 Medium
- cxbsoft url-shortingCXBSoft Url-shorting HTTP POST Request short_to_long.php sql injection5.5 Medium
- openssl, netapp 500f firmware, 8300 firmware +31 more +33 moreExcessive time spent checking invalid RSA public keys5.9 Medium
- gentoo ebuild for slurmpkg_postinst in the Gentoo ebuild for Slurm through 22.05.3 unnecessarily calls chown to assign...9.8 Critical
- Show moreLoading…