CVEs published in January 2024
2,664 vulnerabilities, 306 critical, 14 exploited.
- drupalDrupal Denial of Service vulnerability7.5 High
- hitachi tuning managerFile and Directory Permission Vulnerability in Hitachi Tuning Manager6.6 Medium
- hitachi device managerGeneration of Error Message Containing Sensitive Information Vulnerability in Hitachi Device Manager5.3 Medium
- hitachi device managerMissing Password Field Masking Vulnerability in Hitachi Device Manager4.6 Medium
- dlink go-rt-ac750 firmwareIn D-LINK Go-RT-AC750 v101b03, the sprintf function in the sub_40E700 function within the cgibin...9.8 Critical
- oretnom23 budget and expense tracker systemBudget and Expense Tracker System v1.0 is vulnerable to SQL Injection via /expense_budget/admin/...7.2 High
- campcodes supplier management systemComplete Supplier Management System v1.0 is vulnerable to SQL Injection via ...7.2 High
- campcodes supplier management systemComplete Supplier Management System v1.0 is vulnerable to SQL Injection via ...7.2 High
- campcodes supplier management systemComplete Supplier Management System v1.0 is vulnerable to SQL Injection via ...7.2 High
- beetl-bbs project beetl-bbsStored Cross Site Scripting in beetl-bbs5.4 Medium
- red hat enterprise linux 6, enterprise linux 6 extended lifecycle support - extension, enterprise linux 7 +14 more +16 moreXorg-x11-server: heap buffer overflow in disabledevice7.8 High
- red hat enterprise linux 6, enterprise linux 6 extended lifecycle support - extension, enterprise linux 7 +12 more +14 moreXorg-x11-server: heap buffer overflow in xisenddevicehierarchyevent7.8 High
- x.org xwayland, fedoraproject fedora, red hat enterprise linux 6 +13 more +15 moreXorg-x11-server: selinux context corruption7.8 High
- fedoraproject fedora, red hat enterprise linux 6, enterprise linux 7 +13 more +15 moreXorg-x11-server: selinux unlabeled glx pbuffer5.5 Medium
- fedoraproject fedora, red hat enterprise linux 6, enterprise linux 6 extended lifecycle support - extension +20 more +22 moreXorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access7.8 High
- debian linux, fedoraproject fedora, red hat enterprise linux 6 +19 more +21 moreXorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer9.8 Critical
- kodcloud kodboxkodbox v1.43 was discovered to contain a cross-site scripting (XSS) vulnerability via the...6.1 Medium
- totolink x6000r firmwareAn issue discovered in sub_4117F8 function in TOTOLINK X6000R V9.4.0cu.852_B20230719 allows...9.8 Critical
- totolink x6000r firmwareAn issue discovered in TOTOLINK X6000R V9.4.0cu.852_B20230719 allows attackers to run arbitrary...9.8 Critical
- stackideas easydiscussSQL injection vulnerability in StackIdeas EasyDiscuss v.5.0.5 and fixed in v.5.0.10 allows a...7.5 High
- ofcms project ofcmsCross Site Scripting vulnerability in OFCMS v.1.14 allows a remote attacker to obtain sensitive...5.4 Medium
- mingsoft mcmsCode injection in mingSoft MCMS7.5 High
- jasper project jasperAn invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local...7.8 High
- mokosmart mkgw1 gateway firmwareAn issue in MOKO TECHNOLOGY LTD MOKOSmart MKGW1 BLE Gateway v.1.1.1 and before allows a remote...8.8 High
- edimax br-6478ac firmwareA stack-based buffer overflow vulnerability in /bin/webs binary in Edimax BR6478AC V2 firmware...9.8 Critical
- prestashop advanced loyalty programAn issue in 202 ecommerce Advanced Loyalty Program: Loyalty Points before v2.3.4 for PrestaShop allows unauthenticated attackers to arbitrarily change an order status.5.3 Medium
- alinto sogoAlinto SOGo 5.8.0 is vulnerable to HTML Injection.6.1 Medium
- knovos discoverySQL injection vulnerability in Knovos Discovery v.22.67.0 allows a remote attacker to execute...8.8 High
- knovos discoveryAn issue in Knovos Discovery v.22.67.0 allows a remote attacker to obtain sensitive information...6.5 Medium
- hummerriskAn issue in HummerRisk HummerRisk v.1.10 thru 1.4.1 allows an authenticated attacker to execute...8.8 High
- emlogEmlog Pro v2.1.14 was discovered to contain a cross-site scripting (XSS) vulnerability via the...6.1 Medium
- kodcloud kodboxAn issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator...9.8 Critical
- webkul bagistoCross-site Scripting in Bagisto4.8 Medium
- horner automation cscapeHorner Automation Cscape Stack-Based Buffer Overflow7.8 High
- linux kernel, netapp ontap tools, red hat enterprise linux 6 +8 more +10 moreKernel: cifs filesystem decryption improper input validation remote code execution vulnerability in function receive_encrypted_standard of client6.8 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +5 more +7 moreKernel: use-after-free after removing device in wb_inode_writeback_end in mm/page-writeback.c7.8 High
libssh2Ubuntulibssh2 vulnerabilityNo score- dedebizDedeBIZ makehtml_freelist_action.php sql injection4.7 Medium
- dedebizDedeBIZ Website Copyright Setting cross site scripting2.4 Low
- fireeye malware analysis (ax), malware analysis +1 moreCross-Site Scripting in FireEye Malware Analysis (AX)5.4 Medium
- fireeye hxtoolOpen Redirect vulnerability in FireEye HXTool5.4 Medium
- fireeye hxtoolCross-Site Scripting in FireEye HXTool5.4 Medium
- fireeye ex, ex 3500 firmware, ex 5500 firmwarea +1 more +3 moreCross-Site Scripting in FireEye EX5.4 Medium
- fireeye endpoint securityImproper cleanup vulnerability in FireEye Endpoint Security6.8 Medium
- fireeye central managementRemote file inclusion vulnerability in FireEye Central Management6.6 Medium
- fireeye central managementXSS vulnerability in FireEye Central Management5.4 Medium
- traccarAn unrestricted file upload vulnerability in traccar leads to RCE8.5 High
- fastify fastify-swagger-ui, smartbear swagger ui +1 moreDefault swagger-ui configuration exposes all files in the module5.3 Medium
- kishorkhambu wp custom widget areaWP Custom Widget Area <= 1.2.5 - Subscriber+ Menus Creation/Deletion/Update4.3 Medium
- demomentsomtres export posts with images, unknown demomentsomtres wordpress export posts with images +1 moreDeMomentSomTres WordPress Export Posts With Images <= 20220825 - Subscriber+ unauthorized data export8.1 High
- Show moreLoading…