CVEs published in January 2024
2,664 vulnerabilities, 306 critical, 14 exploited.
- totolink lr1200gb, lr1200gb firmware +1 moreTotolink LR1200GB cstecgi.cgi setLanguageCfg stack-based overflow8.8 High
- totolink lr1200gb, lr1200gb firmware +1 moreTotolink LR1200GB cstecgi.cgi setIpPortFilterRules stack-based overflow8.8 High
- avo-hq avoStored cross-site scripting (XSS) in `key_value` field in Avo7.3 High
- totolink lr1200gb, lr1200gb firmware +1 moreTotolink LR1200GB cstecgi.cgi setTracerouteCfg stack-based overflow8.8 High
- totolink lr1200gb, lr1200gb firmware +1 moreTotolink LR1200GB cstecgi.cgi setParentalRules stack-based overflow8.8 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreKernel: io_uring: page use-after-free vulnerability via buffer ring mmap7.8 High
- rpm-software-management mock, fedora extra packages for enterprise linux, fedora +1 more +3 moreMock: privilege escalation for users that can access mock configuration6.7 Medium
- totolink lr1200gb, lr1200gb firmware +1 moreTotolink LR1200GB cstecgi.cgi setDiagnosisCfg stack-based overflow8.8 High
- pcman ftp serverPCMan FTP Server USER Command denial of service5.3 Medium
- gnu gnutls, debian linux, fedoraproject fedora +10 more +12 moreGnutls: rejects certificate chain with distributed trust7.5 High
- totolink lr1200gb, lr1200gb firmware +1 moreTotolink LR1200GB cstecgi.cgi setOpModeCfg stack-based overflow8.8 High
- totolink lr1200gb, lr1200gb firmware +1 moreTotolink LR1200GB cstecgi.cgi setSmsCfg stack-based overflow8.8 High
- totolink n350rt, n350rt firmware +1 moreTotolink N350RT Setting cstecgi.cgi access control6.9 Medium
- sandsprite scdbgUncontrolled Resource Consumption vulnerability on Sandsprite scdbg4.0 Medium
- totolink t8, t8 firmware +1 moreTotolink T8 Setting cstecgi.cgi getSysStatusCfg information disclosure5.3 Medium
- gnu gnutls, fedoraproject fedora, red hat enterprise linux 6 +10 more +12 moreGnutls: incomplete fix for cve-2023-59817.5 High
- full compass systems wic1200, xantech wic1200 firmware +1 moreWeak Cryptography for Passwords vulnerability on WIC12007.1 High
- full compass systems wic1200, xantech wic1200 firmware +1 moreCross-Site Request Forgery (CSRF) vulnerability on WIC12004.6 Medium
- full compass systems wic1200, xantech wic1200 firmware +1 moreCross-site scripting (XSS) vulnerability on WIC12005.5 Medium
hplipMageiaUpdated hplip packages fix security vulnerabilitiesNo score- huawei emui, harmonyos +1 moreThe DownloadProviderMain module has a vulnerability in API permission verification. Successful...4.4 Medium
- huawei harmonyosThe nearby module has a privilege escalation vulnerability. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of parameters being not verified in the WMS module. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreBuffer overflow vulnerability in the FLP module. Successful exploitation of this vulnerability...9.8 Critical
- huawei emui, harmonyos +1 moreVulnerability of parameters being not verified in the WMS module. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreComponent exposure vulnerability in the Wi-Fi module. Successful exploitation of this...9.1 Critical
- huawei harmonyosThe Celia Keyboard module has a vulnerability in access control. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of foreground service restrictions being bypassed in the NMS module. Successful...7.5 High
- vmware aria automation, cloud foundation +1 moreAria Automation contains a Missing Access Control vulnerability. An authenticated malicious...9.9 Critical
- huawei emui, harmonyos +1 moreDenial of Service (DoS) vulnerability in the DMS module. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of process priorities being raised in the ActivityManagerService module. Successful...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of permissions being not strictly verified in the WMS module. Successful...7.5 High
- huawei emui, harmonyos +1 morePermission management vulnerability in the multi-screen interaction module. Successful...7.5 High
- huawei harmonyosThe iaware module has a Use-After-Free (UAF) vulnerability. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreData confidentiality vulnerability in the ScreenReader module. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreOut-of-bounds access vulnerability in the device authentication module. Successful exploitation...7.5 High
- easyftp server project serverEasyFTP MKD Command buffer overflow6.3 Medium
- huawei emui, harmonyos +1 morelaunchAnyWhere vulnerability in the ActivityManagerService module. Successful exploitation of...7.5 High
- huawei emui, harmonyos +1 moreUnauthorized file access vulnerability in the wallpaper service module. Successful exploitation...5.3 Medium
- huawei emui, harmonyos +1 moreAuthorization vulnerability in the BootLoader module. Successful exploitation of this...7.5 High
- huawei harmonyosThe sensor module has an out-of-bounds access vulnerability.Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of trust relationships being inaccurate in distributed scenarios. Successful...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of trust relationships being inaccurate in distributed scenarios. Successful...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of trust relationships being inaccurate in distributed scenarios. Successful...7.5 High
- atlassian confluence data center, confluence server +1 moreThis High severity Remote Code Execution (RCE) vulnerability was introduced in version 7.13.0 of...8.6 High
- atlassian confluence data center, confluence server +1 moreThis High severity Remote Code Execution (RCE) vulnerability was introduced in versions 7.13.0 of...8.0 High
- atlassian confluence data center, confluence server +1 moreThis High severity Remote Code Execution (RCE) vulnerability was introduced in version 2.1.0 of...8.3 High
- atlassian confluence data center, confluence data center and server, confluence server +2 moreSummary of Vulnerability A template injection vulnerability on older versions of Confluence Data...10.0 Critical
- atlassian confluence data center, confluence server +1 moreThis High severity RCE (Remote Code Execution) vulnerability was introduced in version 7.19.0 of...7.2 High
- dell emc idrac service module, idrac service module (ism) +1 moreDell iDRAC Service Module, versions 5.2.0.0 and prior, contain an Incorrect Default Permissions...7.0 High
- Show moreLoading…