CVEs published in January 2024
2,664 vulnerabilities, 306 critical, 14 exploited.
- hyperledger ursaCL-Signatures Revocation Scheme in Ursa has flaws that allow a holder to demonstrate non-revocation of a revoked credential6.5 Medium
- hyperledger ursaUrsa CL-Signatures Revocation allows verifiers to generate unique identifiers for holders6.5 Medium
- hyperledger ursaUnlinkability broken in ursa when verifiers use malicious keys3.3 Low
readthedocs-sphinx-searchPyPIreadthedocs-sphinx-search vulnerable to cross-site scripting when including search results from malicious projects6.3 Medium- ujcms jspxcmsJspxcms Document Management Page InfoController.java cross site scripting3.5 Low
- hypr workforce accessImproper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce...7.2 High
- hypr workforce accessImproper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce...6.4 Medium
- hypr workforce accessImproper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in HYPR...5.3 Medium
- hypr workforce accessImproper Input Validation vulnerability in HYPR Workforce Access on Windows allows Path Traversal...7.0 High
- github enterprise serverPrivilege Escalation by Code Injection in the Management Console in GitHub Enterprise Server6.5 Medium
- github enterprise serverUnsafe Reflection in Github Enterprise Server leading to Command Injection7.2 High
- atlassian sourcetree, sourcetree for mac, sourcetree for windows +2 moreRejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because...7.8 High
- atlassian confluence data center, confluence server +1 moreRejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because...7.5 High
- integration objects opc ua server toolkitIntegration Objects OPC UA Server Toolkit Improper Output Neutralization for Logs5.3 Medium
- facebook meta spark studio, meta platforms, inc spark studio +1 morePrior to v176, when opening a new project Meta Spark Studio would execute scripts defined inside...7.8 High
- hcl software bigfix osd bare metal server webui, hcltechsw bigfix bare osd metal server webui +1 moreHCL BigFix OSD Bare Metal Server WebUI is affected by missing or insecure tags5.6 Medium
- amd athlon 3000g firmware, instinct mi100 firmware, instinct mi210 firmware +129 more +131 moreGPU kernel implementations susceptible to memory leak6.5 Medium
- totolink x2000r, x2000r firmware +1 moreTotolink X2000R formMapDelDevice command injection5.3 Medium
- tianocore edk2Buffer Overflow in EDK II Network Package8.3 High
- tianocore edk2Infinite loop in EDK II Network Package7.5 High
- tianocore edk2Infinite loop in EDK II Network Package7.5 High
- tianocore edk2Buffer Overflow in EDK II Network Package8.3 High
- tianocore edk2Use of a Weak PseudoRandom Number Generator in EDK II Network Package5.3 Medium
- tianocore edk2Predictable TCP ISNs in EDK II Network Package5.8 Medium
- tianocore edk2Out-of-Bounds Read in EDK II Network Package6.5 Medium
- tianocore edk2Buffer Overflow in EDK II Network Package8.3 High
- tianocore edk2Out-of-Bounds Read in EDK II Network Package6.5 Medium
- totolink lr1200gb, lr1200gb firmware +1 moreTotolink LR1200GB cstecgi.cgi UploadCustomModule stack-based overflow8.8 High
- hcl software bigfix osd bare metal server webui, hcltechsw bigfix bare osd metal server webui +1 moreHCL BigFix OSD Bare Metal Server WebUI is affected by missing or insecure tags5.6 Medium
- gravitymaster product enquiry for woocommerceProduct Enquiry for WooCommerce < 3.2 - Reflected XSS6.1 Medium
- artplacer widget, unknown artplacer widget +1 moreArtPlacer Widget < 2.20.7 - Editor+ SQLi8.8 High
- lightspeedhq ecwid ecommerce shopping cartEcwid Ecommerce Shopping Cart < 6.12.5 - Arbitrary Plugin Settings Change via CSRF4.3 Medium
- royal-elementor-addons royal elementor addons, unknown royal elementor addons and templates +1 moreRoyal Elementor Addons and Templates < 1.3.81 - Unauthenticated Arbitrary Post Read7.5 High
- ashanjay eventon, unknown eventon premium +1 moreEventON (Free < 2.2.8, Premium < 4.5.6) - Unauthenticated Arbitrary Post Metadata Update6.1 Medium
- ashanjay eventonEventON (Free < 2.2.8, Premium < 4.5.5) - Unauthenticated Email Address Disclosure5.3 Medium
- peepso, unknown community by peepso +1 moreCommunity by PeepSo < 6.3.1.2 - User Post Creation via CSRF4.3 Medium
- davidjmiller voting recordVoting Record <= 2.0 - Settings Update to Stored XSS via CSRF5.4 Medium
- ari-soft contact form 7 connectorContact Form 7 Connector < 1.2.3 - Reflected XSS6.1 Medium
- davidjmiller voting recordVoting Record <= 2.0 - Subscriber+ Stored XSS5.4 Medium
- ashanjay eventonEventON (Free < 2.2.8, Premium < 4.5.5) - Reflected XSS6.1 Medium
- morehubbub hubbub lite, unknown hubbub lite (formerly grow social) +1 moreHubbub Lite < 1.32.0 - Admin+ Stored XSS4.8 Medium
- supsystic ultimate maps, unknown ultimate maps by supsystic +1 moreUltimate Maps by Supsystic < 1.2.16 - Admin+ Stored XSS4.8 Medium
- peepso, unknown community by peepso +1 moreCommunity by PeepSo < 6.3.1.2 - Reflected XSS6.1 Medium
- ninjateam fastdupFastDup – Fastest WordPress Migration & Duplicator < 2.2 - Directory Listing to Account Takeover and Sensitive Data Exposure5.3 Medium
- ashanjay eventonEventON (Free < 2.2.7, Premium < 4.5.5) - Admin+ Stored Cross-Site Scripting4.8 Medium
- ashanjay eventonEventON (Free < 2.2.8, Premium < 4.5.5) - Unauthenticated Virtual Event Password Disclosure5.3 Medium
- aguilatechnologies wp customer areaWP Customer Area < 8.2.1 - Subscriber+ Account Address Leak6.5 Medium
- ashanjay eventon, unknown eventon premium +1 moreEventON (Free < 2.2.9, Premium <= 4.5.8) - Unauthenticated Virtual Event Settings Update5.3 Medium
- aguilatechnologies wp customer areaWP Customer Area < 8.2.1 - Subscriber+ Account Address Update4.3 Medium
- all in one b2b for woocommerce project in one b2b for woocommerce, unknown all in one b2b for woocommerce +1 moreAll in One B2B for WooCommerce <= 1.0.3 - Unauthenticated Privilege Escalation7.5 High
- Show moreLoading…