CVEs published in January 2024
2,664 vulnerabilities, 306 critical, 14 exploited.
- hathway skyworth router cm5100, skyworthdigital cm5100 firmware +1 moreStored Cross Site Scripting Vulnerability in Skyworth Router6.9 Medium
- hathway skyworth router cm5100, skyworthdigital cm5100 firmware +1 moreStored Cross Site Scripting Vulnerability in Skyworth Router6.9 Medium
- hathway skyworth router cm5100, skyworthdigital cm5100 firmware +1 moreStored Cross Site Scripting Vulnerability in Skyworth Router6.9 Medium
- hathway skyworth router cm5100, skyworthdigital cm5100 firmware +1 moreStored Cross Site Scripting Vulnerability in Skyworth Router6.9 Medium
- hathway skyworth router cm5100, skyworthdigital cm5100 firmware +1 moreStored Cross Site Scripting Vulnerability in Skyworth Router6.9 Medium
- hathway skyworth router cm5100, skyworthdigital cm5100 firmware +1 moreStored Cross Site Scripting Vulnerability in Skyworth Router6.9 Medium
- hathway skyworth router cm5100, skyworthdigital cm5100 firmware +1 moreStored Cross Site Scripting Vulnerability in Skyworth Router6.9 Medium
- hathway skyworth router cm5100, skyworthdigital cm5100 firmware +1 moreStored Cross Site Scripting Vulnerability in Skyworth Router6.9 Medium
- hathway skyworth router cm5100, skyworthdigital cm5100 firmware +1 moreStored Cross Site Scripting Vulnerability in Skyworth Router6.9 Medium
- hathway skyworth router cm5100, skyworthdigital cm5100 firmware +1 moreStored Cross Site Scripting Vulnerability in Skyworth Router6.9 Medium
- hathway skyworth router cm5100, skyworthdigital cm5100 firmware +1 moreStored Cross Site Scripting Vulnerability in Skyworth Router6.9 Medium
- hathway skyworth router cm5100, skyworthdigital cm5100 firmware +1 moreStored Cross Site Scripting Vulnerability in Skyworth Router6.9 Medium
- hathway skyworth router cm5100, skyworthdigital cm5100 firmware +1 moreStored Cross Site Scripting Vulnerability in Skyworth Router6.9 Medium
- hathway skyworth router cm5100, skyworthdigital cm5100 firmware +1 moreStored Cross Site Scripting Vulnerability in Skyworth Router6.9 Medium
- hathway skyworth router cm5100, skyworthdigital cm5100 firmware +1 moreStored Cross Site Scripting Vulnerability in Skyworth Router6.9 Medium
- hathway skyworth router cm5100, skyworthdigital cm5100 firmware +1 moreStored Cross Site Scripting Vulnerability in Skyworth Router6.9 Medium
- hathway skyworth router cm5100, skyworthdigital cm5100 firmware +1 moreStored Cross Site Scripting Vulnerability in Skyworth Router6.9 Medium
- hathway skyworth router cm5100, skyworthdigital cm5100 firmware +1 moreStored Cross Site Scripting Vulnerability in Skyworth Router6.9 Medium
- debian linux, linux kernel, fedoraproject fedora +5 more +7 moreKernel: nf_tables: pointer math issue in nft_byteorder_eval()6.6 Medium
- burst-statistics burst statistics, burstbv burst statistics – privacy-friendly wordpress analytics (google analytics alternative) +1 moreBurst Statistics Really Simple Plugins <= 1.5.3 - Authenticated (Editor+) SQL Injection7.2 High
openscOSS-FuzzHeap-use-after-free in iasecc_delete_fileNo score- tozt spreadsheet\The Spreadsheet::ParseXLSX package before 0.30 for Perl allows XXE attacks because it neglects to...6.5 Medium
- codelyfe stupid simple cmsStupid Simple CMS <=1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via the...8.8 High
- codelyfe stupid simple cmsStupid Simple CMS <=1.2.4 is vulnerable to Cross Site Scripting (XSS) in the editing section of...6.1 Medium
- linux-pam, siemens ruggedcom rox mx5000, ruggedcom rox mx5000re +10 more +12 morelinux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked...5.5 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server : Security :...4.4 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...4.9 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...4.9 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...4.9 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...4.9 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...4.9 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...4.9 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...4.9 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security:...5.3 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...6.5 Medium
- oracle mysql serverVulnerability in the MySQL Server product of Oracle MySQL (component: Server: RAPID). Supported...6.5 Medium
- oracle graalvm, graalvm for jdk, jdk +2 more +4 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...4.7 Medium
- oracle graalvm, graalvm for jdk, jdk +2 more +4 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...5.9 Medium
- oracle graalvm, graalvm for jdk, jdk +2 more +4 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...5.9 Medium
- lrx0014 examsysExamSys 9150244 allows SQL Injection via the /Support/action/Pages.php s_score2 parameter.7.5 High
- kodcloud kodboxkodbox v1.49.04 was discovered to contain a cross-site scripting (XSS) vulnerability via the URL...5.4 Medium
- tp-link tapo c200 firmware, tapo c200 v3 firmware, tapo tc70 firmware +2 moreInsecure Permissiosn vulnerability in TP Link TC70 and C200 WIFI Camera v.3 firmware v.1.3.4 and...4.6 Medium
- abocms abo.cmsA Cross-site scripting (XSS) vulnerability in login page php code in Armex ABO.CMS 5.9 allows...6.1 Medium
- abocms abo.cmsCross Site Scripting vulnerability in ABO.CMS v.5.9.3 allows an attacker to execute arbitrary...6.1 Medium
- studionetworksolutions sharebrowserStudio Network Solutions ShareBrowser before 7.0 on macOS mishandles signature verification, aka...9.8 Critical
- webkul qloappsAn issue in webkul qloapps before v1.6.0 allows an attacker to obtain sensitive information via...6.5 Medium
- gruen evewa3Cross Site Scripting (XSS) vulnerability in GRN Software Group eVEWA3 Community version 31...6.1 Medium
- shopwareBlind SQL-injection in DAL aggregations in Shopware9.3 Critical
- shopwareBroken Access Control order API in Shopware4.9 Medium
- shopwareServer-Side Request Forgery (SSRF) in Shopware Flow Builder7.6 High
- Show moreLoading…