CVEs published in January 2024
2,664 vulnerabilities, 306 critical, 14 exploited.
- dogukanurker flaskblogUser profile page vulnerable to Cross Site Scripting (XSS) in flaskBlog6.5 Medium
- gluwa creditcoinBinary Planting Attack on Windows Platforms in Creditcoin3.3 Low
- cloud citrix storefrontCross-site scripting (XSS)5.4 Medium
- citrix netscaler adc, netscaler adc and netscaler gateway, netscaler gateway +1 more +3 moreDenial of Service8.2 High
- citrix netscaler adc, netscaler adc and netscaler gateway, netscaler gateway +1 more +3 more[PROBLEMTYPE] in [COMPONENT] in [VENDOR] [PRODUCT] [VERSION] on [PLATFORMS] allows [ATTACKER] to ...5.5 Medium
github.com/kudelskisecurity/crystals-goGocrystals-go vulnerable to KyberSlash (timing side-channel attack for Kyber)No score- avaya aura experience portal, experience portal manager +1 moreAvaya Experience Portal Manager Insecure Direct Object Reference Vulnerabilities5.7 Medium
- sparksuite simplemdeSparksuite SimpleMDE iFrame cross site scripting4.3 Medium
- themeinprogress wip custom loginWordPress WIP Custom Login Plugin <= 1.2.7 is vulnerable to Broken Access Control5.4 Medium
- codepeople wp time slots booking formWordPress WP Time Slots Booking Form Plugin <= 1.1.76 is vulnerable to Broken Access Control4.3 Medium
- wp job portal – a complete job board, wpjobportal wp job portal +1 moreWordPress WP Job Portal Plugin <= 2.0.1 is vulnerable to Broken Access Control5.4 Medium
- kaizencoders traffic managerWordPress Traffic Manager Plugin <= 1.4.5 is vulnerable to Broken Access Control5.4 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar information disclosure3.7 Low
- drupal, drupal core +1 moreDrupal core - Moderately critical - Denial of Service - SA-CORE-2024-0017.5 High
- sedlex image zoomWordPress Image Zoom Plugin <= 1.8.8 is vulnerable to Broken Access Control5.4 Medium
- cisco thousandeyes enterprise agent, thousandeyes recorder application +1 moreA vulnerability in the web-based management interface of Cisco ThousandEyes Enterprise Agent,...6.8 Medium
- cisco business wireless access point software, wap371 firmware +1 moreA vulnerability in the web-based management interface of the Cisco WAP371 Wireless-AC/N Dual...6.5 Medium
- cisco prime infrastructure, evolved programmable network manager, evolved programmable network manager (epnm) +2 moreA vulnerability in the application CLI of Cisco Prime Infrastructure and Cisco Evolved...6.0 Medium
- cisco prime infrastructure, evolved programmable network manager +1 moreA vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow...6.5 Medium
- cisco evolved programmable network manager (epnm), prime infrastructure, evolved programmable network manager +2 moreA vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco...6.5 Medium
- cisco prime infrastructure, evolved programmable network manager (epnm), evolved programmable network manager +2 moreA vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow...4.8 Medium
- cisco identity services engine, identity services engine software +1 moreA vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE)...4.8 Medium
- cisco unity connectionA vulnerability in the web-based management interface of Cisco Unity Connection could allow an...7.3 High
- cisco broadworks application delivery platform, broadworks xtended services platform, broadworks +2 moreA vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery...4.8 Medium
- zorem advanced local pickup for woocommerceWordPress Advanced Local Pickup for WooCommerce Plugin <= 1.5.2 is vulnerable to Broken Access Control5.4 Medium
- brainstorm force ultimate addons for beaver builder – lite, brainstormforce ultimate addons for beaver builder +1 moreWordPress Ultimate Addons for Beaver Builder – Lite Plugin <= 1.5.5 is vulnerable to Broken Access Control4.3 Medium
- mythemeshop url shortener by mythemeshop, url shortener +1 moreWordPress URL Shortener by MyThemeShop Plugin <= 1.0.17 is vulnerable to Broken Access Control5.4 Medium
- vinoj cardoza 3d tag cloud, cardozatechnologies cardoza-3d-tag-cloud +1 moreWordPress 3D Tag Cloud Plugin <= 3.8 is vulnerable to Cross Site Request Forgery (CSRF)7.1 High
- magneticone cart2cart: magento to woocommerce migration, magento to woocommerce migration +1 moreWordPress Cart2Cart: Magento to WooCommerce Migration Plugin <= 2.0.0 is vulnerable to Broken Access Control5.4 Medium
- algol.plus advanced dynamic pricing for woocommerceWordPress Advanced Dynamic Pricing for WooCommerce Plugin <= 4.1.5 is vulnerable to Broken Access Control6.3 Medium
- zorem sales report email for woocommerceWordPress Sales Report Email for WooCommerce Plugin <= 2.8 is vulnerable to Broken Access Control4.3 Medium
- progress moveit transferMissing Server-Side Input Validation in HTTP Parameter7.1 High
- dcgws hreflang tags liteWordPress HREFLANG Tags Lite Plugin <= 2.0.0 is vulnerable to Broken Authentication6.5 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +15 more +17 moreKernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination7.0 High
- sarveshmrao wp discord inviteWP Discord Invite < 2.5.1 - Arbitrary Settings Update via CSRF6.5 Medium
- tracktheclick track the clickTrack The Click < 0.3.12 - Author+ Time-Based Blind SQL Injection8.8 High
- explorerplusplus explorer++.exe, explorer\+\+ +1 moreBuffer Overflow Vulnerability in Explorer++7.3 High
- cires21 c21 live encoder and live mosaic, live encoder +1 moreUnrestricted upload of dangerous file types in C21 Live Encoder and Live Mosaic10.0 Critical
- cires21 c21 live encoder and live mosaic, live encoder +1 moreInadequate access control in C21 Live Encoder and Live Mosaic9.8 Critical
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreKernel: deadlock leading to denial of service in tipc_crypto_key_revoke5.5 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreKernel: potential deadlock on &net->sctp.addr_wq_lock leading to dos5.5 Medium
h2crates.ioResource exhaustion vulnerability in h2 may lead to Denial of Service (DoS)No score- warfareplugins social warfare, social sharing plugin – social warfare +1 moreSocial Warfare <= 3.5.2 - Remote Code Execution10.0 Critical
- hathway skyworth router cm5100, skyworthdigital cm5100 firmware +1 moreBuffer Overflow vulnerability in Skyworth Router6.5 Medium
- hathway skyworth router cm5100, skyworthdigital cm5100 firmware +1 moreBuffer Overflow vulnerability in Skyworth Router6.5 Medium
- hathway skyworth router cm5100, skyworthdigital cm5100 firmware +1 moreCleartext Submission of Password vulnerability in Skyworth Router7.5 High
- hathway skyworth router cm5100, skyworthdigital cm5100 firmware +1 moreCleartext Submission of Password vulnerability in Skyworth Router7.5 High
- hathway skyworth router cm5100, skyworthdigital cm5100 firmware +1 moreStored Cross Site Scripting Vulnerability in Skyworth Router6.9 Medium
- hathway skyworth router cm5100, skyworthdigital cm5100 firmware +1 moreStored Cross Site Scripting Vulnerability in Skyworth Router6.9 Medium
- hathway skyworth router cm5100, skyworthdigital cm5100 firmware +1 moreStored Cross Site Scripting Vulnerability in Skyworth Router6.9 Medium
- Show moreLoading…