CVEs published in January 2024
2,664 vulnerabilities, 306 critical, 14 exploited.
- progress openedge, openedge innovation +1 moreProgress Application Server (PAS) for OpenEdge Denial of Service7.5 High
- progress openedge, openedge innovation +1 moreProgress Application Server (PAS) for OpenEdge File Upload via Directory Traversal9.1 Critical
- macroturk macro-belReflected XSS in Macroturk's Macro-Bel6.1 Medium
- ibm app connect enterpriseIBM App Connect Enterprise denial of service9.1 Critical
- mergen software quality management systemSQLi in Mergen Soft Quality Management System9.8 Critical
- plone, plone cms cms +1 moreCross-Frame Scripting (XFS) on Plone CMS6.3 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)5.4 Medium
- adobe experience managerAdobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Medium
- idmsistemas sinergia, sinergia, sinergia 2.0, and sinergia corporativo +1 moreOmission of key-controlled authorization in Qsige6.5 Medium
- bootstrapped wp recipe makerWP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag'6.4 Medium
- bootstrapped wp recipe makerWP Recipe Maker <= 9.1.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- bootstrapped wp recipe makerWP Recipe Maker <= 9.1.0 - Reflected Cross-Site Scripting via Referer6.1 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn autotest driver, there is a possible out of bounds write due to improper input validation....4.4 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn drm driver, there is a possible out of bounds write due to a missing bounds check. This could...4.4 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn vsp driver, there is a possible out of bounds write due to a missing bounds check. This could...4.4 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn jpg driver, there is a possible out of bounds write due to a missing bounds check. This could...4.4 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn jpg driver, there is a possible out of bounds write due to a missing bounds check. This could...4.4 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn telephone service, there is a possible improper input validation. This could lead to local...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn vsp driver, there is a possible use after free due to a logic error. This could lead to local...4.4 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn video decoder, there is a possible out of bounds read due to improper input validation. This...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn video decoder, there is a possible improper input validation. This could lead to local denial...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn video decoder, there is a possible out of bounds read due to improper input validation. This...5.5 Medium
- google android, unisoc (shanghai) technologies co., ltd. sc7731e/sc9832e/sc9863a/t310/t606/t612/t616/t610/t618/t760/t770/t820/s8000 +1 moreIn jpg driver, there is a possible missing permission check. This could lead to local information...4.4 Medium
- 201206030 novel-plusNovel-Plus list sql injection5.5 Medium
- citrix session recording session recording, cloud software group citrix session recording, citrix virtual apps and desktops +2 moreCross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross...5.0 Medium
- iperov deepfacelabDeepFaceLab Util.py deserialization5.3 Medium
- phpgurukul company visitor management systemPHPGurukul Company Visitor Management System search-visitor.php cross site scripting3.5 Low
- karjasoft sami http serverKarjasoft Sami HTTP Server HTTP HEAD Rrequest denial of service5.3 Medium
- phpgurukul company visitor management systemPHPGurukul Company Visitor Management System search-visitor.php sql injection6.3 Medium
- flycms project flycmsFlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/email...8.8 High
- flycms project flycmsFlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerbility via /system/site...8.8 High
- flycms project flycmsFlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/email...8.8 High
- flycms project flycmsFlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/admin...8.8 High
- flycms project flycmsFlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/links/add_link8.8 High
- flycms project flycmsFlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/score...8.8 High
- flycms project flycmsFlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/admin...8.8 High
- flycms project flycmsFlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/user/group_update8.8 High
- flycms project flycmsFlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/user/group_save.8.8 High
- flycms project flycmsFlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/score/del.8.8 High
- flycms project flycmsFlyCms 1.0 is vulnerable to Cross Site Scripting (XSS) in the email settings of the website...5.4 Medium
- flycms project flycmsFlyCms 1.0 is vulnerable to Cross Site Scripting (XSS) in the system website settings website...5.4 Medium
- tortall yasmA memory leak issue discovered in YASM v.1.3.0 allows a local attacker to cause a denial of...5.5 Medium
- tenhot tws-200 firmwareAn issue discovered in TenghuTOS TWS-200 firmware version:V4.0-201809201424 allows a remote...8.8 High
- cdebyte e880-ir01 firmwareAn issue discovereed in EBYTE E880-IR01-V1.1 allows an attacker to obtain sensitive information...7.5 High
- zohocorp manageengine servicedesk plus mspZoho ManageEngine ServiceDesk Plus MSP before 14504 allows stored XSS (by a low-privileged...5.4 Medium
- sonicwall capture client, netextender +1 moreSonicWall Capture Client version 3.7.10, NetExtender client version 10.2.337 and earlier versions...5.5 Medium
- pyload, pyload-ng project pyload-ng +1 moreCross-Site Request Forgery on any API call in pyLoad may lead to admin privilege escalation9.7 Critical
- project worlds visitor management systemProject Worlds Visitor Management System URL dataset.php cross site scripting4.3 Medium
- zhiyun-tech zhihuiyunZhiHuiYun Search ImageController.php download_network_image server-side request forgery6.3 Medium
- statamic cmsYunyou CMS Common.php unrestricted upload7.3 High
- Show moreLoading…