CVEs published in January 2024
2,664 vulnerabilities, 306 critical, 14 exploited.
- project worlds online time table generatorProject Worlds Online Time Table Generator course_ajax.php sql injection6.3 Medium
- foru cmsForU CMS cms_admin.php sql injection5.5 Medium
- foru cmsForU CMS channel.php file inclusion4.7 Medium
- project worlds student project allocation systemProject Worlds Student Project Allocation System Admin Login Module admin_login.php cross site scripting4.3 Medium
- prosshdProSSHD denial of service5.3 Medium
- freesshdfreeSSHd denial of service5.3 Medium
- code-projects social networking sitecode-projects Social Networking Site Message Page message.php cross site scripting3.5 Low
- jspxcmsJspxcms Survey Label cross site scripting3.5 Low
- factominer factoinvestigateFactoMineR FactoInvestigate HTML Report Generator cross site scripting3.5 Low
seamonkeyopenSUSESecurity update for seamonkeyNo score- liuwy-dlsdys zhglxtliuwy-dlsdys zhglxt HTTP POST Request edit cross site scripting2.4 Low
- d-link dap-1360, dir-1210, dir-1260 +86 more +88 moreD-Link Good Line Router v2 HTTP GET Request devinfo information disclosure5.3 Medium
github.com/cometbft/cometbftGoValidation of `VoteExtensionsEnableHeight` can cause chain halt in Go package github.com/cometbft/cometbftNo score- kjur jsrsasignMarvin Attack of RSA and RSAOAEP decryption in jsrsasign7.5 High
- byzoro smart s150 management platform, smart s150, smart s150 firmware +2 moreByzoro Smart S150 Management Platform Backup File download.php information disclosure3.1 Low
- roxnor wp social login and register social counterWordPress Wp Social Plugin <= 1.9.0 is vulnerable to Sensitive Data Exposure6.5 Medium
- nextend smart slider 3WordPress Smart Slider 3 Plugin <= 3.5.1.9 is vulnerable to PHP Object Injection4.3 Medium
- profilepress membership team paid membership plugin, ecommerce, user registration form, login form, user profile & restrict content – profilepress, properfraction profilepress +1 moreWordPress ProfilePress Plugin <= 4.3.2 is vulnerable to PHP Object Injection6.6 Medium
- miczflor rpi-jukebox-rfid, sourcefabric phoniebox +1 moreMiczFlor RPi-Jukebox-RFID HTTP Request userScripts.php os command injection6.3 Medium
- agence-press css adder, amo for wp – membership management arcstone, arun basil lal admin css mu +18 more +20 moreServer Side Request Forgery (SSRF) vulnerability affecting multiple WordPress plugins8.2 High
- byzoro smart s150 management platform, smart s150 firmware +1 moreByzoro Smart S150 Management Platform userattea.php access control7.3 High
rust-i18n-supportcrates.ioUse-after-free when setting the localeNo score- apache tomcatApache Tomcat: Leaking of unrelated request bodies in default error page5.3 Medium
- webtoffee stripe payment plugin for woocommerce, themehigh payment gateway of stripe for woocommerce +1 moreStripe Payment Plugin for WooCommerce <= 3.7.9 - Unauthenticated SQL Injection9.8 Critical
- gnu coreutils, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreCoreutils: heap overflow in split --line-bytes with very long lines5.5 Medium
- fusionpbxFusionPBX prior to 5.1.0 contains a cross-site scripting vulnerability. If this vulnerability is...4.8 Medium
- asus armoury crateASUS Armoury Crate - Arbitrary File Write9.8 Critical
- ibm storage defender - data protect, storage defender data protect +1 moreIBM Storage Defender HTTP HOST header injection6.5 Medium
- ibm maximo spatial asset management, maximo application suite, maximo asset management +2 moreIBM Maximo Spatial Asset Management server-side request forgery5.4 Medium
- ibm maximo asset management, maximo asset management manage component, maximo application suite +2 moreIBM Maximo Asset Management cross-site request forgery4.3 Medium
- ibm sterling control centerIBM Sterling Control Center directory traversal5.4 Medium
- ibm openpages with watsonIBM OpenPages with Watson privilege escalation8.8 High
- ibm openpages with watsonIBM OpenPages with Watson information disclosure6.8 Medium
- argoproj argo-cd, argo cd +1 moreCross-Site Request Forgery (CSRF) in github.com/argoproj/argo-cd8.4 High
- mintplexlabs anythingllm, mintplex-labs anything-llm +1 moreUnauthenticated Denial of Service (DOS) attack in AnythingLLM7.5 High
libuclOSS-FuzzHeap-use-after-free in ucl_hash_funcNo scorehtslibOSS-FuzzHeap-buffer-overflow in bam_aux_getNo scoreqpdfOSS-FuzzHeap-use-after-free in QPDF::read_xrefNo score- spipSPIP before 4.1.14 and 4.2.x before 4.2.8 allows XSS via the name of an uploaded file. This is...6.1 Medium
- swftoolsswftools 0.9.2 was discovered to contain an Out-of-bounds Read vulnerability via the function...5.5 Medium
- swftoolsswftools 0.9.2 was discovered to contain a heap-use-after-free vulnerability via the function...7.8 High
- swftoolsswftools 0.9.2 was discovered to contain a stack-buffer-underflow vulnerability via the function...7.8 High
- swftoolsswftools 0.9.2 was discovered to contain a heap-use-after-free via the function bufferWriteData...7.8 High
- swftoolsswftools0.9.2 was discovered to contain a global-buffer-overflow vulnerability via the function...7.8 High
- swftoolsA heap-use-after-free was found in SWFTools v0.9.2, in the function swf_DeleteTag at rfxswf.c...7.8 High
- swftoolsA heap-use-after-free was found in SWFTools v0.9.2, in the function input at lex.swf5.c:2620. It...5.5 Medium
- swftoolsA heap-buffer-overflow was found in SWFTools v0.9.2, in the function swf5lex at lex.swf5.c:1321....7.8 High
- swftoolsA global-buffer-overflow was found in SWFTools v0.9.2, in the function countline at swf5compiler...7.8 High
- swftoolsA stack-buffer-underflow vulnerability was found in SWFTools v0.9.2, in the function...7.8 High
- strangebee thehiveStrangeBee TheHive 5.2.0 to 5.2.8 is vulnerable to Cross Site Scripting (XSS) in the case...5.4 Medium
- Show moreLoading…