CVEs published in January 2024
2,664 vulnerabilities, 306 critical, 14 exploited.
- arm mbed tlsAn issue was discovered in Mbed TLS through 3.5.1. In mbedtls_ssl_session_reset, the maximum...7.5 High
- paddlepaddle paddle, paddlepaddle/paddle +1 moreCode Injection in paddlepaddle/paddle9.3 Critical
cosmwasmcrates.io`cosmwasm` is unmaintainedNo score- wpforms, wpforms pro +1 moreThe WPForms Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form...7.2 High
- themegrill colormagColorMag <= 3.1.2 - Missing Authorization to Arbitrary Plugin Installation6.5 Medium
- vektor,inc. vk block patternsVK Block Patterns <= 1.31.1.1 - Cross-Site Request Forgery4.3 Medium
jackson-dataformats-binaryOSS-FuzzSecurity exception in java.base/java.util.Arrays.copyOfNo score- yonyou yonbipAn arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action...9.8 Critical
- yonyou yonbipYonBIP v3_23.05 was discovered to contain a SQL injection vulnerability via the com.yonyou...9.8 Critical
- yonyou yonbipYonBIP v3_23.05 was discovered to contain an arbitrary file read vulnerability via the nc.bs...7.5 High
- yonyou yonbipAn arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action...9.8 Critical
- yonyou yonbipAn arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface of...9.8 Critical
- yonyou yonbipAn issue in yonyou YonBIP v3_23.05 allows a remote attacker to execute arbitrary code via a...9.8 Critical
- weaver e-cologyAn issue in weaver e-cology v.10.0.2310.01 allows a remote attacker to execute arbitrary code via...9.8 Critical
- ncratleos terminal handlerCross Site Request Forgery vulnerability in NCR Terminal Handler v.1.5.1 allows a remote attacker...8.8 High
- popsdiabetes rebelThe POPS! Rebel application 5.0 for Android, in POPS! Rebel Bluetooth Glucose Monitoring System,...4.3 Medium
- ejinshan terminal security systemFile upload vulnerability in ejinshan v8+ terminal security system allows attackers to upload...9.8 Critical
- notaryproject specifications, notation-go +1 moreClient configured with permissive trust policies susceptible to rollback attack in Notary Project4.0 Medium
@keep-network/tbtc-v2npmSPV Merkle proof malleability allows the maintainer to prove invalid transactionsNo score- hecheng leadshopHecheng Leadshop leadshop.php deserialization7.3 High
- garethhk mldong个人开源 mldong DecisionModel.java ExpressionEngine code injection6.3 Medium
- xlightftpd xlight ftp serverXlightftpd Xlight FTP Server Login denial of service5.3 Medium
- efs easy file sharing ftp, easy file sharing ftp server project file sharing ftp server +1 moreEFS Easy File Sharing FTP Login denial of service5.3 Medium
- sourcecodester online tours & travels management system, mayurik online tours \& travels management system +1 moreSourceCodester Online Tours & Travels Management System expense.php exec sql injection6.3 Medium
surrealdbcrates.ioSurrealDB vulnerable to Uncontrolled CPU Consumption via WebSocket Interface7.5 High- smsotSmsot get.php sql injection6.3 Medium
- smsotSmsot HTTP POST Request api.php sql injection6.3 Medium
- jupyter jupyterlab, notebook, fedoraproject fedora +2 morePotential authentication and CSRF tokens leak in JupyterLab7.6 High
- jupyter jupyterlab, notebook, fedoraproject fedora +2 moreStored cross site scripting in Markdown Preview in JupyterLab6.5 Medium
- lenovo app store, app store application +1 moreAn incorrect permissions vulnerability was reported in the Lenovo App Store app that could allow...5.5 Medium
- lenovo vantageA privilege escalation vulnerability was reported in Lenovo Vantage that could allow a local...6.3 Medium
- lenovo vantageA privilege escalation vulnerability was reported in Lenovo Vantage that could allow a local...7.8 High
- lenovo tab m8 hd tb8505f firmware, tab m8 hd tb8505fs firmware, tab m8 hd tb8505x firmware +2 more +4 moreAn information disclosure vulnerability was reported in the Lenovo Tab M8 HD that could allow a...3.3 Low
- lenovo tablet, tab m10 plus gen 3 tb125fu firmware, tab m8 hd tb8505f firmware +4 more +6 moreA privilege escalation vulnerability was reported in some Lenovo tablet products that could allow...6.8 Medium
- intel hid event filter driverInsecure inherited permissions in some Intel HID Event Filter drivers for Windows 10 for some...6.7 Medium
- intel nuc p14e laptop elementIncorrect default permissions in some Intel Integrated Sensor Hub (ISH) driver for Windows 10 for...6.7 Medium
- intel nuc p14e laptop elementImproper access control in some Intel HotKey Services for Windows 10 for Intel NUC P14E Laptop...7.3 High
- intel nuc pro software suiteUncontrolled search path in some Intel NUC Pro Software Suite Configuration Tool software...7.9 High
- intel nuc 8 mainstream-g kit nuc8i5inh firmware, nuc 8 mainstream-g kit nuc8i7inh firmware +1 moreImproper buffer restrictions for some Intel NUC BIOS firmware before version IN0048 may allow a...6.7 Medium
- intel nuc 8 mainstream-g kit nuc8i5inh firmware, nuc 8 mainstream-g kit nuc8i7inh firmware +1 moreImproper input validation for some Intel NUC BIOS firmware before version IN0048 may allow a...7.5 High
- intel nuc 9 pro compute element nuc9v7qnb firmware, nuc 9 pro kit nuc9v7qnb firmware, nuc 9 pro kit nuc9v7qnx firmware +1 more +3 moreImproper input validation for some Intel NUC BIOS firmware before version QN0073 may allow a...7.5 High
- intel nuc bios firmware nuc bios firmware, intel nuc 7 essential nuc7cjysamn firmware, nuc kit nuc7cjyh firmware +4 more +6 moreImproper input validation for some Intel NUC BIOS firmware before version JY0070 may allow a...7.5 High
- intel nuc 8 compute element cm8v5cb firmware, nuc 8 compute element cm8v7cb firmware +1 moreImproper input validation in some Intel NUC 8 Compute Element BIOS firmware may allow a...7.5 High
- intel nuc 8 enthusiast nuc8i7behga firmware, nuc 8 enthusiast nuc8i7bekqa firmware, nuc 8 home nuc8i3behfa firmware +10 more +12 moreImproper input validation in some Intel NUC BIOS firmware may allow a privileged user to...7.5 High
- intel nuc 7 essential nuc7cjysamn firmware, nuc 7 essential pc nuc7cjysal firmware, nuc kit nuc7cjyh firmware +3 more +5 moreImproper buffer restrictions in some Intel NUC BIOS firmware may allow a privileged user to...7.5 High
- pcman ftp serverPCMan FTP Server STOR Command denial of service5.3 Medium
- freerdpFreeRDP integer Overflow leading to Heap Overflow3.7 Low
- dgtlmoon changedetection.io, webtechnologies changedetection +1 morechangedetection.io API endpoint is not secured with API token3.7 Low
- vitejs viteVite dev server option `server.fs.deny` can be bypassed when hosted on case-insensitive filesystem7.5 High
- pcman ftp serverPCMan FTP Server PUT Command denial of service5.3 Medium
- Show moreLoading…