CVEs published in January 2024
2,664 vulnerabilities, 306 critical, 14 exploited.
ca-certificatesTuxCareUpdate of ca-certificatesNo scoreca-certificatesTuxCareUpdate of ca-certificatesNo scoreca-certificatesTuxCareUpdate of ca-certificatesNo scoreca-certificatesTuxCareUpdate of ca-certificatesNo scoreca-certificatesTuxCareUpdate of alt-phpNo scoreca-certificatesTuxCareUpdate of alt-phpNo score- codeastro online railway reservation system, online railway reservation system project railway reservation system +1 moreCodeAstro Online Railway Reservation System pass-profile.php cross site scripting3.5 Low
ca-certificatesTuxCareUpdate of ca-certificatesNo score- codeastro internet banking systemCodeAstro Internet Banking System pages_client_signup.php redirect3.5 Low
- uniview isc 2500-s, isc 2500-s firmware +1 moreUniview ISC 2500-S VM.php setNatConfig os command injection8.0 High
- autolabAutolab has Path Traversal vulnerability in Assessment functionality4.9 Medium
- cloudlinux cagefsCloudLinux CageFS 7.0.8-2 or below insufficiently restricts file paths supplied to the sendmail...4.4 Medium
- cloudlinux cagefsCloudLinux CageFS 7.1.1-1 or below passes the authentication token as command line argument. In...7.8 High
- spring framework, vmware spring framework +1 moreCVE-2024-22233: Spring Framework server Web DoS Vulnerability7.5 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreKernel: use-after-free while changing the mount option in __ext4_remount leading6.7 Medium
- anglersnet co,.ltd. access analysis cgi an-analyzer, anglers-net cgi an-anlyzer +1 moreOpen redirect vulnerability in Access analysis CGI An-Analyzer released in 2023 December 31 and...6.1 Medium
- linzhaoguan pb-cmsLinZhaoguan pb-cms Comment cross site scripting3.5 Low
mrubyOSS-FuzzHeap-buffer-overflow in mrb_memsearchNo scoremrubyOSS-FuzzHeap-buffer-overflow in mrb_memsearchNo score- any-capture any sound recorderAny-Capture Any Sound Recorder Registration memory corruption5.3 Medium
squidDebiansquid - regression updateNo score- unix4lyfe darkhttpddarkhttpd before 1.15 uses strcmp (which is not constant time) to verify authentication, which...9.8 Critical
- unix4lyfe darkhttpddarkhttpd through 1.15 allows local users to discover credentials (for --auth) by listing...5.5 Medium
- dremioDremio before 24.3.1 allows path traversal. An authenticated user who has no privileges on...8.8 High
- gabrieleventuri pandasaiCode execution in pandasai9.8 Critical
- llamaindexSQL injection in llama-index9.8 Critical
- deepwisdom metagptCode execution in metagpt8.8 High
- dedecmsDedeCMS 5.7.112 has a File Upload vulnerability via uploads/dede/module_upload.php.8.8 High
- blitiri chasquidchasquid HTTP Request/Response Smuggling vulnerability7.5 High
- quest-analytics iqcrmSQL Injection vulnerability in Quest Analytics LLC IQCRM v.2023.9.5 allows a remote attacker to...9.8 Critical
- technicolor tc8715d firmwareTechnicolor TC8715D devices have predictable default WPA2 security passwords. An attacker who...8.8 High
- jensenofscandinavia eagle 1200ac firmwareJensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a command injection...7.8 High
- contiki-ng tinydtlsAn issue was discovered in Contiki-NG tinyDTLS through 2018-08-30. One incorrect handshake could...9.8 Critical
- clojureClojure classes can be used to craft a serialized object that runs arbitrary code on deserialization9.8 Critical
- codeastro internet banking systemCodeAstro Internet Banking System pages_client_signup.php cross site scripting3.5 Low
- nsasoft sharealarmproNsasoft ShareAlarmPro Registration memory corruption5.3 Medium
- nsasoft product key explorerNsasoft Product Key Explorer Registration memory corruption5.3 Medium
- echa.europa iuclidEuropean Chemicals Agency IUCLID Desktop Installer iuclid6.exe default permission4.4 Medium
- comex shlexMultiple issues involving quote API in shlex3.2 Low
- d-link dir-859, dir-859 router, dlink dir-859 firmware +2 moreD-Link DIR-859 HTTP POST Request hedwig.cgi path traversal5.3 Medium
- go4rayyan scumblrgo4rayyan Scumblr Task cross site scripting2.4 Low
apache-poiOSS-FuzzSecurity exception in java.base/java.util.Arrays.copyOfNo scoreicuOSS-FuzzStack-buffer-overflow in icu_75::PluralRuleParser::parseNo scoresubunitDebiansubunit - bugfix updateNo score- trustedfirmware mbed tlsAn issue was discovered in Mbed TLS 3.5.1. There is persistent handshake denial if a client sends...7.5 High
- embedchainReDoS in Embedchain7.5 High
- embedchainCode execution in Embedchain9.8 Critical
- llamahubUnsafe yaml deserialization in llama-hub9.8 Critical
- ubeeinteractive ddw365 firmwareUbee DDW365 XCNDDW365 and DDW366 XCNDXW3WB devices have predictable default WPA2 PSKs that could...8.8 High
- ghostCross-site Scripting in Ghost6.1 Medium
- Show moreLoading…