CVEs published in January 2024
2,664 vulnerabilities, 306 critical, 14 exploited.
- classlink oneclickA Universal Cross Site Scripting (UXSS) vulnerability in ClassLink OneClick Extension through 10...6.1 Medium
- shelly trv firmwareCleartext Transmission during initial setup in Shelly TRV 20220811-15234 v.2.1.8 allows a local...5.5 Medium
- shelly trv firmwareMissing Integrity Check in Shelly TRV 20220811-152343/v2.1.8@5afc928c allows malicious users to...5.4 Medium
- redhat shim, fedoraproject fedora, red hat enterprise linux 7 +13 more +15 moreShim: out of bounds read when parsing mz binaries5.1 Medium
- redhat shim, fedoraproject fedora, red hat enterprise linux 7 +13 more +15 moreShim: out-of-bound read in verify_buffer_sbat()5.5 Medium
- redhat shim, fedoraproject fedora, red hat enterprise linux 7 +13 more +15 moreShim: out-of-bounds read in verify_buffer_authenticode() malformed pe file6.2 Medium
- redhat shim, fedoraproject fedora, red hat enterprise linux 7 +12 more +14 moreShim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems7.4 High
- redhat shim, red hat enterprise linux 7, enterprise linux 8 +12 more +14 moreShim: rce in http boot support may lead to secure boot bypass8.3 High
- badaix snapcastAn issue was discovered in badaix Snapcast version 0.27.0, allows remote attackers to execute...9.8 Critical
- solax pocket wifi 3 firmwareAn issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. Authentication for web interface...9.8 Critical
- solax pocket wifi 3 firmwareAn issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. An attacker within RF range can...6.5 Medium
- solax pocket wifi 3 firmwareAn issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. The device provides a WiFi...9.8 Critical
- redis redisraftRedis raft master-1b8bd86 to master-7b46079 was discovered to contain an ODR violation via the...9.8 Critical
- canonical ubuntu pipewire-pulseUbuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio...5.5 Medium
- contiki-ng tinydtlsAn issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers...9.8 Critical
- nautobotNautobot has XSS potential in rendered Markdown fields7.1 High
- hono node-server@hono/node-server can't handle "double dots" in URL5.3 Medium
- elijahharry hoolockhoolock does not block Prototype pollution with object-path related utilities6.3 Medium
- tlsfuzzer ecdsa, python-ecdsa +1 morepython-ecdsa vulnerable to Minerva attack on P-2567.4 High
- i3thuan5 tuitse-tsusinTuiTse-TsuSin html injection vulnerability in `tuitse_html` function6.1 Medium
- splunk, splunk enterprise +1 moreDeserialization of Untrusted Data on Splunk Enterprise for Windows through Path Traversal from Separate Disk Partition7.5 High
- splunk, splunk cloud, enterprise +2 moreSensitive Information Disclosure of Index Metrics through “mrollup” SPL Command4.6 Medium
- splunk, splunk enterprise, cloud +2 moreServer Response Disclosure in RapidDiag Salesforce.com Log File4.3 Medium
- splunk, splunk enterprise, cloud +2 moreSplunk App Key Value Store (KV Store) Improper Handling of Permissions Leads to KV Store Collection Deletion6.5 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service5.3 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service5.3 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 information disclosure5.9 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 code execution6.5 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service5.3 Medium
- metagauss eventprimeEventPrime < 3.3.6 - Unauthenticated Event Access5.3 Medium
- unknown import any xml or csv file to wordpress, soflyy export any wordpress data to xml\/csv +1 moreWP All Import < 3.7.3 - Admin+ Arbitrary File Upload to RCE7.2 High
- gravitymaster product enquiry for woocommerceProduct Enquiry for WooCommerce < 3.1 - Admin+ Stored XSS4.8 Medium
- jgwhite33 wp review sliderWP Review Slider < 13.0 - Admin+ Stored XSS4.8 Medium
- seopressWP SEO Press < 7.3 - Admin+ Stored XSS4.8 Medium
- unknown meris, meris wp theme project wp theme +1 moreMeris <= 1.1.2 - Reflected XSS6.1 Medium
- gravitymaster product enquiry for woocommerceProduct Enquiry for WooCommerce < 3.1 - Arbitrary Enquiry Deletion via CSRF4.3 Medium
- unknown wp user profile avatar, wp event manager user profile avatar +1 moreWP User Profile Avatar < 1.0.1 - Author+ Avatar Deletion/Update via IDOR4.3 Medium
- unknown eventon-rsvp, myeventon rsvp events +1 moreEventON-RSVP < 2.9.5 - Reflected XSS6.1 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service5.9 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 denial of service6.5 Medium
- iobit malware fighterIObit Malware Fighter v11.0.0.1274 - Denial of Service (DoS)5.5 Medium
- ibm db2, db2 for linux, unix and windows, db2 for linux unix and windows +2 moreIBM Db2 denial of service5.3 Medium
- mozilla focus for ios, firefox focus +1 moreAn attacker could execute unauthorized script on a legitimate site through UXSS using window.open...6.1 Medium
- mozilla focus for ios, firefox focus +1 moreUsing a javascript: URI with a setTimeout race condition, an attacker can execute unauthorized...7.5 High
- fortra goanywhere mft, goanywhere managed file transfer +1 moreAuthentication Bypass in GoAnywhere MFT9.8 Critical
- omron sysmac studioDirectory Traversal in Project File Format allows overwrite (Zip Slip)7.8 High
ca-certificatesTuxCareUpdate of ca-certificatesNo score- hongmaple octopushongmaple octopus list sql injection6.3 Medium
- online admission system project admission system, project worlds online admission system +1 moreProject Worlds Online Admission System documents.php unrestricted upload6.3 Medium
- omron cj-series and cs-series cpu modules, cj1g-cpu42p firmware, cj1g-cpu43p firmware +44 more +46 moreOmron FINS memory protection susceptible to bruteforce8.6 High
- Show moreLoading…