CVEs published in January 2024
2,664 vulnerabilities, 306 critical, 14 exploited.
- appleple a-blog cms, appleple inc. a-blog cms ver.3.1.x series, a-blog cms ver.2.10.x series +2 more +4 moreImproper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1...8.8 High
- ampforwp accelerated mobile pages, mohammed kaludi amp for wp – accelerated mobile pages +1 moreAccelerated Mobile Pages <= 1.0.92.1 - Reflected Cross-Site Scripting6.1 Medium
- hitron systems dvr dvr lguvr-16h, hitron lguvr-16h firmware +1 moreHitron Systems DVR LGUVR-16H Improper Input Validation Vulnerability7.4 High
- hitron systems dvr lguvr-8h, hitron lguvr-8h firmware +1 moreHitron Systems DVR LGUVR-8H Improper Input Validation Vulnerability7.4 High
- hitron systems dvr lguvr-4h, hitron lguvr-4h firmware, hitronsystems dvr lguvr-4h firmware +2 moreHitron Systems DVR LGUVR-4H Improper Input Validation Vulnerability7.4 High
- hitron systems dvr hvr-16781, hitron hvr-16781 firmware +1 moreHitron Systems DVR HVR-16781 Improper Input Validation Vulnerability7.4 High
- hitron systems dvr hvr-8781, hitron hvr-8781 firmware +1 moreHitron Systems DVR HVR-8781 Improper Input Validation Vulnerability7.4 High
- hitron systems dvr hvr-4781, hitron hvr-4781 firmware +1 moreHitron Systems DVR HVR-4781 Improper Input Validation Vulnerability7.4 High
- apple ipados, macos, tvos +3 more +5 moreA timing side-channel issue was addressed with improvements to constant-time computation in...5.9 Medium
- apple macosAn access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS...6.3 Medium
- apple ipados, macos, safari +5 more +7 moreA type confusion issue was addressed with improved checks. This issue is fixed in tvOS 17.3, iOS...8.8 High
- apple ipados, macos, watchos +2 more +4 moreA privacy issue was addressed with improved private data redaction for log entries. This issue is...5.5 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 High
- apple ipados, macos, tvos +3 more +5 moreAn issue was addressed with improved handling of temporary files. This issue is fixed in macOS...5.5 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreThe issue was addressed with additional permissions checks. This issue is fixed in macOS Sonoma...7.5 High
- apple ipados, macos, tvos +3 more +5 moreA privacy issue was addressed with improved handling of files. This issue is fixed in macOS...6.2 Medium
- apple ipados, ios and ipados, iphone os +2 moreThe issue was addressed with improved authentication. This issue is fixed in iOS 17.3 and iPadOS...6.2 Medium
- apple ipados, macos, watchos +2 more +4 moreThe issue was addressed with additional permissions checks. This issue is fixed in macOS Sonoma...7.5 High
- apple ipados, macos, tvos +3 more +5 moreThe issue was addressed with improved memory handling. This issue is fixed in watchOS 10.3, tvOS...7.8 High
- apple ipados, macos, tvos +3 more +5 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.3,...7.8 High
- apple macosThe issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2....7.8 High
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.3, macOS...5.5 Medium
- apple macosThe issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.3....8.8 High
- apple ipados, macos, safari +4 more +6 moreThe issue was addressed with improved memory handling. This issue is fixed in watchOS 10.3, tvOS...8.8 High
- apple ipados, macos, tvos +3 more +5 moreThis issue was addressed with improved redaction of sensitive information. This issue is fixed in...3.3 Low
- apple ipados, macos, safari +4 more +6 moreAn access issue was addressed with improved access restrictions. This issue is fixed in watchOS...6.5 Medium
- apple ipados, macos, watchos +2 more +4 moreThis issue was addressed with improved redaction of sensitive information. This issue is fixed in...5.5 Medium
- apple ipados, macos, safari +3 more +5 moreA privacy issue was addressed with improved handling of user preferences. This issue is fixed in...3.3 Low
- apple ipados, macos, tvos +3 more +5 moreThis issue was addressed by removing the vulnerable code. This issue is fixed in tvOS 17, watchOS...5.5 Medium
- apple macosAn authentication issue was addressed with improved state management. This issue is fixed in...5.5 Medium
- apple ipados, macos, watchos +2 more +4 moreThe issue was addressed with improved checks. This issue is fixed in iOS 16.7.5 and iPadOS 16.7.5...5.5 Medium
- apple ipados, macos, watchos +2 more +4 moreA privacy issue was addressed with improved handling of temporary files. This issue is fixed in...3.3 Low
- linux kernelcopy_params in drivers/md/dm-ioctl.c in the Linux kernel through 6.7.1 can attempt to allocate...5.5 Medium
- linux kernelIn btrfs_get_root_ref in fs/btrfs/disk-io.c in the Linux kernel through 6.7.1, there can be an...5.5 Medium
- linux kernelIn rds_recv_track_latency in net/rds/af_rds.c in the Linux kernel through 6.7.1, there is an off...5.5 Medium
- linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreIn the Linux kernel through 6.7.1, there is a use-after-free in cec_queue_msg_fh, related to...5.5 Medium
- linux kernelAn issue was discovered in ksmbd in the Linux kernel before 6.6.10. smb2_get_data_area_len in fs...7.8 High
- totolink a3700r firmwareTOTOLINK_A3700R_V9.1.2u.6165_20211012has a command Injection vulnerability via setOpModeCfg9.8 Critical
- totolink a3700r firmwareTOTOLINK A3700R_V9.1.2u.6165_20211012 has a stack overflow vulnerability via setParentalRules9.8 Critical
- totolink a3700r firmwareTOTOLINK_A3700R_V9.1.2u.6165_20211012has a stack overflow vulnerability via setLanguageCfg9.8 Critical
- jfinalcms project jfinalcmsCross-site Scripting in JFinal6.1 Medium
- jfinalcms project jfinalcmsCross-site Scripting in JFinal6.1 Medium
- beetl-bbs project beetl-bbsCross-site Scripting in beetl-bbs6.1 Medium
- myq-solution print serverMyQ Print Server before 8.2 patch 43 allows Unauthenticated Remote Code Execution.9.8 Critical
- webkul bundle productSQL injection vulnerability in Webkul Bundle Product 6.0.1 allows a remote attacker to execute...9.8 Critical
- linux kernelIn the Linux kernel before 6.4.5, drivers/gpu/drm/drm_atomic.c has a use-after-free during a race...7.0 High
- linux kernelIn the Linux kernel before 6.4.12, amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu...7.8 High
- meross msh30q, msh30q firmware +1 moreThe radio frequency communication protocol being used by Meross MSH30Q 4.5.23 is vulnerable to...8.8 High
- meross msh30q firmwareMeross MSH30Q 4.5.23 is vulnerable to Cleartext Transmission of Sensitive Information. During the...5.7 Medium
- linux kernelIn the Linux kernel before 6.5.9, there is a NULL pointer dereference in send_acknowledge in net...5.5 Medium
- Show moreLoading…