CVEs published in January 2024
2,664 vulnerabilities, 306 critical, 14 exploited.
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 moreAn origin validation vulnerability in the Trend Micro Apex One security agent could allow a local...7.8 High
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 moreAn origin validation vulnerability in the Trend Micro Apex One security agent could allow a local...7.8 High
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 moreAn origin validation vulnerability in the Trend Micro Apex One security agent could allow a local...7.8 High
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 moreAn origin validation vulnerability in the Trend Micro Apex One security agent could allow a local...7.8 High
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 moreAn origin validation vulnerability in the Trend Micro Apex One security agent could allow a local...7.8 High
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 moreAn agent link vulnerability in the Trend Micro Apex One security agent could allow a local...7.8 High
- trendmicro mobile security, trend micro, inc. micro mobile security for enterprise +1 moreReflected cross-site scripting (XSS) vulnerabilities in Trend Micro Mobile Security (Enterprise)...6.1 Medium
- trendmicro mobile security, trend micro, inc. micro mobile security for enterprise +1 moreReflected cross-site scripting (XSS) vulnerabilities in Trend Micro Mobile Security (Enterprise)...6.1 Medium
- trendmicro mobile security, trend micro, inc. micro mobile security for enterprise +1 moreReflected cross-site scripting (XSS) vulnerabilities in Trend Micro Mobile Security (Enterprise)...6.1 Medium
- trend micro, inc. micro apex central, trendmicro apex central +1 moreA post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central...5.4 Medium
- trend micro, inc. micro apex central, trendmicro apex central +1 moreA post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central...5.4 Medium
- trend micro, inc. micro apex central, trendmicro apex central +1 moreA post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central...5.4 Medium
- trend micro, inc. micro apex central, trendmicro apex central +1 moreA post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central...5.4 Medium
- crestron am-300, am-300 firmware +1 moreImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Crestron AM-3008.4 High
- orthanc osimis dicom web viewer, orthanc-server osimis web viewer +1 moreImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Orthanc Osimis DICOM Web Viewer7.1 High
- sofastack sofarpc, sofa-rpc +1 moreSOFARPC Remote Command Execution(RCE) Vulnerbility9.8 Critical
- tuta tutanotaTuta loads images from external resources5.3 Medium
- benbusby whoogle search, whoogle-search +1 moreWhoogle Search Cross-site Scripting vulnerability6.1 Medium
- benbusby whoogle search, whoogle-search +1 moreWhoogle Search Server Side Request Forgery vulnerability9.1 Critical
- benbusby whoogle search, whoogle-search +1 moreWhoogle Search Limited File Write vulnerability5.3 Medium
- benbusby whoogle search, whoogle-search +1 moreWhoogle Search Server Side Request Forgery vulnerability9.1 Critical
- hewlett packard enterprise hpe oneview, hp oneview +1 moreHPE OneView may have a missing passphrase during restore.5.5 Medium
- hewlett packard enterprise hpe oneview, hp oneview +1 moreHPE OneView may allow clusterService Authentication Bypass resulting in denial of service.7.5 High
- hewlett packard enterprise hpe oneview, hp oneview +1 moreHPE OneView may allow command injection with local privilege escalation.7.8 High
- apache supersetApache Superset: Stored XSS in Dashboard Title and Chart Title9.6 Critical
- silverstripe admin, silverstripe-admin +1 moreNo permission checks for editing/deleting records with CSV import form4.3 Medium
- mozilla firefoxSome WASM source files could have caused a crash when loaded in devtools. This vulnerability...6.5 Medium
- mozilla firefoxA use-after-free crash could have occurred on macOS if a Firefox update were being applied on a...6.5 Medium
- mozilla firefoxA compromised content process could have updated the document URI. This could have allowed an...4.3 Medium
- mozilla firefoxThe WebAudio `OscillatorNode` object was susceptible to a stack buffer overflow. This could have...8.8 High
- mozilla firefoxIn some circumstances, JIT compiled code could have dereferenced a wild pointer value. This could...7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreAn unchecked return value in TLS handshake code could have caused a potentially exploitable crash...7.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. Some of...8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIn specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. This...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA malicious devtools extension could have been used to escalate privileges. This vulnerability...8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA bug in popup notifications delay calculation could have made it possible for an attacker to...8.8 High
- mozilla firefox, thunderbird, debian linux +1 more +3 moreA phishing site could have repurposed an `about:` dialog to show phishing content with an...4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security...6.5 Medium
- debian linux, mozilla firefox, firefox esr +1 more +3 moreA Linux user opening the print preview dialog could have caused the browser to crash. This...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIt was possible for certain browser prompts and dialogs to be activated or dismissed...4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAn out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a...6.5 Medium
- silverstripe framework, silverstripe-framework +1 moreRecord titles for restricted records can be viewed if exposed by GridFieldAddExistingAutocompleter4.3 Medium
- silverstripe graphql, silverstripe-graphql +1 moreSilverstripe GraqhQL's view permissions are bypassed for paginated lists of ORM data5.3 Medium
- mcginty snowUnauthenticated Nonce Increment in snow3.1 Low
- trillium, trillium trillium-http +1 moretrillium-http and trillium-client vulnerable to HTTP Request/Response Splitting6.8 Medium
- wow-company sticky buttons, wpcalc sticky buttons – floating buttons builder +1 moreSticky Buttons <= 3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting4.4 Medium
- appleple a-blog cms, appleple inc. a-blog cms ver.3.1.x series, a-blog cms ver.2.10.x series +2 more +4 moreImproper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1...8.8 High
- appleple a-blog cms, appleple inc. a-blog cms ver.3.1.x series, a-blog cms ver.2.10.x series +2 more +4 moreCross-site scripting vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7,...5.4 Medium
- appleple a-blog cms, appleple inc. a-blog cms ver.3.1.x series, a-blog cms ver.2.10.x series +2 more +4 moreRelative path traversal vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7,...8.1 High
- appleple a-blog cms, appleple inc. a-blog cms ver.3.1.x series, a-blog cms ver.2.10.x series +2 more +4 moreCross-site scripting vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7,...6.1 Medium
- Show moreLoading…