CVEs published in January 2024
2,664 vulnerabilities, 306 critical, 14 exploited.
- linecorp lineAn issue in smaregi_app_market mini-app on Line v13.6.1 allows attackers to send crafted...5.4 Medium
- linecorp lineAn issue in STOCKMAN GROUP mini-app on Line v13.6.1 allows attackers to send crafted malicious...5.4 Medium
- linecorp lineAn issue in PRIMA CLINIC mini-app on Line v13.6.1 allows attackers to send crafted malicious...5.4 Medium
- linecorp lineAn issue in cherub-hair mini-app on Line v13.6.1 allows attackers to send crafted malicious...5.4 Medium
- linecorp lineAn issue in mokumoku chohu mini-app on Line v13.6.1 allows attackers to send crafted malicious...5.4 Medium
- linecorp lineAn issue in nature fitness saijo mini-app on Line v13.6.1 allows attackers to send crafted...5.4 Medium
- coignAn issue in Coign CRM Portal v.06.06 allows a remote attacker to escalate privileges via the...8.8 High
- processwireArbitrary Code Execution in Processwire7.2 High
- nagios cross platform agentDOM-based Cross Site Scripting (XSS vulnerability in 'Tail Event Logs' functionality in Nagios...4.8 Medium
- contiki-ng tinydtlsBuffer over-read vulnerability in the dtls_sha256_update function in Contiki-NG tinyDTLS through...9.1 Critical
- contiki-ng tinydtlsAn issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers allow...7.5 High
- contiki-ng tinydtlsAn assertion failure discovered in in check_certificate_request() in Contiki-NG tinyDTLS through...7.5 High
- contiki-ng tinydtlsBuffer over-read vulnerability in Contiki-NG tinyDTLS through master branch 53a0d97 allows...9.8 Critical
- contiki-ng tinydtlsAn issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. An infinite loop...9.1 Critical
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Extensions API in Google Chrome prior to 121.0.6167.85 allowed an...4.3 Medium
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Autofill in Google Chrome prior to 121.0.6167.85 allowed a remote...4.3 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in iOS Security UI in Google Chrome prior to 121.0.6167.85...7.5 High
- google chrome, fedoraproject fedora +1 moreIncorrect security UI in Payments in Google Chrome prior to 121.0.6167.85 allowed a remote...6.5 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Reading Mode in Google Chrome prior to 121.0.6167.85 allowed an attacker who...8.8 High
- google chromeInsufficient policy enforcement in DevTools in Google Chrome prior to 121.0.6167.85 allowed an...4.3 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in Passwords in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Downloads in Google Chrome prior to 121.0.6167.85 allowed a...4.3 Medium
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Accessibility in Google Chrome prior to 121.0.6167.85 allowed a...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInteger underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to...9.8 Critical
- google chrome, fedoraproject fedora +1 moreUse after free in Web Audio in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to...8.8 High
- squid-cache squidSQUID-2023:11 Denial of Service in Cache Manager6.5 Medium
- humansignal label studio, label-studio +1 moreLabel Studio XSS Vulnerability on Data Import4.7 Medium
- spoon radio japan inc. android spoon application, spooncast spoon +1 moreAndroid Spoon application version 7.11.1 to 8.6.0 uses hard-coded credentials, which may allow a...5.5 Medium
- humansignal label studio, label-studio +1 moreLabel Studio XSS Vulnerability on Avatar Upload7.1 High
- lantronix xport, xport edge firmware +1 moreLantronix XPort Weak Encoding for Password5.7 Medium
- trendmicro deep security, trend micro, inc. micro deep security agent, trendmicro deep security agent +2 moreA link following vulnerability in the Trend Micro Deep Security 20.0 and Trend Micro Cloud One -...7.8 High
- trendmicro deep security, trend micro, inc. micro deep security agent, trendmicro deep security agent +2 moreAn improper access control vulnerability in Trend Micro Deep Security 20.0 and Trend Micro Cloud...7.8 High
- trend micro, inc. micro apex central, trendmicro apex central +1 moreA post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central...7.1 High
- trend micro, inc. micro apex central, trendmicro apex one +1 moreA cross-site scripting vulnerability in Trend Micro Apex Central could allow a remote attacker to...6.1 Medium
- trend micro, inc. micro apex central, trendmicro apex central +1 moreCertain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site...6.1 Medium
- trend micro, inc. micro apex central, trendmicro apex central +1 moreCertain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site...6.1 Medium
- trend micro, inc. micro apex central, trendmicro apex central +1 moreCertain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site...6.1 Medium
- trend micro, inc. micro apex central, trendmicro apex central +1 moreCertain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site...6.1 Medium
- trend micro, inc. micro apex central, trendmicro apex central +1 moreA local file inclusion vulnerability in one of Trend Micro Apex Central's widgets could allow a...7.5 High
- trend micro, inc. micro apex central, trendmicro apex central +1 moreAn unrestricted file upload vulnerability in Trend Micro Apex Central could allow a remote...8.8 High
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 moreAn updater link following vulnerability in the Trend Micro Apex One agent could allow a local...7.8 High
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 moreAn exposed dangerous function vulnerability in the Trend Micro Apex One agent could allow a local...7.8 High
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 moreA security agent link following vulnerability in Trend Micro Apex One could allow a local...7.8 High
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 moreAn anti-spyware engine link following vulnerability in Trend Micro Apex One could allow a local...7.8 High
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 moreA security agent link following vulnerability in Trend Micro Apex One could allow a local...7.8 High
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 moreA local file inclusion vulnerability on the Trend Micro Apex One management server could allow a...7.8 High
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 moreA plug-in manager origin validation vulnerability in the Trend Micro Apex One security agent...7.8 High
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 moreA plug-in manager origin validation vulnerability in the Trend Micro Apex One security agent...7.8 High
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 moreAn origin validation vulnerability in the Trend Micro Apex One security agent could allow a local...7.8 High
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 moreAn origin validation vulnerability in the Trend Micro Apex One security agent could allow a local...7.8 High
- Show moreLoading…