CVEs published in January 2024
2,664 vulnerabilities, 306 critical, 14 exploited.
- wpgmaps wp go maps (formerly wp google maps), wp go maps +1 moreWP Go Maps (formerly WP Google Maps) <= 9.0.28 - Reflected Cross-Site Scripting6.1 Medium
- apache airflowApache Airflow: Bypass permission verification to read code of other dags6.5 Medium
- apache airflowApache Airflow: Potential pickle deserialization vulnerability in XComs7.5 High
- apache airflow, apache software foundation airflow cncf kubernetes provider, apache apache-airflow-providers-cncf-kubernetes +2 moreApache Airflow CNCF Kubernetes provider, Apache Airflow: Kubernetes configuration file saved without encryption in the Metadata and logged as plain text in the Triggerer service6.5 Medium
- snp digital saleskingWordPress SalesKing Plugin <= 1.6.15 is vulnerable to Sensitive Data Exposure7.5 High
- ip2location country blockerWordPress Download IP2Location Country Blocker Plugin <= 2.33.3 is vulnerable to Sensitive Data Exposure5.3 Medium
- eduva albo pretorio online, ignazio scimone albo pretorio on line +1 moreWordPress Albo Pretorio Online Plugin <= 4.6.6 is vulnerable to Sensitive Data Exposure5.3 Medium
- cosmwasm serde-json-wasmserde-json-wasm stack overflow during recursive JSON parsing3.2 Low
- simple-membership-plugin simple membershipWordPress Simple Membership Plugin <= 4.4.1 is vulnerable to Open Redirection3.4 Low
- ukrsolution barcode scanner and inventory managerWordPress Barcode Scanner with Inventory & Order Manager Plugin <= 1.5.1 is vulnerable to Arbitrary File Upload10.0 Critical
- webtoffee order export & order import for woocommerce, order export \& order import for woocommerce +1 moreWordPress Order Export & Order Import for WooCommerce Plugin <= 2.4.3 is vulnerable to Arbitrary File Upload8.0 High
- webtoffee product import export for woocommerceWordPress Product Import Export for WooCommerce Plugin <= 2.3.7 is vulnerable to Arbitrary File Upload8.0 High
- asgaros forum, thomas belser asgaros forum +1 moreWordPress Asgaros Forum Plugin <= 2.7.2 is vulnerable to PHP Object Injection8.7 High
- quantumcloud chatbot with ai, wpbot +1 moreWordPress ChatBot Plugin <= 5.1.0 is vulnerable to PHP Object Injection8.7 High
- renzo johnson contact form 7 extension for mailchimpWordPress Contact Form 7 Extension For Mailchimp Plugin <= 0.5.70 is vulnerable to Server Side Request Forgery (SSRF)4.9 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreURL redirection to untrusted site ('Open Redirect') vulnerability in file access component in...5.4 Medium
- aguilatechnologies wp customer areaWP Customer Area <= 8.2.2 - Reflected Cross-Site Scripting6.1 Medium
- debian linux, fedoraproject fedora, linux kernel +2 moreLinux: netback processing of zero-length transmit fragment7.5 High
- elecom wrc-x1800gs-b firmware, wrc-x1800gsa-b firmware, wrc-x1800gsh-b firmware +17 more +19 moreOS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent...6.8 Medium
- yamaha wlx202 firmware, wlx212 firmware, wlx222 firmware +7 more +9 moreActive debug code exists in Yamaha wireless LAN access point devices. If a logged-in user who...6.8 Medium
- nvidia bluefield 2 dpu bmc, bluefield 3 dpu bmc, bluefield bmc +1 moreNVIDIA Bluefield 2 and Bluefield 3 DPU BMC contains a vulnerability in ipmitool, where a root...7.2 High
- dfeg electronic deliverables creation support tool, ministry of defense electronic deliverables creation support tool (construction edition), electronic deliverables creation support tool (design & survey edition) +2 moreElectronic Deliverables Creation Support Tool (Construction Edition) prior to Ver1.0.4 and...5.5 Medium
- maff electronic delivery check system, ministry of agriculture, forestry and fisheries electronic delivery check system (ministry of agriculture, forestry and fisheries the agriculture and rural development project version) march, heisei 31 era edition +1 moreElectronic Delivery Check System (Ministry of Agriculture, Forestry and Fisheries The Agriculture...5.5 Medium
- cals-ed electronic delivery check system, electronic delivery item inspection support system, ministry of land, infrastructure, transport and tourism, japan electronic delivery check system (dentsu) +2 more +4 moreElectronic Delivery Check System (Doboku) Ver.18.1.0 and earlier, Electronic Delivery Check...5.5 Medium
libavifOSS-FuzzHeap-use-after-free in LLVMFuzzerRunDriverNo scoregpacOSS-FuzzHeap-buffer-overflow in ctxload_probe_dataNo score- google chromeInsufficient data validation in DevTools in Google Chrome prior to 121.0.6167.85 allowed a remote...8.8 High
- google chromeUse after free in WebRTC in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to...8.8 High
- dlink dir-882 a1 firmwareD-Link DIR-882 DIR882A1_FW130B06 was discovered to contain a stack overflow via the sub_477AA0...9.8 Critical
- orthanc-server orthancOrthanc versions before 1.12.2 are affected by a reflected cross-site scripting (XSS)...6.1 Medium
- kanboardKanboard 1.2.34 is vulnerable to Html Injection in the group management feature.4.8 Medium
- dlink dir-815 firmwareThere is a command injection vulnerability in the ssdpcgi_main function of cgibin binary in D...9.8 Critical
- totolink x6000r firmwareAn issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows attackers to run arbitrary...9.8 Critical
- totolink x6000r firmwareAn issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows attackers to run arbitrary...9.8 Critical
- totolink x6000r firmwareAn issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows attackers to run arbitrary...9.8 Critical
- ctan mathtexAn infinite loop issue discovered in Mathtex 1.05 and before allows a remote attackers to consume...7.5 High
- ctan mathtexStack Overflow vulnerability in the validate() function in Mathtex v.1.05 and before allows a...9.8 Critical
- ctan mathtexBuffer Overflow vulnerability in the nomath() function in Mathtex v.1.05 and before allows a...7.5 High
- ctan mathtexCommand Injection vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute...9.8 Critical
- ctan mathtexBuffer Overflow vulnerability in the main() function in Mathtex 1.05 and before allows a remote...7.5 High
- ctan mathtexBuffer Overflow vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute...9.8 Critical
- regify regipayAn issue was discovered in Regify Regipay Client for Windows version 4.5.1.0 allows DLL hijacking...7.8 High
- linecorp lineAn issue in Ailand clinic mini-app on Line v13.6.1 allows attackers to send crafted malicious...5.4 Medium
- linecorp lineAn issue in Otakara lapis totuka mini-app on Line v13.6.1 allows attackers to send crafted...5.4 Medium
- linecorp lineAn issue in COLORFUL_laundry mini-app on Line v13.6.1 allows attackers to send crafted malicious...5.4 Medium
- linecorp lineAn issue in Books-futaba mini-app on Line v13.6.1 allows attackers to send crafted malicious...5.4 Medium
- linecorp lineAn issue in Yoruichi hobby base mini-app on Line v13.6.1 allows attackers to send crafted...5.4 Medium
- linecorp lineAn issue in Q co ltd mini-app on Line v13.6.1 allows attackers to send crafted malicious...5.4 Medium
- linecorp lineAn issue in picot.golf mini-app on Line v13.6.1 allows attackers to send crafted malicious...5.4 Medium
- linecorp lineAn issue in Cleaning_makotoya mini-app on Line v13.6.1 allows attackers to send crafted malicious...5.4 Medium
- Show moreLoading…