CVEs published in January 2024
2,664 vulnerabilities, 306 critical, 14 exploited.
- openndsAn issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the gateway FQDN entry in...9.8 Critical
- openndsAn issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the network interface name...9.8 Critical
- gnome gdkpixbufIn GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder...7.8 High
- motorola mr2600, mr2600 firmware +1 moreMotorola MR2600 Arbitrary Firmware Upload Vulnerability9.0 Critical
- motorola mr2600, mr2600 firmware +1 moreMotorola MR2600 Authentication Bypass Vulnerability9.6 Critical
- motorola mr2600, mr2600 firmware +1 moreMotorola MR2600 SaveStaticRouteIPv6Params Command Injection Vulnerability9.0 Critical
- motorola mr2600, mr2600 firmware +1 moreMotorola MR2600 SaveStaticRouteIPv4Params Command Injection Vulnerability9.0 Critical
- motorola mr2600, mr2600 firmware +1 moreMotorola MR2600 SaveSysLogParams Command Injection Vulnerability9.0 Critical
- d-link dap-1650, dlink dap-1650 firmware +1 moreD-Link DAP-1650 SUBSCRIBE Callback Command Injection Vulnerability9.6 Critical
- d-link dap-1650, dlink dap-1650 firmware +1 moreD-Link DAP-1650 gena.cgi SUBSCRIBE Command Injection Vulnerability9.6 Critical
- ibm merge healthcare efilm workstation, ibm merge efilm workstation +1 moreIBM Merge Healthcare eFilm Workstation License Server CopySLS_Request3 Buffer Overflow10.0 Critical
- ibm merge healthcare efilm workstation, ibm merge efilm workstation +1 moreIBM Merge Healthcare eFilm Workstation License Server Buffer Overflow10.0 Critical
- ibm merge healthcare efilm workstation, ibm merge efilm workstation +1 moreIBM Merge Healthcare eFilm Workstation SYSTEM Privilege Escalation8.8 High
- ibm merge healthcare efilm workstation, ibm merge efilm workstation +1 moreIBM Merge Healthcare eFilm Workstation Hardcoded Credentials9.8 Critical
- arris surfboard sbg6950ac2, commscope arris surfboard sbg6950ac2 firmware +1 moreArris SURFboard SBG6950AC2 Arbitrary Code Execution Vulnerability9.6 Critical
- broadcom data loss prevention, symantec data center security server +1 moreSymantec Data Loss Prevention Buffer Overflow9.6 Critical
- broadcom symantec server management suite, symantec server management suite +1 moreSymantec Server Management Suite Buffer Overflow10.0 Critical
- broadcom symantec messaging gateway, symantec messaging gateway +1 moreSymantec Messaging Gateway Buffer Overflow10.0 Critical
- broadcom symantec messaging gateway, symantec messaging gateway +1 moreSymantec Messaging Gateway Buffer Overflow10.0 Critical
- symantec deployment solution, broadcom symantec deployment solutions +1 moreSymantec Deployment Solution Remote Code Execution10.0 Critical
- hongmaple octopushongmaple octopus cross site scripting3.5 Low
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series and EX Series: J-Web doesn't sufficiently sanitize input to prevent XSS8.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series and EX Series: J-Web - unauthenticated access to temporary files containing sensitive information5.3 Medium
- hongmaple octopushongmaple octopus edit sql injection6.3 Medium
- kmint21 golden ftp serverKmint21 Golden FTP Server PASV Command denial of service5.3 Medium
- 10n borgchatBORGChat Service Port 7551 denial of service5.3 Medium
- mafiatic blue serverMafiatic Blue Server Connection denial of service5.3 Medium
- poikosoft ez cd audio converterPoikosoft EZ CD Audio Converter Activation denial of service3.3 Low
- spycamlizardSpyCamLizard HTTP GET Request denial of service5.3 Medium
- sourcecodester online tours & travels management system, mayurik online tours \&travels management system +1 moreSourceCodester Online Tours & Travels Management System payment.php exec sql injection4.7 Medium
- libtiff, apple ipados, iphone os +21 more +23 moreLibtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service7.5 High
- libtiff, red hat ai inference server 3.2, discovery 2 +11 more +13 moreLibtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom7.5 High
- dexidp dexDex 2.37.0 is discarding TLSconfig and always serves deprecated TLS 1.0/1.1 and insecure ciphers7.5 High
- dolibarr, dolibarr erp\/crm +1 moreDolibarr Application Home Page HTML injection vulnerability7.1 High
- tuta tutanotaAttacker can prevent users from accessing received emails7.5 High
- zulip, zulip server +1 moreZulip non-admins can invite new users to streams they would not otherwise be able to add existing users to4.3 Medium
- sourcecodester online tours & travels management system, mayurik online tours \& travels management system +1 moreSourceCodester Online Tours & Travels Management System pay.php prepare sql injection6.3 Medium
- linkwechatqwdigital LinkWechat Universal Download Interface resource path traversal4.3 Medium
- systemk nvr 504, nvr 508, nvr 516 +3 more +5 moreCommand Injection vulnerability in SystemK NVR 504/508/5169.8 Critical
- quarkus, red hat build of optaplanner 8, build of quarkus 2.13.9.final +4 more +6 moreQuarkus: json payload getting processed prior to security checks when rest resources are used with annotations.8.6 High
- 100296 qdbcrmQidianbang qdbcrm Password Reset cross-site request forgery4.3 Medium
- mate-desktop atrilRemote Code Execution Vulnerability in Atril's EPUB ebook parsing8.5 High
- splashtop, splashtop software updater, streamer +3 more +5 moreInsecure Permissions in Splashtop Software Updater7.8 High
- ovirt ovirt-engine, red hat virtualization engine 4.4 +1 moreOvirt: authentication bypass7.5 High
- dell networker, networker module for databases and applications - oracle +1 moreNetworker 19.9 and all prior versions contains a Plain-text Password stored in temporary config...7.8 High
- mintplex-labs vector-admin, mintplexlabs vector admin +1 moreAuthentication bypass in vector-admin domain restriction6.5 Medium
- ajaysharma cups easy, cups easy (purchase & inventory) +1 moreCross-Site Scripting (XSS) vulnerability in Cups Easy8.2 High
pumaUbuntupuma vulnerabilityNo scorefilesystemcrates.iofilesystem-rs may be implicitly unmaintainedNo score- icehrmCross-Site Scripting vulnerability in IceHrm5.4 Medium
- Show moreLoading…