CVEs published in January 2024
2,664 vulnerabilities, 306 critical, 14 exploited.
- totolink a3300r firmwareTOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection...9.8 Critical
- totolink a3300r firmwareTOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection...9.8 Critical
- totolink a3300r, a3300r firmware +1 moreTOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection...9.8 Critical
- totolink a3300r firmwareTOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection...9.8 Critical
- totolink a3300r firmwareTOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection...9.8 Critical
- totolink a3300r firmwareTOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection...9.8 Critical
- totolink a3300r firmwareTOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection...9.8 Critical
- totolink a8000ru firmwareTOTOLINK A8000RU v7.1cu.643_B20200521 was discovered to contain a hardcoded password for root...9.8 Critical
- bosscmsInsecure Permissions vulnerability in BossCMS v.1.3.0 allows a local attacker to execute...7.8 High
- alpha-innotec heat pumps firmwareAn issue in AIT-Deutschland Alpha Innotec Heatpumps wp2reg-V.3.88.0-9015 and Novelan Heatpumps...6.8 Medium
- seopanel seo panelA Blind SSRF vulnerability exists in the "Crawl Meta Data" functionality of SEO Panel version 4...5.3 Medium
- seopanel seo panelAn user enumeration vulnerability was found in SEO Panel 4.10.0. This issue occurs during user...5.3 Medium
- seopanel seo panelAn email address enumeration vulnerability exists in the password reset function of SEO Panel...5.3 Medium
- seopanel seo panelA Cross-Site Request Forgery (CSRF) vulnerability in SEO Panel version 4.10.0 allows remote...6.5 Medium
- fuwushe ifairDirectory Traversal vulnerability in Qiyu iFair version 23.8_ad0 and before, allows remote...7.5 High
- gnu glibc, fedora, red hat enterprise linux 6 +6 more +8 moreGlibc: integer overflow in __vsyslog_internal()5.3 Medium
- gnu glibc, fedora, red hat enterprise linux 6 +6 more +8 moreGlibc: off-by-one heap-based buffer overflow in __vsyslog_internal()8.2 High
- gnu glibc, fedora, red hat enterprise linux 6 +6 more +8 moreGlibc: heap-based buffer overflow in __vsyslog_internal()8.4 High
- cratedbCrateDB authentication bypass vulnerability9.8 Critical
- flatlogic react dashboardreact-dashboard 1.4.0 is vulnerable to Cross Site Scripting (XSS) as httpOnly is not set.8.2 High
- meshcentralYlianst MeshCentral Missing SSL Certificate Validation9.8 Critical
- free and open source inventory management system project and open source inventory management systemCross Site Request Forgery (CSRF) vulnerability in Free Open-Source Inventory Management System v...6.5 Medium
- softing th scopeSofting TH SCOPE through 3.70 allows XSS.6.1 Medium
- craftcms craft cmsCraft CMS Feed-Me7.5 High
- craftcms craft cmsCraft CMS Audit Plugin Cross Site Scripting vulnerability5.4 Medium
- codeastro simple student result management systemCodeAstro Simple Student Result Management System Add Class Page add_classes.php cross site scripting2.4 Low
- aio-libs aiohttp, fedoraproject fedora +1 moreaiohttp.web.static(follow_symlinks=True) is vulnerable to directory traversal5.9 Medium
- goauthentik authentikPKCE downgrade attack in Authentik6.5 Medium
- aio-libs aiohttp, fedoraproject fedora +1 moreaiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separators6.5 Medium
- ruifang-tech rebuildRebuild HTTP Request readRawText server-side request forgery6.3 Medium
- ruifang-tech rebuildRebuild proxy-download getStorageFile cross site scripting3.5 Low
- opentext appbuilderXML External Entity (XXE) Processing4.9 Medium
- opentext appbuilderUnauthenticated Access to AppBuilder Configuration Files5.3 Medium
- opentext appbuilderJava Database Connectivity (JDBC) URL Manipulation5.5 Medium
- opentext appbuilderCommand Injection via Task Scheduler7.2 High
- opentext appbuilderUnauthenticated Arbitrary File Read7.5 High
- pbootcmsPbootCMS cross site scripting2.4 Low
- guardiansoft guardian, palantir com.palantir.skywise:guardian +1 moreIn cases where a multi-tenant stack user is operating Foundry’s Linter service, and the user changes the linter name from the default value, the renamed value may be visible to the rest of the stack’s…3.5 Low
- gabriels ftp serverGabriels FTP Server denial of service5.3 Medium
- palantir com.palantir.gotham:blackbird-witchcraft, gotham blackbird-witchcraft, gotham static-assets-servlet +2 moreGotham table and Forward App Path traversal6.5 Medium
- trend micro, inc. micro security (consumer) uiairsupport, trendmicro air support, antivirus \+ security +3 more +5 moreTrend Micro uiAirSupport, included in the Trend Micro Security 2023 family of consumer products,...7.8 High
- flexbyte solar ftp server, pcman ftp server +1 moreSolar FTP Server PASV Command denial of service5.3 Medium
- code-projects employee management system, employee management system project management system +1 moreSourceCodester Employee Management System Leave delete-leave.php access control4.3 Medium
- 0xjacky nginx-ui, nginxui nginx ui +1 moreNginx-UI authenticated RCE through injecting into the application config via CRLF8.8 High
- code-projects employee management system, employee management system project management system +1 moreSourceCodester Employee Management System edit-profile.php cross site scripting3.5 Low
- code-projects employee management system, employee management system project management system +1 moreSourceCodester Employee Management System login.php sql injection7.3 High
- forcepoint f|one smartedge agent, one smartedge agent +1 moreMissing Authorization vulnerability in Forcepoint F|One SmartEdge Agent on Windows ...8.4 High
- realdefen superantispyware, superantispyware pro x +1 moreSUPERAntiSpyware Pro X v10.0.1260 - Kernel-level API parameters manipulation6.6 Medium
- 0xjacky nginx-ui, nginxui nginx ui +1 moreNginx-UI arbitrary file write through the Import Certificate feature9.8 Critical
- anti-virus vba32, virusblokada vba32 antivirus +1 moreVba32 Antivirus v3.36.0 - Denial of Service (DoS)5.5 Medium
- Show moreLoading…