CVEs published January 8 to January 14, 2024
856 CVEs were published Jan 8 to Jan 14, 2024, 107 of them critical. CISA added 9 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 856
- Critical
- 107
- Added to CISA KEV
- 9
- Busiest day
- Mon, Jan 8 (196)
- Quietest day
- Sun, Jan 14 (4)
- January 8, 2024196 CVEs · 15 critical
- January 9, 2024159 CVEs · 18 critical
- January 10, 2024178 CVEs · 33 critical
- January 11, 2024139 CVEs · 20 critical
- January 12, 2024128 CVEs · 20 critical
- January 13, 202452 CVEs · 1 critical
- January 14, 20244 CVEs
Added to CISA KEV 9
- CVE-2016-20017D-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via the login.cgi cli parameter, as exploited in the wil
- CVE-2023-23752[20230201] - Core - Improper access check in webservice endpointsJoomla! Project Joomla! CMS
- CVE-2023-27524Apache Superset: Session validation vulnerability when using provided default SECRET_KEYApache Software Foundation Apache Superset · superset +1
- CVE-2023-29300Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code executionAdobe ColdFusion
- CVE-2023-38203Analysis CVE-2023-29300 Bypass: Adobe ColdFusion Pre-Auth RCEAdobe ColdFusion
- CVE-2023-41990The issue was addressed with improved handling of caches.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2023-29357Microsoft SharePoint Server Elevation of Privilege VulnerabilityMicrosoft SharePoint Server
- CVE-2023-46805An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to accIvanti ICS · Ivanti IPS
- CVE-2024-21887A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows an autIvanti ICS · Ivanti IPS