CVEs published January 1, 2024
15 CVEs were published on January 1, 2024: 1 critical, 7 high.
- Published
- 15
- Critical
- 1
- High
- 7
- Medium
- 4
- Low
- 3
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 8
Most affected products
- RRJ Nueva Ecija Engineer Online Portal
- 3
- affiliate-toolkit
- 1
- Backup Migration
- 1
- Download Manager
- 1
- Html5 Video Player
- 1
- PayHere Payment Gateway
- 1
- Popup Builder
- 1
- SourceCodester Engineers Online Portal
- 1
- WP STAGING WordPress Backup Plugin · WP STAGING Pro WordPre…
- 1
- WP TripAdvisor Review Slider
- 1
Critical 1
High 7
- CVE-2024-0182SourceCodester Engineers Online Portal Admin Login sql injectionSourceCodester Engineers Online Portal
- CVE-2023-6113WP Staging (Free < 3.1.3, Pro < 5.1.3) - Unauthenticated Backup DownloadWP STAGING WordPress Backup Plugin · WP STAGING Pro WordPre…
- CVE-2023-6271Backup Migration Staging < 1.3.6 - Sensitive Data ExposureBackup Migration
- CVE-2023-6421Download Manager < 3.2.83 - Unauthenticated Protected File Download Password LeakDownload Manager
- CVE-2023-6064PayHere Payment Gateway < 2.2.12 - Unauthenticated Log Data DisclosurePayHere Payment Gateway
- CVE-2023-50094reNgine before 2.1.2 allows OS Command Injection if an adversary has a valid session ID.
- CVE-2023-50096STMicroelectronics STSAFE-A1xx middleware before 3.3.7 allows MCU code execution if an adversary has the ability to read from and write to t
Medium, low and unrated 7
- CVE-2024-0184RRJ Nueva Ecija Engineer Online Portal Add Enginer edit_teacher.php cross site scriptingRRJ Nueva Ecija Engineer Online Portal
- CVE-2024-0183RRJ Nueva Ecija Engineer Online Portal NIA Office students.php cross site scriptingRRJ Nueva Ecija Engineer Online Portal
- CVE-2024-0181RRJ Nueva Ecija Engineer Online Portal Admin Panel admin_user.php cross site scriptingRRJ Nueva Ecija Engineer Online Portal
- CVE-2023-6037WP TripAdvisor Review Slider < 11.9 - Admin+ Stored XSSWP TripAdvisor Review Slider
- CVE-2023-6000Popup Builder < 4.2.3 - Unauthenticated Stored XSSPopup Builder
- CVE-2023-6485Html5 Video Player < 2.5.19 - Subscriber+ Stored XSSHtml5 Video Player
- CVE-2024-21732FlyCms through abbaa5a allows XSS via the permission management feature.