# CVEs published 2024-01-02

107 CVEs were published on January 2, 2024: 11 critical, 40 high. Days are UTC.

- [CVE-2023-48418](https://cve.now/CVE-2023-48418.md): User Build misconfiguration resulting in local escalation of privilege (CVSS 10.0, Google Pixel Watch)
- [CVE-2024-0196](https://cve.now/CVE-2024-0196.md): Magic-Api code injection (CVSS 6.3, Magic-Api)
- [CVE-2024-21632](https://cve.now/CVE-2024-21632.md): omniauth-microsoft\_graph vulnerable to account takeover (nOAuth) (CVSS 8.6, synth omniauth-microsoft\_graph · omniauth-microsoft\_graph)
- [CVE-2023-6339](https://cve.now/CVE-2023-6339.md): Google Nest WiFi Pro root code-execution & user-data compromise (CVSS 10.0, Google Wifi Pro)
- [CVE-2024-21629](https://cve.now/CVE-2024-21629.md): Erroneous handling of \`record\_external\_operation\` error return (CVSS 5.9, rust-ethereum evm · evm)
- [CVE-2023-4164](https://cve.now/CVE-2023-4164.md): There is a possible information disclosure due to a missing permission check in Pixel Watch (CVSS 8.4, Google Pixel Watch)
- [CVE-2024-21628](https://cve.now/CVE-2024-21628.md): XSS can be stored in DB from "add a message form" in order detail page (FO) (CVSS 5.4, PrestaShop · prestashop/prestashop)
- [CVE-2024-21627](https://cve.now/CVE-2024-21627.md): Some attribute not escaped in Validate::isCleanHTML method (CVSS 8.1, PrestaShop · prestashop/prestashop)
- [CVE-2024-0195](https://cve.now/CVE-2024-0195.md): spider-flow FunctionController.java FunctionService.saveFunction code injection (CVSS 6.3, spider-flow)
- [CVE-2024-0194](https://cve.now/CVE-2024-0194.md): CodeAstro Internet Banking System Profile Picture pages\_account.php unrestricted upload (CVSS 6.3, CodeAstro Internet Banking System)
- [CVE-2024-21623](https://cve.now/CVE-2024-21623.md): Arbitrary Expression Injection in github workflow leads to Command execution & leaking secrets (CVSS 9.8, mehah otclient)
- [CVE-2023-51652](https://cve.now/CVE-2023-51652.md): OWASP.AntiSamy mXSS when preserving comments (CVSS 6.1, spassarop antisamy-dotnet · OWASP.AntiSamy)
- [CVE-2023-50711](https://cve.now/CVE-2023-50711.md): \`serde\` deserialization for \`FamStructWrapper\` lacks bound checks that could potentially lead to out-of-bounds memory access (CVSS 5.7, rust-vmm vmm-sys-util · vmm-sys-util)
- [CVE-2024-0192](https://cve.now/CVE-2024-0192.md): RRJ Nueva Ecija Engineer Online Portal Add Downloadable downloadable.php unrestricted upload (CVSS 6.3, RRJ Nueva Ecija Engineer Online Portal)
- [CVE-2023-49794](https://cve.now/CVE-2023-49794.md): The logic of get apk path in KernelSU module can be bypassed (CVSS 6.7, tiann KernelSU)
- [CVE-2024-0191](https://cve.now/CVE-2024-0191.md): RRJ Nueva Ecija Engineer Online Portal file information disclosure (CVSS 5.3, RRJ Nueva Ecija Engineer Online Portal)
- [CVE-2023-7192](https://cve.now/CVE-2023-7192.md): Kernel: refcount leak in ctnetlink\_create\_conntrack() (CVSS 5.5, Red Hat Enterprise Linux 8.2 Advanced Update Support ·… +10)
- [CVE-2023-48419](https://cve.now/CVE-2023-48419.md): An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in EoP (CVSS 10.0, Google Nest Mini)
- [CVE-2022-3010](https://cve.now/CVE-2022-3010.md): Predictable SSH credentials in Priva TopControl Suite (CVSS 7.5, Priva TopControl Suite - Bacnet · Priva TopControl Suite… +3)
- [CVE-2024-0190](https://cve.now/CVE-2024-0190.md): RRJ Nueva Ecija Engineer Online Portal Quiz add\_quiz.php cross site scripting (CVSS 3.5, RRJ Nueva Ecija Engineer Online Portal)
- [CVE-2024-0193](https://cve.now/CVE-2024-0193.md): Kernel: netfilter: use-after-free in nft\_trans\_gc\_catchall\_sync leads to privilege escalation (CVSS 7.8, kernel · Red Hat Enterprise Linux +1)
- [CVE-2024-0189](https://cve.now/CVE-2024-0189.md): RRJ Nueva Ecija Engineer Online Portal Create Message teacher\_message.php cross site scripting (CVSS 3.5, RRJ Nueva Ecija Engineer Online Portal)
- [CVE-2023-4280](https://cve.now/CVE-2023-4280.md): Unvalidated input in Silicon Labs TrustZone implementation leads to accessing Trusted memory region (CVSS 9.3, silabs.com GSDK)
- [CVE-2018-25097](https://cve.now/CVE-2018-25097.md): Acumos Design Studio cross site scripting (CVSS 3.5, Acumos Design Studio)
- [CVE-2024-0188](https://cve.now/CVE-2024-0188.md): RRJ Nueva Ecija Engineer Online Portal change\_password\_teacher.php weak password (CVSS 3.1, RRJ Nueva Ecija Engineer Online Portal)
- [CVE-2017-20188](https://cve.now/CVE-2017-20188.md): Zimbra zm-ajax XFormItem.js XFormItem.prototype.setError cross site scripting (CVSS 2.6, Zimbra zm-ajax)
- [CVE-2015-10128](https://cve.now/CVE-2015-10128.md): rt-prettyphoto Plugin rt-prettyphoto.php royal\_prettyphoto\_plugin\_links cross site scripting (CVSS 3.5, rt-prettyphoto Plugin)
- [CVE-2023-6436](https://cve.now/CVE-2023-6436.md): SQLi in Ekol Bilisim Website Template (CVSS 9.8, Ekol Informatics Website Template)
- [CVE-2023-47858](https://cve.now/CVE-2023-47858.md): Details of archived public channels are leaked to members of another team (CVSS 4.3, Mattermost · github.com/mattermost/mattermost-server +3)
- [CVE-2023-50333](https://cve.now/CVE-2023-50333.md): Lack of restriction to manage group names for freshly demoted guests (CVSS 3.7, Mattermost · github.com/mattermost/mattermost/server/v8 +3)
- [CVE-2023-48732](https://cve.now/CVE-2023-48732.md): Keywords that trigger mentions are leaked to other users (CVSS 4.3, Mattermost · github.com/mattermost/mattermost-server +3)
- [CVE-2023-6693](https://cve.now/CVE-2023-6693.md): Qemu: virtio-net: stack buffer overflow in virtio\_net\_flush\_tx() (CVSS 4.9, Red Hat Enterprise Linux)
- [CVE-2023-49142](https://cve.now/CVE-2023-49142.md): multimedia audio has a UAF vulnerability (CVSS 4.0, OpenHarmony)
- [CVE-2023-49135](https://cve.now/CVE-2023-49135.md): multimedia player has a UAF vulnerability (CVSS 4.0, OpenHarmony)
- [CVE-2023-48360](https://cve.now/CVE-2023-48360.md): multimedia player has a UAF vulnerability (CVSS 4.0, OpenHarmony)
- [CVE-2023-47857](https://cve.now/CVE-2023-47857.md): multimedia camera has a UAF vulnerability (CVSS 4.0, OpenHarmony)
- [CVE-2023-47216](https://cve.now/CVE-2023-47216.md): Liteos-A has a missing release of resource vulnerability (CVSS 2.9, OpenHarmony)
- [CVE-2023-43514](https://cve.now/CVE-2023-43514.md): Use After Free in DSP Services (CVSS 8.4, Qualcomm Snapdragon)
- [CVE-2023-43512](https://cve.now/CVE-2023-43512.md): Buffer Over-read in Qualcomm ESL (CVSS 7.5, Qualcomm Snapdragon)
- [CVE-2023-43511](https://cve.now/CVE-2023-43511.md): Loop with Unreachable Exit Condition (Infinite Loop) in WLAN Firmware (CVSS 7.5, Qualcomm Snapdragon)
- [CVE-2023-33120](https://cve.now/CVE-2023-33120.md): Use After Free in Audio (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2023-33118](https://cve.now/CVE-2023-33118.md): Use After Free in Automotive Audio (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2023-33117](https://cve.now/CVE-2023-33117.md): Use After Free in Audio (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2023-33116](https://cve.now/CVE-2023-33116.md): Buffer over-read without Checking Size of Input in WLAN Host (CVSS 7.5, Qualcomm Snapdragon)
- [CVE-2023-33114](https://cve.now/CVE-2023-33114.md): Use after free in Neural Processing Unit (CVSS 8.4, Qualcomm Snapdragon)
- [CVE-2023-33113](https://cve.now/CVE-2023-33113.md): Buffer Copy Without Checking Size of Input (\`Classic Buffer Overflow\`) in Kernel (CVSS 8.4, Qualcomm Snapdragon)
- [CVE-2023-33112](https://cve.now/CVE-2023-33112.md): Buffer Over-read in WLAN Firmware (CVSS 7.5, Qualcomm Snapdragon)
- [CVE-2023-33110](https://cve.now/CVE-2023-33110.md): Use of Out-of-range Pointer Offset in Audio (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2023-33109](https://cve.now/CVE-2023-33109.md): NULL Pointer Dereference in WLAN Firmware (CVSS 7.5, Qualcomm Snapdragon)
- [CVE-2023-33108](https://cve.now/CVE-2023-33108.md): Use After Free in Graphics (CVSS 8.4, Qualcomm Snapdragon)
- [CVE-2023-33094](https://cve.now/CVE-2023-33094.md): Use After Free in Linux Graphics (CVSS 8.4, Qualcomm Snapdragon)
- [CVE-2023-33085](https://cve.now/CVE-2023-33085.md): Buffer Copy Without Checking Size of Input (Classic Buffer Overflow) in Wearables (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2023-33062](https://cve.now/CVE-2023-33062.md): Buffer Over-read in WLAN Firmware (CVSS 7.5, Qualcomm Snapdragon)
- [CVE-2023-33040](https://cve.now/CVE-2023-33040.md): Buffer Over-read in Data Modem (CVSS 7.5, Qualcomm Snapdragon)
- [CVE-2023-33038](https://cve.now/CVE-2023-33038.md): Integer Overflow or Wraparound in Radio Interface Layer (CVSS 6.7, Qualcomm Snapdragon)
- [CVE-2023-33037](https://cve.now/CVE-2023-33037.md): Cryptographic Issues in Automotive (CVSS 7.1, Qualcomm Snapdragon)
- [CVE-2023-33036](https://cve.now/CVE-2023-33036.md): NULL Pointer Dereference in Hypervisor (CVSS 7.1, Qualcomm Snapdragon)
- [CVE-2023-33033](https://cve.now/CVE-2023-33033.md): Use of Out-of-range Pointer Offset in Audio (CVSS 8.4, Qualcomm Snapdragon)
- [CVE-2023-33032](https://cve.now/CVE-2023-33032.md): Integer Overflow or Wraparound in TZ Secure OS (CVSS 9.3, Qualcomm Snapdragon)
- [CVE-2023-33030](https://cve.now/CVE-2023-33030.md): Buffer Copy without Checking Size of Input in HLOS (CVSS 9.3, Qualcomm Snapdragon)
- [CVE-2023-33025](https://cve.now/CVE-2023-33025.md): Buffer Copy without Checking Size of Input in Data Modem (CVSS 9.8, Qualcomm Snapdragon)
- [CVE-2023-33014](https://cve.now/CVE-2023-33014.md): Improper Input Validation in Services (CVSS 7.6, Qualcomm Snapdragon)
- [CVE-2023-28583](https://cve.now/CVE-2023-28583.md): Double Free in Data Network Stack & Connectivity (CVSS 6.7, Qualcomm Snapdragon)
- [CVE-2023-47039](https://cve.now/CVE-2023-47039.md): Perl: perl for windows binary hijacking vulnerability (CVSS 7.8, perl · Red Hat Enterprise Linux)
- [CVE-2023-26157](https://cve.now/CVE-2023-26157.md): Versions of the package libredwg before 0.12.5.6384 are vulnerable to Denial of Service (DoS) due to an out-of-bounds read involving section (CVSS 5.5, libredwg)
- [CVE-2023-26159](https://cve.now/CVE-2023-26159.md): Versions of the package follow-redirects before 1.15.4 are vulnerable to Improper Input Validation due to the improper handling of URLs by t (CVSS 7.3, follow-redirects)
- [CVE-2023-32891](https://cve.now/CVE-2023-32891.md): In bluetooth service, there is a possible out of bounds write due to improper input validation. (CVSS 6.7, MediaTek MT2713, MT6739, MT6761, MT6765, MT6768, MT6769, MT…)
- [CVE-2023-32831](https://cve.now/CVE-2023-32831.md): In wlan driver, there is a possible PIN crack due to use of insufficiently random values. (CVSS 5.5, MediaTek MT6890, MT7612, MT7613, MT7615, MT7622, MT7626, MT…)
- [CVE-2023-32890](https://cve.now/CVE-2023-32890.md): In modem EMM, there is a possible system crash due to improper input validation. (CVSS 5.9, MediaTek MT2731, MT6767, MT6768, MT6769, MT6769T, MT6769Z,…)
- [CVE-2023-32889](https://cve.now/CVE-2023-32889.md): In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. (CVSS 7.5, MediaTek MT2735, MT6813, MT6833, MT6833P, MT6835, MT6853, M…)
- [CVE-2023-32888](https://cve.now/CVE-2023-32888.md): In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. (CVSS 7.5, MediaTek MT2735, MT6813, MT6833, MT6833P, MT6835, MT6853, M…)
- [CVE-2023-32887](https://cve.now/CVE-2023-32887.md): In Modem IMS Stack, there is a possible system crash due to a missing bounds check. (CVSS 7.5, MediaTek MT2735, MT6813, MT6833, MT6833P, MT6835, MT6853, M…)
- [CVE-2023-32886](https://cve.now/CVE-2023-32886.md): In Modem IMS SMS UA, there is a possible out of bounds write due to a missing bounds check. (CVSS 7.5, MediaTek MT2735, MT6813, MT6833, MT6833P, MT6835, MT6853, M…)
- [CVE-2023-32885](https://cve.now/CVE-2023-32885.md): In display drm, there is a possible memory corruption due to a missing bounds check. (CVSS 6.7, MediaTek MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT…)
- [CVE-2023-32884](https://cve.now/CVE-2023-32884.md): In netdagent, there is a possible information disclosure due to an incorrect bounds check. (CVSS 6.7, MediaTek MT2713, MT6580, MT6739, MT6761, MT6765, MT6768, MT…)
- [CVE-2023-32883](https://cve.now/CVE-2023-32883.md): In Engineer Mode, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT2713, MT6580, MT6739, MT6761, MT6762, MT6765, MT…)
- [CVE-2023-32882](https://cve.now/CVE-2023-32882.md): In battery, there is a possible memory corruption due to a missing bounds check. (CVSS 6.7, MediaTek MT6762, MT6765, MT6833, MT6879, MT6883, MT6885, MT…)
- [CVE-2023-32881](https://cve.now/CVE-2023-32881.md): In battery, there is a possible information disclosure due to an integer overflow. (CVSS 4.4, MediaTek MT6762, MT6765, MT6833, MT6879, MT6883, MT6885, MT…)
- [CVE-2023-32880](https://cve.now/CVE-2023-32880.md): In battery, there is a possible information disclosure due to a missing bounds check. (CVSS 4.4, MediaTek MT6762, MT6765, MT6833, MT6879, MT6883, MT6885, MT…)
- [CVE-2023-32879](https://cve.now/CVE-2023-32879.md): In battery, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT6762, MT6765, MT6833, MT6879, MT6883, MT6885, MT…)
- [CVE-2023-32878](https://cve.now/CVE-2023-32878.md): In battery, there is a possible information disclosure due to a missing bounds check. (CVSS 4.4, MediaTek MT6762, MT6765, MT6833, MT6879, MT6883, MT6885, MT…)
- [CVE-2023-32877](https://cve.now/CVE-2023-32877.md): In battery, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT6762, MT6765, MT6833, MT6879, MT6883, MT6885, MT…)
- [CVE-2023-32876](https://cve.now/CVE-2023-32876.md): In keyInstall, there is a possible information disclosure due to a missing bounds check. (CVSS 4.4, MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…)
- [CVE-2023-32875](https://cve.now/CVE-2023-32875.md): In keyInstall, there is a possible information disclosure due to a missing bounds check. (CVSS 4.4, MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…)
- [CVE-2023-32874](https://cve.now/CVE-2023-32874.md): In Modem IMS Stack, there is a possible out of bounds write due to a missing bounds check. (CVSS 9.8, MediaTek MT2735, MT6779, MT6781, MT6783, MT6785, MT6785T, M…)
- [CVE-2023-32872](https://cve.now/CVE-2023-32872.md): In keyInstall, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…)
- [CVE-2024-0186](https://cve.now/CVE-2024-0186.md): HuiRan Host Reseller System HTTP POST Request password recovery (CVSS 3.7, HuiRan Host Reseller System)
- [CVE-2024-0185](https://cve.now/CVE-2024-0185.md): RRJ Nueva Ecija Engineer Online Portal Avatar dasboard\_teacher.php unrestricted upload (CVSS 4.7, RRJ Nueva Ecija Engineer Online Portal)
- [CVE-2020-26623](https://cve.now/CVE-2020-26623.md): SQL Injection vulnerability discovered in Gila CMS 1.15.4 and earlier allows a remote attacker to execute arbitrary web scripts via the Area (CVSS 3.8, gilacms/gila)
- [CVE-2020-26624](https://cve.now/CVE-2020-26624.md): A SQL injection vulnerability was discovered in Gila CMS 1.15.4 and earlier which allows a remote attacker to execute arbitrary web scripts (CVSS 3.8, gilacms/gila)
- [CVE-2020-26625](https://cve.now/CVE-2020-26625.md): A SQL injection vulnerability was discovered in Gila CMS 1.15.4 and earlier which allows a remote attacker to execute arbitrary web scripts (CVSS 3.8, gilacms/gila)
- [CVE-2023-45561](https://cve.now/CVE-2023-45561.md): An issue in A-WORLD OIRASE BEER\_waiting Line v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token (CVSS 5.3)
- [CVE-2023-45892](https://cve.now/CVE-2023-45892.md): An issue discovered in the Order and Invoice pages in Floorsight Insights Q3 2023 allows an unauthenticated remote attacker to view sensitiv (CVSS 7.5)
- [CVE-2023-45893](https://cve.now/CVE-2023-45893.md): An indirect Object Reference (IDOR) in the Order and Invoice pages in Floorsight Customer Portal Q3 2023 allows an unauthenticated remote at (CVSS 7.5)
- [CVE-2023-47458](https://cve.now/CVE-2023-47458.md): An issue in SpringBlade v.3.7.0 and before allows a remote attacker to escalate privileges via the lack of permissions control framework. (CVSS 9.8)
- [CVE-2023-49549](https://cve.now/CVE-2023-49549.md): An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs\_getretvalpos function in the msj.c file. (CVSS 7.5)
- [CVE-2023-49550](https://cve.now/CVE-2023-49550.md): An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs+0x4ec508 component. (CVSS 7.5)
- [CVE-2023-49551](https://cve.now/CVE-2023-49551.md): An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs\_op\_json\_parse function in the msj.c file. (CVSS 7.5)
- [CVE-2023-49552](https://cve.now/CVE-2023-49552.md): An Out of Bounds Write in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs\_op\_json\_stringify function in (CVSS 7.5)
- [CVE-2023-49553](https://cve.now/CVE-2023-49553.md): An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs\_destroy function in the msj.c file. (CVSS 7.5)
- [CVE-2023-49554](https://cve.now/CVE-2023-49554.md): Use After Free vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the do\_directive function in t (CVSS 5.5)
- [CVE-2023-49555](https://cve.now/CVE-2023-49555.md): An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expand\_smacro function in the modules/preprocs (CVSS 5.5)
- [CVE-2023-49556](https://cve.now/CVE-2023-49556.md): Buffer Overflow vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expr\_delete\_term function (CVSS 5.5)
- [CVE-2023-49557](https://cve.now/CVE-2023-49557.md): An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the yasm\_section\_bcs\_first function in the libyasm (CVSS 5.5)
- [CVE-2023-49558](https://cve.now/CVE-2023-49558.md): An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expand\_mmac\_params function in the modules/pre (CVSS 5.5)
- [CVE-2023-50019](https://cve.now/CVE-2023-50019.md): An issue was discovered in open5gs v2.6.6. (CVSS 5.9)
- [CVE-2023-50020](https://cve.now/CVE-2023-50020.md): An issue was discovered in open5gs v2.6.6. (CVSS 7.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-01-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.