CVEs published January 6, 2024
8 CVEs were published on January 6, 2024: 1 critical, 2 high.
- Published
- 8
- Critical
- 1
- High
- 2
- Medium
- 5
- Low
- 0
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- themeisle RSS Aggregator by Feedzy – Feed to Post, Autoblog…
- 2
- Apache Software Foundation Apache Axis · org.apache.axis… +1
- 1
Critical 1
High 2
- CVE-2023-51441Apache Axis 1.x (EOL) may allow SSRF when untrusted input is passed to the service admin HTTP APIApache Software Foundation Apache Axis · org.apache.axis… +1
- CVE-2023-50612Insecure Permissions vulnerability in fit2cloud Cloud Explorer Lite version 1.4.1, allow local attackers to escalate privileges and obtain s
Medium, low and unrated 5
- CVE-2023-6798RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.3.2 - Missing Authorizationthemeisle RSS Aggregator by Feedzy – Feed to Post, Autoblog…
- CVE-2023-6801RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.3.2 - Authenticated (Author+) Stored Cross-Site Scriptingthemeisle RSS Aggregator by Feedzy – Feed to Post, Autoblog…
- CVE-2023-39853SQL Injection vulnerability in Dzzoffice version 2.01, allows remote attackers to obtain sensitive information via the doobj and doevent par
- CVE-2023-50121Autel EVO NANO drone flight control firmware version 1.6.5 is vulnerable to denial of service (DoS).
- CVE-2023-50609Cross Site Scripting (XSS) vulnerability in AVA teaching video application service platform version 3.1, allows remote attackers to execute