CVEs published January 7, 2024
35 CVEs were published on January 7, 2024: 0 critical, 7 high.
- Published
- 35
- Critical
- 0
- High
- 7
- Medium
- 24
- Low
- 4
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Kashipara Food Management System
- 17
- Kashipara Hospital Management System
- 2
- SourceCodester Clinic Queuing System
- 2
- Totolink N350RT
- 2
- Uniway Router
- 2
- ACME Ultra Mini HTTPd
- 1
- DeDeCMS
- 1
- IBM Db2
- 1
- OneNav
- 1
- Online Job Portal
- 1
High 7
- CVE-2023-47145IBM Db2 for Windows privilege escalationIBM Db2
- CVE-2023-7210OneNav API improper authenticationOneNav
- CVE-2023-7209Uniway Router Device Reset device_reset.cgi denial of serviceUniway Router
- CVE-2024-0268Kashipara Hospital Management System registration.php sql injectionKashipara Hospital Management System
- CVE-2023-7208Totolink X2000R_V2 boa formTmultiAP buffer overflowTotolink X2000R_V2
- CVE-2024-0267Kashipara Hospital Management System Parameter login.php sql injectionKashipara Hospital Management System
- CVE-2024-0264SourceCodester Clinic Queuing System LoginRegistration.php authorizationSourceCodester Clinic Queuing System
Medium, low and unrated 28
- CVE-2024-0288Kashipara Food Management System rawstock_used_damaged_submit.php sql injectionKashipara Food Management System
- CVE-2024-0287Kashipara Food Management System itemBillPdf.php sql injectionKashipara Food Management System
- CVE-2023-7214Totolink N350RT HTTP POST Request main stack-based overflowTotolink N350RT
- CVE-2023-7213Totolink N350RT HTTP POST Request main stack-based overflowTotolink N350RT
- CVE-2024-0286PHPGurukul Hospital Management System Contact Form index.php#contact_us cross site scriptingPHPGurukul Hospital Management System
- CVE-2024-0284Kashipara Food Management System party_submit.php cross site scriptingKashipara Food Management System
- CVE-2023-7212DeDeCMS Backend file_class.php unrestricted uploadDeDeCMS
- CVE-2024-0283Kashipara Food Management System party_details.php cross site scriptingKashipara Food Management System
- CVE-2024-0282Kashipara Food Management System addmaterialsubmit.php cross site scriptingKashipara Food Management System
- CVE-2024-0281Kashipara Food Management System loginCheck.php sql injectionKashipara Food Management System
- CVE-2024-0280Kashipara Food Management System item_type_submit.php sql injectionKashipara Food Management System
- CVE-2024-0279Kashipara Food Management System item_list_edit.php sql injectionKashipara Food Management System
- CVE-2024-0278Kashipara Food Management System partylist_edit_submit.php sql injectionKashipara Food Management System
- CVE-2024-0277Kashipara Food Management System party_submit.php sql injectionKashipara Food Management System
- CVE-2024-0276Kashipara Food Management System rawstock_used_damaged_smt.php sql injectionKashipara Food Management System
- CVE-2024-0275Kashipara Food Management System item_edit_submit.php sql injectionKashipara Food Management System
- CVE-2024-0274Kashipara Food Management System billAjax.php sql injectionKashipara Food Management System
- CVE-2024-0273Kashipara Food Management System addwaste_entry.php sql injectionKashipara Food Management System
- CVE-2024-0272Kashipara Food Management System addmaterialsubmit.php sql injectionKashipara Food Management System
- CVE-2023-7211Uniway Router Administrative Web Interface reliance on ip address for authenticationUniway Router
- CVE-2024-0271Kashipara Food Management System addmaterial_edit.php sql injectionKashipara Food Management System
- CVE-2024-0270Kashipara Food Management System item_list_submit.php sql injectionKashipara Food Management System
- CVE-2024-0266Project Worlds Online Lawyer Management System User Registration cross site scriptingProject Worlds Online Lawyer Management System
- CVE-2024-0265SourceCodester Clinic Queuing System GET Parameter index.php file inclusionSourceCodester Clinic Queuing System
- CVE-2024-0263ACME Ultra Mini HTTPd HTTP GET Request denial of serviceACME Ultra Mini HTTPd
- CVE-2024-0262Online Job Portal Create News Page News.php cross site scriptingOnline Job Portal
- CVE-2024-0261Sentex FTPDMIN RNFR Command denial of serviceSentex FTPDMIN
- CVE-2024-0260SourceCodester Engineers Online Portal Password Change change_password_teacher.php session expirationSourceCodester Engineers Online Portal