# CVEs published 2024-01-07 35 CVEs were published on January 7, 2024: 0 critical, 7 high. Days are UTC. - [CVE-2024-0288](https://cve.now/CVE-2024-0288.md): Kashipara Food Management System rawstock\_used\_damaged\_submit.php sql injection (CVSS 6.3, Kashipara Food Management System) - [CVE-2024-0287](https://cve.now/CVE-2024-0287.md): Kashipara Food Management System itemBillPdf.php sql injection (CVSS 6.3, Kashipara Food Management System) - [CVE-2023-7214](https://cve.now/CVE-2023-7214.md): Totolink N350RT HTTP POST Request main stack-based overflow (CVSS 6.3, Totolink N350RT) - [CVE-2023-7213](https://cve.now/CVE-2023-7213.md): Totolink N350RT HTTP POST Request main stack-based overflow (CVSS 6.3, Totolink N350RT) - [CVE-2023-47145](https://cve.now/CVE-2023-47145.md): IBM Db2 for Windows privilege escalation (CVSS 8.4, IBM Db2) - [CVE-2024-0286](https://cve.now/CVE-2024-0286.md): PHPGurukul Hospital Management System Contact Form index.php#contact\_us cross site scripting (CVSS 4.3, PHPGurukul Hospital Management System) - [CVE-2024-0284](https://cve.now/CVE-2024-0284.md): Kashipara Food Management System party\_submit.php cross site scripting (CVSS 3.5, Kashipara Food Management System) - [CVE-2023-7212](https://cve.now/CVE-2023-7212.md): DeDeCMS Backend file\_class.php unrestricted upload (CVSS 4.7, DeDeCMS) - [CVE-2024-0283](https://cve.now/CVE-2024-0283.md): Kashipara Food Management System party\_details.php cross site scripting (CVSS 3.5, Kashipara Food Management System) - [CVE-2024-0282](https://cve.now/CVE-2024-0282.md): Kashipara Food Management System addmaterialsubmit.php cross site scripting (CVSS 3.5, Kashipara Food Management System) - [CVE-2024-0281](https://cve.now/CVE-2024-0281.md): Kashipara Food Management System loginCheck.php sql injection (CVSS 6.3, Kashipara Food Management System) - [CVE-2024-0280](https://cve.now/CVE-2024-0280.md): Kashipara Food Management System item\_type\_submit.php sql injection (CVSS 6.3, Kashipara Food Management System) - [CVE-2024-0279](https://cve.now/CVE-2024-0279.md): Kashipara Food Management System item\_list\_edit.php sql injection (CVSS 6.3, Kashipara Food Management System) - [CVE-2024-0278](https://cve.now/CVE-2024-0278.md): Kashipara Food Management System partylist\_edit\_submit.php sql injection (CVSS 6.3, Kashipara Food Management System) - [CVE-2024-0277](https://cve.now/CVE-2024-0277.md): Kashipara Food Management System party\_submit.php sql injection (CVSS 6.3, Kashipara Food Management System) - [CVE-2024-0276](https://cve.now/CVE-2024-0276.md): Kashipara Food Management System rawstock\_used\_damaged\_smt.php sql injection (CVSS 6.3, Kashipara Food Management System) - [CVE-2024-0275](https://cve.now/CVE-2024-0275.md): Kashipara Food Management System item\_edit\_submit.php sql injection (CVSS 6.3, Kashipara Food Management System) - [CVE-2024-0274](https://cve.now/CVE-2024-0274.md): Kashipara Food Management System billAjax.php sql injection (CVSS 6.3, Kashipara Food Management System) - [CVE-2024-0273](https://cve.now/CVE-2024-0273.md): Kashipara Food Management System addwaste\_entry.php sql injection (CVSS 6.3, Kashipara Food Management System) - [CVE-2024-0272](https://cve.now/CVE-2024-0272.md): Kashipara Food Management System addmaterialsubmit.php sql injection (CVSS 6.3, Kashipara Food Management System) - [CVE-2023-7211](https://cve.now/CVE-2023-7211.md): Uniway Router Administrative Web Interface reliance on ip address for authentication (CVSS 5.6, Uniway Router) - [CVE-2023-7210](https://cve.now/CVE-2023-7210.md): OneNav API improper authentication (CVSS 7.3, OneNav) - [CVE-2023-7209](https://cve.now/CVE-2023-7209.md): Uniway Router Device Reset device\_reset.cgi denial of service (CVSS 7.5, Uniway Router) - [CVE-2024-0271](https://cve.now/CVE-2024-0271.md): Kashipara Food Management System addmaterial\_edit.php sql injection (CVSS 6.3, Kashipara Food Management System) - [CVE-2024-0270](https://cve.now/CVE-2024-0270.md): Kashipara Food Management System item\_list\_submit.php sql injection (CVSS 6.3, Kashipara Food Management System) - [CVE-2024-0268](https://cve.now/CVE-2024-0268.md): Kashipara Hospital Management System registration.php sql injection (CVSS 7.3, Kashipara Hospital Management System) - [CVE-2023-7208](https://cve.now/CVE-2023-7208.md): Totolink X2000R\_V2 boa formTmultiAP buffer overflow (CVSS 8.0, Totolink X2000R\_V2) - [CVE-2024-0267](https://cve.now/CVE-2024-0267.md): Kashipara Hospital Management System Parameter login.php sql injection (CVSS 7.3, Kashipara Hospital Management System) - [CVE-2024-0266](https://cve.now/CVE-2024-0266.md): Project Worlds Online Lawyer Management System User Registration cross site scripting (CVSS 4.3, Project Worlds Online Lawyer Management System) - [CVE-2024-0265](https://cve.now/CVE-2024-0265.md): SourceCodester Clinic Queuing System GET Parameter index.php file inclusion (CVSS 6.3, SourceCodester Clinic Queuing System) - [CVE-2024-0264](https://cve.now/CVE-2024-0264.md): SourceCodester Clinic Queuing System LoginRegistration.php authorization (CVSS 7.3, SourceCodester Clinic Queuing System) - [CVE-2024-0263](https://cve.now/CVE-2024-0263.md): ACME Ultra Mini HTTPd HTTP GET Request denial of service (CVSS 5.3, ACME Ultra Mini HTTPd) - [CVE-2024-0262](https://cve.now/CVE-2024-0262.md): Online Job Portal Create News Page News.php cross site scripting (CVSS 2.4, Online Job Portal) - [CVE-2024-0261](https://cve.now/CVE-2024-0261.md): Sentex FTPDMIN RNFR Command denial of service (CVSS 5.3, Sentex FTPDMIN) - [CVE-2024-0260](https://cve.now/CVE-2024-0260.md): SourceCodester Engineers Online Portal Password Change change\_password\_teacher.php session expiration (CVSS 4.3, SourceCodester Engineers Online Portal) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2024-01-07 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.