CVEs published January 8, 2024
196 CVEs were published on January 8, 2024: 15 critical, 126 high. 1 is now in CISA KEV.
- Published
- 196
- Critical
- 15
- High
- 126
- Medium
- 53
- Low
- 2
- Unrated
- 0
- Now in CISA KEV
- 1
- Fix available
- 35
Most affected products
- GTKWave
- 82
- Open-Xchange OX App Suite
- 6
- The Linux Kernel Organization linux
- 6
- Totolink LR1200GB
- 5
- Totolink N200RE
- 4
- Essential Real Estate
- 3
- fhs-opensource iparking
- 2
- gpac/gpac
- 2
- Kashipara Dynamic Lab Management System
- 2
- Kashipara Food Management System
- 2
Critical 15
- CVE-2024-21663Remote code execution on ReconServer due to improper input sanitization on the prips commandDEMON1A Discord-Recon
- CVE-2023-52202WordPress HTML5 MP3 Player with Folder Feedburner Plugin <= 2.8.0 is vulnerable to PHP Object InjectionSVNLabs Softwares HTML5 MP3 Player with Folder Feedburner P…
- CVE-2023-52200WordPress ARMember Plugin <= 4.0.22 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object InjectionRepute Infosystems ARMember – Membership Plugin, Content Re…
- CVE-2023-52205WordPress HTML5 SoundCloud Player Plugin <= 2.8.0 is vulnerable to PHP Object InjectionSVNLabs Softwares HTML5 SoundCloud Player with Playlist Free
- CVE-2023-52207WordPress HTML5 MP3 Player with Playlist Free Plugin <= 3.0.0 is vulnerable to PHP Object InjectionSVNLabs Softwares HTML5 MP3 Player with Playlist Free
- CVE-2018-25095Duplicator < 1.3.0 - Unauthenticated RCEDuplicator
- CVE-2023-52215WordPress Barcode Scanner with Inventory & Order Manager Plugin <=1.5.1 is vulnerable to SQL InjectionUkrSolution Simple Inventory Management – just scan barcode…
- CVE-2023-52218WordPress WooCommerce Tranzila Gateway Plugin <= 1.0.8 is vulnerable to PHP Object InjectionAnton Bond Woocommerce Tranzila Payment Gateway
- CVE-2023-52219WordPress Gecka Terms Thumbnails Plugin <= 1.1 is vulnerable to PHP Object InjectionGecka Terms Thumbnails
- CVE-2023-52225WordPress Taggbox Plugin <= 3.1 is vulnerable to PHP Object InjectionTagbox – UGC Galleries, Social Media Widgets, User Reviews…
- CVE-2024-21650XWiki Remote Code Execution vulnerability via user registrationxwiki-platform · org.xwiki.platform:xwiki-platform-administ…
- CVE-2023-47211A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258.ManageEngine OpManager
- CVE-2023-6921SQL Injection in PrestaShop Google IntegratorPrestaShow PrestaShop Google Integrator
- CVE-2023-50982Stud.IP 5.x through 5.3.3 allows XSS with resultant upload of executable files, because upload_action and edit_action in Admin_SmileysContro
- CVE-2024-22216In default installations of Microchip maxView Storage Manager (for Adaptec Smart Storage Controllers) where Redfish server is configured for
High 126
- CVE-2024-21648XWiki has no right protection on rollback actionxwiki-platform · org.xwiki.platform:xwiki-platform-oldco… +1
- CVE-2024-21651XWiki Denial of Service attack through attachmentsxwiki-platform · org.xwiki.platform:xwiki-platform-distribu…
- CVE-2023-7218Totolink N350RT cstecgi.cgi loginAuth stack-based overflowTotolink N350RT
- CVE-2023-52142WordPress Events Shortcodes & Templates For The Events Calendar Plugin <= 2.3.1 is vulnerable to SQL InjectionCool Plugins Events Shortcodes For The Events Calendar
- CVE-2023-52196WordPress CPT Bootstrap Carousel Plugin <= 1.12 is vulnerable to Cross Site Scripting (XSS)Phil Ewels CPT Bootstrap Carousel
- CVE-2023-52201WordPress pTypeConverter Plugin <= 0.2.8.1 is vulnerable to SQL InjectionBrian D. Goad pTypeConverter
- CVE-2023-52204WordPress Randomize Plugin <= 1.4.3 is vulnerable to SQL InjectionJavik Randomize
- CVE-2023-52206WordPress Page Builder: Live Composer Plugin <= 1.5.25 is vulnerable to PHP Object InjectionLive Composer Team Page Builder: Live Composer
- CVE-2023-52213WordPress Rate Star Review Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS)VideoWhisper Rate Star Review – AJAX Reviews for Content, w…
- CVE-2023-6631Subnet Solutions Inc. PowerSYSTEM Center Unquoted Search Path or ElementSubnet Solutions PowerSYSTEM Center
- CVE-2023-6532WP Blogs' Planetarium <= 1.0 - Settings Update via CSRFWP Blogs' Planetarium
- CVE-2023-52190WordPress Coupon Referral Program Plugin <= 1.7.2 is vulnerable to Sensitive Data ExposureWP Swings Coupon Referral Program
- CVE-2023-6505Prime Mover < 1.9.3 - Directory Listing to Sensitive Data ExposureMigrate WordPress Website & Backups
- CVE-2023-6845CommentTweets <= 0.6 - Settings Update via CSRFCommentTweets
- CVE-2023-6750Clone < 2.4.3 - Unauthenticated Backup DownloadClone
- CVE-2023-6140Essential Real Estate < 4.4 - Subscriber+ Arbitrary File UploadEssential Real Estate
- CVE-2023-5235Ovic Responsive WPBakery < 1.2.9 - Subscriber+ Option UpdateOvic Responsive WPBakery
- CVE-2023-6528Slider Revolution < 6.6.19 - Author+ Insecure Deserialization leading to RCESlider Revolution
- CVE-2023-6383Debug Log Manager < 2.3.0 - Sensitive Logs ExposureDebug Log Manager
- CVE-2023-5957Ni Purchase Order(PO) For WooCommerce <= 1.2.1 - Admin+ File Upload to Remote Code ExecutionNi Purchase Order(PO) For WooCommerce
- CVE-2023-6042Getwid < 2.0.3 - Unauthenticated Arbitrary Email Sending to AdminGetwid
- CVE-2021-3600It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when perfoThe Linux Kernel Organization linux
- CVE-2022-3328Race condition in snap-confine's must_mkdir_and_open_with_perms()Canonical snapd · github.com/snapcore/snapd
- CVE-2024-21747WordPress WP ERP Plugin <= 1.12.8 is vulnerable to SQL InjectionweDevs WP ERP | Complete HR solution with recruitment & job…
- CVE-2023-32650An integer overflow vulnerability exists in the FST_BL_GEOM parsing maxhandle functionality of GTKWave 3.3.115, when compiled as a 32-bit biGTKWave
- CVE-2023-35704Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-35703Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-35702Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-35958Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-35957Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-35956Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-35955Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-35964Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-35963Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-35962Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-35961Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-35960Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-35959Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-35970Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 chain_table parsing functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-35969Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 chain_table parsing functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-35992An integer overflow vulnerability exists in the FST fstReaderIterBlocks2 vesc allocation functionality of GTKWave 3.3.115, when compiled as GTKWave
- CVE-2023-35997Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-35996Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-35995Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-35994Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-35128An integer overflow vulnerability exists in the fstReaderIterBlocks2 time_table tsec_nitems functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-36747Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 fstWritex len functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-36746Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 fstWritex len functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-36864An integer overflow vulnerability exists in the fstReaderIterBlocks2 temp_signal_value_buf allocation functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-36916Multiple integer overflow vulnerabilities exist in the FST fstReaderIterBlocks2 chain_table allocation functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-36915Multiple integer overflow vulnerabilities exist in the FST fstReaderIterBlocks2 chain_table allocation functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-34087An improper array index validation vulnerability exists in the EVCD var len parsing functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-37420Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-37419Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-37418Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-37417Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-37416Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-37447Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-37446Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-37445Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-37444Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-37443Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-37442Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-37578Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-37577Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-37576Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-37575Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-37574Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-37573Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-37923Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-37922Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-37921Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-37282An out-of-bounds write vulnerability exists in the VZT LZMA_Read dmem extraction functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-36861An out-of-bounds write vulnerability exists in the VZT LZMA_read_varint functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-38623Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-38622Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-38621Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-38620Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-38619Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-38618Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-38649Multiple out-of-bounds write vulnerabilities exist in the VZT vzt_rd_get_facname decompression functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-38648Multiple out-of-bounds write vulnerabilities exist in the VZT vzt_rd_get_facname decompression functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-38651Multiple integer overflow vulnerabilities exist in the VZT vzt_rd_block_vch_decode times parsing functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-38650Multiple integer overflow vulnerabilities exist in the VZT vzt_rd_block_vch_decode times parsing functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-38653Multiple integer overflow vulnerabilities exist in the VZT vzt_rd_block_vch_decode dict parsing functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-38652Multiple integer overflow vulnerabilities exist in the VZT vzt_rd_block_vch_decode dict parsing functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-35004An integer overflow vulnerability exists in the VZT longest_len value allocation functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-39235Multiple out-of-bounds write vulnerabilities exist in the VZT vzt_rd_process_block autosort functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-39234Multiple out-of-bounds write vulnerabilities exist in the VZT vzt_rd_process_block autosort functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-39275Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-39274Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-39273Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-39272Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-39271Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-39270Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-34436An out-of-bounds write vulnerability exists in the LXT2 num_time_table_entries functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-39317Multiple integer overflow vulnerabilities exist in the LXT2 num_dict_entries functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-39316Multiple integer overflow vulnerabilities exist in the LXT2 num_dict_entries functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-35057An integer overflow vulnerability exists in the LXT2 lxt2_rd_trace value elements allocation functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-35989An integer overflow vulnerability exists in the LXT2 zlib block allocation functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-38657An out-of-bounds write vulnerability exists in the LXT2 zlib block decompression functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-39414Multiple integer underflow vulnerabilities exist in the LXT2 lxt2_rd_iter_radix shift operation functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-39413Multiple integer underflow vulnerabilities exist in the LXT2 lxt2_rd_iter_radix shift operation functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-39444Multiple out-of-bounds write vulnerabilities exist in the LXT2 parsing functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-39443Multiple out-of-bounds write vulnerabilities exist in the LXT2 parsing functionality of GTKWave 3.3.115.GTKWave
- CVE-2023-38583A stack-based buffer overflow vulnerability exists in the LXT2 lxt2_rd_expand_integer_to_bits function of GTKWave 3.3.115.GTKWave
- CVE-2023-7224OpenVPN Connect version 3.0 through 3.4.6 on macOS allows local users to execute code in external third party libraries using the DYLD_INSEROpenVPN Connect
- CVE-2024-21644pyLoad unauthenticated flask configuration leakagepyload · pyload-ng
- CVE-2024-0307Kashipara Dynamic Lab Management System login_process.php sql injectionKashipara Dynamic Lab Management System
- CVE-2023-5091Mali GPU Kernel Driver allows improper GPU processing operationsArm Valhall GPU Kernel Driver
- CVE-2023-29051User-defined OXMF templates could be used to access a limited part of the internal OX App Suite Java API.Open-Xchange OX App Suite
- CVE-2024-0306Kashipara Dynamic Lab Management System admin_login_process.php sql injectionKashipara Dynamic Lab Management System
- CVE-2023-29050The optional "LDAP contacts provider" could be abused by privileged users to inject LDAP filter strings that allow to access content outsideOpen-Xchange OX App Suite
- CVE-2023-29048A component for parsing OXMF templates could be abused to execute arbitrary system commands that would be executed as the non-privileged runOpen-Xchange OX App Suite
- CVE-2024-0299Totolink N200RE cstecgi.cgi setTracerouteCfg os command injectionTotolink N200RE
- CVE-2024-0298Totolink N200RE cstecgi.cgi setDiagnosisCfg os command injectionTotolink N200RE
- CVE-2024-0297Totolink N200RE cstecgi.cgi UploadFirmwareFile os command injectionTotolink N200RE
- CVE-2024-0296Totolink N200RE cstecgi.cgi NTPSyncWithHost os command injectionTotolink N200RE
- CVE-2024-0295Totolink LR1200GB cstecgi.cgi setWanCfg os command injectionTotolink LR1200GB
- CVE-2024-0294Totolink LR1200GB cstecgi.cgi setUssd os command injectionTotolink LR1200GB
- CVE-2023-47890pyLoad 0.5.0 is vulnerable to Unrestricted File Upload.pyload-ng
- CVE-2023-49961WALLIX Bastion 7.x, 8.x, 9.x and 10.x and WALLIX Access Manager 3.x and 4.x have Incorrect Access Control which can lead to sensitive data e
- CVE-2023-50162SQL injection vulnerability in EmpireCMS v7.5, allows remote attackers to execute arbitrary code and obtain sensitive information via the Do
- CVE-2023-52072FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /system/site/userconfig_updagte.
- CVE-2023-52073FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /system/site/config_footer_updagte.
- CVE-2023-52074FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component system/site/webconfig_updagte.
Medium, low and unrated 55
- CVE-2022-40696WordPress Advanced Custom Fields Plugin 3.1.1-6.0.2 is vulnerable to Sensitive Data ExposureWP Engine Advanced Custom Fields
- CVE-2022-36352WordPress ProfileGrid Plugin <= 5.0.3 is vulnerable to Broken Access ControlProfileGrid – User Profiles, Memberships, Groups and Commun…
- CVE-2022-34344WordPress Wholesale Suite Plugin <= 2.1.5 is vulnerable to Broken Access ControlRymera Web Wholesale Suite – WooCommerce Wholesale Prices,…
- CVE-2022-45354WordPress Download Monitor Plugin <= 4.7.60 is vulnerable to Sensitive Data ExposureWPChill Download Monitor
- CVE-2023-51406WordPress FastDup Plugin <= 2.1.7 is vulnerable to Sensitive Data ExposureNinja Team FastDup – Fastest WordPress Migration & Duplicat…
- CVE-2023-51408WordPress WP Optin Wheel Plugin <= 1.4.3 is vulnerable to Sensitive Data ExposureStudioWombat WP Optin Wheel – Gamified Optin Email Marketin…
- CVE-2023-52197WordPress Ads Invalid Click Protection Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)Impactpixel Ads Invalid Click Protection
- CVE-2023-52198WordPress Private Google Calendars Plugin <= 20231125 is vulnerable to Cross Site Scripting (XSS)Michiel van Eerd Private Google Calendars
- CVE-2023-51490WordPress Defender Security Plugin <= 4.1.0 is vulnerable to Sensitive Data ExposureWPMU DEV Defender Security – Malware Scanner, Login Securit…
- CVE-2023-51508WordPress Database Cleaner Plugin <= 0.9.8 is vulnerable to Sensitive Data ExposureJordy Meow Database Cleaner: Clean, Optimize & Repair
- CVE-2023-52203WordPress CformsII Plugin <= 15.0.5 is vulnerable to Cross Site Scripting (XSS)Oliver Seidel, Bastian Germann cformsII
- CVE-2023-52216WordPress JS & CSS Script Optimizer Plugin <= 0.3.3 is vulnerable to Cross Site Request Forgery (CSRF)Yevhen Kotelnytskyi JS & CSS Script Optimizer
- CVE-2023-5911WP Custom Cursors <= 3.2 - Admin+ Stored XSSWP Custom Cursors | WordPress Cursor Plugin
- CVE-2023-6141Essential Real Estate < 4.4.0 - Subscriber+ Stored XSSEssential Real Estate
- CVE-2023-6139Essential Real Estate < 4.4.0 - Subscriber+ Denial of Service via Arbitrary Option UpdateEssential Real Estate
- CVE-2023-6627WP Go Maps < 9.0.28 - Unauthenticated Stored XSSWP Go Maps
- CVE-2023-6161WP Crowdfunding < 2.1.9 - Reflected XSSWP Crowdfunding
- CVE-2023-6555Email Subscription Popup < 1.2.20 - Reflected XSSEmail Subscription Popup
- CVE-2023-6529WP VR < 8.3.15 - Unauthenticated Plugin Downgrade leading to XSSWP VR
- CVE-2023-52208WordPress Constant Contact Forms Plugin <= 2.4.2 is vulnerable to Sensitive Data ExposureConstant Contact Forms
- CVE-2023-52222WordPress WooCommerce Plugin <= 8.2.2 is vulnerable to Cross Site Request Forgery (CSRF)Automattic WooCommerce
- CVE-2023-1032The Linux kernel io_uring IORING_OP_SOCKET operation contained a double free in function __sys_socket_file() in file net/socket.c.The Linux Kernel Organization linux
- CVE-2022-2602io_uring UAF, Unix SCM garbage collectionThe Linux Kernel Organization linux
- CVE-2022-2588It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeThe Linux Kernel Organization linux
- CVE-2022-2586It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that The Linux Kernel Organization linux
- CVE-2022-2585It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed, leading to a use-afThe Linux Kernel Organization linux
- CVE-2024-21744WordPress Mapster WP Maps Plugin <= 1.2.38 is vulnerable to Cross Site Scripting (XSS)Mapster Technology Mapster WP Maps
- CVE-2024-21745WordPress Laybuy Payment Extension for WooCommerce Plugin <= 5.3.9 is vulnerable to Cross Site Scripting (XSS)Laybuy Payment Extension for WooCommerce
- CVE-2023-51701@fastify-reply-from JSON Content-Type parsing confusionfastify-reply-from · @fastify/reply-from
- CVE-2024-21647HTTP Request/Response Smuggling in pumapuma
- CVE-2024-21645pyLoad Log Injectionpyload · pyload-ng
- CVE-2024-0322Out-of-bounds Read in gpac/gpacgpac/gpac
- CVE-2023-6552Open redirect in TasmoAdminTasmoAdmin
- CVE-2024-0321Stack-based Buffer Overflow in gpac/gpacgpac/gpac
- CVE-2024-0308Inis Proxy.php server-side request forgeryInis
- CVE-2023-41710User-defined script code could be stored for a upsell related shop URL.Open-Xchange OX App Suite
- CVE-2023-29052Users were able to define disclaimer texts for an upsell shop dialog that would contain script code that was not sanitized correctly.Open-Xchange OX App Suite
- CVE-2023-29049The "upsell" widget at the portal page could be abused to inject arbitrary script code.Open-Xchange OX App Suite
- CVE-2024-0305Guangzhou Yingke Electronic Technology Ncast Guest Login IPSetup.php information disclosureGuangzhou Yingke Electronic Technology Ncast
- CVE-2024-0304Youke365 collect.php server-side request forgeryYouke365
- CVE-2024-0303Youke365 Parameter caiji.php server-side request forgeryYouke365
- CVE-2024-0302fhs-opensource iparking vueLogin deserializationfhs-opensource iparking
- CVE-2024-0301fhs-opensource iparking PayTempOrderAction.java getData sql injectionfhs-opensource iparking
- CVE-2024-0300Byzoro Smart S150 Management Platform HTTP POST Request userattestation.php unrestricted uploadByzoro Smart S150 Management Platform
- CVE-2024-0293Totolink LR1200GB cstecgi.cgi setUploadSetting os command injectionTotolink LR1200GB
- CVE-2023-47140IBM CICS Transaction Gateway improper access controlsIBM CICS Transaction Gateway Containers
- CVE-2024-0292Totolink LR1200GB cstecgi.cgi setOpModeCfg os command injectionTotolink LR1200GB
- CVE-2023-50948IBM Storage Fusion HCI information disclosureIBM Storage Fusion HCI
- CVE-2023-7215Chanzhaoyu chatgpt-web cross site scriptingChanzhaoyu chatgpt-web
- CVE-2024-0291Totolink LR1200GB cstecgi.cgi UploadFirmwareFile command injectionTotolink LR1200GB
- CVE-2024-0290Kashipara Food Management System stock_edit.php sql injectionKashipara Food Management System
- CVE-2024-0289Kashipara Food Management System stock_entry_submit.php sql injectionKashipara Food Management System
- CVE-2023-27739easyXDM 2.5 allows XSS via the xdm_e parameter.
- CVE-2023-51246A Cross Site Scripting (XSS) vulnerability in GetSimple CMS 3.3.16 exists when using Source Code Mode as a backend user to add articles via
- CVE-2023-52271The wsftprm.sys kernel driver 2.0.0.0 in Topaz Antifraud allows low-privileged attackers to kill any (Protected Process Light) process via a