CVEs published January 10, 2024
178 CVEs were published on January 10, 2024: 33 critical, 53 high. 1 is now in CISA KEV.
- Published
- 178
- Critical
- 33
- High
- 53
- Medium
- 83
- Low
- 9
- Unrated
- 0
- Now in CISA KEV
- 1
- Fix available
- 65
Most affected products
- Apple macOS
- 26
- Rexroth Nexo cordless nutrunner NXA015S-36V · Rexroth N… +13
- 25
- Apple iOS and iPadOS · Apple macOS
- 11
- WWBN AVideo
- 11
- Apple macOS · Apple iOS and iPadOS
- 8
- Adobe Substance3D - Stager
- 6
- Apple iOS and iPadOS
- 5
- PHPGurukul Hospital Management System
- 5
- PTC Kepware KEPServerEX · PTC ThingWorx Kepware Server +1
- 4
- WWBN AVideo · wwbn/avideo
- 3
Critical 33
- CVE-2023-40414A use-after-free issue was addressed with improved memory management.Apple iOS and iPadOS · Apple tvOS +3
- CVE-2024-21638Azure IPAM solution Elevation of Privilege VulnerabilityAzure ipam
- CVE-2023-48728A cross-site scripting (xss) vulnerability exists in the functiongetOpenGraph videoName functionality of WWBN AVideo 11.6 and dev master comWWBN AVideo
- CVE-2023-47861A cross-site scripting (xss) vulnerability exists in the channelBody.php user name functionality of WWBN AVideo 11.6 and dev master commit 1WWBN AVideo
- CVE-2023-47862A local file inclusion vulnerability exists in the getLanguageFromBrowser functionality of WWBN AVideo dev master commit 15fed957fb.WWBN AVideo
- CVE-2023-49599An insufficient entropy vulnerability exists in the salt generation functionality of WWBN AVideo dev master commit 15fed957fb.WWBN AVideo · wwbn/avideo
- CVE-2020-26629A JQuery Unrestricted Arbitrary File Upload vulnerability was discovered in Hospital Management System V4.0 which allows an unauthenticated
- CVE-2022-46025Totolink N200RE_V5 V9.3.5u.6255_B20211224 is vulnerable to Incorrect Access Control.
- CVE-2023-31446In Cassia Gateway firmware XC1000_2.1.1.2303082218 and XC2000_2.1.1.2303090947, the queueUrl parameter in /bypass/config is not sanitized.
- CVE-2023-31488Hyland Perceptive Filters releases before 2023-12-08 (e.g., 11.4.0.2647), as used in Cisco IronPort Email Security Appliance Software, Cisco
- CVE-2023-51123An issue discovered in D-Link dir815 v.1.01SSb08.bin allows a remote attacker to execute arbitrary code via a crafted POST request to the se
- CVE-2023-51126Command injection vulnerability in /usr/www/res.php in FLIR AX8 up to 1.46.16 allows attackers to run arbitrary commands via the value param
- CVE-2023-51952Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formSetIptv.
- CVE-2023-51953Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv.
- CVE-2023-51954Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formSetIptv.
- CVE-2023-51956Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formSetIptv
- CVE-2023-51957Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formGetIptv.
- CVE-2023-51958Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function formGetIptv.
- CVE-2023-51959Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function formGetIptv.
- CVE-2023-51960Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formGetIptv.
- CVE-2023-51961Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formGetIptv.
- CVE-2023-51962Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function setIptvInfo.
- CVE-2023-51963Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo.
- CVE-2023-51964Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function setIptvInfo.
- CVE-2023-51965Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function setIptvInfo.
- CVE-2023-51966Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function setIptvInfo.
- CVE-2023-51967Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function getIptvInfo.
- CVE-2023-51968Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function getIptvInfo.
- CVE-2023-51969Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function getIptvInfo.
- CVE-2023-51970Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv.
- CVE-2023-51971Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stbpvid parameter in the function getIptvInfo.
- CVE-2023-51972Tenda AX1803 v1.0.0.1 was discovered to contain a command injection vulnerability via the function fromAdvSetLanIp.
- CVE-2023-52064Wuzhicms v4.1.0 was discovered to contain a SQL injection vulnerability via the $keywords parameter at /core/admin/copyfrom.php.
High 53
- CVE-2024-21833Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product to execute arbitrary OS commands.TP-Link Archer AX3000 · TP-Link Archer AX5400 +3
- CVE-2024-21821Multiple TP-LINK products allow a network-adjacent authenticated attacker with access to the product from the LAN port or Wi-Fi to execute aTP-Link Archer AX3000 · TP-Link Archer AX5400 +2
- CVE-2024-21773Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product from the LAN port or Wi-Fi to executeTP-Link Archer AX3000 · TP-Link Archer AX5400 +3
- CVE-2022-45794Omron CJ-series and CS-series unauthenticated filesystem access.Omron CJ-series and CS-series CPU modules
- CVE-2023-42833A correctness issue was addressed with improved checks.Apple iOS and iPadOS · Apple Safari +1
- CVE-2023-42832A race condition was addressed with improved state handling.Apple macOS
- CVE-2023-42869Multiple memory corruption issues were addressed with improved input validation.Apple macOS · Apple iOS and iPadOS
- CVE-2023-32383This issue was addressed by forcing hardened runtime on the affected binaries at the system level.Apple macOS
- CVE-2023-42828This issue was addressed by removing the vulnerable code.Apple macOS
- CVE-2023-41075A type confusion issue was addressed with improved checks.Apple macOS · Apple iOS and iPadOS
- CVE-2022-46721The issue was addressed with improved memory handling.Apple macOS
- CVE-2023-40393An authentication issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS
- CVE-2023-32366An out-of-bounds write issue was addressed with improved input validation.Apple macOS · Apple iOS and iPadOS
- CVE-2023-42933This issue was addressed with improved checks.Apple macOS
- CVE-2023-42876The issue was addressed with improved bounds checks.Apple macOS
- CVE-2023-41974A use-after-free issue was addressed with improved memory management.Apple iOS and iPadOS
- CVE-2022-47915The issue was addressed with improved memory handling.Apple macOS
- CVE-2023-41060A type confusion issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS
- CVE-2023-32436The issue was addressed with improved bounds checks.Apple macOS
- CVE-2023-42866The issue was addressed with improved memory handling.Apple Safari · Apple tvOS +3
- CVE-2023-42870A use-after-free issue was addressed with improved memory management.Apple iOS and iPadOS · Apple macOS
- CVE-2023-42826The issue was addressed with improved checks.Apple macOS
- CVE-2023-42871The issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS
- CVE-2023-38610A memory corruption issue was addressed by removing the vulnerable code.Apple iOS and iPadOS · Apple macOS
- CVE-2022-47965The issue was addressed with improved memory handling.Apple macOS
- CVE-2023-32401A buffer overflow was addressed with improved bounds checking.Apple macOS
- CVE-2023-32378A use-after-free issue was addressed with improved memory management.Apple macOS
- CVE-2023-29445Uncontrolled Search Path Element in PTC's Kepware KEPServerEXPTC Kepware KEPServerEX · PTC ThingWorx Kepware Server +1
- CVE-2023-44250An improper privilege management vulnerability [CWE-269] in a Fortinet FortiOS HA cluster version 7.4.0 through 7.4.1 and 7.2.5 and in a ForFortinet FortiOS · Fortinet FortiProxy
- CVE-2023-45139fonttools XML External Entity Injection (XXE) Vulnerabilityfonttools
- CVE-2023-41056Redis vulnerable to integer overflow in certain payloadsredis
- CVE-2023-49738An information disclosure vulnerability exists in the image404Raw.php functionality of WWBN AVideo dev master commit 15fed957fb.WWBN AVideo
- CVE-2023-48730A cross-site scripting (xss) vulnerability exists in the navbarMenuAndLogo.php user name functionality of WWBN AVideo dev master commit 15feWWBN AVideo
- CVE-2023-49589An insufficient entropy vulnerability exists in the userRecoverPass.php recoverPass generation functionality of WWBN AVideo dev master commiWWBN AVideo
- CVE-2023-49810A login attempt restriction bypass vulnerability exists in the checkLoginAttempts functionality of WWBN AVideo dev master commit 15fed957fb.WWBN AVideo · wwbn/avideo
- CVE-2023-48266The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code ExeRexroth Nexo cordless nutrunner NXA015S-36V · Rexroth N… +13
- CVE-2023-48265The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code ExeRexroth Nexo cordless nutrunner NXA015S-36V · Rexroth N… +13
- CVE-2023-48264The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code ExeRexroth Nexo cordless nutrunner NXA015S-36V · Rexroth N… +13
- CVE-2023-48263The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code ExeRexroth Nexo cordless nutrunner NXA015S-36V · Rexroth N… +13
- CVE-2023-48262The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code ExeRexroth Nexo cordless nutrunner NXA015S-36V · Rexroth N… +13
- CVE-2023-48257The vulnerability allows a remote attacker to access sensitive data inside exported packages or obtain up to Remote Code Execution (RCE) witRexroth Nexo cordless nutrunner NXA015S-36V · Rexroth N… +13
- CVE-2023-48253The vulnerability allows a remote authenticated attacker to read or update arbitrary content of the authentication database via a crafted HTRexroth Nexo cordless nutrunner NXA015S-36V · Rexroth N… +13
- CVE-2023-48252The vulnerability allows an authenticated remote attacker to perform actions exceeding their authorized access via crafted HTTP requests.Rexroth Nexo cordless nutrunner NXA015S-36V · Rexroth N… +13
- CVE-2023-48251The vulnerability allows a remote attacker to authenticate to the SSH service with root privileges through a hidden hard-coded account.Rexroth Nexo cordless nutrunner NXA015S-36V · Rexroth N… +13
- CVE-2023-48250The vulnerability allows a remote attacker to authenticate to the web application with high privileges through multiple hidden hard-coded acRexroth Nexo cordless nutrunner NXA015S-36V · Rexroth N… +13
- CVE-2023-48243The vulnerability allows a remote attacker to upload arbitrary files in all paths of the system under the context of the application OS userRexroth Nexo cordless nutrunner NXA015S-36V · Rexroth N… +13
- CVE-2024-21643Microsoft.IdentityModel.Protocols.SignedHttpRequest remote code execution vulnerabilityAzureAD azure-activedirectory-identitymodel-extensions-for-…
- CVE-2024-0359code-projects Simple Online Hotel Reservation System login.php sql injectioncode-projects Simple Online Hotel Reservation System
- CVE-2023-48864SEMCMS v4.8 was discovered to contain a SQL injection vulnerability via the languageID parameter in /web_inc.php.
- CVE-2023-49427Buffer Overflow vulnerability in Tenda AX12 V22.03.01.46, allows remote attackers to cause a denial of service (DoS) via list parameter in S
- CVE-2023-49471Blind Server-Side Request Forgery (SSRF) vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before
- CVE-2023-50916Kyocera Device Manager before 3.1.1213.0 allows NTLM credential exposure during UNC path authentication via a crafted change from a local pa
- CVE-2023-51127FLIR AX8 thermal sensor cameras up to and including 1.46.16 are vulnerable to Directory Traversal due to improper access restriction.
Medium, low and unrated 92
- CVE-2023-40394The issue was addressed with improved validation of environment variables.Apple iOS and iPadOS
- CVE-2023-42829The issue was addressed with additional restrictions on the observability of app states.Apple macOS
- CVE-2023-41069This issue was addressed by improving Face ID anti-spoofing models.Apple iOS and iPadOS
- CVE-2023-40438An issue was addressed with improved handling of temporary files.Apple iOS and iPadOS · Apple macOS
- CVE-2022-42816A logic issue was addressed with improved state management.Apple macOS
- CVE-2023-42872The issue was addressed with additional permissions checks.Apple iOS and iPadOS · Apple macOS
- CVE-2022-32919The issue was addressed with improved UI handling.Apple macOS · Apple iOS and iPadOS
- CVE-2023-28185An integer overflow was addressed through improved input validation.Apple iOS and iPadOS · Apple macOS +2
- CVE-2023-38612The issue was addressed with improved checks.Apple iOS and iPadOS · Apple macOS
- CVE-2023-42865An out-of-bounds read was addressed with improved input validation.Apple macOS · Apple iOS and iPadOS +2
- CVE-2023-40439A privacy issue was addressed with improved private data redaction for log entries.Apple iOS and iPadOS · Apple macOS
- CVE-2023-40383A path handling issue was addressed with improved validation.Apple macOS
- CVE-2022-46710A logic issue was addressed with improved checks.Apple macOS · Apple iOS and iPadOS
- CVE-2023-42862An out-of-bounds read was addressed with improved input validation.Apple macOS · Apple iOS and iPadOS +2
- CVE-2022-48504The issue was addressed with improved handling of caches.Apple macOS
- CVE-2023-32424The issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple watchOS
- CVE-2023-40385This issue was addressed by removing the vulnerable code.Apple iOS and iPadOS · Apple Safari +1
- CVE-2023-41994A logic issue was addressed with improved checks This issue is fixed in macOS Sonoma 14.Apple macOS
- CVE-2023-40433A logic issue was addressed with improved checks.Apple macOS
- CVE-2023-28197An access issue was addressed with additional sandbox restrictions.Apple macOS
- CVE-2022-32931This issue was addressed with improved data protection.Apple macOS
- CVE-2023-40430A logic issue was addressed with improved checks.Apple macOS
- CVE-2023-42929The issue was addressed with improved checks.Apple macOS
- CVE-2023-40411This issue was addressed with improved data protection.Apple macOS
- CVE-2022-48577An access issue was addressed with improved access restrictions.Apple macOS
- CVE-2023-41987This issue was addressed with improved checks.Apple macOS
- CVE-2023-38607The issue was addressed with improved handling of caches.Apple macOS
- CVE-2023-42831This issue was addressed by removing the vulnerable code.Apple macOS · Apple iOS and iPadOS
- CVE-2023-42934An information disclosure issue was addressed by removing the vulnerable code.Apple iOS and iPadOS · Apple macOS
- CVE-2023-42830A privacy issue was addressed with improved private data redaction for log entries.Apple macOS · Apple iOS and iPadOS
- CVE-2023-40437A privacy issue was addressed with improved private data redaction for log entries.Apple iOS and iPadOS · Apple macOS
- CVE-2022-42839This issue was addressed with improved redaction of sensitive information.Apple macOS · Apple iOS and iPadOS
- CVE-2023-40529This issue was addressed with improved redaction of sensitive information.Apple iOS and iPadOS
- CVE-2023-49295quic-go's path validation mechanism can cause denial of servicequic-go · github.com/quic-go/quic-go
- CVE-2024-0333Insufficient data validation in Extensions in Google Chrome prior to 120.0.6099.216 allowed an attacker in a privileged network position to Google Chrome
- CVE-2023-42941The issue was addressed with improved checks.Apple iOS and iPadOS
- CVE-2022-45793Executable files writable by low-privileged users in Omron Sysmac StudioOmron Sysmac Studio
- CVE-2023-29447Insufficiently Protected Credentials in PTC's Kepware KEPServerEXPTC Kepware KEPServerEX · PTC ThingWorx Kepware Server +1
- CVE-2023-29446Improper Input Validation in PTC's Kepware KEPServerEXPTC Kepware KEPServerEX · PTC ThingWorx Kepware Server +1
- CVE-2023-48783An Authorization Bypass Through User-Controlled Key vulnerability [CWE-639] affecting PortiPortal version 7.2.1 and below, version 7.0.6 andFortinet FortiPortal
- CVE-2023-46712A improper access control in Fortinet FortiPortal version 7.0.0 through 7.0.6, Fortinet FortiPortal version 7.2.0 through 7.2.1 allows attacFortinet FortiPortal
- CVE-2023-37934An allocation of resources without limits or throttling vulnerability [CWE-770] in FortiPAM 1.0 all versions allows an authenticated attackeFortinet FortiPAM
- CVE-2023-37932An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability [CWE-22] in FortiVoiceEntreprise version 7.0Fortinet FortiVoice
- CVE-2023-29444Uncontrolled Search Path Element in PTC's Kepware KEPServerEXPTC Kepware KEPServerEX · PTC ThingWorx Kepware Server +1
- CVE-2023-47171An information disclosure vulnerability exists in the aVideoEncoder.json.php chunkFile path functionality of WWBN AVideo 11.6 and dev masterWWBN AVideo
- CVE-2023-49864An information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image upload functionality of WWBN AVideo dev masteWWBN AVideo
- CVE-2023-49863An information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image upload functionality of WWBN AVideo dev masteWWBN AVideo
- CVE-2023-49862An information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image upload functionality of WWBN AVideo dev masteWWBN AVideo
- CVE-2023-49715A unrestricted php file upload vulnerability exists in the import.json.php temporary copy functionality of WWBN AVideo dev master commit 15fWWBN AVideo
- CVE-2023-50172A recovery notification bypass vulnerability exists in the userRecoverPass.php captcha validation functionality of WWBN AVideo dev master coWWBN AVideo · wwbn/avideo
- CVE-2023-6158EventON - WordPress Virtual Event Calendar Plugin Pro <= 4.5.4 & Free <= 2.2.7 - Missing Authorization to Arbitrary Post Meta Update via evo_eventpost_update_metaashanjay EventON – Events Calendar · EventON (Pro) - WordPr…
- CVE-2024-0389SourceCodester Student Attendance System attendance_report.php sql injectionSourceCodester Student Attendance System
- CVE-2023-48261The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request.Rexroth Nexo cordless nutrunner NXA015S-36V · Rexroth N… +13
- CVE-2023-48260The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request.Rexroth Nexo cordless nutrunner NXA015S-36V · Rexroth N… +13
- CVE-2023-48259The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request.Rexroth Nexo cordless nutrunner NXA015S-36V · Rexroth N… +13
- CVE-2023-48258The vulnerability allows a remote attacker to delete arbitrary files on the file system via a crafted URL or HTTP request through a victim’Rexroth Nexo cordless nutrunner NXA015S-36V · Rexroth N… +13
- CVE-2023-48256The vulnerability allows a remote attacker to inject arbitrary HTTP response headers or manipulate HTTP response bodies inside a victim’s seRexroth Nexo cordless nutrunner NXA015S-36V · Rexroth N… +13
- CVE-2023-48255The vulnerability allows an unauthenticated remote attacker to send malicious network requests containing arbitrary client-side script code Rexroth Nexo cordless nutrunner NXA015S-36V · Rexroth N… +13
- CVE-2023-48254The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s session via a crafted URexroth Nexo cordless nutrunner NXA015S-36V · Rexroth N… +13
- CVE-2023-5455Ipa: invalid csrf protectionRed Hat Enterprise Linux
- CVE-2024-20711Adobe Substance 3D Stager v2.1.1 Vulnerability VIIAdobe Substance3D - Stager
- CVE-2024-20712Adobe Substance 3D Stager v2.1.1 Vulnerability IIIAdobe Substance3D - Stager
- CVE-2024-20713Adobe Substance 3D Stager v2.1.1 Vulnerability IVAdobe Substance3D - Stager
- CVE-2024-20714Adobe Substance 3D Stager v2.1.1 Vulnerability VAdobe Substance3D - Stager
- CVE-2024-20715Adobe Substance 3D Stager v2.1.1 Vulnerability VIIIAdobe Substance3D - Stager
- CVE-2024-20710Adobe Substance 3D Stager v2.1.1 Vulnerability IAdobe Substance3D - Stager
- CVE-2024-0310 A content-security-policy vulnerability in ENS Control browser extension prior to 10.7.0 Update 15 allows a remote attacker to alter the reTrellix Endpoint Security (ENS) Web Control
- CVE-2023-48249The vulnerability allows an authenticated remote attacker to list arbitrary folders in all paths of the system under the context of the applRexroth Nexo cordless nutrunner NXA015S-36V · Rexroth N… +13
- CVE-2023-48248The vulnerability allows an authenticated remote attacker to upload a malicious file to the SD card containing arbitrary client-side script Rexroth Nexo cordless nutrunner NXA015S-36V · Rexroth N… +13
- CVE-2023-48247The vulnerability allows an unauthenticated remote attacker to read arbitrary files under the context of the application OS user (“root”) viRexroth Nexo cordless nutrunner NXA015S-36V · Rexroth N… +13
- CVE-2023-48246The vulnerability allows a remote attacker to download arbitrary files in all paths of the system under the context of the application OS usRexroth Nexo cordless nutrunner NXA015S-36V · Rexroth N… +13
- CVE-2023-48245The vulnerability allows an unauthenticated remote attacker to upload arbitrary files under the context of the application OS user (“root”) Rexroth Nexo cordless nutrunner NXA015S-36V · Rexroth N… +13
- CVE-2023-48244The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s session via a crafted URexroth Nexo cordless nutrunner NXA015S-36V · Rexroth N… +13
- CVE-2023-48242The vulnerability allows an authenticated remote attacker to download arbitrary files in all paths of the system under the context of the apRexroth Nexo cordless nutrunner NXA015S-36V · Rexroth N… +13
- CVE-2023-49619Apache Answer: Repeated submissions using scripts resulted in an abnormal number of collections for questions.Apache Software Foundation Apache Answer · github.com/apach…
- CVE-2023-41781XSS Vulnerability in ZTE MF258 ProductsZTE MF258
- CVE-2024-0364PHPGurukul Hospital Management System query-details.php sql injectionPHPGurukul Hospital Management System
- CVE-2024-0363PHPGurukul Hospital Management System patient-search.php sql injectionPHPGurukul Hospital Management System
- CVE-2024-0362PHPGurukul Hospital Management System change-password.php sql injectionPHPGurukul Hospital Management System
- CVE-2024-0361PHPGurukul Hospital Management System contact.php sql injectionPHPGurukul Hospital Management System
- CVE-2024-0360PHPGurukul Hospital Management System edit-doctor-specialization.php sql injectionPHPGurukul Hospital Management System
- CVE-2024-0358DeShang DSO2O install.php access controlDeShang DSO2O
- CVE-2024-0357coderd-repos Eva HTTP POST Request page sql injectioncoderd-repos Eva
- CVE-2024-0356Mandelo ssm_shiro_blog Backend updateRoles access controlMandelo ssm_shiro_blog
- CVE-2020-26627A Time-Based SQL Injection vulnerability was discovered in Hospital Management System V4.0 which can allow an attacker to dump database info
- CVE-2020-26628A Cross-Site Scripting (XSS) vulnerability was discovered in Hospital Management System V4.0 which allows an attacker to execute arbitrary w
- CVE-2020-26630A Time-Based SQL Injection vulnerability was discovered in Hospital Management System V4.0 which can allow an attacker to dump database info
- CVE-2023-41603D-Link R15 before v1.08.02 was discovered to contain no firewall restrictions for IPv6 traffic.
- CVE-2023-49394Zentao versions 4.1.3 and before has a URL redirect vulnerability, which prevents the system from functioning properly.
- CVE-2023-50120MP4Box GPAC version 2.3-DEV-rev636-gfbd7e13aa-master was discovered to contain an infinite loop in the function av1_uvlc at media_tools/av_p
- CVE-2023-51252PublicCMS 4.0 is vulnerable to Cross Site Scripting (XSS).
- CVE-2023-51955Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formSetIptv.