CVEs published January 13, 2024
52 CVEs were published on January 13, 2024: 1 critical, 13 high.
- Published
- 52
- Critical
- 1
- High
- 13
- Medium
- 32
- Low
- 6
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- code-projects Fighting Cock Information System
- 8
- Kashipara Billing Software
- 5
- Taokeyun
- 5
- SourceCodester House Rental Management System
- 4
- @evershop/evershop
- 2
- flaskcode
- 2
- Huaxia ERP
- 2
- Blood Bank & Donor Management
- 1
- Campcodes Student Information System
- 1
- chromiumembedded cef
- 1
Critical 1
High 13
- CVE-2024-0510HaoKeKeJi YiQiNiu Api.php http_post server-side request forgeryHaoKeKeJi YiQiNiu
- CVE-2024-0480Taokeyun HTTP POST Request Drs.php index sql injectionTaokeyun
- CVE-2024-0479Taokeyun HTTP POST Request User.php login sql injectionTaokeyun
- CVE-2023-33472An issue was discovered in Scada-LTS v2.7.5.2 build 4551883606 and before, allows remote attackers with low-level authentication to escalate
- CVE-2023-46942Lack of authentication in NPM's package @evershop/evershop before version 1.0.0-rc.8, allows remote attackers to obtain sensitive informatio@evershop/evershop
- CVE-2023-51063QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 was discovered to contain a DOM Based Reflected Cross Site Scripting (XSS) vulne
- CVE-2023-51065Incorrect access control in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers to obtain system ba
- CVE-2023-51066An authenticated remote code execution vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows attackers to arbi
- CVE-2023-51070An access control issue in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers to arbitrarily adjus
- CVE-2023-51804An issue in rymcu forest v.0.02 allows a remote attacker to obtain sensitive information via manipulation of the HTTP body URL in the com.ry
- CVE-2023-51805SQL Injection vulnerability in TDuckCLoud tduck-platform v.4.0 allows a remote attacker to obtain sensitive information via the getFormKey p
- CVE-2023-52288An issue was discovered in the flaskcode package through 0.0.8 for Python.flaskcode
- CVE-2023-52289An issue was discovered in the flaskcode package through 0.0.8 for Python.flaskcode
Medium, low and unrated 38
- CVE-2024-0505ZhongFuCheng3y Austin Upload Material Menu MaterialController.java getFile unrestricted uploadZhongFuCheng3y Austin
- CVE-2024-0504code-projects Simple Online Hotel Reservation System Make a Reservation Page add_reserve.php cross site scriptingcode-projects Simple Online Hotel Reservation System
- CVE-2024-0503code-projects Online FIR System registercomplaint.php cross site scriptingcode-projects Online FIR System
- CVE-2024-0502SourceCodester House Rental Management System Edit User manage_user.php sql injectionSourceCodester House Rental Management System
- CVE-2024-0501SourceCodester House Rental Management System Manage Invoice Details cross site scriptingSourceCodester House Rental Management System
- CVE-2024-0500SourceCodester House Rental Management System Manage Tenant Details cross site scriptingSourceCodester House Rental Management System
- CVE-2024-0499SourceCodester House Rental Management System index.php cross site scriptingSourceCodester House Rental Management System
- CVE-2024-0498Project Worlds Lawyer Management System searchLawyer.php sql injectionProject Worlds Lawyer Management System
- CVE-2024-0497Campcodes Student Information System sql injectionCampcodes Student Information System
- CVE-2024-0496Kashipara Billing Software HTTP POST Request item_list_edit.php sql injectionKashipara Billing Software
- CVE-2024-0495Kashipara Billing Software HTTP POST Request party_submit.php sql injectionKashipara Billing Software
- CVE-2024-0494Kashipara Billing Software HTTP POST Request material_bill.php sql injectionKashipara Billing Software
- CVE-2024-0493Kashipara Billing Software HTTP POST Request submit_delivery_list.php sql injectionKashipara Billing Software
- CVE-2024-0492Kashipara Billing Software HTTP POST Request buyer_detail_submit.php sql injectionKashipara Billing Software
- CVE-2024-0491Huaxia ERP UserController.java password recoveryHuaxia ERP
- CVE-2024-0490Huaxia ERP getAllList information disclosureHuaxia ERP
- CVE-2024-0489code-projects Fighting Cock Information System edit_chicken.php sql injectioncode-projects Fighting Cock Information System
- CVE-2024-0488code-projects Fighting Cock Information System new-feed.php sql injectioncode-projects Fighting Cock Information System
- CVE-2024-0487code-projects Fighting Cock Information System delete-vaccine.php sql injectioncode-projects Fighting Cock Information System
- CVE-2024-0486code-projects Fighting Cock Information System add_con.php sql injectioncode-projects Fighting Cock Information System
- CVE-2024-0485code-projects Fighting Cock Information System add_con.php sql injectioncode-projects Fighting Cock Information System
- CVE-2024-0484code-projects Fighting Cock Information System update_mother.php sql injectioncode-projects Fighting Cock Information System
- CVE-2024-0483Taokeyun HTTP POST Request Task.php index sql injectionTaokeyun
- CVE-2024-0482Taokeyun HTTP POST Request Video.php index sql injectionTaokeyun
- CVE-2024-0481Taokeyun HTTP POST Request Goods.php shopGoods sql injectionTaokeyun
- CVE-2024-22209XBlock custom auth does not respect JWT Scopesopenedx edx-platform
- CVE-2024-21640OOB Access in CefVideoConsumerOSR::OnFrameCapturedchromiumembedded cef
- CVE-2024-0251Advanced Woo Search <= 2.96 - Reflected Cross-Site Scriptingmihail-barinov Advanced Woo Search – Product Search for Woo…
- CVE-2024-0478code-projects Fighting Cock Information System edit_chicken.php sql injectioncode-projects Fighting Cock Information System
- CVE-2024-0477code-projects Fighting Cock Information System update-deworm.php sql injectioncode-projects Fighting Cock Information System
- CVE-2024-0476Blood Bank & Donor Management request-received-bydonar.php cross site scriptingBlood Bank & Donor Management
- CVE-2024-0475code-projects Dormitory Management System modifyuser.php sql injectioncode-projects Dormitory Management System
- CVE-2023-50072A Stored Cross-Site Scripting (XSS) vulnerability exists in OpenKM version 7.1.40 (dbb6e88) With Professional Extension that allows an authe
- CVE-2023-51062An unauthenticated log file read in the component log-smblog-save of QStar Archive Solutions RELEASE_3-0 Build 7 Patch 0 allows attackers to
- CVE-2023-51064QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 was discovered to contain a DOM Based reflected XSS vulnerability within the com
- CVE-2023-51067An unauthenticated reflected cross-site scripting (XSS) vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build 7 allows attacker
- CVE-2023-51068An authenticated reflected cross-site scripting (XSS) vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build 7 allows attackers
- CVE-2023-51071An access control issue in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers to arbitrarily disab