CVEs published January 18, 2024
90 CVEs were published on January 18, 2024: 5 critical, 28 high.
- Published
- 90
- Critical
- 5
- High
- 28
- Medium
- 52
- Low
- 5
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 21
Most affected products
- Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- 21
- Delta Electronics DOPSoft
- 10
- nextcloud security-advisories
- 7
- brechtvds WP Recipe Maker
- 3
- Adobe Experience Manager
- 2
- Aveva PI Server
- 2
- openEuler kernel
- 2
- PHPGurukul Company Visitor Management System
- 2
- Progress Software OpenEdge
- 2
- xorg-server · Red Hat Enterprise Linux
- 2
Critical 5
- CVE-2024-22212Nextcloud global site selector authentication bypassnextcloud security-advisories
- CVE-2023-40051Progress Application Server (PAS) for OpenEdge File Upload via Directory TraversalProgress Software OpenEdge
- CVE-2024-22317IBM App Connect Enterprise denial of serviceIBM App Connect Enterprise
- CVE-2023-5806SQLi in Mergen Soft Quality Management SystemMergen Software Quality Management System
- CVE-2023-6816Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointerRed Hat Enterprise Linux 6 Extended Lifecycle Support - EX…
High 28
- CVE-2023-43824Delta Electronics Delta Industrial Automation DOPSoft DPS File wTitleTextLen Buffer Overflow Remote Code ExecutionDelta Electronics DOPSoft
- CVE-2023-43823Delta Electronics Delta Industrial Automation DOPSoft DPS File wTTitleLen Buffer Overflow Remote Code ExecutionDelta Electronics DOPSoft
- CVE-2023-43822Delta Electronics Delta Industrial Automation DOPSoft DPS File wLogTitlesTimeLen Buffer Overflow Remote Code ExecutionDelta Electronics DOPSoft
- CVE-2023-43821Delta Electronics Delta Industrial Automation DOPSoft DPS File wLogTitlesActionLen Buffer Overflow Remote Code ExecutionDelta Electronics DOPSoft
- CVE-2023-43820Delta Electronics Delta Industrial Automation DOPSoft DPS File wLogTitlesPrevValueLen Buffer Overflow Remote Code ExecutionDelta Electronics DOPSoft
- CVE-2023-43819Delta Electronics Delta Industrial Automation DOPSoft DPS File InitialMacroLen Buffer Overflow Remote Code ExecutionDelta Electronics DOPSoft
- CVE-2023-43818Delta Electronics Delta Industrial Automation DOPSoft DPS File wTextLen Buffer Overflow Remote Code ExecutionDelta Electronics DOPSoft
- CVE-2023-43817Delta Electronics Delta Industrial Automation DOPSoft DPS File wMailContentLen Buffer Overflow Remote Code ExecutionDelta Electronics DOPSoft
- CVE-2023-43815Delta Electronics Delta Industrial Automation DOPSoft DPS File wScreenDESCTextLen Buffer Overflow Remote Code ExecutionDelta Electronics DOPSoft
- CVE-2023-5131Delta Electronics ISPSoft Heap Buffer-OverflowDelta Electronics ISPSoft
- CVE-2023-5130Delta Electronics WPLSoft Buffer-OverflowDelta Electronics WPLSoft
- CVE-2024-22415Unsecured endpoints in the jupyter-lsp server extensionjupyter-lsp jupyterlab-lsp · jupyter-lsp
- CVE-2024-22419concat built-in can corrupt memory in vypervyperlang vyper · vyper
- CVE-2023-34348Improper Check or Handling of Exceptional Conditions in Aveva PI Server Aveva PI Server
- CVE-2024-0409Xorg-x11-server: selinux context corruptionxorg-server · Red Hat Enterprise Linux
- CVE-2023-40052Progress Application Server (PAS) for OpenEdge Denial of ServiceProgress Software OpenEdge
- CVE-2023-50614An issue discovereed in EBYTE E880-IR01-V1.1 allows an attacker to obtain sensitive information via crafted POST request to /cgi-bin/luci.
- CVE-2023-51217An issue discovered in TenghuTOS TWS-200 firmware version:V4.0-201809201424 allows a remote attacker to execute arbitrary code via crafted c
- CVE-2024-22568FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/score/del.
- CVE-2024-22591FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/user/group_save.
- CVE-2024-22592FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/user/group_update
- CVE-2024-22593FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/admin/add_group_save
- CVE-2024-22601FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/score/scorerule_save
- CVE-2024-22603FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/links/add_link
- CVE-2024-22699FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/admin/update_group_save.
- CVE-2024-22817FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/email/email_conf_updagte
- CVE-2024-22818FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerbility via /system/site/filterKeyword_save
- CVE-2024-22819FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/email/email_templets_update.
Medium, low and unrated 57
- CVE-2024-0696AtroCore AtroPIM Product Series Overview cross site scriptingAtroCore AtroPIM
- CVE-2024-0695EFS Easy Chat Server HTTP GET Request denial of serviceEFS Easy Chat Server
- CVE-2024-0693EFS Easy File Sharing FTP denial of serviceEFS Easy File Sharing FTP
- CVE-2023-43816Delta Electronics Delta Industrial Automation DOPSoft DPS File wKPFStringLen Buffer Overflow Remote Code ExecutionDelta Electronics DOPSoft
- CVE-2024-22418Stored Cross-site Scripting Vulnerability via Malicious File Names in GroupOfficeIntermesh groupoffice
- CVE-2024-22402Improper handling of request URLs in Nextcloud Guests app allows guest users to bypass app allowlistnextcloud security-advisories
- CVE-2024-22401All users can reset the allowed apps list for Nextcloud Guest App usersnextcloud security-advisories
- CVE-2024-22404Permissions bypass in Nextcloud with the files zip appnextcloud security-advisories
- CVE-2024-22403OAuth2 authorization codes are valid indefinetly in Nextcloud servernextcloud security-advisories
- CVE-2024-22400Open redirect in user_saml via RelayState parameter in Nextcloud User Samlnextcloud security-advisories
- CVE-2024-22213Cross-site Scripting when sending HTML as a comment in the Nextcloud Deck appnextcloud security-advisories
- CVE-2023-31274Missing Release of Resource after Effective Lifetime vulnerability in Aveva PI Server Aveva PI Server
- CVE-2023-28901Trip Data Disclosure from BackendSkoda Auto Skoda Connect
- CVE-2023-28900Nickname Disclosure on the Backend Automotive ServerŠkoda Auto Škoda Connect
- CVE-2024-0607Kernel: nf_tables: pointer math issue in nft_byteorder_eval()kernel · Red Hat Enterprise Linux
- CVE-2024-0408Xorg-x11-server: selinux unlabeled glx pbufferxorg-server · Red Hat Enterprise Linux
- CVE-2021-33631Kernel crash in EXT4 filesystemopenEuler kernel
- CVE-2021-33630NULL-ptr-deref in network schedopenEuler kernel
- CVE-2023-7153Reflected XSS in Macroturk's Macro-BelMacroturk Software and Internet Technologies Macro-Bel
- CVE-2024-0669Cross-Frame Scripting (XFS) on Plone CMSPlone CMS · plone
- CVE-2023-51463Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-51464Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2024-0580Omission of key-controlled authorization in QsigeIDMSistemas Sinergia, Sinergia 2.0, and Sinergia Corporativo
- CVE-2023-6958WP Recipe Maker <= 9.1.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcodebrechtvds WP Recipe Maker
- CVE-2024-0381WP Recipe Maker <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tag'brechtvds WP Recipe Maker
- CVE-2023-6970WP Recipe Maker <= 9.1.0 - Reflected Cross-Site Scripting via Refererbrechtvds WP Recipe Maker
- CVE-2023-48359In autotest driver, there is a possible out of bounds write due to improper input validation.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-48358In drm driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-48357In vsp driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-48356In jpg driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-48355In jpg driver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-48354In telephone service, there is a possible improper input validation.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-48353In vsp driver, there is a possible use after free due to a logic error.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-48352In phasecheckserver, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-48351In video decoder, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-48350In video decoder, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-48349In video decoder, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-48348In video decoder, there is a possible out of bounds write due to improper input validation.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-48347In video decoder, there is a possible out of bounds read due to improper input validation.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-48346In video decoder, there is a possible improper input validation.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-48345In video decoder, there is a possible out of bounds read due to improper input validation.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-48344In video decoder, there is a possible out of bounds read due to improper input validation.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-48343In video decoder, there is a possible out of bounds write due to improper input validation.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-48342In media service, there is a possible out of bounds write due to a missing bounds check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-48341In video decoder, there is a possible out of bounds read due to improper input validation.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-48340In video decoder, there is a possible out of bounds write due to improper input validation.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2023-48339In jpg driver, there is a possible missing permission check.Unisoc (Shanghai) Technologies Co. SC7731E/SC9832E/SC9863A/…
- CVE-2024-0655Novel-Plus list sql injectionNovel-Plus
- CVE-2023-6184Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross Site ScriptingCloud Software Group Citrix Session Recording
- CVE-2024-0654DeepFaceLab Util.py deserializationDeepFaceLab
- CVE-2024-0652PHPGurukul Company Visitor Management System search-visitor.php cross site scriptingPHPGurukul Company Visitor Management System
- CVE-2021-4433Karjasoft Sami HTTP Server HTTP HEAD Rrequest denial of serviceKarjasoft Sami HTTP Server
- CVE-2024-0651PHPGurukul Company Visitor Management System search-visitor.php sql injectionPHPGurukul Company Visitor Management System
- CVE-2023-49943Zoho ManageEngine ServiceDesk Plus MSP before 14504 allows stored XSS (by a low-privileged technician) via a task's name in a time sheet.
- CVE-2023-51258A memory leak issue discovered in YASM v.1.3.0 allows a local attacker to cause a denial of service via the new_Token function in the module
- CVE-2024-22548FlyCms 1.0 is vulnerable to Cross Site Scripting (XSS) in the system website settings website name section.
- CVE-2024-22549FlyCms 1.0 is vulnerable to Cross Site Scripting (XSS) in the email settings of the website settings section.