cve.nowby Sazabi

CVEs published January 20, 2024

14 CVEs were published on January 20, 2024: 8 critical, 3 high.

Published: 14
Critical: 8
High: 3
Medium: 3
Low: 0
Unrated: 0
Now in CISA KEV: 0
Fix available: 1

Most affected products

paddlepaddle/paddle · paddlepaddle: 1
themegrill ColorMag: 1
vektor-inc VK Block Patterns: 1
WPForms Pro: 1

Critical 8

CVE-2024-0521Code Injection in paddlepaddle/paddlepaddlepaddle/paddle · paddlepaddleCritical · 9.3Fix availableJan 20, 2024
CVE-2021-31314File upload vulnerability in ejinshan v8+ terminal security system allows attackers to upload arbitrary files to arbitrary locations on the Critical · 9.8Jan 20, 2024
CVE-2023-51892An issue in weaver e-cology v.10.0.2310.01 allows a remote attacker to execute arbitrary code via a crafted script to the FrameworkShellContCritical · 9.8Jan 20, 2024
CVE-2023-51906An issue in yonyou YonBIP v3_23.05 allows a remote attacker to execute arbitrary code via a crafted script to the ServiceDispatcherServlet uCritical · 9.8Jan 20, 2024
CVE-2023-51924An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface of YonBIP v3_23.05 allows attackers to executeCritical · 9.8Jan 20, 2024
CVE-2023-51925An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 alloCritical · 9.8Jan 20, 2024
CVE-2023-51927YonBIP v3_23.05 was discovered to contain a SQL injection vulnerability via the com.yonyou.hrcloud.attend.web.AttendScriptController.runScriCritical · 9.8Jan 20, 2024
CVE-2023-51928An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 alloCritical · 9.8Jan 20, 2024

High 3

Medium, low and unrated 3