# CVEs published 2024-01-25

73 CVEs were published on January 25, 2024: 22 critical, 20 high. Days are UTC.

- [CVE-2024-23630](https://cve.now/CVE-2024-23630.md): Motorola MR2600 Arbitrary Firmware Upload Vulnerability (CVSS 9.0, Motorola MR2600)
- [CVE-2024-23629](https://cve.now/CVE-2024-23629.md): Motorola MR2600 Authentication Bypass Vulnerability (CVSS 9.6, Motorola MR2600)
- [CVE-2024-23628](https://cve.now/CVE-2024-23628.md): Motorola MR2600 SaveStaticRouteIPv6Params Command Injection Vulnerability (CVSS 9.0, Motorola MR2600)
- [CVE-2024-23627](https://cve.now/CVE-2024-23627.md): Motorola MR2600 SaveStaticRouteIPv4Params Command Injection Vulnerability (CVSS 9.0, Motorola MR2600)
- [CVE-2024-23626](https://cve.now/CVE-2024-23626.md): Motorola MR2600 SaveSysLogParams Command Injection Vulnerability (CVSS 9.0, Motorola MR2600)
- [CVE-2024-23625](https://cve.now/CVE-2024-23625.md): D-Link DAP-1650 SUBSCRIBE Callback Command Injection Vulnerability (CVSS 9.6, D-Link DAP-1650)
- [CVE-2024-23624](https://cve.now/CVE-2024-23624.md): D-Link DAP-1650 gena.cgi SUBSCRIBE Command Injection Vulnerability (CVSS 9.6, D-Link DAP-1650)
- [CVE-2024-23622](https://cve.now/CVE-2024-23622.md): IBM Merge Healthcare eFilm Workstation License Server CopySLS\_Request3 Buffer Overflow (CVSS 10.0, IBM Merge Healthcare eFilm Workstation)
- [CVE-2024-23621](https://cve.now/CVE-2024-23621.md): IBM Merge Healthcare eFilm Workstation License Server Buffer Overflow (CVSS 10.0, IBM Merge Healthcare eFilm Workstation)
- [CVE-2024-23620](https://cve.now/CVE-2024-23620.md): IBM Merge Healthcare eFilm Workstation SYSTEM Privilege Escalation (CVSS 8.8, IBM Merge Healthcare eFilm Workstation)
- [CVE-2024-23619](https://cve.now/CVE-2024-23619.md): IBM Merge Healthcare eFilm Workstation Hardcoded Credentials (CVSS 9.8, IBM Merge Healthcare eFilm Workstation)
- [CVE-2024-23618](https://cve.now/CVE-2024-23618.md): Arris SURFboard SBG6950AC2 Arbitrary Code Execution Vulnerability (CVSS 9.6, Arris SURFboard SBG6950AC2)
- [CVE-2024-23617](https://cve.now/CVE-2024-23617.md): Symantec Data Loss Prevention Buffer Overflow (CVSS 9.6, Symantec Data Loss Prevention)
- [CVE-2024-23616](https://cve.now/CVE-2024-23616.md): Symantec Server Management Suite Buffer Overflow (CVSS 10.0, Symantec Server Management Suite)
- [CVE-2024-23615](https://cve.now/CVE-2024-23615.md): Symantec Messaging Gateway Buffer Overflow (CVSS 10.0, Symantec Messaging Gateway)
- [CVE-2024-23614](https://cve.now/CVE-2024-23614.md): Symantec Messaging Gateway Buffer Overflow (CVSS 10.0, Symantec Messaging Gateway)
- [CVE-2024-23613](https://cve.now/CVE-2024-23613.md): Symantec Deployment Solution Remote Code Execution (CVSS 10.0, Symantec Deployment Solution)
- [CVE-2024-0891](https://cve.now/CVE-2024-0891.md): hongmaple octopus cross site scripting (CVSS 3.5, hongmaple octopus)
- [CVE-2024-21620](https://cve.now/CVE-2024-21620.md): Junos OS: SRX Series and EX Series: J-Web doesn't sufficiently sanitize input to prevent XSS (CVSS 8.8, Juniper Networks Junos OS)
- [CVE-2024-21619](https://cve.now/CVE-2024-21619.md): Junos OS: SRX Series and EX Series: J-Web - unauthenticated access to temporary files containing sensitive information (CVSS 5.3, Juniper Networks Junos OS)
- [CVE-2024-0890](https://cve.now/CVE-2024-0890.md): hongmaple octopus edit sql injection (CVSS 6.3, hongmaple octopus)
- [CVE-2024-0889](https://cve.now/CVE-2024-0889.md): Kmint21 Golden FTP Server PASV Command denial of service (CVSS 5.3, Kmint21 Golden FTP Server)
- [CVE-2024-0888](https://cve.now/CVE-2024-0888.md): BORGChat Service Port 7551 denial of service (CVSS 5.3, BORGChat)
- [CVE-2024-0887](https://cve.now/CVE-2024-0887.md): Mafiatic Blue Server Connection denial of service (CVSS 5.3, Mafiatic Blue Server)
- [CVE-2024-0886](https://cve.now/CVE-2024-0886.md): Poikosoft EZ CD Audio Converter Activation denial of service (CVSS 3.3, Poikosoft EZ CD Audio Converter)
- [CVE-2024-0885](https://cve.now/CVE-2024-0885.md): SpyCamLizard HTTP GET Request denial of service (CVSS 5.3, SpyCamLizard)
- [CVE-2024-0884](https://cve.now/CVE-2024-0884.md): SourceCodester Online Tours & Travels Management System payment.php exec sql injection (CVSS 4.7, SourceCodester Online Tours & Travels Management System)
- [CVE-2023-52356](https://cve.now/CVE-2023-52356.md): Libtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of service (CVSS 7.5, libtiff · Red Hat Enterprise Linux +2)
- [CVE-2023-52355](https://cve.now/CVE-2023-52355.md): Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom (CVSS 7.5, libtiff · Red Hat Enterprise Linux +3)
- [CVE-2024-23656](https://cve.now/CVE-2024-23656.md): Dex 2.37.0 is discarding TLSconfig and always serves deprecated TLS 1.0/1.1 and insecure ciphers (CVSS 7.5, dexidp dex · github.com/dexidp/dex)
- [CVE-2024-23817](https://cve.now/CVE-2024-23817.md): Dolibarr Application Home Page HTML injection vulnerability (CVSS 7.1, dolibarr · dolibarr/dolibarr)
- [CVE-2024-23655](https://cve.now/CVE-2024-23655.md): Attacker can prevent users from accessing received emails (CVSS 7.5, tutao tutanota)
- [CVE-2024-21630](https://cve.now/CVE-2024-21630.md): Zulip non-admins can invite new users to streams they would not otherwise be able to add existing users to (CVSS 4.3, zulip)
- [CVE-2024-0883](https://cve.now/CVE-2024-0883.md): SourceCodester Online Tours & Travels Management System pay.php prepare sql injection (CVSS 6.3, SourceCodester Online Tours & Travels Management System)
- [CVE-2024-0882](https://cve.now/CVE-2024-0882.md): qwdigital LinkWechat Universal Download Interface resource path traversal (CVSS 4.3, qwdigital LinkWechat)
- [CVE-2023-7227](https://cve.now/CVE-2023-7227.md): Command Injection vulnerability in SystemK NVR 504/508/516 (CVSS 9.8, SystemK NVR)
- [CVE-2023-6267](https://cve.now/CVE-2023-6267.md): Quarkus: json payload getting processed prior to security checks when rest resources are used with annotations. (CVSS 8.6, Red Hat build of Quarkus 2.13.9.Final · Red Hat build of… +5)
- [CVE-2024-0880](https://cve.now/CVE-2024-0880.md): Qidianbang qdbcrm Password Reset cross-site request forgery (CVSS 4.3, Qidianbang qdbcrm)
- [CVE-2023-40547](https://cve.now/CVE-2023-40547.md): Shim: rce in http boot support may lead to secure boot bypass (CVSS 8.3, Red Hat Enterprise Linux)
- [CVE-2023-52076](https://cve.now/CVE-2023-52076.md): Remote Code Execution Vulnerability in Atril's EPUB ebook parsing (CVSS 8.5, mate-desktop atril)
- [CVE-2023-3181](https://cve.now/CVE-2023-3181.md): Insecure Permissions in Splashtop Software Updater (CVSS 7.8, Splashtop Software Updater)
- [CVE-2024-0822](https://cve.now/CVE-2024-0822.md): Ovirt: authentication bypass (CVSS 7.5, ovirt-engine · Red Hat Virtualization Engine)
- [CVE-2024-22432](https://cve.now/CVE-2024-22432.md): Networker 19.9 and all prior versions contains a Plain-text Password stored in temporary config file during backup duration in NMDA MySQL D (CVSS 7.8, Dell NetWorker Module for Databases and Applications - Orac…)
- [CVE-2024-0879](https://cve.now/CVE-2024-0879.md): Authentication bypass in vector-admin domain restriction (CVSS 6.5, Mintplex-Labs vector-admin)
- [CVE-2024-23855](https://cve.now/CVE-2024-23855.md): Cross-Site Scripting (XSS) vulnerability in Cups Easy (CVSS 8.2, Cups Easy)
- [CVE-2023-6282](https://cve.now/CVE-2023-6282.md): Cross-Site Scripting vulnerability in IceHrm (CVSS 5.4, IceHrm)
- [CVE-2024-22099](https://cve.now/CVE-2024-22099.md): NULL pointer deference in rfcomm\_check\_security in Linux kernel (CVSS 6.3, Linux kernel)
- [CVE-2024-23307](https://cve.now/CVE-2024-23307.md): Integer overflow in raid5\_cache\_count in Linux kernel (CVSS 4.4, Linux kernel)
- [CVE-2024-0625](https://cve.now/CVE-2024-0625.md): WPFront Notification Bar \<= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via wpfront-notification-bar-options\[custom\_class\] (CVSS 4.4, syammohanm WPFront Notification Bar)
- [CVE-2024-0688](https://cve.now/CVE-2024-0688.md): WebSub (FKA. PubSubHubbub) \<= 3.1.4 - Authenticated (Admin+) Stored Cross-Site Scripting (CVSS 4.4, joshfraz WebSub)
- [CVE-2024-0624](https://cve.now/CVE-2024-0624.md): Paid Memberships Pro \<= 2.12.7 - Cross-Site Request Forgery to Level Orders Update (CVSS 5.3, strangerstudios Paid Memberships Pro – Content Restriction,…)
- [CVE-2024-0617](https://cve.now/CVE-2024-0617.md): Category Discount Woocommerce \<= 4.12 - Missing Authorization via wpcd\_save\_discount() (CVSS 5.3, vidishp Simple Discount Rules for Woocommerce)
- [CVE-2023-33757](https://cve.now/CVE-2023-33757.md): A lack of SSL certificate validation in Splicecom iPCS (iOS App) v1.3.4, iPCS2 (iOS App) v2.8 and before, and iPCS (Android App) v1.8.5 and (CVSS 5.9)
- [CVE-2023-33758](https://cve.now/CVE-2023-33758.md): Splicecom Maximiser Soft PBX v1.5 and before was discovered to contain a cross-site scripting (XSS) vulnerability via the CLIENT\_NAME and DE (CVSS 6.1)
- [CVE-2023-33759](https://cve.now/CVE-2023-33759.md): SpliceCom Maximiser Soft PBX v1.5 and before does not restrict excessive authentication attempts, allowing attackers to bypass authenticatio (CVSS 9.8)
- [CVE-2023-33760](https://cve.now/CVE-2023-33760.md): SpliceCom Maximiser Soft PBX v1.5 and before was discovered to utilize a default SSL certificate. (CVSS 5.3)
- [CVE-2023-41474](https://cve.now/CVE-2023-41474.md): Directory Traversal vulnerability in Ivanti Avalanche 6.3.4.153 allows a remote authenticated attacker to obtain sensitive information via t (CVSS 6.5)
- [CVE-2023-50785](https://cve.now/CVE-2023-50785.md): Zoho ManageEngine ADAudit Plus before 7270 allows admin users to view names of arbitrary directories via path traversal. (CVSS 2.7)
- [CVE-2023-51833](https://cve.now/CVE-2023-51833.md): A command injection issue in TRENDnet TEW-411BRPplus v.2.07\_eu that allows a local attacker to execute arbitrary code via the data1 paramete (CVSS 8.1)
- [CVE-2023-52046](https://cve.now/CVE-2023-52046.md): Cross Site Scripting vulnerability (XSS) in webmin v.2.105 and earlier allows a remote attacker to execute arbitrary code via a crafted payl (CVSS 4.8)
- [CVE-2023-52251](https://cve.now/CVE-2023-52251.md): An issue discovered in provectus kafka-ui 0.4.0 through 0.7.2 allows remote attackers to execute arbitrary code via the q parameter of /api/ (CVSS 8.8)
- [CVE-2024-22529](https://cve.now/CVE-2024-22529.md): TOTOLINK X2000R\_V2 V2.0.0-B20230727.10434 has a command injection vulnerability in the sub\_449040 (handle function of formUploadFile) of /bi (CVSS 9.8)
- [CVE-2024-22635](https://cve.now/CVE-2024-22635.md): WebCalendar v1.3.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /WebCalendarvqsmnseug2/e (CVSS 6.1)
- [CVE-2024-22636](https://cve.now/CVE-2024-22636.md): PluXml Blog v5.8.9 was discovered to contain a remote code execution (RCE) vulnerability in the Static Pages feature. (CVSS 8.8)
- [CVE-2024-22637](https://cve.now/CVE-2024-22637.md): Form Tools v3.1.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /form\_builder/preview.php (CVSS 6.1)
- [CVE-2024-22638](https://cve.now/CVE-2024-22638.md): liveSite v2019.1 was discovered to contain a remote code execution (RCE) vulenrabiity via the component /livesite/edit\_designer\_region.php o (CVSS 9.8)
- [CVE-2024-22639](https://cve.now/CVE-2024-22639.md): iGalerie v3.0.22 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the Titre (Title) field in the editing i (CVSS 6.1)
- [CVE-2024-22729](https://cve.now/CVE-2024-22729.md): NETIS SYSTEMS MW5360 V1.0.1.3031 was discovered to contain a command injection vulnerability via the password parameter on the login page. (CVSS 9.8)
- [CVE-2024-22749](https://cve.now/CVE-2024-22749.md): GPAC v2.3 was detected to contain a buffer overflow via the function gf\_isom\_new\_generic\_sample\_description function in the isomedia/isom\_wr (CVSS 7.8)
- [CVE-2024-22922](https://cve.now/CVE-2024-22922.md): An issue in Projectworlds Vistor Management Systemin PHP v.1.0 allows a remtoe attacker to escalate privileges via a crafted script to the l (CVSS 9.8)
- [CVE-2024-23055](https://cve.now/CVE-2024-23055.md): An issue in Plone Docker Official Image 5.2.13 (5221) open-source software allows for remote code execution via improper validation of input (CVSS 6.1)
- [CVE-2024-23985](https://cve.now/CVE-2024-23985.md): EzServer 6.4.017 allows a denial of service (daemon crash) via a long string, such as one for the RNTO command. (CVSS 7.5)
- [CVE-2024-24399](https://cve.now/CVE-2024-24399.md): An arbitrary file upload vulnerability in LEPTON v7.0.0 allows authenticated attackers to execute arbitrary PHP code by uploading this code (CVSS 7.2)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-01-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.