CVEs published January 27, 2024
17 CVEs were published on January 27, 2024: 3 critical, 1 high.
- Published
- 17
- Critical
- 3
- High
- 1
- Medium
- 12
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- CodeAstro Stock Management System
- 1
- flink-extended ai-flow · ai-flow
- 1
- Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact F…
- 1
- mekshq Meks Smart Social Widget
- 1
- mra13 Simple Shopping Cart
- 1
- obgm libcoap
- 1
- softaculous Backuply – Backup, Restore, Migrate and Clone
- 1
- StanfordVL GibsonEnv
- 1
- Synaptics Fingerprint Driver
- 1
- techjewel Fluent Forms – Customizable Contact Forms, Survey…
- 1
Critical 3
- CVE-2023-52389UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::UTF32Encoding::conver
- CVE-2024-22860Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the jpegxl_anim_read_packet comp
- CVE-2024-22862Integer overflow vulnerability in FFmpeg before n6.1, allows remote attackers to execute arbitrary code via the JJPEG XL Parser.
High 1
Medium, low and unrated 13
- CVE-2024-0962obgm libcoap Configuration File coap_oscore.c get_split_entry stack-based overflowobgm libcoap
- CVE-2024-0960flink-extended ai-flow workflow_command.py cloudpickle.loads deserializationflink-extended ai-flow · ai-flow
- CVE-2024-0959StanfordVL GibsonEnv pposgd_fuse.py cloudpickle.load deserializationStanfordVL GibsonEnv
- CVE-2024-0958CodeAstro Stock Management System Add Category index.php cross site scriptingCodeAstro Stock Management System
- CVE-2024-0618Fluent Forms <= 5.1.5 - Authenticated(Administrator+) Stored Cross-Site Scripting via imported form titletechjewel Fluent Forms – Customizable Contact Forms, Survey…
- CVE-2024-0824Exclusive Addons for Elementor <= 2.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Link Anythingtimstrifler Exclusive Addons for Elementor
- CVE-2024-0697Backuply – Backup, Restore, Migrate and Clone <= 1.2.3 - Authenticated (Administrator+) Directory Traversalsoftaculous Backuply – Backup, Restore, Migrate and Clone
- CVE-2024-0667Form-Maker (twb_form-maker) <= 1.15.21 - Cross-Site Request Forgery to Limited Code Execution via ExecuteForm Maker by 10Web – Mobile-Friendly Drag & Drop Contact F…
- CVE-2023-6497WordPress Simple Shopping Cart <= 4.7.1 - Authenticated(Administrator+) Stored Cross-Site Scriptingmra13 Simple Shopping Cart
- CVE-2024-0664Meks Smart Social Widget <= 1.6.3 - Authenticated (Admin+) Stored Cross-Site Scriptingmekshq Meks Smart Social Widget
- CVE-2023-6482Encryption key derived from static host informationSynaptics Fingerprint Driver
- CVE-2023-48201Cross Site Scripting (XSS) vulnerability in Sunlight CMS v.8.0.1, allows remote authenticated attackers to execute arbitrary code and escala
- CVE-2023-48202Cross-Site Scripting (XSS) vulnerability in Sunlight CMS 8.0.1 allows an authenticated low-privileged user to escalate privileges via a craf