CVEs published January 28, 2024
10 CVEs were published on January 28, 2024: 3 critical, 1 high.
- Published
- 10
- Critical
- 3
- High
- 1
- Medium
- 3
- Low
- 1
- Unrated
- 2
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- appleple a-blog cms Ver.3.1.x series · appleple a-blog c… +3
- 1
- Issabel PBX
- 1
- kernel · Red Hat Enterprise Linux +2
- 1
- Red Hat Enterprise Linux
- 1
Critical 3
- CVE-2024-23739An issue in Discord for macOS version 0.0.291 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNode
- CVE-2024-23740An issue in Kap for macOS version 3.6.0 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilns
- CVE-2024-23741An issue in Hyper on macOS version 3.4.1 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeCliln
High 1
Medium, low and unrated 6
- CVE-2024-0986Issabel PBX Asterisk-Cli os command injectionIssabel PBX
- CVE-2024-23782Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Verappleple a-blog cms Ver.3.1.x series · appleple a-blog c… +3
- CVE-2024-0841Kernel: hugetlbfs: null pointer dereference in hugetlbfs_fill_super functionRed Hat Enterprise Linux
- CVE-2024-23738An issue in Postman version 10.22 and before on macOS allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeCli
- CVE-2024-23742An issue in Loom on macOS version 0.196.1 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClil
- CVE-2024-23743Notion through 3.1.0 on macOS might allow code execution because of RunAsNode and enableNodeClilnspectArguments.