# CVEs published 2024-01-28

10 CVEs were published on January 28, 2024: 3 critical, 1 high. Days are UTC.

- [CVE-2024-0986](https://cve.now/CVE-2024-0986.md): Issabel PBX Asterisk-Cli os command injection (CVSS 4.7, Issabel PBX)
- [CVE-2024-23782](https://cve.now/CVE-2024-23782.md): Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver (CVSS 5.4, appleple a-blog cms Ver.3.1.x series · appleple a-blog c… +3)
- [CVE-2023-6200](https://cve.now/CVE-2023-6200.md): Kernel: icmpv6 router advertisement packets, aka linux tcp/ip remote code execution vulnerability (CVSS 7.5, kernel · Red Hat Enterprise Linux +2)
- [CVE-2024-0841](https://cve.now/CVE-2024-0841.md): Kernel: hugetlbfs: null pointer dereference in hugetlbfs\_fill\_super function (CVSS 6.6, Red Hat Enterprise Linux)
- [CVE-2024-23738](https://cve.now/CVE-2024-23738.md): An issue in Postman version 10.22 and before on macOS allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeCli (no CVSS)
- [CVE-2024-23739](https://cve.now/CVE-2024-23739.md): An issue in Discord for macOS version 0.0.291 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNode (CVSS 9.8)
- [CVE-2024-23740](https://cve.now/CVE-2024-23740.md): An issue in Kap for macOS version 3.6.0 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClilns (CVSS 9.8)
- [CVE-2024-23741](https://cve.now/CVE-2024-23741.md): An issue in Hyper on macOS version 3.4.1 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeCliln (CVSS 9.8)
- [CVE-2024-23742](https://cve.now/CVE-2024-23742.md): An issue in Loom on macOS version 0.196.1 and before, allows remote attackers to execute arbitrary code via the RunAsNode and enableNodeClil (no CVSS)
- [CVE-2024-23743](https://cve.now/CVE-2024-23743.md): Notion through 3.1.0 on macOS might allow code execution because of RunAsNode and enableNodeClilnspectArguments. (CVSS 3.3)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-01-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.