# CVEs published 2024-01-30

75 CVEs were published on January 30, 2024: 13 critical, 25 high. Days are UTC.

- [CVE-2024-23834](https://cve.now/CVE-2024-23834.md): Discourse improperly sanitized user input leads to XSS (CVSS 6.3, discourse)
- [CVE-2024-1077](https://cve.now/CVE-2024-1077.md): Use after free in Network in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a ma (CVSS 8.8, Google Chrome)
- [CVE-2024-1060](https://cve.now/CVE-2024-1060.md): Use after free in Canvas in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a cra (CVSS 8.8, Google Chrome)
- [CVE-2024-1059](https://cve.now/CVE-2024-1059.md): Use after free in Peer Connection in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit stack corruption (CVSS 8.8, Google Chrome)
- [CVE-2024-24567](https://cve.now/CVE-2024-24567.md): raw\_call \`value=\` kwargs not disabled for static and delegate calls (CVSS 4.8, vyperlang vyper · vyper)
- [CVE-2023-5389](https://cve.now/CVE-2023-5389.md): An attacker could potentially exploit this vulnerability, leading to the ability to modify files on Honeywell Experion ControlEdge VirtualU (CVSS 9.1, Honeywell ControlEdge UOC)
- [CVE-2024-24558](https://cve.now/CVE-2024-24558.md): react-query-streamed-hydration xss (CVSS 8.2, TanStack query · @tanstack/react-query-next-experimental)
- [CVE-2024-1036](https://cve.now/CVE-2024-1036.md): openBI Icon Screen.php uploadIcon unrestricted upload (CVSS 7.3, openBI)
- [CVE-2024-21388](https://cve.now/CVE-2024-21388.md): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CVSS 6.5, Microsoft Edge)
- [CVE-2024-24556](https://cve.now/CVE-2024-24556.md): XSS in @urql/next (CVSS 7.2, urql-graphql urql · @urql/next)
- [CVE-2024-23841](https://cve.now/CVE-2024-23841.md): XSS in @apollo/experimental-nextjs-app-support (CVSS 8.2, apollographql apollo-client-nextjs · @apollo/experimental-n…)
- [CVE-2023-46230](https://cve.now/CVE-2023-46230.md): Sensitive Information Disclosure to Internal Log Files in Splunk Add-on Builder (CVSS 8.2, Splunk Add-on Builder)
- [CVE-2023-46231](https://cve.now/CVE-2023-46231.md): Session Token Disclosure to Internal Log Files in Splunk Add-on Builder (CVSS 8.8, Splunk Add-on Builder)
- [CVE-2023-6258](https://cve.now/CVE-2023-6258.md): Pkcs11-provider: side-channel proofing pkcs#1 1.5 paths (CVSS 8.1, pkcs11-provider · Fedora)
- [CVE-2024-24565](https://cve.now/CVE-2024-24565.md): CrateDB database has an arbitrary file read vulnerability (CVSS 5.7, crate · io.crate:crate)
- [CVE-2024-23840](https://cve.now/CVE-2024-23840.md): \`goreleaser release --debug\` shows secrets (CVSS 5.5, goreleaser · github.com/goreleaser/goreleaser)
- [CVE-2024-23838](https://cve.now/CVE-2024-23838.md): TrueLayer.Client SSRF when fetching payment or payment provider (CVSS 8.6, truelayer-dotnet · TrueLayer.Client)
- [CVE-2024-23825](https://cve.now/CVE-2024-23825.md): TablePress SSRF vulnerability due to insufficient filtering of cloud provider hosts (CVSS 3.0, TablePress)
- [CVE-2024-23647](https://cve.now/CVE-2024-23647.md): PKCE downgrade attack in Authentik (CVSS 6.5, goauthentik authentik · goauthentik.io)
- [CVE-2024-1019](https://cve.now/CVE-2024-1019.md): WAF bypass of the ModSecurity v3 release line (CVSS 8.6, OWASP ModSecurity ModSecurity)
- [CVE-2024-1035](https://cve.now/CVE-2024-1035.md): openBI Icon.php uploadIcon unrestricted upload (CVSS 7.3, openBI)
- [CVE-2024-22200](https://cve.now/CVE-2024-22200.md): vantage6-UI docker image leaks software version information (CVSS 3.3, vantage6-UI)
- [CVE-2024-22193](https://cve.now/CVE-2024-22193.md): vantage6 unencrypted task can be created in encrypted collaboration (CVSS 3.5, vantage6)
- [CVE-2024-21671](https://cve.now/CVE-2024-21671.md): vantage6 username timing attack (CVSS 3.7, vantage6 · vantage6-server)
- [CVE-2024-21653](https://cve.now/CVE-2024-21653.md): vantage6 insecure SSH configuration for node and server containers (CVSS 6.5, vantage6 · vantage6-server +1)
- [CVE-2024-21649](https://cve.now/CVE-2024-21649.md): Remote code execution (CVSS 8.8, vantage6)
- [CVE-2023-37518](https://cve.now/CVE-2023-37518.md): A code injection vulnerability affects HCL BigFix ServiceNow Data Flow (CVSS 6.4, HCL Software BigFix ServiceNow Data Flow)
- [CVE-2024-0564](https://cve.now/CVE-2024-0564.md): Kernel: max page sharing of kernel samepage merging (ksm) may cause memory deduplication (CVSS 5.3, kernel · Red Hat Enterprise Linux)
- [CVE-2024-1034](https://cve.now/CVE-2024-1034.md): openBI File.php uploadFile unrestricted upload (CVSS 7.3, openBI)
- [CVE-2024-1033](https://cve.now/CVE-2024-1033.md): openBI Datament.php agent information disclosure (CVSS 4.3, openBI)
- [CVE-2024-1032](https://cve.now/CVE-2024-1032.md): openBI Test Connection Databasesource.php testConnection deserialization (CVSS 7.3, openBI)
- [CVE-2024-1031](https://cve.now/CVE-2024-1031.md): CodeAstro Expense Management System Add Expenses Page 5-Add-Expenses.php cross site scripting (CVSS 3.5, CodeAstro Expense Management System)
- [CVE-2024-0676](https://cve.now/CVE-2024-0676.md): Weak password requirement vulnerability in Lamassu Bitcoin ATM Douro machines (CVSS 5.6, Lamassu Bitcoin ATM Douro machines)
- [CVE-2024-0675](https://cve.now/CVE-2024-0675.md): Improper checking for unusual or exceptional conditions vulnerability in Lamassu Bitcoin ATM Douro machines (CVSS 6.3, Lamassu Bitcoin ATM Douro machines)
- [CVE-2024-0674](https://cve.now/CVE-2024-0674.md): Privilege escalation vulnerability in Lamassu Bitcoin ATM Douro machines (CVSS 6.3, Lamassu Bitcoin ATM Douro machines)
- [CVE-2024-1030](https://cve.now/CVE-2024-1030.md): Cogites eReserv tenancyDetail.php cross site scripting (CVSS 3.5, Cogites eReserv)
- [CVE-2024-1063](https://cve.now/CVE-2024-1063.md): Appwrite \<= v1.4.13 is affected by a Server-Side Request Forgery (SSRF) via the '/v1/avatars/favicon' endpoint due to an incomplete fix of C (CVSS 5.3, Appwrite)
- [CVE-2023-6943](https://cve.now/CVE-2023-6943.md): Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Mitsubishi Electric Corporation EZSocket (CVSS 9.8, Mitsubishi Electric EZSocket · Mitsubishi Electric GT De… +6)
- [CVE-2023-6942](https://cve.now/CVE-2023-6942.md): Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5.92, GT Designer3 Ve (CVSS 7.5, Mitsubishi Electric EZSocket · Mitsubishi Electric GT De… +6)
- [CVE-2023-6374](https://cve.now/CVE-2023-6374.md): Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC WS Series WS0-GETH00200 all serial numbers a (CVSS 5.9, Mitsubishi Electric MELSEC WS Series WS0-GETH00200)
- [CVE-2024-1061](https://cve.now/CVE-2024-1061.md): The 'HTML5 Video Player' WordPress Plugin, version \< 2.5.25 is affected by an unauthenticated SQL injection vulnerability in the 'id' parame (CVSS 8.6, html5-video-player)
- [CVE-2023-7225](https://cve.now/CVE-2023-7225.md): MapPress \<= 2.88.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Settings (CVSS 6.4, chrisvrichardson MapPress Maps for WordPress)
- [CVE-2024-21803](https://cve.now/CVE-2024-21803.md): Possible UAF in bt\_accept\_poll in Linux kernel (CVSS 3.5, Linux kernel)
- [CVE-2024-1029](https://cve.now/CVE-2024-1029.md): Cogites eReserv tenancyDetail.php cross site scripting (CVSS 3.5, Cogites eReserv)
- [CVE-2024-21488](https://cve.now/CVE-2024-21488.md): Versions of the package network before 0.7.0 are vulnerable to Arbitrary Command Injection due to use of the child\_process exec function wit (CVSS 7.3, network · org.webjars.npm:network)
- [CVE-2024-1028](https://cve.now/CVE-2024-1028.md): SourceCodester Facebook News Feed Like Post cross site scripting (CVSS 3.5, SourceCodester Facebook News Feed Like)
- [CVE-2024-1027](https://cve.now/CVE-2024-1027.md): SourceCodester Facebook News Feed Like Post unrestricted upload (CVSS 6.3, SourceCodester Facebook News Feed Like)
- [CVE-2024-21840](https://cve.now/CVE-2024-21840.md): Directory and File Permission Vulnerability in Hitachi Storage Plug-in for VMware vCenter (CVSS 7.9, Hitachi Storage Plug-in for VMware vCenter)
- [CVE-2024-1026](https://cve.now/CVE-2024-1026.md): Cogites eReserv config.php cross site scripting (CVSS 3.5, Cogites eReserv)
- [CVE-2023-5372](https://cve.now/CVE-2023-5372.md): The post-authentication command injection vulnerability in Zyxel NAS326 firmware versions through V5.21(AAZF.15)C0 and NAS542 firmware versi (CVSS 7.2, Zyxel NAS326 firmware · Zyxel NAS542 firmware)
- [CVE-2024-1024](https://cve.now/CVE-2024-1024.md): SourceCodester Facebook News Feed Like New Account cross site scripting (CVSS 3.5, SourceCodester Facebook News Feed Like)
- [CVE-2023-36259](https://cve.now/CVE-2023-36259.md): Cross Site Scripting (XSS) vulnerability in Craft CMS Audit Plugin before version 3.0.2 allows attackers to execute arbitrary code during us (CVSS 5.4, superbig/craft-audit)
- [CVE-2023-36260](https://cve.now/CVE-2023-36260.md): An issue was discovered in the Feed Me plugin 4.6.1 for Craft CMS. (no CVSS, craftcms/cms)
- [CVE-2023-37571](https://cve.now/CVE-2023-37571.md): Softing TH SCOPE through 3.70 allows XSS. (CVSS 6.1)
- [CVE-2023-51813](https://cve.now/CVE-2023-51813.md): Cross Site Request Forgery (CSRF) vulnerability in Free Open-Source Inventory Management System v.1.0 allows a remote attacker to execute ar (CVSS 6.5)
- [CVE-2023-51837](https://cve.now/CVE-2023-51837.md): Ylianst MeshCentral 1.1.16 is vulnerable to Missing SSL Certificate Validation. (CVSS 9.8, meshcentral)
- [CVE-2023-51843](https://cve.now/CVE-2023-51843.md): react-dashboard 1.4.0 is vulnerable to Cross Site Scripting (XSS) as httpOnly is not set. (CVSS 8.2)
- [CVE-2023-51982](https://cve.now/CVE-2023-51982.md): CrateDB 5.5.1 is contains an authentication bypass vulnerability in the Admin UI component. (CVSS 9.8, io.crate:crate)
- [CVE-2024-22523](https://cve.now/CVE-2024-22523.md): Directory Traversal vulnerability in Qiyu iFair version 23.8\_ad0 and before, allows remote attackers to obtain sensitive information via upl (CVSS 7.5)
- [CVE-2024-22643](https://cve.now/CVE-2024-22643.md): A Cross-Site Request Forgery (CSRF) vulnerability in SEO Panel version 4.10.0 allows remote attackers to perform unauthorized user password (CVSS 6.5)
- [CVE-2024-22646](https://cve.now/CVE-2024-22646.md): An email address enumeration vulnerability exists in the password reset function of SEO Panel version 4.10.0. (CVSS 5.3)
- [CVE-2024-22647](https://cve.now/CVE-2024-22647.md): An user enumeration vulnerability was found in SEO Panel 4.10.0. (CVSS 5.3)
- [CVE-2024-22648](https://cve.now/CVE-2024-22648.md): A Blind SSRF vulnerability exists in the "Crawl Meta Data" functionality of SEO Panel version 4.10.0. (CVSS 5.3)
- [CVE-2024-22894](https://cve.now/CVE-2024-22894.md): An issue fixed in AIT-Deutschland Alpha Innotec Heatpumps V2.88.3 or later, V3.89.0 or later, V4.81.3 or later and Novelan Heatpumps V2.88.3 (CVSS 6.8)
- [CVE-2024-22938](https://cve.now/CVE-2024-22938.md): Insecure Permissions vulnerability in BossCMS v.1.3.0 allows a local attacker to execute arbitrary code and escalate privileges via the init (CVSS 7.8)
- [CVE-2024-24324](https://cve.now/CVE-2024-24324.md): TOTOLINK A8000RU v7.1cu.643\_B20200521 was discovered to contain a hardcoded password for root stored in /etc/shadow. (CVSS 9.8)
- [CVE-2024-24325](https://cve.now/CVE-2024-24325.md): TOTOLINK A3300R V17.0.0cu.557\_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setParen (CVSS 9.8)
- [CVE-2024-24326](https://cve.now/CVE-2024-24326.md): TOTOLINK A3300R V17.0.0cu.557\_B20221024 was discovered to contain a command injection vulnerability via the arpEnable parameter in the setSt (CVSS 9.8)
- [CVE-2024-24327](https://cve.now/CVE-2024-24327.md): TOTOLINK A3300R V17.0.0cu.557\_B20221024 was discovered to contain a command injection vulnerability via the pppoePass parameter in the setIp (CVSS 9.8)
- [CVE-2024-24328](https://cve.now/CVE-2024-24328.md): TOTOLINK A3300R V17.0.0cu.557\_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setMacFi (CVSS 8.8)
- [CVE-2024-24329](https://cve.now/CVE-2024-24329.md): TOTOLINK A3300R V17.0.0cu.557\_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setPortF (CVSS 9.8)
- [CVE-2024-24330](https://cve.now/CVE-2024-24330.md): TOTOLINK A3300R V17.0.0cu.557\_B20221024 was discovered to contain a command injection vulnerability via the port or enable parameter in the (CVSS 9.8)
- [CVE-2024-24331](https://cve.now/CVE-2024-24331.md): TOTOLINK A3300R V17.0.0cu.557\_B20221024 was discovered to contain a command injection vulnerability via the enable parameter in the setWiFiS (CVSS 9.8)
- [CVE-2024-24332](https://cve.now/CVE-2024-24332.md): TOTOLINK A3300R V17.0.0cu.557\_B20221024 was discovered to contain a command injection vulnerability via the url parameter in the setUrlFilte (CVSS 9.8)
- [CVE-2024-24333](https://cve.now/CVE-2024-24333.md): TOTOLINK A3300R V17.0.0cu.557\_B20221024 was discovered to contain a command injection vulnerability via the desc parameter in the setWiFiAcl (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-01-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.