# CVEs published 2024-01-31

91 CVEs were published on January 31, 2024: 4 critical, 38 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2024-24573](https://cve.now/CVE-2024-24573.md): facileManager Privilege Escalation via Mass Assignment (CVSS 8.8, WillyXJ facileManager)
- [CVE-2024-24572](https://cve.now/CVE-2024-24572.md): facileManager Authenticated Variable Manipulation leading to SQL Injection (CVSS 6.5, WillyXJ facileManager)
- [CVE-2024-24571](https://cve.now/CVE-2024-24571.md): facileManager Systemic Cross-Site Scripting (XSS) (CVSS 5.4, WillyXJ facileManager)
- [CVE-2024-24747](https://cve.now/CVE-2024-24747.md): MinIO unsafe default: Access keys inherit \`admin\` of root user, allowing privilege escalation (CVSS 8.8, minio · github.com/minio/minio)
- [CVE-2024-23653](https://cve.now/CVE-2024-23653.md): BuildKit interactive containers API does not validate entitlements check (CVSS 9.8, moby buildkit · github.com/moby/buildkit)
- [CVE-2024-23652](https://cve.now/CVE-2024-23652.md): BuildKit possible host system access from mount stub cleaner (CVSS 10.0, moby buildkit · github.com/moby/buildkit)
- [CVE-2024-23651](https://cve.now/CVE-2024-23651.md): BuildKit possible race condition with accessing subpaths from cache mounts (CVSS 8.7, moby buildkit · github.com/moby/buildkit)
- [CVE-2024-23650](https://cve.now/CVE-2024-23650.md): BuildKit possible panic when incorrect parameters sent from frontend (CVSS 5.3, moby buildkit · github.com/moby/buildkit)
- [CVE-2024-21626](https://cve.now/CVE-2024-21626.md): runc container breakout through process.cwd trickery and leaked fds (CVSS 8.6, opencontainers runc · github.com/opencontainers/runc)
- [CVE-2024-1117](https://cve.now/CVE-2024-1117.md): openBI Screen.php index code injection (CVSS 7.3, openBI)
- [CVE-2024-1116](https://cve.now/CVE-2024-1116.md): openBI Upload.php index unrestricted upload (CVSS 7.3, openBI)
- [CVE-2024-1115](https://cve.now/CVE-2024-1115.md): openBI Setting.php dlfile os command injection (CVSS 7.3, openBI)
- [CVE-2024-1114](https://cve.now/CVE-2024-1114.md): openBI Screen.php dlfile access control (CVSS 6.5, openBI)
- [CVE-2024-1113](https://cve.now/CVE-2024-1113.md): openBI Unity.php uploadUnity unrestricted upload (CVSS 6.3, openBI)
- [CVE-2023-28807](https://cve.now/CVE-2023-28807.md): Bypass of ZIA domain fronting detection module through evasion technique (CVSS 5.1, Zscaler ZIA)
- [CVE-2024-1111](https://cve.now/CVE-2024-1111.md): SourceCodester QR Code Login System add-user.php cross site scripting (CVSS 4.3, SourceCodester QR Code Login System)
- [CVE-2024-21916](https://cve.now/CVE-2024-21916.md): Rockwell Automation Denial-of-service Vulnerability in ICE1 Controller (CVSS 8.6, Rockwell Automation ControlLogix® · Rockwell Automation Gua…)
- [CVE-2024-22146](https://cve.now/CVE-2024-22146.md): WordPress Schema & Structured Data for WP & AMP Plugin \<= 1.25 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Magazine3 Schema & Structured Data for WP & AMP)
- [CVE-2024-22153](https://cve.now/CVE-2024-22153.md): WordPress Stock Locations for WooCommerce Plugin \<= 2.5.9 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Fahad Mahmood & Alexandre Faustino Stock Locations for WooC…)
- [CVE-2024-22150](https://cve.now/CVE-2024-22150.md): WordPress Post Grid, Image Gallery & Portfolio for Elementor | PowerFolio Plugin \<= 3.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, PWR Plugins Portfolio & Image Gallery for WordPress | Power…)
- [CVE-2024-21917](https://cve.now/CVE-2024-21917.md): Rockwell Automation FactoryTalk® Service Platform Service Token Vulnerability (CVSS 9.8, Rockwell Automation FactoryTalk® Service Platform)
- [CVE-2024-22158](https://cve.now/CVE-2024-22158.md): WordPress PeepSo Core: Photos Plugin \< 6.3.1.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Community by PeepSo – Social Network, Membership, Registrat…)
- [CVE-2024-22159](https://cve.now/CVE-2024-22159.md): WordPress WOLF Plugin \<= 1.0.8 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, realmag777 WOLF – WordPress Posts Bulk Editor and Manager P…)
- [CVE-2024-22160](https://cve.now/CVE-2024-22160.md): WordPress Image Tag Manager Plugin \<= 1.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Bradley B. Dalina Image Tag Manager)
- [CVE-2024-22161](https://cve.now/CVE-2024-22161.md): WordPress HD Quiz Plugin \<= 1.8.11 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Harmonic Design HD Quiz)
- [CVE-2024-23637](https://cve.now/CVE-2024-23637.md): OctoPrint Unverified Password Change via Access Control Settings (CVSS 4.2, OctoPrint)
- [CVE-2024-22162](https://cve.now/CVE-2024-22162.md): WordPress WPZOOM Shortcodes Plugin \<= 1.0.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, WPZOOM Shortcodes)
- [CVE-2024-22163](https://cve.now/CVE-2024-22163.md): WordPress Shield Security Plugin \<= 18.5.7 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Shield Security – Smart Bot Blocking & Intrusion Prevention…)
- [CVE-2024-22282](https://cve.now/CVE-2024-22282.md): WordPress SimpleMap Store Locator Plugin \<= 2.6.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Michael Torbert SimpleMap Store Locator)
- [CVE-2024-22286](https://cve.now/CVE-2024-22286.md): WordPress BA Plus Plugin \<= 1.0.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Aluka BA Plus – Before & After Image Slider FREE)
- [CVE-2024-21893](https://cve.now/CVE-2024-21893.md): A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) (CVSS 8.2, KEV, Ivanti ICS · Ivanti IPS)
- [CVE-2024-21888](https://cve.now/CVE-2024-21888.md): A privilege escalation vulnerability in web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows a use (CVSS 8.8, Ivanti ICS · Ivanti IPS)
- [CVE-2024-22289](https://cve.now/CVE-2024-22289.md): WordPress Post views Stats plugin \<= 1.4.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1, CyberNetikz Post views Stats)
- [CVE-2023-5390](https://cve.now/CVE-2023-5390.md): An attacker could potentially exploit this vulnerability, leading to files being read from the Honeywell Experion ControlEdge VirtualUOC and (CVSS 5.3, Honeywell ControlEdge UOC)
- [CVE-2024-22292](https://cve.now/CVE-2024-22292.md): WordPress WP To Do Plugin \<= 1.2.8 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Delower WP To Do)
- [CVE-2024-22293](https://cve.now/CVE-2024-22293.md): WordPress BP Profile Search Plugin \<= 5.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Andrea Tarantini BP Profile Search)
- [CVE-2024-22295](https://cve.now/CVE-2024-22295.md): WordPress Robo Gallery Plugin \<= 3.2.17 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery)
- [CVE-2024-22297](https://cve.now/CVE-2024-22297.md): WordPress CBX Map for Google Map & OpenStreetMap Plugin \<= 1.1.11 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Codeboxr CBX Map for Google Map & OpenStreetMap)
- [CVE-2023-50166](https://cve.now/CVE-2023-50166.md): Pega Platform from 8.5.4 to 8.8.3 is affected by an XSS issue with an unauthenticated user and the redirect parameter. (CVSS 6.1, Pegasystems Pega Platform)
- [CVE-2023-50165](https://cve.now/CVE-2023-50165.md): Pega Platform versions 8.2.1 to Infinity 23.1.0 are affected by an Generated PDF issue that could expose file contents. (CVSS 8.5, Pegasystems Pega Platform)
- [CVE-2024-22302](https://cve.now/CVE-2024-22302.md): WordPress Albo Pretorio Online Plugin \<= 4.6.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Ignazio Scimone Albo Pretorio On line)
- [CVE-2024-22306](https://cve.now/CVE-2024-22306.md): WordPress Mang Board WP Plugin \<= 1.7.7 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Hometory Mang Board WP)
- [CVE-2024-22307](https://cve.now/CVE-2024-22307.md): WordPress WP-Lister Lite for eBay plugin \<= 3.5.7 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1, WP Lab WP-Lister Lite for eBay)
- [CVE-2024-22310](https://cve.now/CVE-2024-22310.md): WordPress Formzu WP Plugin \<= 1.6.7 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Formzu WP)
- [CVE-2024-24579](https://cve.now/CVE-2024-24579.md): Tar path traversal in stereoscope when processing OCI tar archives (CVSS 5.3, anchore stereoscope · github.com/anchore/stereoscope)
- [CVE-2024-24566](https://cve.now/CVE-2024-24566.md): Lobe Chat unauthorized access to plugins (CVSS 5.3, lobehub lobe-chat · @lobehub/chat)
- [CVE-2023-47116](https://cve.now/CVE-2023-47116.md): Label Studio SSRF on Import Bypassing \`SSRF\_PROTECTION\_ENABLED\` Protections (CVSS 5.3, HumanSignal label-studio · label-studio)
- [CVE-2024-23502](https://cve.now/CVE-2024-23502.md): WordPress Posts List Designer by Category – List Category Posts Or Recent Posts Plugin \<= 3.3.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, InfornWeb Posts List Designer by Category – List Category P…)
- [CVE-2024-23505](https://cve.now/CVE-2024-23505.md): WordPress PDF Viewer & 3D PDF Flipbook – DearPDF Plugin \<= 2.0.38 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, DearHive PDF Viewer & 3D PDF Flipbook – DearPDF)
- [CVE-2024-23508](https://cve.now/CVE-2024-23508.md): WordPress PDF Poster - PDF Embedder Plugin for WordPress Plugin \<= 2.1.17 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, bPlugins PDF Poster – PDF Embedder Plugin for WordPress)
- [CVE-2024-0833](https://cve.now/CVE-2024-0833.md): Privilege Elevation via Telerik Test Studio (CVSS 7.8, Progress Software Telerik Test Studio)
- [CVE-2024-0832](https://cve.now/CVE-2024-0832.md): Privilege Elevation via Telerik Reporting Installer (CVSS 7.8, Progress Software Telerik Reporting)
- [CVE-2024-0219](https://cve.now/CVE-2024-0219.md): Privilege Elevation via Telerik JustDecompile Installer (CVSS 7.8, Progress Software Telerik JustDecompile)
- [CVE-2024-1103](https://cve.now/CVE-2024-1103.md): CodeAstro Real Estate Management System Feedback Form profile.php cross site scripting (CVSS 3.5, CodeAstro Real Estate Management System)
- [CVE-2023-6780](https://cve.now/CVE-2023-6780.md): Glibc: integer overflow in \_\_vsyslog\_internal() (CVSS 5.3, glibc · Red Hat Enterprise Linux +1)
- [CVE-2023-6779](https://cve.now/CVE-2023-6779.md): Glibc: off-by-one heap-based buffer overflow in \_\_vsyslog\_internal() (CVSS 8.2, glibc · Red Hat Enterprise Linux +1)
- [CVE-2023-6246](https://cve.now/CVE-2023-6246.md): Glibc: heap-based buffer overflow in \_\_vsyslog\_internal() (CVSS 8.4, glibc · Red Hat Enterprise Linux +1)
- [CVE-2023-5992](https://cve.now/CVE-2023-5992.md): Opensc: side-channel leaks while stripping encryption pkcs#1 padding (CVSS 5.6, Red Hat Enterprise Linux)
- [CVE-2024-22136](https://cve.now/CVE-2024-22136.md): WordPress Droit Elementor Addons Plugin \<= 3.1.5 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, DroitThemes Droit Elementor Addons – Widgets, Blocks, Templ…)
- [CVE-2024-22140](https://cve.now/CVE-2024-22140.md): WordPress Profile Builder Pro Plugin \<= 3.10.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8, Cozmoslabs Profile Builder Pro)
- [CVE-2024-1112](https://cve.now/CVE-2024-1112.md): Buffer Overflow Vulnerability in Resource Hacker (CVSS 7.3, Angus Johnson Resource Hacker)
- [CVE-2024-0589](https://cve.now/CVE-2024-0589.md): Cross-site scripting (XSS) vulnerability in the entry overview tab in Devolutions Remote Desktop Manager 2023.3.36 and earlier on Windows al (CVSS 5.4, Devolutions Remote Desktop Manager)
- [CVE-2024-22143](https://cve.now/CVE-2024-22143.md): WordPress WP Spell Check Plugin \<= 9.17 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, WP Spell Check)
- [CVE-2023-7043](https://cve.now/CVE-2023-7043.md): Unquoted path privilege vulnerability in ESET products for Windows (CVSS 3.3, ESET, spol. s r.o. ESET Endpoint Security · ESET, spol.… +4)
- [CVE-2024-22285](https://cve.now/CVE-2024-22285.md): WordPress Frontpage Manager Plugin \<= 1.3 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Elise Bosse Frontpage Manager)
- [CVE-2024-22291](https://cve.now/CVE-2024-22291.md): WordPress Browser Theme Color Plugin \<= 1.3 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Marco Milesi Browser Theme Color)
- [CVE-2024-22304](https://cve.now/CVE-2024-22304.md): WordPress FreshMail For WordPress Plugin \<= 2.3.2 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Borbis Media FreshMail For WordPress)
- [CVE-2024-1086](https://cve.now/CVE-2024-1086.md): Use-after-free in Linux kernel's netfilter: nf\_tables component (CVSS 7.8, KEV, Linux Kernel)
- [CVE-2024-1085](https://cve.now/CVE-2024-1085.md): Use-after-free in Linux kernel's netfilter: nf\_tables component (CVSS 7.8, Linux Kernel)
- [CVE-2024-22287](https://cve.now/CVE-2024-22287.md): WordPress Better Anchor Links Plugin \<= 1.7.5 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 7.1, Luděk Melichar Better Anchor Links)
- [CVE-2024-22290](https://cve.now/CVE-2024-22290.md): WordPress Custom Dashboard Widgets Plugin \<= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 7.1, AboZain,O7abeeb,UnitOne Custom Dashboard Widgets)
- [CVE-2024-23507](https://cve.now/CVE-2024-23507.md): WordPress InstaWP Connect plugin \<= 0.1.0.9 - SQL Injection vulnerability (CVSS 8.5, InstaWP Connect)
- [CVE-2024-22305](https://cve.now/CVE-2024-22305.md): WordPress Contact Form builder with drag & drop - Kali Forms Plugin \<= 2.3.36 is vulnerable to Insecure Direct Object References (IDOR) (CVSS 7.5, Contact Form builder with drag & drop for WordPress – Kali…)
- [CVE-2024-1099](https://cve.now/CVE-2024-1099.md): Rebuild read-raw getFileOfData cross site scripting (CVSS 3.5, Rebuild)
- [CVE-2024-1098](https://cve.now/CVE-2024-1098.md): Rebuild proxy-download QiniuCloud.getStorageFile information disclosure (CVSS 4.3, Rebuild)
- [CVE-2023-50357](https://cve.now/CVE-2023-50357.md): Cross site scripting vulnerability in AREAL SAS Webserv1 ASP Web Site (CVSS 5.4, AREAL SAS Webserv1)
- [CVE-2023-50356](https://cve.now/CVE-2023-50356.md): Improper Certificate Validation in AREAL Topkapi Vision (Server) (CVSS 6.5, AREAL SAS Topkapi Vision)
- [CVE-2023-44313](https://cve.now/CVE-2023-44313.md): Apache ServiceComb Service-Center: attacker can perform SSRF through the frontend API (CVSS 7.6, Apache Software Foundation Apache ServiceComb Service-Cente…)
- [CVE-2023-44312](https://cve.now/CVE-2023-44312.md): Apache ServiceComb Service-Center: attacker can query all environment variables of the service-center server (CVSS 5.8, Apache Software Foundation Apache ServiceComb Service-Cente…)
- [CVE-2024-0836](https://cve.now/CVE-2024-0836.md): WordPress Review & Structure Data Schema Plugin – Review Schema \<= 2.1.14 - Missing Authorization to Arbitrary Review Update (CVSS 4.3, techlabpro1 Review Schema – Review & Structure Data Schema…)
- [CVE-2024-1012](https://cve.now/CVE-2024-1012.md): Wanhu ezOFFICE wf\_printnum.jsp sql injection (CVSS 6.3, Wanhu ezOFFICE)
- [CVE-2024-22236](https://cve.now/CVE-2024-22236.md): In Spring Cloud Contract, versions 4.1.x prior to 4.1.1, versions 4.0.x prior to 4.0.5, and versions 3.1.x prior to 3.1.10, test execution i (CVSS 3.3, Spring Cloud Contract · org.springframework.cloud:spring-cl…)
- [CVE-2024-0914](https://cve.now/CVE-2024-0914.md): Opencryptoki: timing side-channel in handling of rsa pkcs#1 v1.5 padded ciphertexts (marvin) (CVSS 5.9, opencryptoki · Red Hat Enterprise Linux)
- [CVE-2023-2439](https://cve.now/CVE-2023-2439.md): The UserPro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'userpro' shortcode in versions up to, and including, (CVSS 6.4, UserPro - Community and User Profile WordPress Plugin)
- [CVE-2024-1069](https://cve.now/CVE-2024-1069.md): Contact Form Entries \<= 1.3.2 - Authenticated (Administrator+) Arbitrary File Upload (CVSS 7.2, crmperks Database for Contact Form 7, WPforms, Elementor fo…)
- [CVE-2022-47072](https://cve.now/CVE-2022-47072.md): SQL injection vulnerability in Enterprise Architect 16.0.1605 32-bit allows attackers to run arbitrary SQL commands via the Find parameter i (CVSS 9.8)
- [CVE-2023-31505](https://cve.now/CVE-2023-31505.md): An arbitrary file upload vulnerability in Schlix CMS v2.2.8-1, allows remote authenticated attackers to execute arbitrary code and obtain se (CVSS 7.2)
- [CVE-2024-22569](https://cve.now/CVE-2024-22569.md): Stored Cross-Site Scripting (XSS) vulnerability in POSCMS v4.6.2, allows attackers to execute arbitrary code via a crafted payload to /index (CVSS 5.4)
- [CVE-2024-23170](https://cve.now/CVE-2024-23170.md): An issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2. (CVSS 5.5)
- [CVE-2024-23745](https://cve.now/CVE-2024-23745.md): In Notion Web Clipper 1.0.3(7), a .nib file is susceptible to the Dirty NIB attack. (no CVSS)
- [CVE-2024-23775](https://cve.now/CVE-2024-23775.md): Integer Overflow vulnerability in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2, allows attackers to cause a denial of service (DoS) via m (CVSS 7.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-01-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.