Archive

5 January 2024

Vulnerabilities first published on this day (UTC), newest first.

← December 2023 2024 / January /5 February 2024 →

All Critical High Medium Low Exploited only Public exploit

43 results · Clear filters · Feed

Medium 5.9

CVE-2023-52323

PyCryptodome and pycryptodomex side-channel leakage for OAEP decryption

PyCryptodome and pycryptodomex before 3.19.1 allow side-channel leakage for OAEP decryption, exploitable for a Manger attack.

jwt-tool pycryptodome pycryptodome pycryptodome Debian Ubuntu Wolfi PyPI

Jan 5, 2024
Medium 6.1

CVE-2022-36677

Obsidian Mind Map v1.1.0 allows attackers to execute arbitrary code via a crafted payload injected into an uploaded doc…

Jan 5, 2024
Medium 6.1

CVE-2024-22075

Firefly III allows webhooks HTML Injection.

Firefly III (aka firefly-iii) before 6.1.1 allows webhooks HTML Injection.

grumpydictator/firefly-iii Packagist

Jan 5, 2024