Skip to content
OpenAdvisories

Archive

6 January 2024

Vulnerabilities first published on this day (UTC), newest first.

← December 2023 2024 / January /6 February 2024 →
  1. 115
  2. 2107
  3. 395
  4. 459
  5. 574
  6. 68
  7. 735
  8. 8197
  9. 9159
  10. 10178
  11. 11139
  12. 12129
  13. 1352
  14. 144
  15. 1566
  16. 16228
  17. 1785
  18. 1890
  19. 19108
  20. 2015
  21. 2114
  22. 2258
  23. 23147
  24. 2476
  25. 2574
  26. 26111
  27. 2717
  28. 2810
  29. 2994
  30. 3076
  31. 3192
All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • High 7.2
    CVE-2023-51441

    Apache Axis 1.x (EOL) may allow SSRF when untrusted input is passed to the service admin HTTP API

    ** UNSUPPORTED WHEN ASSIGNED ** Improper Input Validation vulnerability in Apache Axis allowed users with access to the admin service to perform possible SSRF This issue affects Apache Axis: through 1.3. As Axis 1 has been EOL we recommend you migrate to a di…

    Apache Software Foundation Apache Axis axis org.apache.axis:axis Debian Ubuntu Maven
  • Medium 5.4
    CVE-2023-6798

    RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.3.2 - Missing Authorization

    The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to unauthorized settings update due to a missing capability check when updating settings in all versions up to, and including, …

    themeisle RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator Web / CMS
  • Medium 6.4
    CVE-2023-6801

    RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 4.3.2 - Authenticated (Author+) Stored Cross-Site Scripting

    The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.3.2 due to insufficient input sanitiz…

    themeisle RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator Web / CMS
  • Medium 5.7
    CVE-2023-50121

    Autel EVO NANO drone flight control firmware version 1.6.5 is vulnerable to denial of service (DoS).

  • High 7.8
    CVE-2023-50612

    Insecure Permissions vulnerability in fit2cloud Cloud Explorer Lite version 1.4.1, allow local attackers to escalate pr…

  • Medium 6.1
    CVE-2023-50609

    Cross Site Scripting (XSS) vulnerability in AVA teaching video application service platform version 3.1, allows remote …

  • Medium 6.5
    CVE-2023-39853

    SQL Injection vulnerability in Dzzoffice version 2.01, allows remote attackers to obtain sensitive information via the …

  • Critical 9.8
    CVE-2023-46953

    SQL Injection vulnerability in ABO.CMS v.5.9.3, allows remote attackers to execute arbitrary code via the d parameter i…