Skip to content
OpenAdvisories

Archive

8 January 2024

Vulnerabilities first published on this day (UTC), newest first.

← December 2023 2024 / January /8 February 2024 →
  1. 115
  2. 2107
  3. 395
  4. 459
  5. 574
  6. 68
  7. 735
  8. 8197
  9. 9159
  10. 10178
  11. 11139
  12. 12129
  13. 1352
  14. 144
  15. 1566
  16. 16228
  17. 1785
  18. 1890
  19. 19108
  20. 2015
  21. 2114
  22. 2258
  23. 23147
  24. 2476
  25. 2574
  26. 26111
  27. 2717
  28. 2810
  29. 2994
  30. 3076
  31. 3192
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • Critical 10.0
    CVE-2024-21663

    Remote code execution on ReconServer due to improper input sanitization on the prips command

    Discord-Recon is a Discord bot created to automate bug bounty recon, automated scans and information gathering via a discord server. Discord-Recon is vulnerable to remote code execution. An attacker is able to execute shell commands in the server without havi…

    DEMON1A Discord-Recon
  • Critical 9.1
    CVE-2023-52202

    WordPress HTML5 MP3 Player with Folder Feedburner Plugin <= 2.8.0 is vulnerable to PHP Object Injection

    Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 MP3 Player with Folder Feedburner Playlist Free.This issue affects HTML5 MP3 Player with Folder Feedburner Playlist Free: from n/a through 2.8.0.

    SVNLabs Softwares HTML5 MP3 Player with Folder Feedburner Playlist Free
  • Critical 9.6
    CVE-2023-52200

    WordPress ARMember Plugin <= 4.0.22 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object Injection

    Cross-Site Request Forgery (CSRF), Deserialization of Untrusted Data vulnerability in Repute Infosystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup.This issue affects ARMember – Membership Plugin, Content Rest…

    Repute InfoSystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
  • Critical 9.1
    CVE-2023-52205

    WordPress HTML5 SoundCloud Player Plugin <= 2.8.0 is vulnerable to PHP Object Injection

    Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 SoundCloud Player with Playlist Free.This issue affects HTML5 SoundCloud Player with Playlist Free: from n/a through 2.8.0.

    SVNLabs Softwares HTML5 SoundCloud Player with Playlist Free
  • Critical 9.1
    CVE-2023-52207

    WordPress HTML5 MP3 Player with Playlist Free Plugin <= 3.0.0 is vulnerable to PHP Object Injection

    Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 MP3 Player with Playlist Free.This issue affects HTML5 MP3 Player with Playlist Free: from n/a through 3.0.0.

    SVNLabs Softwares HTML5 MP3 Player with Playlist Free
  • Critical 9.8
    CVE-2018-25095

    Duplicator < 1.3.0 - Unauthenticated RCE

    The Duplicator WordPress plugin before 1.3.0 does not properly escape values when its installer script replaces values in WordPress configuration files. If this installer script is left on the site after use, it could be use to run arbitrary code on the serve…

    Web / CMS
  • Critical 9.3
    CVE-2023-52215

    WordPress Barcode Scanner with Inventory & Order Manager Plugin <=1.5.1 is vulnerable to SQL Injection

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UkrSolution Simple Inventory Management – just scan barcode to manage products and orders. For WooCommerce.This issue affects Simple Inventory Management – j…

    UKR Solution Simple Inventory Management – just scan barcode to manage products and orders. For WooCommerce Web / CMS
  • Critical 10.0
    CVE-2023-52218

    WordPress WooCommerce Tranzila Gateway Plugin <= 1.0.8 is vulnerable to PHP Object Injection

    Deserialization of Untrusted Data vulnerability in Anton Bond Woocommerce Tranzila Payment Gateway.This issue affects Woocommerce Tranzila Payment Gateway: from n/a through 1.0.8.

    Anton Bond Woocommerce Tranzila Payment Gateway Web / CMS
  • Critical 9.9
    CVE-2023-52219

    WordPress Gecka Terms Thumbnails Plugin <= 1.1 is vulnerable to PHP Object Injection

    Deserialization of Untrusted Data vulnerability in Gecka Gecka Terms Thumbnails.This issue affects Gecka Terms Thumbnails: from n/a through 1.1.

    Gecka Gecka Terms Thumbnails
  • Critical 10.0
    CVE-2023-52225

    WordPress Taggbox Plugin <= 3.1 is vulnerable to PHP Object Injection

    Deserialization of Untrusted Data vulnerability in Tagbox Tagbox – UGC Galleries, Social Media Widgets, User Reviews & Analytics.This issue affects Tagbox – UGC Galleries, Social Media Widgets, User Reviews & Analytics: from n/a through 3.1.

    Tagbox Tagbox – UGC Galleries, Social Media Widgets, User Reviews & Analytics
  • Critical 10.0
    CVE-2024-21650 Scanner template EPSS 93%

    XWiki Remote Code Execution vulnerability via user registration

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki is vulnerable to a remote code execution (RCE) attack through its user registration feature. This issue allows an attacker to execute arbitrary code…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-administration-ui Maven
  • Critical 9.1
    CVE-2023-47211 Scanner template EPSS 47%

    A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A special…

    ManageEngine OpManager
  • Critical 9.8
    CVE-2023-6921

    SQL Injection in PrestaShop Google Integrator

    Blind SQL Injection vulnerability in PrestaShow Google Integrator (PrestaShop addon) allows for data extraction and modification. This attack is possible via command insertion in one of the cookies.

    PrestaShow PrestaShop Google Integrator Web / CMS
  • Critical 9.0
    CVE-2023-50982

    Stud.IP 5.x through 5.3.3 allows XSS with resultant upload of executable files, because upload_action and edit_action i…

  • Critical 9.8
    CVE-2024-22216

    In default installations of Microchip maxView Storage Manager (for Adaptec Smart Storage Controllers) where Redfish ser…