Skip to content
OpenAdvisories

Archive

8 January 2024

Vulnerabilities first published on this day (UTC), newest first.

← December 2023 2024 / January /8 February 2024 →
  1. 115
  2. 2107
  3. 395
  4. 459
  5. 574
  6. 68
  7. 735
  8. 8197
  9. 9159
  10. 10178
  11. 11139
  12. 12129
  13. 1352
  14. 144
  15. 1566
  16. 16228
  17. 1785
  18. 1890
  19. 19108
  20. 2015
  21. 2114
  22. 2258
  23. 23147
  24. 2476
  25. 2574
  26. 26111
  27. 2717
  28. 2810
  29. 2994
  30. 3076
  31. 3192
All Critical High Medium Low Exploited only Public exploit

53 results · Clear filters · Feed

  • Medium 6.3
    CVE-2024-0302

    fhs-opensource iparking vueLogin deserialization

    A vulnerability, which was classified as critical, has been found in fhs-opensource iparking 1.5.22.RELEASE. This issue affects some unknown processing of the file /vueLogin. The manipulation leads to deserialization. The attack may be initiated remotely. The…

    fhs-opensource iparking
  • Medium 6.3
    CVE-2024-0301

    fhs-opensource iparking PayTempOrderAction.java getData sql injection

    A vulnerability classified as critical was found in fhs-opensource iparking 1.5.22.RELEASE. This vulnerability affects the function getData of the file src/main/java/com/xhb/pay/action/PayTempOrderAction.java. The manipulation leads to sql injection. The atta…

    fhs-opensource iparking
  • Medium 6.3
    CVE-2024-0300

    Byzoro Smart S150 Management Platform HTTP POST Request userattestation.php unrestricted upload

    A vulnerability was found in Byzoro Smart S150 Management Platform up to 20240101. It has been rated as critical. Affected by this issue is some unknown functionality of the file /useratte/userattestation.php of the component HTTP POST Request Handler. The ma…

    Byzoro Smart S150 Management Platform
  • Medium 6.3
    CVE-2024-0293

    Totolink LR1200GB cstecgi.cgi setUploadSetting os command injection

    A vulnerability classified as critical was found in Totolink LR1200GB 9.1.0u.6619_B20230130. Affected by this vulnerability is the function setUploadSetting of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName leads to os command inject…

    Toto Link LR1200GB
  • Medium 4.0
    CVE-2023-47140

    IBM CICS Transaction Gateway improper access controls

    IBM CICS Transaction Gateway 9.3 could allow a user to transfer or view files due to improper access controls.

    IBM CICS Transaction Gateway Containers
  • Medium 6.3
    CVE-2024-0292

    Totolink LR1200GB cstecgi.cgi setOpModeCfg os command injection

    A vulnerability classified as critical has been found in Totolink LR1200GB 9.1.0u.6619_B20230130. Affected is the function setOpModeCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument hostName leads to os command injection. It is possible t…

    Toto Link LR1200GB
  • Medium 6.5
    CVE-2023-50948

    IBM Storage Fusion HCI information disclosure

    IBM Storage Fusion HCI 2.1.0 through 2.6.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force I…

    IBM Storage Fusion HCI
  • Medium 6.3
    CVE-2024-0291

    Totolink LR1200GB cstecgi.cgi UploadFirmwareFile command injection

    A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130. It has been rated as critical. This issue affects the function UploadFirmwareFile of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName leads to command injection. The…

    Toto Link LR1200GB
  • Medium 6.3
    CVE-2024-0290

    Kashipara Food Management System stock_edit.php sql injection

    A vulnerability, which was classified as critical, has been found in Kashipara Food Management System 1.0. This issue affects some unknown processing of the file stock_edit.php. The manipulation of the argument item_type leads to sql injection. The attack may…

    Kashipara Food Management System
  • Medium 6.3
    CVE-2024-0289

    Kashipara Food Management System stock_entry_submit.php sql injection

    A vulnerability classified as critical was found in Kashipara Food Management System 1.0. This vulnerability affects unknown code of the file stock_entry_submit.php. The manipulation of the argument itemype leads to sql injection. The attack can be initiated …

    Kashipara Food Management System
  • Medium 6.1
    CVE-2023-27739

    easyXDM 2.5 allows XSS via the xdm_e parameter.

  • Medium 6.5
    CVE-2023-52271 Public exploit

    The wsftprm.sys kernel driver 2.0.0.0 in Topaz Antifraud allows low-privileged attackers to kill any (Protected Process…

  • Medium 5.4
    CVE-2023-51246

    A Cross Site Scripting (XSS) vulnerability in GetSimple CMS 3.3.16 exists when using Source Code Mode as a backend user…