Archive

9 January 2024

Vulnerabilities first published on this day (UTC), newest first.

← December 2023 2024 / January /9 February 2024 →

All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

High 7.3

CVE-2024-0352 Public exploit Scanner template EPSS 73%

Likeshop HTTP POST Request File.php userFormImage unrestricted upload

A vulnerability classified as critical was found in Likeshop up to 2.5.7.20210311. This vulnerability affects the function FileServer::userFormImage of the file server/application/api/controller/File.php of the component HTTP POST Request Handler. The manipul…

Jan 9, 2024
Medium 6.5

CVE-2024-21320 Public exploit EPSS 23%

Windows Themes Spoofing Vulnerability

Windows Themes Spoofing Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 9, 2024
Medium 5.7

CVE-2024-21306 Public exploit

Microsoft Bluetooth Driver Spoofing Vulnerability

Microsoft Bluetooth Driver Spoofing Vulnerability

Microsoft Windows Server 2022 Windows 10 Version 21H2 Windows 10 Version 22H2 Windows

Jan 9, 2024
High 7.8

CVE-2024-20656 Public exploit

Visual Studio Elevation of Privilege Vulnerability

Visual Studio Elevation of Privilege Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.6 Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)

Jan 9, 2024
Medium 4.4

CVE-2024-21305 Public exploit

Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability

Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 9, 2024
High 7.8

CVE-2024-20698 Public exploit

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 9, 2024
High 7.3

CVE-2024-20696 Public exploit

Windows libarchive Remote Code Execution Vulnerability

Windows libarchive Remote Code Execution Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows Debian Ubuntu Alpine

Jan 9, 2024
High 8.8

CVE-2024-20674 Public exploit EPSS 17%

Windows Kerberos Security Feature Bypass Vulnerability

Windows Kerberos Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 9, 2024
Medium 6.6

CVE-2024-20666 Public exploit

BitLocker Security Feature Bypass Vulnerability

BitLocker Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jan 9, 2024
Critical 9.8

CVE-2023-50643 Public exploit

An issue in Evernote Evernote for MacOS v.10.68.2 allows a remote attacker to execute arbitrary code via the RunAsNode …

Jan 9, 2024