Archive
10 January 2024
Vulnerabilities first published on this day (UTC), newest first.
53 results · Clear filters · Feed
-
High 8.8
Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product to execute arbit…
-
High 8.0
Multiple TP-LINK products allow a network-adjacent authenticated attacker with access to the product from the LAN port …
-
High 8.8
Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product from the LAN por…
-
High 8.6
Omron CJ-series and CS-series unauthenticated filesystem access.
An attacker with network access to the affected PLC (CJ-series and CS-series PLCs, all versions) may use a network protocol to read and write files on the PLC internal memory and memory card.
-
High 8.8
A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14, Safari 17, iOS 17 and i…
-
High 7.0
A race condition was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.7.9, macOS Montere…
-
High 7.5
Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Ventura 1…
-
High 7.8
This issue was addressed by forcing hardened runtime on the affected binaries at the system level. This issue is fixed …
-
High 7.8
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13.5. An app may be able…
-
High 7.8
A type confusion issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7.5, macOS Ventura 1…
-
High 7.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. An app may be able to e…
-
High 7.5
An authentication issue was addressed with improved state management. This issue is fixed in iOS 17 and iPadOS 17, macO…
-
High 7.8
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.7.5,…
-
High 7.8
This issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may be able to gain eleva…
-
High 7.1
The issue was addressed with improved bounds checks. This issue is fixed in macOS Sonoma 14. Processing a file may lead…
-
High 7.8
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, iOS …
KEV Mar 5, 2026 -
High 7.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. An app may be able to e…
-
High 8.8
A type confusion issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14, iOS 17 and iPadOS 17…
-
High 7.1
The issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.3. An app may be able to c…
-
High 8.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 1…
-
High 7.8
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing a file may lead to arb…
-
High 7.8
A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sonoma 14, iOS 17 an…
-
High 7.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14, iOS 17 and iPadOS 17. An…
-
High 7.1
A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14, iOS 17…
-
High 7.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. An app may be able to e…
-
High 7.8
A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.6.6, macOS Big …
-
High 7.8
A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.3, macOS …
-
High 7.8
Uncontrolled Search Path Element in PTC's Kepware KEPServerEX
An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM.
-
High 8.3
An improper privilege management vulnerability [CWE-269] in a Fortinet FortiOS HA cluster version 7.4.0 through 7.4.1 a…
-
High 7.5
fonttools XML External Entity Injection (XXE) Vulnerability
fontTools is a library for manipulating fonts, written in Python. The subsetting module has a XML External Entity Injection (XXE) vulnerability which allows an attacker to resolve arbitrary entities when a candidate font (OT-SVG fonts), which contains a SVG t…
-
High 8.1
Redis vulnerable to integer overflow in certain payloads
Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in integer overflow that leads to heap overflow and potential remote code execution. This issue has been patched in version 7.0.15 and …
-
High 8.5
A cross-site scripting (xss) vulnerability exists in the navbarMenuAndLogo.php user name functionality of WWBN AVideo d…
-
High 7.5
An information disclosure vulnerability exists in the image404Raw.php functionality of WWBN AVideo dev master commit 15…
-
High 8.8
An insufficient entropy vulnerability exists in the userRecoverPass.php recoverPass generation functionality of WWBN AV…
-
High 7.3
WWBN AVideo Improper Restriction of Excessive Authentication Attempts vulnerability
A login attempt restriction bypass vulnerability exists in the checkLoginAttempts functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to captcha bypass, which can be abused by an attacker to brute force user cr…
-
High 8.1
The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, o…
-
High 8.1
The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, o…
-
High 8.1
The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, o…
-
High 8.1
The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, o…
-
High 8.1
The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, o…