12 January 2024

6 results · Clear filters · Feed

• Low 2.4
  CVE-2024-0230 Public exploit

  A session management issue was addressed with improved checks. This issue is fixed in Magic Keyboard Firmware Update 2.…

  Apple Magic Keyboard Firmware
  Jan 12, 2024
• High 8.2
  CVE-2023-46805 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a r…

  ivanti IPS ICS Network devices
  Jan 12, 2024

  KEV Jan 10, 2024
• Critical 9.1
  CVE-2024-21887 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x,…

  ivanti ICS IPS Network devices
  Jan 12, 2024

  KEV Jan 10, 2024
• Critical 10.0
  CVE-2023-7028 Exploited Public exploit Scanner template EPSS 94%

  Weak Password Recovery Mechanism for Forgotten Password in GitLab

  An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account passwor…

  GitLab GitLab gitlab Web / CMS Ubuntu
  Jan 12, 2024

  KEV May 1, 2024
• Critical 9.8
  CVE-2023-50919 Public exploit EPSS 48%

  An issue was discovered on GL.iNet devices before version 4.5.0. There is an NGINX authentication bypass via Lua string…

  Jan 12, 2024
• Medium 4.3
  CVE-2023-40362 Public exploit

  An issue was discovered in CentralSquare Click2Gov Building Permit before October 2023. Lack of access control protecti…

  Jan 12, 2024