Skip to content
OpenAdvisories

Archive

16 January 2024

Vulnerabilities first published on this day (UTC), newest first.

← December 2023 2024 / January /16 February 2024 →
  1. 115
  2. 2107
  3. 395
  4. 459
  5. 574
  6. 68
  7. 735
  8. 8197
  9. 9159
  10. 10178
  11. 11139
  12. 12129
  13. 1352
  14. 144
  15. 1566
  16. 16228
  17. 1785
  18. 1890
  19. 19108
  20. 2015
  21. 2114
  22. 2258
  23. 23147
  24. 2476
  25. 2574
  26. 26111
  27. 2717
  28. 2810
  29. 2994
  30. 3076
  31. 3192
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Critical 9.3
    CVE-2024-22406

    Blind SQL-injection in DAL aggregations in Shopware

    Shopware is an open headless commerce platform. The Shopware application API contains a search functionality which enables users to search through information stored within their Shopware instance. The searches performed by this function can be aggregated usi…

    shopware shopware shopware/platform shopware/core Packagist
  • Critical 9.8
    CVE-2023-0224

    GiveWP < 2.24.1 - Unauthenticated SQLi

    The GiveWP WordPress plugin before 2.24.1 does not properly escape user input before it reaches SQL queries, which could let unauthenticated attackers perform SQL Injection attacks

    Web / CMS
  • Critical 9.8
    CVE-2023-3211

    WordPress Database Administrator <= 1.0.3 - Unauthenticated SQL Injection

    The WordPress Database Administrator WordPress plugin through 1.0.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.

    Web / CMS
  • Critical 9.8
    CVE-2022-1609 Public exploit Scanner template EPSS 64%

    The School Management < 9.9.7 - Unauthenticated RCE via REST api

    The School Management WordPress plugin before 9.9.7 contains an obfuscated backdoor injected in it's license checking code that registers a REST API handler, allowing an unauthenticated attacker to execute arbitrary PHP code on the site.

    Web / CMS
  • Critical 9.8
    CVE-2023-52103

    Buffer overflow vulnerability in the FLP module. Successful exploitation of this vulnerability may cause out-of-bounds …

    Huawei HarmonyOS EMUI Network devices
  • Critical 9.1
    CVE-2023-52101

    Component exposure vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect service …

    Huawei HarmonyOS EMUI Network devices
  • Critical 9.9
    CVE-2023-34063

    Aria Automation contains a Missing Access Control vulnerability. An authenticated malicious actor may exploit this vuln…

  • Critical 10.0
    CVE-2023-22527 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated att…

    Atlassian Confluence Server Confluence Data Center Web / CMS
    KEV Jan 24, 2024
  • Critical 9.8
    CVE-2023-39691

    An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET r…

  • Critical 9.8
    CVE-2023-52041

    An issue discovered in TOTOLINK X6000R V9.4.0cu.852_B20230719 allows attackers to run arbitrary code via the sub_410118…

  • Critical 9.8
    CVE-2023-49351

    A stack-based buffer overflow vulnerability in /bin/webs binary in Edimax BR6478AC V2 firmware veraion v1.23 allows att…

  • Critical 9.8
    CVE-2024-22916

    In D-LINK Go-RT-AC750 v101b03, the sprintf function in the sub_40E700 function within the cgibin is susceptible to stac…