Skip to content
OpenAdvisories

Archive

16 January 2024

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 8.8
    CVE-2024-0519 Exploited Public exploit

    Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exp…

    KEV Jan 17, 2024
  • High 7.5
    CVE-2023-1405 Public exploit

    Formidable Forms < 6.2 - Unauthenticated PHP Object Injection

    The Formidable Forms WordPress plugin before 6.2 unserializes user input, which could allow anonymous users to perform PHP Object Injection when a suitable gadget is present.

  • High 7.8
    CVE-2024-0582 Public exploit EPSS 13%

    Kernel: io_uring: page use-after-free vulnerability via buffer ring mmap

    A memory leak flaw was found in the Linux kernel’s io_uring functionality in how a user registers a buffer ring with IORING_REGISTER_PBUF_RING, mmap() it, and then frees it. This flaw allows a local user to crash or potentially escalate their privileges on th…

  • High 7.5
    CVE-2023-51810 Public exploit

    SQL injection vulnerability in StackIdeas EasyDiscuss v.5.0.5 and fixed in v.5.0.10 allows a remote attacker to obtain …

  • High 8.8
    CVE-2023-47460 Public exploit

    SQL injection vulnerability in Knovos Discovery v.22.67.0 allows a remote attacker to execute arbitrary code via the /D…