Skip to content
OpenAdvisories

Archive

18 January 2024

Vulnerabilities first published on this day (UTC), newest first.

← December 2023 2024 / January /18 February 2024 →
  1. 115
  2. 2107
  3. 395
  4. 459
  5. 574
  6. 68
  7. 735
  8. 8197
  9. 9159
  10. 10178
  11. 11139
  12. 12129
  13. 1352
  14. 144
  15. 1566
  16. 16228
  17. 1785
  18. 1890
  19. 19108
  20. 2015
  21. 2114
  22. 2258
  23. 23147
  24. 2476
  25. 2574
  26. 26111
  27. 2717
  28. 2810
  29. 2994
  30. 3076
  31. 3192
All Critical High Medium Low Exploited only Public exploit

52 results · Clear filters · Feed

  • Medium 5.5
    CVE-2023-48340

    In video decoder, there is a possible out of bounds write due to improper input validation. This could lead to local de…

    Unisoc (Shanghai) Technologies SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
  • Medium 4.4
    CVE-2023-48339

    In jpg driver, there is a possible missing permission check. This could lead to local information disclosure with Syste…

    Unisoc (Shanghai) Technologies SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
  • Medium 5.5
    CVE-2023-48341

    In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local den…

    Unisoc (Shanghai) Technologies SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
  • Medium 5.5
    CVE-2024-0655

    Novel-Plus list sql injection

    A vulnerability has been found in Novel-Plus 4.3.0-RC1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /novel/bookSetting/list. The manipulation of the argument sort leads to sql injection. The exploit has be…

  • Medium 5.0
    CVE-2023-6184 EPSS 47%

    Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross Site Scripting

    Cloud Software Group Citrix Session Recording
  • Medium 5.3
    CVE-2024-0654

    DeepFaceLab Util.py deserialization

    A vulnerability, which was classified as problematic, was found in DeepFaceLab pretrained DF.wf.288res.384.92.72.22. Affected is an unknown function of the file mainscripts/Util.py. The manipulation leads to deserialization. Local access is required to approa…

  • Medium 5.3
    CVE-2021-4433

    Karjasoft Sami HTTP Server HTTP HEAD Rrequest denial of service

    A vulnerability was found in Karjasoft Sami HTTP Server 2.0. It has been classified as problematic. Affected is an unknown function of the component HTTP HEAD Rrequest Handler. The manipulation leads to denial of service. It is possible to launch the attack r…

    Karjasoft Sami HTTP Server
  • Medium 6.3
    CVE-2024-0651

    PHPGurukul Company Visitor Management System search-visitor.php sql injection

    A vulnerability was found in PHPGurukul Company Visitor Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file search-visitor.php. The manipulation leads to sql injection. The attack can…

    PHPGurukul Company Visitor Management System
  • Medium 5.5
    CVE-2023-51258

    A memory leak issue discovered in YASM v.1.3.0 allows a local attacker to cause a denial of service via the new_Token f…

    yasm yasm yasm Debian Ubuntu Azure Linux
  • Medium 5.4
    CVE-2023-49943

    Zoho ManageEngine ServiceDesk Plus MSP before 14504 allows stored XSS (by a low-privileged technician) via a task's nam…

  • Medium 5.4
    CVE-2024-22549

    FlyCms 1.0 is vulnerable to Cross Site Scripting (XSS) in the email settings of the website settings section.

  • Medium 5.4
    CVE-2024-22548

    FlyCms 1.0 is vulnerable to Cross Site Scripting (XSS) in the system website settings website name section.