Skip to content
OpenAdvisories

Archive

19 January 2024

Vulnerabilities first published on this day (UTC), newest first.

← December 2023 2024 / January /19 February 2024 →
  1. 115
  2. 2107
  3. 395
  4. 459
  5. 574
  6. 68
  7. 735
  8. 8197
  9. 9159
  10. 10178
  11. 11139
  12. 12129
  13. 1352
  14. 144
  15. 1566
  16. 16228
  17. 1785
  18. 1890
  19. 19108
  20. 2015
  21. 2114
  22. 2258
  23. 23147
  24. 2476
  25. 2574
  26. 26111
  27. 2717
  28. 2810
  29. 2994
  30. 3076
  31. 3192
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Critical 9.1
    CVE-2024-23687

    FOLIO mod-data-export-spring Hard-Coded Credentials

    Hard-coded credentials in FOLIO mod-data-export-spring versions before 1.5.4 and from 2.0.0 to 2.0.2 allows unauthenticated users to access critical APIs, modify user data, modify configurations including single-sign-on, and manipulate fees/fines.

    org.folio:mod-data-export-spring Maven
  • Critical 9.8
    CVE-2024-23679

    Enonic XP Session Fixation Vulnerability

    Enonic XP versions less than 7.7.4 are vulnerable to a session fixation issue. An remote and unauthenticated attacker can use prior sessions due to the lack of invalidating session attributes.

    com.enonic.xp:lib-auth Maven
  • Critical 9.8
    CVE-2024-0705 Scanner template

    Stripe Payment Plugin for WooCommerce <= 3.7.9 - Unauthenticated SQL Injection

    The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 3.7.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on …

    ThemeHigh Payment Gateway of Stripe for WooCommerce Web / CMS
  • Critical 9.8
    CVE-2023-5716

    ASUS Armoury Crate - Arbitrary File Write

    ASUS Armoury Crate has a vulnerability in arbitrary file write and allows remote attackers to access or modify arbitrary files by sending specific HTTP requests without permission.

    ASUS Armoury Crate
  • Critical 9.8
    CVE-2023-50028

    In the module "Sliding cart block" (blockslidingcart) up to version 2.3.8 from PrestashopModules.eu for PrestaShop, a g…

  • Critical 9.8
    CVE-2023-50693

    An issue in Jester v.0.6.0 and before allows a remote attacker to send a malicious crafted request.

  • Critical 9.8
    CVE-2023-50030

    In the module "Jms Setting" (jmssetting) from Joommasters for PrestaShop, a guest can perform SQL injection in versions…

  • Critical 9.8
    CVE-2023-50694

    An issue in dom96 HTTPbeast v.0.4.1 and before allows a remote attacker to send a malicious crafted request due to insu…

  • Critical 9.8
    CVE-2023-27168

    An arbitrary file upload vulnerability in Xpand IT Write-back Manager v2.3.1 allows attackers to execute arbitrary code…

  • Critical 9.8
    CVE-2023-46351

    In the module mib < 1.6.1 from MyPresta.eu for PrestaShop, a guest can perform SQL injection. The methods `mib::getManu…

  • Critical 9.1
    CVE-2023-51947

    Improper access control on nasSvr.php in actidata actiNAS SL 2U-8 RDX 3.2.03-SP1 allows remote attackers to read and mo…

  • Critical 9.8
    CVE-2023-43985

    SunnyToo stblogsearch up to v1.0.0 was discovered to contain a SQL injection vulnerability via the StBlogSearchClass::p…