Skip to content
OpenAdvisories

Archive

19 January 2024

Vulnerabilities first published on this day (UTC), newest first.

← December 2023 2024 / January /19 February 2024 →
  1. 115
  2. 2107
  3. 395
  4. 459
  5. 574
  6. 68
  7. 735
  8. 8197
  9. 9159
  10. 10178
  11. 11139
  12. 12129
  13. 1352
  14. 144
  15. 1566
  16. 16228
  17. 1785
  18. 1890
  19. 19108
  20. 2015
  21. 2114
  22. 2258
  23. 23147
  24. 2476
  25. 2574
  26. 26111
  27. 2717
  28. 2810
  29. 2994
  30. 3076
  31. 3192
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Low 3.3
    CVE-2023-5081

    An information disclosure vulnerability was reported in the Lenovo Tab M8 HD that could allow a local application to ga…

    Lenovo Tablet
  • Low 3.7
    CVE-2024-22211

    FreeRDP integer Overflow leading to Heap Overflow

    FreeRDP is a set of free and open source remote desktop protocol library and clients. In affected versions an integer overflow in `freerdp_bitmap_planar_context_reset` leads to heap-buffer overflow. This affects FreeRDP based clients. FreeRDP based server imp…

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu Alpine Wolfi
  • Low 3.7
    CVE-2024-23329

    changedetection.io API endpoint is not secured with API token

    changedetection.io is an open source tool designed to monitor websites for content changes. In affected versions the API endpoint `/api/v1/watch/<uuid>/history` can be accessed by any unauthorized user. As a result any unauthorized user can check one's watch …

    dgtlmoon changedetection.io changedetection-io PyPI
  • Low 3.5
    CVE-2024-0722

    code-projects Social Networking Site Message Page message.php cross site scripting

    A vulnerability was found in code-projects Social Networking Site 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file message.php of the component Message Page. The manipulation of the argument Story leads to cr…

    code-projects Social Networking Site
  • Low 3.5
    CVE-2024-0721

    Jspxcms Survey Label cross site scripting

    A vulnerability has been found in Jspxcms 10.2.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Survey Label Handler. The manipulation leads to cross site scripting. The attack can be launched remote…

  • Low 3.5
    CVE-2024-0720

    FactoMineR FactoInvestigate HTML Report Generator cross site scripting

    A vulnerability, which was classified as problematic, was found in FactoMineR FactoInvestigate up to 1.9. Affected is an unknown function of the component HTML Report Generator. The manipulation leads to cross site scripting. It is possible to launch the atta…

    FactoMineR FactoInvestigate
  • Low 2.4
    CVE-2024-0718

    liuwy-dlsdys zhglxt HTTP POST Request edit cross site scripting

    A vulnerability, which was classified as problematic, has been found in liuwy-dlsdys zhglxt 4.7.7. This issue affects some unknown processing of the file /oa/notify/edit of the component HTTP POST Request Handler. The manipulation of the argument notifyTitle …

    liuwy-dlsdys zhglxt
  • Low 3.1
    CVE-2024-0716

    Byzoro Smart S150 Management Platform Backup File download.php information disclosure

    A vulnerability classified as problematic has been found in Byzoro Smart S150 Management Platform V31R02B15. This affects an unknown part of the file /log/download.php of the component Backup File Handler. The manipulation leads to information disclosure. It …

    Byzoro Smart S150 Management Platform