Skip to content
OpenAdvisories

Archive

22 January 2024

Vulnerabilities first published on this day (UTC), newest first.

← December 2023 2024 / January /22 February 2024 →
  1. 115
  2. 2107
  3. 395
  4. 459
  5. 574
  6. 68
  7. 735
  8. 8197
  9. 9159
  10. 10178
  11. 11139
  12. 12129
  13. 1352
  14. 144
  15. 1566
  16. 16228
  17. 1785
  18. 1890
  19. 19108
  20. 2015
  21. 2114
  22. 2258
  23. 23147
  24. 2476
  25. 2574
  26. 26111
  27. 2717
  28. 2810
  29. 2994
  30. 3076
  31. 3192
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2024-23339 Public exploit

    hoolock does not block Prototype pollution with object-path related utilities

    hoolock is a suite of lightweight utilities designed to maintain a small footprint when bundled. Starting in version 2.0.0 and prior to version 2.2.1, utility functions related to object paths (`get`, `set`, and `update`) did not block attempts to access or a…

    elijahharry hoolock hoolock npm
  • Critical 9.8
    CVE-2024-0204 Public exploit Scanner template EPSS 95%

    Authentication Bypass in GoAnywhere MFT

    Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal.

    Fortra GoAnywhere MFT
  • Medium 6.3
    CVE-2024-0783 Public exploit

    Project Worlds Online Admission System documents.php unrestricted upload

    A vulnerability was found in Project Worlds Online Admission System 1.0 and classified as critical. This issue affects some unknown processing of the file documents.php. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The …

    Project Worlds Online Admission System