Archive

23 January 2024

Vulnerabilities first published on this day (UTC), newest first.

← December 2023 2024 / January /23 February 2024 →

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

Critical 9.1

CVE-2024-22203 Public exploit

Whoogle Search Server Side Request Forgery vulnerability

Whoogle Search is a self-hosted metasearch engine. In versions prior to 0.8.4, the `element` method in `app/routes.py` does not validate the user-controlled `src_type` and `element_url` variables and passes them to the `send` method which sends a GET request …

benbusby whoogle-search whoogle-search PyPI

Jan 23, 2024
Medium 6.5

CVE-2024-0741 Public exploit

An out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a potentially exploitable c…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Jan 23, 2024
High 8.8

CVE-2024-23222 Exploited Public exploit EPSS 11%

A type confusion issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 15.8.7 and iPadOS 15…

Apple macOS iOS and iPadOS tvOS macOS iOS Browsers Debian Ubuntu

Jan 23, 2024
KEV Jan 23, 2024
High 7.8

CVE-2024-23208 Public exploit

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Sonoma 14…

Apple macOS iOS and iPadOS watchOS macOS iOS

Jan 23, 2024