Skip to content
OpenAdvisories

Archive

24 January 2024

Vulnerabilities first published on this day (UTC), newest first.

← December 2023 2024 / January /24 February 2024 →
  1. 115
  2. 2107
  3. 395
  4. 459
  5. 574
  6. 68
  7. 735
  8. 8197
  9. 9159
  10. 10178
  11. 11139
  12. 12129
  13. 1352
  14. 144
  15. 1566
  16. 16228
  17. 1785
  18. 1890
  19. 19108
  20. 2015
  21. 2114
  22. 2258
  23. 23147
  24. 2476
  25. 2574
  26. 26111
  27. 2717
  28. 2810
  29. 2994
  30. 3076
  31. 3192
All Critical High Medium Low Exploited only Public exploit

76 results · Feed

  • High 7.2
    CVE-2023-24676

    Arbitrary Code Execution in Processwire

    An issue found in ProcessWire 3.0.210 allows attackers to execute arbitrary code and install a reverse shell via the download_zip_url parameter when installing a new module. NOTE: this is disputed because exploitation requires that the attacker is able to ent…

    processwire/processwire Packagist
  • Medium 5.4
    CVE-2023-44000

    An issue in Otakara lapis totuka mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via …

  • Medium 5.4
    CVE-2023-44001

    An issue in Ailand clinic mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage…

  • High 8.8
    CVE-2023-52040

    An issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the sub_41…

  • Critical 9.8
    CVE-2023-52039

    An issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the sub_41…

  • Critical 9.8
    CVE-2023-52038

    An issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the sub_41…

  • Critical 9.8
    CVE-2023-51889

    Stack Overflow vulnerability in the validate() function in Mathtex v.1.05 and before allows a remote attacker to execut…

    mathtex mathtex Debian Ubuntu
  • High 7.5
    CVE-2023-51888

    Buffer Overflow vulnerability in the nomath() function in Mathtex v.1.05 and before allows a remote attacker to cause a…

    mathtex mathtex Debian Ubuntu
  • Critical 9.8
    CVE-2023-51887

    Command Injection vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via cra…

    mathtex mathtex Debian Ubuntu
  • High 7.5
    CVE-2023-51890

    An infinite loop issue discovered in Mathtex 1.05 and before allows a remote attackers to consume CPU resources via cra…

    mathtex mathtex Debian Ubuntu
  • High 7.8
    CVE-2023-51711

    An issue was discovered in Regify Regipay Client for Windows version 4.5.1.0 allows DLL hijacking: a user can trigger t…

  • High 7.5
    CVE-2023-51886

    Buffer Overflow vulnerability in the main() function in Mathtex 1.05 and before allows a remote attacker to cause a den…

    mathtex mathtex Debian Ubuntu
  • Critical 9.8
    CVE-2023-51885

    Buffer Overflow vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via the l…

    mathtex mathtex Debian Ubuntu
  • Medium 5.4
    CVE-2023-43995

    An issue in picot.golf mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of…

  • Medium 5.4
    CVE-2023-43989

    An issue in mokumoku chohu mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakag…

  • Medium 5.4
    CVE-2023-43999

    An issue in COLORFUL_laundry mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leak…

  • Medium 5.4
    CVE-2023-43992

    An issue in STOCKMAN GROUP mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakag…

  • Medium 5.4
    CVE-2023-43997

    An issue in Yoruichi hobby base mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via l…

  • Medium 5.4
    CVE-2023-43994

    An issue in Cleaning_makotoya mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via lea…

  • Medium 5.4
    CVE-2023-43998

    An issue in Books-futaba mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage …

  • Medium 5.4
    CVE-2023-43988

    An issue in nature fitness saijo mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via …

  • High 8.8
    CVE-2023-43317 Public exploit

    An issue in Coign CRM Portal v.06.06 allows a remote attacker to escalate privileges via the userPermissionsList parame…

  • Medium 5.4
    CVE-2023-43991

    An issue in PRIMA CLINIC mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage …

  • Medium 5.4
    CVE-2023-43993

    An issue in smaregi_app_market mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via le…

  • Medium 5.4
    CVE-2023-43990

    An issue in cherub-hair mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage o…

  • Medium 5.4
    CVE-2023-43996

    An issue in Q co ltd mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of t…

  • Critical 9.8
    CVE-2024-22651 EPSS 20%

    There is a command injection vulnerability in the ssdpcgi_main function of cgibin binary in D-Link DIR-815 router firmw…

  • Medium 6.1
    CVE-2024-22725

    Orthanc versions before 1.12.2 are affected by a reflected cross-site scripting (XSS) vulnerability. The vulnerability …

    orthanc orthanc Debian Ubuntu
  • Critical 9.8
    CVE-2024-22751

    D-Link DIR-882 DIR882A1_FW130B06 was discovered to contain a stack overflow via the sub_477AA0 function.

  • Medium 4.8
    CVE-2024-22720

    Kanboard 1.2.34 is vulnerable to Html Injection in the group management feature.

  • High 7.5
    CVE-2021-42146

    An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers allow remote attackers to re…

  • Critical 9.1
    CVE-2021-42143

    An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. An infinite loop bug exists during the ha…

  • Critical 9.1
    CVE-2021-42147

    Buffer over-read vulnerability in the dtls_sha256_update function in Contiki-NG tinyDTLS through master branch 53a0d97 …

  • High 7.5
    CVE-2021-42144

    Buffer over-read vulnerability in Contiki-NG tinyDTLS through master branch 53a0d97 allows attackers obtain sensitive i…

  • High 7.5
    CVE-2021-42145

    An assertion failure discovered in in check_certificate_request() in Contiki-NG tinyDTLS through master branch 53a0d97 …

  • Medium 4.8
    CVE-2021-43584

    DOM-based Cross Site Scripting (XSS vulnerability in 'Tail Event Logs' functionality in Nagios Nagios Cross-Platform Ag…