Skip to content
OpenAdvisories

Archive

26 January 2024

Vulnerabilities first published on this day (UTC), newest first.

← December 2023 2024 / January /26 February 2024 →
  1. 115
  2. 2107
  3. 395
  4. 459
  5. 574
  6. 68
  7. 735
  8. 8197
  9. 9159
  10. 10178
  11. 11139
  12. 12129
  13. 1352
  14. 144
  15. 1566
  16. 16228
  17. 1785
  18. 1890
  19. 19108
  20. 2015
  21. 2114
  22. 2258
  23. 23147
  24. 2476
  25. 2574
  26. 26111
  27. 2717
  28. 2810
  29. 2994
  30. 3076
  31. 3192
All Critical High Medium Low Exploited only Public exploit

111 results · Feed

  • High 8.2
    CVE-2024-23893

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/costcentermodify.php, in the costcenteri…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23892

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/costcentercreate.php, in the costcenteri…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23891

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/itemcreate.php, in the itemid parameter.…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23890

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/itempopup.php, in the description parame…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23889

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/itemgroupcreate.php, in the itemgroupid …

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23888

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/stocktransactionslist.php, in the itemid…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23887

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/grncreate.php, in the grndate parameter.…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23886

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/itemmodify.php, in the bincardinfo param…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23885

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/countrymodify.php, in the countryid para…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23884

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/grnmodify.php, in the grndate parameter.…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23883

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/taxstructuremodify.php, in the descripti…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23882

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/taxcodecreate.php, in the taxcodeid para…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23881

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/statelist.php, in the description parame…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23880

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/taxcodelist.php, in the description para…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23879

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/statemodify.php, in the description para…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23878

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/grnprint.php, in the grnno parameter. Ex…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23877

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/currencycreate.php, in the currencyid pa…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23876

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/taxstructurecreate.php, in the descripti…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23875

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/stockissuancedisplay.php, in the issuanc…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23874

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/companymodify.php, in the address1 param…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23873

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/currencymodify.php, in the currencyid pa…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23872

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/locationmodify.php, in the description p…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23871

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/unitofmeasurementmodify.php, in the desc…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23870

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/stockissuancelist.php, in the delete par…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23869

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/stockissuanceprint.php, in the issuancen…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23868

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/grnlist.php, in the deleted parameter. E…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23867

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/statecreate.php, in the stateid paramete…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23866

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/countrycreate.php, in the countryid para…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23865

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/taxstructurelist.php, in the description…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23864

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/countrylist.php, in the description para…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23863

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/taxstructuredisplay.php, in the descript…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23862

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/grndisplay.php, in the grnno parameter. …

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23861

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/unitofmeasurementcreate.php, in the unit…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23860

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/currencylist.php, in the description par…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23859

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/taxstructurelinecreate.php, in the flata…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23858

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/stockissuancelinecreate.php, in the batc…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23857

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/grnlinecreate.php, in the batchno parame…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23856

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/itemlist.php, in the description paramet…

    Cups Easy Cups Easy (Purchase & Inventory)
  • Medium 5.5
    CVE-2024-0727

    PKCS12 Decoding crashes

    Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact summary: Applications loading files in the PKCS12 format from untrusted sources might terminate abruptly. A file in …

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi PyPI
  • High 7.2
    CVE-2024-0920

    TRENDnet TEW-822DRE POST Request admin_ping.htm command injection

    A vulnerability was found in TRENDnet TEW-822DRE 1.03B02. It has been declared as critical. This vulnerability affects unknown code of the file /admin_ping.htm of the component POST Request Handler. The manipulation of the argument ipv4_ping/ipv6_ping leads t…

    Trendnet TEW-822DRE