Skip to content
OpenAdvisories

Archive

28 January 2024

Vulnerabilities first published on this day (UTC), newest first.

← December 2023 2024 / January /28 February 2024 →
  1. 115
  2. 2107
  3. 395
  4. 459
  5. 574
  6. 68
  7. 735
  8. 8197
  9. 9159
  10. 10178
  11. 11139
  12. 12129
  13. 1352
  14. 144
  15. 1566
  16. 16228
  17. 1785
  18. 1890
  19. 19108
  20. 2015
  21. 2114
  22. 2258
  23. 23147
  24. 2476
  25. 2574
  26. 26111
  27. 2717
  28. 2810
  29. 2994
  30. 3076
  31. 3192
All Critical High Medium Low Exploited only Public exploit

10 results · Feed

  • Medium 4.7
    CVE-2024-0986 Public exploit Scanner template EPSS 58%

    Issabel PBX Asterisk-Cli os command injection

    A vulnerability was found in Issabel PBX 4.0.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php?menu=asterisk_cli of the component Asterisk-Cli. The manipulation of the argument Command leads to os command inje…

    Issabel Foundation PBX
  • Medium 5.4
    CVE-2024-23782

    Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series …

    appleple a-blog cms a-blog cms (Ver.3.0.x series) a-blog cms (Ver.3.1.x series)
  • High 7.5
    CVE-2023-6200

    Kernel: icmpv6 router advertisement packets, aka linux tcp/ip remote code execution vulnerability

    A race condition was found in the Linux Kernel. Under certain conditions, an unauthenticated attacker from an adjacent network could send an ICMPv6 router advertisement packet, causing arbitrary code execution.

    Red Hat Fedora Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Azure Linux
  • Medium 6.6
    CVE-2024-0841

    Kernel: hugetlbfs: null pointer dereference in hugetlbfs_fill_super function

    A null pointer dereference flaw was found in the hugetlbfs_fill_super function in the Linux kernel hugetlbfs (HugeTLB pages) functionality. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  • Critical 9.8
    CVE-2024-23739 Public exploit

    An issue in Discord for macOS version 0.0.291 and before, allows remote attackers to execute arbitrary code via the Run…

  • Unscored —
    CVE-2024-23742 Public exploit

    An issue in Loom on macOS version 0.196.1 and before, allows remote attackers to execute arbitrary code via the RunAsNo…

  • Critical 9.8
    CVE-2024-23740 Public exploit

    An issue in Kap for macOS version 3.6.0 and before, allows remote attackers to execute arbitrary code via the RunAsNode…

  • Low 3.3
    CVE-2024-23743 Public exploit

    Notion through 3.1.0 on macOS might allow code execution because of RunAsNode and enableNodeClilnspectArguments. NOTE: …

  • Unscored —
    CVE-2024-23738 Public exploit

    An issue in Postman version 10.22 and before on macOS allows a remote attacker to execute arbitrary code via the RunAsN…

  • Critical 9.8
    CVE-2024-23741 Public exploit

    An issue in Hyper on macOS version 3.4.1 and before, allows remote attackers to execute arbitrary code via the RunAsNod…