Archive

28 January 2024

Vulnerabilities first published on this day (UTC), newest first.

← December 2023 2024 / January /28 February 2024 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Medium 4.7

CVE-2024-0986 Public exploit Scanner template EPSS 58%

Issabel PBX Asterisk-Cli os command injection

A vulnerability was found in Issabel PBX 4.0.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php?menu=asterisk_cli of the component Asterisk-Cli. The manipulation of the argument Command leads to os command inje…

Issabel Foundation PBX

Jan 28, 2024
Medium 5.4

CVE-2024-23782

Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series …

appleple a-blog cms a-blog cms (Ver.3.0.x series) a-blog cms (Ver.3.1.x series)

Jan 28, 2024
Medium 6.6

CVE-2024-0841

Kernel: hugetlbfs: null pointer dereference in hugetlbfs_fill_super function

A null pointer dereference flaw was found in the hugetlbfs_fill_super function in the Linux kernel hugetlbfs (HugeTLB pages) functionality. This issue may allow a local user to crash the system or potentially escalate their privileges on the system.

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu

Jan 28, 2024