Skip to content
OpenAdvisories

Archive

30 January 2024

Vulnerabilities first published on this day (UTC), newest first.

← December 2023 2024 / January /30 February 2024 →
  1. 115
  2. 2107
  3. 395
  4. 459
  5. 574
  6. 68
  7. 735
  8. 8197
  9. 9159
  10. 10178
  11. 11139
  12. 12129
  13. 1352
  14. 144
  15. 1566
  16. 16228
  17. 1785
  18. 1890
  19. 19108
  20. 2015
  21. 2114
  22. 2258
  23. 23147
  24. 2476
  25. 2574
  26. 26111
  27. 2717
  28. 2810
  29. 2994
  30. 3076
  31. 3192
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Critical 9.1
    CVE-2023-5389

    An attacker could potentially exploit this vulnerability, leading to the ability to modify files on Honeywell Experion …

    Honeywell ControlEdge UOC ICS / OT
  • Critical 9.8
    CVE-2023-6943

    Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Mitsubishi Electric…

    Mitsubishi Electric GX Works3 GX Works2 GT Designer3 Version1 (GOT2000) ICS / OT
  • Critical 9.8
    CVE-2023-51837

    Ylianst MeshCentral Missing SSL Certificate Validation

    Ylianst MeshCentral 1.1.16 is vulnerable to Missing SSL Certificate Validation.

    meshcentral npm
  • Critical 9.8
    CVE-2023-51982

    CrateDB authentication bypass vulnerability

    CrateDB 5.5.1 is contains an authentication bypass vulnerability in the Admin UI component. After configuring password authentication and_ Local_ In the case of an address, identity authentication can be bypassed by setting the X-Real IP request header to a s…

    io.crate:crate Maven
  • Critical 9.8
    CVE-2024-24324

    TOTOLINK A8000RU v7.1cu.643_B20200521 was discovered to contain a hardcoded password for root stored in /etc/shadow.

  • Critical 9.8
    CVE-2024-24325

    TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable para…

  • Critical 9.8
    CVE-2024-24330

    TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the port or ena…

  • Critical 9.8
    CVE-2024-24326

    TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the arpEnable p…

  • Critical 9.8
    CVE-2024-24327

    TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the pppoePass p…

  • Critical 9.8
    CVE-2024-24333

    TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the desc parame…

  • Critical 9.8
    CVE-2024-24331

    TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable para…

  • Critical 9.8
    CVE-2024-24332

    TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the url paramet…

  • Critical 9.8
    CVE-2024-24329 Scanner template

    TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the enable para…