Skip to content
OpenAdvisories

Archive

January 2024

Vulnerabilities first published in this month (UTC), newest first.

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-23897 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Arbitrary file read vulnerability through the Jenkins CLI can lead to RCE

    Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read arbitrary files …

    KEV Aug 19, 2024
  • Critical 10.0
    CVE-2023-22527 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated att…

    KEV Jan 24, 2024
  • Critical 9.1
    CVE-2024-21887 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x,…

    KEV Jan 10, 2024
  • Critical 10.0
    CVE-2023-7028 Exploited Public exploit Scanner template EPSS 94%

    Weak Password Recovery Mechanism for Forgotten Password in GitLab

    An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account passwor…

    KEV May 1, 2024