Skip to content
OpenAdvisories

Archive

January 2024

Vulnerabilities first published in this month (UTC), newest first.

← December 2023 2024 / January February 2024 →
  1. 115
  2. 2107
  3. 395
  4. 459
  5. 574
  6. 68
  7. 735
  8. 8197
  9. 9159
  10. 10178
  11. 11139
  12. 12129
  13. 1352
  14. 144
  15. 1566
  16. 16228
  17. 1785
  18. 1890
  19. 19108
  20. 2015
  21. 2114
  22. 2258
  23. 23147
  24. 2476
  25. 2574
  26. 26111
  27. 2717
  28. 2810
  29. 2994
  30. 3076
  31. 3192
All Critical High Medium Low Exploited only Public exploit

923 results · Clear filters · Feed

  • High 8.2
    CVE-2024-23887

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/grncreate.php, in the grndate parameter.…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23886

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/itemmodify.php, in the bincardinfo param…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23885

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/countrymodify.php, in the countryid para…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23884

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/grnmodify.php, in the grndate parameter.…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23883

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/taxstructuremodify.php, in the descripti…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23882

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/taxcodecreate.php, in the taxcodeid para…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23881

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/statelist.php, in the description parame…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23880

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/taxcodelist.php, in the description para…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23879

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/statemodify.php, in the description para…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23878

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/grnprint.php, in the grnno parameter. Ex…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23877

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/currencycreate.php, in the currencyid pa…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23876

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/taxstructurecreate.php, in the descripti…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23875

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/stockissuancedisplay.php, in the issuanc…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23874

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/companymodify.php, in the address1 param…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23873

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/currencymodify.php, in the currencyid pa…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23872

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/locationmodify.php, in the description p…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23871

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/unitofmeasurementmodify.php, in the desc…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23870

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/stockissuancelist.php, in the delete par…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23869

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/stockissuanceprint.php, in the issuancen…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23868

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/grnlist.php, in the deleted parameter. E…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23867

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/statecreate.php, in the stateid paramete…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23866

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/countrycreate.php, in the countryid para…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23865

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/taxstructurelist.php, in the description…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23864

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/countrylist.php, in the description para…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23863

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/taxstructuredisplay.php, in the descript…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23862

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/grndisplay.php, in the grnno parameter. …

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23861

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/unitofmeasurementcreate.php, in the unit…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23860

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/currencylist.php, in the description par…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23859

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/taxstructurelinecreate.php, in the flata…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23858

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/stockissuancelinecreate.php, in the batc…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23857

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/grnlinecreate.php, in the batchno parame…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 8.2
    CVE-2024-23856

    Cross-Site Scripting (XSS) vulnerability in Cups Easy

    A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/itemlist.php, in the description paramet…

    Cups Easy Cups Easy (Purchase & Inventory)
  • High 7.2
    CVE-2024-0920

    TRENDnet TEW-822DRE POST Request admin_ping.htm command injection

    A vulnerability was found in TRENDnet TEW-822DRE 1.03B02. It has been declared as critical. This vulnerability affects unknown code of the file /admin_ping.htm of the component POST Request Handler. The manipulation of the argument ipv4_ping/ipv6_ping leads t…

    Trendnet TEW-822DRE
  • High 8.8
    CVE-2024-0919 EPSS 23%

    TRENDnet TEW-815DAP POST Request do_setNTP command injection

    A vulnerability was found in TRENDnet TEW-815DAP 1.0.2.0. It has been classified as critical. This affects the function do_setNTP of the component POST Request Handler. The manipulation of the argument NtpDstStart/NtpDstEnd leads to command injection. It is p…

    Trendnet TEW-815DAP
  • High 7.2
    CVE-2024-0918 EPSS 25%

    TRENDnet TEW-800MB POST Request os command injection

    A vulnerability was found in TRENDnet TEW-800MB 1.0.1.0 and classified as critical. Affected by this issue is some unknown functionality of the component POST Request Handler. The manipulation of the argument DeviceURL leads to os command injection. The attac…

    Trendnet TEW-800MB
  • High 7.5
    CVE-2023-6919

    Path Traversal in VGuard IP Camera Network Recorder

    Path Traversal: '/../filedir' vulnerability in Biges Safe Life Technologies Electronics Inc. VGuard allows Absolute Path Traversal. This issue affects VGuard: before V500.0003.R008.4011.C0012.B351.C.

    Biges Safe Life Technologies Electronics VGuard
  • High 8.3
    CVE-2024-21385

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Microsoft Microsoft Edge (Chromium-based) Browsers
  • High 7.8
    CVE-2022-48622

    In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory c…

    gdk-pixbuf gdk-pixbuf gdk-pixbuf gdk-pixbuf2 Debian Ubuntu Azure Linux Alpine
  • High 7.8
    CVE-2024-22545

    An issue was discovered in TRENDnet TEW-824DRU version 1.04b01, allows unauthenticated attackers to execute arbitrary c…

  • High 8.8
    CVE-2024-23620

    IBM Merge Healthcare eFilm Workstation SYSTEM Privilege Escalation

    An improper privilege management vulnerability exists in IBM Merge Healthcare eFilm Workstation. A local, authenticated attacker can exploit this vulnerability to escalate privileges to SYSTEM.

    IBM Merge Healthcare eFilm Workstation